last executing test programs: 6m26.132329442s ago: executing program 4 (id=9938): syz_emit_ethernet(0x56, &(0x7f0000000200)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 6m26.108417768s ago: executing program 4 (id=9940): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="40000000000000000000000000001d0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x700, 0x7800, 0x80000000, 0x0, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x65, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x17, 0x81, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x10, 0x4c, 0x0, 0xe, [0x7245f000, 0x9, 0x7]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newtclass={0x3c, 0x28, 0x38, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0x3}, {0xfff3, 0xffff}, {0x1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x71, 0x4}}, @TCA_RATE={0x6, 0x5, {0x4, 0xc}}, @tclass_kind_options=@c_cbs={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000008f3b6798e1557313509b7b2d94211400030f00000000020000002c00000015d6e1bb993b0bb8b4c735d275e970149083855915d11090b03b1e3cebf140c9d2b95263f13f2a79043a29ac07000000eaa2e68f4b6105bf77e4d1133f370844593a502b540a24"], 0x14}}, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe6fe1c00aba695d9, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000854000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000107010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000000000000000a00000000000001000000004902173f92d965fa4109782fbb61729f9bc49860cf5b631bce424795860463362511aace4f65b16a74bfe9d63c48838f8ab847c88cf72de556a2f5479349dc17119b4a035c6dfecaf45fbce601959e685ae90a5f9de9e2362c733bd5c93cb5f4d7a21000d02cab6c7958478aa513d601517f5640b5984162a1"], 0x1c}}, 0x0) 6m25.995745003s ago: executing program 4 (id=9943): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x48010) 6m25.676238504s ago: executing program 4 (id=9946): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x38, r2, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000240)=0x80000000, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r7, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0xd1383000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000140)={'hsr0\x00', @local}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r6) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYRESHEX=r9], 0x6b}, 0x1, 0x0, 0x0, 0x44000}, 0x240080a4) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 6m23.378503856s ago: executing program 4 (id=9964): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x2000000000000126, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000300f5000000007110ab0000000000000000000000000044f8b9d930dfb6731e7747f579eaf3bbe0542ed63b7b0f12853e89ecfa"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="186200000f0000000000000004000000850000005b00000018210000", @ANYRES32=0x1, @ANYBLOB="00f90000c101acc6e32259883fcdf8ff"], &(0x7f0000000080)='GPL\x00', 0x1ce, 0x4e, &(0x7f0000000240)=""/78, 0x41100, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x4, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{0x2, 0x5, 0x0, 0x5}, {0x4, 0x2, 0x2, 0x8}, {0x4, 0x4, 0x9, 0x1e}]}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="e9283786da69946d19f846be3e4a55a08feb012dbf5655bc7b94b133c31493992f6907a7b7ec2c0064da7a2d40496a4e371ba86450db21efc0ad13eb3ee06b993ac131a1b048ddf7d63c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000640)='./file0\x00', r0}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYBLOB="4f8f6fb155c104319a7d3a47f0b428fa787a3143e9bf0368a62753df7722bca7d098d9242ee07908bd9cf622d1d539d1c521dfdd800cb0061f336790d00d27a52aa1ec0762056fd0fbbbafbb3d2427cac8f8d91dc6ee810604708f3d97a35d9027b95f0143bb5c29779542781bee31cfe60673616d0e3669221bfadbd9aca089f7fde5495ac0adcc2be344e17fa0c0d2031acddbb31540db25b80d2b6460cfb04ba733f75ae1b220659bb7876b0b740b963ba61ac0d386547fb66d53ffa731e2e3571baa955e55b785542c5b4a9865", @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000400000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x4000040) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2450c500", @ANYRES16=r6, @ANYBLOB="010000000000000000000700000008000400e000000108000500e0000001"], 0x24}}, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000540)={@random="fb57e76be621", @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@x25={0x805, {0x3, 0x2, 0xf}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000008000140000000002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32000000001400000011000100"], 0xb4}}, 0x0) close(r3) vmsplice(r0, &(0x7f0000000580)=[{&(0x7f0000000440)="4fe920aa28aed4cc94fe88ea3b4ba9711e18edbe220618dfae48b188b9ab888059ca5bf434c9ac0858dbd117df3da70253007416fc1dcfe065e4de11e3fd13dbc39fbe1fd8274859a5f77109932a7df8b8d2336161c8cf69d3b901bd8fc823090736a761fa0559a5b9858e8a32c65b83d94779d12d2ec74b9f88e134796a2117ecc4e70c4ea2f332db949746bb45591a63e3ef25eb1b33758cd68693b42730eecaa03b83c5d14ce558ee241fd06206541f879bf55ae1534236f211c7914de410a6e26ac3e057e59aeff12994622cda", 0xcf}], 0x1, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=r2], 0xd4}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4fcf6e3c7d702fcf}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)={0x1c, 0x0, 0x200, 0x5, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c842}, 0x200040c4) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) 6m23.232999666s ago: executing program 4 (id=9967): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) (rerun: 32) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) (async) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x4000) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async, rerun: 64) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x11}}], 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000080)) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1e, 0x80, 0x1, 0xf, 0x20020, r4, 0x68, '\x00', r5, r6, 0x0, 0x0, 0x5}, 0x50) r7 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r7, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r10, &(0x7f0000000280)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)=[{&(0x7f0000002840)={0x1438, 0x18, 0x8, 0x70bd2c, 0x25dfdbff, "", [@nested={0xaa, 0x2d, 0x0, 0x1, [@generic="fd7a466d6b5e1c72e54556c5ece1a08295127222704e42ac1fd5f1d7e08d01a677e6fc196cae4237173f0e454624280eab0c73166fcbd0de41389edb786edd9f2c1e6edc8db3570d1cb1622413206f8ccee28e66272d8799576b6bdcd932c612135f008e444620d18e367ff39d7614a51dfa00a324fcfc176d038872c27c562d60da57747d9d92079693063aa7339c4736360ff4b99f3f25069ae55071030687f627cb1698bc"]}, @nested={0x4, 0x10a}, @generic="b6797495a78a81e3e5ca6423b01314eefa149e83efefa0a9104be844e87d34e6234f7eba870cb6e6901256c30d4239cce6294baf42c07f63d2d8ed845740223a4822c46be71a87ec4798793dcb0955d33cdc", @nested={0x37, 0x56, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @fd=r3}, @generic="d3a8396354ae41846129508ed5e9ab9d21effb", @nested={0x4, 0x34}, @typed={0x8, 0x4eb, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x42}, @typed={0x8, 0x3d, 0x0, 0x0, @fd=r7}]}, @nested={0x201, 0xdc, 0x0, 0x1, [@nested={0x1f, 0x5b, 0x0, 0x1, [@generic="beacc4be60f65a1598f5f989a7b2899ae8cf5ec2ca6d8ff00738d6"]}, @generic="ef89b16afd7a3138bc3ced6077c2ca811260d45f7467e8", @nested={0x4, 0xaa}, @nested={0x4, 0x147}, @generic="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", @nested={0x4, 0x1}]}, @generic="e85c5353fc1ad202213e77347b6045fc77a9f71f4470382264d4047223706c7c6ac137666e44c4d8eb34bc4e2cb900c226cc7a65536419bfb33dff495a495a285fe7987184c009c75cc28c1c2bb4f76b97b755f4", @generic="9b53911bfef6ee620447fe24490d4584029cc14929009632354611ef048c39be019906f62ab88e3b599345cc220ae8187bb910e04b8190167cfb68568e452d60d33eef7180c80ad642058f2b3ec1a23721e36f0b1ab3e22ca9b8a2d8a92dbaa40172b1276cd75c91e70e392f619cd071b04b6bb96949c98a87414ab2bb421985658b", @typed={0x4, 0x53}, @generic="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"]}, 0x1438}], 0x1, 0x0, 0x0, 0x4000080}, 0x4044080) 6m8.099234598s ago: executing program 32 (id=9967): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) (rerun: 32) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) (async) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x4000) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async, rerun: 64) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x11}}], 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000080)) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1e, 0x80, 0x1, 0xf, 0x20020, r4, 0x68, '\x00', r5, r6, 0x0, 0x0, 0x5}, 0x50) r7 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r7, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r10, &(0x7f0000000280)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)=[{&(0x7f0000002840)={0x1438, 0x18, 0x8, 0x70bd2c, 0x25dfdbff, "", [@nested={0xaa, 0x2d, 0x0, 0x1, [@generic="fd7a466d6b5e1c72e54556c5ece1a08295127222704e42ac1fd5f1d7e08d01a677e6fc196cae4237173f0e454624280eab0c73166fcbd0de41389edb786edd9f2c1e6edc8db3570d1cb1622413206f8ccee28e66272d8799576b6bdcd932c612135f008e444620d18e367ff39d7614a51dfa00a324fcfc176d038872c27c562d60da57747d9d92079693063aa7339c4736360ff4b99f3f25069ae55071030687f627cb1698bc"]}, @nested={0x4, 0x10a}, @generic="b6797495a78a81e3e5ca6423b01314eefa149e83efefa0a9104be844e87d34e6234f7eba870cb6e6901256c30d4239cce6294baf42c07f63d2d8ed845740223a4822c46be71a87ec4798793dcb0955d33cdc", @nested={0x37, 0x56, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @fd=r3}, @generic="d3a8396354ae41846129508ed5e9ab9d21effb", @nested={0x4, 0x34}, @typed={0x8, 0x4eb, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x42}, @typed={0x8, 0x3d, 0x0, 0x0, @fd=r7}]}, @nested={0x201, 0xdc, 0x0, 0x1, [@nested={0x1f, 0x5b, 0x0, 0x1, [@generic="beacc4be60f65a1598f5f989a7b2899ae8cf5ec2ca6d8ff00738d6"]}, @generic="ef89b16afd7a3138bc3ced6077c2ca811260d45f7467e8", @nested={0x4, 0xaa}, @nested={0x4, 0x147}, @generic="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", @nested={0x4, 0x1}]}, @generic="e85c5353fc1ad202213e77347b6045fc77a9f71f4470382264d4047223706c7c6ac137666e44c4d8eb34bc4e2cb900c226cc7a65536419bfb33dff495a495a285fe7987184c009c75cc28c1c2bb4f76b97b755f4", @generic="9b53911bfef6ee620447fe24490d4584029cc14929009632354611ef048c39be019906f62ab88e3b599345cc220ae8187bb910e04b8190167cfb68568e452d60d33eef7180c80ad642058f2b3ec1a23721e36f0b1ab3e22ca9b8a2d8a92dbaa40172b1276cd75c91e70e392f619cd071b04b6bb96949c98a87414ab2bb421985658b", @typed={0x4, 0x53}, @generic="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"]}, 0x1438}], 0x1, 0x0, 0x0, 0x4000080}, 0x4044080) 9.257360141s ago: executing program 5 (id=14004): r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000380)={0x0, 0x70}}, 0x4081) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0xc804}, 0x4004800) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) (async) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x5}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f00000002c0)=@ethtool_stats={0x1d, 0x8, [0x10, 0x81, 0x101, 0x0, 0x3, 0xf4, 0x100000001, 0x4a7e]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) socket$kcm(0x10, 0x400000002, 0x0) r6 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r6, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000040)={0x1d, r9}, 0x10) (async) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000680)=[{{0x4}, {0x4, 0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x8}, {0xb, 0x1}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) (async) r11 = socket(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000180)=""/2, 0x10000, 0x1000, 0x1000, 0x1}, 0x20) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r8], 0x1c}}, 0x40) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xff7fff, 0xdbe, 0x8, 0x5}, 0xfffffffffffffe8f) 9.024570739s ago: executing program 5 (id=14007): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@local, @local, 0x0, "5457d4f6312ffb25a15dbc00106391ca634e51cd171743a65c18513011cc513e", 0x1, 0x3, 0x8, 0x7fff}, 0x3c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000001400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001440)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001500)={0xf9, 0x0}, 0x8) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001540), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/209, 0x0, 0xd1, 0x1}, 0x28) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r9], 0x48}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001600)={{0x1, 0xffffffffffffffff}, &(0x7f0000001580), &(0x7f00000015c0)='%pB \x00'}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@bloom_filter={0x1e, 0x3ff, 0x7, 0x9, 0x4881, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x6}, 0x50) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000016c0)={0x0, 0x3, 0x18}, 0xc) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000001880)={0xffffffffffffffff, &(0x7f0000001780)='\x00', 0x200, &(0x7f00000017c0)={@_ha_fsid={[0x80000000]}, {0x1, 0x6, 0x7ff, 0x7}}, 0x88, &(0x7f0000001800)={@_ha_fsid}, &(0x7f0000001840)=0xa70d}) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x16, 0x28, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x7, 0x1, 0x1, 0xb, 0x9, 0x20, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x91}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x1000, 0x1000, &(0x7f0000000400)=""/4096, 0x41100, 0x2, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000014c0)={0x5, 0x8, 0x1, 0x1fa}, 0x10, r6, r7, 0x0, &(0x7f0000001900)=[r11, 0xffffffffffffffff, r12, r13, r14, r15], &(0x7f0000001940), 0x10, 0x5}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000710"], 0x1c}}, 0x0) 8.961833643s ago: executing program 5 (id=14008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f0000000b40)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x14, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x81}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 8.790291456s ago: executing program 5 (id=14009): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3100001400000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x67, 0x2a79, 0x9}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=0x1, 0xe, 0x1, 0xe, &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000ac0)='memory.pressure\x00', 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x528d51e02008d598}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x9, &(0x7f0000000680)=[0xffffffffffffffff], &(0x7f00000006c0)=[{0x0, 0x3, 0xb, 0x5}, {0x2, 0x2, 0xd}, {0x0, 0x2, 0x7, 0x2}, {0x2, 0x4, 0x8, 0x9}, {0x1, 0x5, 0x4, 0x3}, {0x3, 0x1, 0x9, 0x4}, {0x0, 0x5, 0xa, 0x6}, {0x4, 0x1, 0x4, 0xc}, {0x3, 0x4, 0xd, 0x6}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup=r5, r3, 0x22, 0x4, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x18, 0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0x1}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [0x0, 0x0, 0xff000000], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="650309"], 0xf) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c00), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r11, @ANYBLOB="000427bd7000ffdbdf25070000000500010001000000140006007465616d5f736c6176655f3100000000080005000a01010214000200fc000000000000000000000000000000050001000100000014000200ff0200000000000000000000000000012600070073797374656d5f753a6f626a6563745f723a74657465785f646174615f743a73300000000500010001000000"], 0x98}, 0x1, 0x0, 0x0, 0x4040090}, 0x4000081) unshare(0x2c020400) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r12, 0x2}, 0x8) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r13, &(0x7f0000000540)={&(0x7f0000000440)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000c14}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x2c}}, 0x4000884) 7.839450606s ago: executing program 5 (id=14023): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) 7.70060041s ago: executing program 5 (id=14025): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x3, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x81}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}]}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x27, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100004000"/20, @ANYRES32=0x0, @ANYBLOB="041004000000000008000400f903000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x44004) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0xc000) 2.396552505s ago: executing program 2 (id=14062): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x52}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000440)=@ringbuf={{}, {}, {}, [@jmp, @cb_func, @ringbuf_output]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, r0, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)='%pB \x00'}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x6, '\x00', 0x0, r0, 0x1, 0x5, 0x1}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x81b21000) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}, @generic={0xfe, 0x4, "7701"}]}}}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x13, 0x6, 0xdf89, 0xce, 0x20001, 0xffffffffffffffff, 0x6, '\x00', 0x0, r0, 0x8, 0x1, 0x1}, 0x50) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x21, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @exit, @call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x96a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x7, 0x5, 0xec4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r3, r4, r5, r6], 0x0, 0x10, 0x6}, 0x94) 2.308711994s ago: executing program 2 (id=14063): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00'/11, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000108626f6e6400000000181a96ac6d83000276140008800054a52db300030001", @ANYRESHEX=r0], 0x48}}, 0x8850) pipe(&(0x7f0000000140)) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.204367171s ago: executing program 2 (id=14064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x48140}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a1400000011000100"], 0x70}}, 0x0) 2.179961007s ago: executing program 2 (id=14065): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x6, 0x8}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@private=0xa010102, @multicast1, 0x1, 0x1, [@loopback]}, 0x14) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=""/114, &(0x7f0000000100)=0x72) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000140)=""/102, &(0x7f00000001c0)=0x66) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000002c0)={r3, 0x9}, 0x8) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000300)=@netrom={'nr', 0x0}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x270, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0x44}}}}, [@NL80211_ATTR_FRAME={0x22a, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x1, 0x1}, {}, @from_mac=@device_b, @device_a, @device_b, {0x0, 0x8}, "", @value={0xf, 0x1, 0x0, 0x0, 0x80}}, @a_msdu=[{@broadcast, @device_a, 0x1d, "13b0b6bc28349b6dde353596e9c2ce3d4fc5aa70a1a463a6be04ddf3a8"}, {@device_a, @broadcast, 0x39, "e60541c31dbd28234a64a3e189b782e5d59f9358279d9401012ac32e3c382240790c5c52a4e77013a7c700c5f8a48add5e0ae34a1d4a40df59"}, {@device_a, @device_a, 0xe0, "33a9a8e195938343f02f10d6c569ecbbb771be4a57fadc05a80134ca5b6723813e13d61dd47bee81d10104bd2915ae840c05630869656d0a65aaad9664e2987b56b446498347f5a03d92f86ed367e742df21fe547098982b5ca1b78464f16b5a068bbdf32d2786ba8979106ebb7bc77bb61d3c1c7b7559b90ca1a6a12c744aef6f535633550c7061af17f02a725d7e655e4d7f0851e912474fa1a7dc9cccda602b930315c4bc7ad651613b561c836cfc8e64f83fe8bc8632a1e6cfdba84e16d51c94caec1066b7d8d9b2141f5cd5b06abc7f78834dc6028152d5a04c59482873"}, {@device_b, @device_b, 0x9a, "023b03fad973d9b3d9a4f6d01ff3288656edc196e4172c0927dbdc21e86eac0aaa03e270855e175bb6277678fd98ebd054a73f6ae4a87fbe5b1d0be9229d1835bd01280c0ca891bdf1b3ae8aa6937b19ae4a7fb286df2a1fb918c3bb0112fc06960bf183b8e791338f733abdeec5db6d4fce7d5224cc1c48217de16c526951f16b82733b718fe7e10be044f5905d046ca7c0bfaa076301e5a972"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8}]}, 0x270}, 0x1, 0x0, 0x0, 0x84}, 0x20000880) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r1, 0x89e7, &(0x7f0000000700)="7dc4e394f755e85b3a56cce28d5e78d51071d0f58f3a97ca14e3d0a9e5af8b882e741a4cc3f3eaa91a70ae191dab4e67892e893c0b03deec2d29377ff11117c5fc9308f2e3613ca6c26c0873b7c81629c6a00eaabc8020f0e6ace70c887601ef66229987f1207e106846de7106") getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000780)=""/102, &(0x7f0000000800)=0x66) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000840)='wg2\x00', 