last executing test programs: 9.3515915s ago: executing program 1 (id=7793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="14010000", @ANYRES16=r2, @ANYBLOB="0107000000000000000013000000"], 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYRES64=r1], 0x1c}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0001000200"], 0x8) r5 = socket$inet6(0xa, 0x2, 0x3a) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, &(0x7f00000000c0)='bond\x00', 0x0, &(0x7f0000000100)={@_ha_fsid={[0x6, 0xff]}, {0x0, 0x7f, 0xdab8, 0x8}}, 0x6, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x4}, {[0x8, 0x5, 0x2a]}, 0x5c12f758, 0xe4, &(0x7f00000002c0)=""/228}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0b0000000300000004000000ff0f000000100000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005000000010000001f00000300"/28], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="02000000ffffffff018000009f924a302e6b6c97", @ANYRES32=0x1, @ANYBLOB="0104b8ed5ecd5524636a4d6b8d00000100595f78e74c0000000afa2c6b09cdbabf19166edfe6f701a573fe9f0f3ae681a3c204e706fda726fc9cc9e6fffefb30ae6ebd7063de09cd4e0b3b8e87122a94f5d3123ba6a9940acde2b2fdcaf4154b0dc59d6ed8e149bf552681150d87993a79ac781ff83e3db68822566abd82494a8b85fd0f499e43ddbac0550ab3eab6abc6bd9ff60b171370e300bceb", @ANYRESDEC=r2, @ANYRES32=r3, @ANYBLOB="0200000003000000000000000800"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x39, 0x32, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000500000018110000118c4fd6d938b8b2d1cda90b4766a6bd2426c77df50dd35cb019344b2b22c519c6b4fb8aae4283b054722f49d4e68daf6d794268f32509ddfb591c2709eae7a865d09dd8d0acd2ebda97c51448bccd8023bf208af4f23ffbf3e8c6059aa1b0b32b3237eefd1b6944cbd0169d4da76406971a0e4fe55c6a08ba88dd3fd4ecc3e76c19b67092168ad856809ccdb5824a71ddbc9fbc41aaee079d0d1b7ef1dedb99747176a9f99e4ef5bf5612c9312e3df502f0f7b5f46f8436f7b03b9a65f0f949228ed8fbb0", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000852000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c0000008500000006000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x1, 0xd0, &(0x7f0000000800)=""/208, 0x41000, 0x3, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0xb, 0x80000004, 0xfffffffd}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000a80)=[r11, r12], &(0x7f00000004c0)=[{0x2, 0x2, 0xe}, {0x0, 0x1, 0x1, 0xb}, {0x5, 0x2, 0x1, 0x8}, {0x1, 0x1, 0x10, 0x2}, {0x1, 0x5, 0x6, 0x2}], 0x10, 0x101}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r15 = accept$alg(r14, 0x0, 0x0) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r15, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e2138", 0x2b}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r15, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x1f}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="34000000100000042dbd70000500000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009a9d9a8000104626f6e640000000004"], 0x34}, 0x1, 0x2000000000000000}, 0x0) connect$inet6(r5, &(0x7f00000005c0)={0xa, 0x4e1f, 0x8, @loopback, 0xa}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x10, 0x0, 0x34) sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 9.125075811s ago: executing program 1 (id=7796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/48, 0x328000, 0x1000, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6(0xa, 0x6, 0xda6d) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r5}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x38, 0x26, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff1, 0xfffa}, {0xffff, 0x8}, {0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 8.637821449s ago: executing program 1 (id=7802): r0 = socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESHEX=r2], 0x10) (async) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESHEX=r2], 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x20a3aa55}]}}]}, 0x38}}, 0x4c840) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x20a3aa55}]}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000077c0)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x10}}, @TCA_FW_MASK={0x8, 0x5, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000077c0)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x10}}, @TCA_FW_MASK={0x8, 0x5, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 8.451561547s ago: executing program 1 (id=7806): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000d80)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) unshare(0x20400) socket$unix(0x1, 0x1, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x470bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000016}, 0x2000400c) 8.177069426s ago: executing program 1 (id=7809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0xb2, 0xa8}, 0x10}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x894}, 0x4008086) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 7.638008158s ago: executing program 1 (id=7816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffffc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x44}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x16}, @val={0x0, 0x84, 0x6, 0x1, 0xf, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x3f, 0x66, 0x0, 0x40, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x26}}, {0x4e26, 0x4e20, 0x2b, 0x0, @wg=@data={0x4, 0x7fffffff, 0xfffffffffffffffc, "1e3a0598fc016c6dc5f44b240d3108eccbdc07"}}}}, 0x4d) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffffc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x44}}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) (async) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) (async) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x16}, @val={0x0, 0x84, 0x6, 0x1, 0xf, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x3f, 0x66, 0x0, 0x40, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x26}}, {0x4e26, 0x4e20, 0x2b, 0x0, @wg=@data={0x4, 0x7fffffff, 0xfffffffffffffffc, "1e3a0598fc016c6dc5f44b240d3108eccbdc07"}}}}, 0x4d) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) 1.109080292s ago: executing program 2 (id=7917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf250300000008000300", @ANYRES32=r3], 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x488700, &(0x7f00000000c0)={@align=0x3ff, {0x80, 0x7000, 0x800, 0x8}}, 0x6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x10000}) r5 = openat$cgroup_ro(r4, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r5, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r10, r9, 0x2f}, 0x20) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="27031c", 0x3}], 0x1}, 0x2400800c) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x8001, 0x0, 0x9}, "1ba1"}}]}]}]}}]}, 0x54}}, 0x2) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r13, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r13, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x303}, '\x00', "830156e82fc3b074e3e780216dccb392", "89770469", "7b8e87b444730b51"}, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r12, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff21, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf, &(0x7f0000001200), 0x0, 0xffffffffffffff48, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0}}, 0x10) 1.105032383s ago: executing program 3 (id=7918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)={0x524, r1, 0x5, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x32, 0x80, [@cf={0x4, 0x6, {0x47, 0xfa, 0x3, 0x8}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @rann={0x7e, 0x15, {{0x1, 0x1}, 0x2, 0x8, @device_a, 0x8, 0x0, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x4}, @ibss={0x6, 0x2, 0x9}]}, @NL80211_ATTR_BEACON_HEAD={0x3e3, 0xe, {{{}, {0x6df}, @broadcast, @device_a, @random="02682d4658f3", {0x3, 0x9}}, 0x1, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x48}, {0x1, 0x1}]}, @val={0x3, 0x1, 0x38}, @void, @val={0x6, 0x2}, @val={0x5, 0x39, {0x7, 0xc6, 0x8, "33fcbf0cd3082e34372da38f5c2ab60b3aadcf3c5316924f79fa6ea187d8f8bfce047165c88a80d9a4b3615a78b0870db498e06da36c"}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x6, 0x0, {0xfffffffffffffe00, 0xf16, 0x0, 0x81}, 0x9}}, @void, @void, @void, [{0xdd, 0x6a, "22718f6f0138f6c0d523daf24462e3ed9badcf8770c807a0a4bc5a88a9c727341c2904489f1844e500cdfc5cff1e7e6cb3b260989914e8a991fdbd80657b23604b127405dec776b52616d8989aefb75ae52009d2b226eb0124f86c0c45ccc26342170c046cae741ce298"}, {0xdd, 0x8c, "baf3fd2aaf9aa090e8e573023bee0ccc866410c600979f7992a7285553518bd4605e2c1a926eae42065a86b7f30b8dc7c3b55eb2a02337756b29e1976e11a5f9a1996d5dfc62a04f848180a8be97468148e03ae9d6947105145c04d462ce99d0e7a876ca768c8ded7f6b9cc577f3b630e58436faded807deeaa5a81f11a5c14461f4ba0d9d117c9f7fa55b9b"}, {0xdd, 0x5c, "59116d470399c2a3706158a5091bc450c8eba072e2f130c4c1d564e98adb347a0c8c666db0c7e985740ab34e1c11c6a209f04ee59e16be8ec1d8dbf9c378e32947b857f6742c5f2d9a4bf5abfd65b93722ed88ebae8b5f83b540cc8c"}, {0xdd, 0xb2, "5bc9319236350f51092e367daeb33516b2d28d449098ba5158ad644304eecbdf641a4e1fceec24f0df5b4ee881887a1851e538c513b890f8832aa0081b5956f607fcd1af2c152ba029e2e00bd69da9003d882af7b11dbf732c66a9a2568427ca3c5c04db463c995079339efd7bee4a45703f4116e5ab4e9f1ff2deb810652eda7e21dd9b40563819f91f4dabeb5d71362d7ff8cb92d72e029e8fda069abf5ffd3d7ea066056190c8e7db4b952de9a01eca77"}, {0xdd, 0x46, "429e553c800997aec14a2d1cb5c199240fd42e3d275a2406d13fa752ade7d6bbc0f3b940665bedfffbe7ed0dee23dac389f66930c7468e386c740e8506b94c546300883b52f7"}, {0xdd, 0xc0, "155eea749980ab5c3dfb61bcab01a2b0f96f86bdad1f2de30597c1d136d6226a0ebec07afac261b99c03f071f14a44d2eb28de8398bbd2814cbd8af443f8797e46fa7dcc099911252c95d74aa1562f3131ef90f7b32b954d1efd524fcee12fcf09b5460a4a8e39c92ac3dfdadbc684ef9daf37f74f0106f5d63ae161191100b7dd5712f6a351dde542ed19b199070e63b7baafde7f0ab6d2c5e65cff79d462de68fefef134567e32fa667809b8bc9d08d104f7df170ec301c330176c5dcb3eeb"}, {0xdd, 0xd, "1257be999fd7105a50dd0d6c10"}, {0xdd, 0x27, "01bc3721948b7de4737c13241ad0f4cd8b0bcb8485f33431b0c8b0c8df6077782ac4c94cea0ebc"}]}}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x658b0fd691366ae6}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x524}, 0x1, 0x0, 0x0, 0x4000081}, 0x24044010) 1.002574743s ago: executing program 3 (id=7921): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="38ffff0000000b0002002200000000000000000000000002000000000000000008040100000044000800010000000000080059bd00000000"], 0x38}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x30, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x4008104) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004044}, 0x20000040) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 901.756673ms ago: executing program 0 (id=7922): r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@can_delroute={0x24, 0x19, 0x103, 0x70bd2d, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}}, 0x4040000) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) 804.166677ms ago: executing program 3 (id=7924): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd66, 0xfffffffe, {0xa, 0x0, 0x14, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1100}, [@RTA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x4002050) 753.825742ms ago: executing program 0 (id=7925): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x50}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r4, &(0x7f0000000000)=@proc, 0xc) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000002c0)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r10], 0x5c}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@gettaction={0x64, 0x32, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7fffffff}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1000}]}, 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x20000801) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) 708.677547ms ago: executing program 3 (id=7927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf4, r1, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x16}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffff21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x90}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xdb3d}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x27}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40800}, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r4, 0x800, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40008800) splice(r2, &(0x7f0000000340)=0x2, r0, &(0x7f0000000380), 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000004c0)={r0, &(0x7f00000003c0)='\x00', 0x10400, &(0x7f0000000400)={@_ha_fsid={[0x10001, 0xffff]}, {0x2, 0x8000, 0x10, 0xffffffffffffffff}}, 0x0, &(0x7f0000000440), &(0x7f0000000480)}) sendmsg$nl_route(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x141002}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv6_deladdrlabel={0x24, 0x49, 0x20, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0x8}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20004800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r6, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x44}}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r0) r10 = socket$kcm(0x29, 0x5, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000840)={0x0, 0x22}) connect$inet6(r5, &(0x7f0000000880)={0xa, 0x4e20, 0x5, @local, 0x5}, 0x1c) syz_genetlink_get_family_id$nbd(&(0x7f00000008c0), r6) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000940)=0x0) r12 = getpid() sendmsg$nl_generic(r5, &(0x7f0000001cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000980)={0x12ec, 0x28, 0x2, 0x70bd2c, 0x25dfdbfc, {0xd}, [@typed={0x8, 0x3c, 0x0, 0x0, @pid=r11}, @typed={0x8, 0x109, 0x0, 0x0, @pid=r12}, @nested={0x7c, 0x149, 0x0, 0x1, [@typed={0x14, 0xef, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x146, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x8e, 0x0, 0x0, @uid=0xee01}, @generic="b9c3373ba12d85bdd810851ad8efb67f9857eb652fdceb96971c37bb8dd04f046c0b1deb66d88c5b7403adcbf87423af910fede2620beff92a1737e0a49ec9bd1b1ff50f881c8bd726781680", @nested={0x4, 0x1d}]}, @nested={0x100c, 0x130, 0x0, 0x1, [@nested={0x4, 0x57}, @typed={0x1004, 0x142, 0x0, 0x0, @binary="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"}]}, @generic="50e296f62e570d59dad8ea9777c3a2d4532c20e2ed5c90ea7487be0b40f48f342ab913d89c6c5e9fb440dd8af2b515f85d0cc392d7f69baceae201e4a341f94e819b5386227f254d86a5825afcdb558c9db05f798bfc36ab43ce5ef04f1d7a48721940bd5e10af643953a91321e00624961f527a65c96d1a2e25b63e2aa21dd29dc4a6b6338dbefed8e6f324ed0c7684b73174d77a1f001f1bc39d22cfc0f117e0b29ed486e7acb56ab0624230e62743d3b96f6bf8a746a7c155db72131c319632506e897fd50a874115e79d045017fb35b8d036e8059d4eb35a14871b3d06517761a2173d5e55cd4d", @generic="7c1209fee1591ae06602bedd772d6fff6a760088fb8e19", @generic="c47caa2a699de8e9345db1d574e5d3e60d54fc98961d8d1ac5d49f479d9983c3618c71341ce2d86269f0877d4225352e8580abe94907d5646486ddeb194ad97d9ec87d2c06cd269b2dd5f98b99a3a32a6439b2b1600bf4043b92e29fe8871449612facb1e5dbe471d539d85ed93a78f9fd8bad58317f33e6f8592aff5dddfb8bdaeeee45cc0419d705ffc0f9f4e75dea1b52b0a42f8906f562a903c8e8b7a693f663fff001bdb454286a3ca795ca3114c286ee8541b3cabcc20d72b12388272de0b034ac42f66dcff49d977b321214637522c713a747bc78474b693f09eb34d16e9ada6fa0b5ac90c79a49f1f13ac64302999fa610a9c27d50", @generic="7d9ea6bcc87b834349f7a2109f0a1e940f30c23314f076d59657e2a91f65f8a416683590cb5184d362f1529748acd3f7c2d9250b6271f7b380c9494935c2", @generic="d543e13e10be92"]}, 0x12ec}, 0x1, 0x0, 0x0, 0x880}, 0x20000010) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000001d00), &(0x7f0000001d40)=0x4) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r13, 0x8983, &(0x7f0000001d80)={0x8, 'gre0\x00', {'vlan0\x00'}, 0x2}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000001dc0)=@req3={0x8, 0xf, 0x9e, 0x89, 0x8, 0x3ff, 0xffffff5a}, 0x1c) r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001e40), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000023c0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002380)={&(0x7f0000001e80)={0x4c8, r14, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x6}, @NLBL_CIPSOV4_A_MLSCATLST={0xb0, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cedbb7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x216b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57443578}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x223ba5b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa7f8e35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77381371}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35cad087}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa87}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa477}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x431291f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3eb84cab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf020}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1995}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd0a1914}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a1ee4e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ceefbbd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7dff}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5500a8a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x105852d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x470e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55e4b1da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2617}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a4c88ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9cb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7537c22c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d43}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4515}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ffac1f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fead283}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x577f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x610747fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x346a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd6b2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1741f93a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c1d1a6a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x691e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd1e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x89cf0d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xccbb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2525}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5029b80a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39e8169f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe012c0a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16d3fe99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3652b0aa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x712c2399}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59f96198}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaff5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x230b0d7d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xcbec2ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x815a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x208d743f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4822}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x644cf18a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57606789}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50275f06}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57aea2d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fe1fb6b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x189d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40cd5721}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x688f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x790da8a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67c5fb13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6df4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b64}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77512d4e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78bcb600}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ba0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f7840b3}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd083}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x757b0c28}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xebf5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fa7}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16d8237b}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x164, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dd95ff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x94661cb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x636d7c6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5341a973}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x126f5205}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73a5f711}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4125e725}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2083d4ac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2af3f097}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x189a570e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69904c2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3030597b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x277f30bf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x655ad981}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5977830c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c6a6c63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406eddeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70b61aa3}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bab5f3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62fd2345}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c7ef179}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3690}]}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x4000}, 0x5) recvmsg$unix(r5, &(0x7f0000002780)={&(0x7f0000002400)=@abs, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002480)=""/6, 