last executing test programs: 3.383928211s ago: executing program 2 (id=1904): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x3, {0xa, 0x10, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10017}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x44}}, 0x40000) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x96}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x40) 3.123087083s ago: executing program 2 (id=1907): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000b06050000000000000020000000000005000100070000000900020073797a3100000000040007"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6348db000229bd7000fbdbdd258200f9000c00990002000000ab164d"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0xffffffffffffffa2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0xfffffffffffffe92}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.951773739s ago: executing program 2 (id=1911): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7c, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async, rerun: 64) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) (rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, &(0x7f00000002c0)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r4}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x19}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x20, 0x272, 0xca9, 0x9, 0x400, 0x1, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r6, &(0x7f0000001a80)={&(0x7f0000000940)={0xa, 0x4e23, 0x9, @mcast2, 0x8}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="2f1ec0ea5437bc23054fb6ba8188e20cd1c35ea3ea3aa4b450a74949e0a5389747b6dc338d4b0e136281597ff586852053eff7276bcd42b92f89", 0x3a}, {&(0x7f00000019c0)="406a7d33b8cc08e3d4c3b706963a7a289b83", 0x12}], 0x3, &(0x7f0000001a40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x90000000}}], 0x18}, 0x80) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x14, 0x2, 0x554b, 0xac, 0x0, 0x1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) (async, rerun: 64) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x8000) (async, rerun: 64) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0103fcffffff000000002b0000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x8b, &(0x7f00000001c0)=""/139, 0x0, 0x4e, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000600)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0xd, 0x1000, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r4, r5, r7, r9], 0x0, 0x10, 0x1ff}, 0x94) 2.67505319s ago: executing program 2 (id=1916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x52}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000100000001000000000000008500000083000000bf09000000000000550901000000000095000000000000000500000000000000f5010000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xfff7ff1f, 0x1}}, 0x20) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000200)={{0x0, 0xfb6, 0xa84d, 0x9, 0x1278, 0x9, 0x1, 0x7, 0x0, 0x5, 0x0, 0x2, 0x7, 0x97, 0x5}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001300)={r7, 0x3}) socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x66, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.409733137s ago: executing program 2 (id=1920): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r2, 0x0, 0x0) r3 = socket(0x1, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x900000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x1, 0x9, 0x6d7, 0xd22, r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000a8880000200012800b000000656e0001100002800400120006000e0000000000"], 0x40}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x20004800) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x100}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe, 0x0, 0x80000000, 0x5, 0x2, 0xabc, 0x3ff, 0x3, 0x1, 0x1, 0x1, 0x0, 0xfffffff9, 0x80000001, 0x8, 0x56, 0xa9, 0x6, 0x1, 0x3, 0x6, 0x5, 0x800}}) 2.10452369s ago: executing program 4 (id=1925): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback, 0x1, 0x0, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=0xffffffffffffffff, 0x1, 0x0, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0}, 0x40) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x2a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @generic={0x4, 0x9, 0x0, 0x101, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x8}, @tail_call, @ldst={0x0, 0x1, 0x4, 0x3, 0x2, 0x100, 0x10}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x101}, @alu={0x4, 0x1, 0xc, 0x4, 0x4, 0xffffffffffffffc0, 0x1b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0xf, 0x53}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x0, 0x4, 0x6, 0xc}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r3, r0, 0x2d, 0x0, 0x0, @void, @value=r4, @void, @void, r2}, 0x20) accept4$phonet_pipe(r1, &(0x7f0000000540), &(0x7f0000000580)=0x10, 0x800) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000005c0)={0x4, [0x1d0e, 0x4, 0xc, 0x5]}, &(0x7f0000000600)=0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x84, r5, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x91) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x84, r5, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x91) write(r3, &(0x7f0000000800)="8d61b8e0a3c9dd51e1672f9e3c905f3cb2bb805937c538d499461cd41f2b6db0a5c67046a0b8151328b9716cc1470ef3b388058a1001e2de403ad2c4b117d484e58bd3f8dcb2f4556aac04bbd9906d05506f78947449be4a8ba4824c19139932cb2c8d1b379163a1ba197d3e638e51037f4de5db64479a7f2135603f4fa2b8a0b7510df73c85e9831be4c6a6228345d6be9a3ee47d8d75371b47ed8ac2c26c62877f16a7ac6be113153680b83fc0e5c57710982a7db5d9242e5806bf17e0a516f93668d4609f3af4a82d48d9792d7a9f1ea2d30240b19d7e507078", 0xdb) socket$inet6_sctp(0xa, 0x0, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000900), 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000900), 0x8) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x74}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x1f}}, @FOU_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c4}, 0x10) r7 = socket(0x15, 0x800, 0x64d01d70) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000a80)=0x1000, 0x4) (async) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000a80)=0x1000, 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r7, 0xf50f, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000ac0)=0xfffffff9, 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x810, r3, 0x7cbc8000) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000b00)={0x0, 0x80}, 0x8) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000b40)={0x7fff, 0x5, 0x1, 0x60c, 0x4, 0x0, [{0x7, 0x2bfd, 0x100000001, '\x00', 0xb}, {0x1ff, 0xfffffffffffffff5, 0x3}, {0x5, 0xffffffffffffdd94, 0x7fff, '\x00', 0x2008}, {0x6, 0x1, 0x3, '\x00', 0x100}]}) r8 = socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000c40)={0x0}, &(0x7f0000000c80)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000cc0)={r10, 0x600b}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000cc0)={r10, 0x600b}, 0x8) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000d40), &(0x7f0000000d80)=0xc) (async) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000d40)={0x0}, &(0x7f0000000d80)=0xc) sendmsg$AUDIT_SET(r7, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, 0x3e9, 0x1, 0x70bd29, 0x25dfdbfc, {0x76, 0x0, 0x2, r11, 0x9, 0x81, 0xcf, 0x7, 0x0, 0x4d9, 0xfffffffa}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000000) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ec0), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, r12, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2a48329b4f44"}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000098}, 0x24008014) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000001080)={0x1, &(0x7f0000000fc0)=[{@none}]}) connect$llc(r7, &(0x7f00000010c0)={0x1a, 0x325, 0x54, 0x3, 0x0, 0x0, @broadcast}, 0x10) 1.852528638s ago: executing program 4 (id=1928): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r4, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) connect$rxrpc(r0, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r5], 0x50}}, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x8000) 1.762935167s ago: executing program 3 (id=1930): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendto$rxrpc(r1, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="00000000ffb00000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="12cdde26e7c496e99a9cf8625ec9", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.629204842s ago: executing program 4 (id=1932): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r0, 0xfffff000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000000)={0x0, 0x3, 0x2, 0x9, 0x3, 0x25, 0x3, "d7b4f3efbbb21e3086a9b6917d343b71c5b06897", "a46bac0bc905db3bb36d4cd382b01a8853205477"}) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)="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", 0x4d1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4040045) close(r3) 1.476819027s ago: executing program 3 (id=1934): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x40000c1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], 0x2a8}, 0x1, 0x0, 0x0, 0x20008815}, 0x0) 1.392116439s ago: executing program 4 (id=1935): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000520099b100000000000000000a92000039be3c1549085c460757f7568d88768e1e0b40220e5ede6727f2f0a5"], 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100001002dbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="000000e56f0701001c0004001800018014000b00210d0000000000200100000001000000"], 0x3c}}, 0x804) 1.256589587s ago: executing program 3 (id=1937): socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0xffffff7f00000000) 1.195860846s ago: executing program 0 (id=1938): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000fc0)={0xa, 0x4e24, 0x5, @local, 0xb}, 0x1c) recvmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$bt_hci(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000320100f1"], 0x138) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=0x0, @ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r0) 1.194434697s ago: executing program 3 (id=1939): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000740)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd0000000000ffff0a010100fe8006000000000000000000000000aa0104000000000000c910fc020000000000a13d00000000000000c910fe8800000000000000000000000000010000000066eb753bb412e4cd39cc68aa5ecad1691bb9600161487ae56189ab16565bfead62f663bd0e5bc816f2ba9565854dfd0b0a95aecb1780ebc91bcc3c94849a0a7caaa04d260862aebfee226807"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000002ec0)={'netdevsim0\x00', &(0x7f0000002e40)=@ethtool_coalesce={0xf, 0x3169, 0x8, 0x1, 0x6, 0x9, 0x8, 0x2, 0xfff, 0x10004, 0x8004, 0x7, 0x2, 0x100005, 0x4, 0x6, 0x5, 0x1, 0x2400, 0x4, 0x9, 0x2, 0x80000000}}) getsockopt(r0, 0x8, 0x9, &(0x7f00000013c0)=""/4096, &(0x7f0000000480)=0x1000) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000380)=""/236, &(0x7f0000000140)=0xec) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0xe803) accept4(r5, 0x0, 0x0, 0x80000) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x846743ccad934684, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r9, @ANYRES16=r0], 0xa0}}, 0x0) sendmsg$sock(r5, &(0x7f0000000700)={&(0x7f00000004c0)=@in6={0xa, 0x4e21, 0xff, @empty, 0xffffffff}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)="65d170bac521c4a1bd42112bdfaee07cf35f72982a7069e243a966e8725213c7e6af05dde5aad679fe5c4fbd253419004d4399caaee09a6a8395d6bb4454b43c217c1e33e52f97f5ac26d2498428e8d08c975a52240b3e03aad499e8e3", 0x5d}, {&(0x7f00000005c0)="9af95df29d5b4e9bb46732505a372f8c227511d529648de1", 0x18}], 0x2, &(0x7f00000006c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x30}, 0xc0c6) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="8bdfd8ec37aa8d0a00c9c0e4185c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$SIOCSIFMTU(r6, 0x8947, &(0x7f00000000c0)={'bond0\x00', 0x10004}) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e2a, 0x0, @mcast1, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r6], 0x2e8}}], 0x1, 0x4800) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) 1.128170731s ago: executing program 4 (id=1940): socket$netlink(0x10, 0x3, 0x4) (async) r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200b5f383ca00ea6356b5000000000004"], 0x1c}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200b5f383ca00ea6356b5000000000004"], 0x1c}], 0x1}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x80, 0x9, 0x201, 0x3, 0x279, 0x8000, 0x401, 0x400}, &(0x7f0000000040)=0x20) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x13c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x11}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x912}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x13}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4040050}, 0x4000000) (async) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x13c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x11}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x912}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x13}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4040050}, 0x4000000) 1.120721414s ago: executing program 1 (id=1941): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 952.630923ms ago: executing program 0 (id=1942): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2544000000083a2fd0", @ANYRES32=r3, @ANYBLOB="0a0018000303030303030000080026006c09000008009f00060000000800a00006000000"], 0x40}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2544000000083a2fd0", @ANYRES32=r3, @ANYBLOB="0a0018000303030303030000080026006c09000008009f00060000000800a00006000000"], 0x40}, 0x1, 0x0, 0x0, 0x54}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r5, 0x2f, 0x0, 0x0, @void, @value=r6}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r5, 0x2f, 0x0, 0x0, @void, @value=r6}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r7, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={0x0, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000001080)='./cgroup.cpu/syz0\x00'}, 0x30) openat$cgroup(0xffffffffffffffff, &(0x7f0000001180)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001180)='syz1\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001240)={'syztnl0\x00', &(0x7f00000011c0)={'ip6tnl0\x00', 0x0, 0x6, 0x5, 0x4d, 0x6, 0x44, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x20, 0x0, 0x6, 0xe6}}) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0x21, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@alu={0x4, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffe0, 0x8}, @tail_call, @tail_call, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @ldst={0x2, 0x2, 0x0, 0x7, 0x2, 0x10, 0x10}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001140)='syzkaller\x00', 0x3ca, 0xb9, &(0x7f0000001400)=""/185, 0x41100, 0x56, '\x00', r9, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001500)={0x1, 0xe, 0x5, 0xa04c}, 0x10, 0xffffffffffffffff, r5, 0x3, 0x0, &(0x7f0000001540)=[{0x8, 0x2, 0x10, 0x8}, {0x2, 0x3, 0x7, 0x9}, {0x4, 0x2, 0x6, 0x9}], 0x10, 0x9}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0x21, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@alu={0x4, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffe0, 0x8}, @tail_call, @tail_call, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @ldst={0x2, 0x2, 0x0, 0x7, 0x2, 0x10, 0x10}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001140)='syzkaller\x00', 0x3ca, 0xb9, &(0x7f0000001400)=""/185, 0x41100, 0x56, '\x00', r9, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001500)={0x1, 0xe, 0x5, 0xa04c}, 0x10, 0xffffffffffffffff, r5, 0x3, 0x0, &(0x7f0000001540)=[{0x8, 0x2, 0x10, 0x8}, {0x2, 0x3, 0x7, 0x9}, {0x4, 0x2, 0x6, 0x9}], 0x10, 0x9}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001640)={0x5}, 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001640)={0x5}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001680)={@map, r10, 0x2f, 0x6054, 0x4, @value=r8}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r11, 0x0, 0x0, 0x800) (async) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3, 0x0, 0x0, 0x8020}], 0x1, 0x814) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) 874.751393ms ago: executing program 4 (id=1943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x90) readv(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002c00000018000180140002007665746830"], 0x2c}}, 0x0) 850.484191ms ago: executing program 1 (id=1944): r0 = socket$netlink(0x10, 0x3, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x2c, r2, 0xe17131a1c005744d, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000}, 0x40010) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x24004081) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000040)=0x9, 0x2) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400404}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r8, 0x201, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffffff, 0x32}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4004800) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x8000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r8, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x50, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000008c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x128, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e7a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x373}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffc8fe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff8227}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x28}]}]}, 0x128}}, 0x5) 564.73561ms ago: executing program 0 (id=1945): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=@delchain={0x228, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1e4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1cc, 0x1, [@m_mirred={0x164, 0x11, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xf1, 