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000880)={r3, @in={{0x2, 0x4e20, @multicast1}}, 0x7, 0x1, 0x2, 0x957352e, 0x14, 0x1, 0x4}, &(0x7f0000000940)=0x9c) r9 = socket$kcm(0x29, 0xf, 0x0) sendmsg$kcm(r9, &(0x7f0000000d40)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @multicast1}, 0x2, 0x1, 0x3}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="a135be291543f5f51209bfc6ae3b9b29836326403b42a899e0b348a9aca2baccb8149917d234544b2c8ab0d723bba375f2cc10023979c2846076f010d9d46d63753797d47e4fa3aecdfca0f9d6f3e81b09cd51ad9adbf3f64affdf52065266fb173f3ef61500f2fefebdf75c36f74670aa155494c4ce634bf7f7b90816848029236848c870d62bd943be13f85bc518eec364", 0x92}, {&(0x7f0000000ac0)="d3885bbcf853a65dfa6873218c793b7e90f45767b45b4938f4b8a6cdd2d1c0e0f8f392a678e05f1ddbcaedd2a1ab045ce2a9d9437b698246abf7e9f3b195564fcb2791601a21a5876ed11bfd82a0719074f568ff329970fe82a3737a92169dbf7fad40a57d7ae8d8b2145be8ba4102e98870046b52e742db2793b488af7c631c0ca862f65055737ce03dea869caabe77132842dd9a0ea517b2574ec825915dfb672baa3387c507a3064902edc8dc81d32f09fc1c2b8bd3e083ba1ceffe660beeca139698771710a7ef10946970568037", 0xd0}], 0x2, &(0x7f0000000c00)=[{0xf0, 0x111, 0x8, "3cd1fe07e4543ba4806465a9ae0e86d4dbf4a26e8ae46be7dd66f0230cf72b13cf6a62f8c84b58532659d7cccc02d0eb9fff2411f611c21166ba3c046a694632fafb6f2171a665a14d3a5aeb9da4ee55ed0e663a3c3bc208fbe9c698b4b383143158107c0da4313ac332949d636aa0c69ad7ab1b14e52818b140a0abc1e0421434151dc65fc856f6013c363acc0208c9e327ae4645e12b743e51451ec4f55ce5b323c71959afa94048442d7a51c0b137ca64afb1308219e7fff57d65684baa45640848d85e6b5a86b2b6838d0af6f50ce3b0c8bc98efd97c0e936185"}, {0x30, 0x104, 0x9, "a3b08304aff1165b52ad287b4ee3c025a0583dc64b421893f790b1"}], 0x120}, 0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000d80)={r3, 0x303}, &(0x7f0000000dc0)=0x8) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r6) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f00000010c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000e80)={0x1dc, r11, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "d1dd7cbf0f3a091ee26dbb4fb2a5111dc67cb2403930eee09ad4d989c420a2d9eb"}}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffc00000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffdb88}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d6}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), r7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001180)={'veth1_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r12, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x5c, r13, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x4040801) 1.460333082s ago: executing program 1 (id=14067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010200000000fbdbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900070000002a0000001400040070696d367265673000000000000000000500530000000000"], 0x44}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r5, 0x309}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xfffffffffffffe32, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.450110181s ago: executing program 2 (id=14069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00", @ANYRESDEC], 0xc0}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/85, 0x55}], 0x1) 1.272334602s ago: executing program 1 (id=14071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8000000000000000, 0x3}, {}, 0x0, 0x0, 0x2}, {{@in6=@loopback}, 0x0, @in=@remote}}, 0xe8) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0xe, 0x4) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x24008000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x24}}, 0x44084) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="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"], 0x9fa8}}, 0x0) 1.244735353s ago: executing program 0 (id=14072): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x2) shutdown(r1, 0x0) (async) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f00000001c0)={0x70000000}) (async) r5 = accept(r1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) (async) sendto$inet6(r5, &(0x7f0000002240)='\x00', 0x1, 0x400440e9, 0x0, 0x0) (async) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x5, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e) (async) getpeername$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r9, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'}) (async) getsockopt$ax25_int(r8, 0x101, 0xc, 0x0, &(0x7f0000000080)) (async) r11 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r11, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r11, r7}) 1.185031524s ago: executing program 3 (id=14073): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000027bd7000ff902ccba82ecf07bd0099000300000068000000"], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x5c}, {0x6}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2d, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0x1, &(0x7f0000000100)="11317691bdd47b8e5bd19ef74581c7a3b0bfb0a4fd597836d851a7eba83113d4388104c6d86ec516fb29b7266481be3cc72cc2fa143c8a1d0f90415c8825ba930b3cff00b6cd80968ce3e03e22c8cf0e3e4e70234dae41655bf7f1c5f7643daeac2e355ac28d2ecb7f01595032733a25e7830689820156b820ff687a28a58eda89fb3001e04105c4d18f53d10e1b7ecc", &(0x7f00000001c0)=""/101, 0x4}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x412}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x240}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x6, 0x5, 0x6, 0x0, 0x81, 0x1]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20008001}, 0x4004000) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) 1.080217162s ago: executing program 0 (id=14074): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="580000002e00010026bdf000fcdbdf250400000004000d80"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x68, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x816f4, @ipv4={'\x00', '\xff\xff', @empty}}, @in6={0xa, 0x4e24, 0xffffff81, @remote, 0x7fffffff}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000180)=0x10) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{&(0x7f0000000040)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="013b48aa84ffd8b592ce6672a5373cfa386348d9126213722cdf624cd55a52a10cbc4861f3eb78d7c453d06281cc05a1d22131dff00d0ce17278387f48523a265fd1aeb8d497c526a11c6052e4db011a7b4c5cef574b345bdb4de52634c670115703347b143bd6a1b7b4d3708ab211000c10ec3a71e55a89a7c5d0e42d4bc399edd65bd067cf285f9a68e58156fed1470e5798dce3a0c2bf14cd63dd43aee900cd7b5322a1", 0xa5}, {&(0x7f0000000340)="09cb06fd054b3c075fe715d20f367d265f783ae49cd0f9d682e9364b680164058643f23414868745b6d81260badbb2b204a87fe133bfbccad2b0c52edbae440427bf1eb8b675fbc343e11c58a5", 0x4d}, {&(0x7f00000003c0)="3fe7c2fe47e25e1251bbba41ca2fe7847239d46cab25ad2f9f4596a5a8f09eb6f987d7220aa5c8b7345d974a13574b729d8d1158f40def46c47e56ad1200dc6d1597d49495bb42ae3080d6d7d274393117f68511a3132032623033315e15ba635f85734ccbcbf23076c3f6e97fb93f9c1f7bb50f4059b098800640b6071ebf56ead1c5c9ccd470", 0x87}, {&(0x7f0000000480)="5519130615d5a0b5f5e2143bc07c505e0291f64523a373e642f7f611861bfcf7ceecac2577869f6d020db828a690d6b2996e25dc464070d12b20b45a4cc056b8dc74346fd5082d153b121d6e329f07459ce485166fe198265c3abce835faa80e34fea8ed0fc8fa6793c20a9c0493c004ed9beb6db567fb0344f3e94a4777e3a8b74b6938e4c16710db91ce01a041ba002537bac99964a347d0257d36e04549806d6ea4b5ff26062c0f5fafb665175ee130", 0xb1}, {&(0x7f0000000540)="bf50b337aa41b22562cbe41100d4751132b7f97a9633f9fb80bc5867e3228694efdb7003bdf98cf7b8216dabdbb83037ca4d31c5f7188408c52a94be9c094c932c6b7c81c88a6a93fbbd55c86833a27ff683aaba344795d17543f02191462620e8884dd8353e354f61204dff17d728bb6bc5bfd43826d3f72c0268", 0x7b}, {&(0x7f00000005c0)="38e08052d4859336d3283afd940b2eadaafb7dfdf44442b6d3c55a58d042f34d598ff87dce", 0x25}], 0x6, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x4066}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000700)="13278f2441bbbf330100493f2651", 0xe}, {&(0x7f0000000740)="7bc682e75f433aa1f47861c8d8222af04c8e381ecf1fa7957be4ab047c971e5ce1274a576704cf860d431f6c8038c724100cd73d80e70fd2f060b6aee9a6ad0069a5af6598729fbb79de16580ed17813a8ad526e196214446f691e39275767045184a9cfedc3d509e802be4cc0fa882c08b0609706caf98dd9bd9859dabf3bab757b347eed0b1b7e4fc903d780a6c4c7f863ba6051007ed3ead8525581c451813176ece31fca4a322004f1c528a2c55e4266df787d9fcd8995d49084c0ba04d4c135cc695268ceba0d0e8a44944a09265b07546f649932c4e00fa41e5c587f78f50b49d751e9f18b759ec4bfa92b3b202e973d16f14c9099", 0xf8}, {&(0x7f0000000840)="16857384a7824d6b6a812c905e22b4a48be6a75f3c6daf3557f08c5875b411e79468df68c7d5d1a4a8ff684604d037cce0ff25a5535b8914591f626c624918df23ff403db5bffc7a8da47bea54c5d9abfe26cc4e644cd3de9327ff827a4d47dfb699c8d29e4a6277ebd2bca9e469eca0ff7f71d8d472f539a9f5f4f0e46897b823631edbb854012b20e7ba02a3cf8ce2fb25bfd03c80eb8c6635e686b1b248c48394d90da8ea7ff8a93bc1033ccd76d00a77ef6f2c3961aeb7315090414aa40db7f0bd6162688ef90be3f9209614ff688b4215836d0863b5c2edfd230201a3e0ff87856c9b6c82273cf8b1716702165e053ea958974f1ec7b59d10bd2ab248", 0xff}], 0x3, &(0x7f0000000980)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x90}}], 0x2, 0x4000) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000012c0)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000000300000048000000910076657468305f6d616376746170000000626f6e6430000000000000000000000070696d7265670000000000000000000067726530000000000000000000000000ffffffffffff00ff00ffffff0180c200000100ff0000ff006e0000006e000000ef779e00000000000000000000000000000000000000000000000000000000000000000000000800000000000000fcffffff00000000000000000000000000000069c787fb00000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000fcffffff0000"]}, 0x1a6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={0xac, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, 0xac}}, 0x40004) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x238, 0x258, 0x258, 0x238, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x20}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x368) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) 1.079964007s ago: executing program 1 (id=14075): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000001100000000ff0000080001"], 0x20}, 0x1, 0x200000000000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 952.3216ms ago: executing program 1 (id=14076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) socket$unix(0x1, 0x1, 0x0) (rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xb3, 0x0, 0x5, 0x8}, 0x8) (async) sendto$inet6(r3, &(0x7f0000000140)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x4040080) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async) r7 = socket(0x28, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@gettfilter={0x34, 0x2e, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xa, 0xfff2}, {0xfff2, 0x7}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20005800) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000180005800c00028008000400de12e18e0800000075647000"/38], 0x2c}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r12 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001740)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) socket$nl_route(0x10, 0x3, 0x0) 903.526399ms ago: executing program 0 (id=14077): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000005400000054000000020000000900800006000013010000000900000006000000040000000e0000000900000000f8ffff050000009dfffffffdffffff0d0000000f000000b2b400000600000008040000790b00000b000080d7d30000010000800000"], &(0x7f0000000100)=""/141, 0x6e, 0x8d, 0x1, 0x7}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6(0xa, 0x1, 0x6) socket$caif_stream(0x25, 0x1, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@empty, 0x4e22, 0x0, 0x4, 0x8, 0x2}, {0x9}, {0x0, 0x0, 0x0, 0x200000020000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0xffffffff, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffd, 0x4, 0x0, 0x0, 0x3, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) 824.863407ms ago: executing program 3 (id=14078): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="0cae4092", 0x4}, {&(0x7f0000000040)="7bda1325738e337f0c03bf136029a1e00b667a451bacb4b2e3b8ff07d96f6dd022f64d71a19107f53ce15cab28559b2101bf34b7326f75dfeda2340cd9a3d0b597b25ba5494d1bbf081658fde7e896accfd79818151b4689ea37da025db418dacd10b94d7daf4b41f98766109051b2890b9160474af25e1f39b54eb9c0df342626f70da5c79e91c47252aa387be9a857fb44de20d92c7046e4daaec8080fb32c2f23ea05783098df5ae86708771d3740c5e9c25a6b04ccec0cca2ddd91db4cde5a678672d4b99e72520c69adbcfaad64a4b876040935aaf8fa4e803d5e5464c68128c309722b5a4077ff", 0xea}, {&(0x7f0000000140)="f291af8c14e38516032fbf99c6d779b43afa4c549ddfe378d966626a645394aed18c8debead682d762e23b654a8ee5b72cf7d3b826044ce2c749715099540e5709720a95829cdebc2bb6a86350a7e878d1be7026384d474dcae0c525c0431b08258bbe13963db074b09a3e7aeef0ecda30c23b7e24a4f1e806d1ac8f7be79a205b1a5f55939d864de8b1a4ef140b9560fd65df2c1ec383fc", 0x98}, {&(0x7f0000000200)="d46cfe2c1d3c7c8b94804bba050cf64561acf900a23e4acc71ae75936c8279ce7b8cae9ed6232b1c62cd58004adb5e1479a93470648999d15d07b01b193b45641cea2bf817a8037dc4f8737cdb1d162db4e8daf885472f50c9f933cbe8132ab1749e7b9a37c9324bb328", 0x6a}, {&(0x7f0000000280)="2edb4778511c56affbfa036f0d48664c7caf28508845d72e2f2930219d23a34764313f11047ebed3bb9b2c34277f6b8e01ee5e852b463c7537acbdb4d94b270601b6ac25712ac40bc5f939215436a60452f806b983545ce2ada11f3ee31675c26580e4d2d400d6213b0f069827bcb13ea72fa642390150167b10cea2f86abf9e9db9b5648f83c00a8d2c3d55a3053f1854dded864cbf33ebfc1f679e61d6f5f372719c0c0979d7cfedf1143eef26940820cbfe5cb9a9e1e839ea", 0xba}, {&(0x7f0000000340)="c68baeb20c6306558f", 0x9}, {&(0x7f0000000380)="fdf82c1c1bd5b0961c579bdfb9c4c11613a462bd4efb0d785b7e196ba3ebd84bcf2975d29e3b1a6ce288805f2056e22e9e2b94a7190cf8595a0f8b236783a9eaf5616f9e2ec576530d362fe05a9474e73bbfec3167b46b1969bcf37d66d6b27b0d8498a80ff75ce6d6834c7bb23ab8812040e5ab2c88a038fae9ac0668a491dafe2ee578e3bd5360422dac2e64c2b79c74854e04da4daa341291cc90fc0897dcfaf6bc1dc68f4f29c8ea482669aea7aec8faf16eaa941320e295f1d11fb87d0d4fc9f4a6444d86e70e0a4eb99edbca7d98c1bff281c26bcefd403e2e343705a96d459feba923c0d337975c502581fc", 0xef}, {&(0x7f0000000480)="ab7b9f9b44", 0x5}, {&(0x7f00000004c0)="ed4da68411ab75693e48fbaf91805f9bdeedf0af686d4f528ccaa368bd613b0c6ba7741ac227f53fc325414a8dbce22feb1897c02754d763aac08da34710b243357a5fc394", 0x45}], 0x9, &(0x7f0000000600)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x50}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}, @mark={{0x14, 0x1, 0x24, 0xfffffff2}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x78}, 0x4) 742.095439ms ago: executing program 1 (id=14079): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002240)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) 709.178031ms ago: executing program 3 (id=14080): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990009000000740000000800a0009e0900000800a1007c1a0000080026008009000008009f0004000000aaf9531f07cad0e3048f2f03fa771ff0a5b726d77423b299e861464c67bfd7185c99ec3cc56ee6008a8b3e847c7b15b659d7f77d94522429d486947f8664b9aa1d41cc70d55bae37a04f090883536b2bdf384c6542414d69ea5b6d085a4689"], 0x48}}, 0x20000000) 588.801456ms ago: executing program 0 (id=14081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000047, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff4305dac12000636777fbac141443e000000d62079f4b4d2f8700000000ab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005982dd296e8ca31bce1d8392078b72f24996ae17df7c2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589bc6e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0xffffffffffffffa1}, 0x2c) 588.167509ms ago: executing program 3 (id=14082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0001000d000000ba8000001201", 0x2e}], 0x1}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x7, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}]}, 0x38}}, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 534.123953ms ago: executing program 1 (id=14083): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4081}, 0x2004c041) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x110}, 0x2}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfa}, 0x14}}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) ioctl$sock_netdev_private(r4, 0x89f8, &(0x7f0000000300)="884aa05ee54caf383564e8013defdd9c6eebe996f1ba73665343b06f59550121f21e82dbdfa7b0e651e07c57b86a36a9dcabd5") r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) close(0x4) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 461.888114ms ago: executing program 0 (id=14084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000000116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 320.165635ms ago: executing program 2 (id=14085): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@getchain={0x44, 0x66, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0x1d, 0xb}, {0xb, 0xa}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xf43}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @mcast1, 0x5}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x8001, 0x10}, &(0x7f0000000640)=0xc) recvmmsg(r2, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/230, 0xe6}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}, 0x1}, {{&(0x7f0000000440)=@rc={0x1f, @none}, 0x80, &(0x7f0000003b80)=[{&(0x7f00000004c0)=""/80, 0x50}, {&(0x7f0000000180)=""/49, 0x31}, {&(0x7f0000001680)=""/134, 0x86}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/223, 0xdf}, {&(0x7f0000002840)=""/253, 0xfd}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/183, 0xb7}, {&(0x7f0000003a00)=""/104, 0x68}, {&(0x7f0000003a80)=""/230, 0xe6}], 0xa, &(0x7f0000000200)=""/27, 0x1b}}, {{&(0x7f0000003c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/249, 0xf9}, {&(0x7f0000004dc0)=""/187, 0xbb}], 0x3, &(0x7f00000005c0)=""/29, 0x1d}, 0x4}, {{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000004e80)=""/50, 0x32}, {&(0x7f0000004ec0)=""/252, 0xfc}, {&(0x7f0000004fc0)=""/6, 0x6}, {&(0x7f0000005000)=""/240, 0xf0}, {&(0x7f0000005100)=""/59, 0x3b}, {&(0x7f0000005140)=""/208, 0xd0}, {&(0x7f0000005240)=""/148, 0x94}, {&(0x7f0000005300)=""/33, 0x21}, {&(0x7f0000005340)=""/235, 0xeb}], 0x9}, 0x5}], 0x4, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 270.4972ms ago: executing program 3 (id=14086): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0x26, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x60}}, 0x0) 210.900757ms ago: executing program 0 (id=14087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x23, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x8}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4006815}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x80, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e35619bf2be9082cfcd8fba0cd0f2934efacde0a223b473fe77f3e5ba760d3793b2b3589c9fb23ff943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005"]}, @nested={0x1c, 0x6, 0x0, 0x1, [@typed={0x16, 0x14d, 0x0, 0x0, @binary="0f46f1849e80333a72c47c602d9970739272"}]}]}, 0x80}}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x20}, 0x8) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffffffffffffff91, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00'], 0x24}}, 0x24040800) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 0s ago: executing program 3 (id=14088): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x1, @bcast, @bpq0, 0x8, 'syz0\x00', @bcast, 0x7, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x21}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) kernel console output (not intermixed with test programs): stering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.299248][T20122] netlink: 288 bytes leftover after parsing attributes in process `syz.5.12312'. [ 1316.432945][ T5144] Bluetooth: hci3: command tx timeout [ 1316.667439][T20135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12314'. [ 1316.739398][T19863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1316.801149][T19863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1316.931094][T19863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1316.952959][T19863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1317.041652][T20162] netlink: 252 bytes leftover after parsing attributes in process `syz.1.12320'. [ 1317.182148][T20168] netlink: zone id is out of range [ 1317.187502][T20168] netlink: zone id is out of range [ 1317.194513][T20168] netlink: zone id is out of range [ 1317.199800][T20168] netlink: zone id is out of range [ 1317.205800][T20168] netlink: zone id is out of range [ 1317.211119][T20168] netlink: zone id is out of range [ 