last executing test programs: 4.130265305s ago: executing program 2 (id=8010): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0x0, 0x1000000}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0x0, 0x1000000}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x4}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xe498}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xfff}, {}, {}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61159b00000000006113500000000000bfa000000000000036000a00080013002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee60060bf310000000000001f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44b6b498b98ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089da6d6a710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f50e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8d829906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a443c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87100900000000000000de8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e52a2a10f922cc2de27ac24483639c369b06ecc7ea4195898691cc9c414c599c33eac655d01d1c4f89c999fd7aaa5d0984c82128ad6a1fad9dd079e095aa8331fe3d2e2baed37d6c93d402dc67b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="005d01000000010000002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) (async) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r8 = accept4(r7, 0x0, 0x0, 0x80000) write(r8, &(0x7f0000000040)="cb", 0xfffffdef) (async) write(r8, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r8, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf00) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf00) 3.444672401s ago: executing program 2 (id=8016): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x4, 0x53, 0x4, 0x7b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, @mcast2={0xff, 0x5}, 0x8, 0x90, 0x7d, 0x6}}) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x264, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e9e4e06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b9d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28e1a4e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbedc360}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a8d196d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3450}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf445c31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf9c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cccb5a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4efa090c}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x104, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68a464de}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb2a9d40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8fac67e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5248d230}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa75c7b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x620ddbd9}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb3ff232}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f65f556}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49d481e4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2293b54c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43ba2d28}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c5a9771}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f13d265}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35ad4ca8}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x582805e3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e20250}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ac946f1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a9a942d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cbf1a02}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x264}, 0x1, 0x0, 0x0, 0x24008801}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x9, @private2, 0xf}, @in6={0xa, 0x4e22, 0x500, @mcast2, 0x10001}, @in6={0xa, 0x4e20, 0xc2, @loopback}], 0x90) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r8}, @nested={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r9, 0x541b, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mkdirat$cgroup(r10, &(0x7f0000000000)='syz0\x00', 0x1ff) 2.939197233s ago: executing program 2 (id=8022): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2.668204853s ago: executing program 2 (id=8026): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f250000000014f6d0000000000100007f0000017f00000100186371ae9b1c03"], 0x0) 2.421577691s ago: executing program 2 (id=8027): clock_gettime(0x8, &(0x7f0000000280)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r2, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r10, r9, 0x80000001, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x1404, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008444) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) sendmsg$NFC_CMD_GET_DEVICE(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004881}, 0x20000001) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8100}, 0x48004) clock_gettime(0x8, &(0x7f0000000280)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r2, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async) pipe(&(0x7f0000000740)) (async) pipe(&(0x7f0000000000)) (async) tee(r10, r9, 0x80000001, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x1404, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008444) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_GET_DEVICE(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004881}, 0x20000001) (async) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8100}, 0x48004) (async) 2.41753059s ago: executing program 3 (id=8028): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000015030000088d4e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c070000000000000095cb202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec85eeeb83ccaec388158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d0800e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb400f692f374dfab73f90000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1d913c3fd6edc9b9bfc8c6a14ff595eff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a0397c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed551c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95f9ddf30e066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18092f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aac263dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d85fa4373d5b569ac3353cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2ff070000cfb030dd4ac0fe54db67510d3e9a5d36b900000074000000000000000000000000006e96ba8f5e7e89bef4226173e20ebb17b924e9e6d0ee163713b2bd56f58dec64df91417beaac4061e6216774e048276e110d25ae7feb600897c8364af49ce59027a6ee5d7c6e12c0f45c0f376d9da065ca0499e209655d2420fcfa10fccf2cbe7b60161cc6cbd874c928689acd9d4e00cefacc887b76767ca1279e34d20b276dff8318e0ec5ab2929e63ef6a32b1abc55859804e2ec19e5b96a2df9f488e7e25a839701e37cdd850c2f26685047f1d492571482f993bb96642a3f56a0ea24d765c6edf2352e00bc4ff4a723ee2d9307e6f25bd05f98583cc0868"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001280), 0x8}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{}, &(0x7f0000001300), &(0x7f0000001340)=r1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f0000000000080005"], 0x44}}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b80)="7698b2d1c077972283df15b6f8502af238e6d169c0820333705ad84646ce6d03ff053ff82a15c9ab82aea6272bf484bf86b250c7feddfa036816ab8a4b1ca6f38a8ba32498a0bd7bc988bffe6ae79c1e38ef1ba6f09bd705d88a170e31ada7ed2b5f3fdaf21ae7bcb9d2c7eeea2b5e21ba28667267ddde981d4bf6f45bc4202ac2d71ceb1e546542d938a8af38680bd7fddcb9a115355a47cc3bd5843a6d2fa5d084f37c47f8e077f17e6af48c64d0", 0xaf}, {&(0x7f0000000c40)="9720cac0225d1c44188851108dfa018f72cd343cdd166a9574f7ae5f2c2c5ddbace97edff49a59b96e8d44e1cbec0f89876ae9bccc9a1d3eb5682bfde8541cc5742bd4377d045139d2050c13b0453bef48ac7c820d7bfa86c035e7362f6c6b785fd737e91c14a25fd8f3d26e621c65edbe28f07dc77f7c3d418e9c46092f5fe95fd1033b6c92a3e07f05993c1c265f3bb255e9338f4caa0f344b08a2664a1f0e1c4ab895b8a1a305a697d1ccb58e4c3358aa447e2330bad6b7207d5562bb16d506ec6115a23a0c559a1d9dd8b9bdbd8d5381ce60145759f707d37f7a10c60204aa31334f3b3748c6bd3529bfd8", 0xed}, {&(0x7f0000000d40)="9f4355b80df2471a55a0546be58a00020000000000002251758a6c968eeccf28862e7edb830d228d2696ed2c760000449f0193e2531160b66d11626bda25ce6f31befaa3be10022f8d0861c266d52700a38ebf30cd285e8f46fde6872105adbebead935dd5268138a5df5d95e9b15ae88eb2d5f10cc6436d783221c9eb82e64290fe83b4791e314d7ad41c0226da173d767840b9617db280e760791e6c64b4e8", 0xa0}, {&(0x7f0000000e00)="41a435fd3a315eede8cb33e68b93a7b529f8201183def1f28751dde2d2dfdcc250b73c81b8bb9ee7fbbfed741d9c192d48b2948a921dfeeeea5961c055ce30012bc025e9b37cc61222973f700e54525fc9637d6d058153f0266e9b51a62842d2f0cb04bf07c4281dc5dd116fe8478fdf2dbde67c5f28864efc5810cb00d3ddea57a7ce7eea405fb6cab84915359bee0c5c74a1591981815b0e57", 0x9a}, {&(0x7f0000000ec0)="2fbd55f8252c491866a6796d42d801881047f354ea8b4cd7b3c876916737591a7dea869fa8bfa6c983d362b6a322f344de886eb6bbf16a99c1f6efea8feb40ccb6c2efb307775bb86527924ef6485e922c0fdd784ed3d7a0dabfb5e7", 0x5c}], 0x5, &(0x7f00000013c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0xf7, 0x0, 0x6, [0x4, 0xf0f, 0xfffffff9, 0x3, 0x2, 0x1000, 0x8, 0x687, 0x10]}, @ssrr={0x89, 0xf, 0x22, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp={0x44, 0x14, 0x76, 0x0, 0x0, [0x2, 0x4, 0x4, 0xfffffff7]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xab}}], 0xe0}, 0x40010) syz_emit_ethernet(0x4e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000a8bc001806fefe880000000000000000000000000001fe8000000000000000000000000000aa00034001e92067c7582b2eb8391dedf7b434372fa36ba6635ad790e35b2a89c5070089e7c2d87ad03665356673a01b6d6e258a7a2d906864e30155392314141048876931bb065627d1bd0726b56761c2332232cd695a21b3051e23f40c93b1b3d619222d24328899b8a817384deca5d492e25396d80dc10fbb5539992d4703d218de65d91d144ec425", @ANYRES32=0x41424344, @ANYBLOB="32924309dfac11fc78e4e0cab50780d06097615ae4239c1363de7272f5ae1efcb0b72da11fcee36ca70968f5a21a0fa66a31b1d8e97005f5b1cb19ad00e9db698bee668745c9763fed2fe7c7b05db9da28a0c897847fc726ac4cdab23a4e4d1734af79e2e2a613a99c00925a7a3018ad5479845401b39871a5334fdfe761832169c20a8f278849866d47032ccf4b9c5ecd4189a7a8fdd4c2710d6c237356f1ea486b81e311280e5fe69848f37f4f8e31026f5882", @ANYBLOB="6002fffd9078ffff03030800"], 0x0) r5 = socket$inet(0xa, 0xa, 0x84) listen(r5, 0xfffffffd) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x0, 0x1, 0xe, @vifc_lcl_ifindex=r8, @broadcast}, 0x10) r10 = socket$inet(0xa, 0x801, 0x84) listen(r10, 0x8) r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r11, 0x7) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r12, 0x100) r13 = socket$kcm(0x10, 0x400000002, 0x0) socket$inet6(0xa, 0x1, 0x6) sendmsg$inet(r13, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x6) writev(r14, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2.181673135s ago: executing program 1 (id=8030): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) listen(r2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200020000000800010003000008"], 0x58}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="1003120400000000000400ca1a00", 0xe, 0x24008000, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.85736518s ago: executing program 4 (id=8031): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = epoll_create1(0x0) close(0x3) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000004}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x28c9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1400000}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x80000040}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.825190484s ago: executing program 0 (id=8032): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@private1, 0x18, r2}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000002c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x50, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x6, 0xfffffffe, 0x4, @private1, @private1, 0x1, 0x80, 0x2a, 0x4}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r8, 0xffffffffffffffff, 0x500}, 0x57) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x401c801}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "f16d73c0e798"}]}}}}}}}}, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r11 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8) sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) 1.658815693s ago: executing program 2 (id=8033): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x40c0080) 1.580002259s ago: executing program 1 (id=8034): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0xfb0fb27e8258bd3f, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_MTU={0x8, 0x4, 0x4000000}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) 1.508222627s ago: executing program 3 (id=8035): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@printk={@p, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xf3ff}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) 1.507893338s ago: executing program 4 (id=8036): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 1.238777806s ago: executing program 3 (id=8037): r0 = socket$kcm(0x10, 0x2, 0x0) accept(r0, &(0x7f0000000540)=@in6, &(0x7f0000000100)=0x80) (async) socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x73c373934f61c9b6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async) sendto$packet(r1, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xe, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) socket$igmp(0x2, 0x3, 0x2) (async) socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000009aa500000000000000800000000000009e4e60ab7696c5d4ddadd000c8c32b93ae323fa809e1b1f8e54a63a9be5c1183eae1788778d3db6ffa56ed602a425f3db20dc74047530595b636", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESDEC], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10017}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x32}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}}, 0x40000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c000058000280140003002001000000000000000000140000000114000200fc0200"/68], 0x5c}}, 0x0) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @null}, [@remote, @rose, @netrom, @bcast, @bcast, @netrom, @default, @bcast]}, &(0x7f0000000040)=0x48) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) (async) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r8, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) unshare(0x6020480) 1.221073531s ago: executing program 1 (id=8038): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x6, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0xc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20003}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x48}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x80) 1.22015902s ago: executing program 4 (id=8039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000080)=@raw=[@map_val={0x18, 0xc, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @exit, @alu={0x4, 0x0, 0x0, 0xa, 0x4, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit, @map_idx={0x18, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000100)='syzkaller\x00', 0xfff, 0x5a, &(0x7f00000002c0)=""/90, 0x41000, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xb67a, 0xffffffffffffffff, 0x4, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x0, 0x5, 0x10, 0xb}, {0x2, 0x1, 0xe, 0x5}, {0x5, 0x2, 0x6, 0x4}, {0x3, 0x1, 0xd, 0x1}]}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup, 0x3c, 0x1, 0x3cab, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000002c0)={0x18, 0x2, {0x0, @dev, 'ip6gre0\x00'}}, 0x1e) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000340)='@-\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@fallback=r4, r2, 0x0, 0x24, 0x0, @void, @void, @void, @value=r5, r3}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r6}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x27, &(0x7f00000004c0)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, @snprintf], &(0x7f0000000600)='GPL\x00', 0x3, 0xa9, &(0x7f0000000640)=""/169, 0x1e00, 0x9, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x1, 0x2, 0x80000000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x0, 0x1, 0x0, 0xc}, {0x1, 0x5, 0x0, 0xc}, {0x2, 0x4, 0x7, 0x2}, {0x3, 0x5, 0x5}, {0x3, 0x1, 0x2, 0x9}]}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup=r6, r1, 0x12, 0xc, 0x0, @void, @value=r7, @void, @void, r3}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x60}}, 0x4000) 1.190610341s ago: executing program 0 (id=8040): r0 = socket(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x34, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r6}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xffff}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 900.685447ms ago: executing program 4 (id=8041): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000001c0), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r5 = gettid() r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000001c0), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) (async) gettid() (async) socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async) 864.546915ms ago: executing program 1 (id=8042): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078252000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000af8a0085000000cb000000950000000000000044fc2463c83f"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x21) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendto$inet(r2, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0a00ff00000000711044000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 839.691792ms ago: executing program 3 (id=8043): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0x1ff, 0xc9, {{0x1e, 0x4, 0x1, 0x2, 0x78, 0x67, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@timestamp_addr={0x44, 0x3c, 0xa4, 0x1, 0x3, [{@broadcast, 0x6}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x7}, {@multicast1, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010101, 0x80}, {@rand_addr=0x64010102, 0x80000001}]}, @rr={0x7, 0x27, 0x10, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010100, @multicast1, @broadcast, @empty, @remote, @private=0xa010102, @loopback]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x400c5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'sit0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x10000, 0x8, {{0x46, 0x4, 0x2, 0x9, 0x118, 0x68, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x73, 0xffffffffffffffff, [{0x1, 0xf, "10bb4c9d331a49822fea7b88e6"}, {0x7, 0xc, "9f4c2288075365448d41"}, {0x5, 0x4, "61a3"}, {0x0, 0xb, "74774be1722d181a8c"}, {0x2, 0x12, "eafc45fb81085592e86b12a1791fc741"}, {0x1, 0xc, "291d344dc9ef5c1f4af7"}, {0x5, 0x7, "4ddc582e1a"}, {0x2, 0xf, "d771658607e77b2fdcfe69fa61"}, {0x6, 0x5, "57941d"}, {0x7, 0xa, "0f1c5f3f3e7684a5"}]}, @timestamp={0x44, 0x8, 0x6f, 0x0, 0xa, [0x7be]}, @timestamp_prespec={0x44, 0x1c, 0x5a, 0x3, 0xe, [{@multicast2, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x200}]}, @lsrr={0x83, 0x27, 0xa1, [@private=0xa010102, @multicast2, @private=0xa010102, @private=0xa010101, @rand_addr=0x64010101, @broadcast, @broadcast, @private=0xa010100, @rand_addr=0x64010100]}, @generic={0x94, 0xa, "4c2619e38285e7a5"}, @timestamp_addr={0x44, 0x3c, 0xdb, 0x1, 0x0, [{@local, 0x5}, {@loopback, 0x2}, {@remote, 0xffffffb2}, {@dev={0xac, 0x14, 0x14, 0x27}, 0xffffffff}, {@empty, 0xfffffff7}, {@loopback, 0xd}, {@rand_addr=0x64010101, 0x7}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000880)={'erspan0\x00', 0x0, 0x20, 0x40, 0x4, 0x3, {{0x29, 0x4, 0x1, 0x2, 0xa4, 0x65, 0x0, 0xd, 0x2f, 0x0, @remote, @private=0xa010101, {[@rr={0x7, 0x23, 0x75, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @local]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0xc, "a2660bf9a02ae93f6b7e"}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x2, 0xf, "d281803745b7d1bf5b30997288"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xad, [@empty, @loopback, @local, @loopback, @empty, @local]}, @lsrr={0x83, 0x13, 0xc0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast2, @broadcast]}, @generic={0x7, 0x8, "fa1a34a62383"}, @ssrr={0x89, 0xb, 0xa6, [@multicast1, @local]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x1ec, r1, 0xa, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1ec}}, 0x20000080) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'pim6reg0\x00', {}, 0x200}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@ipv4_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bridge_slave_0\x00'}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x6}]}, 0x40}}, 0x0) 814.089729ms ago: executing program 0 (id=8044): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x40000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000003f00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000043c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40840) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x40000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000003f00), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000043c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40840) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) (async) write$cgroup_freezer_state(r6, 0x0, 0x0) (async) socket$inet(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) 660.488422ms ago: executing program 3 (id=8045): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x7}}, 0x14}}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x88, 0x5, "c2801075c55422c706594cf83a09624aba2c95c94b147148b23058c92980624f2de862f62658253ded57ecec83e24a57906c6e7199122e52f482eff932edbef8e0f04f5e350a0a8fb3f48ac471b5e53ac9b752421c0260198f281de8bd97e807358fdd7112a59a7e9cec8a96512b6bc44125614c7f029b4d7931652325af6ae6bb0af28d"}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/63, 0x3f}, {0x0}], 0x2) 455.705362ms ago: executing program 0 (id=8046): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x140b, 0x800, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x9, 0x6, 0x0, 0x3f, 0x900000, 0x7, 0x4000000, 0x5, r7}, &(0x7f0000000080)=0x20) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 427.535308ms ago: executing program 1 (id=8047): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x2, 0x8, 0x2}, {0x8, 0x1d, 0x65, 0x6}, {0x0, 0xd, 0x40, 0x2}]}, 0x10) 320.941102ms ago: executing program 4 (id=8048): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000006c0)=@ethernet={0x6, @local}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000080)="be7023db7bbbe5ddfd3de47c88597d387b3459d78a4b3e532b45f7b653f00ba12d28a9d9f4d2d6931bbf5b77", 0x2c}, {&(0x7f0000000740)="1550aafb04bc7a835bc639e73cfd54cc58f46fedbba4a722c9016330d02810e635ef5fd9ca5bb3e2429fe0db190aae8fca8746d637ba1949f0beabbd0b1bb8200cda075f084aa8f67fe6f6d86f1e06a5a4f3", 0x52}, {&(0x7f00000007c0)="e9d809bb5dab33f1934cee24de3ca2334302639ab5d955bc71a11089cdec67ae76dd042454a3f3e40956096626a5b991767f260897cda766d3e4b2b21e018fabfcf480463f714edcadf32053ef0b6be48c37bea7c10bed174bb8c5bffb4f2b97dedd7853e427231e2a", 0x69}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000940)="ac97c5e5b58511ee2d0a64d8d6eaaeb1bd099af08fd175464f85f7760108d216a245410050544371bafe195b887bc105c8aba25fb4f664efc1b9d71c494ef71ecf874aa6bc1ef7afd6341f215c161226cb1500bf0de78e34710dc21b108cd1bccf", 0x61}, {&(0x7f00000009c0)="9fe2671a73c08c4f0f06fc09c6a7cad826a726fafb8824eb8ec3a842c7b739c9b94ba41ac971773d5d9922a53740ded65c4d4134c5a91edb1f2da229a1674ef1a00bc672326fab32b76c3ce6c0d3e135ee954facfae5afbc8df491ae6b548b6f7370b62d29bd849ae72d57c9c52c06a24d4f8ba08be635c277f07d1e7362b6fff21d", 0x82}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x130}, 0x840) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x1}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="09840000000000003c0012800b00010062726964676500002c000280060027000300000006000600fcff000008001d00000000000500260000000000050025"], 0x64}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, 0x0}, 0x94) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000540), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r6}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x1, 0x9, 0x3306, 0xb, 0x8001, 0x2, 0x4}, &(0x7f0000000240)={0x2, 0x7f, 0x4d21, 0x1, 0x4, 0x100, 0xffffffffffffffff, 0x2}, &(0x7f00000002c0)={0x1cb0, 0x80000001, 0x3, 0x1, 0x80000000, 0x0, 0x8, 0x4}, &(0x7f0000000340), &(0x7f0000000640)={&(0x7f0000000580)={[0x3]}, 0x8}) 258.839958ms ago: executing program 3 (id=8049): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000003d000701fcffffff00000000047c0080240000000c000380"], 0x24}}, 0x8004) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x140c, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a030000000000000000000300000009000b0073797a30000000000900010073797a30"], 0xcc}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x404c000) (async) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x83, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 229.077229ms ago: executing program 0 (id=8050): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, 0x0, 0x0) 204.630036ms ago: executing program 1 (id=8051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x28}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1800}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000025c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, &(0x7f00000001c0)="65cf0aff", 0x0, 0x4, 0x0, 0x400}, 0x50) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000000)=0xbe9, 0x4) (async) r3 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r4 = socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000280)=0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 330.02µs ago: executing program 4 (id=8052): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) sendto(r0, 0x0, 0x0, 0x80, &(0x7f0000001080)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80) (async, rerun: 64) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=8053): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000d7791094000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff70}, 0x48) kernel console output (not intermixed with test programs): 049][T30506] netlink: 'syz.2.6568': attribute type 11 has an invalid length. [ 1347.396215][T30509] netlink: 'syz.0.6569': attribute type 10 has an invalid length. [ 1347.471684][T30514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6570'. [ 1347.567047][T30516] netlink: 'syz.0.6571': attribute type 11 has an invalid length. [ 1347.664561][T30496] lo speed is unknown, defaulting to 1000 [ 1348.201376][T25703] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1348.707129][T30535] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1348.880345][T30537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6577'. [ 1349.024013][T30539] netlink: 'syz.0.6578': attribute type 10 has an invalid length. [ 1350.256662][T30554] netlink: 'syz.2.6582': attribute type 10 has an invalid length. [ 1350.276956][T30554] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1350.306915][T30554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6582'. [ 1350.316152][T30546] lo speed is unknown, defaulting to 1000 [ 1351.174597][T30564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6586'. [ 1351.186922][T30564] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0 [ 1351.223468][T30564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1351.750640][T30573] netlink: 'syz.2.6589': attribute type 11 has an invalid length. [ 1352.074056][T30583] netlink: 'syz.3.6592': attribute type 2 has an invalid length. [ 1352.344185][T30589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6593'. [ 1353.622806][T30606] macvlan0: left allmulticast mode [ 1353.660392][T30606] netlink: 'syz.3.6598': attribute type 1 has an invalid length. [ 1353.683271][T30606] netlink: 'syz.3.6598': attribute type 2 has an invalid length. [ 1354.043518][T30619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6602'. [ 1354.260724][T30619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6602'. [ 1354.424977][T30625] netlink: 'syz.4.6604': attribute type 9 has an invalid length. [ 1354.459469][T30625] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6604'. [ 1355.219710][ T49] IPVS: starting estimator thread 0... [ 1355.236655][T30641] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6610'. [ 1355.238148][T30637] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1355.330186][T30640] IPVS: using max 34 ests per chain, 81600 per kthread [ 1355.430756][T30611] lo speed is unknown, defaulting to 1000 [ 1356.021781][T30657] netlink: 'syz.0.6614': attribute type 11 has an invalid length. [ 1356.346623][T30664] netlink: 'syz.3.6617': attribute type 1 has an invalid length. [ 1356.586103][T30664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1356.795325][T30668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1356.833745][T30668] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1356.913435][T30668] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1357.200784][T30680] netlink: 'syz.4.6620': attribute type 5 has an invalid length. [ 1357.219855][T30675] netlink: 'syz.1.6619': attribute type 10 has an invalid length. [ 1357.296648][T30675] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1357.313490][T30677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6619'. [ 1358.017530][T30697] netlink: 'syz.4.6625': attribute type 11 has an invalid length. [ 1358.294114][T30659] lo speed is unknown, defaulting to 1000 [ 1360.155550][T30732] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1360.251794][T30732] bond0: (slave bond3): Enslaving as an active interface with an up link [ 1360.364345][T26190] block nbd9: Possible stuck request ffff888025ad5080: control (read@0,4096B). Runtime 1230 seconds [ 1360.806966][T30743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6637'. [ 1361.174409][T30753] netlink: 'syz.4.6640': attribute type 10 has an invalid length. [ 1361.956724][ T49] IPVS: starting estimator thread 0... [ 1362.062042][T30767] IPVS: using max 26 ests per chain, 62400 per kthread [ 1362.431912][T30780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6646'. [ 1362.845228][T30788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6648'. [ 1363.232278][T30788] bridge_slave_1: left promiscuous mode [ 1363.300039][T30788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.394540][T30788] bridge_slave_0: left promiscuous mode [ 1363.403044][T30788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.675755][T30764] lo speed is unknown, defaulting to 1000 [ 1364.116615][T30806] syzkaller1: entered promiscuous mode [ 1364.126400][T30806] syzkaller1: entered allmulticast mode [ 1364.841399][ T94] block nbd15: Possible stuck request ffff888025cc7000: control (read@0,4096B). Runtime 1110 seconds [ 1364.857465][T26190] block nbd14: Possible stuck request ffff888025c97000: control (read@0,4096B). Runtime 1110 seconds [ 1364.976826][T30826] dummy0: entered promiscuous mode [ 1364.987655][T30826] macsec1: entered promiscuous mode [ 1365.012562][T30826] macsec1: entered allmulticast mode [ 1365.024520][T30826] dummy0: entered allmulticast mode [ 1365.075764][T30826] dummy0: left allmulticast mode [ 1365.197213][T30831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6659'. [ 1365.213358][T30826] dummy0: left promiscuous mode [ 1365.372806][T30821] lo speed is unknown, defaulting to 1000 [ 1365.442285][T30831] bridge3: entered allmulticast mode [ 1366.371459][T30840] mac80211_hwsim hwsim68 wlan0: entered promiscuous mode [ 1366.397662][T30840] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1367.133319][T30855] netlink: 'syz.2.6667': attribute type 10 has an invalid length. [ 1367.183177][T30855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6667'. [ 1368.984758][T30884] bond0: (slave wlan1): Releasing backup interface [ 1369.096344][T30891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6676'. [ 1369.297237][T30891] gtp0: entered promiscuous mode [ 1369.325995][T30891] gtp0: entered allmulticast mode [ 1369.657586][T30899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1369.735945][T30861] lo speed is unknown, defaulting to 1000 [ 1370.027360][T30912] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6681'. [ 1370.104992][T30915] bond0: option mode: unable to set because the bond device has slaves [ 1370.252954][T30920] netlink: 'syz.2.6682': attribute type 10 has an invalid length. [ 1370.284529][T30920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6682'. [ 1370.933516][T30929] netpci0: tun_chr_ioctl cmd 1074025681 [ 1371.616052][T30932] syzkaller1: entered promiscuous mode [ 1371.645456][T30932] syzkaller1: entered allmulticast mode [ 1372.830544][T30958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6691'. [ 1372.911699][T30907] lo speed is unknown, defaulting to 1000 [ 1373.172715][T26190] block nbd63: Possible stuck request ffff8880736e5080: control (read@0,4096B). Runtime 1110 seconds [ 1373.656318][T30971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6695'. [ 1374.757492][T30975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6698'. [ 1374.814770][T30975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6698'. [ 1374.883797][T30975] geneve4: entered promiscuous mode [ 1374.902135][T30975] geneve4: entered allmulticast mode [ 1375.122524][T30984] mac80211_hwsim hwsim55 ªªªªª": renamed from wlan0 [ 1375.865791][T30993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6701'. [ 1375.883431][T30993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6701'. [ 1375.915624][T30988] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6701'. [ 1375.944796][T30994] siw: device registration error -23 [ 1377.222694][T31016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6710'. [ 1377.885529][T31016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1378.429811][T31026] tipc: Enabled bearer , priority 0 [ 1378.494251][T31019] syzkaller0: entered promiscuous mode [ 1378.563093][T31019] syzkaller0: entered allmulticast mode [ 1378.720890][T31008] tipc: Resetting bearer [ 1378.803876][T31008] tipc: Disabling bearer [ 1379.084022][T28498] Bluetooth: hci2: command 0x0405 tx timeout [ 1379.093161][T28498] Bluetooth: hci1: command 0x0406 tx timeout [ 1379.167722][T31044] netlink: 'syz.4.6716': attribute type 1 has an invalid length. [ 1379.275383][T31044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1379.363802][T31018] lo speed is unknown, defaulting to 1000 [ 1379.587821][T31058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6722'. [ 1379.604053][T31058] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6722'. [ 1379.624757][T31058] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 1379.694238][T31060] netlink: 'syz.0.6723': attribute type 11 has an invalid length. [ 1380.110416][T31062] netlink: 'syz.1.6724': attribute type 10 has an invalid length. [ 1380.164533][T31066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6724'. [ 1380.203507][ T9456] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1380.241221][T31070] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 1380.943238][T31087] netlink: 'syz.3.6733': attribute type 11 has an invalid length. [ 1381.117324][T31095] siw: device registration error -23 [ 1381.177776][T31096] macsec0: entered allmulticast mode [ 1381.195544][T31096] mac80211_hwsim hwsim57 wlan0: entered allmulticast mode [ 1381.221445][T31096] batman_adv: batadv0: Adding interface: macsec0 [ 1381.244887][T31096] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.272840][T31096] batman_adv: batadv0: Interface activated: macsec0 [ 1382.527418][T31094] lo speed is unknown, defaulting to 1000 [ 1382.903735][T31140] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 1383.234833][T31154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6753'. [ 1383.264240][T31154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6753'. [ 1383.314135][T31155] netlink: 'syz.3.6752': attribute type 4 has an invalid length. [ 1383.337748][T31155] netlink: 'syz.3.6752': attribute type 4 has an invalid length. [ 1383.572064][T31157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1383.660848][T31157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.752064][T31157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.762817][T31157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.007616][T31171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6759'. [ 1384.792915][T31186] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6766'. [ 1384.806234][T31186] netlink: zone id is out of range [ 1384.826140][T31186] netlink: zone id is out of range [ 1384.853771][T31186] netlink: zone id is out of range [ 1384.865612][T31186] netlink: zone id is out of range [ 1384.876127][T31186] netlink: zone id is out of range [ 1384.887516][T31186] netlink: zone id is out of range [ 1384.907184][T31190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6767'. [ 1384.921790][T31193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6768'. [ 1384.949811][T31186] netlink: zone id is out of range [ 1384.955238][T31186] netlink: get zone limit has 8 unknown bytes [ 1385.913630][T31208] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1387.794681][T31216] lo speed is unknown, defaulting to 1000 [ 1389.174305][T31271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6790'. [ 