0xffffffffffffffff, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x3, 0x1, 0xe, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5c, 0x7, 0xfff, 0x1}, 0x4}}]}, {0xd8, 0x6, "319bb848351b002738b6c4c50b9141bebb58a1fd9f04e35af9c32268b29dfa1c25c9502b51b55eff39526a56fd0f6d8f94d05679ea0836ee4adecfe3236d2d9a2d17310974eb3856d00a1028999d09c1f69183f20defc6d04e2c20de3729c15f156d19b570d01b6142387bd42a81ccacf99246c39d5c0d6e393d44dab6dd2521c8f0dd94491c7577458990a9641f0c88b8c57718b8f2c791c8d35eeee9461545ee2dd6d5371b63e2755d125610f6fb5c23db3466b1c9e7b9a79e2f269e7e897258f89199853270075498a6c432cdecdb391557a9"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x64, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0x31, 0x6, "309e7046678cfa85254c612d61e3d2c3e3b6590ca2f3e70c7fcdf5868b95845dfa60edad38b3b8c47659e35d23"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1d8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x228}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01"], 0x448}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x2, {0xa, 0x4e24, 0x100, @local, 0x3}}}, 0x32) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 564.359346ms ago: executing program 1 (id=1946): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000b06050000000000000020000000000005000100070000000900020073797a3100000000040007"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6348db000229bd7000fbdbdd258200f9000c00990002000000ab164d"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0xffffffffffffffa2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0xfffffffffffffe92}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 559.652902ms ago: executing program 3 (id=1947): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c1000000000000000fffe", 0x58}], 0x1) 441.294175ms ago: executing program 1 (id=1948): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cf000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@deltclass={0x48, 0x29, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0x10, 0x13}, {0xe, 0x3}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e26, 0x0, @mcast2}, 0x1c, 0x0}, 0x10) 356.738995ms ago: executing program 0 (id=1949): socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0xffffffffffffffe4) 355.91567ms ago: executing program 3 (id=1950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="ed394f000080", @ANYRES16=r1, @ANYBLOB="01000000000000000000070000000c0001800500020001000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x2, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x19}]}]}]}}]}, 0x54}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x8000, 0x18, 0x2, 0x9, {{0x15, 0x4, 0x3, 0x3c, 0x54, 0x68, 0x0, 0xcc, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @end, @timestamp_addr={0x44, 0x3c, 0x5e, 0x1, 0x9, [{@multicast1, 0x5}, {@broadcast, 0x100}, {@local, 0x10002}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe54f}, {@rand_addr=0x64010101, 0xbf8}, {@broadcast, 0xfffffffc}, {@local, 0xb0}]}]}}}}}) getsockname$packet(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00'}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088474803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) r10 = socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) 288.028423ms ago: executing program 0 (id=1951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0x444, 0x8, {{0x1c, 0x4, 0x0, 0x7, 0x70, 0x66, 0x0, 0x7, 0x4, 0x0, @local, @multicast2, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x78, [@remote, @loopback, @private=0xa010102]}, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x7, 0x10, "fe6531293648e32fefdace36ae89"}]}, @ssrr={0x89, 0x17, 0xcc, [@empty, @broadcast, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x1b, 0x3d, [@broadcast, @private=0xa010102, @broadcast, @multicast1, @remote, @rand_addr=0x64010102]}]}}}}}) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000004c0)={@mcast1, r3}, 0x14) (async) r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000300)=0x10, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x85b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x880) (async) accept4$llc(r4, &(0x7f0000000340), &(0x7f0000000380)=0x10, 0x800) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000500)={0x28, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r9, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x40010) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000068000100000000000000000000000000000000001c0002000000000000000000020000000000b45cbe"], 0x34}}, 0x0) (async) sendmsg$inet_sctp(r5, &(0x7f0000000540)={&(0x7f0000000000)=@in={0x2, 0x4f23, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f00000000c0)='_', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000000000008400000006"], 0x24, 0x10}, 0x8001) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219, 0x20904}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) socket$igmp(0x2, 0x3, 0x2) 270.55217ms ago: executing program 1 (id=1952): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0xdf}}, 0x1c}}, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000005980)='ip6gre0\x00', 0x10) connect$caif(r1, &(0x7f00000059c0)=@dgm={0x25, 0x5, 0x9d}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 60.698366ms ago: executing program 0 (id=1953): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x34, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f00000003c0), &(0x7f00000004c0)=0x8) sendmmsg(r6, &(0x7f00000002c0), 0x0, 0x8810) 57.680994ms ago: executing program 1 (id=1954): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 2 (id=1955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="08000800060006"], 0xfce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x3, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) kernel console output (not intermixed with test programs): 403] ? netlink_sendmsg+0x642/0xb30 [ 110.501014][ T6403] ? skb_put+0x11b/0x210 [ 110.501055][ T6403] netlink_sendmsg+0x805/0xb30 [ 110.501103][ T6403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.501144][ T6403] ? aa_sock_msg_perm+0xf1/0x1d0 [ 110.501184][ T6403] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.501211][ T6403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.501248][ T6403] __sock_sendmsg+0x219/0x270 [ 110.501285][ T6403] ____sys_sendmsg+0x505/0x830 [ 110.501318][ T6403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.501357][ T6403] ? import_iovec+0x74/0xa0 [ 110.501390][ T6403] ___sys_sendmsg+0x21f/0x2a0 [ 110.501417][ T6403] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.501488][ T6403] ? __fget_files+0x2a/0x420 [ 110.501531][ T6403] ? __fget_files+0x3a0/0x420 [ 110.501580][ T6403] __x64_sys_sendmsg+0x19b/0x260 [ 110.501609][ T6403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.501641][ T6403] ? __pfx_ksys_write+0x10/0x10 [ 110.501671][ T6403] ? rcu_is_watching+0x15/0xb0 [ 110.501701][ T6403] ? do_syscall_64+0xbe/0x3b0 [ 110.501742][ T6403] do_syscall_64+0xfa/0x3b0 [ 110.501773][ T6403] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.501805][ T6403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.501828][ T6403] ? clear_bhb_loop+0x60/0xb0 [ 110.501857][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.501881][ T6403] RIP: 0033:0x7f8e2cf8ebe9 [ 110.501903][ T6403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.501924][ T6403] RSP: 002b:00007f8e2dd32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.501950][ T6403] RAX: ffffffffffffffda RBX: 00007f8e2d1b5fa0 RCX: 00007f8e2cf8ebe9 [ 110.501967][ T6403] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 110.501983][ T6403] RBP: 00007f8e2dd32090 R08: 0000000000000000 R09: 0000000000000000 [ 110.501996][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.502011][ T6403] R13: 00007f8e2d1b6038 R14: 00007f8e2d1b5fa0 R15: 00007ffc8135b1e8 [ 110.502049][ T6403] [ 110.849566][ T6397] team_slave_1: entered promiscuous mode [ 110.865584][ T6413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.867463][ T6397] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 110.923867][ T6412] macvtap1: entered allmulticast mode [ 110.929598][ T6412] veth0_macvtap: entered allmulticast mode [ 111.029664][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.141'. [ 111.143949][ T6416] syzkaller0: entered promiscuous mode [ 111.149642][ T6416] syzkaller0: entered allmulticast mode [ 111.488310][ T6436] netlink: 'syz.1.149': attribute type 1 has an invalid length. [ 112.020020][ T6452] netlink: 'syz.0.155': attribute type 29 has an invalid length. [ 112.519921][ T6479] wg1: entered promiscuous mode [ 112.778879][ T6494] FAULT_INJECTION: forcing a failure. [ 112.778879][ T6494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.781366][ T6496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.858362][ T6494] CPU: 0 UID: 0 PID: 6494 Comm: syz.1.168 Not tainted syzkaller #0 PREEMPT(full) [ 112.858392][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.858405][ T6494] Call Trace: [ 112.858414][ T6494] [ 112.858423][ T6494] dump_stack_lvl+0x189/0x250 [ 112.858454][ T6494] ? __pfx____ratelimit+0x10/0x10 [ 112.858485][ T6494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.858511][ T6494] ? __pfx__printk+0x10/0x10 [ 112.858542][ T6494] ? __might_fault+0xb0/0x130 [ 112.858586][ T6494] should_fail_ex+0x414/0x560 [ 112.858630][ T6494] _copy_from_user+0x2d/0xb0 [ 112.858657][ T6494] kstrtouint_from_user+0xc4/0x170 [ 112.858694][ T6494] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 112.858746][ T6494] proc_fail_nth_write+0x88/0x200 [ 112.858772][ T6494] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 112.858803][ T6494] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 112.858829][ T6494] vfs_write+0x27b/0xb30 [ 112.858868][ T6494] ? __pfx_vfs_write+0x10/0x10 [ 112.858898][ T6494] ? __fget_files+0x2a/0x420 [ 112.858937][ T6494] ? __fget_files+0x3a0/0x420 [ 112.858968][ T6494] ? __fget_files+0x2a/0x420 [ 112.859010][ T6494] ksys_write+0x145/0x250 [ 112.859041][ T6494] ? __pfx_ksys_write+0x10/0x10 [ 112.859065][ T6494] ? rcu_is_watching+0x15/0xb0 [ 112.859093][ T6494] ? do_syscall_64+0xbe/0x3b0 [ 112.859128][ T6494] do_syscall_64+0xfa/0x3b0 [ 112.859157][ T6494] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.859185][ T6494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.859206][ T6494] ? clear_bhb_loop+0x60/0xb0 [ 112.859231][ T6494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.859251][ T6494] RIP: 0033:0x7fbc38f8d69f [ 112.859270][ T6494] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 112.859288][ T6494] RSP: 002b:00007fbc39d6f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 112.859311][ T6494] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbc38f8d69f [ 112.859324][ T6494] RDX: 0000000000000001 RSI: 00007fbc39d6f0a0 RDI: 0000000000000003 [ 112.859336][ T6494] RBP: 00007fbc39d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 112.859348][ T6494] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 112.859359][ T6494] R13: 00007fbc391b6038 R14: 00007fbc391b5fa0 R15: 00007ffc99423628 [ 112.859397][ T6494] [ 114.508655][ T6497] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 114.520559][ T6497] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 114.528526][ T6497] gretap1: entered promiscuous mode [ 114.536804][ T6497] gretap1: entered allmulticast mode [ 114.881265][ T6541] Bluetooth: MGMT ver 1.23 [ 115.180030][ T6553] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 115.404050][ T6566] netlink: 'syz.3.187': attribute type 23 has an invalid length. [ 115.463817][ T6568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.189'. [ 115.491972][ T6570] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 115.741497][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 115.830005][ T6579] netlink: 'syz.0.193': attribute type 1 has an invalid length. [ 115.860669][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.193'. [ 116.094609][ T6597] netlink: 84 bytes leftover after parsing attributes in process `syz.3.199'. [ 116.297583][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 116.311336][ T6609] netlink: 48 bytes leftover after parsing attributes in process `syz.2.203'. [ 116.452724][ T6606] team_slave_0: entered promiscuous mode [ 116.458721][ T6606] team_slave_1: entered promiscuous mode [ 116.549104][ T6615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.204'. [ 116.602958][ T6622] netlink: 'syz.3.204': attribute type 10 has an invalid length. [ 116.620224][ T6622] netlink: 40 bytes leftover after parsing attributes in process `syz.3.204'. [ 116.695938][ T6622] team0: Port device geneve0 added [ 116.921167][ T6633] batman_adv: batadv0: Adding interface: dummy0 [ 116.934587][ T6633] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.995182][ T6633] batman_adv: batadv0: Interface activated: dummy0 [ 117.067020][ T6636] batadv0: mtu less than device minimum [ 117.075065][ T6636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.083603][ T6639] netlink: 163132 bytes leftover after parsing attributes in process `syz.3.210'. [ 117.087597][ T6636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.107111][ T6636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.119306][ T6636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.131360][ T6636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.143528][ T6636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.155556][ T6636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.167566][ T6636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.179569][ T6636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.246898][ T6645] netlink: 'syz.2.212': attribute type 3 has an invalid length. [ 117.568995][ T6655] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.216'. [ 117.592486][ T6656] tipc: Started in network mode [ 117.597904][ T6656] tipc: Node identity 3ae1721b6aae, cluster identity 4711 [ 117.623002][ T6656] tipc: Enabled bearer , priority 0 [ 117.653121][ T6663] syzkaller0: MTU too low for tipc bearer [ 117.659337][ T6663] tipc: Disabling bearer [ 138.203628][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.210191][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 180.721747][ T6706] netlink: 'syz.3.229': attribute type 3 has an invalid length. [ 180.754223][ T6706] __nla_validate_parse: 3 callbacks suppressed [ 180.754244][ T6706] netlink: 224 bytes leftover after parsing attributes in process `syz.3.229'. [ 180.804416][ T6706] netlink: 'syz.3.229': attribute type 8 has an invalid length. [ 180.903264][ T6709] C: renamed from lo (while UP) [ 181.243979][ T6732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.234'. [ 181.315809][ T6728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.381724][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 181.410630][ T6728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.714519][ T6748] netlink: 356 bytes leftover after parsing attributes in process `syz.2.242'. [ 181.751468][ T6751] netlink: 356 bytes leftover after parsing attributes in process `syz.2.242'. [ 181.812941][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 182.435597][ T6780] veth0: entered promiscuous mode [ 182.459704][ T6779] veth0: left promiscuous mode [ 182.773428][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'. [ 182.794426][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'. [ 182.826831][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 182.865239][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 182.892819][ T6798] netlink: 'syz.0.255': attribute type 15 has an invalid length. [ 182.917081][ T6797] netlink: 'syz.0.255': attribute type 15 has an invalid length. [ 183.053488][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.061475][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.294997][ T6810] geneve2: entered promiscuous mode [ 183.327190][ T6810] geneve2: entered allmulticast mode [ 183.554790][ T6821] netlink: 'syz.3.265': attribute type 1 has an invalid length. [ 183.566332][ T6823] bridge0: port 3(syz_tun) entered disabled state [ 183.594818][ T6824] net_ratelimit: 10 callbacks suppressed [ 183.594837][ T6824] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 183.614930][ T6821] netlink: 'syz.3.265': attribute type 11 has an invalid length. [ 183.618413][ T6822] netlink: 'syz.3.265': attribute type 2 has an invalid length. [ 183.814089][ T6830] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 183.827403][ T6830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.149972][ T6844] netlink: 'syz.2.275': attribute type 9 has an invalid length. [ 184.280373][ T6851] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.774563][ T6873] FAULT_INJECTION: forcing a failure. [ 184.774563][ T6873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.893282][ T6873] CPU: 1 UID: 0 PID: 6873 Comm: syz.1.283 Not tainted syzkaller #0 PREEMPT(full) [ 184.893319][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.893337][ T6873] Call Trace: [ 184.893350][ T6873] [ 184.893362][ T6873] dump_stack_lvl+0x189/0x250 [ 184.893395][ T6873] ? __pfx____ratelimit+0x10/0x10 [ 184.893433][ T6873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.893459][ T6873] ? __pfx__printk+0x10/0x10 [ 184.893503][ T6873] should_fail_ex+0x414/0x560 [ 184.893537][ T6873] _copy_to_user+0x31/0xb0 [ 184.893564][ T6873] __htab_map_lookup_and_delete_batch+0xfe4/0x13a0 [ 184.893638][ T6873] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 184.893680][ T6873] ? __pfx_htab_lru_map_lookup_and_delete_batch+0x10/0x10 [ 184.893713][ T6873] bpf_map_do_batch+0x412/0x5f0 [ 184.893751][ T6873] __sys_bpf+0x793/0x870 [ 184.893782][ T6873] ? __pfx___sys_bpf+0x10/0x10 [ 184.893824][ T6873] ? ksys_write+0x22a/0x250 [ 184.893855][ T6873] ? __pfx_ksys_write+0x10/0x10 [ 184.893891][ T6873] __x64_sys_bpf+0x7c/0x90 [ 184.893917][ T6873] do_syscall_64+0xfa/0x3b0 [ 184.893947][ T6873] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.893975][ T6873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.893995][ T6873] ? clear_bhb_loop+0x60/0xb0 [ 184.894021][ T6873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.894041][ T6873] RIP: 0033:0x7fbc38f8ebe9 [ 184.894060][ T6873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.894077][ T6873] RSP: 002b:00007fbc39d4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.894100][ T6873] RAX: ffffffffffffffda RBX: 00007fbc391b6090 RCX: 00007fbc38f8ebe9 [ 184.894114][ T6873] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 184.894126][ T6873] RBP: 00007fbc39d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 184.894139][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 184.894151][ T6873] R13: 00007fbc391b6128 R14: 00007fbc391b6090 R15: 00007ffc99423628 [ 184.894184][ T6873] [ 185.195328][ T6879] netlink: 'syz.2.287': attribute type 2 has an invalid length. [ 185.438718][ T6889] trusted_key: syz.2.290 sent an empty control message without MSG_MORE. [ 185.442303][ T6893] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 185.492831][ T6893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.221117][ T6926] __nla_validate_parse: 15 callbacks suppressed [ 186.221141][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 186.289654][ T6931] pim6reg: entered allmulticast mode [ 186.315878][ T6931] pim6reg: left allmulticast mode [ 186.488067][ T6924] "syz.4.301" (6924) uses obsolete ecb(arc4) skcipher [ 186.609240][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 186.627793][ T6945] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 186.664577][ T6945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.879232][ T5956] hid (null): unknown global tag 0xe [ 186.896808][ T5956] hid (null): nested delimiters [ 186.918417][ T5956] hid (null): unknown global tag 0xc [ 186.924351][ T5956] hid (null): unknown global tag 0xd4 [ 186.932332][ T5956] hid (null): unknown global tag 0xe3 [ 187.040497][ T5956] hid (null): unknown global tag 0xd [ 187.059234][ T5956] hid (null): unknown global tag 0xd [ 187.076611][ T5956] hid (null): report_id 52729 is invalid [ 187.099191][ T5956] hid (null): unknown global tag 0xe [ 187.114441][ T5956] hid (null): invalid report_size 61744 [ 187.162699][ T5956] hid (null): unknown global tag 0xc [ 187.182660][ T5956] hid (null): unknown global tag 0x1e [ 187.239447][ T5956] hid (null): report_id 7316 is invalid [ 187.287092][ T5956] hid (null): unknown global tag 0xc [ 187.313517][ T5956] hid (null): report_id 1955986549 is invalid [ 187.340528][ T5956] hid (null): invalid report_size -1077995987 [ 187.375493][ T5956] hid (null): unknown global tag 0xe [ 187.423656][ T5956] hid (null): report_id 2006647334 is invalid [ 187.462541][ T5956] hid (null): invalid report_count -693428789 [ 187.491190][ T5956] hid (null): unknown global tag 0xe [ 187.509589][ T5956] hid (null): invalid report_size 45679 [ 187.517218][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.312'. [ 187.527786][ T5956] hid (null): unknown global tag 0x4b [ 187.535049][ T5956] hid (null): invalid report_size 13943 [ 187.541454][ T5956] hid (null): invalid report_count 19321 [ 187.549691][ T5956] hid (null): report_id 18091 is invalid [ 187.556385][ T5956] hid (null): unknown global tag 0xc [ 187.562616][ T5956] hid (null): unknown global tag 0x96 [ 187.568420][ T5956] hid (null): report_id 14283 is invalid [ 187.575302][ T5956] hid (null): unknown global tag 0xc [ 187.582048][ T5956] hid (null): unknown global tag 0xe [ 187.587417][ T5956] hid (null): unknown global tag 0xd3 [ 187.594225][ T5956] hid (null): invalid report_count -842383796 [ 187.600401][ T5956] hid (null): unknown global tag 0xe [ 187.733915][ T5956] hid (null): invalid report_size 56016973 [ 187.789956][ T5956] hid (null): unknown global tag 0x43 [ 187.825480][ T5956] hid (null): invalid report_count 997678220 [ 187.860620][ T6978] netlink: 72 bytes leftover after parsing attributes in process `syz.1.313'. [ 187.869650][ T5956] hid (null): unknown global tag 0x1e [ 187.881429][ T5956] hid (null): invalid report_count -1060410029 [ 187.914979][ T5956] hid (null): unknown global tag 0x5a [ 187.926098][ T6984] netlink: 72 bytes leftover after parsing attributes in process `syz.1.313'. [ 187.942021][ T5956] hid (null): invalid report_size 43880 [ 187.969403][ T5956] hid (null): unknown global tag 0xe [ 187.988169][ T5956] hid (null): unknown global tag 0xd [ 188.010527][ T5956] hid (null): unknown global tag 0xc [ 188.040602][ T5956] hid (null): report_id 297161506 is invalid [ 188.063592][ T5956] hid (null): unknown global tag 0xe [ 188.089358][ T5956] hid (null): invalid report_count 33495 [ 188.112616][ T5956] hid (null): unknown global tag 0xc [ 188.161443][ T5956] hid (null): unknown global tag 0x82 [ 188.167305][ T5956] hid (null): unknown global tag 0xe [ 188.229296][ T5956] hid (null): unknown global tag 0xe [ 188.251970][ T5956] hid (null): unknown global tag 0xe [ 188.257477][ T5956] hid (null): unknown global tag 0xc [ 188.310871][ T5956] hid (null): invalid report_size 53669 [ 188.316589][ T5956] hid (null): unknown global tag 0xd [ 188.383449][ T5956] hid (null): report_id 4101065246 is invalid [ 188.451812][ T5956] hid (null): unknown global tag 0xd [ 188.470580][ T5956] hid (null): report_id 4519 is invalid [ 188.476360][ T5956] hid (null): unknown global tag 0xec [ 188.479644][ T7010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.318'. [ 188.522987][ T5956] hid (null): unknown global tag 0xc [ 188.526172][ T7010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.318'. [ 188.528387][ T5956] hid (null): unknown global tag 0xe [ 188.633104][ T5956] hid (null): unknown global tag 0xc [ 188.638517][ T5956] hid (null): invalid report_count 22045 [ 188.689555][ T5956] hid (null): invalid report_count -1438497203 [ 188.740844][ T5956] hid (null): invalid report_size 63677 [ 188.758889][ T5956] hid (null): report_id 0 is invalid [ 188.809529][ T5956] hid (null): unknown global tag 0xc [ 188.837455][ T5956] hid (null): unknown global tag 0xf [ 188.859128][ T5956] hid (null): unknown global tag 0xe [ 188.875047][ T5956] hid (null): unknown global tag 0xc [ 188.896936][ T5956] hid (null): unknown global tag 0xe [ 188.910089][ T5956] hid (null): unknown global tag 0xc [ 188.919090][ T7020] netlink: 636 bytes leftover after parsing attributes in process `syz.1.321'. [ 188.940696][ T5956] hid (null): unknown global tag 0xe [ 188.950144][ T7015] syzkaller0: entered promiscuous mode [ 188.962081][ T5956] hid (null): unknown global tag 0xc [ 188.967576][ T5956] hid (null): unknown global tag 0xd7 [ 188.981154][ T7015] syzkaller0: entered allmulticast mode [ 189.120395][ T7025] kthread_run failed with err -4 [ 189.259516][ T7038] netlink: 'syz.2.324': attribute type 3 has an invalid length. [ 189.511340][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 189.775742][ T7054] netlink: 164 bytes leftover after parsing attributes in process `syz.1.328'. [ 190.188117][ T5956] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 190.197459][ T5956] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 190.207416][ T5956] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 191.366988][ T7073] geneve2: entered promiscuous mode [ 191.457411][ T7073] geneve2: entered allmulticast mode [ 192.141784][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 192.151707][ T7081] netlink: 60 bytes leftover after parsing attributes in process `syz.1.331'. [ 192.287211][ T7084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.394831][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 192.478532][ T7109] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.340'. [ 192.488111][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 192.769362][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 192.818242][ T7120] openvswitch: netlink: Message has 8 unknown bytes. [ 193.816547][ T7169] openvswitch: netlink: IPv4 tun info is not correct [ 194.019146][ T7171] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.355'. [ 194.125560][ T7180] netlink: 'syz.4.359': attribute type 2 has an invalid length. [ 194.132530][ T7175] geneve2: entered promiscuous mode [ 194.147383][ T7175] geneve2: entered allmulticast mode [ 194.238457][ T7183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.359'. [ 194.298738][ T7084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.299600][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 194.365886][ T7084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 194.379366][ T7184] Can't find ip_set type hast [ 194.597175][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 194.638441][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 195.867191][ T7084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.879527][ T7084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 195.909949][ T7200] gre1: entered promiscuous mode [ 195.918591][ T7200] gre1: entered allmulticast mode [ 196.072337][ T7084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.113222][ T7084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 196.317953][ T7229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.370'. [ 196.570101][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 196.601325][ T36] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 196.630757][ T7241] smc: net device erspan0 applied user defined pnetid SYZ0 [ 196.680974][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 196.705967][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 196.714653][ T7247] netlink: 'syz.3.376': attribute type 2 has an invalid length. [ 196.714720][ T7247] netlink: 'syz.3.376': attribute type 2 has an invalid length. [ 196.776104][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 196.789772][ T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 196.867414][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 196.893245][ T49] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.117369][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.382'. [ 197.502413][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 197.568966][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.384'. [ 197.706870][ T7281] netlink: 'syz.2.386': attribute type 1 has an invalid length. [ 197.901621][ T7286] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 197.939183][ T7292] Bluetooth: MGMT ver 1.23 [ 197.972839][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 198.268274][ T7293] netlink: 104 bytes leftover after parsing attributes in process `syz.0.391'. [ 198.463706][ T7317] veth1_to_bond: entered allmulticast mode [ 198.493155][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 198.567328][ T7317] bond0: (slave bond_slave_1): Releasing backup interface [ 198.600108][ T7317] veth1_to_bond (unregistering): left allmulticast mode [ 198.913303][ T7298] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 199.265855][ T7352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.404'. [ 199.578456][ T7359] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20002 [ 199.644781][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.654580][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.819413][ T7365] netlink: 'syz.3.409': attribute type 10 has an invalid length. [ 199.842075][ T7365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.409'. [ 200.069789][ T7371] netlink: 'syz.1.413': attribute type 1 has an invalid length. [ 200.077869][ T7371] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.413'. [ 200.151387][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 200.175661][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 200.200818][ T5862] Bluetooth: hci0: command 0x0c20 tx timeout [ 200.427658][ T7390] openvswitch: netlink: Key type 15878 is out of range max 32 [ 200.454810][ T7387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.837075][ T7409] syz.4.422: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 200.903313][ T7409] CPU: 1 UID: 0 PID: 7409 Comm: syz.4.422 Not tainted syzkaller #0 PREEMPT(full) [ 200.903344][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.903358][ T7409] Call Trace: [ 200.903367][ T7409] [ 200.903377][ T7409] dump_stack_lvl+0x189/0x250 [ 200.903410][ T7409] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 200.903441][ T7409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.903467][ T7409] ? __pfx__printk+0x10/0x10 [ 200.903498][ T7409] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 200.903524][ T7409] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 200.903559][ T7409] warn_alloc+0x214/0x310 [ 200.903600][ T7409] ? __pfx_warn_alloc+0x10/0x10 [ 200.903645][ T7409] ? __get_vm_area_node+0x28f/0x300 [ 200.903692][ T7409] ? hash_ipportip_create+0x358/0xfe0 [ 200.903718][ T7409] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 200.903749][ T7409] ? do_syscall_64+0xfa/0x3b0 [ 200.903815][ T7409] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 200.903854][ T7409] ? rcu_is_watching+0x15/0xb0 [ 200.903877][ T7409] ? hash_ipportip_create+0x358/0xfe0 [ 200.903896][ T7409] ? hash_ipportip_create+0x358/0xfe0 [ 200.903916][ T7409] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 200.903947][ T7409] ? hash_ipportip_create+0x358/0xfe0 [ 200.903969][ T7409] ? hash_ipportip_create+0x2fe/0xfe0 [ 200.903995][ T7409] hash_ipportip_create+0x358/0xfe0 [ 200.904026][ T7409] ? __nla_parse+0x40/0x60 [ 200.904059][ T7409] ? __pfx_hash_ipportip_create+0x10/0x10 [ 200.904083][ T7409] ip_set_create+0xa94/0x1940 [ 200.904110][ T7409] ? ip_set_create+0x4a2/0x1940 [ 200.904156][ T7409] ? __pfx_ip_set_create+0x10/0x10 [ 200.904226][ T7409] nfnetlink_rcv_msg+0xb4a/0x1130 [ 200.904255][ T7409] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 200.904309][ T7409] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 200.904334][ T7409] ? kasan_save_free_info+0x46/0x50 [ 200.904416][ T7409] netlink_rcv_skb+0x205/0x470 [ 200.904449][ T7409] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 200.904479][ T7409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.904524][ T7409] ? bpf_lsm_capable+0x9/0x20 [ 200.904553][ T7409] ? security_capable+0x7e/0x2e0 [ 200.904593][ T7409] nfnetlink_rcv+0x26a/0x2520 [ 200.904625][ T7409] ? __dev_queue_xmit+0x1d79/0x3b50 [ 200.904662][ T7409] ? __dev_queue_xmit+0x27b/0x3b50 [ 200.904702][ T7409] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 200.904728][ T7409] ? __pfx___dev_queue_xmit+0x10/0x10 [ 200.904770][ T7409] ? ref_tracker_free+0x63a/0x7d0 [ 200.904800][ T7409] ? __asan_memcpy+0x40/0x70 [ 200.904824][ T7409] ? __pfx_ref_tracker_free+0x10/0x10 [ 200.904851][ T7409] ? __skb_clone+0x63/0x7a0 [ 200.904879][ T7409] ? __skb_clone+0x483/0x7a0 [ 200.904909][ T7409] ? skb_clone+0x246/0x3a0 [ 200.904937][ T7409] ? __netlink_deliver_tap+0x807/0x850 [ 200.904968][ T7409] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.905007][ T7409] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.905048][ T7409] netlink_unicast+0x82c/0x9e0 [ 200.905087][ T7409] ? __pfx_netlink_unicast+0x10/0x10 [ 200.905118][ T7409] ? netlink_sendmsg+0x642/0xb30 [ 200.905153][ T7409] ? skb_put+0x11b/0x210 [ 200.905191][ T7409] netlink_sendmsg+0x805/0xb30 [ 200.905234][ T7409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.905270][ T7409] ? aa_sock_msg_perm+0xf1/0x1d0 [ 200.905306][ T7409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.905328][ T7409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.905361][ T7409] __sock_sendmsg+0x219/0x270 [ 200.905393][ T7409] ____sys_sendmsg+0x505/0x830 [ 200.905423][ T7409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.905456][ T7409] ? import_iovec+0x74/0xa0 [ 200.905486][ T7409] ___sys_sendmsg+0x21f/0x2a0 [ 200.905510][ T7409] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.905575][ T7409] ? __fget_files+0x2a/0x420 [ 200.905608][ T7409] ? __fget_files+0x3a0/0x420 [ 200.905653][ T7409] __x64_sys_sendmsg+0x19b/0x260 [ 200.905679][ T7409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.905714][ T7409] ? rcu_is_watching+0x15/0xb0 [ 200.905742][ T7409] ? do_syscall_64+0xbe/0x3b0 [ 200.905777][ T7409] do_syscall_64+0xfa/0x3b0 [ 200.905806][ T7409] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.905835][ T7409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.905856][ T7409] ? clear_bhb_loop+0x60/0xb0 [ 200.905883][ T7409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.905903][ T7409] RIP: 0033:0x7f589b38ebe9 [ 200.905924][ T7409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.905942][ T7409] RSP: 002b:00007f589c181038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.905965][ T7409] RAX: ffffffffffffffda RBX: 00007f589b5b6090 RCX: 00007f589b38ebe9 [ 200.905981][ T7409] RDX: 000000000404c004 RSI: 0000200000000040 RDI: 0000000000000003 [ 200.905994][ T7409] RBP: 00007f589b411e19 R08: 0000000000000000 R09: 0000000000000000 [ 200.906007][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.906019][ T7409] R13: 00007f589b5b6128 R14: 00007f589b5b6090 R15: 00007ffee0683ef8 [ 200.906055][ T7409] [ 201.397235][ T7409] Mem-Info: [ 201.401145][ T7409] active_anon:7794 inactive_anon:0 isolated_anon:0 [ 201.401145][ T7409] active_file:3085 inactive_file:39856 isolated_file:0 [ 201.401145][ T7409] unevictable:768 dirty:121 writeback:0 [ 201.401145][ T7409] slab_reclaimable:10419 slab_unreclaimable:98240 [ 201.401145][ T7409] mapped:31156 shmem:3605 pagetables:1161 [ 201.401145][ T7409] sec_pagetables:0 bounce:0 [ 201.401145][ T7409] kernel_misc_reclaimable:0 [ 201.401145][ T7409] free:1331666 free_pcp:11482 free_cma:0 [ 201.447483][ T7409] Node 0 active_anon:31524kB inactive_anon:0kB active_file:12340kB inactive_file:159220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125140kB dirty:484kB writeback:0kB shmem:13436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11868kB pagetables:4624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 201.481068][ T7409] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 201.512488][ T7409] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.542276][ T7409] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 201.548351][ T7409] Node 0 DMA32 free:1420892kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33176kB inactive_anon:0kB active_file:12340kB inactive_file:157644kB unevictable:1536kB writepending:484kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:30256kB local_pcp:20248kB free_cma:0kB [ 201.582672][ T7409] lowmem_reserve[]: 0 0 1 1 1 [ 201.587457][ T7409] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 201.620048][ T7409] lowmem_reserve[]: 0 0 0 0 0 [ 201.628878][ T7409] Node 1 Normal free:3888160kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16256kB local_pcp:10528kB free_cma:0kB [ 201.661444][ T7409] lowmem_reserve[]: 0 0 0 0 0 [ 201.666433][ T7409] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 201.680907][ T7409] Node 0 DMA32: 1473*4kB (UE) 338*8kB (UME) 26*16kB (UE) 1744*32kB (UE) 950*64kB (UE) 305*128kB (UME) 107*256kB (UM) 56*512kB (UME) 29*1024kB (UME) 5*2048kB (UM) 283*4096kB (M) = 1419828kB [ 201.700056][ T7409] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 201.713109][ T7409] Node 1 Normal: 214*4kB (UME) 41*8kB (UME) 52*16kB (UME) 92*32kB (UME) 21*64kB (UME) 5*128kB (UME) 5*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3888160kB [ 201.731756][ T7409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.741764][ T7409] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.751234][ T7409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.760902][ T7409] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.770224][ T7409] 47180 total pagecache pages [ 201.775388][ T7409] 0 pages in swap cache [ 201.780754][ T7409] Free swap = 124996kB [ 201.784962][ T7409] Total swap = 124996kB [ 201.789152][ T7409] 2097051 pages RAM [ 201.793073][ T7409] 0 pages HighMem/MovableOnly [ 201.797784][ T7409] 425656 pages reserved [ 201.802789][ T7409] 0 pages cma reserved [ 202.068473][ T7434] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 202.278848][ T7443] openvswitch: netlink: Missing key (keys=40, expected=80) [ 202.329465][ T7448] veth0: entered promiscuous mode [ 202.597814][ T7457] __nla_validate_parse: 3 callbacks suppressed [ 202.597836][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 202.638084][ T7457] bridge_slave_1: left allmulticast mode [ 202.696666][ T7457] bridge_slave_1: left promiscuous mode [ 202.740026][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.791346][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.439'. [ 202.830816][ T7457] bridge_slave_0: left allmulticast mode [ 202.837627][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.908841][ T7472] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 202.918382][ T7472] netlink: 'syz.3.441': attribute type 2 has an invalid length. [ 202.935828][ T7446] veth0: left promiscuous mode [ 203.053344][ T7480] netlink: 576 bytes leftover after parsing attributes in process `syz.3.443'. [ 203.164412][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 203.198798][ T7489] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 203.200249][ T7484] openvswitch: netlink: IPv6 tunnel dst address is zero [ 203.454920][ T7497] netlink: 'syz.2.449': attribute type 1 has an invalid length. [ 203.482951][ T7497] netlink: 180 bytes leftover after parsing attributes in process `syz.2.449'. [ 203.542611][ T7497] netlink: 'syz.2.449': attribute type 1 has an invalid length. [ 203.588715][ T7497] netlink: 180 bytes leftover after parsing attributes in process `syz.2.449'. [ 203.827008][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 203.904547][ T7507] delete_channel: no stack [ 203.948644][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 204.191589][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.460'. [ 204.248686][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 204.294894][ T7538] bridge_slave_1: left allmulticast mode [ 204.333197][ T7538] bridge_slave_1: left promiscuous mode [ 204.357518][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.404531][ T7538] bridge_slave_0: left allmulticast mode [ 204.411797][ T7549] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 204.422449][ T7538] bridge_slave_0: left promiscuous mode [ 204.451846][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.566968][ T7542] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 204.676009][ T7556] netlink: 'syz.0.468': attribute type 5 has an invalid length. [ 204.973321][ T7566] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 205.014510][ T7570] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 205.296708][ T7577] IPv6: sit1: Disabled Multicast RS [ 205.307323][ T7577] sit1: entered allmulticast mode [ 205.328919][ T7578] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 205.989544][ T7596] netlink: 'syz.2.481': attribute type 4 has an invalid length. [ 206.055654][ T7601] netlink: 'syz.2.481': attribute type 4 has an invalid length. [ 206.222512][ T7607] netlink: 'syz.4.483': attribute type 1 has an invalid length. [ 207.198981][ T7630] FAULT_INJECTION: forcing a failure. [ 207.198981][ T7630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.260804][ T7630] CPU: 0 UID: 0 PID: 7630 Comm: syz.0.490 Not tainted syzkaller #0 PREEMPT(full) [ 207.260834][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.260848][ T7630] Call Trace: [ 207.260856][ T7630] [ 207.260866][ T7630] dump_stack_lvl+0x189/0x250 [ 207.260898][ T7630] ? __pfx____ratelimit+0x10/0x10 [ 207.260930][ T7630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.260956][ T7630] ? __pfx__printk+0x10/0x10 [ 207.260988][ T7630] ? __might_fault+0xb0/0x130 [ 207.261032][ T7630] should_fail_ex+0x414/0x560 [ 207.261068][ T7630] _copy_from_user+0x2d/0xb0 [ 207.261094][ T7630] ___sys_sendmsg+0x158/0x2a0 [ 207.261148][ T7630] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.261213][ T7630] ? __fget_files+0x2a/0x420 [ 207.261245][ T7630] ? __fget_files+0x3a0/0x420 [ 207.261291][ T7630] __x64_sys_sendmsg+0x19b/0x260 [ 207.261324][ T7630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.261358][ T7630] ? __pfx_ksys_write+0x10/0x10 [ 207.261385][ T7630] ? rcu_is_watching+0x15/0xb0 [ 207.261413][ T7630] ? do_syscall_64+0xbe/0x3b0 [ 207.261450][ T7630] do_syscall_64+0xfa/0x3b0 [ 207.261480][ T7630] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.261510][ T7630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.261531][ T7630] ? clear_bhb_loop+0x60/0xb0 [ 207.261559][ T7630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.261581][ T7630] RIP: 0033:0x7fa4dcb8ebe9 [ 207.261600][ T7630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.261618][ T7630] RSP: 002b:00007fa4ddaa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.261641][ T7630] RAX: ffffffffffffffda RBX: 00007fa4dcdb5fa0 RCX: 00007fa4dcb8ebe9 [ 207.261657][ T7630] RDX: 00000000000008c0 RSI: 0000200000000000 RDI: 0000000000000004 [ 207.261670][ T7630] RBP: 00007fa4ddaa7090 R08: 0000000000000000 R09: 0000000000000000 [ 207.261684][ T7630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.261696][ T7630] R13: 00007fa4dcdb6038 R14: 00007fa4dcdb5fa0 R15: 00007ffcec531748 [ 207.261731][ T7630] [ 207.731440][ T7643] __nla_validate_parse: 9 callbacks suppressed [ 207.731462][ T7643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.491'. [ 207.766941][ T7643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.491'. [ 207.837755][ T7639] veth3: entered allmulticast mode [ 208.333483][ T7677] FAULT_INJECTION: forcing a failure. [ 208.333483][ T7677] name failslab, interval 1, probability 0, space 0, times 0 [ 208.457902][ T7680] netlink: zone id is out of range [ 208.465534][ T7677] CPU: 1 UID: 0 PID: 7677 Comm: syz.2.502 Not tainted syzkaller #0 PREEMPT(full) [ 208.465564][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.465578][ T7677] Call Trace: [ 208.465587][ T7677] [ 208.465596][ T7677] dump_stack_lvl+0x189/0x250 [ 208.465627][ T7677] ? __pfx____ratelimit+0x10/0x10 [ 208.465658][ T7677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.465684][ T7677] ? __pfx__printk+0x10/0x10 [ 208.465721][ T7677] ? __pfx___might_resched+0x10/0x10 [ 208.465748][ T7677] should_fail_ex+0x414/0x560 [ 208.465783][ T7677] should_failslab+0xa8/0x100 [ 208.465817][ T7677] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 208.465847][ T7677] ? __alloc_skb+0x112/0x2d0 [ 208.465883][ T7677] __alloc_skb+0x112/0x2d0 [ 208.465919][ T7677] netlink_sendmsg+0x5c6/0xb30 [ 208.465962][ T7677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.465998][ T7677] ? aa_sock_msg_perm+0xf1/0x1d0 [ 208.466034][ T7677] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.466058][ T7677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.466092][ T7677] __sock_sendmsg+0x219/0x270 [ 208.466122][ T7677] ____sys_sendmsg+0x505/0x830 [ 208.466150][ T7677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.466183][ T7677] ? import_iovec+0x74/0xa0 [ 208.466211][ T7677] ___sys_sendmsg+0x21f/0x2a0 [ 208.466236][ T7677] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.466300][ T7677] ? __fget_files+0x2a/0x420 [ 208.466332][ T7677] ? __fget_files+0x3a0/0x420 [ 208.466375][ T7677] __x64_sys_sendmsg+0x19b/0x260 [ 208.466414][ T7677] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.466448][ T7677] ? __pfx_ksys_write+0x10/0x10 [ 208.466474][ T7677] ? rcu_is_watching+0x15/0xb0 [ 208.466503][ T7677] ? do_syscall_64+0xbe/0x3b0 [ 208.466538][ T7677] do_syscall_64+0xfa/0x3b0 [ 208.466567][ T7677] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.466596][ T7677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.466618][ T7677] ? clear_bhb_loop+0x60/0xb0 [ 208.466644][ T7677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.466665][ T7677] RIP: 0033:0x7f8e2cf8ebe9 [ 208.466684][ T7677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.466701][ T7677] RSP: 002b:00007f8e2dd32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.466722][ T7677] RAX: ffffffffffffffda RBX: 00007f8e2d1b5fa0 RCX: 00007f8e2cf8ebe9 [ 208.466737][ T7677] RDX: 00000000000008c0 RSI: 0000200000000000 RDI: 0000000000000004 [ 208.466749][ T7677] RBP: 00007f8e2dd32090 R08: 0000000000000000 R09: 0000000000000000 [ 208.466761][ T7677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.466772][ T7677] R13: 00007f8e2d1b6038 R14: 00007f8e2d1b5fa0 R15: 00007ffc8135b1e8 [ 208.466806][ T7677] [ 208.722906][ T7680] netlink: zone id is out of range [ 208.812655][ T7680] netlink: zone id is out of range [ 208.818051][ T7680] netlink: zone id is out of range [ 208.823515][ T7680] netlink: zone id is out of range [ 208.829578][ T7680] netlink: zone id is out of range [ 208.836361][ T7680] netlink: zone id is out of range [ 208.843200][ T7680] netlink: zone id is out of range [ 208.848671][ T7680] netlink: zone id is out of range [ 208.854650][ T7680] netlink: zone id is out of range [ 209.605442][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 209.652523][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 209.677085][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 209.749490][ T7728] netlink: 'syz.1.515': attribute type 3 has an invalid length. [ 209.798275][ T7728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.515'. [ 210.446560][ T7761] netlink: 212404 bytes leftover after parsing attributes in process `syz.1.525'. [ 210.459529][ T7760] netlink: 64 bytes leftover after parsing attributes in process `syz.3.526'. [ 210.703224][ T7768] netlink: 'syz.3.527': attribute type 1 has an invalid length. [ 210.747800][ T7768] netlink: 216 bytes leftover after parsing attributes in process `syz.3.527'. [ 210.918658][ T7773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.529'. [ 211.214275][ T7787] netlink: 'syz.3.533': attribute type 10 has an invalid length. [ 211.236552][ T7787] veth0_vlan: entered allmulticast mode [ 211.271778][ T7787] veth0_vlan: left promiscuous mode [ 211.280073][ T7787] veth0_vlan: entered promiscuous mode [ 211.296597][ T7787] team0: Device veth0_vlan failed to register rx_handler [ 213.628188][ T7815] __nla_validate_parse: 2 callbacks suppressed [ 213.628207][ T7815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.540'. [ 213.665613][ T7836] C: renamed from team_slave_0 (while UP) [ 213.682524][ T7836] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 213.703071][ T7836] net_ratelimit: 41 callbacks suppressed [ 213.703096][ T7836] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 213.942605][ T36] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 214.120085][ T7873] netlink: 576 bytes leftover after parsing attributes in process `syz.4.547'. [ 214.366457][ T7875] netlink: 'syz.3.551': attribute type 13 has an invalid length. [ 214.400892][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 214.713085][ T7893] pim6reg1: entered promiscuous mode [ 214.750747][ T7893] pim6reg1: entered allmulticast mode [ 214.997127][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'. [ 215.046930][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'. [ 215.076437][ T7909] netlink: 'syz.4.559': attribute type 1 has an invalid length. [ 215.105348][ T7909] netlink: 224 bytes leftover after parsing attributes in process `syz.4.559'. [ 215.526611][ T7930] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 215.534510][ T7930] netlink: 224 bytes leftover after parsing attributes in process `syz.3.564'. [ 215.753956][ T7938] netlink: 256 bytes leftover after parsing attributes in process `syz.3.567'. [ 215.790757][ T7941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.568'. [ 215.799972][ T7941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.568'. [ 216.113478][ T7959] netlink: 'syz.4.572': attribute type 1 has an invalid length. [ 216.297969][ T7959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.471762][ T7976] netlink: 'syz.1.576': attribute type 7 has an invalid length. [ 216.502014][ T7965] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.527451][ T7965] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 216.542745][ T7965] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 216.641936][ T7986] netlink: 'syz.1.576': attribute type 6 has an invalid length. [ 216.736252][ T7968] veth5: entered promiscuous mode [ 216.767139][ T7968] bond3: (slave veth5): Enslaving as an active interface with a down link [ 216.785715][ T7959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.802512][ T7972] dvmrp1: entered allmulticast mode [ 216.829090][ T7976] : entered promiscuous mode [ 217.093944][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 217.100177][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 217.100554][ T5869] Bluetooth: hci0: command 0x0c20 tx timeout [ 217.106819][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 217.129187][ T8001] bridge_slave_1: left allmulticast mode [ 217.179857][ T8001] bridge_slave_1: left promiscuous mode [ 217.228270][ T8001] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.462236][ T8001] bridge_slave_0: left allmulticast mode [ 217.468085][ T8001] bridge_slave_0: left promiscuous mode [ 217.475113][ T8001] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.760792][ T8023] FAULT_INJECTION: forcing a failure. [ 217.760792][ T8023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.817281][ T8023] CPU: 0 UID: 0 PID: 8023 Comm: syz.2.591 Not tainted syzkaller #0 PREEMPT(full) [ 217.817311][ T8023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.817323][ T8023] Call Trace: [ 217.817332][ T8023] [ 217.817341][ T8023] dump_stack_lvl+0x189/0x250 [ 217.817385][ T8023] ? __pfx____ratelimit+0x10/0x10 [ 217.817415][ T8023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.817441][ T8023] ? __pfx__printk+0x10/0x10 [ 217.817486][ T8023] should_fail_ex+0x414/0x560 [ 217.817520][ T8023] _copy_to_user+0x31/0xb0 [ 217.817548][ T8023] simple_read_from_buffer+0xe1/0x170 [ 217.817584][ T8023] proc_fail_nth_read+0x1b3/0x220 [ 217.817613][ T8023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.817642][ T8023] ? rw_verify_area+0x2a6/0x4d0 [ 217.817668][ T8023] ? __lock_acquire+0xab9/0xd20 [ 217.817697][ T8023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.817723][ T8023] vfs_read+0x200/0xa30 [ 217.817749][ T8023] ? fdget_pos+0x247/0x320 [ 217.817773][ T8023] ? __pfx___mutex_lock+0x10/0x10 [ 217.817805][ T8023] ? __pfx_vfs_read+0x10/0x10 [ 217.817835][ T8023] ? __fget_files+0x2a/0x420 [ 217.817872][ T8023] ? __fget_files+0x3a0/0x420 [ 217.817903][ T8023] ? __fget_files+0x2a/0x420 [ 217.817946][ T8023] ksys_read+0x145/0x250 [ 217.817977][ T8023] ? __pfx_ksys_read+0x10/0x10 [ 217.818001][ T8023] ? rcu_is_watching+0x15/0xb0 [ 217.818029][ T8023] ? do_syscall_64+0xbe/0x3b0 [ 217.818065][ T8023] do_syscall_64+0xfa/0x3b0 [ 217.818094][ T8023] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.818123][ T8023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.818144][ T8023] ? clear_bhb_loop+0x60/0xb0 [ 217.818171][ T8023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.818191][ T8023] RIP: 0033:0x7f8e2cf8d5fc [ 217.818210][ T8023] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 217.818228][ T8023] RSP: 002b:00007f8e2dd32030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.818250][ T8023] RAX: ffffffffffffffda RBX: 00007f8e2d1b5fa0 RCX: 00007f8e2cf8d5fc [ 217.818265][ T8023] RDX: 000000000000000f RSI: 00007f8e2dd320a0 RDI: 0000000000000005 [ 217.818279][ T8023] RBP: 00007f8e2dd32090 R08: 0000000000000000 R09: 0000000000000000 [ 217.818292][ T8023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.818308][ T8023] R13: 00007f8e2d1b6038 R14: 00007f8e2d1b5fa0 R15: 00007ffc8135b1e8 [ 217.818342][ T8023] [ 218.280616][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 218.474161][ T8041] veth7: entered promiscuous mode [ 218.479287][ T8041] veth7: entered allmulticast mode [ 218.670141][ T8051] __nla_validate_parse: 8 callbacks suppressed [ 218.670166][ T8051] netlink: 5448 bytes leftover after parsing attributes in process `syz.4.600'. [ 218.699448][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 