1317.216702][T20168] netlink: zone id is out of range [ 1317.224289][T20168] netlink: zone id is out of range [ 1317.225982][T20169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1317.330959][T20177] netlink: 92 bytes leftover after parsing attributes in process `syz.0.12324'. [ 1317.455835][T19863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.499455][T20184] netlink: 'syz.1.12326': attribute type 10 has an invalid length. [ 1317.519176][T19863] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.536010][T20187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12327'. [ 1317.544564][T20184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1317.572818][T20184] hsr0: Slave B (c0) is not up; please bring it up to get a fully working HSR network [ 1317.589245][T20184] team0: Device hsr0 is of different type [ 1317.788328][T20187] hsr_slave_0 (unregistering): left promiscuous mode [ 1317.822362][T15523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.829571][T15523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.951809][T15526] wlan1: Trigger new scan to find an IBSS to join [ 1317.969051][T15523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.976322][T15523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.142383][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1318.150498][ C0] lec:lec_tx_timeout: lec0 [ 1318.155531][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1318.848638][T15525] wlan1: Creating new IBSS network, BSSID 6a:01:51:5f:cf:cb [ 1320.006929][T20223] netlink: 'syz.0.12335': attribute type 1 has an invalid length. [ 1320.210602][T20223] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1320.353395][T20243] tipc: Invalid UDP bearer configuration [ 1320.381892][T20243] tipc: Enabling of bearer rejected, failed to enable media [ 1320.489102][T19863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.497445][T20253] netlink: 'syz.2.12343': attribute type 4 has an invalid length. [ 1320.647239][T19863] veth0_vlan: entered promiscuous mode [ 1320.721000][T19863] veth1_vlan: entered promiscuous mode [ 1320.793492][T20269] __nla_validate_parse: 1 callbacks suppressed [ 1320.793514][T20269] netlink: 220 bytes leftover after parsing attributes in process `syz.0.12348'. [ 1320.843021][T19863] veth0_macvtap: entered promiscuous mode [ 1320.860966][T19863] veth1_macvtap: entered promiscuous mode [ 1320.870167][T20271] Cannot find del_set index 4 as target [ 1320.923383][T19863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1320.972592][T19863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1320.995454][T20279] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12350'. [ 1321.023260][T15526] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.040775][T15526] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.054649][T20279] 0: renamed from hsr_slave_1 (while UP) [ 1321.064975][T20279] 0: entered allmulticast mode [ 1321.070370][T20279] net_ratelimit: 136 callbacks suppressed [ 1321.070384][T20279] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1321.130470][T15526] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.141906][T15526] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.278456][T20290] netlink: 'syz.2.12353': attribute type 2 has an invalid length. [ 1321.294594][T15520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.315251][T15520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.403457][T15524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.431741][T15524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.846175][T20306] syzkaller0: entered promiscuous mode [ 1321.865825][T20306] syzkaller0: entered allmulticast mode [ 1321.915948][T20319] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12361'. [ 1322.119088][T20336] netlink: 'syz.5.12363': attribute type 1 has an invalid length. [ 1322.137565][T20336] netlink: 'syz.5.12363': attribute type 2 has an invalid length. [ 1322.172904][T20336] netlink: 'syz.5.12363': attribute type 1 has an invalid length. [ 1322.194774][T20336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12363'. [ 1322.273136][T20330] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12361'. [ 1323.166093][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1323.174220][ C0] lec:lec_tx_timeout: lec0 [ 1323.179031][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1324.349472][T20337] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1324.349873][T20345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1324.421502][T20330] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1324.452937][T20330] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1324.486397][T20330] bond0 (unregistering): Released all slaves [ 1324.791491][T20379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1324.821159][T15522] bond0: (slave bond_slave_0): interface is now down [ 1324.845202][T15522] bond0: (slave bond_slave_1): interface is now down [ 1324.865833][T15522] bond0: (slave bridge0): interface is now down [ 1324.882398][T20388] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12376'. [ 1324.899034][T15522] bond0: now running without any active interface! [ 1324.940383][T20388] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12376'. [ 1325.004863][T20396] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1325.125375][T20404] netlink: 'syz.3.12381': attribute type 10 has an invalid length. [ 1325.266737][T20405] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 1325.366029][T20405] bond3 (unregistering): Released all slaves [ 1325.437197][T20404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.445021][T20404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.450534][T20424] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.12383'. [ 1325.529642][T20404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.536938][T20404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.545660][T20404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.552903][T20404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.623628][T20404] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1325.638230][T20425] can: request_module (can-proto-5) failed. [ 1325.719632][T20413] syzkaller1: entered promiscuous mode [ 1325.740243][T20413] syzkaller1: entered allmulticast mode [ 1325.827381][T20434] netlink: 'syz.1.12386': attribute type 16 has an invalid length. [ 1325.864961][T20434] netlink: 'syz.1.12386': attribute type 17 has an invalid length. [ 1325.919094][T20435] "syz.1.12386" (20435) uses obsolete ecb(arc4) skcipher [ 1325.934767][T20434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.989921][T20434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1326.116444][T20443] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12388'. [ 1326.153072][T20443] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12388'. [ 1326.313109][T20445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.330514][T20445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.341183][T20457] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12392'. [ 1326.343298][T20456] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12392'. [ 1326.401503][T20451] netlink: 'syz.3.12390': attribute type 2 has an invalid length. [ 1326.657875][T20466] lo speed is unknown, defaulting to 1000 [ 1326.887285][T20481] pimreg: entered allmulticast mode [ 1327.043091][T20493] delete_channel: no stack [ 1327.183520][T20499] veth0: entered promiscuous mode [ 1327.490555][T20466] ip6_vti0 speed is unknown, defaulting to 1000 [ 1327.551398][T20497] veth0: left promiscuous mode [ 1327.992919][T20538] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12410'. [ 1328.031913][T20540] IPv6: NLM_F_CREATE should be specified when creating new route [ 1328.305458][T20552] netlink: 252 bytes leftover after parsing attributes in process `syz.1.12413'. [ 1328.801328][T20584] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.12421'. [ 1328.842815][T20587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12422'. [ 1328.899710][T20594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12420'. [ 1328.973679][T20598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12420'. [ 1328.998790][T20587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1329.054040][T20587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1329.071697][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5890 ms [ 1329.079785][ C0] lec:lec_tx_timeout: lec0 [ 1329.085625][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1329.200901][T20587] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1329.277645][T20587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.285092][T20587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.337465][T20587] bond0 (unregistering): Released all slaves [ 1329.447483][T15525] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 1329.467372][T15525] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1329.536687][T15525] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1329.569969][T15525] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1329.636403][T20614] Cannot find del_set index 2 as target [ 1329.904773][T20623] netlink: 'syz.5.12430': attribute type 4 has an invalid length. [ 1329.995239][T12622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1330.007467][T12622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1330.020362][T12622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1330.037833][T12622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1330.051831][T12622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1330.102967][T20625] lo speed is unknown, defaulting to 1000 [ 1330.575748][T20625] ip6_vti0 speed is unknown, defaulting to 1000 [ 1330.665901][T15524] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1330.813769][T20648] netlink: 'syz.0.12438': attribute type 5 has an invalid length. [ 1330.824146][T15524] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1330.938764][T20656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1330.995230][T15520] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1331.018583][T15524] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1331.078856][T20664] netlink: 'syz.2.12440': attribute type 1 has an invalid length. [ 1331.093716][T20662] netlink: 'syz.2.12440': attribute type 12 has an invalid length. [ 1331.113866][T20664] netlink: 'syz.2.12440': attribute type 1 has an invalid length. [ 1331.124342][T20664] netlink: 'syz.2.12440': attribute type 8 has an invalid length. [ 1331.124404][T20662] __nla_validate_parse: 10 callbacks suppressed [ 1331.124468][T20662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12440'. [ 1331.134265][T20664] netlink: 606 bytes leftover after parsing attributes in process `syz.2.12440'. [ 1331.181324][T15524] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1331.455622][T15525] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.487665][T20679] veth0: entered promiscuous mode [ 1331.508060][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12447'. [ 1331.615445][T20676] veth0 (unregistering): left promiscuous mode [ 1331.645276][T15520] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.703061][T20689] netlink: 'syz.2.12450': attribute type 1 has an invalid length. [ 1331.729240][T20689] netlink: 'syz.2.12450': attribute type 4 has an invalid length. [ 1331.746344][T15520] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.750756][T20689] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.12450'. [ 1331.855293][T15523] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.888383][T20691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12451'. [ 1332.122930][ T5144] Bluetooth: hci5: command tx timeout [ 1332.249603][T15524] team0: Port device ip6gre2 removed [ 1332.387361][T20715] sctp: [Deprecated]: syz.3.12461 (pid 20715) Use of int in max_burst socket option deprecated. [ 1332.387361][T20715] Use struct sctp_assoc_value instead [ 1332.609879][T15524] bond7 (unregistering): (slave geneve3): Releasing active interface [ 1332.827062][T15524] bond9 (unregistering): (slave bridge4): Releasing active interface [ 1332.887903][T15524] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 1332.896839][T15524] bond1 (unregistering): Released all slaves [ 1332.911152][T15524] bond2 (unregistering): Released all slaves [ 1332.929172][T15524] bond3 (unregistering): (slave vcan2): Releasing backup interface [ 1332.939942][T15524] bond3 (unregistering): Released all slaves [ 1332.962343][T15524] bond4 (unregistering): Released all slaves [ 1332.976785][T15524] bond5 (unregistering): Released all slaves [ 1332.995496][T15524] bond6 (unregistering): Released all slaves [ 1333.016638][T15524] bond7 (unregistering): Released all slaves [ 1333.031070][T15524] bond8 (unregistering): Released all slaves [ 1333.057892][T15524] bond9 (unregistering): Released all slaves [ 1333.079155][T15524] bond10 (unregistering): Released all slaves [ 1333.094655][T15524] bond11 (unregistering): Released all slaves [ 1333.129349][T20699] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1333.130200][T20700] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1333.167719][T20719] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1333.186498][T20726] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1333.204119][T20726] bridge0: entered allmulticast mode [ 1333.264823][T20625] chnl_net:caif_netlink_parms(): no params data found [ 1333.290230][T20719] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1333.299361][T20719] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1333.349832][T20734] netlink: 'syz.2.12464': attribute type 1 has an invalid length. [ 1333.503650][T20734] bond3: entered promiscuous mode [ 1333.509199][T20734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1333.550004][T15524] tipc: Left network mode [ 1333.667570][T20737] bond3: (slave bridge2): making interface the new active one [ 1333.676502][T20737] bridge2: entered promiscuous mode [ 1333.683318][T20737] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1333.713932][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12467'. [ 1333.818033][T20750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12469'. [ 1334.101665][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1334.109786][ C0] lec:lec_tx_timeout: lec0 [ 1334.115267][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1334.136223][T20760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12471'. [ 1334.192729][ T5144] Bluetooth: hci5: command tx timeout [ 1334.198963][ T1768] block nbd0: Possible stuck request ffff888055a48000: control (read@0,1024B). Runtime 210 seconds [ 1334.218875][ T1768] block nbd0: Possible stuck request ffff888055a48200: control (read@1024,1024B). Runtime 210 seconds [ 1334.231359][ T1768] block nbd0: Possible stuck request ffff888055a48400: control (read@2048,1024B). Runtime 210 seconds [ 1334.243421][ T25] block nbd0: Dead connection, failed to find a fallback [ 1334.250953][ T25] block nbd0: shutting down sockets [ 1334.257745][ T1768] block nbd0: Possible stuck request ffff888055a48600: control (read@3072,1024B). Runtime 210 seconds [ 1334.269944][ T25] blk_print_req_error: 136 callbacks suppressed [ 1334.269963][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.289338][ T25] buffer_io_error: 138 callbacks suppressed [ 1334.289357][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1334.303473][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.313070][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1334.320926][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.330550][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1334.338415][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.348005][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1334.356300][T20778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1334.361369][T12626] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.363682][T20778] IPv6: NLM_F_CREATE should be set when creating new route [ 1334.401979][T12626] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1334.410110][T12626] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.430602][T12626] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1334.460877][T20760] tipc: Started in network mode [ 1334.501013][T20760] tipc: Node identity 32a39c15d98f, cluster identity 4711 [ 1334.515001][T12626] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.525261][T20760] tipc: Enabled bearer , priority 0 [ 1334.533305][T12626] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1334.545111][T12626] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.582309][T12626] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1334.590450][T12626] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.602147][T12626] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1334.609988][T12626] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.631656][T12626] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1334.640265][T12626] ldm_validate_partition_table(): Disk read failed. [ 1334.651309][T12626] Dev nbd0: unable to read RDB block 0 [ 1334.666413][T12626] nbd0: unable to read partition table [ 1334.693248][T12626] ldm_validate_partition_table(): Disk read failed. [ 1334.700415][T12626] Dev nbd0: unable to read RDB block 0 [ 1334.715351][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12473'. [ 1334.724726][T12626] nbd0: unable to read partition table [ 1334.738472][T20772] syzkaller0: entered promiscuous mode [ 1334.754855][T20772] syzkaller0: entered allmulticast mode [ 1334.763502][T20772] tipc: Resetting bearer [ 1334.895955][T20772] tipc: Resetting bearer [ 1334.958032][T20795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12475'. [ 1336.273680][ T5144] Bluetooth: hci5: command tx timeout [ 1337.016614][T20772] tipc: Disabling bearer [ 1337.027774][T20625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.037471][T20625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.045129][T20625] bridge_slave_0: entered allmulticast mode [ 1337.053800][T20625] bridge_slave_0: entered promiscuous mode [ 1337.070662][T20795] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1337.090972][T20795] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12475'. [ 1337.178640][T17353] tipc: Node number set to 3945569301 [ 1337.195527][T20625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.204118][T20625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.211503][T20625] bridge_slave_1: entered allmulticast mode [ 1337.219922][T20625] bridge_slave_1: entered promiscuous mode [ 1337.395154][T20625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1337.416961][T20625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1337.487202][T20837] netlink: 'syz.0.12482': attribute type 1 has an invalid length. [ 1337.533313][T20837] netlink: 'syz.0.12482': attribute type 2 has an invalid length. [ 1337.541504][T20837] netlink: 'syz.0.12482': attribute type 1 has an invalid length. [ 1337.552013][T15526] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1337.585498][T20625] team0: Port device team_slave_0 added [ 1337.608679][T20625] team0: Port device team_slave_1 added [ 1337.724344][T20625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.731362][T20625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.801592][T20625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.910579][T20625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.932283][T20625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.009871][T20625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.098915][T20863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12489'. [ 1338.310080][T20868] netlink: 'syz.2.12490': attribute type 12 has an invalid length. [ 1338.337397][T20868] netlink: 'syz.2.12490': attribute type 29 has an invalid length. [ 1338.352053][ T5144] Bluetooth: hci5: command tx timeout [ 1338.382725][T20868] netlink: 148 bytes leftover after parsing attributes in process `syz.2.12490'. [ 1338.401730][T20868] netlink: 59 bytes leftover after parsing attributes in process `syz.2.12490'. [ 1338.518785][T20625] hsr_slave_0: entered promiscuous mode [ 1338.559481][T20625] hsr_slave_1: entered promiscuous mode [ 1338.609887][T20625] debugfs: 'hsr0' already exists in 'hsr' [ 1338.625971][T20625] Cannot create hsr debugfs directory [ 1338.690251][T20879] bridge0: port 3(ipvlan0) entered blocking