0x6}, {&(0x7f00000024c0)=""/255, 0xff}, {&(0x7f00000025c0)=""/123, 0x7b}, {&(0x7f0000002640)=""/113, 0x71}], 0x4, &(0x7f0000002700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x20) 662.400812ms ago: executing program 4 (id=7928): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x178, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x14, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59cb808a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x270ebe38}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x676e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd2108d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3e2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xebea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9c09dcf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0f8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa47c4f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf878f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5752443b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb1cf}]}, {0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x5c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a3c6f87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50b1f390}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a80c2b1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49265cc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c5a7539}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x804}, 0x20004080) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x244, r1, 0xca223226f837cb2e, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c32cdab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18271f87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f05df16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78c8f680}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ace}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1960}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x809}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xfc, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41607d36}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6538e717}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x864b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a8da8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4003f1e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x107a7b75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32e58eff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e39}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x52bc}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cd0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40a8a772}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59452cc3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4203}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8511}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x732c8468}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4244adc8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x788f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x101d9e20}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f98}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8eaa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75f67b4b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6228263c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ecb5066}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc55d}]}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x20000080}, 0x41) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000005c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1a002202}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c084}, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r4, &(0x7f00000007c0)="3f21820eb336ff84f89efb2a2c03829fb511f828a8d628bd248ea08914c7f5ab96ea53f0f9146af6e86fb2b68b37e48be2bb7e64f016b4d417d0beddf57a11b6d20ddc8d6ec077cea8379e40b71ade674f137f864fe7bb7d9d88694e2a0163efbf02fd31d747ff1181238496171da38c9a592c106a5afc7441d98ecf3356b67463cef96ba1642c3f248900ae31986602a1d6d9c32d3d12e2abaa21174aa53c60d9698738a23b82d5af92e7234c784bfe6760616a3b4208d63422822b0d8c2b3243f5b7b4e88b50", 0xc7, 0x50, &(0x7f00000008c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x80) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000009c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r5, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040005}, 0x20008010) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x200, 0x7, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xce}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={r2, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)=@ipv6_newroute={0x2c, 0x18, 0x800, 0x70bd2a, 0x25dfdbff, {0xa, 0x20, 0x20, 0x3, 0x0, 0x2, 0x0, 0x2, 0x800}, [@RTA_IIF={0x8, 0x3, r8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) socket$nl_route(0x10, 0x3, 0x0) sendmsg$tipc(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f00)="93af1ce2bab4d67b4125e260e13a7e7a85a99305067a9e749ef282b22312a5ca83ff873d570a4afda13ec75ff1cb7cb414831f02bb50f75c131e56c71510a0ffbc7afa38accb0550ddd565c5b2f067ca3f50d1e9aba4a9982cb3abdabece82612b7b2c6162a985f2bb79132550cde18a36ca0df1090aef64b881699691ec478ae600ff84801a14e718443cf4971ad8b5a0a8ddc0951331b02c6388429d4ed141a67a6e50c3132518c3d0d702de10f4c7902c510cf551cae72f", 0xb9}, {&(0x7f0000000fc0)="eee83ba6c5216f561adf5b8a55216896061dc15f99b153a611cea6c47a2b12e85be8632ba4384722eee1b4cbdb211d5999e42d1485fac676bbbf9724b13d5c2daf20612b5f96f404", 0x48}], 0x2, &(0x7f0000001080)="addea8b292972a856a17af005b8ad07bcc7321f03dcdae69d462fa4ccd04327754f50bd27681483f15cb7730b3142e3d9cf7bcc66f730022beb4058e10737440a00f92f659307f8e9498ebd5a52e", 0x4e, 0x20000020}, 0x20000010) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001180), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, r10, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xa4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7ff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0xc1) syz_genetlink_get_family_id$nl802154(&(0x7f0000001280), r0) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001300), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x44, r11, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}}, 0x40045) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r2) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x54, r12, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x11}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040040}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001600)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000001700)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f00000018c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40a840}, 0xc, &(0x7f0000001880)={&(0x7f0000001740)=@getpolicy={0x110, 0x15, 0x200, 0x70bd2c, 0x25dfdbfe, {{@in6=@mcast2, @in=@empty, 0x4e24, 0xf, 0x4e20, 0x8, 0x2, 0x80, 0x0, 0x33, r8, r13}, 0x6e6bbc, 0x2}, [@algo_auth_trunc={0x5d, 0x14, {{'blake2s-256-generic\x00'}, 0x88, 0x200, "4b11f7ece08d112214886960eb747ba7a2"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e21, @in=@private=0xa010101}}, @replay_val={0x10, 0xa, {0x5, 0x70bd2c, 0xffffff3e}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in6=@remote, 0x0, 0x2}}, @extra_flags={0x8, 0x18, 0xcb55}]}, 0x110}, 0x1, 0x0, 0x0, 0x20044020}, 0x40) 573.414819ms ago: executing program 2 (id=7929): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, &(0x7f00000004c0)='N', 0x0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000240)=@req={0x5, 0x2, 0x5e, 0x4e}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev, @in=@private}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) tee(r4, r2, 0x9, 0x8) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="380100001056b480000000000000000000000000000000000000ffffac1e0001fe8000000000000000000000000000000000000000000000d168fb7900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002002000000000000000480003006465666c61746500"/240], 0x138}}, 0x0) 571.793308ms ago: executing program 3 (id=7930): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x478, 0xffffffff, 0x0, 0x3f0, 0x0, 0xffffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff000000, 0xff], [0xff, 0x0, 0xffffffff, 0xffffffff], 'wg1\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x3a, 0x9, 0x1, 0x10}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe, 'system_u:object_r:unconfined_execmem_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4d3a46e177abbed5001ef11bd2f0c66301c685c93d118e7c89799c396822"}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'ipvlan0\x00', 'wg1\x00', {}, {}, 0x3a, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r1, r4, 0x25, 0x0, @val=@netfilter}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711063000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611183000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000002900)={@local, @remote, @val={@void, {0x8100, 0x2, 0x1}}, {@ipv6={0x86dd, @dccp_packet={0xa, 0x6, "a56893", 0xd47, 0x21, 0x0, @loopback, @remote, {[], {{0x4e21, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x0, 0x3, "e4176f", 0x4, "a700c8"}, "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"}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x34, r6, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "a61cacd2bb69c4add23b262dc8292069"}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x20040050) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xde}]}}}]}, 0x3c}}, 0x0) 521.250332ms ago: executing program 4 (id=7931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)={0x524, r1, 0x5, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x32, 0x80, [@cf={0x4, 0x6, {0x47, 0xfa, 0x3, 0x8}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @rann={0x7e, 0x15, {{0x1, 0x1}, 0x2, 0x8, @device_a, 0x8, 0x0, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x4}, @ibss={0x6, 0x2, 0x9}]}, @NL80211_ATTR_BEACON_HEAD={0x3e3, 0xe, {{{}, {0x6df}, @broadcast, @device_a, @random="02682d4658f3", {0x3, 0x9}}, 0x1, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x48}, {0x1, 0x1}]}, @val={0x3, 0x1, 0x38}, @void, @val={0x6, 0x2}, @val={0x5, 0x39, {0x7, 0xc6, 0x8, "33fcbf0cd3082e34372da38f5c2ab60b3aadcf3c5316924f79fa6ea187d8f8bfce047165c88a80d9a4b3615a78b0870db498e06da36c"}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x6, 0x0, {0xfffffffffffffe00, 0xf16, 0x0, 0x81}, 0x9}}, @void, @void, @void, [{0xdd, 0x6a, "22718f6f0138f6c0d523daf24462e3ed9badcf8770c807a0a4bc5a88a9c727341c2904489f1844e500cdfc5cff1e7e6cb3b260989914e8a991fdbd80657b23604b127405dec776b52616d8989aefb75ae52009d2b226eb0124f86c0c45ccc26342170c046cae741ce298"}, {0xdd, 0x8c, "baf3fd2aaf9aa090e8e573023bee0ccc866410c600979f7992a7285553518bd4605e2c1a926eae42065a86b7f30b8dc7c3b55eb2a02337756b29e1976e11a5f9a1996d5dfc62a04f848180a8be97468148e03ae9d6947105145c04d462ce99d0e7a876ca768c8ded7f6b9cc577f3b630e58436faded807deeaa5a81f11a5c14461f4ba0d9d117c9f7fa55b9b"}, {0xdd, 0x5c, "59116d470399c2a3706158a5091bc450c8eba072e2f130c4c1d564e98adb347a0c8c666db0c7e985740ab34e1c11c6a209f04ee59e16be8ec1d8dbf9c378e32947b857f6742c5f2d9a4bf5abfd65b93722ed88ebae8b5f83b540cc8c"}, {0xdd, 0xb2, "5bc9319236350f51092e367daeb33516b2d28d449098ba5158ad644304eecbdf641a4e1fceec24f0df5b4ee881887a1851e538c513b890f8832aa0081b5956f607fcd1af2c152ba029e2e00bd69da9003d882af7b11dbf732c66a9a2568427ca3c5c04db463c995079339efd7bee4a45703f4116e5ab4e9f1ff2deb810652eda7e21dd9b40563819f91f4dabeb5d71362d7ff8cb92d72e029e8fda069abf5ffd3d7ea066056190c8e7db4b952de9a01eca77"}, {0xdd, 0x46, "429e553c800997aec14a2d1cb5c199240fd42e3d275a2406d13fa752ade7d6bbc0f3b940665bedfffbe7ed0dee23dac389f66930c7468e386c740e8506b94c546300883b52f7"}, {0xdd, 0xc0, "155eea749980ab5c3dfb61bcab01a2b0f96f86bdad1f2de30597c1d136d6226a0ebec07afac261b99c03f071f14a44d2eb28de8398bbd2814cbd8af443f8797e46fa7dcc099911252c95d74aa1562f3131ef90f7b32b954d1efd524fcee12fcf09b5460a4a8e39c92ac3dfdadbc684ef9daf37f74f0106f5d63ae161191100b7dd5712f6a351dde542ed19b199070e63b7baafde7f0ab6d2c5e65cff79d462de68fefef134567e32fa667809b8bc9d08d104f7df170ec301c330176c5dcb3eeb"}, {0xdd, 0xd, "1257be999fd7105a50dd0d6c10"}, {0xdd, 0x27, "01bc3721948b7de4737c13241ad0f4cd8b0bcb8485f33431b0c8b0c8df6077782ac4c94cea0ebc"}]}}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x658b0fd691366ae6}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x524}, 0x1, 0x0, 0x0, 0x4000081}, 0x24044010) 484.425551ms ago: executing program 2 (id=7932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 385.714568ms ago: executing program 2 (id=7933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8, 0x2}, {0x3, 0x8, 0x0, 0x8, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x9, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fdf, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x8, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x804, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff522}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x5f, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x7f}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x5}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0xfff}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x8000007, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x407, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x1}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 384.995642ms ago: executing program 0 (id=7934): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e23, 0xb, @mcast1, 0x6}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) 325.216583ms ago: executing program 0 (id=7935): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r4, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x48}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x21, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfe58, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x68, 0x10, 0x439, 0x70bd2a, 0x25dfdbf8, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x7}, @IFLA_GRE_OKEY={0x8, 0x5, 0x40}]}}}]}, 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x12, 0x2, 0x1, 0x104}}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@getlink={0x28, 0x12, 0xb07, 0x70b92c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xa81, 0x8000}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20) sendto$packet(r1, &(0x7f0000000180)="05d936277c6f5422007f9f83477ca1249abafd1c6581c12c3e53f618051d3f69ce5ec27ee8e7bfd3de3a", 0x2a, 0x408a1, &(0x7f0000000040)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 295.729626ms ago: executing program 4 (id=7936): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c000280080018"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3ccd0a1c98be84159a61f9000010000104004c6e4ca411a57c0f6babb138078e050080", @ANYRES32=0x0, @ANYBLOB="2b03000000840000140035006d6163767461703000000000000000000500270000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 178.212253ms ago: executing program 4 (id=7937): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000001c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @empty, 0xfffffffc}}, 0x24) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f00000002c0), &(0x7f0000000840)=""/165}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140), 0x10) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000b000300010004000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 177.159881ms ago: executing program 3 (id=7938): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x8, [@empty, @broadcast, @empty, @private=0xa010101, @empty, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x30) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000006401c5696ef54fffab835c92c35b5c630100100000000000000000000000fe7aa958e07217caab6400"/66, @ANYRES64=r2, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000000000000fefffffff3bda7b2858a801a800000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c00"/137], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4045450}, 0x240c881c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=ANY=[@ANYBLOB="380000000000000000000000000000000000000020473fb4d2654168caaf30e47dd721c35e6a40623c21088927fa3cd655fa93f6abb7b80225a7cd9bbd0273a0805eb09125f2dbb590a428d2031844bd42b33f5271092d1c4af621b621d94ccfc2477f8d03863eaaf2cf9ce3471a79c6ac418045ceca6dc99a94e4a7deaa1ebaf4379888589c22bcd6f73113c00a319c09ceaf6971498bcc7eacd465098b0797d22bcbe11c3fb082b8c802d2a302225b520db5e67e99d086681b10654304a1d410408aecba28560eb3", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00020200e000000200000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000740)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x12}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x3, 0x9, 0xffc0, 0x100, 0x5, 0x22008a}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x18, 0x0, &(0x7f0000000280)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000005c0)={0x318, r9, 0x900, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x117}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x2d8, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @device_a, @random, {0x3, 0x4}, @value=@ver_80211n={0x0, 0x7ff7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x2c, 0x7, @broadcast, {0x0, 0x5, @random="d802616a09"}, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x5, 0x0, {0x4, 0x1517, 0x0, 0xd, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0xf84d, 0x1}}, [{0xdd, 0xad, "806f0b105d1378e1759451d4f2b796cc059f2c9cdfb34bd7a47e328dffcad92f91feed1f7af573dfc987491202d1130b6ecd7c1e3d7e58a05831bb2f746f090c681c0879f7b118d3afe5c33e36fe72f7df1f26da066e50fe96a9f6235d30d8252df214681c16f1c3f80a44b24337a725cf7fb3c416f8ed89956e2513b453e9c3f797e3f8057f4a2342a2a4e1e22e974beb3d06198c987c02231c134c316d27efb2fcb1686aeac2317353985687"}, {0xdd, 0x62, "d02704a16d205eb55c8bb553c164cbf3f771f587d64702151151768997f1f1f4e6458f4ded975f241fd4f4ddbed421e129a28d48dd76f2349a6262c3438357ba40e687c1864c906f90661515c6fcd85626847b0f12a67d745da6814fc727a18c41a0"}, {0xdd, 0x5b, "b2d39e887596a622cb93d2adf828161227294cb25e4679c88db7056a95232828499e23634189fd4c190b285479141f3dfb7c2266eae5a002a93760ccd3c5101aaad4df39a64b8346ef7382481d76cf3cdb06c65b4045a9ec47f51d"}, {0xdd, 0x3c, "346b8f98f1dbfb3631798696b7342a2f20955e00ec44a2f29920137e453d7911e696ed92f66d99098aa6c57e3ef8bec3839dd2cb63262cc36fb60cc9"}, {0xdd, 0x7b, "98db6028052b9fce022985ae46843b9fa40abd993720008c67e5364175b1d1227de5eb0a0ad950bbe7c47758c2999417b03a678348352b3f1489f8588db720fdd67e077ebd55c1805c3e97c3f237669ff41cc2532c9c45e915f12f9ffe39c1302bdda4b8896b8be9088f6dbcabdf638ec8f84404b22f2466fe6d91"}, {0xdd, 0x5e, "7be43fd303ec1cbe77888c3ef0c54d1dff7d24a63e2d52e00564ffaf69291e4a4e5db6f317704a3828cff3cd950c47b7d0d7e42324938b4a738b7a3d3adcbc792175b9568387b2aa448ece4473c676861b88596f2adf6e6279240e38028d"}]}}]}, 0x318}, 0x1, 0x0, 0x0, 0x8004}, 0x20000014) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "7d506230c4cb9adeab3b5d1a4bee9722a62781011188926cdca05bcd907fce65", "80384175480438184935cb1e013c5fef9edfd55b65a27c61bbdf7d9af93f2bb8", "dba53a062dfc662d78f121f881afbdc2134f52b8e0415761323e9a7a95dcf815", "eaa3c1c78b83ad9414487c0c2303c0a8bbe6adfba6b05e120732b720a17afd44", "dc953a40a4f4bf675cf55b51380f96a7f6226a341dde4acbcb2ff3bfc6b0e563", "7107d524d6f3be3ae200e8c9", 0x4, 0x3ff, 0x8, 0xfffffff7, 0x80}}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f00000000c0)={0x10}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x0, 0xc0204000, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x10, 0x0, 0x0, 0x8367, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x65, 0x0, 0xfe, 0x0, 0x0, @remote, @remote}}}}) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) 176.641164ms ago: executing program 0 (id=7939): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) mmap$xdp(&(0x7f00003e1000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r0, 0x100000000) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) mmap$xdp(&(0x7f00003e1000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r0, 0x100000000) (async) 146.956612ms ago: executing program 2 (id=7940): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x14, 0x1, 0x0, 0x0, {0x10}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "e80cc3779a80befaa3"}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 144.541475ms ago: executing program 4 (id=7941): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x24, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0xc40a4726838b8c0a, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffff7f, 0x62}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048001}, 0x10) 57.462456ms ago: executing program 4 (id=7942): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3], 0x7c}}, 0x20000000) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000240)) r4 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000001480)="effd00001000ff00fd4344c007110000", 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000030004500000000ed8ec4823704000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000000a000100aaaaaaaaaaaa00001c0012800b00010062726964676500000c0002800600080000810000"], 0x48}}, 0x88890) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003ef05000100000000000c0002"], 0xc0}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000013c0)={0x0, 0xc8, &(0x7f00000012c0)=[@in6={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x19}, 0x6}, @in6={0xa, 0x4e21, 0x0, @private1, 0xd248}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, @in6={0xa, 0x4e24, 0x7f, @remote, 0x7ff}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x3, @private2, 0x3}, @in6={0xa, 0x4e20, 0x3, @loopback, 0x2}]}, &(0x7f0000001400)=0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000001440)={r7, 0x5, 0xffc0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61143c00000000001d430000000000007a0a00fe00581c1f6114630000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 6.122626ms ago: executing program 0 (id=7943): socket(0x2a, 0x2, 0x0) (async) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000001800eb8976156951b2ba29ef80"], 