218.715280][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 218.830198][ T8058] netlink: 'syz.2.603': attribute type 1 has an invalid length. [ 218.852615][ T8058] netlink: 'syz.2.603': attribute type 1 has an invalid length. [ 218.985053][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 219.175931][ T8074] 8021q: VLANs not supported on ip6tnl0 [ 219.563291][ T8091] netlink: 88 bytes leftover after parsing attributes in process `syz.3.613'. [ 219.976331][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 220.414836][ T8123] 8021q: VLANs not supported on sit0 [ 220.612243][ T8132] netlink: 'syz.3.627': attribute type 15 has an invalid length. [ 220.677991][ T8130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.969708][ T8150] sctp: [Deprecated]: syz.2.632 (pid 8150) Use of int in max_burst socket option deprecated. [ 220.969708][ T8150] Use struct sctp_assoc_value instead [ 221.005325][ T8130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.018257][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 221.162331][ T8162] sctp: [Deprecated]: syz.2.632 (pid 8162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.162331][ T8162] Use struct sctp_sack_info instead [ 221.188050][ T8130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.213512][ T8162] netlink: 164 bytes leftover after parsing attributes in process `syz.2.632'. [ 221.279399][ T8165] veth0: entered promiscuous mode [ 221.311890][ T8130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.370825][ T8164] veth0: left promiscuous mode [ 221.592828][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.685467][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.822137][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.943609][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.177625][ T8193] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 222.501684][ T8174] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 222.525237][ T8174] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 222.545630][ T8174] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 222.562393][ T8174] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 222.604698][ T8174] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 222.624524][ T8174] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 222.657557][ T8174] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 222.700502][ T8174] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 222.744450][ T8174] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 222.817917][ T8174] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 223.039813][ T8219] netlink: 10 bytes leftover after parsing attributes in process `syz.0.648'. [ 223.551686][ T8231] netlink: 96 bytes leftover after parsing attributes in process `syz.0.651'. [ 223.748717][ T8231] vlan2: entered allmulticast mode [ 223.767232][ T8231] gretap0: entered allmulticast mode [ 223.818620][ T8243] netlink: 112 bytes leftover after parsing attributes in process `syz.4.654'. [ 223.914569][ T8256] netlink: 'syz.1.655': attribute type 8 has an invalid length. [ 223.996566][ T8254] netlink: 168 bytes leftover after parsing attributes in process `syz.3.656'. [ 224.102962][ T8261] netlink: 'syz.0.658': attribute type 21 has an invalid length. [ 224.115602][ T8261] netlink: 156 bytes leftover after parsing attributes in process `syz.0.658'. [ 224.461944][ T8278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'. [ 224.510610][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 224.585113][ T8281] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 225.356369][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 225.640874][ T8326] nbd0: detected capacity change from 0 to 127 [ 225.768301][ T5871] block nbd0: Receive control failed (result -104) [ 226.094382][ T8357] tipc: Enabled bearer , priority 0 [ 226.221890][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'. [ 226.352043][ T8357] syzkaller0: entered promiscuous mode [ 226.357747][ T8357] syzkaller0: entered allmulticast mode [ 226.366463][ T8357] tipc: Resetting bearer [ 226.432611][ T3525] tipc: Resetting bearer [ 226.445565][ T8368] netlink: 284 bytes leftover after parsing attributes in process `syz.1.684'. [ 226.470100][ T8355] tipc: Resetting bearer [ 226.700921][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.688'. [ 226.711578][ T8383] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20002 [ 226.751884][ T8388] netlink: 'syz.4.688': attribute type 10 has an invalid length. [ 226.773964][ T8387] netlink: 64 bytes leftover after parsing attributes in process `syz.4.688'. [ 227.162041][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 227.171513][ T10] tipc: Node number set to 1347383835 [ 227.467557][ T5871] block nbd1: Receive control failed (result -32) [ 228.244463][ T8355] tipc: Disabling bearer [ 228.265676][ T8388] team0: Device veth1_macvtap failed to register rx_handler [ 228.375698][ T8402] pimreg3: entered allmulticast mode [ 229.158607][ T8451] tipc: Started in network mode [ 229.199017][ T8451] tipc: Node identity ae3faae344b5, cluster identity 4711 [ 229.255894][ T8451] tipc: Enabled bearer , priority 0 [ 229.297092][ T8458] syzkaller0: entered promiscuous mode [ 229.303551][ T8458] syzkaller0: entered allmulticast mode [ 229.332823][ T8451] netlink: 191164 bytes leftover after parsing attributes in process `syz.4.704'. [ 229.364140][ T8451] tipc: Resetting bearer [ 229.390960][ T8448] tipc: Resetting bearer [ 229.451774][ T8448] tipc: Disabling bearer [ 229.947635][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 230.016467][ T8494] netlink: 'syz.0.713': attribute type 1 has an invalid length. [ 230.041345][ T8494] netlink: 'syz.0.713': attribute type 2 has an invalid length. [ 230.174401][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'. [ 230.483648][ T8509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.717'. [ 230.540829][ T8509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.717'. [ 230.747508][ T8530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.131403][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 231.184545][ T8540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.724'. [ 231.189944][ T8543] openvswitch: netlink: Missing valid actions attribute. [ 231.264111][ T8543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.449031][ T8558] netlink: 'syz.2.728': attribute type 21 has an invalid length. [ 231.570984][ T8567] netlink: 60 bytes leftover after parsing attributes in process `syz.4.730'. [ 231.975662][ T8581] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 232.021313][ T8581] netlink: 'syz.2.734': attribute type 3 has an invalid length. [ 232.063447][ T8581] netlink: 'syz.2.734': attribute type 235 has an invalid length. [ 232.393180][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.739'. [ 232.438221][ T8593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.739'. [ 232.720952][ T8606] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 232.752296][ T8606] bond2: (slave vcan2): Error -95 calling set_mac_address [ 233.185592][ T8640] openvswitch: netlink: IP tunnel dst address not specified [ 233.343075][ T8651] netlink: 'syz.3.750': attribute type 1 has an invalid length. [ 233.814036][ T8674] netlink: 'syz.2.760': attribute type 33 has an invalid length. [ 234.382061][ T8698] __nla_validate_parse: 8 callbacks suppressed [ 234.382081][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'. [ 235.102250][ T8729] netlink: 16 bytes leftover after parsing attributes in process `syz.3.783'. [ 235.140212][ T8729] netlink: 16 bytes leftover after parsing attributes in process `syz.3.783'. [ 235.202771][ T8729] netlink: 'syz.3.783': attribute type 1 has an invalid length. [ 235.591480][ T8748] pim6reg1: entered promiscuous mode [ 235.596975][ T8748] pim6reg1: entered allmulticast mode [ 235.762843][ T8768] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 235.785371][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 235.837786][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'. [ 236.270138][ T5956] IPVS: starting estimator thread 0... [ 236.295641][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 236.381011][ T8788] IPVS: using max 23 ests per chain, 55200 per kthread [ 236.818653][ T8819] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 236.878354][ T8819] net veth1_virt_wifi .: renamed from virt_wifi0 [ 236.911258][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 236.935854][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.813'. [ 237.759586][ T8858] netlink: 'syz.4.823': attribute type 2 has an invalid length. [ 237.789988][ T8858] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 237.842978][ T8863] netlink: 'syz.2.825': attribute type 1 has an invalid length. [ 237.867479][ T8863] netlink: 228 bytes leftover after parsing attributes in process `syz.2.825'. [ 237.891985][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 238.107324][ T8875] xfrm1: entered allmulticast mode [ 238.305874][ T8887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.335534][ T8890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.378458][ T8887] bond0: (slave rose0): Enslaving as an active interface with an up link [ 238.661481][ T8903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.008920][ T8915] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.344104][ T8915] bond4 (unregistering): Released all slaves [ 239.579995][ T8947] __nla_validate_parse: 3 callbacks suppressed [ 239.580017][ T8947] netlink: 96 bytes leftover after parsing attributes in process `syz.1.847'. [ 239.706718][ T8947] vlan2: entered allmulticast mode [ 239.730762][ T8947] gretap0: entered allmulticast mode [ 239.779393][ T8959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.850'. [ 240.109067][ T8972] netlink: 'syz.2.853': attribute type 9 has an invalid length. [ 240.189165][ T8975] netlink: 36 bytes leftover after parsing attributes in process `syz.3.855'. [ 240.671494][ T8998] netlink: 52 bytes leftover after parsing attributes in process `syz.2.863'. [ 241.192399][ T9017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.869'. [ 241.800735][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 241.827900][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 242.391856][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'. [ 242.445188][ T9077] pim6reg: entered allmulticast mode [ 242.516766][ T9081] pim6reg: left allmulticast mode [ 242.554226][ T9085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.889'. [ 242.672171][ T9090] netlink: 'syz.2.890': attribute type 1 has an invalid length. [ 242.789777][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.890'. [ 242.916488][ T9100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.187582][ T9112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.259266][ T9117] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20004 [ 243.764403][ T9141] netlink: 'syz.1.908': attribute type 1 has an invalid length. [ 243.787490][ T9141] netlink: 'syz.1.908': attribute type 10 has an invalid length. [ 243.800715][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 243.821972][ T9141] netlink: 'syz.1.908': attribute type 4 has an invalid length. [ 243.852028][ T9141] 8021q: VLANs not supported on ip6_vti0 [ 244.627304][ T9176] netlink: 'syz.1.919': attribute type 1 has an invalid length. [ 244.635720][ T9176] netlink: 'syz.1.919': attribute type 2 has an invalid length. [ 244.663455][ T9176] __nla_validate_parse: 5 callbacks suppressed [ 244.663475][ T9176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.919'. [ 244.716347][ T9182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.730006][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 245.430625][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 245.450875][ T9209] xt_socket: unknown flags 0xe4 [ 245.466185][ T9211] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 245.477330][ T9211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.584187][ T9213] syz_tun: entered allmulticast mode [ 245.618016][ T9213] syz_tun: left allmulticast mode [ 245.668724][ T9223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.938'. [ 245.688267][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.934'. [ 245.713728][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 245.774028][ T9213] tap0: tun_chr_ioctl cmd 1074025677 [ 245.794300][ T9213] tap0: linktype set to 65534 [ 245.802178][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.937'. [ 246.056168][ T9238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.942'. [ 246.329337][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 246.603093][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 246.643285][ T9258] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 246.687849][ T9258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.734932][ T9227] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 247.487623][ T9288] erspan0: entered promiscuous mode [ 247.505994][ T9288] erspan0: entered allmulticast mode [ 247.582087][ T9292] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 247.753564][ T9298] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 247.787008][ T9298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.701171][ T9333] __nla_validate_parse: 6 callbacks suppressed [ 249.701196][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.972'. [ 249.738008][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.972'. [ 249.771856][ T8657] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.795120][ T8657] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.815645][ T9346] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 249.839744][ T8657] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.871458][ T9346] netlink: 172 bytes leftover after parsing attributes in process `syz.3.977'. [ 249.890157][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.952071][ T9345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.977'. [ 249.971469][ T9350] netlink: 'syz.0.979': attribute type 4 has an invalid length. [ 250.018779][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 250.033890][ T9353] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 250.048733][ T9353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.062849][ T9355] netlink: 'syz.0.979': attribute type 4 has an invalid length. [ 250.232722][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.982'. [ 250.312929][ T9378] netlink: 'syz.0.986': attribute type 11 has an invalid length. [ 250.525905][ T9386] netlink: 'syz.2.990': attribute type 1 has an invalid length. [ 250.542545][ T9386] netlink: 'syz.2.990': attribute type 2 has an invalid length. [ 250.565278][ T9386] netlink: 'syz.2.990': attribute type 1 has an invalid length. [ 250.581110][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 250.652106][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'. [ 251.004375][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 251.050332][ T9401] bridge_slave_1: left allmulticast mode [ 251.083849][ T9401] bridge_slave_1: left promiscuous mode [ 251.102409][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.138908][ T9401] bridge_slave_0: left allmulticast mode [ 251.160599][ T9401] bridge_slave_0: left promiscuous mode [ 251.167428][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.249523][ T9401] bond0: (slave bridge0): Releasing backup interface [ 251.429099][ T9417] netlink: 'syz.4.1002': attribute type 9 has an invalid length. [ 251.453974][ T9417] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.1002'. [ 251.459703][ T9419] netlink: 'syz.1.1003': attribute type 1 has an invalid length. [ 251.593163][ T9426] pim6reg1: entered promiscuous mode [ 251.634913][ T9426] pim6reg1: entered allmulticast mode [ 251.786029][ T9434] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 251.845760][ T9434] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 251.874098][ T9434] gretap1: entered promiscuous mode [ 251.889666][ T9434] gretap1: entered allmulticast mode [ 252.757922][ T9491] sctp: [Deprecated]: syz.0.1027 (pid 9491) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.757922][ T9491] Use struct sctp_sack_info instead [ 253.064364][ T9500] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 253.090615][ T9500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.740202][ T9526] netlink: 'syz.1.1037': attribute type 1 has an invalid length. [ 253.809265][ T9532] netlink: 'syz.4.1039': attribute type 11 has an invalid length. [ 254.059869][ T9545] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 254.102393][ T9545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.676186][ T9574] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 254.725821][ T9582] netlink: 'syz.0.1054': attribute type 142 has an invalid length. [ 254.732047][ T5950] IPVS: starting estimator thread 0... [ 254.883729][ T9583] IPVS: using max 25 ests per chain, 60000 per kthread [ 254.989135][ T9598] __nla_validate_parse: 8 callbacks suppressed [ 254.989157][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 255.030033][ T9602] openvswitch: netlink: Missing key (keys=40, expected=80) [ 255.038811][ T9598] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 255.047709][ T9598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.065604][ T9600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1056'. [ 255.087752][ T9603] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 255.272591][ T9610] netlink: 'syz.0.1060': attribute type 1 has an invalid length. [ 255.298084][ T9609] netlink: 'syz.3.1061': attribute type 14 has an invalid length. [ 255.310535][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1061'. [ 255.387104][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'. [ 255.499904][ T9624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1062'. [ 255.577314][ T9625] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 255.968427][ T1077] block