state [ 1338.709020][T20879] bridge0: port 3(ipvlan0) entered disabled state [ 1338.742717][T20879] ipvlan0: entered allmulticast mode [ 1338.788730][T20879] bridge0: entered allmulticast mode [ 1338.835829][T20879] ipvlan0: left allmulticast mode [ 1338.857919][T20879] bridge0: left allmulticast mode [ 1339.002064][T15524] hsr_slave_0: left promiscuous mode [ 1339.031752][T15524] 0: left promiscuous mode [ 1339.050927][T15524] veth1_vlan: left allmulticast mode [ 1339.121682][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1339.129800][ C0] lec:lec_tx_timeout: lec0 [ 1339.136877][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1339.636039][T15523] smc: removing ib device syz0 [ 1339.860783][T18320] lo speed is unknown, defaulting to 1000 [ 1339.868364][T18320] syz0: Port: 1 Link DOWN [ 1340.017124][T20922] netlink: 'syz.5.12500': attribute type 12 has an invalid length. [ 1340.398853][T20922] bond9: option primary_reselect: invalid value (255) [ 1340.408580][T20922] bond9 (unregistering): Released all slaves [ 1340.884050][T20953] netlink: 'syz.2.12506': attribute type 2 has an invalid length. [ 1341.230167][T20972] openvswitch: netlink: Invalid VLAN frame [ 1341.238382][T15489] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1341.270119][T20973] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12510'. [ 1341.376082][T20960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12510'. [ 1341.433181][T20962] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.484982][T20962] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1341.788390][T20962] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.825118][T20962] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1341.951260][T20625] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1342.046718][T20978] syzkaller0: entered promiscuous mode [ 1342.057963][T20978] syzkaller0: entered allmulticast mode [ 1342.190247][T20962] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.203920][T20962] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1342.637242][T12926] IPVS: starting estimator thread 0... [ 1342.732373][T21013] IPVS: using max 30 ests per chain, 72000 per kthread [ 1342.841400][T21000] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1342.936000][T20625] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.010688][T20962] bond0: (slave netdevsim0): Releasing backup interface [ 1343.237748][T20625] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.312000][T12622] Bluetooth: hci1: command 0x0405 tx timeout [ 1343.423192][T20625] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.628784][T15520] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1343.647598][T15520] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1343.749978][T15520] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1343.769513][T15520] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1343.820110][T15520] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1343.843742][T15520] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1343.978549][T15526] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1343.987172][T15526] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1344.152202][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1344.160297][ C0] lec:lec_tx_timeout: lec0 [ 1344.165308][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1344.295861][T15524] IPVS: stop unused estimator thread 0... [ 1345.463673][T21009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1345.495190][T20625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1345.624985][T20625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1345.715906][T20625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1345.748123][T21109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12530'. [ 1345.763911][T20625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1345.815019][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12530'. [ 1345.976146][T21109] bond9: entered promiscuous mode [ 1345.988319][T21109] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1346.059878][T21138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12534'. [ 1346.095086][T21109] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1346.122427][T21109] bond9: (slave sit1): The slave device specified does not support setting the MAC address [ 1346.173068][T21109] bond9: (slave sit1): Error -95 calling set_mac_address [ 1346.532912][T20625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1346.626145][T20625] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.679853][T21170] tipc: Failed to obtain node identity [ 1346.710203][T21170] tipc: Enabling of bearer rejected, failed to enable media [ 1346.802005][T15525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.809235][T15525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.864920][T15524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.872146][T15524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1347.011832][T21183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12539'. [ 1347.085279][T21185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12540'. [ 1347.145926][T21185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12540'. [ 1347.195051][T21198] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.12543'. [ 1347.408306][T21207] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1347.613226][T21216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12547'. [ 1347.700752][T20625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1347.727111][T21221] netlink: 165 bytes leftover after parsing attributes in process `syz.2.12547'. [ 1347.765121][T21216] netlink: 165 bytes leftover after parsing attributes in process `syz.2.12547'. [ 1347.899861][T20625] veth0_vlan: entered promiscuous mode [ 1347.975749][T20625] veth1_vlan: entered promiscuous mode [ 1348.009903][T21236] netlink: 'syz.0.12551': attribute type 1 has an invalid length. [ 1348.100950][T20625] veth0_macvtap: entered promiscuous mode [ 1348.118443][T20625] veth1_macvtap: entered promiscuous mode [ 1348.163613][T20625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1348.191484][T20625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1348.239777][T15525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.253086][T15525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.269674][T15525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.301684][T15525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.409097][T15523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.423618][T15523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.500539][T15520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.511314][T15520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.919740][T15520] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1348.985793][T21275] netlink: 'syz.1.12563': attribute type 6 has an invalid length. [ 1349.001149][T21275] netlink: 'syz.1.12563': attribute type 6 has an invalid length. [ 1349.020355][T21276] netlink: 'syz.1.12563': attribute type 6 has an invalid length. [ 1349.057931][T21271] netlink: 'syz.5.12564': attribute type 3 has an invalid length. [ 1349.069670][T21271] netlink: 'syz.5.12564': attribute type 2 has an invalid length. [ 1349.087740][T21271] netlink: 'syz.5.12564': attribute type 4 has an invalid length. [ 1349.203578][T21289] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1349.951572][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 1349.959696][ C0] lec:lec_tx_timeout: lec0 [ 1349.964960][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1350.020532][T21335] x_tables: duplicate underflow at hook 2 [ 1350.037807][T21333] delete_channel: no stack [ 1350.105954][T21342] ipt_ECN: cannot use operation on non-tcp rule [ 1350.176225][T21348] netlink: 'syz.3.12582': attribute type 1 has an invalid length. [ 1350.464643][T21363] netlink: 'syz.0.12589': attribute type 21 has an invalid length. [ 1350.514687][T21363] IPv6: NLM_F_CREATE should be specified when creating new route [ 1350.708145][T21377] syzkaller0: entered promiscuous mode [ 1350.721631][T21377] syzkaller0: entered allmulticast mode [ 1351.058279][T21391] netlink: 'syz.0.12597': attribute type 13 has an invalid length. [ 1351.084722][T21391] __nla_validate_parse: 10 callbacks suppressed [ 1351.084744][T21391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12597'. [ 1351.139503][T21396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12599'. [ 1351.167217][T21391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12597'. [ 1351.171760][T15521] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.195431][T15521] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.242358][T15521] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.274106][T15524] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.292454][T21399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12600'. [ 1351.303776][T21399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12600'. [ 1351.321376][T21399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12600'. [ 1351.591064][T21416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12605'. [ 1351.642246][T21417] SET target dimension over the limit! [ 1351.675102][T21421] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1351.810651][T21427] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.12613'. [ 1351.870100][T21429] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.12611'. [ 1351.907388][T21429] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1351.957834][T21429] netlink: 124 bytes leftover after parsing attributes in process `syz.5.12611'. [ 1352.231980][T21450] nbd: device at index 64 is going down [ 1352.446836][T12969] udevd[12969]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1352.483905][T20516] udevd[20516]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1352.677514][T21461] ip6_vti0 speed is unknown, defaulting to 1000 [ 1352.986106][T21491] syzkaller1: entered promiscuous mode [ 1352.998697][T21491] syzkaller1: entered allmulticast mode [ 1353.433232][T21510] syzkaller0: entered promiscuous mode [ 1353.478951][T21510] syzkaller0: entered allmulticast mode [ 1353.554071][T12622] Bluetooth: hci6: command 0x0406 tx timeout [ 1353.772171][T21535] validate_nla: 6 callbacks suppressed [ 1353.772191][T21535] netlink: 'syz.5.12643': attribute type 4 has an invalid length. [ 1353.968793][T21541] 8021q: VLANs not supported on gre0 [ 1354.543372][T21579] sctp: [Deprecated]: syz.0.12659 (pid 21579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1354.543372][T21579] Use struct sctp_sack_info instead [ 1354.566460][T21582] sctp: [Deprecated]: syz.0.12659 (pid 21582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1354.566460][T21582] Use struct sctp_sack_info instead [ 1355.230526][T21571] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1356.018937][T21652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1356.432773][ T5144] Bluetooth: hci1: command 0x0405 tx timeout [ 1356.882040][T21706] openvswitch: netlink: IP tunnel dst address not specified [ 1356.897600][T21705] netlink: 'syz.5.12698': attribute type 2 has an invalid length. [ 1356.908570][T21703] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.006394][T21703] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.119288][T21703] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.224475][T21703] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.365030][T15522] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.441403][T15522] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.570749][T15522] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.595409][T15522] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.775411][T21735] __nla_validate_parse: 14 callbacks suppressed [ 1357.775434][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12705'. [ 1357.863746][T21735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12705'. [ 1357.885889][T21740] tipc: Enabling of bearer rejected, failed to enable media [ 1357.942992][T21741] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12707'. [ 1358.060176][T21745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12708'. [ 1358.090268][T21751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12710'. [ 1358.424737][T21767] tipc: Enabled bearer , priority 0 [ 1358.445682][T21768] syzkaller0: entered promiscuous mode [ 1358.457435][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12716'. [ 1358.467238][T21768] syzkaller0: entered allmulticast mode [ 1358.511571][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 1358.519705][ C0] lec:lec_tx_timeout: lec0 [ 1358.525511][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1358.682324][T21771] tipc: Resetting bearer [ 1358.759853][T21771] tipc: Disabling bearer [ 1358.790467][T21785] wireguard0: entered promiscuous mode [ 1358.823733][T21785] wireguard0: entered allmulticast mode [ 1358.837594][T21785] team0: Device wireguard0 is of different type [ 1359.947729][T21843] syzkaller0: entered promiscuous mode [ 1359.953970][T21843] syzkaller0: entered allmulticast mode [ 1360.400906][T21871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12742'. [ 1360.417289][T21875] Cannot find set identified by id 0 to match [ 1360.516611][T21871] bridge5: port 1(veth1) entered blocking state [ 1360.536482][T21871] bridge5: port 1(veth1) entered disabled state [ 1360.544024][T21871] veth1: entered allmulticast mode [ 1360.551428][T21871] veth1: entered promiscuous mode [ 1360.563808][T21881] nbd: must specify at least one socket [ 1360.633433][T21871] bridge5: port 2(veth0_to_bond) entered blocking state [ 1360.640498][T21871] bridge5: port 2(veth0_to_bond) entered disabled state [ 1360.670252][T21871] veth0_to_bond: entered allmulticast mode [ 1360.684245][T21871] veth0_to_bond: entered promiscuous mode [ 1360.706664][T21888] netlink: 'syz.1.12747': attribute type 1 has an invalid length. [ 1360.763361][T21893] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12748'. [ 1360.870774][T21897] x_tables: unsorted entry at hook 3 [ 1360.895659][T21898] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12750'. [ 1360.932234][T21898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12750'. [ 1361.453057][T21938] netlink: 'syz.3.12764': attribute type 29 has an invalid length. [ 1361.463490][T21938] netlink: 'syz.3.12764': attribute type 29 has an invalid length. [ 1361.692307][T21953] syzkaller0: entered promiscuous mode [ 1361.721872][T21953] syzkaller0: entered allmulticast mode [ 1361.729525][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1361.748638][ T1300] aoe: packet could not be sent on lec0. consider increasing tx_queue_len [ 1361.757833][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1362.020319][T15523] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1362.241047][T21982] gretap0: entered promiscuous mode [ 1362.602929][T22008] Bluetooth: MGMT ver 1.23 [ 1363.013863][T22033] __nla_validate_parse: 12 callbacks suppressed [ 1363.013884][T22033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12793'. [ 1363.029997][T22033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12793'. [ 1363.048795][T22034] sctp: [Deprecated]: syz.0.12792 (pid 22034) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1363.048795][T22034] Use struct sctp_sack_info instead [ 1363.068962][T22034] netlink: 'syz.0.12792': attribute type 64 has an invalid length. [ 1363.198731][T22030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12786'. [ 1363.213053][T22035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12786'. [ 1363.222362][T22035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12786'. [ 1363.364910][T22038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12795'. [ 1363.573765][T22044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12796'. [ 1363.880011][T22063] xt_hashlimit: max too large, truncated to 1048576 [ 1363.978924][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12803'. [ 1364.092278][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12807'. [ 1364.132476][T22079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12803'. [ 1364.160465][T22070] netlink: 'syz.3.12805': attribute type 1 has an invalid length. [ 1364.272559][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 1364.280694][ C0] lec:lec_tx_timeout: lec0 [ 1364.317397][T22091] netlink: 'syz.5.12810': attribute type 32 has an invalid length. [ 1364.379775][T22091] bond11: option coupled_control: invalid value (52) [ 1364.404001][T22091] bond11 (unregistering): Released all slaves [ 1364.455207][T22081] syzkaller0: entered promiscuous mode [ 1364.460774][T22081] syzkaller0: entered allmulticast mode [ 1364.511797][ T5144] Bluetooth: hci5: command tx timeout [ 1364.642215][T22110] netlink: 'syz.2.12815': attribute type 16 has an invalid length. [ 1364.650381][T22110] netlink: 'syz.2.12815': attribute type 17 has an invalid length. [ 1364.650645][T22112] netlink: 'syz.2.12815': attribute type 16 has an invalid length. [ 1364.674474][T22113] netlink: 'syz.5.12816': attribute type 10 has an invalid length. [ 1364.900700][T22110] erspan0: entered promiscuous mode [ 1365.023420][T22110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1365.053660][T22113] bridge_slave_1: left allmulticast mode [ 1365.059376][T22113] bridge_slave_1: left promiscuous mode [ 1365.074062][T22113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.088813][T22113] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1365.108797][T22112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1365.134439][T22109] syzkaller1: entered promiscuous mode [ 1365.150191][T22109] syzkaller1: entered allmulticast mode [ 1365.257826][T17355] lec:lec_start_xmit: lec0:No lecd attached [ 1365.585302][T22149] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1365.775844][T22156] syzkaller0: entered promiscuous mode [ 1365.783519][T22156] syzkaller0: entered allmulticast mode [ 1365.860899][T22163] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1366.437385][T22193] validate_nla: 4 callbacks suppressed [ 1366.437407][T22193] netlink: 'syz.3.12839': attribute type 12 has an invalid length. [ 1367.237672][T22228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1367.380812][T22240] netlink: 'syz.1.12851': attribute type 75 has an invalid length. [ 1367.588153][T22257] x_tables: duplicate underflow at hook 2 [ 1367.617804][T22253] Unsupported ieee802154 address type: 0 [ 1367.843517][T22279] tipc: New replicast peer: 255.255.255.255 [ 1367.859143][T22279] tipc: Enabled bearer , priority 10 [ 1367.953330][T15524] wlan1: Trigger new scan to find an IBSS to join [ 1368.025529][T22281] __nla_validate_parse: 16 callbacks suppressed [ 1368.025549][T22281] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12861'. [ 1368.041187][T22281] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12861'. [ 1368.069238][T22285] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12862'. [ 1368.140878][T22288] bridge1: entered promiscuous mode [ 1368.161764][T22288] bridge1: entered allmulticast mode [ 1368.259083][T22298] netlink: 'syz.3.12865': attribute type 30 has an invalid length. [ 1368.287072][T22287] bond1: entered allmulticast mode [ 1368.541595][T22310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12869'. [ 1368.574590][T15522] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1368.643699][T22322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12871'. [ 1368.728980][T22330] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12875'. [ 1368.962301][T22340] IPVS: set_ctl: invalid protocol: 106 172.20.20.187:20001 [ 1369.117679][T22354] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 1369.384740][T22365] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12885'. [ 1369.404317][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12889'. [ 1369.417494][T22374] netlink: 'syz.0.12888': attribute type 1 has an invalid length. [ 1369.514488][T22384] bond8: entered promiscuous mode [ 1369.519611][T22384] bond8: entered allmulticast mode [ 1369.537548][T22384] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1369.632016][T22374] bridge8: entered promiscuous mode [ 1369.637459][T22374] bridge8: entered allmulticast mode [ 1369.643525][T15525] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1369.705145][T22374] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 1369.722375][T22395] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12891'. [ 1369.773049][T15522] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1369.787505][T22384] bridge9: entered promiscuous mode [ 1369.794761][T22384] bridge9: entered allmulticast mode [ 1369.800894][T22384] bond8: (slave bridge9): Enslaving as a backup interface with a down link [ 1369.956128][T22407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12895'. [ 1369.976270][T22406] netlink: 'syz.2.12896': attribute type 3 has an invalid length. [ 1370.057658][T22411] netlink: 'syz.1.12898': attribute type 33 has an invalid length. [ 1370.607707][T22445] netlink: 'syz.0.12910': attribute type 12 has an invalid length. [ 1370.632202][T22445] netlink: 'syz.0.12910': attribute type 29 has an invalid length. [ 1370.686978][T22446] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1370.735653][T22454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1370.810618][T22459] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 1370.823194][T22457] sctp: [Deprecated]: syz.0.12913 (pid 22457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1370.823194][T22457] Use struct sctp_sack_info instead [ 1370.913280][T15525] wlan1: Trigger new scan to find an IBSS to join [ 1370.991555][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 1370.999651][ C0] lec:lec_tx_timeout: lec0 [ 1371.004976][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1371.111170][T22477] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 1371.448208][T22506] geneve2: entered promiscuous mode [ 1371.461823][T22506] geneve2: entered allmulticast mode [ 1371.487411][T15520] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1371.509787][T15520] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1371.529031][T15520] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1371.554201][T15520] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1371.617753][T22514] netlink: 'syz.0.12930': attribute type 1 has an invalid length. [ 1371.979385][T22546] pimreg: left allmulticast mode [ 1373.044410][T22565] xt_connbytes: Forcing CT accounting to be enabled [ 1373.243082][T15525] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1373.316855][T22551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1373.345829][T22551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1373.841576][T15521] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1373.850092][T15521] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1373.888958][T15521] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1373.901168][T15521] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1373.930416][T15521] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1373.952726][T15524] wlan1: Trigger new scan to find an IBSS to join [ 1373.971780][T15521] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1374.031991][T12622] Bluetooth: hci4: command 0x0406 tx timeout [ 1374.092487][T15523] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1374.110072][T15523] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1374.360695][T22631] netlink: 'syz.0.12958': attribute type 1 has an invalid length. [ 1374.372543][T22631] __nla_validate_parse: 15 callbacks suppressed [ 1374.372565][T22631] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12958'. [ 1374.402453][T22631] netlink: 1 bytes leftover after parsing attributes in process `syz.0.12958'. [ 1374.434966][T22631] netlink: 'syz.0.12958': attribute type 1 has an invalid length. [ 1374.469156][T22631] netlink: 'syz.0.12958': attribute type 8 has an invalid length. [ 1374.500180][T22631] netlink: 606 bytes leftover after parsing attributes in process `syz.0.12958'. [ 1374.873582][T22648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12964'. [ 1374.900648][T15523] wlan1: Creating new IBSS network, BSSID 0a:25:37:4a:87:87 [ 1374.973248][T22650] syzkaller1: entered promiscuous mode [ 1374.978795][T22650] syzkaller1: entered allmulticast mode [ 1375.008944][T22650] netlink: 'syz.5.12965': attribute type 8 has an invalid length. [ 1375.547818][T22691] netlink: 'syz.0.12978': attribute type 1 has an invalid length. [ 1375.557154][T22691] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12978'. [ 1375.566742][T22691] netlink: 658 bytes leftover after parsing attributes in process `syz.0.12978'. [ 1375.577794][T22691] netlink: 1 bytes leftover after parsing attributes in process `syz.0.12978'. [ 1375.617544][T22687] bond9: entered allmulticast mode [ 1375.687375][T22691] bridge10: entered promiscuous mode [ 1375.693707][T22691] bridge10: entered allmulticast mode [ 1375.704420][T22691] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 1375.873534][T22702] netlink: 'syz.2.12983': attribute type 23 has an invalid length. [ 1375.984660][T22712] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12985'. [ 1376.011566][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1376.019656][ C0] lec:lec_tx_timeout: lec0 [ 1376.046998][T22706] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12985'. [ 1376.340499][T22717] netlink: 59 bytes leftover after parsing attributes in process `syz.2.12986'. [ 1376.382378][T22718] nbd: nbd0 already in use [ 1376.735666][T22730] netlink: 'syz.3.12991': attribute type 13 has an invalid length. [ 1376.783174][T22730] veth0_macvtap: left promiscuous mode [ 1376.795482][T22730] macvtap0: entered allmulticast mode [ 1376.828154][T22730] macvtap0: refused to change device tx_queue_len [ 1377.100453][T22755] netlink: 'syz.3.12997': attribute type 4 has an invalid length. [ 1377.160536][ T5144] block nbd3: Receive control failed (result -32) [ 1377.353243][T22774] team0: Device gtp2 is up. Set it down before adding it as a team port [ 1377.534202][T22794] netlink: 'syz.2.13003': attribute type 1 has an invalid length. [ 1377.551640][T22794] netlink: 'syz.2.13003': attribute type 2 has an invalid length. [ 1377.583376][T22794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1377.705304][T22800] netlink: 'syz.1.13006': attribute type 2 has an invalid length. [ 1378.320407][T22823] 8021q: VLANs not supported on sit0 [ 1378.678229][T22838] netlink: 'syz.2.13014': attribute type 21 has an invalid length. [ 1378.766770][T22845] veth0: entered promiscuous mode [ 1378.785909][T22845] openvswitch: netlink: Actions may not be safe on all matching packets [ 1378.815181][T22844] veth0: left promiscuous mode [ 1379.512940][T22879] netlink: 'syz.1.13029': attribute type 1 has an invalid length. [ 1379.578571][T22883] __nla_validate_parse: 18 callbacks suppressed [ 1379.578592][T22883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13030'. [ 1379.647992][T22879] bond2: entered promiscuous mode [ 1379.662070][T22879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1379.702594][T22883] bridge0: Device is already in use. [ 1379.862418][T22894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13033'. [ 1380.002805][T22890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13032'. [ 1380.013023][T22890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13032'. [ 1380.029699][T22890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13032'. [ 1380.082122][T22890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13032'. [ 1380.124502][T22906] netlink: 'syz.3.13036': attribute type 4 has an invalid length. [ 1380.268336][T22909] ipvlan0: entered allmulticast mode [ 1380.274995][T22909] veth0_vlan: entered allmulticast mode [ 1380.298356][T22912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13038'. [ 1380.420709][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13038'. [ 1380.493945][T22922] netlink: 'syz.5.13040': attribute type 13 has an invalid length. [ 1380.598932][T22927] openvswitch: netlink: IP tunnel dst address not specified [ 1380.926153][T22942] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1380.944226][T22942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13050'. [ 1380.968858][T22942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13050'. [ 1381.063018][T22953] rdma_rxe: rxe_newlink: failed to add nlmon0 [ 1381.202072][T22960] syzkaller1: entered promiscuous mode [ 1381.214232][T22960] syzkaller1: entered allmulticast mode [ 1381.293836][T22966] netem: change failed [ 1381.366901][T22972] netlink: 'syz.0.13059': attribute type 1 has an invalid length. [ 1381.674249][T22992] lo: Caught tx_queue_len zero misconfig [ 1381.701002][T15526] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 1381.737303][T15526] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 1381.752089][T15526] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 1381.789202][T15526] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 1381.836865][T22998] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1381.871906][T22999] validate_nla: 9 callbacks suppressed [ 1381.871925][T22999] netlink: 'syz.5.13067': attribute type 16 has an invalid length. [ 1381.943613][T22999] netlink: 'syz.5.13067': attribute type 17 has an invalid length. [ 1382.057269][T22999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1382.067671][T22999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1382.125110][T23010] syzkaller0: entered promiscuous mode [ 1382.130804][T23010] syzkaller0: entered allmulticast mode [ 1382.418964][T23025] netlink: 'syz.0.13076': attribute type 1 has an invalid length. [ 1382.505760][T23032] : renamed from bond0 (while UP) [ 1383.869933][T23124] xt_CT: No such helper "pptp" [ 1384.450878][T23143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1384.512521][T23146] netlink: 'syz.5.13109': attribute type 5 has an invalid length. [ 1384.641964][T23152] bridge0: left allmulticast mode [ 1384.694186][T23152] bridge_slave_0: left allmulticast mode [ 1384.699907][T23152] bridge_slave_0: left promiscuous mode [ 1384.736789][T23152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.762754][T23159] netlink: 'syz.2.13115': attribute type 19 has an invalid length. [ 1384.776984][T23157] __nla_validate_parse: 27 callbacks suppressed [ 1384.777004][T23157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13114'. [ 1384.805630][T23152] bridge_slave_1: left allmulticast mode [ 1384.821353][T23152] bridge_slave_1: left promiscuous mode [ 1384.836311][T23152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.877564][T23152] team0: Port device team_slave_0 removed [ 1384.924921][T23152] team0: Port device team_slave_1 removed [ 1384.959011][T23152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1384.976382][T23152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1384.990790][T23169] xt_hashlimit: max too large, truncated to 1048576 [ 1384.998043][T23152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1385.006482][T23152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.024683][T23152] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1385.164352][T23176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13120'. [ 1385.275797][T23185] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13121'. [ 1385.336409][T23184] syzkaller0: entered promiscuous mode [ 1385.345956][T23184] syzkaller0: entered allmulticast mode [ 1385.654211][T23200] netlink: 'syz.1.13128': attribute type 1 has an invalid length. [ 1385.662526][T23200] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13128'. [ 1386.166342][T23215] can: request_module (can-proto-0) failed. [ 1386.198806][T23223] netlink: 'syz.5.13135': attribute type 11 has an invalid length. [ 1386.209179][T23224] netlink: 'syz.5.13135': attribute type 11 has an invalid length. [ 1386.222947][T23223] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13135'. [ 1386.254455][T23224] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13135'. [ 1386.305157][T23215] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13133'. [ 1386.314994][T23215] nbd: illegal input index -8454144 [ 1386.785133][T23248] sch_fq: defrate 0 ignored. [ 1386.797139][T23253] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13143'. [ 1386.963320][T23250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13143'. [ 1387.175779][T23265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13147'. [ 1387.359734][T23286] netlink: 'syz.1.13153': attribute type 21 has an invalid length. [ 1387.447614][T23291] bond0: entered promiscuous mode [ 1387.471323][T23291] bond_slave_0: entered promiscuous mode [ 1387.478800][T23291] bond_slave_1: entered promiscuous mode [ 1387.488470][T23291] bridge_slave_1: entered promiscuous mode [ 1387.496761][T23291] gretap0: entered promiscuous mode [ 1387.503977][T23291] debugfs: 'hsr1' already exists in 'hsr' [ 1387.509876][T23291] Cannot create hsr debugfs directory [ 1387.518214][T23291] hsr1: entered promiscuous mode [ 1387.666254][T23310] openvswitch: netlink: Flow actions attr not present in new flow. [ 1387.894569][T23321] tipc: Enabling of bearer rejected, failed to enable media [ 1387.969647][T23329] batadv_slave_0: entered promiscuous mode [ 1388.065982][T23331] batadv_slave_0: left promiscuous mode [ 1388.708837][T23383] netlink: 'syz.5.13177': attribute type 1 has an invalid length. [ 1388.841453][T23389] syzkaller0: entered promiscuous mode [ 1388.858752][T23389] syzkaller0: entered allmulticast mode [ 1389.049964][T23414] netlink: 'syz.2.13183': attribute type 21 has an invalid length. [ 1389.207844][T23424] netlink: 'syz.2.13186': attribute type 4 has an invalid length. [ 1389.243996][T23427] bridge0: port 3(syz_tun) entered blocking state [ 1389.255413][T23427] bridge0: port 3(syz_tun) entered disabled state [ 1389.266301][T23427] syz_tun: entered allmulticast mode [ 1389.274097][T23427] syz_tun: entered promiscuous mode [ 1389.300799][T23427] bridge0: port 3(syz_tun) entered blocking state [ 1389.307429][T23427] bridge0: port 3(syz_tun) entered forwarding state [ 1389.359317][T23424] xfrm1: entered allmulticast mode [ 1389.948152][T23472] __nla_validate_parse: 9 callbacks suppressed [ 1389.948174][T23472] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13202'. [ 1390.023939][T23476] syzkaller0: entered promiscuous mode [ 1390.038983][T23476] syzkaller0: entered allmulticast mode [ 1390.205544][T23485] ipt_REJECT: ECHOREPLY no longer supported. [ 1390.256829][T23488] netlink: 'syz.2.13205': attribute type 12 has an invalid length. [ 1390.282966][T23488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13205'. [ 1390.332850][T23495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13208'. [ 1390.343267][T23488] netlink: 'syz.2.13205': attribute type 12 has an invalid length. [ 1390.351305][T23488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13205'. [ 1390.435805][T23499] netlink: 'syz.5.13209': attribute type 1 has an invalid length. [ 1390.573881][T23512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13214'. [ 1390.584297][T23511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13213'. [ 1390.624635][T23512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13214'. [ 1390.655466][T23516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13214'. [ 1390.892063][T23524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13218'. [ 1390.976466][T12622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1390.997229][T12622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1391.008946][T12622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1391.029395][T12622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1391.040102][T12622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1391.093618][T23528] ip6_vti0 speed is unknown, defaulting to 1000 [ 1391.530337][T23545] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.13223'. [ 1391.855287][T23559] netlink: 'syz.1.13228': attribute type 7 has an invalid length. [ 1391.873829][T23552] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1391.886545][T15526] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.001606][T15526] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1392.140777][T23576] netlink: 'syz.0.13232': attribute type 1 has an invalid length. [ 1392.247081][T23528] chnl_net:caif_netlink_parms(): no params data found [ 1392.374043][T23528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.381371][T23528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.388812][T23528] bridge_slave_0: entered allmulticast mode [ 1392.397097][T23528] bridge_slave_0: entered promiscuous mode [ 1392.406069][T23528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.413731][T23528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.421058][T23528] bridge_slave_1: entered allmulticast mode [ 1392.436873][T23528] bridge_slave_1: entered promiscuous mode [ 1392.481250][T23528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.494308][T23528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.538060][T23528] team0: Port device team_slave_0 added [ 1392.547169][T23528] team0: Port device team_slave_1 added [ 1392.593534][T23528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.600562][T23528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.633051][T23528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.656511][T23528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.664092][T23528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.699058][T23528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.774440][T23528] hsr_slave_0: entered promiscuous mode [ 1392.782327][T23528] hsr_slave_1: entered promiscuous mode [ 1392.789971][T23528] debugfs: 'hsr0' already exists in 'hsr' [ 1392.796919][T23528] Cannot create hsr debugfs directory [ 1392.868950][T23604] syzkaller0: entered promiscuous mode [ 1392.874952][T23604] syzkaller0: entered allmulticast mode [ 1393.072591][ T5144] Bluetooth: hci2: command tx timeout [ 1393.252537][T15523] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1393.386180][T23624] syzkaller1: entered promiscuous mode [ 1393.400223][T23624] syzkaller1: entered allmulticast mode [ 1393.634895][T23633] netem: invalid attributes len -24 [ 1393.640263][T23633] netem: change failed [ 1393.649176][T23636] netlink: 'syz.1.13250': attribute type 2 has an invalid length. [ 1393.810405][T23638] can: request_module (can-proto-0) failed. [ 1393.914381][T23646] team_slave_0: entered promiscuous mode [ 1393.927281][T23646] team_slave_0: entered allmulticast mode [ 1393.939158][T23648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1393.955575][T23528] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1393.995620][T23528] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1394.015120][T23528] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1394.035372][T23528] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1394.152022][T23668] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1394.318013][T23528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.438216][T23528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.458911][T15523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.466167][T15523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.519908][T15523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.527178][T15523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.606445][T23528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1394.871104][T23528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1394.903880][T23702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1395.088460][T23708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.099213][T23708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.106497][T23708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.155831][T12622] Bluetooth: hci2: command tx timeout [ 1395.386431][T23528] veth0_vlan: entered promiscuous mode [ 1395.413020][T23528] veth1_vlan: entered promiscuous mode [ 1395.459909][T23528] veth0_macvtap: entered promiscuous mode [ 1395.475015][T23528] veth1_macvtap: entered promiscuous mode [ 1395.579301][T23739] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1395.590134][T23739] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1395.601315][T23528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.622038][T23739] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1395.635041][T23744] __nla_validate_parse: 9 callbacks suppressed [ 1395.635063][T23744] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.13277'. [ 