0xfe33) (async) write$cgroup_subtree(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000001800eb8976156951b2ba29ef80"], 0xfe33) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r3) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r4, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x240488d1}, 0x24004052) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) (async) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$IEEE802154_LIST_PHY(r3, 0x0, 0x20000001) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 2 (id=7944): r0 = socket(0x80000000000000a, 0x1, 0x0) close(r0) (async) close(r0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r0) (async) close(r0) socket$netlink(0x10, 0x3, 0x13) kernel console output (not intermixed with test programs): m1 [ 632.303597][T28712] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 632.323911][T28712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 632.348324][T28712] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 632.364233][T28997] netlink: 'syz.1.6142': attribute type 1 has an invalid length. [ 632.375272][T28712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 632.391134][T28999] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6144'. [ 632.403350][T29000] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6144'. [ 632.409253][T28996] : entered promiscuous mode [ 632.480983][T25378] net_ratelimit: 95 callbacks suppressed [ 632.481002][T25378] bond5: (slave bridge7): failed to get link speed/duplex [ 632.533636][ T5638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.553038][T29003] 8021q: adding VLAN 0 to HW filter on device bond13 [ 632.561557][T29018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6142'. [ 632.595895][T29003] bond12: (slave bond13): making interface the new active one [ 632.605062][T29003] bond12: (slave bond13): Enslaving as an active interface with an up link [ 632.631262][T24218] bond5: (slave bridge7): failed to get link speed/duplex [ 632.663707][T28997] bond12: (slave gretap2): Enslaving as a backup interface with an up link [ 632.674664][T29018] 8021q: adding VLAN 0 to HW filter on device bond12 [ 632.691297][T10180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.760198][T25378] bond8: (slave dummy0): failed to get link speed/duplex [ 632.769149][T29027] netlink: 'syz.0.6148': attribute type 1 has an invalid length. [ 632.775096][T29034] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6150'. [ 632.787443][T29034] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6150'. [ 632.841985][T24218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.864002][T24218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.875991][T24218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.901802][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.920642][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.964392][T29047] xt_l2tp: v2 doesn't support IP mode [ 633.149782][T28712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.213692][T28712] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.277755][T24218] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.285000][T24218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.318605][T24218] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.325843][T24218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.399195][T29064] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20004 [ 633.781825][T29085] __nla_validate_parse: 4 callbacks suppressed [ 633.781844][T29085] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6163'. [ 633.989678][T29098] netlink: 'syz.0.6166': attribute type 58 has an invalid length. [ 634.026817][T29098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6166'. [ 634.243753][ T5638] IPVS: starting estimator thread 0... [ 634.360654][T29115] IPVS: using max 40 ests per chain, 96000 per kthread [ 634.404552][T29125] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6171'. [ 634.663574][T28712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.756593][T29144] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20001 [ 634.776782][T29139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6175'. [ 635.155394][T29170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6185'. [ 635.181725][T29170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6185'. [ 635.218927][T28712] veth0_vlan: entered promiscuous mode [ 635.232362][T28712] veth1_vlan: entered promiscuous mode [ 635.241745][T24225] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.271816][ T57] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.301030][ T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.339716][ T57] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.367202][T28712] veth0_macvtap: entered promiscuous mode [ 635.399467][T28712] veth1_macvtap: entered promiscuous mode [ 635.512130][T28712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.554079][T28712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.605412][T24218] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.627781][T24218] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.652272][T24218] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.667747][T29188] Bluetooth: MGMT ver 1.23 [ 635.679686][T24218] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.938979][T11274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.965681][T11274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.056247][T11274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.069215][T11274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.121200][T29204] SET target dimension over the limit! [ 636.245220][T29213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6065'. [ 636.260463][T29213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6065'. [ 636.349863][T29217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6199'. [ 636.376918][T29219] netlink: 13 bytes leftover after parsing attributes in process `syz.4.6200'. [ 636.397831][T29217] netlink: 'syz.3.6199': attribute type 21 has an invalid length. [ 636.717630][T29245] netlink: 'syz.4.6207': attribute type 1 has an invalid length. [ 636.857933][T29249] vlan2: entered promiscuous mode [ 636.872194][T29249] geneve1: entered promiscuous mode [ 636.885715][T29249] vlan2: entered allmulticast mode [ 636.889647][T29253] IPVS: set_ctl: invalid protocol: 47 172.30.0.3:20000 [ 636.892547][T29249] geneve1: entered allmulticast mode [ 636.985799][T29259] bridge2: entered promiscuous mode [ 637.009431][T29259] bridge2: entered allmulticast mode [ 637.058369][T29259] syzkaller1: entered promiscuous mode [ 637.066762][T29259] syzkaller1: entered allmulticast mode [ 637.217828][T29284] netlink: 'syz.0.6219': attribute type 1 has an invalid length. [ 637.473603][T29305] netlink: 'syz.1.6224': attribute type 4 has an invalid length. [ 637.537215][T29305] .`: renamed from bond0 (while UP) [ 637.621165][T29314] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.628512][T29314] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.690612][T25380] net_ratelimit: 102 callbacks suppressed [ 637.690630][T25380] bond8: (slave dummy0): failed to get link speed/duplex [ 637.730834][ T5640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 637.732058][ T4950] Bluetooth: hci2: command 0x0401 tx timeout [ 637.739117][T24225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.753397][T24225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.894325][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.931597][T25380] bond8: (slave dummy0): failed to get link speed/duplex [ 637.952312][T25380] bond5: (slave bridge7): failed to get link speed/duplex [ 638.050749][T25380] bond8: (slave dummy0): failed to get link speed/duplex [ 638.107858][T29348] bond1: entered promiscuous mode [ 638.125900][T29348] macvlan2: entered promiscuous mode [ 638.132197][T29348] macvlan2: entered allmulticast mode [ 638.141115][T29348] bond1: (slave macvlan2): Opening slave failed [ 638.180149][ T57] bond5: (slave bridge7): failed to get link speed/duplex [ 638.211839][ T57] bond8: (slave dummy0): failed to get link speed/duplex [ 638.300064][T24225] bond5: (slave bridge7): failed to get link speed/duplex [ 638.546901][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 638.573497][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 638.588394][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 638.597651][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 638.608089][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 639.048666][T29391] sctp: [Deprecated]: syz.4.6248 (pid 29391) Use of int in max_burst socket option. [ 639.048666][T29391] Use struct sctp_assoc_value instead [ 639.086866][T29391] __nla_validate_parse: 18 callbacks suppressed [ 639.086886][T29391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6248'. [ 639.115062][T29391] netlink: 'syz.4.6248': attribute type 7 has an invalid length. [ 639.132527][T29391] netlink: 'syz.4.6248': attribute type 8 has an invalid length. [ 639.163710][T29391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6248'. [ 639.373035][T29371] xfrm0 speed is unknown, defaulting to 1000 [ 639.487414][T29411] netlink: 'syz.2.6252': attribute type 10 has an invalid length. [ 639.609186][T29419] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6254'. [ 640.006623][T29371] lo speed is unknown, defaulting to 1000 [ 640.114309][T29439] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 640.132175][T29437] xt_HMARK: proto mask must be zero with L3 mode [ 640.149218][T29439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6259'. [ 640.453948][T29457] netlink: 'syz.2.6264': attribute type 1 has an invalid length. [ 640.515666][T29457] 8021q: adding VLAN 0 to HW filter on device bond2 [ 640.684879][T29470] C: renamed from lo (while UP) [ 640.691307][ T5640] Bluetooth: hci4: command tx timeout [ 641.260985][T29497] tipc: Failed to remove unknown binding: 66,0,0/4:832024203/832024204 [ 641.272201][T29498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 641.289566][T29497] tipc: Failed to remove unknown binding: 66,0,0/4:832024203/832024204 [ 641.311017][T29371] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.318296][T29371] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.325772][T29371] bridge_slave_0: entered allmulticast mode [ 641.334826][T29371] bridge_slave_0: entered promiscuous mode [ 641.348097][T29371] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.355552][T29371] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.362926][T29371] bridge_slave_1: entered allmulticast mode [ 641.374023][T29371] bridge_slave_1: entered promiscuous mode [ 641.401287][T29502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6277'. [ 641.418725][T29371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.432325][T29371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.535469][T29371] team0: Port device team_slave_0 added [ 641.565800][T29371] team0: Port device team_slave_1 added [ 641.722648][T29371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.745563][T29371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.822910][T29371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.842225][T29371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.849435][T29371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.885987][T29528] netlink: 'syz.2.6287': attribute type 12 has an invalid length. [ 641.896428][T29371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.912431][T29520] tipc: Enabling of bearer rejected, failed to enable media [ 641.974375][T29528] bond3: option primary_reselect: invalid value (255) [ 641.984659][T29528] bond3 (unregistering): Released all slaves [ 642.021238][T29533] netlink: 216 bytes leftover after parsing attributes in process `syz.0.6289'. [ 642.032223][T29533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6289'. [ 642.115134][T29538] Cannot find del_set index 4 as target [ 642.132239][T29371] hsr_slave_0: entered promiscuous mode [ 642.160278][T29371] hsr_slave_1: entered promiscuous mode [ 642.174129][T29371] debugfs: 'hsr0' already exists in 'hsr' [ 642.190285][T29371] Cannot create hsr debugfs directory [ 642.255863][T29548] netlink: 'syz.2.6291': attribute type 1 has an invalid length. [ 642.393639][T29559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6295'. [ 642.480456][T29558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6294'. [ 642.528683][T29371] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.542362][T29558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6294'. [ 642.553960][T29563] netlink: 'syz.3.6296': attribute type 1 has an invalid length. [ 642.565596][T29371] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.720407][T25385] net_ratelimit: 85 callbacks suppressed [ 642.720426][T25385] bond5: (slave bridge7): failed to get link speed/duplex [ 642.770513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.779460][ T5640] Bluetooth: hci4: command tx timeout [ 642.798037][T29371] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.853161][T24218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.861375][T24218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.871822][T29371] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.933213][T24218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.969250][T24218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.041380][T25375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.051925][T24218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.062565][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.071264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.245586][T29371] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.276105][T29371] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.398639][T29371] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.444784][T29371] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.576594][T29615] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 643.638496][T29614] syzkaller0: entered promiscuous mode [ 643.657535][T29614] syzkaller0: entered allmulticast mode [ 643.685548][T29621] netlink: 'syz.0.6308': attribute type 27 has an invalid length. [ 643.929098][T29621] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.936314][T29621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.947519][T29621] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.967761][T29621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.006412][T29621] xfrm1: left allmulticast mode [ 644.012021][T29621] vlan2: left allmulticast mode [ 644.016946][T29621] gretap0: left allmulticast mode [ 644.047453][T29614] tipc: Enabled bearer , priority 0 [ 644.085077][T11276] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.092354][T11276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.136980][T29613] tipc: Resetting bearer [ 644.222539][T29613] tipc: Disabling bearer [ 644.253331][T29643] netlink: 'syz.0.6313': attribute type 21 has an invalid length. [ 644.268319][T29645] __nla_validate_parse: 2 callbacks suppressed [ 644.268334][T29645] netlink: 208 bytes leftover after parsing attributes in process `syz.4.6312'. [ 644.338448][T29643] netlink: 'syz.0.6313': attribute type 6 has an invalid length. [ 644.385145][T29643] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6313'. [ 644.432053][T29652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6316'. [ 644.552987][T29652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 644.672004][T29661] tipc: Started in network mode [ 644.694356][T29661] tipc: Node identity 3eadf476cf5a, cluster identity 4711 [ 644.721132][T29661] tipc: Enabled bearer , priority 0 [ 644.852349][ T5640] Bluetooth: hci4: command tx timeout [ 644.916951][T29661] tipc: Disabling bearer [ 645.013822][T29371] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 645.089873][T29371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 645.144784][T29371] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 645.170731][T29371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.191165][T29371] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 645.219684][T29371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 645.247413][T29371] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 645.285345][T29371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 645.392034][T29709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6329'. [ 645.675135][T29722] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6333'. [ 645.729041][T29371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.808832][T29371] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.861304][T24218] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.868497][T24218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.896554][T24218] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.903805][T24218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.043382][T29737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6337'. [ 646.306973][T29751] netlink: 'syz.4.6341': attribute type 1 has an invalid length. [ 646.451688][T29752] 8021q: adding VLAN 0 to HW filter on device bond2 [ 646.473170][T29752] bond1: (slave bond2): making interface the new active one [ 646.492663][T29752] bond1: (slave bond2): Enslaving as an active interface with an up link [ 646.654548][T29763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6343'. [ 646.869341][T29775] netlink: 'syz.4.6346': attribute type 11 has an invalid length. [ 646.913296][T29775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6346'. [ 646.930590][ T5640] Bluetooth: hci4: command tx timeout [ 647.047793][T29775] netlink: 'syz.4.6346': attribute type 11 has an invalid length. [ 647.079835][T24216] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.113568][T29775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6346'. [ 647.137754][T24216] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.185224][T24216] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.216569][T24216] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.504150][T29794] netlink: 'syz.4.6350': attribute type 3 has an invalid length. [ 647.730761][ T5761] net_ratelimit: 79 callbacks suppressed [ 647.730780][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.806631][T29810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6354'. [ 647.880237][T29808] syzkaller0: entered promiscuous mode [ 647.916710][T29808] syzkaller0: entered allmulticast mode [ 648.115520][T29819] tipc: Enabled bearer , priority 0 [ 648.145845][T29806] tipc: Resetting bearer [ 648.243936][T29806] tipc: Disabling bearer [ 648.286150][T29371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.290773][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.330602][T24216] bond8: (slave dummy0): failed to get link speed/duplex [ 648.363034][T29828] syzkaller0: entered promiscuous mode [ 648.388495][T29828] syzkaller0: entered allmulticast mode [ 648.420531][T25375] bond5: (slave bridge7): failed to get link speed/duplex [ 648.460858][T24216] bond8: (slave dummy0): failed to get link speed/duplex [ 648.592166][T24216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.606385][T29837] geneve2: entered promiscuous mode [ 648.608513][T24216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.624928][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.633153][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.637413][T29837] geneve2: entered allmulticast mode [ 648.643349][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.673623][T25375] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 648.695006][T25375] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 648.724514][T25375] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 648.773022][T24216] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 648.855203][T29371] veth0_vlan: entered promiscuous mode [ 648.898155][T29371] veth1_vlan: entered promiscuous mode [ 649.004755][T29371] veth0_macvtap: entered promiscuous mode [ 649.057633][T29371] veth1_macvtap: entered promiscuous mode [ 649.145355][T29371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.193042][T29371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.230967][T25380] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.254833][T25380] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.290312][T29871] netlink: 'syz.4.6372': attribute type 3 has an invalid length. [ 649.298369][T29871] __nla_validate_parse: 5 callbacks suppressed [ 649.298383][T29871] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6372'. [ 649.314794][T24218] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.341526][T24218] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.781094][T25380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.803689][T25380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.947158][T25385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.973440][T25385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.386479][T29956] netlink: 'syz.0.6386': attribute type 58 has an invalid length. [ 650.425425][T29956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6386'. [ 650.498813][T29962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6388'. [ 650.582889][T29963] syz_tun: entered allmulticast mode [ 650.589046][T29959] syzkaller0: entered promiscuous mode [ 650.626522][T29959] syzkaller0: entered allmulticast mode [ 650.640792][T29961] syz_tun: left allmulticast mode [ 650.779058][T29976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6390'. [ 650.827930][T29973] bond15: (slave ip6gretap0): making interface the new active one [ 650.841324][T29973] bond15: (slave ip6gretap0): Enslaving as an active interface with an up link [ 650.947876][T29983] xt_hashlimit: size too large, truncated to 1048576 [ 651.066577][T29989] netlink: 'syz.2.6395': attribute type 24 has an invalid length. [ 651.216410][T30000] bond0: entered promiscuous mode [ 651.245315][T30000] bond_slave_0: entered promiscuous mode [ 651.262426][T30000] bond_slave_1: entered promiscuous mode [ 651.296840][T30000] batadv0: entered promiscuous mode [ 651.312924][T30000] debugfs: 'hsr1' already exists in 'hsr' [ 651.339635][T30000] Cannot create hsr debugfs directory [ 651.355119][T30000] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 651.365346][T30000] bond0: left promiscuous mode [ 651.379982][T30000] bond_slave_0: left promiscuous mode [ 651.390186][T30000] bond_slave_1: left promiscuous mode [ 651.398910][T30000] batadv0: left promiscuous mode [ 651.626418][T30015] mac80211_hwsim hwsim59 wlan0: entered promiscuous mode [ 651.936930][T30046] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6413'. [ 652.108152][T30061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6418'. [ 652.237821][T30067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6419'. [ 652.250492][T30067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6419'. [ 652.259718][T30067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6419'. [ 652.272410][T30067] vlan0: entered promiscuous mode [ 652.647584][T30083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6425'. [ 652.781213][T25385] net_ratelimit: 85 callbacks suppressed [ 652.781231][T25385] bond5: (slave bridge7): failed to get link speed/duplex [ 652.814827][T25385] bond8: (slave dummy0): failed to get link speed/duplex [ 652.900576][T11276] bond5: (slave bridge7): failed to get link speed/duplex [ 652.931688][T11276] bond8: (slave dummy0): failed to get link speed/duplex [ 653.020295][T25380] bond5: (slave bridge7): failed to get link speed/duplex [ 653.060103][T11276] bond8: (slave dummy0): failed to get link speed/duplex [ 653.120606][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.149985][T11276] bond5: (slave bridge7): failed to get link speed/duplex [ 653.161682][T25380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.170164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.214770][T30103] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 653.254672][T29928] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 654.226200][T30179] netlink: 'syz.0.6451': attribute type 1 has an invalid length. [ 654.379331][T30185] netlink: 'syz.2.6453': attribute type 11 has an invalid length. [ 654.422712][T30187] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.429981][T30187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.437556][T30187] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.444745][T30187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.549274][T30187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 654.582688][T30187] 8021q: adding VLAN 0 to HW filter on device bond3 [ 654.714838][T30200] ipt_ECN: cannot use operation on non-tcp rule [ 654.733078][T30200] __nla_validate_parse: 8 callbacks suppressed [ 654.733096][T30200] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6457'. [ 654.766285][T30200] netlink: 'syz.3.6457': attribute type 17 has an invalid length. [ 654.788611][T30200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6457'. [ 654.819067][T30200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6457'. [ 654.837908][T11276] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.855281][T11276] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.892917][T30200] gretap0: entered promiscuous mode [ 654.922090][T30200] gretap0: left promiscuous mode [ 654.958956][T30202] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6459'. [ 654.974243][T11276] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.339848][T30227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6461'. [ 655.498822][T30205] bridge_slave_0: left allmulticast mode [ 655.514368][T30205] bridge_slave_0: left promiscuous mode [ 655.548882][T30205] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.577140][T30205] bridge_slave_1: left allmulticast mode [ 655.586623][T30205] bridge_slave_1: left promiscuous mode [ 655.593073][T30205] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.609553][T30205] bond0: (slave bond_slave_0): Releasing backup interface [ 655.623949][T30205] bond0: (slave bond_slave_1): Releasing backup interface [ 655.645241][T30205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.658201][T30205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.669023][T30205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.681900][T30205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.694509][T30218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6461'. [ 655.802113][T30247] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 655.818801][T30255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6468'. [ 655.835448][T30255] netlink: 'syz.1.6468': attribute type 39 has an invalid length. [ 655.836993][T30247] bond2 (unregistering): Released all slaves [ 655.875393][T30255] hsr_slave_0: left promiscuous mode [ 655.881940][T30255] hsr_slave_1: left promiscuous mode [ 655.972305][T30261] netlink: 'syz.3.6470': attribute type 1 has an invalid length. [ 656.121901][T30269] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 656.625397][T30304] vlan0: left promiscuous mode [ 656.984569][T30328] netlink: 'syz.2.6490': attribute type 32 has an invalid length. [ 656.993627][T30328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6490'. [ 657.030756][T30328] bond4: option coupled_control: invalid value (192) [ 657.039269][T30328] bond4 (unregistering): Released all slaves [ 657.089443][T30336] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6492'. [ 657.171386][T30341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6488'. [ 657.280941][T30349] Cannot find add_set index 0 as target [ 657.426265][T30361] netlink: 'syz.1.6499': attribute type 1 has an invalid length. [ 657.577368][T30361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 657.669827][T30369] bond2: (slave geneve2): making interface the new active one [ 657.683309][T30369] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 657.721431][T30367] syzkaller1: entered promiscuous mode [ 657.727888][T30367] syzkaller1: entered allmulticast mode [ 657.975155][T11276] net_ratelimit: 101 callbacks suppressed [ 657.975173][T11276] bond8: (slave dummy0): failed to get link speed/duplex [ 657.992764][T30380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.070853][T24216] bond5: (slave bridge7): failed to get link speed/duplex [ 658.088603][T30384] netlink: 'syz.4.6505': attribute type 1 has an invalid length. [ 658.142551][T24218] bond8: (slave dummy0): failed to get link speed/duplex [ 658.231133][T24216] bond5: (slave bridge7): failed to get link speed/duplex [ 658.272456][T24216] bond8: (slave dummy0): failed to get link speed/duplex [ 658.307443][T30394] netlink: 'syz.2.6507': attribute type 1 has an invalid length. [ 658.372038][T30395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 658.402907][T24216] bond8: (slave dummy0): failed to get link speed/duplex [ 658.432487][T24216] bond5: (slave bridge7): failed to get link speed/duplex [ 658.542355][T11276] bond8: (slave dummy0): failed to get link speed/duplex [ 658.562200][T11276] bond5: (slave bridge7): failed to get link speed/duplex [ 658.912560][T30438] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 658.928632][T30438] xt_hashlimit: size too large, truncated to 1048576 [ 659.281172][T30455] IPv6: NLM_F_CREATE should be specified when creating new route [ 661.781266][T30426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 661.964144][T30480] __nla_validate_parse: 7 callbacks suppressed [ 661.964160][T30480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6524'. [ 662.002970][T30486] ipt_ECN: cannot use operation on non-tcp rule [ 662.008028][T30487] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.042975][T30487] bridge_slave_0 (unregistering): left allmulticast mode [ 662.061088][T30487] bridge_slave_0 (unregistering): left promiscuous mode [ 662.076743][T30487] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.213745][ T4950] Bluetooth: hci1: command 0x0406 tx timeout [ 662.254955][T30507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6531'. [ 662.264671][T30507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6531'. [ 662.311928][T30507] team0: Device sit1 is up. Set it down before adding it as a team port [ 662.482899][T30516] netlink: 'syz.3.6534': attribute type 1 has an invalid length. [ 662.522411][T30516] bond3: entered promiscuous mode [ 662.543286][T30516] 8021q: adding VLAN 0 to HW filter on device bond3 [ 662.559230][T30523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6536'. [ 662.571683][T30523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6536'. [ 662.574476][T30521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6534'. [ 662.596772][T30521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6534'. [ 662.675529][T30516] bond3: (slave bridge3): making interface the new active one [ 662.683918][T30516] bridge3: entered promiscuous mode [ 662.697214][T30516] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 662.871825][T30535] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6540'. [ 663.065208][T24224] net_ratelimit: 115 callbacks suppressed [ 663.065225][T24224] bond8: (slave dummy0): failed to get link speed/duplex [ 663.096259][T30546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6544'. [ 663.110324][T24224] bond5: (slave bridge7): failed to get link speed/duplex [ 663.118901][T30546] netlink: 'syz.2.6544': attribute type 1 has an invalid length. [ 663.127286][T30546] netlink: 'syz.2.6544': attribute type 1 has an invalid length. [ 663.149397][T30546] netlink: 'syz.2.6544': attribute type 2 has an invalid length. [ 663.165494][T30546] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6544'. [ 663.180747][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.210241][T25385] bond8: (slave dummy0): failed to get link speed/duplex [ 663.250865][T25385] bond5: (slave bridge7): failed to get link speed/duplex [ 663.282896][T24224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.302642][T24224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.313594][T24216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.322891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.334302][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.416026][T30569] netlink: 'syz.0.6550': attribute type 1 has an invalid length. [ 663.505131][T30574] netlink: 'syz.4.6552': attribute type 1 has an invalid length. [ 663.619024][T30574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 663.757265][T30584] bond3: (slave gretap1): making interface the new active one [ 663.786122][T30584] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 664.051347][T30610] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 664.309432][T30618] vlan3: entered allmulticast mode [ 664.319842][T30618] veth0_to_batadv: entered allmulticast mode [ 664.434616][T30633] netlink: 'syz.2.6567': attribute type 13 has an invalid length. [ 664.549285][T30647] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 664.675176][T30641] lo: Caught tx_queue_len zero misconfig [ 664.705672][T30642] netlink: 'syz.1.6570': attribute type 12 has an invalid length. [ 665.005112][T30669] netlink: 'syz.3.6577': attribute type 32 has an invalid length. [ 665.098379][T30669] bond4: option coupled_control: invalid value (192) [ 665.132461][T30669] bond4 (unregistering): Released all slaves [ 665.810136][T30725] can: request_module (can-proto-0) failed. [ 665.974313][T30733] netlink: 'syz.4.6596': attribute type 23 has an invalid length. [ 666.546109][T30750] 8021q: VLANs not supported on ipvlan1 [ 667.008757][T30769] __nla_validate_parse: 24 callbacks suppressed [ 667.008769][T30769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6608'. [ 667.247075][T30787] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6613'. [ 667.346933][T30791] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 667.600828][T30806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6619'. [ 667.612569][T30806] block nbd7: Unsupported socket: should be TCP or UNIX. [ 667.691844][T30811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6619'. [ 667.830053][T30821] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6622'. [ 668.028584][T30831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6625'. [ 668.130251][T29929] net_ratelimit: 472 callbacks suppressed [ 668.130269][T29929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.181130][T24218] bond8: (slave dummy0): failed to get link speed/duplex [ 668.222959][T24218] bond5: (slave bridge7): failed to get link speed/duplex [ 668.314572][T24218] bond8: (slave dummy0): failed to get link speed/duplex [ 668.346753][T30846] veth1_macvtap: left promiscuous mode [ 668.382451][T24218] bond5: (slave bridge7): failed to get link speed/duplex [ 668.445084][T30855] validate_nla: 10 callbacks suppressed [ 668.445104][T30855] netlink: 'syz.4.6633': attribute type 1 has an invalid length. [ 668.515716][T30855] netlink: 'syz.4.6633': attribute type 2 has an invalid length. [ 668.536867][T24218] bond8: (slave dummy0): failed to get link speed/duplex [ 668.580136][T24218] bond5: (slave bridge7): failed to get link speed/duplex [ 668.611018][ T4950] Bluetooth: hci4: command 0x0405 tx timeout [ 668.738431][T30858] sock: sock_timestamping_bind_phc: sock not bind to device [ 668.793864][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 668.807507][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 668.826006][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 668.842805][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 668.845078][T30861] batadv2: entered allmulticast mode [ 668.878518][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 668.887815][T25375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.992388][T24218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.000709][T30878] netlink: 211664 bytes leftover after parsing attributes in process `syz.3.6640'. [ 669.001031][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.042776][T30873] syzkaller0: entered promiscuous mode [ 669.062560][T30873] syzkaller0: entered allmulticast mode [ 669.427220][T30894] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6644'. [ 669.447696][T30895] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6644'. [ 669.507000][T30890] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6642'. [ 669.537621][T30890] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.697163][T30907] mac80211_hwsim hwsim67 ÿ: renamed from wlan1 (while UP) [ 669.780368][T30866] xfrm0 speed is unknown, defaulting to 1000 [ 670.338060][T30866] lo speed is unknown, defaulting to 1000 [ 670.584761][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 670.602666][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 670.615223][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 670.690376][ T4950] Bluetooth: hci4: command 0x0405 tx timeout [ 670.847662][T30974] smc: net device team0 applied user defined pnetid SYZ1 [ 671.010803][ T5640] Bluetooth: hci3: command tx timeout [ 671.050725][T30947] infiniband syz1: set active [ 671.058114][T30947] infiniband syz1: added xfrm0 [ 671.065445][T30947] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 671.078360][T30947] infiniband syz1: Couldn't open port 1 [ 671.119020][T30947] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 671.138565][T30947] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 671.157077][T30947] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 671.228323][T30947] RDS/IB: syz1: added [ 671.233110][T30947] smc: adding ib device syz1 with port count 1 [ 671.242946][T30947] smc: ib device syz1 port 1 has no pnetid [ 671.305709][T30986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 671.317454][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 671.339596][T29924] xfrm0 speed is unknown, defaulting to 1000 [ 671.347111][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 671.486382][T30997] netlink: 'syz.4.6667': attribute type 1 has an invalid length. [ 671.489564][T30866] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.526395][T30866] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.536071][T30866] bridge_slave_0: entered allmulticast mode [ 671.545743][T30866] bridge_slave_0: entered promiscuous mode [ 671.555537][T30866] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.563025][T30866] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.572574][T30866] bridge_slave_1: entered allmulticast mode [ 671.580783][T30866] bridge_slave_1: entered promiscuous mode [ 671.642342][T30996] netlink: 'syz.4.6667': attribute type 1 has an invalid length. [ 671.795399][T30866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.825857][T30866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.920848][T30866] team0: Port device team_slave_0 added [ 671.943767][T30866] team0: Port device team_slave_1 added [ 672.020944][T30866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.027959][T30866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.057128][T30866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.070188][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 672.091295][T30866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.103913][T30866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.154143][T30866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.324169][T30866] hsr_slave_0: entered promiscuous mode [ 672.338236][T30866] hsr_slave_1: entered promiscuous mode [ 672.347238][T30866] debugfs: 'hsr0' already exists in 'hsr' [ 672.353840][T30866] Cannot create hsr debugfs directory [ 672.367002][T31031] __nla_validate_parse: 6 callbacks suppressed [ 672.367018][T31031] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6675'. [ 672.388856][T31031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6675'. [ 672.623994][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 672.736439][T31044] ip6tnl0: Caught tx_queue_len zero misconfig [ 672.994188][T30866] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.035937][T30866] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.090897][ T4950] Bluetooth: hci3: command tx timeout [ 673.150239][T31050] bond4: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 673.196414][T31050] bond4: (slave C): Enslaving as an active interface with an up link [ 673.215802][T31050] net_ratelimit: 80 callbacks suppressed [ 673.215823][T31050] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 673.242389][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 673.242792][T31064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.266336][T31064] batadv_slave_1: entered promiscuous mode [ 673.361364][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.382940][T29929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.403383][T30866] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.447034][T30866] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.470541][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.478969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.503088][T31074] netlink: 'syz.1.6686': attribute type 1 has an invalid length. [ 673.521811][T25375] bond5: (slave bridge7): failed to get link speed/duplex [ 673.525262][T25373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.537091][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.541584][T25375] bond8: (slave dummy0): failed to get link speed/duplex [ 673.577837][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.707573][T30866] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.735244][T30866] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.909257][T30866] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.915506][T31093] ipt_rpfilter: unknown options [ 673.940127][T30866] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.004551][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 674.154697][T31103] netlink: 'syz.2.6693': attribute type 11 has an invalid length. [ 674.189048][T31103] netlink: 'syz.2.6693': attribute type 11 has an invalid length. [ 674.214733][T31103] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6693'. [ 674.223119][T31087] syzkaller0: entered promiscuous mode [ 674.229683][T31087] syzkaller0: entered allmulticast mode [ 674.237031][T31102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6692'. [ 674.351340][T31107] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6694'. [ 675.170666][ T4950] Bluetooth: hci3: command tx timeout [ 677.257888][ T4950] Bluetooth: hci3: command tx timeout [ 677.491319][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 677.668537][T30866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 677.707215][T30866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 677.727645][T30866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 677.757950][T31127] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6699'. [ 677.798452][T30866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 677.842897][T30866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 677.882129][T30866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 677.926238][T30866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 677.957975][T30866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 678.057418][T31151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6702'. [ 678.089097][T31154] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6701'. [ 678.142835][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 678.173811][T31154] netlink: 51 bytes leftover after parsing attributes in process `syz.4.6701'. [ 678.221260][T25373] net_ratelimit: 55 callbacks suppressed [ 678.221278][T25373] bond8: (slave dummy0): failed to get link speed/duplex [ 678.279723][T30866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.431901][T30866] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.465963][T25380] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.473291][T25380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.514840][T25380] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.522089][T25380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.610952][T29918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.640052][T24216] bond5: (slave bridge7): failed to get link speed/duplex [ 678.712008][T24218] bond8: (slave dummy0): failed to get link speed/duplex [ 678.792688][T24216] bond5: (slave bridge7): failed to get link speed/duplex [ 678.851445][T24218] bond8: (slave dummy0): failed to get link speed/duplex [ 678.916172][T24218] bond5: (slave bridge7): failed to get link speed/duplex [ 678.920969][T31183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6710'. [ 678.932840][T24224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.971265][T31187] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 678.988113][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 679.021180][T25373] bond8: (slave dummy0): failed to get link speed/duplex [ 679.040293][T24216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.198465][T31192] netlink: 212 bytes leftover after parsing attributes in process `syz.2.6712'. [ 679.406501][T31202] vlan4: entered promiscuous mode [ 679.431060][T31202] bridge0: entered promiscuous mode [ 679.856879][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 680.200418][T31206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.205244][T31247] xfrm0 speed is unknown, defaulting to 1000 [ 680.246477][T31248] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.6722'. [ 680.320384][T31248] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 680.386768][T31248] 0ªX¹¦Dö»: entered allmulticast mode [ 680.441427][T30866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.464737][T31256] ipt_ECN: cannot use operation on non-tcp rule [ 680.594827][T30866] veth0_vlan: entered promiscuous mode [ 680.658904][T30866] veth1_vlan: entered promiscuous mode [ 680.771768][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 680.775348][T30866] veth0_macvtap: entered promiscuous mode [ 680.811712][T30866] veth1_macvtap: entered promiscuous mode [ 680.858641][T30866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.904329][T30866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.944223][T25385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.956491][T25385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.977394][T25385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.999753][T31272] tunl0: entered promiscuous mode [ 681.015201][T31272] netlink: 'syz.1.6729': attribute type 3 has an invalid length. [ 681.024765][T31272] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6729'. [ 681.041703][T25385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.152077][T31247] lo speed is unknown, defaulting to 1000 [ 681.323328][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 681.388046][T24224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.430580][T24224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.530096][T11276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.554305][T11276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.836397][T31296] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6736'. [ 681.874834][T31247] xfrm0 speed is unknown, defaulting to 1000 [ 682.009168][T31301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6737'. [ 682.259068][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 682.303138][T31312] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 682.335878][T31312] 0ªX¹¦Dö»: entered allmulticast mode [ 682.357557][T31308] xfrm0 speed is unknown, defaulting to 1000 [ 682.997683][T30947] xfrm0 speed is unknown, defaulting to 1000 [ 683.004971][T31308] lo speed is unknown, defaulting to 1000 [ 683.390963][T25385] net_ratelimit: 79 callbacks suppressed [ 683.390982][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.541698][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.550800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.593673][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.601868][T25380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.612221][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.620385][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.821980][T29918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.221375][T18029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.533268][T31344] __nla_validate_parse: 1 callbacks suppressed [ 684.533288][T31344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6748'. [ 684.551705][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.729466][T31344] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 686.747693][T31344] gretap1: entered promiscuous mode [ 686.761606][T31344] gretap1: entered allmulticast mode [ 687.256873][T31376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6755'. [ 687.322948][T31380] netlink: 'syz.3.6756': attribute type 9 has an invalid length. [ 687.409795][T31379] netlink: 'syz.2.6757': attribute type 3 has an invalid length. [ 687.589108][T31387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6759'. [ 687.803464][T31395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6761'. [ 687.862060][T31395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6761'. [ 688.287792][T31412] geneve2: entered promiscuous mode [ 688.339082][T31418] bond4: Unable to set down delay as MII monitoring is disabled [ 688.349774][T31418] bond4 (unregistering): Released all slaves [ 688.436499][T31428] net_ratelimit: 51 callbacks suppressed [ 688.436516][T31428] vlan0: mtu less than device minimum [ 688.466381][T31427] netlink: 'syz.1.6770': attribute type 27 has an invalid length. [ 688.481135][T31427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6770'. [ 688.491087][T25373] bond5: (slave bridge7): failed to get link speed/duplex [ 688.512665][T24224] bond8: (slave dummy0): failed to get link speed/duplex [ 688.583371][T31427] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 688.647139][T31438] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 688.655370][T24224] bond5: (slave bridge7): failed to get link speed/duplex [ 688.700028][T24216] bond8: (slave dummy0): failed to get link speed/duplex [ 688.781744][T24224] bond5: (slave bridge7): failed to get link speed/duplex [ 688.801736][T31450] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 688.841142][T24216] bond8: (slave dummy0): failed to get link speed/duplex [ 688.891040][T24224] bond5: (slave bridge7): failed to get link speed/duplex [ 688.940222][T31460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6778'. [ 689.032752][T31461] xt_CT: No such helper "snmp_trap" [ 689.183920][T31481] netlink: 'syz.2.6785': attribute type 1 has an invalid length. [ 689.213020][T31486] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6788'. [ 689.223296][T31481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6785'. [ 689.244433][T31481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6785'. [ 689.271863][T31481] netlink: 'syz.2.6785': attribute type 2 has an invalid length. [ 689.302193][T31481] netlink: 'syz.2.6785': attribute type 2 has an invalid length. [ 689.310339][T31481] netlink: 'syz.2.6785': attribute type 2 has an invalid length. [ 689.629680][T31506] __nla_validate_parse: 1 callbacks suppressed [ 689.629700][T31506] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6793'. [ 689.879855][T31527] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6800'. [ 690.121599][T31541] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6805'. [ 690.133654][T31542] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6805'. [ 690.317543][T31551] xt_policy: output policy not valid in PREROUTING and INPUT [ 690.477896][T31558] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 690.501260][T31558] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 690.577664][T31561] netlink: 'syz.0.6809': attribute type 4 has an invalid length. [ 690.605467][T31564] netlink: 'syz.1.6811': attribute type 1 has an invalid length. [ 690.627095][T31561] netlink: 'syz.0.6809': attribute type 4 has an invalid length. [ 690.705749][T31564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 690.778592][T31566] bond3: (slave veth0_to_bond): making interface the new active one [ 690.816781][T31566] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 690.853435][T31573] macvlan2: entered promiscuous mode [ 690.858987][T31573] macvlan2: entered allmulticast mode [ 690.866471][T31573] bond3: entered promiscuous mode [ 690.873933][T31573] veth0_to_bond: entered promiscuous mode [ 690.883585][T31573] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 690.894146][T31573] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 690.911923][T31573] bond3: left promiscuous mode [ 690.916852][T31573] veth0_to_bond: left promiscuous mode [ 690.977284][T31578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6814'. [ 691.176803][T31591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6818'. [ 691.217989][T31597] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6819'. [ 691.414483][T31606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6820'. [ 691.438248][T31606] : entered promiscuous mode [ 691.669058][T31626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6824'. [ 691.702066][T31626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6824'. [ 691.918392][T31651] sctp: [Deprecated]: syz.0.6832 (pid 31651) Use of int in max_burst socket option. [ 691.918392][T31651] Use struct sctp_assoc_value instead [ 692.244332][T31663] bond4 (unregistering): Released all slaves [ 692.360248][T31666] bridge1: entered promiscuous mode [ 692.372803][T31666] bridge1: entered allmulticast mode [ 692.609533][T31686] team0: Cannot enslave team device to itself [ 692.768232][T31702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.540577][T24224] net_ratelimit: 110 callbacks suppressed [ 693.540595][T24224] bond8: (slave dummy0): failed to get link speed/duplex [ 693.574366][T24224] bond5: (slave bridge7): failed to get link speed/duplex [ 693.619439][T31765] veth1_to_bridge: entered allmulticast mode [ 693.663564][T31767] bond4: entered promiscuous mode [ 693.668844][T31767] bond4: entered allmulticast mode [ 693.674808][T31767] 8021q: adding VLAN 0 to HW filter on device bond4 [ 693.717472][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.732249][T25380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.741582][T25373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.750031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.785489][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.798962][T25380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.940841][T25375] bond8: (slave dummy0): failed to get link speed/duplex [ 693.956942][T31792] validate_nla: 2 callbacks suppressed [ 693.956959][T31792] netlink: 'syz.4.6870': attribute type 1 has an invalid length. [ 693.972792][T31793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.984143][T31792] netlink: 'syz.4.6870': attribute type 2 has an invalid length. [ 694.010704][T31792] netlink: 'syz.4.6870': attribute type 1 has an invalid length. [ 694.023104][T31792] netlink: 'syz.4.6870': attribute type 3 has an invalid length. [ 694.178099][T31804] netlink: 'syz.3.6873': attribute type 4 has an invalid length. [ 694.308893][T31815] netlink: 'syz.2.6876': attribute type 9 has an invalid length. [ 694.639743][T31838] __nla_validate_parse: 19 callbacks suppressed [ 694.639758][T31838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6883'. [ 694.714911][T31845] veth0: entered promiscuous mode [ 694.769342][T31831] veth0: left promiscuous mode [ 694.926083][ T29] audit: type=1804 audit(1780625746.400:14): pid=31856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6888" name="/newroot/167/cgroup.controllers" dev="tmpfs" ino=870 res=1 errno=0 [ 694.975311][T31857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6889'. [ 694.990118][ T29] audit: type=1800 audit(1780625746.430:15): pid=31856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6888" name="cgroup.controllers" dev="tmpfs" ino=870 res=0 errno=0 [ 695.265327][T31878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6896'. [ 695.299101][T31883] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6895'. [ 695.369557][T31887] x_tables: unsorted entry at hook 1 [ 695.479035][T31896] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6900'. [ 695.693090][T31916] netlink: 'syz.0.6906': attribute type 1 has an invalid length. [ 695.710118][T31916] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6906'. [ 695.729412][T31916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6906'. [ 695.921656][T31927] vcan0: tx address claim with dlc 0 [ 695.932872][T31927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6910'. [ 696.008062][T31932] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.6912'. [ 696.037143][T31932] mac80211_hwsim hwsim75 syzkaller0: entered promiscuous mode [ 696.044851][T31932] mac80211_hwsim hwsim75 syzkaller0: entered allmulticast mode [ 696.105605][T31935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6913'. [ 696.133741][T31935] netlink: 'syz.2.6913': attribute type 15 has an invalid length. [ 696.159659][T31935] netlink: 'syz.2.6913': attribute type 15 has an invalid length. [ 696.160208][T24224] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 696.177977][T24224] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 696.187954][T24224] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 696.348218][T31943] syzkaller0: entered promiscuous mode [ 696.353953][T31943] syzkaller0: entered allmulticast mode [ 696.557867][T31950] bridge_slave_1: left allmulticast mode [ 696.575156][T31950] bridge_slave_1: left promiscuous mode [ 696.587820][T31950] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.634197][T31950] bond3: (slave veth0_to_bond): Releasing active interface [ 696.648171][T31950] bond0: (slave bond_slave_0): Releasing backup interface [ 696.664859][T31950] bond0: (slave bond_slave_1): Releasing backup interface [ 696.693517][T31950] team0: Port device team_slave_0 removed [ 696.707975][T31950] team0: Port device team_slave_1 removed [ 696.718969][T31950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.731073][T31950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.739705][T31950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.757571][T31950] bond2: (slave geneve2): Releasing active interface [ 697.025635][T31972] netlink: 'syz.0.6926': attribute type 2 has an invalid length. [ 697.178105][T31984] nbd: couldn't find device at index 2958377 [ 697.352893][T31994] tipc: Started in network mode [ 697.386176][T31994] tipc: Node identity 080211000001, cluster identity 4711 [ 697.406616][T31994] tipc: Enabled bearer , priority 0 [ 697.422949][T31997] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 697.763210][T32005] tipc: Enabling of bearer rejected, failed to enable media [ 698.468812][T29929] tipc: Node number set to 134418688 [ 698.608952][T32051] team1: entered promiscuous mode [ 698.625321][T32051] team1: entered allmulticast mode [ 698.642444][T25373] net_ratelimit: 99 callbacks suppressed [ 698.642462][T25373] bond8: (slave dummy0): failed to get link speed/duplex [ 698.692682][T25373] bond5: (slave bridge7): failed to get link speed/duplex [ 698.801648][T25375] bond8: (slave dummy0): failed to get link speed/duplex [ 698.845687][T25375] bond5: (slave bridge7): failed to get link speed/duplex [ 698.899765][T32072] openvswitch: netlink: IP tunnel dst address not specified [ 698.933992][T25373] bond8: (slave dummy0): failed to get link speed/duplex [ 698.984516][T24224] bond5: (slave bridge7): failed to get link speed/duplex [ 698.995198][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.080474][T25380] bond8: (slave dummy0): failed to get link speed/duplex [ 699.123787][T25373] bond5: (slave bridge7): failed to get link speed/duplex [ 699.272183][T32084] IPVS: length: 75 != 8 [ 699.565105][T32099] smc: removing ib device sz1 [ 699.604494][T32109] validate_nla: 8 callbacks suppressed [ 699.604511][T32109] netlink: 'syz.4.6967': attribute type 1 has an invalid length. [ 699.670220][T32109] __nla_validate_parse: 12 callbacks suppressed [ 699.670237][T32109] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6967'. [ 699.695737][T32109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6967'. [ 699.709419][T32116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6970'. [ 699.750659][T32117] netlink: 'syz.3.6972': attribute type 1 has an invalid length. [ 699.765896][T32099] smbdirect: ib_dev[sz1] removed [ 699.778355][T32119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6970'. [ 699.794531][T32117] netlink: 'syz.3.6972': attribute type 7 has an invalid length. [ 699.803958][T32115] team0: Port device xfrm0 added [ 699.817043][T32117] netlink: 'syz.3.6972': attribute type 8 has an invalid length. [ 699.832637][T32117] netlink: 208 bytes leftover after parsing attributes in process `syz.3.6972'. [ 699.852313][T32117] NCSI netlink: No device for ifindex 65584 [ 699.875703][T32115] tipc: Started in network mode [ 699.886174][T32115] tipc: Node identity 2e1c4b83625, cluster identity 4711 [ 699.900613][T32115] tipc: Enabled bearer , priority 0 [ 699.975405][T32122] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6973'. [ 700.093797][T32128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6976'. [ 700.104345][T32128] netlink: 'syz.2.6976': attribute type 7 has an invalid length. [ 700.112855][T32128] netlink: 'syz.2.6976': attribute type 8 has an invalid length. [ 700.122115][T32128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6976'. [ 700.967583][T32144] netlink: 'syz.3.6980': attribute type 10 has an invalid length. [ 700.976581][T32144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.984344][T32144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.994736][T32144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.003810][T32144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.056200][T29929] tipc: Node number set to 1280068483 [ 701.377218][T32147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6981'. [ 701.431311][T32153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6983'. [ 701.969029][T32172] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 702.205096][ T24] IPVS: starting estimator thread 0... [ 702.341951][T32188] IPVS: using max 35 ests per chain, 84000 per kthread [ 702.406366][T32196] netlink: 'syz.1.6994': attribute type 1 has an invalid length. [ 702.543807][T32196] 8021q: adding VLAN 0 to HW filter on device bond6 [ 702.601526][T32200] netlink: 'syz.3.6995': attribute type 15 has an invalid length. [ 702.703723][T32211] sctp: [Deprecated]: syz.1.6999 (pid 32211) Use of int in max_burst socket option deprecated. [ 702.703723][T32211] Use struct sctp_assoc_value instead [ 702.812809][T32215] netlink: 'syz.0.6998': attribute type 4 has an invalid length. [ 702.893468][T32222] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 703.177563][T32227] gtp0: entered promiscuous mode [ 703.204376][T32227] gtp0: entered allmulticast mode [ 703.354310][T32236] xt_hashlimit: max too large, truncated to 1048576 [ 703.656220][T24218] net_ratelimit: 99 callbacks suppressed [ 703.656241][T24218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.670188][T24218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.680440][T25373] bond5: (slave bridge7): failed to get link speed/duplex [ 703.720428][T11276] bond8: (slave dummy0): failed to get link speed/duplex [ 703.807398][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.822818][T24216] bond5: (slave bridge7): failed to get link speed/duplex [ 703.843350][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.852253][T25380] bond8: (slave dummy0): failed to get link speed/duplex [ 703.912553][T25373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.921904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.189315][T32267] siw: device registration error -23 [ 704.193023][T32269] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20003 [ 704.768158][T32299] __nla_validate_parse: 9 callbacks suppressed [ 704.768175][T32299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7025'. [ 704.802299][T32299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7025'. [ 704.819378][T32300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7025'. [ 704.830159][T32300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7025'. [ 705.068983][T32312] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7029'. [ 705.089194][T32313] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7029'. [ 705.269088][T32332] validate_nla: 1 callbacks suppressed [ 705.269105][T32332] netlink: 'syz.4.7035': attribute type 32 has an invalid length. [ 705.563522][T32350] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7039'. [ 705.849493][T32367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.977331][T32377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7045'. [ 706.116277][ T24] IPVS: starting estimator thread 0... [ 706.186975][T32386] syzkaller0: entered promiscuous mode [ 706.203223][T32386] syzkaller0: entered allmulticast mode [ 706.212618][T32388] IPVS: using max 42 ests per chain, 100800 per kthread [ 706.421191][T32400] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7054'. [ 706.457575][T32400] xt_recent: Unsupported userspace flags (000000b1) [ 706.471769][T32397] bond6: entered promiscuous mode [ 706.488782][T32397] bond6: entered allmulticast mode [ 706.512935][T32397] 8021q: adding VLAN 0 to HW filter on device bond6 [ 706.534067][T32406] netlink: 'syz.4.7053': attribute type 21 has an invalid length. [ 706.546277][T32406] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7053'. [ 706.566590][T32406] netlink: 'syz.4.7053': attribute type 5 has an invalid length. [ 706.578541][T32406] netlink: 'syz.4.7053': attribute type 6 has an invalid length. [ 706.771621][T24224] wlan1: Trigger new scan to find an IBSS to join [ 706.833817][T32422] netlink: 'syz.2.7059': attribute type 7 has an invalid length. [ 708.773800][T29932] net_ratelimit: 89 callbacks