nbd0: Possible stuck request ffff888025185080: control (read@0,1024B). Runtime 30 seconds [ 255.982059][ T1077] block nbd0: Possible stuck request ffff888025185240: control (read@1024,1024B). Runtime 30 seconds [ 255.993644][ T1077] block nbd0: Possible stuck request ffff888025185400: control (read@2048,1024B). Runtime 30 seconds [ 256.005313][ T1077] block nbd0: Possible stuck request ffff8880251855c0: control (read@3072,1024B). Runtime 30 seconds [ 256.224183][ T9651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1071'. [ 256.973191][ T9675] nbd2: detected capacity change from 0 to 549764202496 [ 257.013407][ T5871] block nbd2: Receive control failed (result -32) [ 257.059055][ T7459] block nbd2: Dead connection, failed to find a fallback [ 257.083874][ T7459] block nbd2: shutting down sockets [ 257.119905][ T7459] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.154373][ T7459] Buffer I/O error on dev nbd2, logical block 0, async page read [ 257.197465][ T5943] IPVS: starting estimator thread 0... [ 257.210054][ T9685] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 257.219342][ T7459] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.249371][ T7459] Buffer I/O error on dev nbd2, logical block 0, async page read [ 257.275364][ T9689] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 257.296758][ T7459] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.302417][ T9687] IPVS: using max 30 ests per chain, 72000 per kthread [ 257.309917][ T7459] Buffer I/O error on dev nbd2, logical block 0, async page read [ 257.353516][ T7459] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.388461][ T7459] Buffer I/O error on dev nbd2, logical block 0, async page read [ 257.407825][ T7459] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.425533][ T7459] Buffer I/O error on dev nbd2, logical block 0, async page read [ 257.434118][ T7459] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.444690][ T7459] Buffer I/O error on dev nbd2, logical block 0, async page read [ 257.456403][ T7459] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.466495][ T7459] Buffer I/O error on dev nbd2, logical block 0, async page read [ 257.495822][ T7459] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.556102][ T7459] Buffer I/O error on dev nbd2, logical block 0, async page read [ 257.573096][ T7459] ldm_validate_partition_table(): Disk read failed. [ 257.588038][ T7459] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.611376][ T7459] Buffer I/O error on dev nbd2, logical block 0, async page read [ 257.640236][ T7459] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.648988][ T9706] tipc: Enabling of bearer rejected, failed to enable media [ 257.662764][ T7459] Buffer I/O error on dev nbd2, logical block 0, async page read [ 257.694868][ T9706] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1091'. [ 257.730097][ T7459] Dev nbd2: unable to read RDB block 0 [ 257.742041][ T7459] nbd2: unable to read partition table [ 257.785502][ T7459] ldm_validate_partition_table(): Disk read failed. [ 257.823978][ T7459] Dev nbd2: unable to read RDB block 0 [ 257.830202][ T7459] nbd2: unable to read partition table [ 257.934059][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 257.977636][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 258.199632][ T9723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1098'. [ 258.242838][ T9729] netlink: 'syz.4.1100': attribute type 5 has an invalid length. [ 258.301324][ T9729] netlink: 'syz.4.1100': attribute type 5 has an invalid length. [ 258.309859][ T9729] netlink: 'syz.4.1100': attribute type 5 has an invalid length. [ 258.320743][ T9729] netlink: 'syz.4.1100': attribute type 5 has an invalid length. [ 258.329714][ T9729] netlink: 'syz.4.1100': attribute type 5 has an invalid length. [ 258.579280][ T9745] team0: Device vti0 is of different type [ 258.863407][ T9764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.373962][ T9788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.906190][ T9819] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.928309][ T9818] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.942480][ T9811] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 260.255154][ T9832] netlink: 'syz.3.1132': attribute type 1 has an invalid length. [ 260.293251][ T9832] __nla_validate_parse: 14 callbacks suppressed [ 260.293272][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 260.710095][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 260.758687][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 260.802621][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 260.881923][ T9861] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1143'. [ 260.923408][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1143'. [ 260.965610][ T9861] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1143'. [ 261.011476][ T9874] netlink: 'syz.2.1144': attribute type 15 has an invalid length. [ 261.085801][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.337464][ T9889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1151'. [ 261.598009][ T9902] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1156'. [ 261.640019][ T9902] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1156'. [ 262.193794][ T9939] netlink: 'syz.3.1168': attribute type 10 has an invalid length. [ 262.286682][ T9939] bond0: (slave bond_slave_0): Releasing backup interface [ 262.320133][ T9948] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 262.328747][ T9939] bond0: (slave bond_slave_1): Releasing backup interface [ 262.386923][ T9939] team0: Port device C removed [ 262.427585][ T9939] team0: Port device team_slave_1 removed [ 262.451790][ T9939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.459711][ T9939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.470545][ T9939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.478566][ T9939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.498199][ T9939] team0: Port device geneve0 removed [ 262.532029][ T9949] ip6tnl4: entered promiscuous mode [ 262.537446][ T9949] ip6tnl4: entered allmulticast mode [ 262.833020][ T9969] netlink: 'syz.3.1175': attribute type 23 has an invalid length. [ 263.057788][ T9976] netlink: 'syz.2.1180': attribute type 1 has an invalid length. [ 263.394683][ T9997] netlink: 'syz.4.1185': attribute type 1 has an invalid length. [ 263.465920][ T9997] tipc: Enabled bearer , priority 0 [ 263.483179][ T9997] syzkaller0: entered promiscuous mode [ 263.499361][ T9997] syzkaller0: entered allmulticast mode [ 263.761137][T10016] tipc: Resetting bearer [ 263.793596][ T9995] tipc: Resetting bearer [ 263.881496][ T9995] tipc: Disabling bearer [ 263.916826][T10020] netlink: 'syz.3.1191': attribute type 26 has an invalid length. [ 263.948280][T10025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.966302][T10025] batadv0: mtu less than device minimum [ 263.978288][T10025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 263.990534][T10025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.002533][T10025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.014418][T10025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.026603][T10025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.038612][T10025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.050588][T10025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.062540][T10025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.074469][T10025] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.122614][T10025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.155717][T10025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.216139][T10025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.232557][T10025] batman_adv: batadv0: Interface deactivated: dummy0 [ 264.239683][T10025] batman_adv: batadv0: Removing interface: dummy0 [ 264.311055][T10020] netlink: 'syz.3.1191': attribute type 26 has an invalid length. [ 264.408273][T10043] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.427115][T10043] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.602988][T10043] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.650597][T10043] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.712507][T10035] netlink: 'syz.4.1195': attribute type 1 has an invalid length. [ 264.734540][T10035] netlink: 'syz.4.1195': attribute type 1 has an invalid length. [ 264.803784][T10043] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.834875][T10043] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.053421][T10043] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.127837][T10043] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.213321][T10071] unknown channel width for channel at 909000KHz? [ 265.234996][T10071] unknown channel width for channel at 909000KHz? [ 265.264640][T10071] unknown channel width for channel at 909000KHz? [ 265.264732][T10075] unsupported nlmsg_type 40 [ 265.309815][ T3582] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.325842][ T3582] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.377668][ T3582] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.404860][ T3582] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.485407][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.508110][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.547424][T10085] IPv6: sit2: Disabled Multicast RS [ 265.554351][T10085] sit2: entered allmulticast mode [ 265.602768][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.613195][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.708351][T10084] __nla_validate_parse: 21 callbacks suppressed [ 265.708375][T10084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1206'. [ 266.054577][T10106] validate_nla: 1 callbacks suppressed [ 266.054600][T10106] netlink: 'syz.2.1211': attribute type 7 has an invalid length. [ 266.119990][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1209'. [ 266.399960][T10123] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 266.592977][T10132] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1218'. [ 266.718931][T10134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.801694][T10134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.818820][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1219'. [ 266.915080][T10145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1222'. [ 266.974209][T10134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.075284][T10134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.364033][ T8657] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.420782][T10161] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1226'. [ 267.444790][ T8657] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.563286][ T3525] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.724639][ T3582] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.755868][T10172] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1229'. [ 268.341615][T10208] netlink: 'syz.2.1238': attribute type 1 has an invalid length. [ 268.388393][T10208] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 268.728785][T10229] tipc: Started in network mode [ 268.744533][T10229] tipc: Node identity 362c3fc7b293, cluster identity 4711 [ 268.752273][T10229] tipc: Enabled bearer , priority 0 [ 268.780177][T10229] syzkaller0: entered promiscuous mode [ 268.786508][T10229] syzkaller0: entered allmulticast mode [ 268.873366][T10229] tipc: Resetting bearer [ 268.911138][T10228] tipc: Resetting bearer [ 268.948831][T10228] tipc: Disabling bearer [ 269.226748][T10244] nbd: must specify a device to reconfigure [ 269.226892][T10247] netlink: 'syz.0.1250': attribute type 83 has an invalid length. [ 269.429186][T10252] net_ratelimit: 30 callbacks suppressed [ 269.429208][T10252] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 269.562740][T10257] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 269.999190][T10282] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 270.326628][T10298] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 270.600027][T10310] netlink: 'syz.0.1268': attribute type 1 has an invalid length. [ 270.786676][T10324] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1274'. [ 270.930666][T10330] netlink: 'syz.1.1277': attribute type 10 has an invalid length. [ 270.983527][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.007316][T10330] bond0: (slave bond_slave_0): Releasing backup interface [ 271.044369][T10330] bond0: (slave bond_slave_1): Releasing backup interface [ 271.072216][T10330] team_slave_0: left promiscuous mode [ 271.087773][T10330] team0: Port device team_slave_0 removed [ 271.102844][T10330] team_slave_1: left promiscuous mode [ 271.127742][T10330] team0: Port device team_slave_1 removed [ 271.507081][T10356] netlink: 'syz.2.1284': attribute type 1 has an invalid length. [ 271.542095][T10358] netlink: 'syz.2.1284': attribute type 1 has an invalid length. [ 271.677017][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 271.706242][T10361] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 271.714138][T10361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.720754][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.021591][T10378] netlink: 'syz.4.1290': attribute type 13 has an invalid length. [ 272.050576][T10378] netlink: 'syz.4.1290': attribute type 58 has an invalid length. [ 272.059132][T10378] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1290'. [ 272.401280][T10395] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1298'. [ 272.446305][T10393] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1296'. [ 272.484894][T10393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1296'. [ 272.491538][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1297'. [ 272.521073][T10393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1296'. [ 272.567962][T10393] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1296'. [ 272.816049][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 272.893716][T10418] netlink: 'syz.0.1306': attribute type 10 has an invalid length. [ 272.922964][T10418] team0: Device veth1_macvtap failed to register rx_handler [ 273.102475][T10426] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 273.364551][T10444] openvswitch: netlink: Flow actions attr not present in new flow. [ 273.485277][T10453] netlink: 'syz.0.1316': attribute type 21 has an invalid length. [ 273.527328][T10453] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 273.540120][T10454] netlink: 'syz.0.1316': attribute type 21 has an invalid length. [ 273.551178][T10454] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 273.849013][T10465] IPv6: sit1: Disabled Multicast RS [ 273.861101][T10465] sit1: entered allmulticast mode [ 274.089518][T10480] sock: sock_set_timeout: `syz.3.1324' (pid 10480) tries to set negative timeout [ 274.097780][T10482] netlink: 'syz.4.1325': attribute type 2 has an invalid length. [ 274.133909][T10480] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 274.151677][T10480] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 274.199957][T10487] netlink: 'syz.4.1325': attribute type 2 has an invalid length. [ 274.365109][T10498] netlink: 'syz.3.1329': attribute type 10 has an invalid length. [ 274.434219][T10498] team0: Port device dummy0 added [ 274.566429][T10508] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20001 [ 275.311494][T10534] tipc: Started in network mode [ 275.334884][T10534] tipc: Node identity 8203f11d1fb1, cluster identity 4711 [ 275.360895][T10534] tipc: Enabled bearer , priority 0 [ 275.429232][T10539] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.438869][T10539] team0: Port device bond4 added [ 275.445046][T10538] syzkaller0: entered promiscuous mode [ 275.450887][T10538] syzkaller0: entered allmulticast mode [ 275.511049][T10538] tipc: Resetting bearer [ 275.583843][T10538] tipc: Disabling bearer [ 276.368542][T10596] __nla_validate_parse: 16 callbacks suppressed [ 276.368568][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 276.622449][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1360'. [ 276.634905][T10604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.736361][T10608] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1363'. [ 276.795500][T10609] sctp: [Deprecated]: syz.0.1364 (pid 10609) Use of int in max_burst socket option. [ 276.795500][T10609] Use struct sctp_assoc_value instead [ 276.859354][T10611] validate_nla: 1 callbacks suppressed [ 276.859378][T10611] netlink: 'syz.2.1365': attribute type 25 has an invalid length. [ 276.976110][T10615] macvtap1: entered allmulticast mode [ 276.988047][T10615] veth0_macvtap: entered allmulticast mode [ 277.043950][T10621] tipc: Enabled bearer , priority 0 [ 277.080723][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 277.184001][T10621] tipc: Disabling bearer [ 277.276876][T10639] tipc: Started in network mode [ 277.282950][T10639] tipc: Node identity 6e42bc272e11, cluster identity 4711 [ 277.292268][T10639] tipc: Enabled bearer , priority 0 [ 277.316477][T10634] syzkaller0: entered promiscuous mode [ 277.331547][T10634] syzkaller0: entered allmulticast mode [ 277.467934][T10623] tipc: Resetting bearer [ 277.549829][T10623] tipc: Disabling bearer [ 277.777314][T10651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.853444][T10653] netlink: 'syz.1.1375': attribute type 10 has an invalid length. [ 277.936573][T10630] lec:lec_atm_close: lec0: Shut down! [ 278.036251][T10664] netlink: 'syz.2.1378': attribute type 25 has an invalid length. [ 278.291003][T10676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.520071][T10686] netlink: 'syz.2.1385': attribute type 1 has an invalid length. [ 278.591117][T10692] netlink: 'syz.4.1383': attribute type 27 has an invalid length. [ 278.664228][T10686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1385'. [ 278.677806][T10693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 278.694700][T10693] bond1: (slave bond2): making interface the new active one [ 278.703826][T10693] bond1: (slave bond2): Enslaving as an active interface with an up link [ 278.759587][T10686] bond1: entered promiscuous mode [ 278.772155][T10686] bond2: entered promiscuous mode [ 278.784104][T10686] bond1: entered allmulticast mode [ 278.802881][T10686] bond2: entered allmulticast mode [ 278.809849][T10686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.327000][T10725] netlink: 'syz.2.1392': attribute type 25 has an invalid length. [ 279.493827][T10728] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 279.597789][T10734] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 279.607163][T10734] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 279.626615][T10736] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 279.648868][T10736] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 279.682607][ T9] lec:lec_start_xmit: lec0:No lecd attached [ 279.753339][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 279.892484][T10749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.007388][T10755] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1402'. [ 280.355576][T10780] sctp: [Deprecated]: syz.3.1406 (pid 10780) Use of int in max_burst socket option. [ 280.355576][T10780] Use struct sctp_assoc_value instead [ 280.379809][T10779] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 280.402874][T10771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1407'. [ 280.440888][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1409'. [ 280.506319][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'. [ 280.795316][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1412'. [ 281.028703][T10808] macvlan0: entered promiscuous mode [ 281.049128][T10808] macvlan0: entered allmulticast mode [ 281.373831][T10818] tipc: Trying to set illegal importance in message [ 281.626176][T10835] __nla_validate_parse: 66 callbacks suppressed [ 281.626197][T10835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1423'. [ 281.651427][T10838] sctp: [Deprecated]: syz.0.1421 (pid 10838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.651427][T10838] Use struct sctp_sack_info instead [ 281.652471][T10818] team0 (unregistering): Port device dummy0 removed [ 281.718135][T10832] !