1395.675328][T23528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1395.700867][T15524] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.755999][T15524] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.779936][T15524] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.789315][T15524] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.012708][T15524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.042933][T15524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.088933][T15523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.098930][T15523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.232097][T12622] Bluetooth: hci2: command 0x040f tx timeout [ 1399.312299][T12622] Bluetooth: hci2: command 0x040f tx timeout [ 1401.392185][T12622] Bluetooth: hci2: command 0x040f tx timeout [ 1404.926352][T15524] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1405.235054][T15526] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1422.508772][T23779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13284'. [ 1422.534671][T23780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13284'. [ 1422.602780][T23779] syzkaller0: entered promiscuous mode [ 1422.608785][T23779] syzkaller0: entered allmulticast mode [ 1422.657978][T23790] sctp: [Deprecated]: syz.0.13290 (pid 23790) Use of int in max_burst socket option. [ 1422.657978][T23790] Use struct sctp_assoc_value instead [ 1423.159049][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1423.172356][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1423.178823][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1424.280881][T15526] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1424.792996][T15523] bridge_slave_1: left allmulticast mode [ 1424.798710][T15523] bridge_slave_1: left promiscuous mode [ 1424.805087][T15523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.818441][T15523] bridge_slave_0: left allmulticast mode [ 1424.830757][T15523] bridge_slave_0: left promiscuous mode [ 1424.837270][T15523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.960191][T15523] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 1425.024060][T15489] smc: removing ib device syz2 [ 1425.078596][T15526] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1425.117490][T15523] erspan0 (unregistering): left promiscuous mode [ 1425.149766][T15523] gretap0 (unregistering): left promiscuous mode [ 1425.692395][T15523] bond1 (unregistering): Released all slaves [ 1425.726189][T15523] bond2 (unregistering): Released all slaves [ 1425.806701][T15523] bond0 (unregistering): Released all slaves [ 1425.863623][T15523] bond3 (unregistering): Released all slaves [ 1425.933632][T15523] bond4 (unregistering): Released all slaves [ 1425.975104][T15523] bond5 (unregistering): Released all slaves [ 1426.000396][T15523] bond6 (unregistering): Released all slaves [ 1426.057722][T15523] bond7 (unregistering): Released all slaves [ 1426.696645][T23838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13300'. [ 1426.721684][T23838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13300'. [ 1426.749821][T23836] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13299'. [ 1426.774125][T23845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13302'. [ 1426.856598][T23838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13300'. [ 1426.866200][T23838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13300'. [ 1426.924600][T15524] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1426.934405][T15524] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1426.947094][T23845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13302'. [ 1426.962961][T23852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13303'. [ 1427.051784][T15524] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1427.095472][T15524] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1427.509553][T23876] netlink: get zone limit has 8 unknown bytes [ 1428.132905][T23892] netlink: 'syz.1.13315': attribute type 1 has an invalid length. [ 1428.152761][T23892] netlink: 'syz.1.13315': attribute type 1 has an invalid length. [ 1428.168042][T23892] netlink: 'syz.1.13315': attribute type 2 has an invalid length. [ 1428.581452][T23910] team0 (unregistering): Port device team_slave_0 removed [ 1428.656266][T23910] team0 (unregistering): Port device team_slave_1 removed [ 1428.916154][T23927] __nla_validate_parse: 1 callbacks suppressed [ 1428.916175][T23927] netlink: 220 bytes leftover after parsing attributes in process `syz.3.13326'. [ 1428.991652][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 1428.999799][ C0] lec:lec_tx_timeout: lec0 [ 1429.004646][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1429.243428][T15523] tipc: Left network mode [ 1429.323266][T23948] netlink: 68 bytes leftover after parsing attributes in process `syz.5.13332'. [ 1429.609015][T23960] netlink: 'syz.2.13337': attribute type 10 has an invalid length. [ 1429.790003][T23975] lo speed is unknown, defaulting to 1000 [ 1429.854370][T23975] lo speed is unknown, defaulting to 1000 [ 1429.861032][T23975] lo speed is unknown, defaulting to 1000 [ 1429.963227][T23981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13343'. [ 1429.981940][T23982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13343'. [ 1430.188157][T23999] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 1430.207615][T24001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13348'. [ 1430.289869][T24004] netlink: 'syz.2.13349': attribute type 1 has an invalid length. [ 1430.574511][T23975] infiniband syz0: set active [ 1430.579382][T23975] infiniband syz0: added lo [ 1430.625761][T24020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13353'. [ 1430.664140][T23975] RDS/IB: syz0: added [ 1430.681782][T23975] smc: adding ib device syz0 with port count 1 [ 1430.693031][T22601] lo speed is unknown, defaulting to 1000 [ 1430.703092][T23975] smc: ib device syz0 port 1 has no pnetid [ 1430.776550][T24029] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1430.844232][T22601] lo speed is unknown, defaulting to 1000 [ 1430.895427][T23975] lo speed is unknown, defaulting to 1000 [ 1431.248716][T24055] netlink: 'syz.2.13361': attribute type 16 has an invalid length. [ 1431.316923][T24055] netlink: 'syz.2.13361': attribute type 17 has an invalid length. [ 1431.415142][T24059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13363'. [ 1431.424778][T24059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13363'. [ 1431.482690][T24055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1431.518211][T23975] lo speed is unknown, defaulting to 1000 [ 1431.679944][T24065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13366'. [ 1431.761373][T24065] geneve3: entered promiscuous mode [ 1431.857179][T24073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13368'. [ 1431.871974][T24073] netlink: 'syz.5.13368': attribute type 4 has an invalid length. [ 1432.117489][T23975] lo speed is unknown, defaulting to 1000 [ 1432.358143][T24090] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.498325][T24098] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1432.508248][T22602] IPVS: starting estimator thread 0... [ 1432.553427][T24090] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.613557][T24107] IPVS: using max 25 ests per chain, 60000 per kthread [ 1432.703150][T24090] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.773670][T23975] lo speed is unknown, defaulting to 1000 [ 1432.923321][T24090] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.143385][T15508] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.194748][T15508] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.233011][T15508] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.254899][T15508] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.360837][T23975] lo speed is unknown, defaulting to 1000 [ 1433.400503][T24138] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1433.437903][T24142] netlink: 'syz.5.13387': attribute type 1 has an invalid length. [ 1433.464650][T24138] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1433.517655][T24142] bond1: entered promiscuous mode [ 1433.523233][T24142] bond1: entered allmulticast mode [ 1433.528973][T24142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1433.783886][T24154] netlink: 'syz.5.13389': attribute type 8 has an invalid length. [ 1433.848080][T23975] lo speed is unknown, defaulting to 1000 [ 1433.941008][T24162] IPv6: sit1: Disabled Multicast RS [ 1434.011539][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1434.019644][ C0] lec:lec_tx_timeout: lec0 [ 1434.160015][T24169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1434.201466][T24169] tap0: tun_chr_ioctl cmd 2148553947 [ 1434.300935][T23975] lo speed is unknown, defaulting to 1000 [ 1434.322880][T22603] lec:lec_start_xmit: lec0:No lecd attached [ 1434.827414][T23975] lo speed is unknown, defaulting to 1000 [ 1435.009106][T24195] syzkaller0: create flow: hash 2356542085 index 1 [ 1435.058547][T15518] syzkaller0: tun_net_xmit 76 [ 1435.065834][T15518] syzkaller0: tun_net_xmit 48 [ 1435.082293][ T6534] syzkaller0: tun_net_xmit 76 [ 1435.131030][T24197] netlink: 'syz.2.13405': attribute type 62 has an invalid length. [ 1435.201812][T24192] syzkaller0: delete flow: hash 2356542085 index 1 [ 1435.512904][T24221] __nla_validate_parse: 10 callbacks suppressed [ 1435.512924][T24221] netlink: 176 bytes leftover after parsing attributes in process `syz.5.13412'. [ 1435.621625][T24225] x_tables: duplicate underflow at hook 2 [ 1435.695813][T24227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13414'. [ 1435.724938][T24227] netlink: 176 bytes leftover after parsing attributes in process `syz.2.13414'. [ 1435.735322][T24227] netlink: 'syz.2.13414': attribute type 5 has an invalid length. [ 1435.850979][T15489] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1437.371757][T23975] lo speed is unknown, defaulting to 1000 [ 1437.557316][T24242] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1437.958784][T23975] lo speed is unknown, defaulting to 1000 [ 1438.074703][T24263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13425'. [ 1438.110643][T24264] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13424'. [ 1438.125341][T24264] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1438.144742][T24260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13424'. [ 1438.154586][T24260] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13424'. [ 1438.163818][T24260] netlink: 'syz.5.13424': attribute type 7 has an invalid length. [ 1438.172641][T24260] netlink: 'syz.5.13424': attribute type 8 has an invalid length. [ 1438.180634][T24260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13424'. [ 1438.372090][T23975] lo speed is unknown, defaulting to 1000 [ 1439.062186][T23975] lo speed is unknown, defaulting to 1000 [ 1439.187068][T24288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13432'. [ 1439.386651][T24301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13435'. [ 1439.683082][T24310] netlink: 'syz.0.13437': attribute type 4 has an invalid length. [ 1439.951520][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5630 ms [ 1439.959646][ C0] lec:lec_tx_timeout: lec0 [ 1439.965202][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1440.164100][T24322] netlink: 'syz.0.13441': attribute type 1 has an invalid length. [ 1440.458616][T15523] hsr_slave_0: left promiscuous mode [ 1440.473644][T15523] 0: left promiscuous mode [ 1440.480741][T15523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1440.498778][T15523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.528874][T15523] veth1_macvtap: left promiscuous mode [ 1440.541841][T15523] veth0_macvtap: left promiscuous mode [ 1440.555071][T15523] veth1_vlan: left promiscuous mode [ 1440.569512][T15523] veth0_vlan: left promiscuous mode [ 1440.779078][T15523] pim6reg527 (unregistering): left allmulticast mode [ 1441.098437][T15523] team0 (unregistering): Port device team_slave_1 removed [ 1441.126330][T15523] team0 (unregistering): Port device team_slave_0 removed [ 1441.500776][T24349] __nla_validate_parse: 4 callbacks suppressed [ 1441.500797][T24349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13448'. [ 1441.527558][T24352] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13446'. [ 1441.771940][T24358] rdma_rxe: rxe_newlink: failed to add lo [ 1441.808144][T15523] IPVS: stop unused estimator thread 0... [ 1442.018638][T24374] netlink: 'syz.2.13453': attribute type 1 has an invalid length. [ 1442.064340][T24374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1442.461395][T24401] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13463'. [ 1442.474154][T24402] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13463'. [ 1442.810768][T24413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13465'. [ 1443.034755][T24423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13469'. [ 1443.203566][T24430] syz_tun: entered promiscuous mode [ 1443.209002][T24430] macvtap1: entered promiscuous mode [ 1443.497080][T24430] syz_tun: left promiscuous mode [ 1443.566014][T24454] netlink: 'syz.1.13476': attribute type 1 has an invalid length. [ 1443.575086][T24454] netlink: 228 bytes leftover after parsing attributes in process `syz.1.13476'. [ 1443.597857][T24437] netlink: 268 bytes leftover after parsing attributes in process `syz.0.13471'. [ 1443.751340][T24464] netlink: 'syz.0.13479': attribute type 9 has an invalid length. [ 1443.760919][T24464] netlink: 'syz.0.13479': attribute type 11 has an invalid length. [ 1443.770272][T24464] netlink: 'syz.0.13479': attribute type 12 has an invalid length. [ 1443.780079][T24464] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.13479'. [ 1443.789964][T24464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13479'. [ 1444.224089][T24490] lo: entered promiscuous mode [ 1444.250024][T24490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1444.438938][T24507] tipc: Started in network mode [ 1444.445031][T24507] tipc: Node identity ac14140f, cluster identity 4711 [ 1444.472801][T24507] tipc: Enabling of bearer rejected, failed to enable media [ 1444.586463][T24511] lo speed is unknown, defaulting to 1000 [ 1444.660440][T24505] syzkaller0: entered promiscuous mode [ 1444.671637][T24505] syzkaller0: entered allmulticast mode [ 1444.899452][T24528] geneve2: entered promiscuous mode [ 1444.905654][T24528] geneve2: entered allmulticast mode [ 1444.918937][T15518] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1444.944401][T15518] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1444.982173][T15518] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1444.990531][T15518] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1444.999355][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1444.999389][ C0] lec:lec_tx_timeout: lec0 [ 1445.454295][T24562] netlink: 'syz.0.13510': attribute type 1 has an invalid length. [ 1445.490106][T24564] netlink: 'syz.2.13508': attribute type 1 has an invalid length. [ 1445.573355][T22602] lec:lec_start_xmit: lec0:No lecd attached [ 1446.411776][T24595] netlink: 'syz.2.13518': attribute type 1 has an invalid length. [ 1446.538072][T24603] __nla_validate_parse: 12 callbacks suppressed [ 1446.538092][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13521'. [ 1446.574963][T24603] bridge: RTM_NEWNEIGH with invalid ether address [ 1446.594944][T24611] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13524'. [ 1447.206173][T24650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13535'. [ 1447.236118][T24652] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1447.269420][T24652] bond10 (unregistering): Released all slaves [ 1447.393279][T24661] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13536'. [ 1447.442318][T24650] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1447.514258][T24658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1447.527650][T24668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13539'. [ 1447.538605][T24658] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1447.552959][T24658] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1447.749099][T24678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13541'. [ 1447.815694][T24678] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13541'. [ 1447.866701][T24683] netem: change failed [ 1448.078995][T24694] veth1_to_bond: entered allmulticast mode [ 1448.096703][T24692] syzkaller0: entered promiscuous mode [ 1448.102720][T24697] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13545'. [ 1448.116671][T24692] syzkaller0: entered allmulticast mode [ 1448.124860][T24694] veth1_to_bond: left allmulticast mode [ 1448.138519][T24692] netlink: 'syz.2.13546': attribute type 3 has an invalid length. [ 1448.258425][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13547'. [ 1448.282844][T24707] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1448.300192][T24707] netlink: 148 bytes leftover after parsing attributes in process `syz.1.13547'. [ 1448.744988][T24733] dvmrp0: entered allmulticast mode [ 1448.769076][T24736] ip6t_rpfilter: unknown options [ 1449.259234][T24760] sctp: [Deprecated]: syz.5.13568 (pid 24760) Use of int in max_burst socket option. [ 1449.259234][T24760] Use struct sctp_assoc_value instead [ 1449.323923][T24737] block nbd4: Receive control failed (result -32) [ 1449.465542][T24772] netlink: 'syz.1.13569': attribute type 1 has an invalid length. [ 1449.574621][T24772] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1449.583466][T24789] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1449.627158][T24793] ksmbd: Unknown IPC event: 3, ignore. [ 1449.665536][T24790] bond5: option fail_over_mac: invalid value (16) [ 1449.697625][T24790] bond5 (unregistering): Released all slaves [ 1449.768469][T24772] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1449.967728][T24818] syzkaller0: entered promiscuous mode [ 1449.991801][T24818] syzkaller0: entered allmulticast mode [ 1450.014001][T24818] tipc: Enabled bearer , priority 0 [ 1450.034195][T15518] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1450.059762][T24814] tipc: Resetting bearer [ 1450.105431][T24814] tipc: Disabling bearer [ 1450.162229][T15518] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1450.194829][T15489] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1450.203122][T24825] netlink: 'syz.3.13582': attribute type 16 has an invalid length. [ 1450.211064][T24825] netlink: 'syz.3.13582': attribute type 17 has an invalid length. [ 1450.251696][T15523] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1450.261290][T22607] lo speed is unknown, defaulting to 1000 [ 1450.268714][T24826] netem: invalid attributes len -24 [ 1450.275058][T15523] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1450.293418][T24826] netem: change failed [ 1450.311811][T15523] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1450.334897][T24825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1450.361871][T15523] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1450.381720][T15523] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1450.403459][T15518] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1450.476927][T24828] syzkaller0: entered promiscuous mode [ 1450.483467][T24828] syzkaller0: entered allmulticast mode [ 1450.542847][T24847] netlink: 'syz.3.13591': attribute type 2 has an invalid length. [ 1450.833538][T24737] Bluetooth: hci3: command 0x0406 tx timeout [ 1450.996239][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 1451.004335][ C0] lec:lec_tx_timeout: lec0 [ 1451.009341][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1452.557612][T24859] netlink: 'syz.3.13594': attribute type 1 has an invalid length. [ 1452.566232][T24859] netlink: 'syz.3.13594': attribute type 3 has an invalid length. [ 1452.575087][T24859] __nla_validate_parse: 13 callbacks suppressed [ 1452.575106][T24859] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13594'. [ 1452.593756][T24855] netlink: 'syz.2.13593': attribute type 13 has an invalid length. [ 1452.606320][T24855] netlink: 164 bytes leftover after parsing attributes in process `syz.2.13593'. [ 1452.616614][T24855] syz_tun: refused to change device tx_queue_len [ 1452.714652][T24868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13597'. [ 1452.725120][T24869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13597'. [ 1452.866788][T24877] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13599'. [ 1452.996475][T24885] netlink: 'syz.2.13602': attribute type 11 has an invalid length. [ 1453.018445][T24887] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1453.051037][T24893] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.13603'. [ 1453.144650][T24895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13603'. [ 1453.248545][T24899] netlink: 'syz.2.13604': attribute type 8 has an invalid length. [ 1453.561867][T24917] syzkaller1: entered promiscuous mode [ 1453.569609][T24917] syzkaller1: entered allmulticast mode [ 1453.893619][T24943] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1454.129581][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13620'. [ 1454.263831][T24972] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1454.639758][T24982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13629'. [ 1454.649880][T24982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13629'. [ 1455.051606][T15518] net_ratelimit: 148 callbacks suppressed [ 1455.051629][T15518] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1455.086603][T15518] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1455.094751][T15518] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1455.175689][T25021] netlink: 'syz.0.13641': attribute type 10 has an invalid length. [ 1455.204712][T15523] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1455.221998][T15523] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1455.279972][T25021] team0: Device veth1_macvtap failed to register rx_handler [ 1455.292849][T15508] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1455.351706][T15500] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1455.359648][T15500] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1455.471747][T15518] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1455.479835][T15518] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1455.570639][T25044] siw: device registration error -23 [ 1455.596426][T15518] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1455.694998][T25021] lec:lec_atm_close: lec0: Shut down! [ 1455.728328][T25054] netlink: 'syz.1.13651': attribute type 1 has an invalid length. [ 1456.414696][T25045] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 1456.442484][T15489] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1456.548576][T25099] lo speed is unknown, defaulting to 1000 [ 1456.567433][T25105] netlink: 'syz.3.13665': attribute type 1 has an invalid length. [ 1456.811198][T25118] netlink: 'syz.0.13663': attribute type 3 has an invalid length. [ 1456.819501][T25118] netlink: 'syz.0.13663': attribute type 1 has an invalid length. [ 1457.633224][T12622] Bluetooth: hci3: command 0x0406 tx timeout [ 1457.677416][T25168] __nla_validate_parse: 44 callbacks suppressed [ 1457.677438][T25168] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13682'. [ 1457.754772][T25173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13683'. [ 1457.777689][T25168] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20003 [ 1457.892726][T25179] IPVS: set_ctl: invalid protocol: 154 224.0.0.2:20003 [ 1457.962565][T25185] netlink: 9 bytes leftover after parsing attributes in process `syz.5.13687'. [ 1458.014255][T25185] gretap0: entered promiscuous mode [ 1458.046685][T25185] gretap0: left promiscuous mode [ 1458.239072][T25201] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20004 [ 1458.537351][T25219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13694'. [ 1458.645227][T25223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13696'. [ 1458.730603][T25229] netlink: 'syz.5.13700': attribute type 2 has an invalid length. [ 1458.742961][T25229] xt_hashlimit: size too large, truncated to 1048576 [ 1458.761196][T25229] netlink: 'syz.5.13700': attribute type 2 has an invalid length. [ 1458.763641][T25227] nbd5: detected capacity change from 0 to 127 [ 1458.780537][T12622] block nbd5: Receive control failed (result -32) [ 1458.792917][T25101] block nbd5: Dead connection, failed to find a fallback [ 1458.800275][T25101] block nbd5: shutting down sockets [ 1458.806434][T25101] blk_print_req_error: 138 callbacks suppressed [ 1458.806454][T25101] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1458.822647][T25101] buffer_io_error: 138 callbacks suppressed [ 1458.822665][T25101] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1458.843408][T25101] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1458.854513][T25101] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1458.862826][T25101] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1458.872637][T25101] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1458.880476][T25101] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1458.912013][T25101] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1458.921628][T25101] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1458.941370][T25101] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1458.973322][T25101] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1459.000770][T25101] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1459.037674][T25101] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1459.062783][T25242] netlink: 'syz.1.13701': attribute type 10 has an invalid length. [ 1459.067843][T25101] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1459.103513][T25101] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1459.111058][T25242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.120809][T25242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.134432][T25101] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1459.152901][T25101] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1459.173483][T25101] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1459.182109][T25101] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1459.192862][T25101] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1459.203682][T25101] ldm_validate_partition_table(): Disk read failed. [ 1459.211291][T25101] Dev nbd5: unable to read RDB block 0 [ 1459.227197][T25242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.234491][T25242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1459.242086][T25242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.249331][T25242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1459.283683][T25101] nbd5: unable to read partition table [ 1459.296599][T25101] ldm_validate_partition_table(): Disk read failed. [ 1459.308765][T25101] Dev nbd5: unable to read RDB block 0 [ 1459.318081][T25251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13705'. [ 1459.336810][T25242] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1459.348124][T25101] nbd5: unable to read partition table [ 1459.484533][T25252] delete_channel: no stack [ 1459.509236][T17353] IPVS: starting estimator thread 0... [ 1459.525303][T25260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13707'. [ 1459.564284][T25261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13707'. [ 1459.614340][T25258] IPVS: using max 31 ests per chain, 74400 per kthread [ 1459.633518][T25264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13709'. [ 1459.717310][T25272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13712'. [ 1460.062636][T22768] net_ratelimit: 102 callbacks suppressed [ 1460.062659][T22768] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1460.092016][T22768] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1460.101061][T22768] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1460.120173][T25298] tipc: Enabled bearer , priority 0 [ 1460.146668][T25298] syzkaller0: entered promiscuous mode [ 1460.155303][T25298] syzkaller0: entered allmulticast mode [ 1460.169180][T25298] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1460.215560][T25298] tipc: Resetting bearer [ 1460.230185][T25296] tipc: Resetting bearer [ 1460.237056][T15518] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1460.281455][T22768] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1460.305941][T25296] tipc: Disabling bearer [ 1460.331687][T22768] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1460.348148][T22768] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1460.491687][T22768] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1460.500604][T22768] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1460.632570][T22768] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1460.651354][T25330] netlink: 'syz.2.13730': attribute type 1 has an invalid length. [ 1460.733324][T25332] netlink: 'syz.2.13730': attribute type 4 has an invalid length. [ 1460.795762][T25340] : entered promiscuous mode [ 1460.991596][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5300 ms [ 1460.999678][ C0] lec:lec_tx_timeout: lec0 [ 1461.395484][T25389] xt_hashlimit: max too large, truncated to 1048576 [ 1461.780155][T25414] netlink: 'syz.0.13755': attribute type 15 has an invalid length. [ 1462.094678][T25442] --map-set only usable from mangle table [ 1462.190450][T25440] lo speed is unknown, defaulting to 1000 [ 1462.312669][T25448] netlink: 'syz.5.13763': attribute type 3 has an invalid length. [ 1462.449636][T25456] netlink: 'syz.5.13765': attribute type 12 has an invalid length. [ 1462.800752][T25472] __nla_validate_parse: 11 callbacks suppressed [ 1462.800773][T25472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13770'. [ 1462.852052][T25472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13770'. [ 1462.981260][T25477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13772'. [ 1462.993568][T25478] netlink: 'syz.3.13770': attribute type 1 has an invalid length. [ 1463.160549][T25488] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13774'. [ 1463.263495][T25495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13775'. [ 1463.331334][T25490] netlink: 1952 bytes leftover after parsing attributes in process `syz.2.13775'. [ 1463.472393][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1463.763796][T25524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13783'. [ 1463.838166][T25528] netlink: 64 bytes leftover after parsing attributes in process `syz.5.13784'. [ 1463.848987][T25524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13783'. [ 1464.018213][T25536] netlink: 'syz.2.13788': attribute type 3 has an invalid length. [ 1464.035454][T25541] netlink: 'syz.2.13788': attribute type 3 has an invalid length. [ 1464.082091][T25547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13789'. [ 1464.106751][T25534] rdma_rxe: rxe_newlink: failed to add bond0 [ 1464.468639][T25571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1464.618686][T21021] lo speed is unknown, defaulting to 1000 [ 1464.629777][T21021] syz0: Port: 1 Link DOWN [ 1464.636239][T16821] lo speed is unknown, defaulting to 1000 [ 1464.907626][T25593] netlink: 'syz.1.13804': attribute type 33 has an invalid length. [ 1465.125647][T25602] syzkaller0: entered promiscuous mode [ 1465.141700][T25602] syzkaller0: entered allmulticast mode [ 1465.147424][T15489] net_ratelimit: 97 callbacks suppressed [ 1465.147443][T15489] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1465.191876][T15489] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1465.321860][T15500] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1465.527601][T15500] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1465.574561][T15523] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1465.632230][T15523] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1465.644327][T25623] IPVS: Unknown mcast interface: vcan0 [ 1465.652432][T15500] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1465.671904][T15489] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1465.691654][T15489] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1465.699468][T15489] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1465.849531][T25638] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1465.923562][T25638] bond3: (slave lo): Enslaving as an active interface with an up link [ 1466.027299][T25637] syzkaller0: entered promiscuous mode [ 1466.039811][T25637] syzkaller0: entered allmulticast mode [ 1466.200593][T25664] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1466.517162][T25688] netlink: 'syz.3.13828': attribute type 3 has an invalid length. [ 1466.696816][T25697] nbd: must specify at least one socket [ 1466.776219][T15489] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1467.420338][T25743] netlink: 'syz.0.13844': attribute type 1 has an invalid length. [ 1467.837674][T25765] netlink: 'syz.2.13849': attribute type 33 has an invalid length. [ 1467.880567][T25765] __nla_validate_parse: 16 callbacks suppressed [ 1467.880587][T25765] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13849'. [ 1468.159531][T25784] syzkaller0: entered promiscuous mode [ 1468.166977][T25784] syzkaller0: entered allmulticast mode [ 1468.415848][T25797] netlink: 'syz.0.13857': attribute type 7 has an invalid length. [ 1468.435291][T25798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13856'. [ 1468.456532][T25798] geneve3: entered promiscuous mode [ 1468.507514][T25803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13859'. [ 1468.549373][T25803] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13859'. [ 1468.618601][T25803] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13859'. [ 1468.618644][T15489] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.643251][T15489] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.654454][T15489] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.665046][T15489] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.991610][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5520 ms [ 1468.999730][ C0] lec:lec_tx_timeout: lec0 [ 1469.005727][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1469.090379][T25842] netlink: 412 bytes leftover after parsing attributes in process `syz.1.13870'. [ 1469.254128][T25849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13873'. [ 1469.274711][T25851] netlink: 256 bytes leftover after parsing attributes in process `syz.2.13872'. [ 1469.303689][T25854] netlink: 'syz.0.13874': attribute type 10 has an invalid length. [ 1469.320209][T25849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13873'. [ 1469.354312][T25854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.363036][T25857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13873'. [ 1469.400009][T25854] bridge_slave_1: left allmulticast mode [ 1469.411658][T25854] bridge_slave_1: left promiscuous mode [ 1469.462418][T25854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.524121][T25854] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1469.556981][T25865] pim6reg: entered allmulticast mode [ 1469.585162][T25866] pim6reg: left allmulticast mode [ 1469.702075][T25865] bond7: option min_links: invalid value (18446744073709551614) [ 1469.731853][T25865] bond7: option min_links: allowed values 0 - 2147483647 [ 1469.770641][T25865] bond7 (unregistering): Released all slaves [ 1470.024117][T25892] IPv6: NLM_F_CREATE should be specified when creating new route [ 1470.153409][T15508] net_ratelimit: 113 callbacks suppressed [ 1470.153431][T15508] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1470.162544][T25903] tipc: New replicast peer: 255.255.255.255 [ 1470.177715][T25903] tipc: Enabled bearer , priority 10 [ 1470.215720][T15508] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1470.235753][T15508] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1470.392132][T15523] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1470.407232][T15523] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1470.544174][T15508] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1470.557565][T15508] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1470.610386][T25930] netlink: 'syz.2.13896': attribute type 21 has an invalid length. [ 1470.629010][T25931] netlink: 'syz.2.13896': attribute type 21 has an invalid length. [ 1470.651067][T25930] netlink: 'syz.2.13896': attribute type 6 has an invalid length. [ 1470.667865][T25931] netlink: 'syz.2.13896': attribute type 6 has an invalid length. [ 1470.717973][T15508] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1470.729480][T15508] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1470.862862][T15508] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1471.076448][T25954] x_tables: duplicate underflow at hook 3 [ 1471.119460][T25949] netlink: 'syz.5.13901': attribute type 11 has an invalid length. [ 1471.553540][T25971] netlink: 'syz.1.13908': attribute type 2 has an invalid length. [ 1471.561888][T25971] netlink: 'syz.1.13908': attribute type 11 has an invalid length. [ 1471.887596][T21020] tipc: Node number set to 2886997007 [ 1471.896976][T15495] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 256 - 0 [ 1471.922428][T15495] netdevsim netdevsim3 eth0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1471.941412][T15495] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.956491][T15495] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 256 - 0 [ 1471.965263][T15495] netdevsim netdevsim3 eth1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1471.976725][T15495] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.988913][T15495] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 256 - 0 [ 1472.000279][T15495] netdevsim netdevsim3 eth2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1472.010732][T15495] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.020949][T15495] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 256 - 0 [ 1472.043349][T15495] netdevsim netdevsim3 eth3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1472.052490][T15495] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.062802][T25972] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 1472.775693][T26025] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20002 [ 1472.799078][T26019] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.817447][T26019] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1473.044795][T26019] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.056220][T26019] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1473.266812][T26019] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.290071][T26019] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1473.331005][T26057] __nla_validate_parse: 13 callbacks suppressed [ 1473.331025][T26057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13930'. [ 1473.352974][T26067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13935'. [ 1473.364695][T26067] tc_dump_action: action bad kind [ 1473.370153][T26071] netlink: 'syz.3.13936': attribute type 10 has an invalid length. [ 1473.483733][T26077] netlink: 'syz.5.13937': attribute type 9 has an invalid length. [ 1473.500409][T26069] lo speed is unknown, defaulting to 1000 [ 1473.519088][T26077] netlink: 'syz.5.13937': attribute type 11 has an invalid length. [ 1473.537647][T26077] netlink: 'syz.5.13937': attribute type 12 has an invalid length. [ 1473.589778][T26077] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.13937'. [ 1473.610978][T26077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13937'. [ 1473.636258][T15508] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 1473.649072][T15508] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1473.686790][T15508] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 1473.707568][T15508] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1473.758030][T15508] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 1473.780003][T15508] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1473.813341][T15508] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 1473.850792][T15508] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1473.967413][T26090] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13945'. [ 1473.981018][T26092] pim6reg: entered allmulticast mode [ 1474.021562][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1474.029658][ C0] lec:lec_tx_timeout: lec0 [ 1474.133945][T26100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13948'. [ 1474.163512][T26100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13948'. [ 1474.190266][T26100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13948'. [ 1474.204796][T26107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13951'. [ 1474.233022][T26100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13948'. [ 1474.908035][T26142] sit0: entered promiscuous mode [ 1474.944139][T26142] netlink: 'syz.1.13961': attribute type 1 has an invalid length. [ 1475.127295][T26121] lec:lec_atm_close: lec0: Shut down! [ 1475.241998][T15495] net_ratelimit: 149 callbacks suppressed [ 1475.242021][T15495] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1475.261701][T15495] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1475.381760][T15495] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1475.389687][T15495] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1475.434422][T26158] Cannot find add_set index 2 as target [ 1475.466211][T26160] syzkaller1: entered promiscuous mode [ 1475.486540][T26160] syzkaller1: entered allmulticast mode [ 1475.522813][T15495] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1475.582433][T15518] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1475.604390][T15518] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1475.732266][T15500] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1475.750298][T15500] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1475.861686][T15500] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1475.965860][T26181] bond4: Removing last arp target with arp_interval on [ 1476.038035][T26192] netlink: 'syz.0.13976': attribute type 2 has an invalid length. [ 1476.254083][T26200] netlink: 'syz.0.13980': attribute type 12 has an invalid length. [ 1476.311972][T26204] IPv6: NLM_F_CREATE should be specified when creating new route [ 1476.328915][T26204] netlink: 'syz.5.13982': attribute type 1 has an invalid length. [ 1476.580756][T26223] sctp: [Deprecated]: syz.1.13988 (pid 26223) Use of int in maxseg socket option. [ 1476.580756][T26223] Use struct sctp_assoc_value instead [ 1476.653957][T26223] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1476.759815][T26228] syzkaller1: entered promiscuous mode [ 1476.765927][T26228] syzkaller1: entered allmulticast mode [ 1476.815657][T26233] IPVS: length: 229 != 8 [ 1477.096493][T26252] syzkaller0: entered promiscuous mode [ 1477.110639][T26252] syzkaller0: entered allmulticast mode [ 1477.358920][T26268] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1477.461095][T26272] bond7: entered promiscuous mode [ 1477.469006][T26272] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1477.647237][T26280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1477.677133][T26280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.856818][T15508] nci: nci_ntf_packet: unknown ntf opcode 0x503 [ 1478.497376][T26326] __nla_validate_parse: 24 callbacks suppressed [ 1478.497398][T26326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14018'. [ 1478.605734][T26285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1478.827580][T26345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14022'. [ 1478.858189][T26345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14022'. [ 1478.942059][T26345] netlink: 'syz.3.14022': attribute type 3 has an invalid length. [ 1478.950177][T26353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14026'. [ 1478.983350][T26351] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14025'. [ 1479.583092][T26356] ip6_vti0 speed is unknown, defaulting to 1000 [ 1479.640412][T26356] ip6_vti0 speed is unknown, defaulting to 1000 [ 1479.655823][T15508] dummy0: left allmulticast mode [ 1479.671420][T15508] dummy0: left promiscuous mode [ 1479.686012][T15508] bridge0: port 3(dummy0) entered disabled state [ 1479.695567][T15508] bridge_slave_1: left allmulticast mode [ 1479.701267][T15508] bridge_slave_1: left promiscuous mode [ 1479.720841][T15508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.753216][T15508] bridge_slave_0: left allmulticast mode [ 1479.758942][T15508] bridge_slave_0: left promiscuous mode [ 1479.775094][T15508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.841233][T15508] tipc: Resetting bearer [ 1480.011142][T26382] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14033'. [ 1480.131875][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1480.139986][ C0] lec:lec_tx_timeout: lec0 [ 1480.144780][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1480.253649][T15518] net_ratelimit: 125 callbacks suppressed [ 1480.253670][T15518] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1480.313130][T15518] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1480.345237][T15500] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1480.346509][T15508] dvmrp6 (unregistering): left allmulticast mode [ 1480.373300][T15500] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1480.391736][T22768] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1480.411611][T15518] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1480.431967][T15518] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1480.451897][T22768] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1480.471673][T22768] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1480.503057][T22768] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1480.597152][T15508] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 1480.607073][T15508] bridge4 (unregistering): left promiscuous mode [ 1480.614282][T15508] bridge4 (unregistering): left allmulticast mode [ 1480.727198][T15508] tipc: Disabling bearer [ 1480.816367][T15508] bond0 (unregistering): Released all slaves [ 1480.831121][T15508] bond1 (unregistering): Released all slaves [ 1480.845821][T15508] bond2 (unregistering): Released all slaves [ 1480.862267][T15508] bond3 (unregistering): Released all slaves [ 1480.885463][T15508] bond4 (unregistering): Released all slaves [ 1480.900661][T15508] bond5 (unregistering): (slave lo): Releasing backup interface [ 1480.911298][T15508] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1480.925800][T15508] bond5 (unregistering): Released all slaves [ 1480.944462][T15508] bond6 (unregistering): (slave vcan1): Releasing backup interface [ 1480.954527][T15508] bond6 (unregistering): Released all slaves [ 1480.969290][T15508] bond7 (unregistering): Released all slaves [ 1480.989610][T26356] ip6_vti0 speed is unknown, defaulting to 1000 [ 1481.204770][T15508] tipc: Left network mode [ 1481.276022][T26407] x_tables: duplicate underflow at hook 3 [ 1481.297801][T26404] bond7: option all_slaves_active: invalid value (222) [ 1481.349618][T26404] bond7 (unregistering): Released all slaves [ 1481.516958][T26356] infiniband syz2: set down [ 1481.528707][T26403] bond7: option all_slaves_active: invalid value (222) [ 1481.531970][T26356] infiniband syz2: added ip6_vti0 [ 1481.548170][T26356] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1481.550202][T26356] infiniband syz2: Couldn't open port 1 [ 1481.581337][T26403] bond7 (unregistering): Released all slaves [ 1481.623238][T26356] RDS/IB: syz2: added [ 1481.627455][T26356] smc: adding ib device syz2 with port count 1 [ 1481.634315][T26356] smc: ib device syz2 port 1 has no pnetid [ 1481.685596][T21020] ip6_vti0 speed is unknown, defaulting to 1000 [ 1481.699754][ T6534] ip6_vti0 speed is unknown, defaulting to 1000 [ 1481.707637][T26356] ip6_vti0 speed is unknown, defaulting to 1000 [ 1481.921093][T26430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14039'. [ 1482.138821][T26438] netlink: 'syz.1.14042': attribute type 31 has an invalid length. [ 1482.538374][T26356] ip6_vti0 speed is unknown, defaulting to 1000 [ 1482.769163][T26460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14048'. [ 1482.995724][T26356] ip6_vti0 speed is unknown, defaulting to 1000 [ 1483.105565][T26475] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14051'. [ 1483.136942][T26477] netlink: 'syz.3.14053': attribute type 1 has an invalid length. [ 1483.155562][T26477] netlink: 'syz.3.14053': attribute type 1 has an invalid length. [ 1483.337839][T26482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14055'. [ 1483.358477][T26482] mac80211_hwsim hwsim129 syzkaller0: entered promiscuous mode [ 1483.379156][T26482] mac80211_hwsim hwsim129 syzkaller0: entered allmulticast mode [ 1483.442058][T26485] tipc: Enabled bearer , priority 0 [ 1483.632638][T12622] Bluetooth: hci2: command 0x040f tx timeout [ 1483.678719][T26489] __nla_validate_parse: 1 callbacks suppressed [ 1483.678740][T26489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14057'. [ 1483.721565][T26489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14057'. [ 1484.055221][T26504] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.14061'. [ 1484.134015][T26488] bridge0: port 3(syz_tun) entered disabled state [ 1484.599493][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1484.863743][T26356] ip6_vti0 speed is unknown, defaulting to 1000 [ 1484.879310][T26489] geneve2: entered promiscuous mode [ 1484.902870][T26489] geneve2: entered allmulticast mode [ 1484.965670][T26503] veth3: entered allmulticast mode [ 1485.022991][T15500] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1485.040803][T15500] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1485.081129][T15500] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1485.121422][T15500] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1485.151611][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1485.159681][ C0] lec:lec_tx_timeout: lec0 [ 1485.262398][T15500] net_ratelimit: 168 callbacks suppressed [ 1485.262421][T15500] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1485.288010][T15500] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1485.379009][T26545] netlink: 192 bytes leftover after parsing attributes in process `syz.1.14071'. [ 1485.414172][T15500] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1485.432014][T15500] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1485.554620][T15489] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1485.572099][T15489] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1485.586160][T26551] SET target dimension over the limit! [ 1485.608376][T26356] ip6_vti0 speed is unknown, defaulting to 1000 [ 1485.712202][T15500] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1485.733131][T15500] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1485.854691][T15500] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1485.881910][T15500] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1485.896788][T26565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14079'. [ 1486.068618][T26572] tipc: Resetting bearer [ 1486.121978][T26571] netlink: 'syz.3.14082': attribute type 2 has an invalid length. [ 1486.132525][T22768] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1486.164283][T26573] mac80211_hwsim hwsim129 syzkaller0: left promiscuous mode [ 1486.216312][T26356] ip6_vti0 speed is unknown, defaulting to 1000 [ 1486.223676][T26581] xt_l2tp: invalid flags combination: 0 [ 1486.425426][T26588] netlink: 'syz.3.14086': attribute type 24 has an invalid length. [ 1486.532853][T26594] sctp: [Deprecated]: syz.0.14087 (pid 26594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1486.532853][T26594] Use struct sctp_sack_info instead [ 1486.657217][T26599] [ 1486.659627][T26599] ====================================================== [ 1486.666672][T26599] WARNING: possible circular locking dependency detected [ 1486.673732][T26599] syzkaller #0 Not tainted [ 1486.678338][T26599] ------------------------------------------------------ [ 1486.685391][T26599] syz.3.14088/26599 is trying to acquire lock: [ 1486.691568][T26599] ffffffff8fd47ad8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x57d/0xbb0 [ 1486.700804][T26599] [ 1486.700804][T26599] but task is already holding lock: [ 1486.708199][T26599] ffff88802c374870 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 1486.717500][T26599] [ 1486.717500][T26599] which lock already depends on the new lock. [ 1486.717500][T26599] [ 1486.727939][T26599] [ 1486.727939][T26599] the existing dependency chain (in reverse order) is: [ 1486.736987][T26599] [ 1486.736987][T26599] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1486.745044][T26599] _raw_spin_lock_bh+0x36/0x50 [ 1486.750424][T26599] nr_rt_device_down+0x153/0x860 [ 1486.755933][T26599] nr_device_event+0x137/0x150 [ 1486.761264][T26599] notifier_call_chain+0x1be/0x400 [ 1486.766939][T26599] __dev_notify_flags+0x16d/0x310 [ 1486.772531][T26599] netif_change_flags+0xe8/0x1a0 [ 1486.778070][T26599] dev_change_flags+0x130/0x260 [ 1486.783492][T26599] dev_ioctl+0x7b4/0x1150 [ 1486.788395][T26599] sock_do_ioctl+0x23e/0x320 [ 1486.793540][T26599] sock_ioctl+0x5c6/0x7f0 [ 1486.798422][T26599] __se_sys_ioctl+0xfc/0x170 [ 1486.803578][T26599] do_syscall_64+0x14d/0xf80 [ 1486.808742][T26599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.815190][T26599] [ 1486.815190][T26599] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1486.823052][T26599] _raw_spin_lock_bh+0x36/0x50 [ 1486.828381][T26599] nr_rt_device_down+0xbe/0x860 [ 1486.833786][T26599] nr_device_event+0x137/0x150 [ 1486.839120][T26599] notifier_call_chain+0x1be/0x400 [ 1486.844784][T26599] __dev_notify_flags+0x16d/0x310 [ 1486.850363][T26599] netif_change_flags+0xe8/0x1a0 [ 1486.855855][T26599] dev_change_flags+0x130/0x260 [ 1486.861252][T26599] dev_ioctl+0x7b4/0x1150 [ 1486.866131][T26599] sock_do_ioctl+0x23e/0x320 [ 1486.871257][T26599] sock_ioctl+0x5c6/0x7f0 [ 1486.876132][T26599] __se_sys_ioctl+0xfc/0x170 [ 1486.881265][T26599] do_syscall_64+0x14d/0xf80 [ 1486.886404][T26599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.892841][T26599] [ 1486.892841][T26599] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1486.900767][T26599] __lock_acquire+0x15a5/0x2cf0 [ 1486.906163][T26599] lock_acquire+0xf0/0x2e0 [ 1486.911125][T26599] _raw_spin_lock_bh+0x36/0x50 [ 1486.916441][T26599] nr_del_node+0x57d/0xbb0 [ 1486.921431][T26599] nr_rt_ioctl+0xb34/0xf90 [ 1486.926407][T26599] sock_do_ioctl+0x101/0x320 [ 1486.931535][T26599] sock_ioctl+0x5c6/0x7f0 [ 1486.936397][T26599] __se_sys_ioctl+0xfc/0x170 [ 1486.941610][T26599] do_syscall_64+0x14d/0xf80 [ 1486.946748][T26599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.953190][T26599] [ 1486.953190][T26599] other info that might help us debug this: [ 1486.953190][T26599] [ 1486.963433][T26599] Chain exists of: [ 1486.963433][T26599] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1486.963433][T26599] [ 1486.977284][T26599] Possible unsafe locking scenario: [ 1486.977284][T26599] [ 1486.984759][T26599] CPU0 CPU1 [ 1486.990142][T26599] ---- ---- [ 1486.995518][T26599] lock(&nr_node->node_lock); [ 1487.000307][T26599] lock(nr_node_list_lock); [ 1487.007435][T26599] lock(&nr_node->node_lock); [ 1487.014740][T26599] lock(nr_neigh_list_lock); [ 1487.019449][T26599] [ 1487.019449][T26599] *** DEADLOCK *** [ 1487.019449][T26599] [ 1487.027646][T26599] 2 locks held by syz.3.14088/26599: [ 1487.032945][T26599] #0: ffffffff8fd47b38 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0x253/0xbb0 [ 1487.042469][T26599] #1: ffff88802c374870 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 1487.052344][T26599] [ 1487.052344][T26599] stack backtrace: [ 1487.058253][T26599] CPU: 0 UID: 0 PID: 26599 Comm: syz.3.14088 Not tainted syzkaller #0 PREEMPT(full) [ 1487.058275][T26599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1487.058287][T26599] Call Trace: [ 1487.058295][T26599] [ 1487.058303][T26599] dump_stack_lvl+0xe8/0x150 [ 1487.058331][T26599] print_circular_bug+0x2e1/0x300 [ 1487.058360][T26599] check_noncircular+0x12e/0x150 [ 1487.058389][T26599] __lock_acquire+0x15a5/0x2cf0 [ 1487.058422][T26599] lock_acquire+0xf0/0x2e0 [ 1487.058441][T26599] ? nr_del_node+0x57d/0xbb0 [ 1487.058468][T26599] ? nr_del_node+0x247/0xbb0 [ 1487.058494][T26599] ? nr_del_node+0x57d/0xbb0 [ 1487.058518][T26599] _raw_spin_lock_bh+0x36/0x50 [ 1487.058541][T26599] ? nr_del_node+0x57d/0xbb0 [ 1487.058566][T26599] nr_del_node+0x57d/0xbb0 [ 1487.058594][T26599] nr_rt_ioctl+0xb34/0xf90 [ 1487.058623][T26599] ? kasan_quarantine_put+0xbb/0x1f0 [ 1487.058639][T26599] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1487.058669][T26599] ? apparmor_capable+0x137/0x1a0 [ 1487.058697][T26599] ? capable+0x88/0xe0 [ 1487.058719][T26599] ? nr_ioctl+0x1b1/0x3b0 [ 1487.058743][T26599] sock_do_ioctl+0x101/0x320 [ 1487.058761][T26599] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1487.058777][T26599] ? do_futex+0x333/0x420 [ 1487.058804][T26599] sock_ioctl+0x5c6/0x7f0 [ 1487.058821][T26599] ? __pfx_sock_ioctl+0x10/0x10 [ 1487.058838][T26599] ? __fget_files+0x2a/0x420 [ 1487.058861][T26599] ? __fget_files+0x3a0/0x420 [ 1487.058884][T26599] ? __fget_files+0x2a/0x420 [ 1487.058909][T26599] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1487.058929][T26599] ? __pfx_sock_ioctl+0x10/0x10 [ 1487.058945][T26599] __se_sys_ioctl+0xfc/0x170 [ 1487.058963][T26599] do_syscall_64+0x14d/0xf80 [ 1487.058988][T26599] ? trace_irq_disable+0x3b/0x150 [ 1487.059012][T26599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.059029][T26599] ? clear_bhb_loop+0x40/0x90 [ 1487.059048][T26599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.059065][T26599] RIP: 0033:0x7fc34b39c629 [ 1487.059082][T26599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.059104][T26599] RSP: 002b:00007fc3495f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1487.059122][T26599] RAX: ffffffffffffffda RBX: 00007fc34b615fa0 RCX: 00007fc34b39c629 [ 1487.059135][T26599] RDX: 0000200000000080 RSI: 000000000000890c RDI: 0000000000000004 [ 1487.059146][T26599] RBP: 00007fc34b432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1487.059157][T26599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1487.059168][T26599] R13: 00007fc34b616038 R14: 00007fc34b615fa0 R15: 00007fff3bb65c08 [ 1487.059189][T26599] [ 1487.333006][T26356] ip6_vti0 speed is unknown, defaulting to 1000 [ 1487.447451][T26356] ip6_vti0 speed is unknown, defaulting to 1000 [ 1487.524914][T26356] ip6_vti0 speed is unknown, defaulting to 1000 [ 1487.603067][T26356] ip6_vti0 speed is unknown, defaulting to 1000 [ 1487.680924][T26356] ip6_vti0 speed is unknown, defaulting to 1000 [ 1487.765688][T26589] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1487.917907][T15508] hsr_slave_1: left promiscuous mode [ 1487.924245][T15508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1487.932458][T15508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.945272][T15508] veth1_macvtap: left promiscuous mode [ 1488.000052][T15508] pimreg (unregistering): left allmulticast mode [ 1488.015262][T15508] pim6reg (unregistering): left allmulticast mode [ 1488.073917][T15508] team0 (unregistering): Port device team_slave_1 removed [ 1488.359128][T15508] IPVS: stop unused estimator thread 0... [ 1488.671786][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1490.341648][T15523] net_ratelimit: 81 callbacks suppressed [ 1490.341672][T15523] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1490.355297][T15523] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1490.471589][T22768] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1490.479404][T22768] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1490.591736][T15523] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1490.599605][T15523] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1490.711654][T22768] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1490.719564][T22768] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1490.831790][T22768] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1490.840413][T22768] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1493.951610][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5280 ms [ 1493.959728][ C0] lec:lec_tx_timeout: lec0 [ 1493.964695][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1495.361711][T15495] net_ratelimit: 80 callbacks suppressed [ 1495.361754][T15495] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1495.375552][T15495] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1495.491924][T22768] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1495.499721][T22768] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1495.612077][T15523] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1495.619867][T15523] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1495.731857][T15523] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1495.739752][T15523] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1495.852067][T15523] bond4: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1495.860440][T15523] bond4: (slave ip6gretap2): failed to get link speed/duplex