suppressed [ 708.773819][T29932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.095563][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.412855][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.421045][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.462126][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.470995][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.521415][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.530535][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.561181][T25380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.569602][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.535786][T32444] bridge1: port 1(veth0_to_bond) entered blocking state [ 710.543356][T32444] bridge1: port 1(veth0_to_bond) entered disabled state [ 710.552411][T32444] veth0_to_bond: entered allmulticast mode [ 710.564740][T32444] veth0_to_bond: entered promiscuous mode [ 710.581373][T32444] bridge1: port 1(veth0_to_bond) entered blocking state [ 710.588489][T32444] bridge1: port 1(veth0_to_bond) entered forwarding state [ 711.068414][T32479] __nla_validate_parse: 6 callbacks suppressed [ 711.068433][T32479] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7074'. [ 711.218081][T32486] IPVS: Unknown mcast interface: lo [ 711.251824][T32489] netlink: 'syz.2.7078': attribute type 1 has an invalid length. [ 711.385739][T32504] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 711.396744][T32489] 8021q: adding VLAN 0 to HW filter on device bond5 [ 711.411407][T32490] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 711.440519][T32491] bond5: (slave ip6gretap2): making interface the new active one [ 711.450904][T32491] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 711.749530][T32527] sit0: entered promiscuous mode [ 711.782703][T32527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7086'. [ 711.811304][T25385] wlan1: Trigger new scan to find an IBSS to join [ 711.818661][T32528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7088'. [ 712.005241][ T29] audit: type=1800 audit(1780625763.480:16): pid=32544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7093" name="memory.events" dev="tmpfs" ino=1001 res=0 errno=0 [ 712.394712][T32560] syzkaller0: entered promiscuous mode [ 712.433989][T32560] syzkaller0: entered allmulticast mode [ 712.635487][T32570] netlink: 211064 bytes leftover after parsing attributes in process `syz.2.7099'. [ 712.835796][T32580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7103'. [ 712.933591][T32585] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7105'. [ 713.334127][T32615] IPv6: sit1: Disabled Multicast RS [ 713.351012][T32615] bond0: Caught tx_queue_len zero misconfig [ 713.456182][T32622] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.7112'. [ 713.489584][T32623] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7112'. [ 713.544280][T32626] batadv_slave_0: Caught tx_queue_len zero misconfig [ 713.617828][T32626] Bluetooth: MGMT ver 1.23 [ 713.643215][T32626] netlink: 'syz.2.7113': attribute type 39 has an invalid length. [ 713.833635][T24216] net_ratelimit: 82 callbacks suppressed [ 713.833654][T24216] bond8: (slave dummy0): failed to get link speed/duplex [ 713.870102][T25375] bond5: (slave bridge7): failed to get link speed/duplex [ 713.962144][T25375] bond8: (slave dummy0): failed to get link speed/duplex [ 713.971841][T24216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.980044][T24216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.011729][T24218] bond5: (slave bridge7): failed to get link speed/duplex [ 714.019209][T25375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.028514][T24216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.048278][T25375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.060412][T24218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.151671][T32662] netlink: 'syz.3.7125': attribute type 5 has an invalid length. [ 714.166952][T32648] syzkaller0: entered promiscuous mode [ 714.173606][T32648] syzkaller0: entered allmulticast mode [ 714.185923][T24216] wlan1: Creating new IBSS network, BSSID 66:a7:ea:98:a7:b3 [ 714.202487][T32655] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 714.267102][T32651] sctp: [Deprecated]: syz.1.7123 (pid 32651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 714.267102][T32651] Use struct sctp_sack_info instead [ 714.303764][T32651] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7123'. [ 714.323543][T32669] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7124'. [ 714.394927][T32663] syzkaller1: entered promiscuous mode [ 714.402525][T32663] syzkaller1: entered allmulticast mode [ 718.044312][T32692] __nla_validate_parse: 1 callbacks suppressed [ 718.044331][T32692] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7133'. [ 718.189129][T32705] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7135'. [ 718.225770][T32706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7138'. [ 718.799347][T32743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7148'. [ 718.822920][T32743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7148'. [ 718.833125][T32746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7150'. [ 718.846641][T32743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7148'. [ 718.856502][T32746] net_ratelimit: 57 callbacks suppressed [ 718.856519][T32746] openvswitch: netlink: Unknown nsh attribute 0 [ 718.924327][T25373] bond8: (slave dummy0): failed to get link speed/duplex [ 718.961680][T25381] bond5: (slave bridge7): failed to get link speed/duplex [ 718.995257][T32752] openvswitch: netlink: IP tunnel dst address not specified [ 719.035065][T32752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.112733][T11276] bond5: (slave bridge7): failed to get link speed/duplex [ 719.141439][ T304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7154'. [ 719.150795][ T304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7154'. [ 719.162655][ T304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7154'. [ 719.172671][T29929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.275951][T25380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.307136][ T311] netlink: 'syz.3.7155': attribute type 1 has an invalid length. [ 719.665007][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.698429][T25385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.969288][T32764] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 720.209632][ T348] netlink: 'syz.4.7161': attribute type 1 has an invalid length. [ 720.259185][ T348] netlink: 'syz.4.7161': attribute type 3 has an invalid length. [ 720.404084][T25380] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.438917][T25380] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.453476][T25380] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.488641][T25380] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.545052][ T356] syzkaller1: entered promiscuous mode [ 720.564508][ T356] syzkaller1: entered allmulticast mode [ 721.029543][ T405] netlink: 'syz.2.7176': attribute type 11 has an invalid length. [ 721.084729][ T405] netlink: 'syz.2.7176': attribute type 11 has an invalid length. [ 721.188552][ T414] netlink: 'syz.3.7178': attribute type 2 has an invalid length. [ 721.207073][ T414] netlink: 'syz.3.7178': attribute type 2 has an invalid length. [ 721.262717][ T421] netlink: 'syz.0.7177': attribute type 11 has an invalid length. [ 721.337069][ T421] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 721.719059][ T424] veth3: entered allmulticast mode [ 722.128740][ T452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 722.177231][ T468] x_tables: duplicate underflow at hook 1 [ 722.225499][ T469] xt_ecn: cannot match TCP bits for non-tcp packets [ 722.438370][ T480] vcan0: tx address claim with dest, not broadcast [ 722.621894][ T492] sch_fq: defrate 0 ignored. [ 722.665353][ T491] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 723.136026][ T531] __nla_validate_parse: 16 callbacks suppressed [ 723.136045][ T531] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7199'. [ 723.243554][ T534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7199'. [ 723.259368][ T542] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 723.273238][ T531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7199'. [ 723.416330][ T551] IPVS: set_ctl: invalid protocol: 28771 99.99.116.46:30067 [ 723.724821][ T572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.872710][T11274] net_ratelimit: 89 callbacks suppressed [ 723.872729][T11274] bond5: (slave bridge7): failed to get link speed/duplex [ 723.901102][T11274] bond8: (slave dummy0): failed to get link speed/duplex [ 724.000069][T25383] bond5: (slave bridge7): failed to get link speed/duplex [ 724.040979][T25377] bond8: (slave dummy0): failed to get link speed/duplex [ 724.067906][ T597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7217'. [ 724.224902][ T614] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 724.239337][ T643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.283962][ T643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.310799][ T641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.313472][ T614] bond4 (unregistering): Released all slaves [ 724.319463][ T648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.334252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.357475][ T641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.707460][ T661] syzkaller0: entered promiscuous mode [ 724.709425][ T666] netlink: 'syz.3.7223': attribute type 2 has an invalid length. [ 724.719909][ T661] syzkaller0: entered allmulticast mode [ 725.687741][ T662] infiniband syz0: set active [ 725.700572][ T662] infiniband syz0: added bridge_slave_1 [ 725.820582][ T662] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 725.872841][ T662] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 725.893617][ T662] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 725.950097][ T662] RDS/IB: syz0: added [ 725.955610][ T662] smc: adding ib device syz0 with port count 1 [ 725.967870][ T662] smc: ib device syz0 port 1 has no pnetid [ 729.461705][ T616] net_ratelimit: 62 callbacks suppressed [ 729.461724][ T616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.575319][T29929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.725034][ T736] netlink: 'syz.0.7238': attribute type 12 has an invalid length. [ 729.733425][ T736] netlink: 'syz.0.7238': attribute type 29 has an invalid length. [ 729.741416][ T736] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7238'. [ 729.801397][ T613] bond8: (slave dummy0): failed to get link speed/duplex [ 729.813989][T29924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.840533][ T639] bond5: (slave bridge7): failed to get link speed/duplex [ 729.900881][ T613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.930878][ T638] bond8: (slave dummy0): failed to get link speed/duplex [ 729.933050][ T613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.958883][ T757] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 729.988923][ T639] bond5: (slave bridge7): failed to get link speed/duplex [ 729.989049][ T605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.013906][ T761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7242'. [ 730.027170][ T757] netlink: 'syz.2.7243': attribute type 21 has an invalid length. [ 730.048998][ T757] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7243'. [ 730.243077][ T784] netlink: 'syz.2.7249': attribute type 2 has an invalid length. [ 730.287823][ T788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7246'. [ 730.323432][ T789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7248'. [ 731.656560][ T856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7264'. [ 731.660934][ T849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7262'. [ 732.001766][ T871] netlink: 'syz.1.7269': attribute type 1 has an invalid length. [ 732.204700][ T888] netlink: 'syz.0.7273': attribute type 1 has an invalid length. [ 732.344449][ T893] bond2: (slave bridge3): Enslaving as a backup interface with an up link [ 732.402213][ T888] macvlan2: entered promiscuous mode [ 732.430245][ T888] macvlan2: entered allmulticast mode [ 732.524100][ T898] netlink: 'syz.4.7276': attribute type 1 has an invalid length. [ 732.535612][ T900] netlink: 'syz.0.7277': attribute type 4 has an invalid length. [ 732.555541][ T898] netlink: 'syz.4.7276': attribute type 2 has an invalid length. [ 732.560214][ T900] netlink: 'syz.0.7277': attribute type 4 has an invalid length. [ 732.744945][ T894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7274'. [ 732.770366][ T894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7274'. [ 732.781438][ T906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7278'. [ 732.969458][ T912] nbd: illegal input index -8454144 [ 733.357711][ T934] syzkaller0: entered promiscuous mode [ 733.363941][ T934] syzkaller0: entered allmulticast mode [ 733.426420][ T934] tipc: Enabled bearer , priority 0 [ 733.447520][ T936] tipc: Enabling of bearer rejected, already enabled [ 733.502825][ T933] tipc: Resetting bearer [ 733.575417][ T933] tipc: Disabling bearer [ 733.713102][ T964] veth0: entered promiscuous mode [ 733.728445][ T961] veth0: left promiscuous mode [ 733.899169][ T865] Bluetooth: hci5: command 0x0406 tx timeout [ 733.899185][T28332] Bluetooth: hci0: command 0x0401 tx timeout [ 734.472579][ T616] net_ratelimit: 98 callbacks suppressed [ 734.472594][ T616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.486832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.496423][ T639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.507093][ T639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.516725][ T613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.527632][ T613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.545315][ T1009] tipc: Resetting bearer [ 734.652324][ T613] bond8: (slave dummy0): failed to get link speed/duplex [ 734.670602][ T616] bond5: (slave bridge7): failed to get link speed/duplex [ 734.762672][ T638] bond8: (slave dummy0): failed to get link speed/duplex [ 734.770609][T29932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.117706][ T1026] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 735.265742][ T1030] __nla_validate_parse: 6 callbacks suppressed [ 735.265767][ T1030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7314'. [ 735.293280][ T1028] validate_nla: 2 callbacks suppressed [ 735.293297][ T1028] netlink: 'syz.4.7313': attribute type 4 has an invalid length. [ 735.311596][ T1032] netlink: 288 bytes leftover after parsing attributes in process `syz.1.7315'. [ 735.321110][ T1030] netlink: 'syz.2.7314': attribute type 1 has an invalid length. [ 735.387460][ T1036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7316'. [ 735.426295][ T1036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7316'. [ 735.647044][ T1045] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 735.832010][ T1055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7321'. [ 736.218428][ T1085] syzkaller0: entered promiscuous mode [ 736.254569][ T1085] syzkaller0: entered allmulticast mode [ 736.304414][ T1090] netlink: 'syz.1.7328': attribute type 3 has an invalid length. [ 736.347204][ T1090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7328'. [ 736.887442][ T1120] netlink: 'syz.1.7336': attribute type 3 has an invalid length. [ 736.907665][ T1120] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7336'. [ 737.087257][ T1134] netlink: 'syz.1.7343': attribute type 2 has an invalid length. [ 737.408177][ T1159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7349'. [ 737.435023][ T1159] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.7349'. [ 737.525859][ T1166] netlink: 'syz.2.7351': attribute type 4 has an invalid length. [ 737.587607][ T1166] ipvlan0: Caught tx_queue_len zero misconfig [ 737.596292][ T1170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7353'. [ 737.598378][ T1172] netlink: 'syz.1.7354': attribute type 1 has an invalid length. [ 737.662384][ T1172] 8021q: adding VLAN 0 to HW filter on device bond7 [ 737.684492][ T1172] bond7: (slave batadv1): Opening slave failed [ 737.842483][ T1187] IPVS: sync thread started: state = MASTER, mcast_ifn = erspan0, syncid = 2, id = 0 [ 738.039468][ T1208] netlink: 'syz.4.7364': attribute type 1 has an invalid length. [ 738.068926][ T1208] netlink: 'syz.4.7364': attribute type 2 has an invalid length. [ 738.079125][ T1205] syzkaller1: entered promiscuous mode [ 738.098838][ T1205] syzkaller1: entered allmulticast mode [ 738.249622][ T1210] netlink: 'syz.1.7361': attribute type 1 has an invalid length. [ 738.288421][ T1218] netlink: 'syz.4.7367': attribute type 11 has an invalid length. [ 738.659433][ T1243] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 738.681241][ T1243] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 739.217943][ T1286] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 739.288764][ T1290] xt_socket: unknown flags 0x8 [ 739.386238][ T1300] tipc: Enabled bearer , priority 24 [ 739.494899][ T605] net_ratelimit: 110 callbacks suppressed [ 739.494917][ T605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.520121][ T637] bond8: (slave dummy0): failed to get link speed/duplex [ 739.523788][ T1312] netlink: 'syz.0.7397': attribute type 11 has an invalid length. [ 739.578378][ T604] bond5: (slave bridge7): failed to get link speed/duplex [ 739.654103][ T604] bond8: (slave dummy0): failed to get link speed/duplex [ 739.711777][ T613] bond5: (slave bridge7): failed to get link speed/duplex [ 739.770721][ T613] bond8: (slave dummy0): failed to get link speed/duplex [ 739.833977][ T637] bond5: (slave bridge7): failed to get link speed/duplex [ 739.880126][ T638] bond8: (slave dummy0): failed to get link speed/duplex [ 739.960351][ T613] bond5: (slave bridge7): failed to get link speed/duplex [ 739.974273][T29932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.359567][ T1356] netlink: 'syz.1.7410': attribute type 11 has an invalid length. [ 740.368240][ T1356] validate_nla: 4 callbacks suppressed [ 740.368257][ T1356] netlink: 'syz.1.7410': attribute type 4 has an invalid length. [ 740.383327][ T1356] netlink: 'syz.1.7410': attribute type 6 has an invalid length. [ 740.392094][ T1356] __nla_validate_parse: 18 callbacks suppressed [ 740.392106][ T1356] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.7410'. [ 740.427968][ T1356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7410'. [ 740.455331][T29924] hid-generic 0005:15C2:0002.0001: item fetching failed at offset 4/6 [ 740.469673][T29924] hid-generic 0005:15C2:0002.0001: probe with driver hid-generic failed with error -22 [ 740.588109][ T1363] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7413'. [ 740.937864][ T1383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7420'. [ 741.038930][ T1387] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7420'. [ 741.050028][ T1387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7420'. [ 741.088314][ T1391] xt_TCPMSS: Only works on TCP SYN packets [ 741.164540][ T1387] netlink: 'syz.4.7420': attribute type 5 has an invalid length. [ 741.210155][ T1399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7424'. [ 741.249399][ T605] bridge1: port 1(veth0_to_bond) entered disabled state [ 741.268664][ T1399] netlink: 'syz.0.7424': attribute type 4 has an invalid length. [ 741.421514][ T1406] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.7426'. [ 741.427553][ T1409] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7427'. [ 741.619812][ T1419] netlink: 'syz.1.7431': attribute type 39 has an invalid length. [ 742.004924][ T1453] tap0: tun_chr_ioctl cmd 1074025672 [ 742.016195][ T1453] tap0: ignored: set checksum disabled [ 742.293167][ T1480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7446'. [ 742.335205][ T50] block nbd7: Receive control failed (result -32) [ 743.059337][ T1525] netlink: 'syz.4.7456': attribute type 10 has an invalid length. [ 744.533657][ C1] net_ratelimit: 77 callbacks suppressed [ 744.533671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.547922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.552535][ T604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.556609][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.564607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.580341][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.588422][ T605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.596553][ T639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.605208][ T639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.027046][T18029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.098465][ T1517] : renamed from sit0 [ 746.144437][ T1525] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.157600][ T1525] bond0: (slave team0): Enslaving as an active interface with an up link [ 746.204391][ T1531] __nla_validate_parse: 1 callbacks suppressed [ 746.204411][ T1531] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7460'. [ 746.413601][ T1541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 746.434640][ T1541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 746.476512][ T1550] netlink: 'syz.1.7465': attribute type 1 has an invalid length. [ 746.511441][ T1550] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7465'. [ 746.567197][T29918] xfrm0 speed is unknown, defaulting to 1000 [ 746.602743][ T639] ip6_tunnel:  xmit: Local address not yet configured! [ 746.627162][ T639] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 746.659526][ T639] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 746.785360][ T1564] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7470'. [ 746.825149][ T1565] lo: entered allmulticast mode [ 747.029095][ T1580] netlink: 'syz.1.7474': attribute type 1 has an invalid length. [ 747.213383][ T1586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 747.247190][ T1586] bridge0: port 3(bond3) entered blocking state [ 747.276910][ T1586] bridge0: port 3(bond3) entered disabled state [ 747.310159][ T1586] bond3: entered allmulticast mode [ 747.332308][ T1586] bond3: entered promiscuous mode [ 747.353384][ T1586] bridge0: port 3(bond3) entered blocking state [ 747.359774][ T1586] bridge0: port 3(bond3) entered forwarding state [ 747.395855][ T604] bridge0: port 3(bond3) entered disabled state [ 747.451582][ T1594] : renamed from vlan0 (while UP) [ 747.472326][ T1594] tipc: Disabling bearer [ 747.662570][ T1591] netlink: 'syz.2.7477': attribute type 16 has an invalid length. [ 747.666631][ T1602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7480'. [ 747.670911][ T1591] netlink: 'syz.2.7477': attribute type 17 has an invalid length. [ 747.704061][ T1604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7481'. [ 747.727769][ T1591] 0ªX¹¦Dö»: left allmulticast mode [ 747.795165][ T1591] veth1_to_bridge: left allmulticast mode [ 747.868528][ T1591] mac80211_hwsim hwsim59 wlan0: left promiscuous mode [ 747.912968][ T1591] vlan2: left promiscuous mode [ 747.917766][ T1591] geneve1: left promiscuous mode [ 747.940175][ T1591] vlan2: left allmulticast mode [ 747.945114][ T1591] geneve1: left allmulticast mode [ 747.962382][ T1591] bond1: left promiscuous mode [ 747.977601][ T1591] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 747.989700][ T1591] geneve2: left promiscuous mode [ 748.003340][ T1591] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 748.024782][ T1591] 8021q: adding VLAN 0 to HW filter on device bond4 [ 748.033332][ T1591] gtp0: left promiscuous mode [ 748.038090][ T1591] gtp0: left allmulticast mode [ 748.658071][ T1634] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7490'. [ 748.678313][ T1634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7490'. [ 748.770650][ T637] wlan1: Trigger new scan to find an IBSS to join [ 748.868515][ T1646] netlink: 'syz.0.7495': attribute type 11 has an invalid length. [ 748.900589][ T1646] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7495'. [ 749.034213][ T1650] SET target dimension over the limit! [ 749.054719][ T1655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7499'. [ 749.097779][ T1658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7500'. [ 749.116294][ T1658] veth1_to_bridge: entered allmulticast mode [ 749.259174][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 749.552707][ T638] net_ratelimit: 80 callbacks suppressed [ 749.552724][ T638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.631274][ T638] bond8: (slave dummy0): failed to get link speed/duplex [ 749.640504][ T638] bond5: (slave bridge7): failed to get link speed/duplex [ 749.660460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.669231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.677889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.764872][ T604] bond8: (slave dummy0): failed to get link speed/duplex [ 749.790641][ T638] bond5: (slave bridge7): failed to get link speed/duplex [ 749.865845][ T1702] macvlan3: entered promiscuous mode [ 749.871645][ T1702] macvlan3: entered allmulticast mode [ 749.877382][ T1702] team0: Device macvlan3 is already an upper device of the team interface [ 749.951411][ T605] bond8: (slave dummy0): failed to get link speed/duplex [ 749.974564][ T638] bond5: (slave bridge7): failed to get link speed/duplex [ 750.280975][ T1728] netlink: 'syz.4.7521': attribute type 4 has an invalid length. [ 750.379614][ T1737] xt_TPROXY: Can be used only with -p tcp or -p udp [ 750.496975][ T1740] netlink: 'syz.1.7524': attribute type 1 has an invalid length. [ 750.588465][ T1750] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 750.610361][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 750.647054][ T1759] x_tables: unsorted underflow at hook 4 [ 750.678339][ T1751] can: request_module (can-proto-3) failed. [ 750.707921][ T1764] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 750.852462][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 751.043592][ T1788] xt_hashlimit: size too large, truncated to 1048576 [ 751.090286][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 751.305958][ T1804] netlink: 'syz.3.7538': attribute type 61 has an invalid length. [ 751.363047][ T1808] __nla_validate_parse: 11 callbacks suppressed [ 751.363064][ T1808] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7540'. [ 751.394629][ T1806] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20003 [ 751.552093][ T1817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7544'. [ 751.593231][ T1822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7545'. [ 751.606108][ T1821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7545'. [ 751.616013][ T1822] netlink: 'syz.3.7545': attribute type 7 has an invalid length. [ 751.628156][ T1821] netlink: 'syz.3.7545': attribute type 7 has an invalid length. [ 751.637653][ T1822] netlink: 'syz.3.7545': attribute type 8 has an invalid length. [ 751.646509][ T1821] netlink: 'syz.3.7545': attribute type 8 has an invalid length. [ 751.675643][ T1822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7545'. [ 751.692328][ T1821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7545'. [ 751.727652][ T1828] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7546'. [ 751.736272][ T1827] syzkaller0: entered promiscuous mode [ 751.742325][ T1830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7547'. [ 751.763169][ T1827] syzkaller0: entered allmulticast mode [ 751.932004][ T1843] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 753.815973][ T637] wlan1: Trigger new scan to find an IBSS to join [ 754.661171][ T604] net_ratelimit: 64 callbacks suppressed [ 754.661190][ T604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.676030][ T605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.684198][ T638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.692306][ T638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.703209][ T604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.712333][ T638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.151448][ T604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.213137][ T1841] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 755.220048][ T600] bond5: (slave bridge7): failed to get link speed/duplex [ 755.293741][ T600] bond8: (slave dummy0): failed to get link speed/duplex [ 755.384469][ T600] bond5: (slave bridge7): failed to get link speed/duplex [ 755.657646][ T1874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7559'. [ 755.832027][ T1888] bond4: option all_slaves_active: invalid value (222) [ 755.853905][ T1888] bond4 (unregistering): Released all slaves [ 756.162701][ T1920] netlink: 'syz.1.7570': attribute type 83 has an invalid length. [ 756.220257][ T604] wlan1: Creating new IBSS network, BSSID c6:70:6a:ed:8d:b3 [ 756.223036][ T1909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7570'. [ 756.309429][ T1923] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 756.323583][ T1926] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 756.447064][ T1937] __nla_validate_parse: 2 callbacks suppressed [ 756.447083][ T1937] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.7578'. [ 756.579422][ T1945] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7581'. [ 756.589335][ T1944] netlink: 'syz.2.7580': attribute type 11 has an invalid length. [ 756.607333][ T1944] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7580'. [ 756.636815][ T1948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7582'. [ 756.670819][ T1945] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 756.703630][ T1950] netlink: 'syz.4.7581': attribute type 9 has an invalid length. [ 756.726400][ T1945] bond7 (unregistering): Released all slaves [ 756.942743][ T1965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7585'. [ 756.957533][ T1965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7585'. [ 756.985995][ T1962] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 757.000337][ T1962] bond7 (unregistering): Released all slaves [ 757.087786][ T1973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7588'. [ 757.196957][ T1973] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7588'. [ 757.544976][ T1990] bond9 (unregistering): Released all slaves [ 757.672681][ T2001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7598'. [ 757.706955][ T2001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7598'. [ 757.721062][ T2001] veth1_to_bridge: entered allmulticast mode [ 757.936069][ T2026] veth0_to_bridge: entered promiscuous mode [ 757.946182][ T2026] veth0_to_bridge: left promiscuous mode [ 758.036014][ T2031] xfrm0 speed is unknown, defaulting to 1000 [ 758.274891][ T2031] xfrm0 speed is unknown, defaulting to 1000 [ 758.364529][T29918] IPVS: starting estimator thread 0... [ 758.365316][ T2049] netlink: 'syz.2.7611': attribute type 1 has an invalid length. [ 758.473114][ T2052] IPVS: using max 28 ests per chain, 67200 per kthread [ 758.522209][ T2055] bond6: (slave bridge4): making interface the new active one [ 758.532232][ T2055] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 758.690043][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 759.098608][ T2085] bond0: (slave gre0): refused to change device type [ 759.318648][ T2110] netlink: 'syz.4.7629': attribute type 1 has an invalid length. [ 759.435374][ T2110] 8021q: adding VLAN 0 to HW filter on device bond7 [ 759.455257][ T2109] bridge1: port 1(veth0_to_bond) entered disabled state [ 759.468517][ T2109] veth0_to_bond: left allmulticast mode [ 759.475429][ T2109] veth0_to_bond: left promiscuous mode [ 759.484656][ T2109] bridge1: port 1(veth0_to_bond) entered disabled state [ 759.706939][ T2130] tipc: Enabling of bearer rejected, failed to enable media [ 759.730674][T29918] net_ratelimit: 87 callbacks suppressed [ 759.730692][T29918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.746603][ T613] bond5: (slave bridge7): failed to get link speed/duplex [ 759.783304][ T613] bond8: (slave dummy0): failed to get link speed/duplex [ 759.870835][ T616] bond5: (slave bridge7): failed to get link speed/duplex [ 759.913794][ T638] bond8: (slave dummy0): failed to get link speed/duplex [ 759.970542][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 760.000184][ T616] bond5: (slave bridge7): failed to get link speed/duplex [ 760.030267][ T613] bond8: (slave dummy0): failed to get link speed/duplex [ 760.119992][ T613] bond5: (slave bridge7): failed to get link speed/duplex [ 760.160517][ T613] bond8: (slave dummy0): failed to get link speed/duplex [ 760.216506][T29928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.536194][ T2162] netlink: 'syz.2.7646': attribute type 1 has an invalid length. [ 760.610734][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 761.212737][ T2210] xfrm1: entered promiscuous mode [ 761.226176][ T2210] xfrm1: entered allmulticast mode [ 761.238996][ T2218] netlink: 'syz.2.7664': attribute type 1 has an invalid length. [ 761.377870][ T2218] 8021q: adding VLAN 0 to HW filter on device bond7 [ 761.715953][ T2252] dvmrp0: entered allmulticast mode [ 764.527336][ T2232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 764.681985][ T2262] netlink: 'syz.4.7675': attribute type 30 has an invalid length. [ 764.724275][ T2270] __nla_validate_parse: 11 callbacks suppressed [ 764.724293][ T2270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7677'. [ 764.780673][ T604] net_ratelimit: 122 callbacks suppressed [ 764.780692][ T604] bond5: (slave bridge7): failed to get link speed/duplex [ 764.827421][ T2274] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7679'. [ 764.900075][ T604] bond8: (slave dummy0): failed to get link speed/duplex [ 764.933379][T29918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.945035][ T604] bond5: (slave bridge7): failed to get link speed/duplex [ 765.139340][ T2299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7686'. [ 765.142841][ T613] bond5: (slave bridge7): failed to get link speed/duplex [ 765.204514][ T639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.230891][ T639] bond8: (slave dummy0): failed to get link speed/duplex [ 765.293331][ T639] bond5: (slave bridge7): failed to get link speed/duplex [ 765.356213][ T638] bond8: (slave dummy0): failed to get link speed/duplex [ 765.420427][ T638] bond5: (slave bridge7): failed to get link speed/duplex [ 765.614329][ T2329] netlink: 'syz.3.7695': attribute type 1 has an invalid length. [ 765.636514][ T2321] netlink: 'syz.0.7692': attribute type 1 has an invalid length. [ 765.671133][ T2321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7692'. [ 765.710060][ T2329] bond4: (slave veth7): Enslaving as an active interface with a down link [ 765.733573][ T2329] 8021q: adding VLAN 0 to HW filter on device bond4 [ 765.945971][ T2347] xt_l2tp: missing protocol rule (udp|l2tpip) [ 765.986335][ T2353] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 766.087419][ T2356] netlink: 'syz.2.7705': attribute type 17 has an invalid length. [ 766.091565][ T2363] netlink: 'syz.1.7707': attribute type 3 has an invalid length. [ 766.106785][ T2356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7705'. [ 766.118704][ T2363] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7707'. [ 766.144769][ T2356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7705'. [ 766.169542][ T2356] 0ªX¹¦Dö»: entered promiscuous mode [ 766.184623][ T2374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7709'. [ 766.210863][ T2356] 0ªX¹¦Dö»: left promiscuous mode [ 766.357907][ T2384] netlink: 'syz.0.7712': attribute type 1 has an invalid length. [ 766.672647][ T2406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7721'. [ 766.703528][ T2408] netlink: 'syz.0.7723': attribute type 3 has an invalid length. [ 766.711909][ T2408] netlink: 666 bytes leftover after parsing attributes in process `syz.0.7723'. [ 767.067413][ T2433] netlink: 'syz.0.7730': attribute type 1 has an invalid length. [ 767.157487][ T2450] netlink: 'syz.1.7732': attribute type 9 has an invalid length. [ 767.170897][ T2433] bond4: entered promiscuous mode [ 767.190750][ T2433] 8021q: adding VLAN 0 to HW filter on device bond4 [ 767.358242][ T2466] bond8: entered promiscuous mode [ 767.390661][ T2466] bond8: entered allmulticast mode [ 767.656400][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 767.935787][ T2515] sch_fq: defrate 0 ignored. [ 768.054503][ T2528] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 768.499469][ T2577] netlink: 'syz.1.7764': attribute type 24 has an invalid length. [ 768.939452][ T2621] lo speed is unknown, defaulting to 1000 [ 768.998654][ T2621] lo speed is unknown, defaulting to 1000 [ 769.011617][ T2625] syzkaller0: entered promiscuous mode [ 769.027675][ T2625] syzkaller0: entered allmulticast mode [ 769.045222][ T2621] lo speed is unknown, defaulting to 1000 [ 769.324283][ T2637] geneve3: entered promiscuous mode [ 769.341760][ T2637] geneve3: entered allmulticast mode [ 769.378497][ T639] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 769.392447][ T639] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 769.573245][ T639] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 769.594813][ T639] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 769.624204][ T2621] infiniband sz1: set down [ 769.639082][ T2621] infiniband sz1: added lo [ 769.677383][ T2621] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 769.692880][ T2621] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 769.714161][ T2621] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 769.736195][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 769.754247][ T2621] RDS/IB: sz1: added [ 769.758453][ T2621] smc: adding ib device sz1 with port count 1 [ 769.764956][ T2621] smc: ib device sz1 port 1 has no pnetid [ 770.130298][T29918] net_ratelimit: 95 callbacks suppressed [ 770.130316][T29918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.153153][T29921] lo speed is unknown, defaulting to 1000 [ 770.291765][ T639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.300479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.330432][ T616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.339074][ T600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.359504][ T600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.368156][ T616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.857823][ T638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.171392][T29918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.434268][ T637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.929405][T29924] lo speed is unknown, defaulting to 1000 [ 771.953328][ T2621] lo speed is unknown, defaulting to 1000 [ 772.198840][ T2711] validate_nla: 2 callbacks suppressed [ 772.198856][ T2711] netlink: 'syz.2.7791': attribute type 1 has an invalid length. [ 772.239806][ T2711] __nla_validate_parse: 14 callbacks suppressed [ 772.270170][ T2711] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7791'. [ 772.365398][ T2721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7794'. [ 772.529438][ T2621] lo speed is unknown, defaulting to 1000 [ 772.635907][ T2736] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7799'. [ 772.675242][ T2736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7799'. [ 772.716857][ T2739] xt_hashlimit: overflow, rate too high: 0 [ 772.814072][ T2746] netlink: 'syz.2.7801': attribute type 1 has an invalid length. [ 772.919667][ T2746] 8021q: adding VLAN 0 to HW filter on device bond9 [ 772.986312][ T2753] bond9: (slave veth0_to_bond): making interface the new active one [ 773.026957][ T2753] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 773.058146][ T2761] macvlan3: entered promiscuous mode [ 773.069312][ T2761] macvlan3: entered allmulticast mode [ 773.076339][ T2761] bond9: entered promiscuous mode [ 773.085873][ T2761] veth0_to_bond: entered promiscuous mode [ 773.106556][ T2761] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 773.118400][ T2761] bond9: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 773.136926][ T2761] bond9: left promiscuous mode [ 773.142835][ T2761] veth0_to_bond: left promiscuous mode [ 773.163059][ T2621] lo speed is unknown, defaulting to 1000 [ 773.275538][ T2779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7808'. [ 773.368586][ T2781] syzkaller0: entered promiscuous mode [ 773.385156][ T2781] syzkaller0: entered allmulticast mode [ 773.445148][ T2787] netlink: 'syz.4.7811': attribute type 13 has an invalid length. [ 773.670352][ T2621] lo speed is unknown, defaulting to 1000 [ 774.287183][ T2621] lo speed is unknown, defaulting to 1000 [ 774.295004][ T2830] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7822'. [ 774.313952][ T2830] netlink: 'syz.4.7822': attribute type 49 has an invalid length. [ 774.503563][ T2849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.531715][ T2852] netlink: 'syz.3.7828': attribute type 5 has an invalid length. [ 774.638892][ T2859] team_slave_1: Caught tx_queue_len zero misconfig [ 774.690525][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 774.715623][ T2864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7831'. [ 774.768472][ T2621] lo speed is unknown, defaulting to 1000 [ 775.036638][ T2621] lo speed is unknown, defaulting to 1000 [ 775.135330][ T2893] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7837'. [ 775.151534][ T2891] syzkaller1: entered promiscuous mode [ 775.164005][ T2891] syzkaller1: entered allmulticast mode [ 775.191644][ T637] net_ratelimit: 86 callbacks suppressed [ 775.191665][ T637] bond5: (slave bridge7): failed to get link speed/duplex [ 775.301272][ T637] bond8: (slave dummy0): failed to get link speed/duplex [ 775.310586][ T639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.332637][T29924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.340797][T29932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.411381][T29924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.413641][ T600] bond5: (slave bridge7): failed to get link speed/duplex [ 775.450038][ T600] bond8: (slave dummy0): failed to get link speed/duplex [ 775.614097][ T2621] lo speed is unknown, defaulting to 1000 [ 775.620509][ T616] bond5: (slave bridge7): failed to get link speed/duplex [ 775.642794][ T616] bond8: (slave dummy0): failed to get link speed/duplex [ 775.757594][ T616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.780961][ T616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.935879][ T2932] tipc: New replicast peer: 172.20.20.187 [ 775.943031][ T2932] tipc: Enabled bearer , priority 10 [ 775.950918][ T2931] tipc: Enabling of bearer rejected, already enabled [ 775.967231][ T2929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7847'. [ 775.999735][ T2621] lo speed is unknown, defaulting to 1000 [ 776.007405][ T2929] netlink: 'syz.4.7847': attribute type 3 has an invalid length. [ 776.015844][ T2929] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7847'. [ 776.160830][ T2943] netlink: 'syz.4.7851': attribute type 11 has an invalid length. [ 776.171497][ T2939] veth1_macvtap: left promiscuous mode [ 776.185466][ T2943] netlink: 'syz.4.7851': attribute type 11 has an invalid length. [ 776.199234][ T2943] netlink: 'syz.4.7851': attribute type 11 has an invalid length. [ 776.230366][ T2943] netlink: 'syz.4.7851': attribute type 11 has an invalid length. [ 776.238800][ T2943] netlink: 'syz.4.7851': attribute type 11 has an invalid length. [ 776.257805][ T2943] netlink: 'syz.4.7851': attribute type 11 has an invalid length. [ 776.281979][ T2943] netlink: 'syz.4.7851': attribute type 11 has an invalid length. [ 776.312235][ T2943] netlink: 'syz.4.7851': attribute type 11 has an invalid length. [ 776.332515][ T2943] netlink: 'syz.4.7851': attribute type 11 has an invalid length. [ 776.349006][ T2943] netlink: 'syz.4.7851': attribute type 11 has an invalid length. [ 776.441869][ T2621] lo speed is