€ÿ: renamed from bond_slave_0 [ 282.315035][T10872] validate_nla: 3 callbacks suppressed [ 282.315055][T10872] netlink: 'syz.0.1431': attribute type 25 has an invalid length. [ 282.582005][T10883] netlink: 'syz.0.1434': attribute type 10 has an invalid length. [ 282.605407][T10883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1434'. [ 282.699570][T10883] team0: Port device geneve0 added [ 282.759023][T10894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1436'. [ 283.443369][T10930] netlink: 'syz.2.1444': attribute type 25 has an invalid length. [ 283.654467][T10943] ipvlan0: entered promiscuous mode [ 283.685124][T10943] ipvlan0: entered allmulticast mode [ 283.693918][T10945] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1450'. [ 283.713603][T10943] veth0_vlan: entered allmulticast mode [ 283.989434][T10962] Unsupported ieee802154 address type: 0 [ 284.090036][T10963] netlink: 'syz.2.1455': attribute type 8 has an invalid length. [ 284.187061][T10973] netlink: 'syz.4.1458': attribute type 25 has an invalid length. [ 284.345461][T10978] openvswitch: netlink: Actions may not be safe on all matching packets [ 284.429682][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1463'. [ 284.581456][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1467'. [ 284.938639][T11018] netlink: 'syz.3.1472': attribute type 25 has an invalid length. [ 284.969072][T11022] netlink: 'syz.0.1473': attribute type 3 has an invalid length. [ 285.025751][T11022] netlink: 'syz.0.1473': attribute type 1 has an invalid length. [ 285.191181][T11030] netlink: 212388 bytes leftover after parsing attributes in process `syz.3.1476'. [ 285.200908][T11030] openvswitch: netlink: Message has 5 unknown bytes. [ 285.219588][T11031] tipc: Enabled bearer , priority 0 [ 285.250812][T11035] netlink: 'syz.0.1478': attribute type 5 has an invalid length. [ 285.259734][T11031] syzkaller0: entered promiscuous mode [ 285.286869][T11031] syzkaller0: entered allmulticast mode [ 285.400503][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms [ 285.408903][ C0] lec:lec_tx_timeout: lec0 [ 285.413924][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 285.483000][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1481'. [ 285.538538][T11056] tipc: Enabled bearer , priority 0 [ 285.550601][T11056] syzkaller0: entered promiscuous mode [ 285.556410][T11056] syzkaller0: entered allmulticast mode [ 285.587005][T11056] tipc: Resetting bearer [ 285.624466][T11055] tipc: Resetting bearer [ 285.655338][T11055] tipc: Disabling bearer [ 285.675768][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 285.688835][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1486'. [ 285.826419][T11020] tipc: Resetting bearer [ 285.866625][T11020] tipc: Disabling bearer [ 285.888366][T11066] bridge_slave_0: entered promiscuous mode [ 286.085244][ T1077] block nbd0: Possible stuck request ffff888025185080: control (read@0,1024B). Runtime 60 seconds [ 286.096164][ T1077] block nbd0: Possible stuck request ffff888025185240: control (read@1024,1024B). Runtime 60 seconds [ 286.107633][ T1077] block nbd0: Possible stuck request ffff888025185400: control (read@2048,1024B). Runtime 60 seconds [ 286.119146][ T1077] block nbd0: Possible stuck request ffff8880251855c0: control (read@3072,1024B). Runtime 60 seconds [ 286.593916][T11099] netlink: 'syz.4.1498': attribute type 25 has an invalid length. [ 287.032892][T11124] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 287.253669][T11135] __nla_validate_parse: 3 callbacks suppressed [ 287.253693][T11135] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1509'. [ 287.315111][T11135] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1509'. [ 287.332626][T11136] pim6reg: entered allmulticast mode [ 287.342780][T11135] netlink: 'syz.4.1509': attribute type 6 has an invalid length. [ 287.373748][T11135] netlink: 'syz.4.1509': attribute type 5 has an invalid length. [ 287.381083][T11139] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 287.400306][T11135] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1509'. [ 287.576744][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 287.609624][T11153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1513'. [ 287.619218][T11149] netlink: 'syz.0.1512': attribute type 25 has an invalid length. [ 287.653663][T11153] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1513'. [ 287.833980][T11162] netlink: 'syz.4.1518': attribute type 1 has an invalid length. [ 287.850726][T11162] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1518'. [ 287.868092][T11162] netlink: 'syz.4.1518': attribute type 1 has an invalid length. [ 287.889862][T11162] netlink: 'syz.4.1518': attribute type 2 has an invalid length. [ 287.908340][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'. [ 287.943139][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 288.039324][T11166] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1517'. [ 288.138033][T11172] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.153637][T11172] team0: Failed to send port change of device bond3 via netlink (err -105) [ 288.163587][T11172] team0: Failed to send options change via netlink (err -105) [ 288.164235][T11176] sctp: [Deprecated]: syz.3.1522 (pid 11176) Use of struct sctp_assoc_value in delayed_ack socket option. [ 288.164235][T11176] Use struct sctp_sack_info instead [ 288.172932][T11172] team0: Port device bond3 added [ 288.365067][T11184] tipc: Enabling of bearer rejected, failed to enable media [ 288.506237][T11195] netlink: 'syz.1.1527': attribute type 25 has an invalid length. [ 288.869662][T11218] netlink: 'syz.0.1536': attribute type 25 has an invalid length. [ 289.128332][T11233] netlink: 'syz.1.1541': attribute type 25 has an invalid length. [ 290.143536][T11290] netlink: 'syz.3.1555': attribute type 25 has an invalid length. [ 290.753219][T11327] hsr0 speed is unknown, defaulting to 1000 [ 290.759617][T11327] hsr0 speed is unknown, defaulting to 1000 [ 290.799731][T11327] hsr0 speed is unknown, defaulting to 1000 [ 290.855386][T11327] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 290.909463][T11331] pim6reg: entered allmulticast mode [ 290.917592][T11327] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 291.088295][T11327] hsr0 speed is unknown, defaulting to 1000 [ 291.140834][T11327] hsr0 speed is unknown, defaulting to 1000 [ 291.160470][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 291.168671][ C0] lec:lec_tx_timeout: lec0 [ 291.173617][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 291.211325][T11327] hsr0 speed is unknown, defaulting to 1000 [ 291.218472][T11347] tipc: Enabling of bearer rejected, failed to enable media [ 291.255649][T11327] hsr0 speed is unknown, defaulting to 1000 [ 291.272979][T11327] hsr0 speed is unknown, defaulting to 1000 [ 292.832381][T11425] __nla_validate_parse: 9 callbacks suppressed [ 292.832410][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 294.066565][T11494] tipc: Enabling of bearer rejected, failed to enable media [ 294.273214][T11509] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1613'. [ 294.764254][T11535] validate_nla: 3 callbacks suppressed [ 294.764275][T11535] netlink: 'syz.0.1620': attribute type 10 has an invalid length. [ 294.893336][T11537] ip6gre0: Master is either lo or non-ether device [ 295.151362][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 295.158770][T11555] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1623'. [ 295.167186][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1625'. [ 295.179206][T11554] "syz.0.1624" (11554) uses obsolete ecb(arc4) skcipher [ 295.182435][T11554] xt_socket: unknown flags 0x50 [ 295.197323][T11553] netlink: 'syz.1.1625': attribute type 15 has an invalid length. [ 295.415043][T11567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1628'. [ 295.444966][T11567] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1628'. [ 295.463996][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880566ba800: rx timeout, send abort [ 295.474420][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880566ba800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 295.559088][T11571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.669410][T11580] netlink: 'syz.3.1632': attribute type 2 has an invalid length. [ 296.180722][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 296.188955][ C0] lec:lec_tx_timeout: lec0 [ 296.194271][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 296.322351][T11626] netlink: 'syz.2.1646': attribute type 10 has an invalid length. [ 296.372006][T11626] team0: Device hsr_slave_0 failed to register rx_handler [ 296.634635][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1649'. [ 296.656998][T11638] tc_dump_action: action bad kind [ 296.663781][T11635] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1649'. [ 296.906479][T11652] netlink: 'syz.4.1656': attribute type 11 has an invalid length. [ 296.945790][T11652] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1656'. [ 297.032991][T11659] gretap2: entered promiscuous mode [ 297.276583][T11679] netlink: 'syz.3.1664': attribute type 29 has an invalid length. [ 297.371120][T11686] netlink: 'syz.3.1664': attribute type 29 has an invalid length. [ 297.854591][T11712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.029721][T11722] tipc: Enabling of bearer rejected, failed to enable media [ 298.097740][T11723] __nla_validate_parse: 4 callbacks suppressed [ 298.097777][T11723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1678'. [ 299.068929][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1691'. [ 299.078774][T11778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1693'. [ 299.098572][T11778] vlan3: entered promiscuous mode [ 299.113589][T11778] bridge0: entered promiscuous mode [ 299.282986][T11786] netlink: 'syz.2.1697': attribute type 8 has an invalid length. [ 299.364045][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 299.393206][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 299.421116][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 299.622840][T11806] netlink: 'syz.1.1705': attribute type 10 has an invalid length. [ 299.669144][T11806] veth0_vlan: entered allmulticast mode [ 299.778565][T11806] veth0_vlan: left promiscuous mode [ 299.794732][T11806] veth0_vlan: entered promiscuous mode [ 299.839729][T11806] team0: Device veth0_vlan failed to register rx_handler [ 300.004417][T11817] tipc: Enabled bearer , priority 0 [ 300.023679][T11817] syzkaller0: entered promiscuous mode [ 300.029229][T11817] syzkaller0: entered allmulticast mode [ 300.070189][T11817] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 300.104491][T11830] tipc: Enabling of bearer rejected, failed to enable media [ 300.159394][T11832] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 300.314420][T11815] tipc: Resetting bearer [ 300.378837][T11815] tipc: Disabling bearer [ 300.943332][T11869] tipc: Enabled bearer , priority 0 [ 300.991089][T11875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1726'. [ 301.182092][T11869] syzkaller0: entered promiscuous mode [ 301.187854][T11869] syzkaller0: entered allmulticast mode [ 301.196346][T11869] tipc: Resetting bearer [ 301.210416][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 301.218557][ C0] lec:lec_tx_timeout: lec0 [ 301.223361][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 301.325392][T11903] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1732'. [ 301.348014][T11903] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1732'. [ 301.374381][T11903] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1732'. [ 301.375631][ T12] tipc: Resetting bearer [ 301.411086][T11872] tipc: Resetting bearer [ 301.429924][T11908] sctp: [Deprecated]: syz.0.1734 (pid 11908) Use of int in maxseg socket option. [ 301.429924][T11908] Use struct sctp_assoc_value instead [ 301.986211][ T979] tipc: Node number set to 1079229479 [ 302.875460][T11872] tipc: Disabling bearer [ 302.890053][T11905] dummy0: entered promiscuous mode [ 302.897511][T11905] dummy0: left promiscuous mode [ 303.107965][T11924] __nla_validate_parse: 5 callbacks suppressed [ 303.107988][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 303.204896][T11924] veth8: entered allmulticast mode [ 303.219954][T11930] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1739'. [ 303.269802][T11924] veth9: entered promiscuous mode [ 303.276433][T11924] veth9: entered allmulticast mode [ 303.589522][T11950] 8021q: VLANs not supported on lo [ 303.922223][T11971] netlink: 'syz.3.1753': attribute type 1 has an invalid length. [ 303.950558][T11971] netlink: 'syz.3.1753': attribute type 2 has an invalid length. [ 303.951988][T11973] rdma_op ffff88804b0661f0 conn xmit_rdma 0000000000000000 [ 304.032955][T11977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1756'. [ 304.075050][T11981] pim6reg: entered allmulticast mode [ 304.195828][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1758'. [ 304.309881][T11995] lo: entered promiscuous mode [ 304.352402][T11995] tunl0: entered promiscuous mode [ 304.417641][T11995] gre0: entered promiscuous mode [ 304.475928][T11995] gretap0: entered promiscuous mode [ 304.494925][T11995] erspan0: entered promiscuous mode [ 304.514111][T11995] ip_vti0: entered promiscuous mode [ 304.560944][T11995] ip6_vti0: entered promiscuous mode [ 304.583887][T11995] sit0: entered promiscuous mode [ 304.673764][T12012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1762'. [ 304.686113][T11995] ip6tnl0: entered promiscuous mode [ 304.696277][T11995] ip6gre0: entered promiscuous mode [ 304.709337][T11995] syz_tun: entered promiscuous mode [ 304.722324][T11995] ip6gretap0: entered promiscuous mode [ 304.758458][T11995] vcan0: entered promiscuous mode [ 304.775051][T11995] bond0: entered promiscuous mode [ 304.785057][T11995] team0: entered promiscuous mode [ 304.791445][T11995] dummy0: entered promiscuous mode [ 304.799319][T11995] nlmon0: entered promiscuous mode [ 304.807804][T11995] caif0: entered promiscuous mode [ 304.815764][T11995] vxcan0: entered promiscuous mode [ 304.823010][T11995] vxcan1: entered promiscuous mode [ 304.833930][T11995] veth0: entered promiscuous mode [ 304.850010][T11995] veth1: entered promiscuous mode [ 304.861600][T11995] wg0: entered promiscuous mode [ 304.869178][T11995] wg1: entered promiscuous mode [ 304.878164][T11995] wg2: entered promiscuous mode [ 304.884948][T11995] veth0_to_bridge: entered promiscuous mode [ 304.895051][T11995] veth1_to_bridge: entered promiscuous mode [ 304.907714][T11995] bridge_slave_1: entered promiscuous mode [ 304.920153][T11995] veth0_to_bond: entered promiscuous mode [ 304.936716][T11995] !€ÿ: entered promiscuous mode [ 304.943895][T11995] veth1_to_bond: entered promiscuous mode [ 304.956468][T11995] bond_slave_1: entered promiscuous mode [ 304.964338][T11995] veth0_to_team: entered promiscuous mode [ 304.977724][T11995] team_slave_0: entered promiscuous mode [ 304.985685][T11995] veth1_to_team: entered promiscuous mode [ 304.996115][T11995] team_slave_1: entered promiscuous mode [ 305.003860][T11995] veth0_to_batadv: entered promiscuous mode [ 305.016165][T11995] batadv_slave_0: entered promiscuous mode [ 305.029257][T11995] xfrm0: entered promiscuous mode [ 305.039391][T11995] veth0_to_hsr: entered promiscuous mode [ 305.056007][T11995] veth1_to_hsr: entered promiscuous mode [ 305.072154][T11995] hsr0: entered promiscuous mode [ 305.084763][T11995] veth1_virt_wifi: entered promiscuous mode [ 305.096791][T11995] veth0_virt_wifi: entered promiscuous mode [ 305.106925][T11995] net veth1_virt_wifi .: entered promiscuous mode [ 305.117669][T11995] veth0_vlan: left allmulticast mode [ 305.124529][T11995] vlan0: entered promiscuous mode [ 305.130007][T11995] vlan1: entered promiscuous mode [ 305.135742][T11995] macvlan0: left allmulticast mode [ 305.142551][T11995] macvlan1: entered promiscuous mode [ 305.150687][T11995] ipvlan0: entered promiscuous mode [ 305.157391][T11995] ipvlan1: entered promiscuous mode [ 305.175817][T11995] macvtap0: entered promiscuous mode [ 305.187004][T11995] macsec0: entered promiscuous mode [ 305.196010][T11995] geneve0: entered promiscuous mode [ 305.203292][T11995] geneve1: entered promiscuous mode [ 305.211833][T11995] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 305.219269][T11995] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 305.228741][T11995] vcan1: entered promiscuous mode [ 305.235888][T11995] macsec1: entered promiscuous mode [ 305.245336][T11995] bridge1: entered promiscuous mode [ 305.252627][T11995] mac80211_hwsim hwsim6 dvmrp0: entered promiscuous mode [ 305.261870][T11995] geneve2: left allmulticast mode [ 305.269843][T11995] netdevsim netdevsim1 eth0: entered promiscuous mode [ 305.277630][T11995] netdevsim netdevsim1 eth1: entered promiscuous mode [ 305.285432][T11995] netdevsim netdevsim1 eth2: entered promiscuous mode [ 305.293406][T11995] netdevsim netdevsim1 eth3: entered promiscuous mode [ 305.300870][T11995] veth2: entered promiscuous mode [ 305.306307][T11995] veth3: entered promiscuous mode [ 305.312516][T11995] bond1: entered promiscuous mode [ 305.318279][T11995] gtp0: entered promiscuous mode [ 305.325746][T11995] ip6tnl1: entered promiscuous mode [ 305.332753][T11995] mac80211_hwsim hwsim13 wlan2: entered promiscuous mode [ 305.342122][T11995] bridge0: entered promiscuous mode [ 305.348586][T11995] bond2: entered promiscuous mode [ 305.354319][T11995] erspan1: entered promiscuous mode [ 305.361288][T11995] vlan2: entered promiscuous mode [ 305.366743][T11995] vlan2: left allmulticast mode [ 305.374057][T11995] gretap0: left allmulticast mode [ 305.382434][T11995] bridge2: entered promiscuous mode [ 305.390174][T11995] ip6tnl2: entered promiscuous mode [ 305.395906][T11995] gre1: entered promiscuous mode [ 305.402407][T11995] gretap1: left allmulticast mode [ 305.410065][T11995] macsec0.5: entered promiscuous mode [ 305.416349][T11995] ip6tnl3: entered promiscuous mode [ 305.422214][T11995] veth4: entered promiscuous mode [ 305.428994][T11995] veth5: entered promiscuous mode [ 305.435112][T11995] mac80211_hwsim hwsim17 wlan3: entered promiscuous mode [ 305.443097][T11995] pim6reg: entered promiscuous mode [ 305.449406][T11995] vxlan0: entered promiscuous mode [ 305.493891][ T3582] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 305.514679][ T3582] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.627714][ T3582] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 305.649936][ T3582] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.666902][ T3582] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 305.676673][ T3582] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.711536][T12037] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1769'. [ 305.739432][ T3582] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 305.781643][ T3582] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 306.230522][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 306.238651][ C0] lec:lec_tx_timeout: lec0 [ 306.244621][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 306.329598][T12061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1776'. [ 306.515960][T12074] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1778'. [ 306.724404][T12085] netlink: 'syz.0.1781': attribute type 1 has an invalid length. [ 306.894255][T12091] bond3: (slave geneve2): making interface the new active one [ 306.907740][T12091] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 306.927081][ T49] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 306.960966][ T49] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 306.976743][ T49] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 307.087880][ T49] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 307.142532][T12104] tipc: Enabling of bearer rejected, failed to enable media [ 307.246866][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1788'. [ 307.345402][T12116] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 307.617507][T12129] netlink: 'syz.3.1792': attribute type 21 has an invalid length. [ 307.658716][T12131] netlink: 'syz.1.1793': attribute type 1 has an invalid length. [ 307.679809][T12129] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1792'. [ 307.707387][T12129] netlink: 'syz.3.1792': attribute type 1 has an invalid length. [ 307.740126][T12129] netlink: 'syz.3.1792': attribute type 4 has an invalid length. [ 308.488940][T12183] tipc: Enabling of bearer rejected, failed to enable media [ 309.176689][T12222] sctp: [Deprecated]: syz.3.1819 (pid 12222) Use of int in max_burst socket option. [ 309.176689][T12222] Use struct sctp_assoc_value instead [ 309.355150][T12231] __nla_validate_parse: 1 callbacks suppressed [ 309.355172][T12231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1821'. [ 309.373064][T12235] atomic_op ffff8880571ab198 conn xmit_atomic 0000000000000000 [ 309.574349][T12255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1827'. [ 309.895906][T12281] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1832'. [ 309.984422][T12285] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 310.116464][T12290] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 310.179212][T12294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.351278][T12302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1837'. [ 310.377120][T12302] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 310.406604][T12311] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1839'. [ 310.418210][T12302] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.428023][T12302] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.597975][T12319] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1842'. [ 310.848119][T12335] netlink: 'syz.0.1847': attribute type 4 has an invalid length. [ 311.079889][T12351] sctp: [Deprecated]: syz.0.1852 (pid 12351) Use of int in max_burst socket option. [ 311.079889][T12351] Use struct sctp_assoc_value instead [ 311.260520][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 311.268653][ C0] lec:lec_tx_timeout: lec0 [ 311.273597][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 311.783747][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1858'. [ 311.810490][T12379] netlink: 'syz.3.1858': attribute type 5 has an invalid length. [ 311.840306][T12379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1858'. [ 311.903725][T12379] geneve3: entered promiscuous mode [ 311.956198][T12379] geneve3: entered allmulticast mode [ 311.982760][ T49] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 312.010143][ T49] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 312.036862][ T49] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 312.070795][ T49] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 312.170347][T12392] netlink: 'syz.1.1865': attribute type 25 has an invalid length. [ 312.315157][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1866'. [ 312.634708][T12423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.766155][T12429] vlan1: entered allmulticast mode [ 312.800825][T12429] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 312.822737][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 312.866387][T12429] sctp: [Deprecated]: syz.3.1873 (pid 12429) Use of int in max_burst socket option. [ 312.866387][T12429] Use struct sctp_assoc_value instead [ 313.387712][T12464] tipc: Enabled bearer , priority 0 [ 313.403822][T12464] syzkaller0: entered promiscuous mode [ 313.412081][T12464] syzkaller0: entered allmulticast mode [ 313.444806][T12472] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 313.456791][T12469] netlink: 'syz.4.1887': attribute type 5 has an invalid length. [ 313.477680][T12464] team_slave_0: mtu greater than device maximum [ 313.525948][T12463] tipc: Resetting bearer [ 313.546883][T12463] tipc: Disabling bearer [ 313.568648][T12476] ip6erspan0: entered promiscuous mode [ 314.067417][T12503] raw_sendmsg: syz.0.1901 forgot to set AF_INET. Fix it! [ 314.298240][T12517] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 314.465099][T12525] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 314.533947][T12528] __nla_validate_parse: 7 callbacks suppressed [ 314.533990][T12528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1912'. [ 314.597882][T12532] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 314.698664][T12529] IPVS: Unknown mcast interface: nicvf0 [ 314.716231][T12529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1909'. [ 314.905422][T12546] netlink: 'syz.1.1915': attribute type 1 has an invalid length. [ 314.914320][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'. [ 314.983867][T12550] netlink: 'syz.3.1917': attribute type 1 has an invalid length. [ 315.141753][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1919'. [ 315.190944][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1920'. [ 315.311030][T12563] netlink: 'syz.4.1922': attribute type 1 has an invalid length. [ 315.423843][T12565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1924'. [ 315.810686][T12586] tipc: Enabling of bearer rejected, failed to enable media [ 316.122727][ T1077] block nbd0: Possible stuck request ffff888025185080: control (read@0,1024B). Runtime 90 seconds [ 316.134032][ T1077] block nbd0: Possible stuck request ffff888025185240: control (read@1024,1024B). Runtime 90 seconds [ 316.146035][ T1077] block nbd0: Possible stuck request ffff888025185400: control (read@2048,1024B). Runtime 90 seconds [ 316.167413][ T1077] block nbd0: Possible stuck request ffff8880251855c0: control (read@3072,1024B). Runtime 90 seconds [ 316.249360][T12606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1937'. [ 316.261205][T12605] netlink: 'syz.4.1935': attribute type 4 has an invalid length. [ 316.281096][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 316.289230][ C0] lec:lec_tx_timeout: lec0 [ 316.299911][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 316.549003][T12621] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1939'. [ 316.606788][T12620] netlink: 'syz.1.1941': attribute type 25 has an invalid length. [ 316.756964][T12633] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1942'. [ 317.009735][T12643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1945'. [ 317.530260][T12666] [ 317.532673][T12666] ====================================================== [ 317.539772][T12666] WARNING: possible circular locking dependency detected [ 317.546835][T12666] syzkaller #0 Not tainted [ 317.551269][T12666] ------------------------------------------------------ [ 317.558329][T12666] syz.0.1953/12666 is trying to acquire lock: [ 317.564486][T12666] ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 317.574583][T12666] [ 317.574583][T12666] but task is already holding lock: [ 317.581976][T12666] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 317.591610][T12666] [ 317.591610][T12666] which lock already depends on the new lock. [ 317.591610][T12666] [ 317.602076][T12666] [ 317.602076][T12666] the existing dependency chain (in reverse order) is: [ 317.611206][T12666] [ 317.611206][T12666] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 317.619136][T12666] lock_acquire+0x120/0x360 [ 317.624318][T12666] _raw_spin_lock_bh+0x36/0x50 [ 317.629724][T12666] nr_rt_ioctl+0x390/0xd50 [ 317.634682][T12666] sock_do_ioctl+0xd9/0x300 [ 317.639725][T12666] sock_ioctl+0x576/0x790 [ 317.644672][T12666] __se_sys_ioctl+0xfc/0x170 [ 317.649799][T12666] do_syscall_64+0xfa/0x3b0 [ 317.654863][T12666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.661300][T12666] [ 317.661300][T12666] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 317.669307][T12666] lock_acquire+0x120/0x360 [ 317.674348][T12666] _raw_spin_lock_bh+0x36/0x50 [ 317.679645][T12666] nr_rt_ioctl+0x193/0xd50 [ 317.684594][T12666] sock_do_ioctl+0xd9/0x300 [ 317.689714][T12666] sock_ioctl+0x576/0x790 [ 317.694570][T12666] __se_sys_ioctl+0xfc/0x170 [ 317.699689][T12666] do_syscall_64+0xfa/0x3b0 [ 317.704726][T12666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.711146][T12666] [ 317.711146][T12666] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 317.718996][T12666] validate_chain+0xb9b/0x2140 [ 317.724389][T12666] __lock_acquire+0xab9/0xd20 [ 317.729599][T12666] lock_acquire+0x120/0x360 [ 317.734635][T12666] _raw_spin_lock_bh+0x36/0x50 [ 317.739938][T12666] nr_rt_device_down+0xa9/0x720 [ 317.745314][T12666] nr_device_event+0x137/0x150 [ 317.750607][T12666] notifier_call_chain+0x1b3/0x3e0 [ 317.756252][T12666] __dev_notify_flags+0x18d/0x2e0 [ 317.761984][T12666] netif_change_flags+0xe8/0x1a0 [ 317.767445][T12666] dev_change_flags+0x130/0x260 [ 317.772827][T12666] dev_ioctl+0x7b4/0x1150 [ 317.777777][T12666] sock_do_ioctl+0x22c/0x300 [ 317.782991][T12666] sock_ioctl+0x576/0x790 [ 317.787876][T12666] __se_sys_ioctl+0xfc/0x170 [ 317.792997][T12666] do_syscall_64+0xfa/0x3b0 [ 317.798078][T12666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.804670][T12666] [ 317.804670][T12666] other info that might help us debug this: [ 317.804670][T12666] [ 317.814950][T12666] Chain exists of: [ 317.814950][T12666] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 317.814950][T12666] [ 317.828986][T12666] Possible unsafe locking scenario: [ 317.828986][T12666] [ 317.836696][T12666] CPU0 CPU1 [ 317.842072][T12666] ---- ---- [ 317.847436][T12666] lock(nr_neigh_list_lock); [ 317.852209][T12666] lock(&nr_node->node_lock); [ 317.859508][T12666] lock(nr_neigh_list_lock); [ 317.866715][T12666] lock(nr_node_list_lock); [ 317.871313][T12666] [ 317.871313][T12666] *** DEADLOCK *** [ 317.871313][T12666] [ 317.879470][T12666] 2 locks held by syz.0.1953/12666: [ 317.884669][T12666] #0: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 317.893483][T12666] #1: ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 317.903508][T12666] [ 317.903508][T12666] stack backtrace: [ 317.909427][T12666] CPU: 0 UID: 0 PID: 12666 Comm: syz.0.1953 Not tainted syzkaller #0 PREEMPT(full) [ 317.909452][T12666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.909478][T12666] Call Trace: [ 317.909489][T12666] [ 317.909499][T12666] dump_stack_lvl+0x189/0x250 [ 317.909526][T12666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.909547][T12666] ? __pfx__printk+0x10/0x10 [ 317.909574][T12666] ? print_lock_name+0xde/0x100 [ 317.909600][T12666] print_circular_bug+0x2ee/0x310 [ 317.909622][T12666] check_noncircular+0x134/0x160 [ 317.909644][T12666] validate_chain+0xb9b/0x2140 [ 317.909664][T12666] ? rt6_disable_ip+0x6b3/0x720 [ 317.909691][T12666] ? __lock_acquire+0xab9/0xd20 [ 317.909718][T12666] __lock_acquire+0xab9/0xd20 [ 317.909746][T12666] ? nr_rt_device_down+0xa9/0x720 [ 317.909766][T12666] lock_acquire+0x120/0x360 [ 317.909790][T12666] ? nr_rt_device_down+0xa9/0x720 [ 317.909814][T12666] ? nr_rt_device_down+0xa9/0x720 [ 317.909834][T12666] _raw_spin_lock_bh+0x36/0x50 [ 317.909855][T12666] ? nr_rt_device_down+0xa9/0x720 [ 317.909875][T12666] nr_rt_device_down+0xa9/0x720 [ 317.909897][T12666] ? do_raw_spin_unlock+0x122/0x240 [ 317.909925][T12666] nr_device_event+0x137/0x150 [ 317.909944][T12666] notifier_call_chain+0x1b3/0x3e0 [ 317.909966][T12666] __dev_notify_flags+0x18d/0x2e0 [ 317.909997][T12666] ? __pfx___dev_notify_flags+0x10/0x10 [ 317.910023][T12666] ? __dev_change_flags+0x4cc/0x6d0 [ 317.910042][T12666] ? __pfx___dev_change_flags+0x10/0x10 [ 317.910058][T12666] ? full_name_hash+0x92/0xe0 [ 317.910079][T12666] netif_change_flags+0xe8/0x1a0 [ 317.910098][T12666] dev_change_flags+0x130/0x260 [ 317.910126][T12666] dev_ioctl+0x7b4/0x1150 [ 317.910151][T12666] sock_do_ioctl+0x22c/0x300 [ 317.910175][T12666] ? __pfx_sock_do_ioctl+0x10/0x10 [ 317.910195][T12666] ? __lock_acquire+0xab9/0xd20 [ 317.910227][T12666] sock_ioctl+0x576/0x790 [ 317.910248][T12666] ? __pfx_sock_ioctl+0x10/0x10 [ 317.910268][T12666] ? __fget_files+0x2a/0x420 [ 317.910294][T12666] ? __fget_files+0x3a0/0x420 [ 317.910319][T12666] ? __fget_files+0x2a/0x420 [ 317.910347][T12666] ? bpf_lsm_file_ioctl+0x9/0x20 [ 317.910372][T12666] ? __pfx_sock_ioctl+0x10/0x10 [ 317.910395][T12666] __se_sys_ioctl+0xfc/0x170 [ 317.910419][T12666] do_syscall_64+0xfa/0x3b0 [ 317.910444][T12666] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.910466][T12666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.910484][T12666] ? clear_bhb_loop+0x60/0xb0 [ 317.910503][T12666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.910520][T12666] RIP: 0033:0x7fa4dcb8ebe9 [ 317.910537][T12666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.910553][T12666] RSP: 002b:00007fa4ddaa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.910572][T12666] RAX: ffffffffffffffda RBX: 00007fa4dcdb5fa0 RCX: 00007fa4dcb8ebe9 [ 317.910586][T12666] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 317.910598][T12666] RBP: 00007fa4dcc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 317.910609][T12666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.910619][T12666] R13: 00007fa4dcdb6038 R14: 00007fa4dcdb5fa0 R15: 00007ffcec531748 [ 317.910640][T12666] [ 318.262404][T12665] netlink: 'syz.1.1954': attribute type 25 has an invalid length. [ 321.310458][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 321.318619][ C0] lec:lec_tx_timeout: lec0 [ 321.323464][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 321.400189][ T5233] udevd[5233]: worker [6718] /devices/virtual/block/nbd0 is taking a long time [ 322.522968][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.330795][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 326.339048][ C0] lec:lec_tx_timeout: lec0 [ 326.343594][ C0] lec:lec_start_xmit: lec0:No lecd attached