1389.734935][T25702] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 1390.442178][T26190] block nbd9: Possible stuck request ffff888025ad5080: control (read@0,4096B). Runtime 1260 seconds [ 1390.706567][T31302] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1391.024927][T31313] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.6803'. [ 1391.666771][T31297] lo speed is unknown, defaulting to 1000 [ 1391.876134][T31324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6807'. [ 1392.584037][T31304] lo speed is unknown, defaulting to 1000 [ 1392.937508][T31339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6812'. [ 1393.143466][T31340] syzkaller1: entered promiscuous mode [ 1393.194224][T31340] syzkaller1: entered allmulticast mode [ 1393.295314][T31343] netlink: 'syz.0.6813': attribute type 11 has an invalid length. [ 1394.934154][ T94] block nbd15: Possible stuck request ffff888025cc7000: control (read@0,4096B). Runtime 1140 seconds [ 1394.936678][T26190] block nbd14: Possible stuck request ffff888025c97000: control (read@0,4096B). Runtime 1140 seconds [ 1396.787399][T31385] netlink: 'syz.0.6827': attribute type 10 has an invalid length. [ 1398.254508][T31404] IPv6: Can't replace route, no match found [ 1398.835658][T31400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.316022][T31401] lo speed is unknown, defaulting to 1000 [ 1399.597050][T31425] Bluetooth: MGMT ver 1.23 [ 1399.785745][T31422] syzkaller0: entered promiscuous mode [ 1399.822506][T31422] syzkaller0: entered allmulticast mode [ 1400.965283][T31447] netlink: 'syz.4.6843': attribute type 10 has an invalid length. [ 1401.572975][ T5861] block nbd97: Receive control failed (result -32) [ 1403.252812][T26190] block nbd63: Possible stuck request ffff8880736e5080: control (read@0,4096B). Runtime 1140 seconds [ 1404.437108][T31416] lo speed is unknown, defaulting to 1000 [ 1404.795048][T31453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6846'. [ 1405.064338][T31460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6847'. [ 1408.044890][T31501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6857'. [ 1409.474250][T31525] netlink: 'syz.0.6876': attribute type 13 has an invalid length. [ 1409.787278][T31525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.795267][T31525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.807719][T22302] Bluetooth: hci3: command 0x0406 tx timeout [ 1410.081911][T31525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1410.112236][T31525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1410.390854][T31536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6868'. [ 1410.405686][T31536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6868'. [ 1410.603493][T31535] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6868'. [ 1410.627136][T31536] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1410.653611][ T9451] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.713459][ T9451] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.755517][ T9451] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.834124][ T9451] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.945008][T31540] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6869'. [ 1411.375430][T31552] syz_tun: left allmulticast mode [ 1411.393879][T31552] mac80211_hwsim hwsim57 wlan0: left promiscuous mode [ 1411.425339][T31555] netlink: 'syz.3.6874': attribute type 10 has an invalid length. [ 1411.436059][T31555] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6874'. [ 1411.456227][T31552] geneve2: left promiscuous mode [ 1411.576570][T31552] bridge3: left allmulticast mode [ 1411.607741][T31552] gtp0: left promiscuous mode [ 1411.616442][T31552] gtp0: left allmulticast mode [ 1411.653872][T31552] batman_adv: batadv0: Interface deactivated: macsec0 [ 1411.672562][T31562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6875'. [ 1411.685063][T31552] mac80211_hwsim hwsim57 wlan0: left allmulticast mode [ 1411.695230][T31552] macsec0: left allmulticast mode [ 1411.703851][T31555] geneve0: left allmulticast mode [ 1411.724178][T31555] geneve0: entered allmulticast mode [ 1411.766853][T31555] team0: Port device geneve0 added [ 1411.780416][T25700] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.799862][T25700] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.824093][T31523] lo speed is unknown, defaulting to 1000 [ 1411.834579][ T9455] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.901657][ T9455] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.982935][ T9455] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.033913][ T9455] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.092573][ T9455] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.115779][ T9455] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.201613][T25700] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1412.285408][T31566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6878'. [ 1412.363017][T31567] netlink: 'syz.3.6878': attribute type 29 has an invalid length. [ 1412.604488][T31570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6880'. [ 1413.304539][T31539] lo speed is unknown, defaulting to 1000 [ 1413.843045][T31599] netlink: 'syz.3.6887': attribute type 11 has an invalid length. [ 1414.107613][T31604] netlink: 'syz.4.6888': attribute type 1 has an invalid length. [ 1414.247829][T31609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6890'. [ 1414.474872][T31604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1414.656904][T31608] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1414.674799][T31608] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1414.707428][T31608] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1414.777164][T31610] gretap1: entered promiscuous mode [ 1414.805847][T31618] netlink: 'syz.1.6891': attribute type 16 has an invalid length. [ 1414.823232][T31618] netlink: 'syz.1.6891': attribute type 17 has an invalid length. [ 1414.856681][T31610] bond2: (slave gretap1): making interface the new active one [ 1414.867360][T31610] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1414.915324][T31614] macvlan4: entered promiscuous mode [ 1414.924144][T31614] macvlan4: entered allmulticast mode [ 1414.932966][T31614] bond2: entered promiscuous mode [ 1415.002045][T31614] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1415.014775][T31614] bond2: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1415.066410][T31614] bond2: left promiscuous mode [ 1415.204109][T31618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1415.606589][T31625] netlink: 'syz.1.6894': attribute type 1 has an invalid length. [ 1415.657051][T31629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6894'. [ 1415.671122][T31629] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6894'. [ 1417.107150][T31629] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1417.125425][T31629] gretap2: entered promiscuous mode [ 1417.176521][T31644] tipc: Enabled bearer , priority 0 [ 1417.215071][T31645] syzkaller0: entered promiscuous mode [ 1417.233338][T31645] syzkaller0: entered allmulticast mode [ 1417.426946][T31653] tipc: Resetting bearer [ 1417.654415][T31653] tipc: Disabling bearer [ 1417.935323][T31666] netlink: 'syz.3.6902': attribute type 10 has an invalid length. [ 1418.552675][T31681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6905'. [ 1418.612927][T31682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6906'. [ 1420.527496][T26190] block nbd9: Possible stuck request ffff888025ad5080: control (read@0,4096B). Runtime 1290 seconds [ 1420.625967][T31730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6917'. [ 1420.855587][T31740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6924'. [ 1421.027347][T31748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6924'. [ 1421.075878][T22302] block nbd98: Receive control failed (result -32) [ 1421.242516][T22302] Bluetooth: hci0: command 0x0405 tx timeout [ 1422.553359][T31773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6932'. [ 1422.791965][T31771] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.076350][T31792] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gretap0, syncid = 1, id = 0 [ 1423.281694][T31771] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.465892][T31803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6938'. [ 1423.831588][T31771] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.075951][T31771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.155680][T31828] netlink: 704 bytes leftover after parsing attributes in process `syz.0.6943'. [ 1424.437583][T22302] block nbd99: Receive control failed (result -32) [ 1424.576234][T31837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6944'. [ 1424.777100][T25700] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.813784][T31808] lo speed is unknown, defaulting to 1000 [ 1424.907690][ T9451] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.914756][T31844] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20003 [ 1424.971501][T25703] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.001298][ T94] block nbd15: Possible stuck request ffff888025cc7000: control (read@0,4096B). Runtime 1170 seconds [ 1425.016563][T26190] block nbd14: Possible stuck request ffff888025c97000: control (read@0,4096B). Runtime 1170 seconds [ 1425.034324][T31844] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1425.107560][ T9451] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.582985][T31856] netlink: 'syz.3.6950': attribute type 3 has an invalid length. [ 1426.153083][T31869] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6954'. [ 1426.222293][T31869] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6954'. [ 1426.292653][T31869] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6954'. [ 1426.586971][T31851] lo speed is unknown, defaulting to 1000 [ 1426.855424][T22302] block nbd100: Receive control failed (result -32) [ 1426.951979][T22302] Bluetooth: hci0: link tx timeout [ 1426.962356][T22302] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1426.975603][ T5861] Bluetooth: hci0: link tx timeout [ 1426.986700][ T5861] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1427.700741][T31897] syzkaller1: entered promiscuous mode [ 1427.711025][T31897] syzkaller1: entered allmulticast mode [ 1428.131904][T31884] lo speed is unknown, defaulting to 1000 [ 1428.491714][T31910] netlink: 'syz.3.6964': attribute type 11 has an invalid length. [ 1429.085045][T22302] Bluetooth: hci0: command 0x0405 tx timeout [ 1429.302667][T31923] macsec0: entered promiscuous mode [ 1429.330912][T31923] dummy0: entered promiscuous mode [ 1429.336342][T31923] macsec0: entered allmulticast mode [ 1429.393847][T31923] dummy0: left promiscuous mode [ 1429.734706][T31931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6970'. [ 1429.847000][T22302] block nbd101: Receive control failed (result -32) [ 1430.332499][T31943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6974'. [ 1430.385513][T31943] macvtap0: entered promiscuous mode [ 1430.393753][T31943] batadv0: entered promiscuous mode [ 1430.402100][T31943] macvtap0: entered allmulticast mode [ 1430.427781][T31943] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 1430.826293][T31955] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6977'. [ 1432.109810][T22302] block nbd102: Receive control failed (result -32) [ 1432.585672][T31984] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 1433.372507][T26190] block nbd63: Possible stuck request ffff8880736e5080: control (read@0,4096B). Runtime 1170 seconds [ 1433.537047][T31988] syzkaller0: entered promiscuous mode [ 1433.546487][T31988] syzkaller0: entered allmulticast mode [ 1434.805540][T32008] netlink: 'syz.4.6991': attribute type 1 has an invalid length. [ 1434.822544][T32008] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6991'. [ 1435.706910][T22302] block nbd103: Receive control failed (result -32) [ 1435.855414][T32031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6997'. [ 1436.854958][T32057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7004'. [ 1437.035639][T32059] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 1437.421338][T32035] lo speed is unknown, defaulting to 1000 [ 1437.832165][T32063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7005'. [ 1437.837489][T32064] netlink: 'syz.0.7006': attribute type 21 has an invalid length. [ 1437.845724][T32063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7005'. [ 1437.871897][T32063] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7005'. [ 1437.921149][T32066] macvlan0: entered allmulticast mode [ 1437.945844][T32066] veth1_vlan: entered allmulticast mode [ 1438.021631][T32066] team0: Port device macvlan0 added [ 1438.055378][T32064] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7006'. [ 1438.331335][T32045] lo speed is unknown, defaulting to 1000 [ 1438.367833][T32074] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7010'. [ 1438.414474][T32073] netlink: 'syz.0.7009': attribute type 83 has an invalid length. [ 1438.455527][T32073] netlink: 'syz.0.7009': attribute type 83 has an invalid length. [ 1438.512575][T32073] netlink: 'syz.0.7009': attribute type 83 has an invalid length. [ 1438.617730][T32073] netlink: 'syz.0.7009': attribute type 83 has an invalid length. [ 1438.647470][T32073] netlink: 'syz.0.7009': attribute type 83 has an invalid length. [ 1438.837724][T32073] netlink: 'syz.0.7009': attribute type 83 has an invalid length. [ 1438.941309][T32073] netlink: 'syz.0.7009': attribute type 83 has an invalid length. [ 1439.022551][T32073] netlink: 'syz.0.7009': attribute type 83 has an invalid length. [ 1439.174653][T32085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7013'. [ 1439.641421][T32081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7011'. [ 1440.043703][T32095] syzkaller1: entered promiscuous mode [ 1440.053804][T32095] syzkaller1: entered allmulticast mode [ 1440.385703][T32104] tipc: New replicast peer: 255.127.0.0 [ 1440.405059][T32104] tipc: Enabled bearer , priority 6 [ 1441.753300][T32129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7024'. [ 1441.767759][T32107] lo speed is unknown, defaulting to 1000 [ 1441.874184][T32130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7024'. [ 1441.983701][T32133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7025'. [ 1442.057394][T32133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7025'. [ 1442.853333][T32147] validate_nla: 57 callbacks suppressed [ 1442.853350][T32147] netlink: 'syz.1.7030': attribute type 9 has an invalid length. [ 1442.973233][T32147] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7030'. [ 1443.892627][T32185] netlink: 'syz.2.7036': attribute type 10 has an invalid length. [ 1443.936023][T32185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7036'. [ 1444.205260][ T9450] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1444.243475][T32190] netlink: 236 bytes leftover after parsing attributes in process `syz.3.7038'. [ 1444.342029][T32190] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7038'. [ 1444.532738][T32197] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7041'. [ 1445.113522][T32208] C: renamed from team_slave_0 (while UP) [ 1445.127490][T32208] netlink: 'syz.2.7045': attribute type 3 has an invalid length. [ 1445.169882][T32208] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7045'. [ 1445.186080][T32208] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1445.355500][T32210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.363311][T32210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.682471][T32210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1446.161574][T32211] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1446.191090][T32211] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1446.216895][T32211] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1446.306058][T32222] !: renamed from dummy0 [ 1446.465910][ T9455] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.550885][ T9455] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.882510][ T9455] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.919901][ T9455] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.981631][T32257] lo speed is unknown, defaulting to 1000 [ 1448.544322][T32277] __nla_validate_parse: 1 callbacks suppressed [ 1448.544344][T32277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7058'. [ 1448.629741][T32277] netlink: 'syz.2.7058': attribute type 1 has an invalid length. [ 1449.625699][T32293] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (36) [ 1450.617347][T26190] block nbd9: Possible stuck request ffff888025ad5080: control (read@0,4096B). Runtime 1320 seconds [ 1450.776872][T32313] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7069'. [ 1450.897750][T32315] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7069'. [ 1451.334634][T32328] veth0: entered promiscuous mode [ 1451.347821][T32321] veth0: left promiscuous mode [ 1451.755775][T32339] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7073'. [ 1452.371560][T32348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7079'. [ 1452.645275][T32354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7081'. [ 1452.723963][T32353] nbd: nbd4 already in use [ 1453.072092][T32336] lo speed is unknown, defaulting to 1000 [ 1453.853005][T22302] block nbd104: Receive control failed (result -32) [ 1454.104984][T32389] bridge1: entered promiscuous mode [ 1454.465264][T32398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7091'. [ 1454.481712][T32398] netlink: 'syz.0.7091': attribute type 5 has an invalid length. [ 1454.505968][T32398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7091'. [ 1454.715609][T32397] tipc: Enabled bearer , priority 0 [ 1454.904487][T32400] tipc: Disabling bearer [ 1455.080935][ T94] block nbd15: Possible stuck request ffff888025cc7000: control (read@0,4096B). Runtime 1200 seconds [ 1455.095167][T26190] block nbd14: Possible stuck request ffff888025c97000: control (read@0,4096B). Runtime 1200 seconds [ 1455.376802][T32418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7097'. [ 1455.692429][T32427] netlink: 'syz.3.7100': attribute type 21 has an invalid length. [ 1455.705247][T32422] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7097'. [ 1455.722852][T32422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7097'. [ 1455.831114][T32427] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7100'. [ 1456.075283][T32436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7101'. [ 1457.977371][T32478] !: renamed from dummy0 [ 1458.015612][T32480] nbd: nbd3 already in use [ 1459.115060][T32471] lo speed is unknown, defaulting to 1000 [ 1461.853203][T32481] lo speed is unknown, defaulting to 1000 [ 1462.085887][T32559] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1463.003513][T32571] netlink: 'syz.4.7131': attribute type 10 has an invalid length. [ 1463.406828][T26190] block nbd63: Possible stuck request ffff8880736e5080: control (read@0,4096B). Runtime 1200 seconds [ 1463.675294][T32587] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input12 [ 1463.986951][T32594] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7138'. [ 1464.043438][T32594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7138'. [ 1464.095947][T32594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7138'. [ 1464.535631][T32598] netlink: 'syz.0.7139': attribute type 1 has an invalid length. [ 1464.657303][T32598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1464.885248][T32604] FAULT_INJECTION: forcing a failure. [ 1464.885248][T32604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1464.930117][T32604] CPU: 0 UID: 0 PID: 32604 Comm: syz.2.7140 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 1464.930147][T32604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1464.930159][T32604] Call Trace: [ 1464.930169][T32604] [ 1464.930179][T32604] dump_stack_lvl+0x189/0x250 [ 1464.930205][T32604] ? __pfx____ratelimit+0x10/0x10 [ 1464.930231][T32604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1464.930249][T32604] ? __pfx__printk+0x10/0x10 [ 1464.930272][T32604] ? __might_fault+0xb0/0x130 [ 1464.930310][T32604] should_fail_ex+0x414/0x560 [ 1464.930342][T32604] _copy_from_iter+0x1db/0x16f0 [ 1464.930369][T32604] ? rcu_is_watching+0x15/0xb0 [ 1464.930397][T32604] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1464.930424][T32604] ? __pfx__copy_from_iter+0x10/0x10 [ 1464.930448][T32604] ? __build_skb_around+0x257/0x3e0 [ 1464.930478][T32604] ? netlink_sendmsg+0x642/0xb30 [ 1464.930502][T32604] ? skb_put+0x11b/0x210 [ 1464.930522][T32604] netlink_sendmsg+0x6b2/0xb30 [ 1464.930558][T32604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1464.930586][T32604] ? aa_sock_msg_perm+0x94/0x160 [ 1464.930619][T32604] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1464.930639][T32604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1464.930666][T32604] __sock_sendmsg+0x219/0x270 [ 1464.930693][T32604] ____sys_sendmsg+0x505/0x830 [ 1464.930719][T32604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1464.930748][T32604] ? import_iovec+0x74/0xa0 [ 1464.930776][T32604] ___sys_sendmsg+0x21f/0x2a0 [ 1464.930798][T32604] ? __pfx____sys_sendmsg+0x10/0x10 [ 1464.930856][T32604] ? __fget_files+0x2a/0x420 [ 1464.930873][T32604] ? __fget_files+0x3a0/0x420 [ 1464.930902][T32604] __x64_sys_sendmsg+0x19b/0x260 [ 1464.930924][T32604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1464.930954][T32604] ? __pfx_ksys_write+0x10/0x10 [ 1464.930984][T32604] ? do_syscall_64+0xbe/0x3b0 [ 1464.931013][T32604] do_syscall_64+0xfa/0x3b0 [ 1464.931035][T32604] ? lockdep_hardirqs_on+0x9c/0x150 [ 1464.931058][T32604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.931076][T32604] ? clear_bhb_loop+0x60/0xb0 [ 1464.931098][T32604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.931116][T32604] RIP: 0033:0x7f7a7c38ebe9 [ 1464.931134][T32604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1464.931150][T32604] RSP: 002b:00007f7a7a5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1464.931173][T32604] RAX: ffffffffffffffda RBX: 00007f7a7c5b6090 RCX: 00007f7a7c38ebe9 [ 1464.931187][T32604] RDX: 0000000020000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 1464.931200][T32604] RBP: 00007f7a7a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.931212][T32604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.931224][T32604] R13: 00007f7a7c5b6128 R14: 00007f7a7c5b6090 R15: 00007ffd634026d8 [ 1464.931257][T32604] [ 1465.496224][T32579] lo speed is unknown, defaulting to 1000 [ 1467.137574][T32635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7149'. [ 1467.264522][ T9456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.357792][ T9456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.627787][T32651] FAULT_INJECTION: forcing a failure. [ 1467.627787][T32651] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.654134][T32651] CPU: 1 UID: 0 PID: 32651 Comm: syz.2.7153 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 1467.654164][T32651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1467.654175][T32651] Call Trace: [ 1467.654183][T32651] [ 1467.654192][T32651] dump_stack_lvl+0x189/0x250 [ 1467.654216][T32651] ? __pfx____ratelimit+0x10/0x10 [ 1467.654240][T32651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1467.654259][T32651] ? __pfx__printk+0x10/0x10 [ 1467.654285][T32651] ? __pfx___might_resched+0x10/0x10 [ 1467.654309][T32651] ? fs_reclaim_acquire+0x7d/0x100 [ 1467.654334][T32651] should_fail_ex+0x414/0x560 [ 1467.654367][T32651] should_failslab+0xa8/0x100 [ 1467.654387][T32651] __kmalloc_noprof+0xcb/0x4f0 [ 1467.654417][T32651] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1467.654446][T32651] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1467.654475][T32651] genl_family_rcv_msg_doit+0xb8/0x300 [ 1467.654504][T32651] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1467.654528][T32651] ? rcu_is_watching+0x15/0xb0 [ 1467.654558][T32651] ? apparmor_capable+0x137/0x1b0 [ 1467.654579][T32651] ? bpf_lsm_capable+0x9/0x20 [ 1467.654601][T32651] ? security_capable+0x7e/0x2e0 [ 1467.654632][T32651] genl_rcv_msg+0x60e/0x790 [ 1467.654659][T32651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1467.654677][T32651] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 1467.654698][T32651] ? __pfx_nl802154_del_llsec_key+0x10/0x10 [ 1467.654721][T32651] ? __pfx_nl802154_post_doit+0x10/0x10 [ 1467.654761][T32651] netlink_rcv_skb+0x205/0x470 [ 1467.654783][T32651] ? __lock_acquire+0xab9/0xd20 [ 1467.654807][T32651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1467.654829][T32651] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1467.654877][T32651] ? down_read+0x1ad/0x2e0 [ 1467.654898][T32651] genl_rcv+0x28/0x40 [ 1467.654915][T32651] netlink_unicast+0x82c/0x9e0 [ 1467.654948][T32651] ? __pfx_netlink_unicast+0x10/0x10 [ 1467.654974][T32651] ? netlink_sendmsg+0x642/0xb30 [ 1467.654995][T32651] ? skb_put+0x11b/0x210 [ 1467.655018][T32651] netlink_sendmsg+0x805/0xb30 [ 1467.655053][T32651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1467.655083][T32651] ? aa_sock_msg_perm+0x94/0x160 [ 1467.655107][T32651] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1467.655128][T32651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1467.655157][T32651] __sock_sendmsg+0x219/0x270 [ 1467.655185][T32651] ____sys_sendmsg+0x505/0x830 [ 1467.655212][T32651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1467.655242][T32651] ? import_iovec+0x74/0xa0 [ 1467.655271][T32651] ___sys_sendmsg+0x21f/0x2a0 [ 1467.655293][T32651] ? __pfx____sys_sendmsg+0x10/0x10 [ 1467.655357][T32651] ? __fget_files+0x2a/0x420 [ 1467.655374][T32651] ? __fget_files+0x3a0/0x420 [ 1467.655405][T32651] __x64_sys_sendmsg+0x19b/0x260 [ 1467.655450][T32651] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1467.655481][T32651] ? __pfx_ksys_write+0x10/0x10 [ 1467.655512][T32651] ? do_syscall_64+0xbe/0x3b0 [ 1467.655540][T32651] do_syscall_64+0xfa/0x3b0 [ 1467.655563][T32651] ? lockdep_hardirqs_on+0x9c/0x150 [ 1467.655586][T32651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.655604][T32651] ? clear_bhb_loop+0x60/0xb0 [ 1467.655627][T32651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.655644][T32651] RIP: 0033:0x7f7a7c38ebe9 [ 1467.655661][T32651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1467.655677][T32651] RSP: 002b:00007f7a7a5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1467.655698][T32651] RAX: ffffffffffffffda RBX: 00007f7a7c5b6090 RCX: 00007f7a7c38ebe9 [ 1467.655712][T32651] RDX: 0000000020000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 1467.655725][T32651] RBP: 00007f7a7a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1467.655737][T32651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1467.655748][T32651] R13: 00007f7a7c5b6128 R14: 00007f7a7c5b6090 R15: 00007ffd634026d8 [ 1467.655782][T32651] [ 1469.136810][T32665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7156'. [ 1469.264092][T32665] vlan2: entered promiscuous mode [ 1469.272548][T32665] bridge0: entered promiscuous mode [ 1469.304768][T32647] lo speed is unknown, defaulting to 1000 [ 1470.835711][T32683] lo: left allmulticast mode [ 1470.843659][T32683] tunl0: left allmulticast mode [ 1470.861345][T32683] gre0: left allmulticast mode [ 1470.866392][T32683] gretap0: left allmulticast mode [ 1470.881234][T32683] erspan0: left allmulticast mode [ 1470.896239][T32683] ip_vti0: left allmulticast mode [ 1470.921330][T32683] ip6_vti0: left allmulticast mode [ 1470.931040][T32683] sit0: left allmulticast mode [ 1470.936075][T32683] ip6tnl0: left allmulticast mode [ 1470.947108][T32683] ip6gre0: left allmulticast mode [ 1470.955503][T32683] ip6gretap0: left allmulticast mode [ 1470.964725][T32683] vcan0: left allmulticast mode [ 1470.973908][T32683] bond0: left allmulticast mode [ 1470.980831][T32683] mac80211_hwsim hwsim62 wlan1: left allmulticast mode [ 1470.989899][T32683] team0: left allmulticast mode [ 1470.995427][T32683] geneve0: left allmulticast mode [ 1471.004270][T32683] !: left allmulticast mode [ 1471.015728][T32683] nlmon0: left allmulticast mode [ 1471.024056][T32683] caif0: left allmulticast mode [ 1471.032598][T32683] vxcan0: left allmulticast mode [ 1471.040053][T32683] vxcan1: left allmulticast mode [ 1471.045648][T32683] veth0: left allmulticast mode [ 1471.070887][T32683] veth1: left allmulticast mode [ 1471.076551][T32683] wg0: left allmulticast mode [ 1471.085101][T32683] wg1: left allmulticast mode [ 1471.101141][T32683] wg2: left allmulticast mode [ 1471.106607][T32683] veth0_to_bridge: left allmulticast mode [ 1471.115800][T32683] bridge_slave_0: left allmulticast mode [ 1471.127711][T32683] veth1_to_bridge: left allmulticast mode [ 1471.137415][T32683] bridge_slave_1: left allmulticast mode [ 1471.146508][T32683] veth0_to_bond: left allmulticast mode [ 1471.226805][T32683] bond_slave_0: left allmulticast mode [ 1471.280063][T32683] veth1_to_bond: left allmulticast mode [ 1471.285824][T32683] bond_slave_1: left allmulticast mode [ 1471.311147][T32683] veth0_to_team: left allmulticast mode [ 1471.333693][T32683] team_slave_0: left allmulticast mode [ 1471.361690][T32683] veth1_to_team: left allmulticast mode [ 1471.367465][T32683] team_slave_1: left allmulticast mode [ 1471.401307][T32683] veth0_to_batadv: left allmulticast mode [ 1471.407266][T32683] batadv_slave_0: left allmulticast mode [ 1471.436816][T32683] xfrm0: left allmulticast mode [ 1471.505591][T32683] veth0_to_hsr: left allmulticast mode [ 1471.533635][T32683] veth1_to_hsr: left allmulticast mode [ 1471.563225][T32683] hsr0: left allmulticast mode [ 1471.581217][T32683] hsr_slave_0: left allmulticast mode [ 1471.586652][T32683] hsr_slave_1: left allmulticast mode [ 1471.614782][T32683] veth1_virt_wifi: left allmulticast mode [ 1471.651083][T32683] veth0_virt_wifi: left allmulticast mode [ 1471.657064][T32683] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1471.686043][T32683] veth1_vlan: left allmulticast mode [ 1471.706759][T32683] vlan0: left allmulticast mode [ 1471.715676][T32683] vlan1: left allmulticast mode [ 1471.725088][T32683] macvlan1: left allmulticast mode [ 1471.733526][T32683] ipvlan0: left allmulticast mode [ 1471.741155][T32683] ipvlan1: left allmulticast mode [ 1471.746214][T32683] veth0_vlan: left allmulticast mode [ 1471.756282][T32683] geneve1: left allmulticast mode [ 1471.765826][T32683] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1471.780703][T32683] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 1471.792821][T32683] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 1471.812709][T32683] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 1471.833973][T32683] mac80211_hwsim hwsim61 wlan0: left allmulticast mode [ 1471.846804][T32683] bridge1: left allmulticast mode [ 1471.856112][T32683] mac80211_hwsim hwsim61 veth1_to_bod: left allmulticast mode [ 1471.867645][T32683] xfrm1: left allmulticast mode [ 1471.876763][T32683] sit1: left allmulticast mode [ 1471.884273][T32683] ip6erspan0: left allmulticast mode [ 1471.893220][T32683] erspan1: left allmulticast mode [ 1471.901400][T32683] vxlan0: left allmulticast mode [ 1471.910184][T32683] batadv0: left allmulticast mode [ 1471.915382][T32683] batadv0: left promiscuous mode [ 1471.922448][T32683] macvtap0: left promiscuous mode [ 1471.927647][T32683] macvtap0: left allmulticast mode [ 1471.997593][T32697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7164'. [ 1472.012527][ T9455] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.047931][ T9455] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.174069][ T9455] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.223191][ T9455] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.241880][T32726] netlink: 'syz.4.7173': attribute type 2 has an invalid length. [ 1473.263503][T32725] netlink: 'syz.3.7172': attribute type 13 has an invalid length. [ 1473.291641][T32725] netlink: 'syz.3.7172': attribute type 17 has an invalid length. [ 1473.724887][T32725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1473.785269][T32725] 8021q: adding VLAN 0 to HW filter on device team0 [ 1473.911707][T32725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1474.052859][T32731] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7173'. [ 1474.072654][T32740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1474.172377][T32741] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7173'. [ 1474.273858][T32732] syzkaller0: entered promiscuous mode [ 1474.320426][T32732] syzkaller0: entered allmulticast mode [ 1475.283489][ T300] netlink: 'syz.4.7179': attribute type 11 has an invalid length. [ 1476.131598][ T311] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1476.151576][T32734] lo speed is unknown, defaulting to 1000 [ 1476.172783][ T311] netlink: 'syz.1.7181': attribute type 14 has an invalid length. [ 1476.202703][ T9452] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1477.023139][T32749] lo speed is unknown, defaulting to 1000 [ 1477.375019][ T324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7185'. [ 1477.386758][ T324] openvswitch: netlink: Unknown nsh attribute 0 [ 1477.400976][ T324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1477.727687][ T330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7186'. [ 1478.533867][ T335] netlink: 'syz.1.7186': attribute type 6 has an invalid length. [ 1479.192652][ T351] netlink: 'syz.0.7190': attribute type 11 has an invalid length. [ 1479.454267][ T353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7191'. [ 1479.485530][ T353] vlan2: entered promiscuous mode [ 1479.505888][ T353] team0: entered promiscuous mode [ 1479.548010][ T353] team_slave_0: entered promiscuous mode [ 1479.553998][ T353] team_slave_1: entered promiscuous mode [ 1479.566171][ T353] macvlan0: entered promiscuous mode [ 1480.264866][ T309] lo speed is unknown, defaulting to 1000 [ 1480.703193][T26190] block nbd9: Possible stuck request ffff888025ad5080: control (read@0,4096B). Runtime 1350 seconds [ 1481.097680][T32750] lo speed is unknown, defaulting to 1000 [ 1481.474504][ T330] lo speed is unknown, defaulting to 1000 [ 1482.165504][ T380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1483.254458][ T385] netlink: 'syz.0.7201': attribute type 11 has an invalid length. [ 1484.863400][ T401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7204'. [ 1485.161128][ T94] block nbd15: Possible stuck request ffff888025cc7000: control (read@0,4096B). Runtime 1230 seconds [ 1485.174633][T26190] block nbd14: Possible stuck request ffff888025c97000: control (read@0,4096B). Runtime 1230 seconds [ 1487.156742][ T415] netlink: 'syz.3.7207': attribute type 10 has an invalid length. [ 1487.241035][ T416] netlink: 'syz.3.7207': attribute type 10 has an invalid length. [ 1487.364234][ T415] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.393889][ T420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7209'. [ 1487.465711][ T415] bond0: (slave team0): Enslaving as an active interface with an up link [ 1488.993079][ T444] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7215'. [ 1489.106746][ T444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1490.102205][ T465] syzkaller1: entered allmulticast mode [ 1491.143940][ T489] bond0: (slave team0): Releasing backup interface [ 1491.175866][ T489] bond0: (slave bond_slave_0): Releasing backup interface [ 1491.305515][ T498] netlink: 'syz.3.7230': attribute type 10 has an invalid length. [ 1491.437433][ T489] bond0: (slave bond_slave_1): Releasing backup interface [ 1491.577543][ T508] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7233'. [ 1491.676110][ T489] team0: Port device team_slave_0 removed [ 1491.745083][ T489] team0: Port device team_slave_1 removed [ 1491.766978][ T489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1491.882127][ T489] team0: Port device geneve0 removed [ 1491.933379][ T489] bond0: (slave wlan1): Releasing backup interface [ 1492.010849][ T498] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1492.061036][ T504] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7231'. [ 1492.075130][ T488] lo speed is unknown, defaulting to 1000 [ 1493.246291][ T537] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7242'. [ 1493.304576][ T495] lo speed is unknown, defaulting to 1000 [ 1493.483303][T26190] block nbd63: Possible stuck request ffff8880736e5080: control (read@0,4096B). Runtime 1230 seconds [ 1493.641086][ T543] tipc: Started in network mode [ 1493.646907][ T543] tipc: Node identity eaac02bddb4c, cluster identity 4711 [ 1493.681159][ T543] tipc: Enabled bearer , priority 0 [ 1493.851510][ T540] syzkaller0: entered promiscuous mode [ 1493.867260][ T540] syzkaller0: entered allmulticast mode [ 1493.947556][ T541] tipc: Resetting bearer [ 1494.166837][ T541] tipc: Disabling bearer [ 1494.542345][ T516] lo speed is unknown, defaulting to 1000 [ 1495.654070][ T565] tipc: Enabled bearer , priority 0 [ 1495.666096][ T566] syzkaller0: entered promiscuous mode [ 1495.678368][ T566] syzkaller0: entered allmulticast mode [ 1495.832655][ T566] tipc: Resetting bearer [ 1496.123815][ T566] tipc: Disabling bearer [ 1496.692874][T25558] tipc: Node number set to 836764349 [ 1496.914025][ T571] vti0: entered promiscuous mode [ 1496.923372][ T571] vti0: entered allmulticast mode [ 1497.084964][ T576] netlink: 147556 bytes leftover after parsing attributes in process `syz.2.7252'. [ 1497.107160][ T576] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7252'. [ 1497.644348][ T591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7254'. [ 1499.947777][ T617] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7263'. [ 1499.952430][ T616] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1500.016723][ T618] netlink: 'syz.1.7262': attribute type 12 has an invalid length. [ 1500.976430][ T640] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7270'. [ 1501.067358][ T643] bridge_slave_0: left allmulticast mode [ 1501.165261][ T643] bridge_slave_0: left promiscuous mode [ 1501.221220][ T643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.334180][ T651] netlink: 'syz.1.7271': attribute type 1 has an invalid length. [ 1501.352356][ T633] netlink: 'syz.2.7268': attribute type 10 has an invalid length. [ 1501.381649][ T651] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7271'. [ 1501.397128][ T643] bridge_slave_1: left allmulticast mode [ 1501.412269][ T643] bridge_slave_1: left promiscuous mode [ 1501.422867][ T643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.495265][ T643] bond0: (slave bond_slave_0): Releasing backup interface [ 1501.542261][ T643] bond0: (slave bond_slave_1): Releasing backup interface [ 1501.604546][ T643] team0: Port device C removed [ 1501.643405][ T643] team0: Port device team_slave_1 removed [ 1501.804686][ T622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7264'. [ 1502.066575][ T663] tipc: Enabled bearer , priority 10 [ 1502.295543][ T666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7273'. [ 1502.352077][ T668] netlink: 'syz.2.7272': attribute type 10 has an invalid length. [ 1502.356875][ T661] tipc: Resetting bearer [ 1502.855477][ T660] tipc: Resetting bearer [ 1506.996473][ T660] tipc: Disabling bearer [ 1507.095358][T29454] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1507.210936][ T693] netlink: 'syz.2.7276': attribute type 11 has an invalid length. [ 1507.405727][ T699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7279'. [ 1507.480852][ T699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7279'. [ 1507.553255][ T700] netlink: 'syz.2.7279': attribute type 23 has an invalid length. [ 1507.763453][ T9452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1508.121722][T29452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1508.200684][ T9452] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1508.507158][ T735] netlink: 'syz.3.7289': attribute type 11 has an invalid length. [ 1508.575826][ T737] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7290'. [ 1508.597266][ T737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7290'. [ 1508.713911][ T737] sctp: [Deprecated]: syz.2.7290 (pid 737) Use of int in max_burst socket option. [ 1508.713911][ T737] Use struct sctp_assoc_value instead [ 1508.842889][ T9448] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1508.856179][ T9448] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1508.947163][ T709] lo speed is unknown, defaulting to 1000 [ 1508.975470][ T745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7293'. [ 1509.053457][ T751] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.7295'. [ 1509.073960][ T755] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7293'. [ 1509.111390][T29452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1509.581734][ T770] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1509.651909][ T771] smc: net device gretap0 applied user defined pnetid SYZ1 [ 1509.666044][ T771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1509.737659][ T773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1510.052992][ T784] netem: incorrect gi model size [ 1510.091914][ T784] netem: change failed [ 1510.147476][ T778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7301'. [ 1510.672802][ T776] lo speed is unknown, defaulting to 1000 [ 1510.725638][ T794] netlink: 'syz.2.7304': attribute type 58 has an invalid length. [ 1510.791568][T26190] block nbd9: Possible stuck request ffff888025ad5080: control (read@0,4096B). Runtime 1380 seconds [ 1510.817182][ T794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7304'. [ 1511.122015][ T801] netlink: 'syz.2.7306': attribute type 21 has an invalid length. [ 1511.211380][ T801] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7306'. [ 1511.251909][ T801] netlink: 'syz.2.7306': attribute type 5 has an invalid length. [ 1511.311024][ T801] netlink: 'syz.2.7306': attribute type 6 has an invalid length. [ 1511.851957][ T782] lo speed is unknown, defaulting to 1000 [ 1512.935846][ T801] lo speed is unknown, defaulting to 1000 [ 1513.078160][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1514.704021][ T825] __nla_validate_parse: 2 callbacks suppressed [ 1514.704040][ T825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7312'. [ 1514.726600][ T825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7312'. [ 1514.741465][ T825] netlink: 'syz.3.7312': attribute type 7 has an invalid length. [ 1514.863506][ T827] netlink: 'syz.3.7313': attribute type 11 has an invalid length. [ 1515.242553][ T94] block nbd15: Possible stuck request ffff888025cc7000: control (read@0,4096B). Runtime 1260 seconds [ 1515.263146][T26190] block nbd14: Possible stuck request ffff888025c97000: control (read@0,4096B). Runtime 1260 seconds [ 1517.564896][ T877] atomic_op ffff888048bd1198 conn xmit_atomic 0000000000000000 [ 1517.621729][ T880] netlink: 428 bytes leftover after parsing attributes in process `syz.3.7324'. [ 1517.665864][ T880] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7324'. [ 1518.136822][ T885] netlink: 'syz.3.7325': attribute type 13 has an invalid length. [ 1518.151051][ T885] netlink: 'syz.3.7325': attribute type 17 has an invalid length. [ 1518.265351][ T885] 8021q: adding VLAN 0 to HW filter on device team0 [ 1518.295961][T29452] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1518.341801][ T885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1518.625383][ T9455] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1518.656523][ T9455] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1518.871931][T16087] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1519.081039][T29452] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1519.092121][ T899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7330'. [ 1519.200717][ T899] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7330'. [ 1519.292184][ T916] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1519.305528][ T899] gretap3: entered promiscuous mode [ 1519.343468][ T907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7331'. [ 1519.356498][ T907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7331'. [ 1519.371652][ T907] netlink: 'syz.4.7331': attribute type 5 has an invalid length. [ 1519.402522][ T907] netlink: 'syz.4.7331': attribute type 6 has an invalid length. [ 1519.455031][ T921] netlink: 'syz.4.7331': attribute type 1 has an invalid length. [ 1519.507353][ T919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7331'. [ 1519.765940][ T943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7336'. [ 1520.014784][ T953] tipc: Enabled bearer , priority 0 [ 1520.026393][ T953] syzkaller0: entered promiscuous mode [ 1520.063344][ T953] syzkaller0: entered allmulticast mode [ 1520.244579][ T953] tipc: Resetting bearer [ 1520.282375][ T962] tipc: Enabling of bearer rejected, failed to enable media [ 1520.331502][ T947] tipc: Resetting bearer [ 1520.431918][ T947] tipc: Disabling bearer [ 1520.871442][ T982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7345'. [ 1520.887017][ T984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7344'. [ 1520.981516][ T984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7344'. [ 1521.040285][ T984] netlink: 'syz.0.7344': attribute type 10 has an invalid length. [ 1521.051298][ T984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7344'. [ 1521.064740][ T984] dummy0: entered promiscuous mode [ 1521.084034][ T984] dummy0: entered allmulticast mode [ 1521.185658][ T984] bond0: (slave dummy0): Releasing backup interface [ 1521.234221][ T984] bridge0: port 3(dummy0) entered blocking state [ 1521.261932][ T984] bridge0: port 3(dummy0) entered disabled state [ 1521.325484][ T1001] pimreg: entered allmulticast mode [ 1521.357469][ T998] pimreg: left allmulticast mode [ 1521.521118][ T1014] netlink: 'syz.1.7352': attribute type 13 has an invalid length. [ 1521.536992][ T1014] netlink: 'syz.1.7352': attribute type 17 has an invalid length. [ 1521.642641][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1521.727595][ T1022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1521.784299][ T1014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.797033][ T1014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1521.824716][ T1014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1522.294905][ T1028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7357'. [ 1522.381979][ T1035] netlink: 'syz.4.7356': attribute type 21 has an invalid length. [ 1522.414739][ T1018] lo speed is unknown, defaulting to 1000 [ 1522.482834][ T1037] bond0: (slave team0): Releasing backup interface [ 1522.514612][ T1037] bridge0: port 3(dummy0) entered disabled state [ 1522.585094][ T1037] bridge_slave_0: left allmulticast mode [ 1522.596751][ T1051] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003 [ 1522.632741][ T1037] bridge_slave_0: left promiscuous mode [ 1522.656795][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.726431][ T1037] bridge_slave_1: left allmulticast mode [ 1522.782271][ T1037] bridge_slave_1: left promiscuous mode [ 1522.801958][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.816739][ T1057] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7362'. [ 1522.834321][ T1037] bond0: (slave bond_slave_0): Releasing backup interface [ 1522.864271][ T1037] bond0: (slave bond_slave_1): Releasing backup interface [ 1522.883487][ T1037] team_slave_0: left promiscuous mode [ 1522.895462][ T1037] team0: Port device team_slave_0 removed [ 1522.906046][ T1037] team_slave_1: left promiscuous mode [ 1522.933010][ T1037] team0: Port device team_slave_1 removed [ 1522.945645][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.957677][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.976577][ T1037] macvlan0: left promiscuous mode [ 1523.027534][ T1037] veth1_vlan: left allmulticast mode [ 1523.036243][ T1037] team0: Port device macvlan0 removed [ 1523.046965][ T1037] bond0: (slave wlan1): Releasing backup interface [ 1523.064525][ T1037] bond1: (slave geneve2): Releasing active interface [ 1523.078107][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1523.532674][ T1073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7364'. [ 1523.571717][T26190] block nbd63: Possible stuck request ffff8880736e5080: control (read@0,4096B). Runtime 1260 seconds [ 1523.581283][ T1073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7364'. [ 1523.913146][ T1085] batadv_slave_0: entered promiscuous mode [ 1524.015886][ T1081] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7368'. [ 1524.034287][ T1087] 8021q: VLANs not supported on vxcan1 [ 1524.517648][ T1095] bridge0: entered allmulticast mode [ 1524.817696][ T1095] pim6reg: entered allmulticast mode [ 1525.066171][ T1080] batadv_slave_0: left promiscuous mode [ 1525.351759][T25558] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1525.431201][T25570] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1525.905941][ T1123] sctp: [Deprecated]: syz.2.7375 (pid 1123) Use of int in maxseg socket option. [ 1525.905941][ T1123] Use struct sctp_assoc_value instead [ 1526.063926][T25570] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1526.362290][T29452] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1526.383252][ T1128] batman_adv: batadv0: Adding interface: dummy0 [ 1526.404338][ T1129] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7377'. [ 1526.417511][ T1128] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1526.466102][ T1128] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1526.662299][ T1093] lo speed is unknown, defaulting to 1000 [ 1526.941558][ T1136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7379'. [ 1527.002115][ T1139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7380'. [ 1527.331263][ T1103] lo speed is unknown, defaulting to 1000 [ 1527.623250][ T1144] tipc: Enabling of bearer rejected, failed to enable media [ 1528.722740][ T1165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7387'. [ 1529.023054][ T1121] lo speed is unknown, defaulting to 1000 [ 1529.747699][ T1188] netlink: 'syz.2.7394': attribute type 6 has an invalid length. [ 1529.785652][ T1188] netlink: 'syz.2.7394': attribute type 6 has an invalid length. [ 1530.616789][ T1212] netlink: 4108 bytes leftover after parsing attributes in process `syz.2.7399'. [ 1530.646803][ T1212] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1530.772905][ T1218] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7400'. [ 1530.975577][ T1226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7403'. [ 1531.085073][ T1229] netlink: 'syz.0.7404': attribute type 10 has an invalid length. [ 1531.097078][ T1229] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7404'. [ 1531.121658][ T1229] dummy0: left allmulticast mode [ 1531.127603][ T1229] batman_adv: batadv0: Interface activated: dummy0 [ 1531.145489][ T1230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7404'. [ 1531.176939][ T1229] batadv0: mtu less than device minimum [ 1531.198084][ T1229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1531.210711][ T1229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1531.222543][ T1229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1531.234387][ T1229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1531.246378][ T1229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1531.258447][ T1229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1531.270484][ T1229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1531.282511][ T1229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1531.317651][ T1229] batman_adv: batadv0: Interface deactivated: dummy0 [ 1531.351766][ T1229] batman_adv: batadv0: Removing interface: dummy0 [ 1531.395540][ T1229] bridge0: port 1(dummy0) entered blocking state [ 1531.406871][ T1229] bridge0: port 1(dummy0) entered disabled state [ 1531.424451][ T1229] dummy0: entered allmulticast mode [ 1531.507163][ T1236] netlink: 'syz.0.7404': attribute type 3 has an invalid length. [ 1531.634696][ T1229] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7404'. [ 1531.878040][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1532.372357][ T1253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7410'. [ 1532.403648][ T1256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7411'. [ 1533.847345][ T1290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7419'. [ 1534.692524][ T1300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7421'. [ 1534.754805][ T1300] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7421'. [ 1534.791432][ T1300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7421'. [ 1534.825094][ T1259] lo speed is unknown, defaulting to 1000 [ 1534.863773][ T1300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7421'. [ 1535.152013][ T1305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7422'. [ 1535.512585][ T1312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7424'. [ 1536.261853][ T1317] net_ratelimit: 11 callbacks suppressed [ 1536.261877][ T1317] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1536.646002][ T1325] __nla_validate_parse: 1 callbacks suppressed [ 1536.646019][ T1325] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7426'. [ 1536.837209][ T1327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1536.892447][ T1303] lo speed is unknown, defaulting to 1000 [ 1538.523426][ T1350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1538.736441][ T1358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7436'. [ 1538.813597][ T1357] team0: entered promiscuous mode [ 1538.823577][ T1357] team_slave_0: entered promiscuous mode [ 1538.831409][ T1357] team_slave_1: entered promiscuous mode [ 1538.918029][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1539.424051][ T1358] team0 (unregistering): left promiscuous mode [ 1539.443945][ T1358] team_slave_0: left promiscuous mode [ 1539.456595][ T1358] team_slave_1: left promiscuous mode [ 1539.477352][ T1358] team0 (unregistering): Port device team_slave_0 removed [ 1539.505954][ T1358] team0 (unregistering): Port device team_slave_1 removed [ 1539.863102][ T1368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7439'. [ 1540.209709][ T9446] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1541.002244][T26190] block nbd9: Possible stuck request ffff888025ad5080: control (read@0,4096B). Runtime 1410 seconds [ 1542.028818][ T1409] tipc: Enabling of bearer rejected, failed to enable media [ 1542.251718][ T1413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7450'. [ 1542.594697][ T1419] openvswitch: netlink: IP tunnel TTL not specified. [ 1542.902221][ T1429] netlink: 'syz.1.7457': attribute type 11 has an invalid length. [ 1542.903822][T25558] IPVS: starting estimator thread 0... [ 1543.062267][ T1430] IPVS: using max 25 ests per chain, 60000 per kthread [ 1543.383811][ T1441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7460'. [ 1543.397155][ T1441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7460'. [ 1543.667729][ T1449] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7463'. [ 1543.667729][ T1450] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7463'. [ 1544.581532][ T1470] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7469'. [ 1544.704084][ T1475] netlink: 'syz.4.7470': attribute type 11 has an invalid length. [ 1545.054251][ T1483] netlink: 'syz.1.7472': attribute type 11 has an invalid length. [ 1545.060631][ T1485] netlink: 'syz.0.7471': attribute type 7 has an invalid length. [ 1545.116561][ T1485] : entered promiscuous mode [ 1545.143044][ T1478] IPVS: set_ctl: invalid protocol: 103 100.1.1.1:20004 [ 1545.321653][ T94] block nbd15: Possible stuck request ffff888025cc7000: control (read@0,4096B). Runtime 1290 seconds [ 1545.329461][T26190] block nbd14: Possible stuck request ffff888025c97000: control (read@0,4096B). Runtime 1290 seconds [ 1545.456582][ T1503] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7476'. [ 1545.512205][ T1503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7476'. [ 1545.605518][ T1507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7478'. [ 1545.666086][ T1503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7476'. [ 1546.367022][ T1490] lo speed is unknown, defaulting to 1000 [ 1546.943729][ T1533] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1547.113824][ T1538] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1547.146556][ T1538] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1547.197333][ T1538] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1547.442922][ T1526] lo speed is unknown, defaulting to 1000 [ 1547.485651][ T1548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1547.878410][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1549.599983][ T1585] __nla_validate_parse: 6 callbacks suppressed [ 1549.600004][ T1585] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7497'. [ 1549.666919][ T1586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7497'. [ 1549.964916][ T1592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7498'. [ 1550.024812][ T1593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7498'. [ 1551.133620][ T1611] ip6gretap1: entered promiscuous mode [ 1551.150668][ T1571] lo speed is unknown, defaulting to 1000 [ 1551.264332][ T1611] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1551.895378][ T1561] lo speed is unknown, defaulting to 1000 [ 1552.154737][ T1628] netlink: 'syz.3.7507': attribute type 1 has an invalid length. [ 1552.173931][ T1628] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1552.267492][ T1636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7506'. [ 1552.962899][ T1645] netlink: 'syz.3.7511': attribute type 10 has an invalid length. [ 1553.082227][ T1645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1553.202844][ T1645] bond0: (slave team0): Enslaving as an active interface with an up link [ 1553.354638][ T1652] netpci0: tun_chr_ioctl cmd 1074025681 [ 1553.545205][ T1654] netlink: 'syz.3.7514': attribute type 10 has an invalid length. [ 1553.652884][T26190] block nbd63: Possible stuck request ffff8880736e5080: control (read@0,4096B). Runtime 1290 seconds [ 1553.704905][ T1654] bond0: (slave 0!): Enslaving as an active interface with an up link [ 1554.593820][ T1671] netlink: 'syz.3.7519': attribute type 4 has an invalid length. [ 1554.612681][ T1671] netlink: 'syz.3.7519': attribute type 4 has an invalid length. [ 1556.643551][ T1704] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1557.422145][ T1714] bridge_slave_0: left allmulticast mode [ 1557.436498][ T1714] bridge_slave_0: left promiscuous mode [ 1557.452082][ T1714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.535299][ T1714] bridge_slave_1: left allmulticast mode [ 1557.539307][ T1715] netlink: 'syz.4.7531': attribute type 10 has an invalid length. [ 1557.607558][ T1714] bridge_slave_1: left promiscuous mode [ 1557.634094][ T1714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.668173][ T1714] bond0: (slave bond_slave_0): Releasing backup interface [ 1557.766541][ T1714] bond0: (slave bond_slave_1): Releasing backup interface [ 1557.842646][ T1714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1557.893413][ T1714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1557.995389][ T1714] bond0: (slave wlan1): Releasing backup interface [ 1558.042858][ T1714] batman_adv: batadv0: Removing interface: macsec0 [ 1558.065225][ T1714] bond2: (slave gretap1): Releasing active interface [ 1558.117314][ T1715] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1558.151375][ T1701] lo speed is unknown, defaulting to 1000 [ 1558.434092][ T1720] netlink: 'syz.3.7532': attribute type 10 has an invalid length. [ 1559.281163][ T1743] netlink: 'syz.3.7538': attribute type 83 has an invalid length. [ 1560.485840][ T1728] lo speed is unknown, defaulting to 1000 [ 1560.683563][ T1757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7541'. [ 1560.726799][ T1758] bond0: option arp_validate: invalid value (18446744073491447809) [ 1560.741039][ T9456] bond0: (slave wlan1): interface is now down [ 1560.741107][ T9456] bond0: (slave team0): interface is now down [ 1560.741122][ T9456] bond0: (slave 0!): interface is now down [ 1560.766721][ T9448] bond0: (slave wlan1): interface is now down [ 1560.784380][ T9448] bond0: (slave team0): interface is now down [ 1560.802238][ T9448] bond0: (slave 0!): interface is now down [ 1560.891444][ T9448] bond0: (slave wlan1): interface is now down [ 1560.897567][ T9448] bond0: (slave team0): interface is now down [ 1560.923462][ T9448] bond0: (slave 0!): interface is now down [ 1560.965188][ T9448] bond0: (slave wlan1): interface is now down [ 1560.997287][ T9448] bond0: (slave team0): interface is now down [ 1561.035421][ T9448] bond0: (slave 0!): interface is now down [ 1561.082065][T25702] bond0: (slave wlan1): interface is now down [ 1561.101338][T25702] bond0: (slave team0): interface is now down [ 1561.111691][T25702] bond0: (slave 0!): interface is now down [ 1561.142857][T25702] bond0: (slave wlan1): interface is now down [ 1561.154438][T25702] bond0: (slave team0): interface is now down [ 1561.171639][T25702] bond0: (slave 0!): interface is now down [ 1561.240504][T25702] bond0: (slave wlan1): interface is now down [ 1561.246789][T22302] Bluetooth: hci3: command 0x0406 tx timeout [ 1561.261203][T25702] bond0: (slave team0): interface is now down [ 1561.267320][T25702] bond0: (slave 0!): interface is now down [ 1561.291602][T25702] bond0: (slave wlan1): interface is now down [ 1561.311245][T25702] bond0: (slave team0): interface is now down [ 1561.317422][T25702] bond0: (slave 0!): interface is now down [ 1561.351873][T25702] bond0: (slave wlan1): interface is now down [ 1561.394373][T25702] bond0: (slave team0): interface is now down [ 1561.403767][T25702] bond0: (slave 0!): interface is now down [ 1561.436713][ T9452] bond0: (slave wlan1): interface is now down [ 1561.466727][ T9452] bond0: (slave team0): interface is now down [ 1561.476747][ T9452] bond0: (slave 0!): interface is now down [ 1561.500506][ T9452] bond0: (slave wlan1): interface is now down [ 1561.506650][ T9452] bond0: (slave team0): interface is now down [ 1561.529937][ T9452] bond0: (slave 0!): interface is now down [ 1561.560989][ T9448] bond0: (slave wlan1): interface is now down [ 1561.567222][ T9448] bond0: (slave team0): interface is now down [ 1561.576908][ T9448] bond0: (slave 0!): interface is now down [ 1561.643671][ T9448] bond0: (slave wlan1): interface is now down [ 1561.654637][ T1767] openvswitch: netlink: IP tunnel dst address not specified [ 1561.665750][ T1768] openvswitch: netlink: IP tunnel dst address not specified [ 1561.676097][ T9448] bond0: (slave team0): interface is now down [ 1561.685363][ T9448] bond0: (slave 0!): interface is now down [ 1561.791682][ T1770] netlink: 'syz.2.7544': attribute type 1 has an invalid length. [ 1561.791809][ T9448] bond0: now running without any active interface! [ 1561.876705][ T1770] bond2: entered promiscuous mode [ 1561.907192][ T1770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1562.356814][ T1783] netlink: 'syz.1.7548': attribute type 1 has an invalid length. [ 1562.451569][ T1783] netlink: 'syz.1.7548': attribute type 1 has an invalid length. [ 1562.604745][ T1786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7549'. [ 1563.275507][ T1796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7551'. [ 1563.355772][ T1778] lo speed is unknown, defaulting to 1000 [ 1563.637146][ T1801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7553'. [ 1564.356350][ T1809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7556'. [ 1564.667542][ T1817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7558'. [ 1565.831708][ T1827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7561'. [ 1565.853514][ T1827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7561'. [ 1566.514962][ T1840] xt_socket: unknown flags 0xd0 [ 1566.743494][ T1845] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7565'. [ 1566.787526][ T1824] lo speed is unknown, defaulting to 1000 [ 1567.355218][ T1858] netlink: 'syz.3.7569': attribute type 11 has an invalid length. [ 1567.991792][ T1876] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7576'. [ 1568.126279][ T1876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7576'. [ 1568.174363][ T1879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7578'. [ 1568.186427][ T1879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7578'. [ 1568.202787][ T1879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7578'. [ 1568.262423][ T1879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7578'. [ 1568.323958][ T1882] sit1: entered promiscuous mode [ 1568.666389][ T1890] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7581'. [ 1568.943480][ T9448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1568.963409][ T9448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1569.977055][ T1924] netlink: 'syz.3.7589': attribute type 1 has an invalid length. [ 1570.472758][ T1926] bond2: (slave gretap1): making interface the new active one [ 1570.485018][ T1926] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1571.576319][T26190] block nbd9: Possible stuck request ffff888025ad5080: control (read@0,4096B). Runtime 1440 seconds [ 1572.202193][T25700] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1572.245823][ T1959] batadv_slave_1: entered promiscuous mode [ 1572.281665][ T1958] batadv_slave_1: left promiscuous mode [ 1572.590722][ T1956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7595'. [ 1572.838117][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1572.854545][ T1980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7602'. [ 1573.151808][ T1989] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7605'. [ 1573.366993][ T1984] wlan1: mtu greater than device maximum [ 1573.567420][ T2009] netlink: 'syz.3.7609': attribute type 1 has an invalid length. [ 1573.826018][ T2012] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7611'. [ 1573.895793][ T2002] lo speed is unknown, defaulting to 1000 [ 1574.101451][ T2028] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7615'. [ 1575.251661][ T2040] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7618'. [ 1575.305020][ T2008] lo speed is unknown, defaulting to 1000 [ 1575.401819][ T94] block nbd15: Possible stuck request ffff888025cc7000: control (read@0,4096B). Runtime 1320 seconds [ 1575.416428][T26190] block nbd14: Possible stuck request ffff888025c97000: control (read@0,4096B). Runtime 1320 seconds [ 1575.655575][ T2048] netlink: 'syz.2.7619': attribute type 4 has an invalid length. [ 1576.001537][ T2059] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1576.611861][ T2035] lo speed is unknown, defaulting to 1000 [ 1576.617770][ T2071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7625'. [ 1577.402811][ T2078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7626'. [ 1578.132036][ T2087] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7629'. [ 1578.274653][ T2057] lo speed is unknown, defaulting to 1000 [ 1579.056230][ T2108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7635'. [ 1579.123550][ T2108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7635'. [ 1579.238041][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1580.482161][ T2131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7642'. [ 1580.954946][ T2136] vxcan1: tx drop: invalid da for name 0x0000000000000014 [ 1582.122420][ T2146] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1582.334413][ T2151] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7648'. [ 1582.412242][ T2155] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7648'. [ 1583.311242][ T2162] Unsupported ieee802154 address type: 0 [ 1583.756044][T26190] block nbd63: Possible stuck request ffff8880736e5080: control (read@0,4096B). Runtime 1320 seconds [ 1584.356474][ T2146] lo speed is unknown, defaulting to 1000 [ 1584.665713][ T2170] netlink: 'syz.4.7654': attribute type 1 has an invalid length. [ 1584.687654][ T2170] netlink: 'syz.4.7654': attribute type 2 has an invalid length. [ 1584.702071][ T2170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7654'. [ 1584.724860][ T2170] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7654'. [ 1584.996345][ T2180] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1585.012157][ T2179] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1585.623242][ T2192] netlink: 'syz.3.7660': attribute type 7 has an invalid length. [ 1585.682581][ T2191] netlink: 'syz.3.7660': attribute type 7 has an invalid length. [ 1586.776122][ T2184] lo speed is unknown, defaulting to 1000 [ 1587.515543][ T2212] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7666'. [ 1587.961315][ T2223] netlink: 'syz.0.7670': attribute type 1 has an invalid length. [ 1588.034710][ T2223] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1588.063835][ T2220] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7669'. [ 1588.076270][ T2220] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7669'. [ 1588.215512][ T2220] rdma_rxe: rxe_newlink: failed to add lo [ 1588.266990][ T2226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1588.287592][T29454] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1588.762890][T29454] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1589.057402][ T9448] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1589.095434][ T9448] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1589.882100][T16087] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1590.583784][ T2281] netlink: 'syz.0.7685': attribute type 4 has an invalid length. [ 1591.243985][ T2291] sctp: [Deprecated]: syz.0.7686 (pid 2291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1591.243985][ T2291] Use struct sctp_sack_info instead [ 1591.462862][ T2299] netlink: 49 bytes leftover after parsing attributes in process `syz.1.7689'. [ 1592.918350][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1596.372543][ T2312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7691'. [ 1596.694659][ T2318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7693'. [ 1596.726522][ T2318] bridge0: port 1(vlan3) entered blocking state [ 1596.736304][ T2318] bridge0: port 1(vlan3) entered disabled state [ 1596.746942][ T2318] vlan3: entered allmulticast mode [ 1596.797579][ T2318] bond0: entered allmulticast mode [ 1596.836259][ T2318] vlan3: entered promiscuous mode [ 1596.871425][ T2318] bond0: entered promiscuous mode [ 1597.167495][ T2289] lo speed is unknown, defaulting to 1000 [ 1597.502671][ T2338] netlink: 'syz.2.7697': attribute type 1 has an invalid length. [ 1597.696922][ T2351] netlink: 424 bytes leftover after parsing attributes in process `syz.1.7701'. [ 1598.246845][ T2366] netlink: 'syz.0.7704': attribute type 21 has an invalid length. [ 1598.302992][ T2366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7704'. [ 1598.355601][ T2370] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7704'. [ 1598.555127][ T2341] lo speed is unknown, defaulting to 1000 [ 1599.422530][ T2386] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7710'. [ 1599.755522][ T2359] lo speed is unknown, defaulting to 1000 [ 1599.882040][ T2390] sctp: [Deprecated]: syz.0.7711 (pid 2390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1599.882040][ T2390] Use struct sctp_sack_info instead [ 1600.726162][ T2374] lo speed is unknown, defaulting to 1000 [ 1600.997997][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1601.657067][T26190] block nbd9: Possible stuck request ffff888025ad5080: control (read@0,4096B). Runtime 1470 seconds [ 1604.202036][ T9456] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1605.491320][ T94] block nbd15: Possible stuck request ffff888025cc7000: control (read@0,4096B). Runtime 1350 seconds [ 1605.511958][T26190] block nbd14: Possible stuck request ffff888025c97000: control (read@0,4096B). Runtime 1350 seconds [ 1613.803351][T26190] block nbd63: Possible stuck request ffff8880736e5080: control (read@0,4096B). Runtime 1350 seconds [ 1616.998419][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1631.722414][T26190] block nbd9: Possible stuck request ffff888025ad5080: control (read@0,4096B). Runtime 1500 seconds [ 1635.561606][ T94] block nbd15: Possible stuck request ffff888025cc7000: control (read@0,4096B). Runtime 1380 seconds [ 1635.576224][T26190] block nbd14: Possible stuck request ffff888025c97000: control (read@0,4096B). Runtime 1380 seconds [ 1636.202224][ T9452] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1643.239093][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1643.891269][T26190] block nbd63: Possible stuck request ffff8880736e5080: control (read@0,4096B). Runtime 1380 seconds [ 1648.358726][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1661.812371][T26190] block nbd9: Possible stuck request ffff888025ad5080: control (read@0,4096B). Runtime 1530 seconds [ 1664.021983][ T2409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7718'. [ 1664.976372][ T2420] bpq0: entered promiscuous mode [ 1665.042095][ T2409] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000 [ 1665.052146][ T2424] bpq0: left promiscuous mode [ 1665.503775][ T2439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7720'. [ 1665.657441][T26190] block nbd14: Possible stuck request ffff888025c97000: control (read@0,4096B). Runtime 1410 seconds [ 1665.664428][ T94] block nbd15: Possible stuck request ffff888025cc7000: control (read@0,4096B). Runtime 1410 seconds [ 1666.092515][ T2461] tipc: Started in network mode [ 1666.097620][ T2461] tipc: Node identity d2e1b54e7ab9, cluster identity 4711 [ 1666.127421][ T2461] tipc: Enabled bearer , priority 0 [ 1666.186522][ T2468] syzkaller0: entered promiscuous mode [ 1666.218841][ T2468] syzkaller0: entered allmulticast mode [ 1666.342993][ T2419] lo speed is unknown, defaulting to 1000 [ 1666.366723][ T2455] tipc: Resetting bearer [ 1666.434181][ T2450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1666.562051][ T2455] tipc: Disabling bearer [ 1667.282138][ T2467] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7723'. [ 1667.492793][ T2454] lo speed is unknown, defaulting to 1000 [ 1668.200251][ T9446] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1668.523686][ T2457] lo speed is unknown, defaulting to 1000 [ 1670.022350][ T2473] lo speed is unknown, defaulting to 1000 [ 1671.485270][ T2488] lo speed is unknown, defaulting to 1000 [ 1673.963819][T26190] block nbd63: Possible stuck request ffff8880736e5080: control (read@0,4096B). Runtime 1410 seconds [ 1674.004059][ T2503] lo speed is unknown, defaulting to 1000 [ 1677.212024][ T2592] tipc: Enabled bearer , priority 0 [ 1677.237453][ T2593] syzkaller0: entered promiscuous mode [ 1677.284941][ T2593] syzkaller0: entered allmulticast mode [ 1677.635846][ T2590] tipc: Resetting bearer [ 1677.994550][ T2589] tipc: Resetting bearer [ 1678.077659][ T2589] tipc: Disabling bearer [ 1678.484713][ T2614] netlink: 'syz.4.7746': attribute type 1 has an invalid length. [ 1678.515256][ T2614] netlink: 'syz.4.7746': attribute type 2 has an invalid length. [ 1678.527602][ T2614] netlink: 'syz.4.7746': attribute type 1 has an invalid length. [ 1678.545625][ T2614] netlink: 'syz.4.7746': attribute type 2 has an invalid length. [ 1678.675717][ T2617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7746'. [ 1678.683964][ T2623] netlink: 'syz.2.7745': attribute type 10 has an invalid length. [ 1678.854021][ T2625] netlink: 'syz.2.7747': attribute type 1 has an invalid length. [ 1679.054518][ T2625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1679.126094][ T2625] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7747'. [ 1679.723497][ T2627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1679.736719][ T2627] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1679.816459][ T2627] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1680.793450][ T2656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7751'. [ 1681.332416][ T2659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7752'. [ 1681.424588][ T2662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7752'. [ 1681.932216][ T2657] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000 [ 1682.094105][ T2675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7755'. [ 1682.542669][ T2690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7759'. [ 1683.053254][ T2656] lo speed is unknown, defaulting to 1000 [ 1683.326992][ T2710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7763'. [ 1683.797393][ T2721] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7766'. [ 1684.054915][ T2723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7767'. [ 1684.356275][ T2726] unsupported nla_type 52263 [ 1684.376815][ T2728] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7769'. [ 1684.481931][ T2690] lo speed is unknown, defaulting to 1000 [ 1684.532412][ T2727] delete_channel: no stack [ 1684.712669][ T2735] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1684.781543][ T2735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7771'. [ 1684.814409][ T2735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7771'. [ 1684.884563][ T2739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7771'. [ 1684.926478][ T2739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7771'. [ 1684.939668][ T2739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7771'. [ 1684.952666][ T2739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7771'. [ 1685.183061][ T2741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7772'. [ 1686.186312][ T2766] sock: sock_timestamping_bind_phc: sock not bind to device [ 1686.322742][ T2696] lo speed is unknown, defaulting to 1000 [ 1686.924004][ T2779] sctp: [Deprecated]: syz.0.7782 (pid 2779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1686.924004][ T2779] Use struct sctp_sack_info instead [ 1689.393302][ T2818] netlink: 'syz.3.7791': attribute type 1 has an invalid length. [ 1689.425330][ T2818] __nla_validate_parse: 6 callbacks suppressed [ 1689.425356][ T2818] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7791'. [ 1689.452374][ T2818] netlink: 'syz.3.7791': attribute type 2 has an invalid length. [ 1689.502009][ T2818] netlink: 'syz.3.7791': attribute type 1 has an invalid length. [ 1689.772587][ T2824] netlink: 'syz.3.7794': attribute type 10 has an invalid length. [ 1689.865096][ T2824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7794'. [ 1689.902168][ T2824] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.7794'. [ 1690.973556][ T2848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7800'. [ 1691.072927][ T2859] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1691.502857][ T2859] bond5: entered promiscuous mode [ 1691.525071][ T2859] bond5: entered allmulticast mode [ 1691.528406][ T2865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7803'. [ 1691.580658][ T2859] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1691.903125][T26190] block nbd9: Possible stuck request ffff888025ad5080: control (read@0,4096B). Runtime 1560 seconds [ 1692.181805][ T2880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7807'. [ 1692.294700][ T2884] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7805'. [ 1692.484297][ T2889] netlink: 'syz.2.7809': attribute type 1 has an invalid length. [ 1692.537668][ T2896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7809'. [ 1692.592168][ T2896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7809'. [ 1692.675036][ T2889] bond4: entered promiscuous mode [ 1692.684152][ T2889] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1692.715375][ T2866] lo speed is unknown, defaulting to 1000 [ 1692.825636][ T2899] bond4: (slave bridge6): making interface the new active one [ 1692.875063][ T2899] bridge6: entered promiscuous mode [ 1692.911696][ T2899] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 1693.172672][ T2913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7816'. [ 1693.200352][ T2911] netlink: 'syz.2.7815': attribute type 1 has an invalid length. [ 1693.222613][ T2911] netlink: 'syz.2.7815': attribute type 3 has an invalid length. [ 1693.236851][ T2913] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode [ 1693.867363][ T2907] lo speed is unknown, defaulting to 1000 [ 1694.485303][ T2936] __nla_validate_parse: 2 callbacks suppressed [ 1694.485322][ T2936] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7822'. [ 1694.882782][ T2944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7825'. [ 1694.931964][ T2944] netlink: 'syz.3.7825': attribute type 7 has an invalid length. [ 1694.973299][ T2944] netlink: 'syz.3.7825': attribute type 8 has an invalid length. [ 1695.031608][ T2944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7825'. [ 1695.060967][ T2951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7828'. [ 1695.186762][ T2951] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7828'. [ 1695.247125][ T2957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7829'. [ 1695.263618][ T2956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7829'. [ 1695.292963][ T2959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7831'. [ 1695.721740][ T94] block nbd15: Possible stuck request ffff888025cc7000: control (read@0,4096B). Runtime 1440 seconds [ 1695.727829][T26190] block nbd14: Possible stuck request ffff888025c97000: control (read@0,4096B). Runtime 1440 seconds [ 1696.090123][ T2963] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000 [ 1697.204938][ T2959] lo speed is unknown, defaulting to 1000 [ 1697.863215][ T3007] geneve3: entered allmulticast mode [ 1697.976332][ T3011] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7842'. [ 1698.157194][ T3013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7845'. [ 1698.944499][ T3032] FAULT_INJECTION: forcing a failure. [ 1698.944499][ T3032] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.961542][ T3032] CPU: 0 UID: 0 PID: 3032 Comm: syz.0.7849 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 1698.961569][ T3032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1698.961580][ T3032] Call Trace: [ 1698.961589][ T3032] [ 1698.961598][ T3032] dump_stack_lvl+0x189/0x250 [ 1698.961624][ T3032] ? __pfx____ratelimit+0x10/0x10 [ 1698.961648][ T3032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1698.961665][ T3032] ? __pfx__printk+0x10/0x10 [ 1698.961692][ T3032] ? __pfx___might_resched+0x10/0x10 [ 1698.961722][ T3032] should_fail_ex+0x414/0x560 [ 1698.961754][ T3032] should_failslab+0xa8/0x100 [ 1698.961772][ T3032] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1698.961797][ T3032] ? __alloc_skb+0x112/0x2d0 [ 1698.961825][ T3032] __alloc_skb+0x112/0x2d0 [ 1698.961853][ T3032] tipc_nl_compat_doit+0x1cc/0x5f0 [ 1698.961873][ T3032] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1698.961898][ T3032] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1698.961919][ T3032] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 1698.961953][ T3032] ? bpf_lsm_capable+0x9/0x20 [ 1698.961972][ T3032] ? security_capable+0x7e/0x2e0 [ 1698.961997][ T3032] tipc_nl_compat_recv+0x83c/0xbe0 [ 1698.962017][ T3032] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1698.962032][ T3032] ? __mutex_trylock_common+0x153/0x260 [ 1698.962051][ T3032] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1698.962064][ T3032] ? __pfx_tipc_nl_node_reset_link_stats+0x10/0x10 [ 1698.962085][ T3032] ? __pfx_tipc_nl_compat_link_reset_stats+0x10/0x10 [ 1698.962109][ T3032] ? trace_contention_end+0x39/0x120 [ 1698.962133][ T3032] genl_family_rcv_msg_doit+0x215/0x300 [ 1698.962156][ T3032] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1698.962186][ T3032] ? stack_trace_save+0x9c/0xe0 [ 1698.962208][ T3032] genl_rcv_msg+0x60e/0x790 [ 1698.962230][ T3032] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1698.962245][ T3032] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1698.962276][ T3032] netlink_rcv_skb+0x205/0x470 [ 1698.962294][ T3032] ? __lock_acquire+0xab9/0xd20 [ 1698.962313][ T3032] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1698.962331][ T3032] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1698.962368][ T3032] ? down_read+0x1ad/0x2e0 [ 1698.962385][ T3032] genl_rcv+0x28/0x40 [ 1698.962399][ T3032] netlink_unicast+0x82c/0x9e0 [ 1698.962426][ T3032] ? __pfx_netlink_unicast+0x10/0x10 [ 1698.962446][ T3032] ? netlink_sendmsg+0x642/0xb30 [ 1698.962465][ T3032] ? skb_put+0x11b/0x210 [ 1698.962482][ T3032] netlink_sendmsg+0x805/0xb30 [ 1698.962515][ T3032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1698.962551][ T3032] ? aa_sock_msg_perm+0x94/0x160 [ 1698.962571][ T3032] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1698.962587][ T3032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1698.962608][ T3032] __sock_sendmsg+0x219/0x270 [ 1698.962630][ T3032] ____sys_sendmsg+0x505/0x830 [ 1698.962651][ T3032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1698.962675][ T3032] ? import_iovec+0x74/0xa0 [ 1698.962698][ T3032] ___sys_sendmsg+0x21f/0x2a0 [ 1698.962715][ T3032] ? __pfx____sys_sendmsg+0x10/0x10 [ 1698.962763][ T3032] ? __fget_files+0x2a/0x420 [ 1698.962778][ T3032] ? __fget_files+0x3a0/0x420 [ 1698.962802][ T3032] __x64_sys_sendmsg+0x19b/0x260 [ 1698.962820][ T3032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1698.962844][ T3032] ? __pfx_ksys_write+0x10/0x10 [ 1698.962862][ T3032] ? rcu_is_watching+0x15/0xb0 [ 1698.962888][ T3032] ? do_syscall_64+0xbe/0x3b0 [ 1698.962912][ T3032] do_syscall_64+0xfa/0x3b0 [ 1698.962931][ T3032] ? lockdep_hardirqs_on+0x9c/0x150 [ 1698.962950][ T3032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.962965][ T3032] ? clear_bhb_loop+0x60/0xb0 [ 1698.962982][ T3032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.962996][ T3032] RIP: 0033:0x7f6bcf98ebe9 [ 1698.963011][ T3032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1698.963024][ T3032] RSP: 002b:00007f6bd072a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1698.963043][ T3032] RAX: ffffffffffffffda RBX: 00007f6bcfbb6090 RCX: 00007f6bcf98ebe9 [ 1698.963054][ T3032] RDX: 0000000004040050 RSI: 00002000000001c0 RDI: 000000000000000b [ 1698.963064][ T3032] RBP: 00007f6bd072a090 R08: 0000000000000000 R09: 0000000000000000 [ 1698.963073][ T3032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1698.963082][ T3032] R13: 00007f6bcfbb6128 R14: 00007f6bcfbb6090 R15: 00007ffdd1e56598 [ 1698.963108][ T3032] [ 1699.571830][ T3034] __nla_validate_parse: 3 callbacks suppressed [ 1699.571850][ T3034] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7850'. [ 1699.722326][ T3031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7850'. [ 1699.797458][ T3036] netlink: 162028 bytes leftover after parsing attributes in process `syz.4.7851'. [ 1700.200894][ T9456] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1701.043294][ T3060] netlink: 'syz.2.7855': attribute type 14 has an invalid length. [ 1701.506641][ T3073] netlink: 'syz.2.7858': attribute type 1 has an invalid length. [ 1701.883693][ T3081] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1701.953474][ T3089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7858'. [ 1702.223920][ T3084] veth3: entered promiscuous mode [ 1702.354075][ T3084] bond5: (slave veth3): Enslaving as a backup interface with a down link [ 1703.025544][ T3102] syzkaller0: entered promiscuous mode [ 1703.063339][ T3102] syzkaller0: entered allmulticast mode [ 1703.207481][ T3110] tipc: Enabled bearer , priority 0 [ 1703.350828][ T3109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7865'. [ 1703.587122][ T3110] tipc: Resetting bearer [ 1704.043245][T26190] block nbd63: Possible stuck request ffff8880736e5080: control (read@0,4096B). Runtime 1440 seconds [ 1708.379953][ T3101] tipc: Resetting bearer [ 1708.421524][ T3101] tipc: Disabling bearer [ 1708.447035][ T3077] lo speed is unknown, defaulting to 1000 [ 1709.053874][ T3138] sctp: [Deprecated]: syz.0.7870 (pid 3138) Use of int in maxseg socket option. [ 1709.053874][ T3138] Use struct sctp_assoc_value instead [ 1709.814349][ T3171] tipc: Enabled bearer , priority 0 [ 1709.825427][ T3171] syzkaller0: entered promiscuous mode [ 1709.833301][ T3171] syzkaller0: entered allmulticast mode [ 1709.982495][ T3171] tipc: Resetting bearer [ 1710.054993][ T3169] tipc: Resetting bearer [ 1710.097606][ T3169] tipc: Disabling bearer [ 1711.060653][ T3198] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1711.755920][ T3176] lo speed is unknown, defaulting to 1000 [ 1711.911963][ T3215] tipc: Enabling of bearer rejected, failed to enable media [ 1711.946801][T25703] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.991984][T25703] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.081855][ T3227] openvswitch: netlink: IPv4 tun info is not correct [ 1712.101885][T25703] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.137286][T25703] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.716553][ T3239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7889'. [ 1712.935240][ T3244] netlink: 'syz.3.7891': attribute type 16 has an invalid length. [ 1712.962010][ T3244] netlink: 'syz.3.7891': attribute type 17 has an invalid length. [ 1713.181091][ T3239] dummy0: left allmulticast mode [ 1713.186543][ T3239] bridge0: port 1(dummy0) entered disabled state [ 1713.785236][ T3248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7892'. [ 1713.804311][ T3248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7892'. [ 1713.913045][ T3244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1713.924489][T25558] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1713.943851][ T3244] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.023666][ T3244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1714.195737][T29454] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1714.544585][T25702] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1714.966010][ T3254] netlink: 'syz.3.7894': attribute type 12 has an invalid length. [ 1714.982626][ T3254] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.7894'. [ 1715.065455][ T3265] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7897'. [ 1715.207177][ T3265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1715.273980][ T3265] netlink: 'syz.2.7897': attribute type 10 has an invalid length. [ 1715.316320][ T3265] dummy0: entered promiscuous mode [ 1715.362230][ T3265] dummy0: entered allmulticast mode [ 1715.372607][ T3265] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1715.563354][ T9448] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1715.576207][ T9448] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1715.931926][ T3285] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7901'. [ 1716.152311][T29454] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1716.676813][ T3302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7906'. [ 1716.762959][ T3302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7906'. [ 1716.817816][ T3302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7906'. [ 1716.925824][ T3300] syzkaller0: entered promiscuous mode [ 1716.954385][ T3300] syzkaller0: entered allmulticast mode [ 1717.064363][ T3316] netlink: 'syz.2.7909': attribute type 1 has an invalid length. [ 1717.082666][ T3316] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7909'. [ 1717.166631][ T3317] syz.1.7911: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1717.187260][ T3317] CPU: 0 UID: 0 PID: 3317 Comm: syz.1.7911 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 1717.187285][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1717.187296][ T3317] Call Trace: [ 1717.187313][ T3317] [ 1717.187321][ T3317] dump_stack_lvl+0x189/0x250 [ 1717.187346][ T3317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1717.187361][ T3317] ? __pfx__printk+0x10/0x10 [ 1717.187381][ T3317] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1717.187399][ T3317] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1717.187417][ T3317] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1717.187437][ T3317] warn_alloc+0x214/0x310 [ 1717.187459][ T3317] ? __pfx_warn_alloc+0x10/0x10 [ 1717.187482][ T3317] ? __get_vm_area_node+0x28f/0x300 [ 1717.187505][ T3317] ? xskq_create+0xbf/0x170 [ 1717.187529][ T3317] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1717.187571][ T3317] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1717.187588][ T3317] ? xskq_create+0x56/0x170 [ 1717.187609][ T3317] ? __kasan_kmalloc+0x93/0xb0 [ 1717.187633][ T3317] vmalloc_user_noprof+0xad/0xf0 [ 1717.187648][ T3317] ? xskq_create+0xbf/0x170 [ 1717.187669][ T3317] xskq_create+0xbf/0x170 [ 1717.187692][ T3317] xsk_init_queue+0xb0/0x110 [ 1717.187714][ T3317] xsk_setsockopt+0x57b/0x8d0 [ 1717.187741][ T3317] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1717.187760][ T3317] ? __pfx_aa_sk_perm+0x10/0x10 [ 1717.187784][ T3317] ? __fget_files+0x2a/0x420 [ 1717.187798][ T3317] ? aa_sock_opt_perm+0x74/0x110 [ 1717.187822][ T3317] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1717.187840][ T3317] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1717.187861][ T3317] do_sock_setsockopt+0x17c/0x1b0 [ 1717.187885][ T3317] __x64_sys_setsockopt+0x13f/0x1b0 [ 1717.187910][ T3317] do_syscall_64+0xfa/0x3b0 [ 1717.187934][ T3317] ? lockdep_hardirqs_on+0x9c/0x150 [ 1717.187957][ T3317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.187975][ T3317] ? clear_bhb_loop+0x60/0xb0 [ 1717.187998][ T3317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.188016][ T3317] RIP: 0033:0x7f363798ebe9 [ 1717.188034][ T3317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1717.188049][ T3317] RSP: 002b:00007f363889a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1717.188071][ T3317] RAX: ffffffffffffffda RBX: 00007f3637bb5fa0 RCX: 00007f363798ebe9 [ 1717.188085][ T3317] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 1717.188097][ T3317] RBP: 00007f3637a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 1717.188109][ T3317] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000 [ 1717.188122][ T3317] R13: 00007f3637bb6038 R14: 00007f3637bb5fa0 R15: 00007ffffa14fed8 [ 1717.188156][ T3317] [ 1717.507465][ T3317] Mem-Info: [ 1717.534614][ T3317] active_anon:7920 inactive_anon:20 isolated_anon:0 [ 1717.534614][ T3317] active_file:1063 inactive_file:41364 isolated_file:0 [ 1717.534614][ T3317] unevictable:768 dirty:222 writeback:0 [ 1717.534614][ T3317] slab_reclaimable:17999 slab_unreclaimable:428978 [ 1717.534614][ T3317] mapped:29914 shmem:1382 pagetables:1106 [ 1717.534614][ T3317] sec_pagetables:0 bounce:0 [ 1717.534614][ T3317] kernel_misc_reclaimable:0 [ 1717.534614][ T3317] free:941591 free_pcp:26237 free_cma:0 [ 1717.654930][ T3317] Node 0 active_anon:32180kB inactive_anon:80kB active_file:4252kB inactive_file:165216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119656kB dirty:888kB writeback:0kB shmem:3992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:21064kB pagetables:4140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1717.790177][ T3317] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1717.873767][ T3329] netlink: 'syz.4.7913': attribute type 12 has an invalid length. [ 1717.907203][ T3317] Node 0 DMA free:10808kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:164kB local_pcp:48kB free_cma:0kB [ 1717.924551][ T3329] __nla_validate_parse: 1 callbacks suppressed [ 1717.924571][ T3329] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.7913'. [ 1717.963192][ T3317] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1718.013172][ T3317] Node 0 DMA32 free:53520kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:2048KB free_highatomic:580KB active_anon:31296kB inactive_anon:80kB active_file:4240kB inactive_file:163448kB unevictable:1536kB writepending:936kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:45240kB local_pcp:21216kB free_cma:0kB [ 1718.212906][ T3337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7914'. [ 1718.260600][ T3317] lowmem_reserve[]: 0 0 1 1 1 [ 1718.295953][ T3317] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:12kB inactive_file:1752kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:28kB free_cma:0kB [ 1718.364249][ T3344] netlink: 'syz.2.7914': attribute type 39 has an invalid length. [ 1718.430989][ T3317] lowmem_reserve[]: 0 0 0 0 0 [ 1718.460735][ T3317] Node 1 Normal free:3695508kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:240kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:59488kB local_pcp:31696kB free_cma:0kB [ 1718.572070][ T3317] lowmem_reserve[]: 0 0 0 0 0 [ 1718.576899][ T3317] Node 0 DMA: 22*4kB (UM) 20*8kB (UM) 8*16kB (UME) 30*32kB (UME) 12*64kB (UM) 6*128kB (UME) 5*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10296kB [ 1718.630748][ T3317] Node 0 DMA32: 2810*4kB (UMEH) 1247*8kB (UMEH) 447*16kB (UMEH) 300*32kB (UMEH) 128*64kB (UMEH) 45*128kB (UME) 23*256kB (M) 12*512kB (UM) 5*1024kB (UM) 2*2048kB (UM) 0*4096kB = 73168kB [ 1718.771594][ T3317] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 1718.852978][ T3317] Node 1 Normal: 399*4kB (UME) 123*8kB (UME) 20*16kB (UM) 272*32kB (UME) 221*64kB (UME) 109*128kB (UM) 50*256kB (UME) 16*512kB (UM) 25*1024kB (UM) 9*2048kB (UME) 877*4096kB (UM) = 3696916kB [ 1718.876637][ T3317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1718.890434][ T3317] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1718.903671][ T3317] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1718.916361][ T3317] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1718.931415][ T3317] 43364 total pagecache pages [ 1718.936492][ T3317] 0 pages in swap cache [ 1718.943714][ T3317] Free swap = 124996kB [ 1718.950885][ T3317] Total swap = 124996kB [ 1718.955302][ T3317] 2097051 pages RAM [ 1718.961876][ T3317] 0 pages HighMem/MovableOnly [ 1718.966830][ T3317] 424872 pages reserved [ 1718.973050][ T3317] 0 pages cma reserved [ 1719.724163][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1721.981899][T26190] block nbd9: Possible stuck request ffff888025ad5080: control (read@0,4096B). Runtime 1590 seconds [ 1723.075761][ T3352] ipvlan2: entered promiscuous mode [ 1723.101909][ T3353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7916'. [ 1723.173827][ T3346] vti0: entered promiscuous mode [ 1723.565474][ T3364] netlink: 201916 bytes leftover after parsing attributes in process `syz.4.7921'. [ 1724.277148][ T3385] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20004 [ 1724.471628][ T3398] netlink: 'syz.2.7925': attribute type 1 has an invalid length. [ 1724.501109][ T3389] tipc: Enabling of bearer rejected, already enabled [ 1724.681793][ T3411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7932'. [ 1724.716358][ T3411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7932'. [ 1724.746970][ T3411] netlink: 'syz.0.7932': attribute type 14 has an invalid length. [ 1724.816402][ T3413] sctp: [Deprecated]: syz.0.7932 (pid 3413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1724.816402][ T3413] Use struct sctp_sack_info instead [ 1724.876579][ T3411] netlink: 'syz.0.7932': attribute type 13 has an invalid length. [ 1725.105414][ T3382] delete_channel: no stack [ 1725.801623][ T94] block nbd15: Possible stuck request ffff888025cc7000: control (read@0,4096B). Runtime 1470 seconds [ 1725.822616][T26190] block nbd14: Possible stuck request ffff888025c97000: control (read@0,4096B). Runtime 1470 seconds [ 1726.172539][ T3454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7945'. [ 1726.454280][ T3462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7947'. [ 1726.473291][ T3464] netlink: 'syz.0.7946': attribute type 1 has an invalid length. [ 1726.757072][ T3464] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1726.816689][ T3435] lo speed is unknown, defaulting to 1000 [ 1726.935498][ T3474] @ÿ: renamed from bond_slave_0 [ 1726.955988][ T3474] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7950'. [ 1726.986139][ T3474] batadv1: entered promiscuous mode [ 1726.994363][ T3474] batadv1: entered allmulticast mode [ 1727.071453][ T3477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7949'. [ 1727.103106][ T3479] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7950'. [ 1727.797717][ T3500] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1728.146371][ T3512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7958'. [ 1728.182767][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7958'. [ 1728.243731][ T3516] 8021q: VLANs not supported on caif0 [ 1728.359043][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1728.612318][ T3521] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7960'. [ 1730.382742][ T3538] lo speed is unknown, defaulting to 1000 [ 1730.527716][ T3559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1730.632061][ T3562] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7971'. [ 1730.682459][ T3559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7970'. [ 1730.711316][ T3562] netlink: 7 bytes leftover after parsing attributes in process `syz.4.7971'. [ 1731.027333][ T3569] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1731.105154][ T3569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7973'. [ 1731.145567][ T3569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7973'. [ 1731.263551][ T3569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7973'. [ 1731.605415][ T3576] netlink: 5636 bytes leftover after parsing attributes in process `syz.4.7975'. [ 1732.161923][ T3587] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1732.200423][ T3587] tipc: Enabled bearer , priority 6 [ 1732.211912][ T9451] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1732.226334][ T3589] tipc: Enabling of bearer rejected, already enabled [ 1732.302105][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1732.571952][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1733.101639][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1733.226662][ T3619] __nla_validate_parse: 1 callbacks suppressed [ 1733.226681][ T3619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7990'. [ 1733.350646][ T3622] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1734.117904][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1734.191853][T26190] block nbd63: Possible stuck request ffff8880736e5080: control (read@0,4096B). Runtime 1470 seconds [ 1734.456637][ T3654] openvswitch: netlink: Message has 16 unknown bytes. [ 1734.764631][ T3665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8003'. [ 1735.113478][ T3670] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1735.157960][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1735.406409][ T3687] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1735.420969][ T3687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1735.507516][ T3690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8010'. [ 1735.797583][ T3696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8013'. [ 1736.197957][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1736.479512][ T3718] 8021q: VLANs not supported on wlan1 [ 1736.574145][ T3726] netlink: 252 bytes leftover after parsing attributes in process `syz.3.8023'. [ 1737.237910][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1737.254622][ T3759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8030'. [ 1737.572231][ T3762] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8028'. [ 1737.747472][ T3772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8032'. [ 1738.241760][ T3785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8037'. [ 1738.256391][ T3789] tipc: Cannot configure node identity twice [ 1738.277939][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1738.306645][ T3792] netlink: 'syz.0.8040': attribute type 1 has an invalid length. [ 1738.317581][ T3792] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8040'. [ 1738.903687][ T3778] lo speed is unknown, defaulting to 1000 [ 1739.097309][ T3821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8048'. [ 1739.185897][ T3824] netlink: 'syz.3.8049': attribute type 11 has an invalid length. [ 1739.196266][ T3824] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8049'. [ 1739.317960][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1739.383386][ T3833] ------------[ cut here ]------------ [ 1739.392806][ T3833] verifier bug: error during ctx access conversion(1) [ 1739.415985][ T3833] WARNING: CPU: 1 PID: 3833 at kernel/bpf/verifier.c:21448 bpf_check+0x1b6ec/0x1d2d0 [ 1739.432075][ T3833] Modules linked in: [ 1739.436031][ T3833] CPU: 1 UID: 0 PID: 3833 Comm: syz.0.8053 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 1739.451650][ T3833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1739.465510][ T3833] RIP: 0010:bpf_check+0x1b6ec/0x1d2d0 [ 1739.475321][ T3833] Code: 8b e8 b8 4f af ff 90 0f 0b 90 90 e9 6b 60 ff ff e8 f9 ab eb ff c6 05 59 67 b6 0d 01 90 48 c7 c7 a0 01 92 8b e8 95 4f af ff 90 <0f> 0b 90 90 e9 b5 bd ff ff e8 d6 ab eb ff c6 05 3b 67 b6 0d 01 90 [ 1739.501739][ T3833] RSP: 0018:ffffc9000c647600 EFLAGS: 00010246 [ 1739.511729][ T3833] RAX: 448dfc7e1b80ef00 RBX: 0000000000000000 RCX: 0000000000080000 [ 1739.523201][ T3833] RDX: ffffc90022a01000 RSI: 00000000000062d1 RDI: 00000000000062d2 [ 1739.534653][ T3833] RBP: ffffc9000c647b50 R08: 0000000000000003 R09: 0000000000000004 [ 1739.545830][ T3833] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: ffffc9000344b052 [ 1739.557486][ T3833] R13: dffffc0000000000 R14: ffff88804e320000 R15: 0000000000000008 [ 1739.571445][ T3833] FS: 00007f6bd074b6c0(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 1739.583308][ T3833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1739.592142][ T3833] CR2: 000020000000d000 CR3: 000000006158e000 CR4: 00000000003526f0 [ 1739.603312][ T3833] Call Trace: [ 1739.606661][ T3833] [ 1739.612402][ T3833] ? is_bpf_text_address+0x26/0x2b0 [ 1739.620957][ T3833] ? __pfx_flow_dissector_convert_ctx_access+0x10/0x10 [ 1739.631416][ T3833] ? __pfx_bpf_check+0x10/0x10 [ 1739.636314][ T3833] ? ktime_get_with_offset+0x8c/0x2a0 [ 1739.645570][ T3833] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 1739.655673][ T3833] ? ktime_get_with_offset+0x8c/0x2a0 [ 1739.665227][ T3833] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1739.675815][ T3833] ? __asan_memset+0x22/0x50 [ 1739.683825][ T3833] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1739.692467][ T3833] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1739.700758][ T3833] ? security_bpf_prog_load+0x7f/0x310 [ 1739.706277][ T3833] bpf_prog_load+0x1318/0x1930 [ 1739.714467][ T3833] ? __pfx_bpf_prog_load+0x10/0x10 [ 1739.723192][ T3833] ? bpf_lsm_bpf+0x9/0x20 [ 1739.727589][ T3833] ? security_bpf+0x7e/0x300 [ 1739.735941][ T3833] __sys_bpf+0x528/0x870 [ 1739.744199][ T3833] ? __pfx___sys_bpf+0x10/0x10 [ 1739.753059][ T3833] ? rcu_is_watching+0x15/0xb0 [ 1739.761602][ T3833] __x64_sys_bpf+0x7c/0x90 [ 1739.766304][ T3833] do_syscall_64+0xfa/0x3b0 [ 1739.774481][ T3833] ? lockdep_hardirqs_on+0x9c/0x150 [ 1739.783768][ T3833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.793535][ T3833] ? clear_bhb_loop+0x60/0xb0 [ 1739.802350][ T3833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.811924][ T3833] RIP: 0033:0x7f6bcf98ebe9 [ 1739.816389][ T3833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1739.841648][ T3833] RSP: 002b:00007f6bd074b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1739.853961][ T3833] RAX: ffffffffffffffda RBX: 00007f6bcfbb5fa0 RCX: 00007f6bcf98ebe9 [ 1739.865835][ T3833] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 1739.881083][ T3833] RBP: 00007f6bcfa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1739.892012][ T3833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1739.902286][ T3833] R13: 00007f6bcfbb6038 R14: 00007f6bcfbb5fa0 R15: 00007ffdd1e56598 [ 1739.914040][ T3833] [ 1739.917107][ T3833] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1739.924403][ T3833] CPU: 1 UID: 0 PID: 3833 Comm: syz.0.8053 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 1739.936057][ T3833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1739.946131][ T3833] Call Trace: [ 1739.949456][ T3833] [ 1739.952402][ T3833] dump_stack_lvl+0x99/0x250 [ 1739.957008][ T3833] ? __asan_memcpy+0x40/0x70 [ 1739.961629][ T3833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1739.966924][ T3833] ? __pfx__printk+0x10/0x10 [ 1739.971528][ T3833] panic+0x2db/0x790 [ 1739.975427][ T3833] ? __pfx_panic+0x10/0x10 [ 1739.979840][ T3833] ? show_trace_log_lvl+0x4fb/0x550 [ 1739.985082][ T3833] __warn+0x31b/0x4b0 [ 1739.989081][ T3833] ? bpf_check+0x1b6ec/0x1d2d0 [ 1739.993863][ T3833] ? bpf_check+0x1b6ec/0x1d2d0 [ 1739.998651][ T3833] report_bug+0x2be/0x4f0 [ 1740.003056][ T3833] ? bpf_check+0x1b6ec/0x1d2d0 [ 1740.007836][ T3833] ? bpf_check+0x1b6ec/0x1d2d0 [ 1740.012613][ T3833] ? bpf_check+0x1b6ee/0x1d2d0 [ 1740.017385][ T3833] handle_bug+0x84/0x160 [ 1740.021654][ T3833] exc_invalid_op+0x1a/0x50 [ 1740.026171][ T3833] asm_exc_invalid_op+0x1a/0x20 [ 1740.031116][ T3833] RIP: 0010:bpf_check+0x1b6ec/0x1d2d0 [ 1740.036780][ T3833] Code: 8b e8 b8 4f af ff 90 0f 0b 90 90 e9 6b 60 ff ff e8 f9 ab eb ff c6 05 59 67 b6 0d 01 90 48 c7 c7 a0 01 92 8b e8 95 4f af ff 90 <0f> 0b 90 90 e9 b5 bd ff ff e8 d6 ab eb ff c6 05 3b 67 b6 0d 01 90 [ 1740.056498][ T3833] RSP: 0018:ffffc9000c647600 EFLAGS: 00010246 [ 1740.062604][ T3833] RAX: 448dfc7e1b80ef00 RBX: 0000000000000000 RCX: 0000000000080000 [ 1740.070589][ T3833] RDX: ffffc90022a01000 RSI: 00000000000062d1 RDI: 00000000000062d2 [ 1740.078564][ T3833] RBP: ffffc9000c647b50 R08: 0000000000000003 R09: 0000000000000004 [ 1740.086575][ T3833] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: ffffc9000344b052 [ 1740.094553][ T3833] R13: dffffc0000000000 R14: ffff88804e320000 R15: 0000000000000008 [ 1740.102651][ T3833] ? is_bpf_text_address+0x26/0x2b0 [ 1740.107980][ T3833] ? __pfx_flow_dissector_convert_ctx_access+0x10/0x10 [ 1740.114891][ T3833] ? __pfx_bpf_check+0x10/0x10 [ 1740.119671][ T3833] ? ktime_get_with_offset+0x8c/0x2a0 [ 1740.125080][ T3833] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 1740.131331][ T3833] ? ktime_get_with_offset+0x8c/0x2a0 [ 1740.136715][ T3833] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1740.143340][ T3833] ? __asan_memset+0x22/0x50 [ 1740.147959][ T3833] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1740.152990][ T3833] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1740.158201][ T3833] ? security_bpf_prog_load+0x7f/0x310 [ 1740.163689][ T3833] bpf_prog_load+0x1318/0x1930 [ 1740.168550][ T3833] ? __pfx_bpf_prog_load+0x10/0x10 [ 1740.173690][ T3833] ? bpf_lsm_bpf+0x9/0x20 [ 1740.178035][ T3833] ? security_bpf+0x7e/0x300 [ 1740.182671][ T3833] __sys_bpf+0x528/0x870 [ 1740.187105][ T3833] ? __pfx___sys_bpf+0x10/0x10 [ 1740.191920][ T3833] ? rcu_is_watching+0x15/0xb0 [ 1740.196807][ T3833] __x64_sys_bpf+0x7c/0x90 [ 1740.201233][ T3833] do_syscall_64+0xfa/0x3b0 [ 1740.205752][ T3833] ? lockdep_hardirqs_on+0x9c/0x150 [ 1740.210971][ T3833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.217073][ T3833] ? clear_bhb_loop+0x60/0xb0 [ 1740.221771][ T3833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.227676][ T3833] RIP: 0033:0x7f6bcf98ebe9 [ 1740.232117][ T3833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1740.251773][ T3833] RSP: 002b:00007f6bd074b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1740.260208][ T3833] RAX: ffffffffffffffda RBX: 00007f6bcfbb5fa0 RCX: 00007f6bcf98ebe9 [ 1740.268202][ T3833] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 1740.276196][ T3833] RBP: 00007f6bcfa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1740.284194][ T3833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1740.292262][ T3833] R13: 00007f6bcfbb6038 R14: 00007f6bcfbb5fa0 R15: 00007ffdd1e56598 [ 1740.300270][ T3833] [ 1740.304767][ T3833] Kernel Offset: disabled [ 1740.309089][ T3833] Rebooting in 86400 seconds..