unknown, defaulting to 1000 [ 776.574274][ T2956] bond8 (unregistering): Released all slaves [ 776.886237][ T2621] lo speed is unknown, defaulting to 1000 [ 777.106371][ T2621] lo speed is unknown, defaulting to 1000 [ 777.319539][ T2983] IPv6: NLM_F_CREATE should be specified when creating new route [ 777.368173][ T2987] __nla_validate_parse: 6 callbacks suppressed [ 777.368189][ T2987] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7867'. [ 777.499405][ T2997] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7870'. [ 777.511681][ T2997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7870'. [ 777.521407][ T2997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7870'. [ 777.713236][ T3008] geneve0: entered allmulticast mode [ 777.794063][ T3015] netlink: 'syz.0.7875': attribute type 13 has an invalid length. [ 777.958712][ T3016] mac80211_hwsim hwsim75 syzkaller0: Caught tx_queue_len zero misconfig [ 778.147721][ T3034] sctp: [Deprecated]: syz.2.7881 (pid 3034) Use of int in maxseg socket option. [ 778.147721][ T3034] Use struct sctp_assoc_value instead [ 778.204306][ T3039] netlink: 'syz.4.7882': attribute type 1 has an invalid length. [ 778.274592][ T3039] 8021q: adding VLAN 0 to HW filter on device bond8 [ 778.287963][ T3031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7879'. [ 778.313316][ T3043] bond8: (slave geneve4): making interface the new active one [ 778.326885][ T3043] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 778.356278][ T3031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.436929][ T3031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.530638][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 779.013978][ T3085] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7895'. [ 779.043290][ T3085] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7895'. [ 779.170249][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 779.188696][ T3099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7897'. [ 779.216831][ T3100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7899'. [ 779.454454][ T3112] bond0: Caught tx_queue_len zero misconfig [ 779.524723][ T3111] netem: change failed [ 779.625754][ T3123] netlink: 'syz.0.7905': attribute type 2 has an invalid length. [ 779.642361][ T3123] netlink: 'syz.0.7905': attribute type 11 has an invalid length. [ 779.651390][ T3125] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 779.672530][ T3123] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7905'. [ 779.695626][ T3123] netlink: 'syz.0.7905': attribute type 2 has an invalid length. [ 779.704287][ T3123] netlink: 'syz.0.7905': attribute type 11 has an invalid length. [ 779.721282][ T3123] netlink: 'syz.0.7905': attribute type 2 has an invalid length. [ 779.729312][ T3123] netlink: 'syz.0.7905': attribute type 11 has an invalid length. [ 779.744296][ T3123] netlink: 'syz.0.7905': attribute type 2 has an invalid length. [ 779.757597][ T3123] netlink: 'syz.0.7905': attribute type 11 has an invalid length. [ 779.855512][ T3134] veth9: entered allmulticast mode [ 780.240088][ T600] net_ratelimit: 106 callbacks suppressed [ 780.240107][ T600] bond5: (slave bridge7): failed to get link speed/duplex [ 780.301563][ T600] bond8: (slave dummy0): failed to get link speed/duplex [ 780.390904][ T604] bond5: (slave bridge7): failed to get link speed/duplex [ 780.411096][ T600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.419650][ T616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.427812][ T616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.437318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.449239][ T604] bond8: (slave dummy0): failed to get link speed/duplex [ 780.451059][ T600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.478361][ T616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.581492][ T3177] IPVS: length: 215 != 24 [ 781.031575][ T3203] bond5: option all_slaves_active: invalid value (222) [ 781.049668][ T3203] bond5 (unregistering): Released all slaves [ 781.539728][ T3257] xt_hashlimit: size too large, truncated to 1048576 [ 781.652192][ T3251] [ 781.654567][ T3251] ====================================================== [ 781.661610][ T3251] WARNING: possible circular locking dependency detected [ 781.668765][ T3251] syzkaller #0 Not tainted [ 781.673189][ T3251] ------------------------------------------------------ [ 781.680270][ T3251] syz.4.7942/3251 is trying to acquire lock: [ 781.686251][ T3251] ffff8880273af548 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 781.695864][ T3251] [ 781.695864][ T3251] but task is already holding lock: [ 781.703231][ T3251] ffff8880273af020 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 781.713541][ T3251] [ 781.713541][ T3251] which lock already depends on the new lock. [ 781.713541][ T3251] [ 781.723937][ T3251] [ 781.723937][ T3251] the existing dependency chain (in reverse order) is: [ 781.732936][ T3251] [ 781.732936][ T3251] -> #6 (&q->q_usage_counter(io)#57){++++}-{0:0}: [ 781.741623][ T3251] blk_alloc_queue+0x546/0x680 [ 781.746946][ T3251] __blk_mq_alloc_disk+0x197/0x390 [ 781.752618][ T3251] nbd_dev_add+0x499/0xb50 [ 781.757636][ T3251] nbd_init+0x168/0x1f0 [ 781.762430][ T3251] do_one_initcall+0x250/0x870 [ 781.767792][ T3251] do_initcall_level+0x104/0x190 [ 781.773291][ T3251] do_initcalls+0x59/0xa0 [ 781.778124][ T3251] kernel_init_freeable+0x2a6/0x3e0 [ 781.783824][ T3251] kernel_init+0x1d/0x1d0 [ 781.788769][ T3251] ret_from_fork+0x514/0xb70 [ 781.793883][ T3251] ret_from_fork_asm+0x1a/0x30 [ 781.799157][ T3251] [ 781.799157][ T3251] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 781.806359][ T3251] fs_reclaim_acquire+0x71/0x100 [ 781.811856][ T3251] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 781.818186][ T3251] __alloc_skb+0x1d0/0x7d0 [ 781.823243][ T3251] tcp_stream_alloc_skb+0x3f/0x580 [ 781.828955][ T3251] tcp_sendmsg_locked+0x1345/0x5360 [ 781.834661][ T3251] tcp_sendmsg+0x2f/0x50 [ 781.839412][ T3251] sock_write_iter+0x406/0x4f0 [ 781.844732][ T3251] vfs_write+0x61d/0xb90 [ 781.849503][ T3251] ksys_write+0x150/0x270 [ 781.854337][ T3251] do_syscall_64+0x174/0x580 [ 781.859481][ T3251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.865901][ T3251] [ 781.865901][ T3251] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 781.873537][ T3251] lock_sock_nested+0x41/0x100 [ 781.878813][ T3251] inet_shutdown+0x6a/0x390 [ 781.883909][ T3251] nbd_mark_nsock_dead+0x2e9/0x560 [ 781.889532][ T3251] recv_work+0x1c2e/0x1d40 [ 781.894457][ T3251] process_scheduled_works+0xb5d/0x1860 [ 781.900570][ T3251] worker_thread+0xa53/0xfc0 [ 781.905687][ T3251] kthread+0x389/0x470 [ 781.910296][ T3251] ret_from_fork+0x514/0xb70 [ 781.915413][ T3251] ret_from_fork_asm+0x1a/0x30 [ 781.920711][ T3251] [ 781.920711][ T3251] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 781.928345][ T3251] __mutex_lock+0x1a3/0x1550 [ 781.933494][ T3251] nbd_queue_rq+0x37b/0x1100 [ 781.938609][ T3251] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 781.944669][ T3251] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 781.951589][ T3251] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 781.958080][ T3251] blk_mq_run_hw_queue+0x348/0x4f0 [ 781.963699][ T3251] blk_mq_dispatch_list+0xd16/0xe10 [ 781.969407][ T3251] blk_mq_flush_plug_list+0x48d/0x570 [ 781.975295][ T3251] __blk_flush_plug+0x3ed/0x4d0 [ 781.980656][ T3251] __submit_bio+0x28d/0x580 [ 781.985666][ T3251] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 781.991808][ T3251] block_read_full_folio+0x599/0x830 [ 781.997656][ T3251] filemap_read_folio+0x137/0x3b0 [ 782.003215][ T3251] do_read_cache_folio+0x358/0x590 [ 782.008835][ T3251] read_part_sector+0xb6/0x2b0 [ 782.014183][ T3251] adfspart_check_ICS+0xb1/0x960 [ 782.019650][ T3251] bdev_disk_changed+0x817/0x1770 [ 782.025192][ T3251] blkdev_get_whole+0x380/0x510 [ 782.030616][ T3251] bdev_open+0x31e/0xd30 [ 782.035365][ T3251] blkdev_open+0x470/0x610 [ 782.040293][ T3251] do_dentry_open+0x822/0x13a0 [ 782.045562][ T3251] vfs_open+0x3b/0x340 [ 782.050140][ T3251] path_openat+0x2e08/0x3860 [ 782.055239][ T3251] do_file_open+0x23e/0x4a0 [ 782.060257][ T3251] do_sys_openat2+0x113/0x200 [ 782.065460][ T3251] __x64_sys_openat+0x138/0x170 [ 782.070832][ T3251] do_syscall_64+0x174/0x580 [ 782.075941][ T3251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.082343][ T3251] [ 782.082343][ T3251] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 782.089561][ T3251] __mutex_lock+0x1a3/0x1550 [ 782.094663][ T3251] nbd_queue_rq+0xc6/0x1100 [ 782.099705][ T3251] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 782.105757][ T3251] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 782.112601][ T3251] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 782.119093][ T3251] blk_mq_run_hw_queue+0x348/0x4f0 [ 782.124716][ T3251] blk_mq_dispatch_list+0xd16/0xe10 [ 782.130426][ T3251] blk_mq_flush_plug_list+0x48d/0x570 [ 782.136305][ T3251] __blk_flush_plug+0x3ed/0x4d0 [ 782.141660][ T3251] __submit_bio+0x28d/0x580 [ 782.146671][ T3251] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 782.152810][ T3251] block_read_full_folio+0x599/0x830 [ 782.158604][ T3251] filemap_read_folio+0x137/0x3b0 [ 782.164170][ T3251] do_read_cache_folio+0x358/0x590 [ 782.169799][ T3251] read_part_sector+0xb6/0x2b0 [ 782.175073][ T3251] adfspart_check_ICS+0xb1/0x960 [ 782.180523][ T3251] bdev_disk_changed+0x817/0x1770 [ 782.186054][ T3251] blkdev_get_whole+0x380/0x510 [ 782.191418][ T3251] bdev_open+0x31e/0xd30 [ 782.196167][ T3251] blkdev_open+0x470/0x610 [ 782.201121][ T3251] do_dentry_open+0x822/0x13a0 [ 782.206395][ T3251] vfs_open+0x3b/0x340 [ 782.210969][ T3251] path_openat+0x2e08/0x3860 [ 782.216070][ T3251] do_file_open+0x23e/0x4a0 [ 782.221107][ T3251] do_sys_openat2+0x113/0x200 [ 782.226291][ T3251] __x64_sys_openat+0x138/0x170 [ 782.231656][ T3251] do_syscall_64+0x174/0x580 [ 782.236754][ T3251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.243158][ T3251] [ 782.243158][ T3251] -> #1 (set->srcu){.+.+}-{0:0}: [ 782.250273][ T3251] __synchronize_srcu+0xca/0x300 [ 782.255741][ T3251] elevator_switch+0x1e8/0x7a0 [ 782.261015][ T3251] elevator_change+0x2cc/0x450 [ 782.266287][ T3251] elevator_set_default+0x36c/0x430 [ 782.271991][ T3251] blk_register_queue+0x3e9/0x4e0 [ 782.277528][ T3251] __add_disk+0x677/0xd50 [ 782.282371][ T3251] add_disk_fwnode+0xfb/0x480 [ 782.287556][ T3251] nbd_dev_add+0x72c/0xb50 [ 782.292486][ T3251] nbd_init+0x168/0x1f0 [ 782.297152][ T3251] do_one_initcall+0x250/0x870 [ 782.302422][ T3251] do_initcall_level+0x104/0x190 [ 782.307869][ T3251] do_initcalls+0x59/0xa0 [ 782.312707][ T3251] kernel_init_freeable+0x2a6/0x3e0 [ 782.318421][ T3251] kernel_init+0x1d/0x1d0 [ 782.323288][ T3251] ret_from_fork+0x514/0xb70 [ 782.328390][ T3251] ret_from_fork_asm+0x1a/0x30 [ 782.333662][ T3251] [ 782.333662][ T3251] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 782.341487][ T3251] __lock_acquire+0x15a5/0x2cf0 [ 782.346888][ T3251] lock_acquire+0x106/0x350 [ 782.351893][ T3251] __mutex_lock+0x1a3/0x1550 [ 782.356986][ T3251] elevator_change+0x1b3/0x450 [ 782.362264][ T3251] elevator_set_none+0xb5/0x140 [ 782.367652][ T3251] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 782.373967][ T3251] nbd_start_device+0x17f/0xb10 [ 782.379330][ T3251] nbd_genl_connect+0x165b/0x1cf0 [ 782.384867][ T3251] genl_family_rcv_msg_doit+0x22a/0x330 [ 782.390995][ T3251] genl_rcv_msg+0x61c/0x7a0 [ 782.396006][ T3251] netlink_rcv_skb+0x232/0x4b0 [ 782.401330][ T3251] genl_rcv+0x28/0x40 [ 782.405821][ T3251] netlink_unicast+0x75c/0x8e0 [ 782.411096][ T3251] netlink_sendmsg+0x813/0xb40 [ 782.416377][ T3251] ____sys_sendmsg+0x972/0x9f0 [ 782.421645][ T3251] ___sys_sendmsg+0x2a5/0x360 [ 782.426827][ T3251] __x64_sys_sendmsg+0x1bd/0x2a0 [ 782.432270][ T3251] do_syscall_64+0x174/0x580 [ 782.437364][ T3251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.443771][ T3251] [ 782.443771][ T3251] other info that might help us debug this: [ 782.443771][ T3251] [ 782.454003][ T3251] Chain exists of: [ 782.454003][ T3251] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#57 [ 782.454003][ T3251] [ 782.467790][ T3251] Possible unsafe locking scenario: [ 782.467790][ T3251] [ 782.475285][ T3251] CPU0 CPU1 [ 782.480678][ T3251] ---- ---- [ 782.486024][ T3251] lock(&q->q_usage_counter(io)#57); [ 782.491389][ T3251] lock(fs_reclaim); [ 782.497879][ T3251] lock(&q->q_usage_counter(io)#57); [ 782.505764][ T3251] lock(&q->elevator_lock); [ 782.510348][ T3251] [ 782.510348][ T3251] *** DEADLOCK *** [ 782.510348][ T3251] [ 782.518539][ T3251] 6 locks held by syz.4.7942/3251: [ 782.523633][ T3251] #0: ffffffff8fe37dc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 782.531824][ T3251] #1: ffffffff8fe37c00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 782.540770][ T3251] #2: ffff888027bc89c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 782.552154][ T3251] #3: ffff888027bc88d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 782.563104][ T3251] #4: ffff8880273af020 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 782.573715][ T3251] #5: ffff8880273af058 (&q->q_usage_counter(queue)#41){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 782.584580][ T3251] [ 782.584580][ T3251] stack backtrace: [ 782.590464][ T3251] CPU: 1 UID: 0 PID: 3251 Comm: syz.4.7942 Not tainted syzkaller #0 PREEMPT(full) [ 782.590480][ T3251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 782.590494][ T3251] Call Trace: [ 782.590556][ T3251] [ 782.590637][ T3251] dump_stack_lvl+0xe8/0x150 [ 782.590704][ T3251] print_circular_bug+0x2e1/0x300 [ 782.590723][ T3251] check_noncircular+0x12e/0x150 [ 782.590741][ T3251] __lock_acquire+0x15a5/0x2cf0 [ 782.590762][ T3251] ? elevator_change+0x1b3/0x450 [ 782.590802][ T3251] lock_acquire+0x106/0x350 [ 782.590814][ T3251] ? elevator_change+0x1b3/0x450 [ 782.590832][ T3251] __mutex_lock+0x1a3/0x1550 [ 782.590846][ T3251] ? elevator_change+0x1b3/0x450 [ 782.590861][ T3251] ? rcu_is_watching+0x15/0xb0 [ 782.590876][ T3251] ? work_grab_pending+0x3d1/0x990 [ 782.590890][ T3251] ? elevator_change+0x1b3/0x450 [ 782.590904][ T3251] ? __pfx___mutex_lock+0x10/0x10 [ 782.590915][ T3251] ? enable_work+0x17f/0x230 [ 782.590929][ T3251] ? lockdep_hardirqs_on+0x7a/0x110 [ 782.590943][ T3251] ? __cancel_work_sync+0xf7/0x110 [ 782.590957][ T3251] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 782.590974][ T3251] elevator_change+0x1b3/0x450 [ 782.590990][ T3251] elevator_set_none+0xb5/0x140 [ 782.591004][ T3251] ? __pfx_elevator_set_none+0x10/0x10 [ 782.591020][ T3251] ? xa_load+0x1db/0x210 [ 782.591035][ T3251] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 782.591057][ T3251] ? kernfs_add_one+0x477/0x5c0 [ 782.591090][ T3251] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 782.591109][ T3251] ? sysfs_add_file_mode_ns+0x259/0x300 [ 782.591126][ T3251] nbd_start_device+0x17f/0xb10 [ 782.591147][ T3251] ? device_create_file+0xf4/0x1b0 [ 782.591222][ T3251] nbd_genl_connect+0x165b/0x1cf0 [ 782.591244][ T3251] ? __pfx___nla_validate_parse+0x10/0x10 [ 782.591313][ T3251] ? __pfx_nbd_genl_connect+0x10/0x10 [ 782.591331][ T3251] ? rcu_is_watching+0x15/0xb0 [ 782.591344][ T3251] ? trace_kmalloc+0x2a/0xf0 [ 782.591363][ T3251] ? __nla_parse+0x40/0x60 [ 782.591377][ T3251] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 782.591393][ T3251] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 782.591410][ T3251] genl_family_rcv_msg_doit+0x22a/0x330 [ 782.591427][ T3251] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 782.591444][ T3251] ? __lock_acquire+0x6b5/0x2cf0 [ 782.591459][ T3251] genl_rcv_msg+0x61c/0x7a0 [ 782.591474][ T3251] ? __pfx_genl_rcv_msg+0x10/0x10 [ 782.591487][ T3251] ? __pfx_nbd_genl_connect+0x10/0x10 [ 782.591507][ T3251] netlink_rcv_skb+0x232/0x4b0 [ 782.591524][ T3251] ? __pfx_genl_rcv_msg+0x10/0x10 [ 782.591538][ T3251] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 782.591559][ T3251] ? down_read+0x270/0x2e0 [ 782.591571][ T3251] ? genl_rcv+0xd/0x40 [ 782.591584][ T3251] genl_rcv+0x28/0x40 [ 782.591596][ T3251] netlink_unicast+0x75c/0x8e0 [ 782.591616][ T3251] netlink_sendmsg+0x813/0xb40 [ 782.591635][ T3251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.591653][ T3251] ? aa_sock_msg_perm+0xf1/0x1b0 [ 782.591695][ T3251] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 782.591720][ T3251] ____sys_sendmsg+0x972/0x9f0 [ 782.591734][ T3251] ? __might_fault+0xaf/0x130 [ 782.591755][ T3251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 782.591770][ T3251] ? import_iovec+0x73/0xa0 [ 782.591809][ T3251] ___sys_sendmsg+0x2a5/0x360 [ 782.591820][ T3251] ? __lock_acquire+0x6b5/0x2cf0 [ 782.591834][ T3251] ? __pfx____sys_sendmsg+0x10/0x10 [ 782.591847][ T3251] ? futex_wake+0x4ac/0x580 [ 782.591880][ T3251] ? __fget_files+0x2a/0x420 [ 782.591895][ T3251] ? __fget_files+0x3a0/0x420 [ 782.591911][ T3251] __x64_sys_sendmsg+0x1bd/0x2a0 [ 782.591924][ T3251] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 782.591939][ T3251] ? rcu_is_watching+0x15/0xb0 [ 782.591955][ T3251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.591968][ T3251] do_syscall_64+0x174/0x580 [ 782.591980][ T3251] ? trace_irq_disable+0x3b/0x140 [ 782.592001][ T3251] ? clear_bhb_loop+0x40/0x90 [ 782.592014][ T3251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.592026][ T3251] RIP: 0033:0x7f63f819ce59 [ 782.592041][ T3251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.592077][ T3251] RSP: 002b:00007f63f9087028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.592091][ T3251] RAX: ffffffffffffffda RBX: 00007f63f8415fa0 RCX: 00007f63f819ce59 [ 782.592100][ T3251] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 782.592109][ T3251] RBP: 00007f63f8232d6f R08: 0000000000000000 R09: 0000000000000000 [ 782.592117][ T3251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.592125][ T3251] R13: 00007f63f8416038 R14: 00007f63f8415fa0 R15: 00007ffda74c79c8 [ 782.592140][ T3251] [ 783.158890][ T50] block nbd8: Receive control failed (result -32) [ 783.158894][ T4950] block nbd8: Receive control failed (result -32) [ 783.190095][ T3251] nbd8: detected capacity change from 0 to 63 [ 783.205907][ T3266] block nbd8: Dead connection, failed to find a fallback [ 783.215944][ T3266] block nbd8: shutting down sockets [ 783.221249][ T3266] blk_print_req_error: 138 callbacks suppressed [ 783.221264][ T3266] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.236627][ T3266] buffer_io_error: 138 callbacks suppressed [ 783.236643][ T3266] Buffer I/O error on dev nbd8, logical block 0, async page read [ 783.251369][ T3266] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.262951][ T3266] Buffer I/O error on dev nbd8, logical block 1, async page read [ 783.271400][ T3266] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.280490][ T3266] Buffer I/O error on dev nbd8, logical block 2, async page read [ 783.288304][ T3266] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.299052][ T3266] Buffer I/O error on dev nbd8, logical block 3, async page read [ 783.307255][ T3266] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.316751][ T3266] Buffer I/O error on dev nbd8, logical block 0, async page read [ 783.325309][ T3266] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.335400][ T3266] Buffer I/O error on dev nbd8, logical block 1, async page read [ 783.343387][ T3266] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.352786][ T3266] Buffer I/O error on dev nbd8, logical block 2, async page read [ 783.361127][ T3266] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.372678][ T3266] Buffer I/O error on dev nbd8, logical block 3, async page read [ 783.380642][ T3266] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.389782][ T3266] Buffer I/O error on dev nbd8, logical block 0, async page read [ 783.398042][ T3266] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.407319][ T3266] Buffer I/O error on dev nbd8, logical block 1, async page read [ 783.416760][ T3266] ldm_validate_partition_table(): Disk read failed. [ 783.424701][ T3266] Dev nbd8: unable to read RDB block 0 [ 783.431734][ T3266] nbd8: unable to read partition table [ 783.441486][ T3266] ldm_validate_partition_table(): Disk read failed. [ 783.448832][ T3266] Dev nbd8: unable to read RDB block 0 [ 783.455511][ T3266] nbd8: unable to read partition table [ 785.250928][ T643] net_ratelimit: 92 callbacks suppressed [ 785.250949][ T643] bond5: (slave bridge7): failed to get link speed/duplex [ 785.269948][ T643] bond8: (slave dummy0): failed to get link speed/duplex [ 785.370622][ T639] bond5: (slave bridge7): failed to get link speed/duplex [ 785.390713][ T639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.391820][ T643] bond8: (slave dummy0): failed to get link speed/duplex [ 785.480781][ T604] bond5: (slave bridge7): failed to get link speed/duplex [ 785.511049][ T604] bond8: (slave dummy0): failed to get link speed/duplex [ 785.590212][ T639] bond5: (slave bridge7): failed to get link speed/duplex [ 785.630381][ T639] bond8: (slave dummy0): failed to get link speed/duplex [ 785.710368][ T604] bond5: (slave bridge7): failed to get link speed/duplex [ 786.288820][ T604] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 790.281081][ T604] net_ratelimit: 119 callbacks suppressed [ 790.281103][ T604] bond5: (slave bridge7): failed to get link speed/duplex [ 790.300162][ T600] bond8: (slave dummy0): failed to get link speed/duplex [ 790.372219][T29918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.400005][ T643] bond5: (slave bridge7): failed to get link speed/duplex [ 790.410346][ T643] bond8: (slave dummy0): failed to get link speed/duplex [ 790.510252][ T643] bond5: (slave bridge7): failed to get link speed/duplex [ 790.520281][ T643] bond8: (slave dummy0): failed to get link speed/duplex [ 790.530716][ T643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.538950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.621163][ T639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog