last executing test programs: 3.019995924s ago: executing program 3 (id=5087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2000008}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) listen(r2, 0x80) r3 = accept$netrom(r2, 0x0, 0x0) close(0x4) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x10040) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000007}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e24, @private=0xa010100}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d8774493884", 0xee}, {0x0}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6", 0x71}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x129}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb501b2560bc0e0c5fb2c9f341ed3972b30190e930af94642ab1557e286442cfa6a84ad931e99549640705cd6261ca7094910df055747e2e2ae170e7850093bf0aa3370e03222b5de4597ca76f3193d4a45e424b540f292fd8b3523e5a2dd95177db84a801f0bc70819805a52b1b1b8f6c392056eb5f511d865324a88857277ce16e07bd12fc8b20b4c1b57b6ec2ca63497036679cad780c68628214c86c265e464c8c7715009f8b1c207e2cff5bfdeb2a9194a57901f7a40578f63146d41b7ceef1a2740c519952367f911ef0d1d0b64c39155939f0263567b73c924d61785096b4967d3c9633592df3b817bdff51482b284c4092dee98630814bb183b245b073fdb8927", 0x1f7}], 0x2}}], 0x2, 0x2090) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff3}, {0xe, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0xb, 0x1, 0x116f, 0x8, 0x4, 0x4, 0x40, 0x1, 0xf, 0x3ff, 0x3079, 0x200, 0x9, 0x8, 0xabcc, 0x4000007, 0x400, 0x4, 0x6, 0xc, 0x8, 0x0, 0xd, 0x0, 0x2000000, 0x80000001, 0x2, 0x10001, 0x1, 0x1, 0x2, 0x5, 0xffffff81, 0x4, 0x7, 0x80000001, 0x8, 0x3ff, 0x3, 0x2, 0x1000, 0x40, 0x1000, 0x7, 0x7fff, 0x5, 0x8, 0x40, 0x9, 0x6, 0x5, 0x5, 0xe, 0x5, 0x6, 0x5, 0x9, 0x8001, 0x0, 0x4, 0x9, 0xa7, 0xe, 0x9, 0x8, 0x3, 0x1, 0xbd, 0x7, 0x2, 0x9, 0xd, 0x10, 0x4, 0x3, 0x8, 0x3, 0x8, 0x3, 0xf, 0x1000, 0x0, 0x3, 0x5, 0x40dc, 0x0, 0x89, 0x7, 0x3, 0x7, 0x40, 0x5, 0x4090000, 0x4, 0x200, 0x6, 0x7, 0x1, 0x5, 0x81, 0x1, 0x800, 0x3e, 0x80, 0x1de3, 0x9, 0x80000001, 0x5, 0x9, 0x4, 0xffffffff, 0x1a, 0x2, 0x2, 0x1, 0xff, 0x4, 0x0, 0x9, 0x5, 0x9, 0x2, 0x5, 0x3, 0x2, 0xffffffff, 0x7, 0x7773276c, 0x7f, 0x8000, 0x4, 0x2, 0xfffffffe, 0xd, 0xf11, 0xd, 0x9, 0x6, 0x5e7c4a39, 0x5, 0x6, 0x22f, 0x2, 0x6, 0x3, 0x6, 0x0, 0x1ff, 0x6, 0xfffffffc, 0xe1, 0x7, 0x4, 0x7ff, 0xa2, 0x5, 0x3, 0x4, 0x7ff, 0x6, 0x4, 0x10000, 0xfffffff8, 0x24, 0x2, 0x3, 0x5944, 0x1, 0x1, 0xe, 0x7, 0x0, 0xbe70, 0x2, 0x7, 0xb9, 0x80000000, 0x0, 0xb, 0xffffffdf, 0x5, 0xa60, 0x4, 0xff, 0x2b, 0x8, 0xffffb2cb, 0x892, 0x9, 0xfffffac7, 0x10000, 0x1, 0x1, 0x6, 0xc0ef, 0x40, 0x6, 0x8, 0x6, 0x3, 0x7f, 0x3, 0xfffffffc, 0x6, 0x0, 0x5, 0x42c3, 0x10000, 0x2, 0x1, 0x10000, 0x6, 0x2, 0x0, 0xe, 0x1, 0x1, 0x7f, 0x8, 0x284, 0xcd4e, 0x9d, 0x0, 0xd6, 0xfffffffb, 0xd6df, 0x800, 0x71e, 0x5, 0x3ff, 0x5, 0xff, 0x2, 0x3, 0x9, 0x1, 0x3ff, 0x8, 0x9, 0x7, 0x9, 0xd, 0xca, 0x8001, 0x9, 0x6, 0x6, 0x7, 0x2, 0x7fffffff, 0x9, 0x3, 0x5, 0x3, 0xcb]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x1403, 0x200, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x200000c0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) accept4(r8, &(0x7f00000002c0)=@alg, &(0x7f0000000340)=0x80, 0x40800) 2.806844909s ago: executing program 2 (id=5090): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001a00010026bd7000fedbdf251c201406fe03fe09001100000800010000000000140012002900f2648c55aeec76c60a65a44f7ae608000400", @ANYRES32, @ANYBLOB="05001a0040000000080001000004c1"], 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipmr_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x11}}]}, 0x28}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r5, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0xef}}, 0x30) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', r5, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) 2.490919605s ago: executing program 2 (id=5093): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0xfffffe84}, 0x0) unshare(0x40) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f00000002c0)='connect aa:aa:aa:aa:aa:10 2', 0x19) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 2.423004997s ago: executing program 1 (id=5095): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r3, 0x8912, &(0x7f00000004c0)="1d8e275180a0c2d830") splice(r2, &(0x7f0000000080)=0x8000000000000002, 0xffffffffffffffff, &(0x7f00000000c0)=0x1200, 0xc, 0x1) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = accept4$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000040)=0x10, 0x800) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/13, 0xc}], 0x100000000000004b, 0x4, 0xfffffffe) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', r8, 0x700, 0x7, 0xfffffff7, 0x9, {{0x10, 0x4, 0x3, 0x7, 0x40, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast1, @private=0xa010100, {[@timestamp_prespec={0x44, 0x2c, 0xde, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x4}, {@local, 0x3}, {@local, 0x8}, {@private=0xa010100, 0x3000000}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x7b}]}]}}}}}) (async) connect$llc(r5, 0x0, 0x1c) 2.347489333s ago: executing program 1 (id=5097): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x4}) 2.226481624s ago: executing program 4 (id=5099): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000011c, 0x8, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x93, 0x8, 0x8, &(0x7f00000004c0)}}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x7ff, 0x10}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x50}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x17, &(0x7f0000000540)=""/23, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r1], 0x0, 0x10, 0xfffffffe}, 0x94) unshare(0x10000000) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f0000000200)=@canfd={{0x3, 0x1, 0x1}, 0x19, 0x3, 0x0, 0x0, "240a86003584b924cac358fd4eb444c5fe6eee297e3a4c67d606757d568df33e2c5213673263b835cf2ba3a79fc2bf9b84364474135f7c9d64abb3c843d4d8be"}, 0x48}, 0x2, 0x0, 0x0, 0x24000884}, 0x30048009) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000faffff1101000000f1eb00e5f6f4ac24cb7727dbffcc0ac17da1ce000ac55e0bc0265f64"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e73d684e235948f6db8e7c924d7c", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 2.194513482s ago: executing program 4 (id=5100): r0 = socket(0x1d, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r1, 0x0, 0xd, 0x0, &(0x7f0000000280)) (async) getsockopt$inet_opts(r1, 0x0, 0xd, 0x0, &(0x7f0000000280)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x400}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) 2.060198122s ago: executing program 4 (id=5102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014003"], 0xa4}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000000000)="813e78", 0x3}, {&(0x7f0000000040)="739135", 0x3}, {0x0, 0x11}, {0x0}], 0x4, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_buf(r3, 0x29, 0x2f, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c011) 2.05935456s ago: executing program 3 (id=5103): socket(0x10, 0x80002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [0xff, 0x0, 0xffffffff, 0xffffffff], [0xff000000, 0xffffff00, 0xffffff00], 'macvtap0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x3b, 0x5, 0x0, 0x25}, 0x0, 0xd8, 0xf8, 0x60030000, {0x0, 0xff000000}, [@common=@frag={{0x30}, {[0x800, 0x1], 0x3, 0x10, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'pim6reg0\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x208, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x4, 0x2, 0x1, 0x7}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x4}, {0x0, 0xb, 0x6}, {0xffffffffffffffff, 0x1, 0x6}, 0xce, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x40b, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r6, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647", 0x9}], 0x2, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x28044854}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket(0x10, 0x803, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) unshare(0x400) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000100)={0x0, 0x44, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000500), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfe0, &(0x7f0000000280)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="4db20200305b0100140003006e657464657673696d3000000000000014001680100001800c000300ff0f0000ffffff7f0a000100aaaaaaaaaaaa000017c18aec56bc47c0600af47dad5aa47f6a340af363c0897dda0433d165125d4ce4f515713b377221dfbb0198fbcb74548fd7d2dd1d5fd087529395c9d766bbcacbc32f3797796abec0cb6a32cd01cd1d6b78ab20b2d374aa5f58b2d44bc2bc0b51762b22bc858411669d064112197ac91293bbeaa8cbcd2b0529e56b54afb35527aa9409000000b4c87ac0ae6a86e03ce5051c30674e3180f1fa56fdf560694d7759277313849bbfcd5900503cd2c4ac82ee7842c82f0200000000000000f38956798d9692876d316c982067fc2d46b90ac0c1d3883575cfea89713e164d281ac2265c83761e1a0649e005c392483383fb8004f3afdeb78266fe766f4f906b28"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000700ffff0900010073797a300000000090000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4c001280480001800e000100636f6e6e6c696d697400000034000280080001400000010008000240000000000800024000000000080001400000002b0800014000000000080001590000000508000340000001"], 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20050800) 1.885265889s ago: executing program 3 (id=5105): socket$packet(0x11, 0xa, 0x300) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 64) r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) bind$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x2}}, 0x10) (rerun: 32) unshare(0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r1, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1], 0x0, 0x10, 0xfffffffe}, 0xc3) 1.568714124s ago: executing program 2 (id=5107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x9d}, 0x50) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000080)=0x3, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000280)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4b, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x114e00000}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000050}, 0x8000) r5 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e"], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001200"], 0xe0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.372320384s ago: executing program 2 (id=5109): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') getsockopt$inet_mreqn(r0, 0x0, 0x7, 0x0, 0x0) unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x27}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$IMGETCOUNT(r1, 0x400261f2, &(0x7f0000000000)) 1.338995209s ago: executing program 0 (id=5110): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getqdisc={0x30, 0x26, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0xfff2, 0x8}, {0x4, 0x7}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2008085}, 0x20000041) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000200)=0x91f, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x30, 0x0, &(0x7f00000011c0)="b9ffddc10000000000000008888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0xef}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x40}}, 0x8000) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x3, 0x4) 979.694858ms ago: executing program 4 (id=5111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="810200000000000014001a80100004800c000180"], 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', r4, 0x0, 0xa000, 0x4, 0x8, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @remote}}}}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002300)=@newtfilter={0x90, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x60, 0x2, [@TCA_CGROUP_ACT={0x5c, 0x1, [@m_sample={0x58, 0x9, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000000}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7fff, 0x4, 0x20000000, 0x72b, 0x4}}]}, {0x4}, {0xc, 0x3f}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}}, 0x20040054) 812.293889ms ago: executing program 1 (id=5112): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000300000001000000010073"], 0x0, 0x43, 0x0, 0x8, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x30001, 0x8, 0x1}, 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffae}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffae}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r1, 0x7}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r2}, 0xc) socket$kcm(0x29, 0x0, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) 810.797918ms ago: executing program 2 (id=5113): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0x0, 0x9}, {0xf, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe800000000000fdff0083d0ab5500bb0000000000000000020000000000a4c9b260ea9a879fbd26d7bf3756c9d671942ce8f715ecc428470cc6e6e901d47d33d32ef0122640758c8bee7d963bfeb55a448da534c0b90ab28fee24610c38e3e241b74ea0d545960080db72761ea34e13a2a87e775afb965ba41cc9f707d16eb4c771a15e8892b00d9c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500fe88000000000000000000000000000100000002320000000a000000fc010000000000000000000000000000000000000400"/180], 0xfc}}, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f00000001c0)=0xec) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0xa, 0x7) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) r7 = socket(0x200000000000011, 0x80001, 0xf) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) socket$inet(0x2, 0xa, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r9) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000007c0)={'gre0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x7, 0x20, 0x7fffffff, 0x2, {{0x32, 0x4, 0x1, 0x1, 0xc8, 0x64, 0x0, 0x9, 0x29, 0x0, @multicast1, @broadcast, {[@end, @timestamp_prespec={0x44, 0xc, 0xb2, 0x3, 0x4, [{@multicast2, 0x2}]}, @rr={0x7, 0x23, 0xaf, [@multicast1, @local, @rand_addr=0x64010101, @local, @loopback, @local, @multicast2, @private=0xa010101]}, @timestamp_addr={0x44, 0x44, 0xb4, 0x1, 0x2, [{@multicast2, 0x7}, {@loopback, 0xd}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0xffff0280}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast1, 0x348}, {@loopback, 0x24800000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @cipso={0x86, 0x3e, 0xffffffffffffffff, [{0x6, 0x11, "302f5c64b44cffc7fe769424d60493"}, {0x5, 0xf, "4ef02a36c8352cc75b86db4e63"}, {0x2, 0xc, "237f2b94fb52b70fa6f2"}, {0x2, 0x5, "05dfd8"}, {0x6, 0x7, "6047400ffc"}]}, @generic={0x94, 0x2}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r10, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x14) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r8, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 810.349062ms ago: executing program 0 (id=5114): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xfd, 0x6, 0x0, 0x39, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @mcast2={0xff, 0x3}, 0x2000, 0xba08}}) 755.700595ms ago: executing program 1 (id=5115): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xffffd000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 665.968152ms ago: executing program 1 (id=5116): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x104}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001042bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0305000038c70200240012800b000100627269646765000014000280080003000a0400"], 0x44}, 0x1, 0x0, 0x0, 0x4008086}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, @in=@loopback, {0x1, 0x0, 0x3, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'lrw(serpent)\x00'}}}]}, 0x138}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 603.554227ms ago: executing program 0 (id=5117): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r0, 0x58, &(0x7f00000005c0)}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004cc0)={0x12f8, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x12de, 0x1, 0x0, 0x1, [@generic="1064598c3382549b51d045c198b8dd44d1d2e0638a3e330986e2a8cbce4d18bb3fe217a3ac833cef2910aeb269801db463affee4165e394e2766ba", @generic="2e029df8de122d4e72bdd40b4ee9f0f753b3645c6d15fefe4ee276", @typed={0x41, 0xf5, 0x0, 0x0, @binary="26b9a4c058667782000bb6861b67cf785e07f8c7e998c4b2cfc54c7ee94cd599253f951e2266b268ef916c9013e2ba277e161441e5a53fa95470f4ac0b"}, @nested={0x4, 0xe8}, @nested={0x123b, 0x9f, 0x0, 0x1, [@nested={0x8, 0x2f, 0x0, 0x1, [@nested={0x4, 0x159}]}, @generic="c2ddcd436c46840ffd91109eace01481647c839584490a447e6b08cd79893d2121fbcb965dad9e2dfed8c5d5d60b4cb48ac25c0b514b7e1444cf8eb4638b0cc963534bf3e1c8ea089fea4e834a529e7919ec05082cf59b4750fa1118dfdd5fc6c7617c5140d0791588a5a39358c9b76d19ae31d6636e629cdfba49960af0aab08f02d1a9b4ea5b19c67e386800ec019399c1187dfdca3a897194be19559a47836da931da4226a49554d536a761e887b8a18077ff923c84dfe8e034e85ded43b198688066bceb755eced189756dc79964b099f531e5", @generic="ce583e5be546fe79fe2ebcd90771ebe2b0a85bdc9e96458cf9dfa8ef23ec656b651987bf4865e7e85a3eeb7a2984079fe9b8f37158ffecb3786c17a5f5c98f6612d8eebca4859ec3b0a224552dd311943724ff00a62cf5fa6ee8d4bb39dcfa85b6db0b8fb83c39528fc5164ddebdd6f0b97736a5662515a1ff6be7a7993af7152a61", @nested={0x10d7, 0xb5, 0x0, 0x1, [@typed={0x14, 0x11d, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="bf0512d09252fa6d6d2139f5b0872b9976ebb10731f5501612d27235e62a3c6c92049aca97f01ccc9e713a320b3d0eec33fc90968a4bceeeec2bb39b18635f5b95d48bc0ea61cfb353738c88171996967f148889bb90c716d280f7701f0183d3f1de9eee49ec23f38015b06dd2f4d0049a7ca6af53ed4bb2013941788239d7e1397736aeac97ff85bccb27ab2800ac9a07570eafb77b89d17bba5857fa4b34071b635e453a2d2c", @typed={0x1001, 0x98, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x7e}, @typed={0x8, 0xd5, 0x0, 0x0, @fd}, @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xa010101}]}]}]}]}, 0x12f8}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0x7ff}) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x28}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x7}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000086}, 0x40) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r10) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x28, r11, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '+,\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008041}, 0x20040000) (async) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r11, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000001}, 0x80) 521.315776ms ago: executing program 3 (id=5118): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080ffffff000000000100000008000100030000002c00048005000300010000000500032d000000000500030080000000050003000100000005000300050000000800020003"], 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000c00038008000200fd7f0000180001801400020076657468305f746f5f1a626f6e64000000"], 0x38}}, 0x0) 495.240167ms ago: executing program 4 (id=5119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) splice(r2, 0x0, r0, 0x0, 0xf3a, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000010c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) tee(r4, r2, 0x20008f5, 0xb) write(r1, 0x0, 0x0) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x60, 0x800) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r7, 0xffffffff, 0xfefffffd, 0xfffffffa}, 0x10) sendmmsg$inet(r5, &(0x7f0000000940)=[{{&(0x7f0000000240)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="6402cf0f0a7b9d976790b1370a0d7182c8580db54e6617ec82a04709b4012e53d1551ad60a98894f2134ce4b9e7f599288b544697bd9f74fa88b9a36b549a59ffc2e19aaf6f64e67b9a4da5daf979be97cd52ec395bdd8aa6cd430ba81ee5fbe9d561e088aca", 0x66}, {&(0x7f0000000300)="e4dda5dc837339c457551619d4c9d7a5b0d42f073875b8e40f617b356519954c7fc578f3017b0a798de107f52c89c2afeac00f1b95cc004fe7ba647349db40b82a73ab58190dfec08bc730d90c51a0a609c38f34a740eebc68b34742b3cc58cfd09df5dacc820ebabb32479260dabf5aab778fe4c63da6380a04ade8b72ad746b5eebf7c171794746dab2b6929ec45deb6cd439e7ae73a77a4ebbb3b20a442591e0663e8712c02bd4053b663eb04ea54c548c94780758252eb91ad1f74f2dae1db94e1e19610c3b952bada63ffd8b81f735f0da965a6448f6af71b12589341ba25573913db72247b1438002c5e04a63b9b97a55862", 0xf5}], 0x2, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x89, 0x8, "f3e6158a14c9"}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@rr={0x7, 0xb, 0x6b, [@rand_addr=0x64010100, @local]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xbe, 0x3, 0xc, [{@rand_addr=0x64010101, 0xd}, {@remote, 0xbf}, {@multicast2, 0xbdc}]}]}}}], 0x50}}, {{&(0x7f00000004c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000500)="c666534a49b935f04239d4251c682baf8a5a7c3b0e6f22b461463f6c7de335a32ac9e7af58bb26e6f3a1f5cb888fe161", 0x30}, {&(0x7f0000000540)="3e79a4842f34c0e589dc45d84d7bf541eb6b87d4a6a8e489f20fb06f7e3fd892ff44cc35d0424985adf519804e5c67a1329cd93c", 0x34}, {&(0x7f0000000580)="4f57b5993863bc98b5eb958aa6", 0xd}, {&(0x7f00000005c0)="ea228da2ff089f0bed5baace564458f26dc1cbb5ed152673f50f57e5ba93bac141d6274b24437bcaf56c36edd3a2b3cae51b7d3e8fca4ae550c307b643eff514685c69e401e89336698ec55545510f55e56fbe934f565408f4af9ec780d8953884909fc561e27a30f85aa9d8cb1a9a4b4868bdc7c5e17ac82dc1e577464381ecc5c3e33403987099c7be487e96ef68784b5a39684cb5048f3df9fa1ee83d29b7f2b9347ee36114a4f0c8bad4e716b6dd51b9f95fea2acfb48c969a19ca427bbfa244b343f355abfd77ed69", 0xcb}, {&(0x7f00000006c0)="4842bea615a476b159cc96e7f52e17084ee8d3455bc3f7b1320c3161cfe1c2109dc5583f69286012af3627fbdd146920683bb38861b947211be76ffba1844a23bb6c5f5e9038ce68318c50cc117711f4be3f2ce565b7712936cab54f2e5e48a305e6c3ff167b01872e7fb44a327fb61b22284c37060fecae3e3dc0319e9b98248506d822af24be64e76bef88012462efb7b59974dab5ae62aee749afd5f60093b3075d00a4d8c58e407fd634f6407e247ded71794239ab9345bb2e9cfb206b2d580c008feec030b0b2dd2a4db8fb0e914250829a4015e35c5a0ca26a43", 0xdd}], 0x5, &(0x7f0000000840)=[@ip_retopts={{0xdc, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x24, [@remote, @dev={0xac, 0x14, 0x14, 0x25}, @empty]}, @cipso={0x86, 0x3e, 0x1, [{0x0, 0x7, "4cb940c1e9"}, {0x1, 0x3, "d2"}, {0x6, 0xe, "d43c18ad16e0a12a1f594222"}, {0x1, 0x2}, {0x1, 0x8, "57dc31d6239e"}, {0x0, 0x6, "04fb5cc2"}, {0x1, 0x5, 'XO&'}, {0x7, 0xb, "f63ca468864a5e7378"}]}, @timestamp_addr={0x44, 0xc, 0xbd, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @timestamp_prespec={0x44, 0x2c, 0x81, 0x3, 0x8, [{@multicast1, 0x9}, {@loopback, 0xd}, {@empty, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}, {@private=0xa010100, 0x607ea99a}]}, @generic={0x7, 0x5, "21c9e2"}, @timestamp_addr={0x44, 0x24, 0xa9, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x401}, {@remote, 0x2}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0xf}, @generic={0x83, 0x12, "97a2dae5aa4b699f2d430f642fed435a"}, @timestamp={0x44, 0x8, 0xd8, 0x0, 0x9, [0xfffffff7]}]}}}], 0xe0}}], 0x2, 0x54) 424.049681ms ago: executing program 1 (id=5120): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x2c) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYRES16=r3, @ANYBLOB="010004000000fbdbdf250100000008000100030000001c000c800c000b8008000a005a7600000c000b8008000a00b5120020"], 0x48}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a505000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)}], 0x2}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x8}, {0xcdbf0d3388237035, 0xffff}, {0xfff3, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 423.305544ms ago: executing program 0 (id=5121): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, &(0x7f0000000300)=ANY=[@ANYBLOB="30468401"], 0x18) (async, rerun: 32) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000fcdbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="40007a800c000300a0d4e01051d6ff6314000100a141185d34a8353d9ec86372a23b0de6f87470a91cbb99c0fe5b1c37abc0da7ab2"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x5, 0x1fd, 0x1, 0x1}, 0x1c) (async, rerun: 64) recvmsg$unix(r3, 0x0, 0x20) (rerun: 64) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f0000000054c7be", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) recvfrom$inet(r5, 0x0, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 32) read$alg(r3, &(0x7f0000000300)=""/74, 0x4a) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) sendmmsg$alg(r3, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000440)="7914ca86ac613eb90a2234ca61f60ca925720bc4ee7b04440209652966561466ea1ce9ce571c08650f6202c6cd068740b7a4d6d4fbe4ec60f235317ca96d50062a0c6078323cbd45dddeae820ec77231cb6ad349e6166bb5803c06a97d519bfc69aae44410afb5d8e68f06506c9fa23d9a4fb52f8dbf6b83fd2d1738c3c5286249df9b7b716ad0c1562efc351c846b00153e478951c26eacf5708b9d9d00bbd2b938b90fbad1cd6f63ea1d567e98645e9d88ac221fb6c4ab9d8ec510e47594a321ca6770d24c6801e9ac201be23dd93e1cdfc6", 0xd3}, {&(0x7f00000002c0)="06b902cf49f587414c8583d6532fe37f8318e86b30c7a10523fbe1e2bf51dc0c3c6d38976ceffccd27ab952ef164848b1224f9491d700d", 0x37}, {&(0x7f00000005c0)="d56707ca935a811af3f39397d0d83bf7fe5489702c822352a2fa846e8002c6d0e144e08275d3d19e12ffbf5d575156e14faf51b2906f8bc61d0c4fadce4e05258a82e32ad4b99a5e4cccc38c97891b1811b37069bda1e5e5da839a05abd2fde3ab025d7527b0203ea69a38c6eeab6fe7ddab501ebea97d18b0240ec3654a69084364a0c81a9a71563c71b9f5d1274c648248c184faf21567fd612371", 0x9c}, {&(0x7f0000000380)="54d6953012f0b819612feafb3c4c5ab14affccf1ac7fa319899e43eb496e11660092aa87ade9fd7a8bfc51", 0x2b}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="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", 0xfd}], 0x6, &(0x7f0000001b00)=ANY=[@ANYBLOB="9000000000000000170100000200000078000000a6d40c75666cb7060ade7756bd93f37d72d8ef599beaeb63e467945edc1a85d4219820c15be1ab24cc5d0fa2e0a6ded326769e6bb09b958f2ce064d50f1398f7e6520f3ea8e02a457a62c3db6510abfe54030d2762ff7e6fd054c5263ad1150d13fdc30ea040001d19ef008be3869b3de0e66662c527e74f0000000018000000000000001701000004000000070000000000000022cc19e04ed14b6084aeaa62c1a07020a7bdaf320a7913699670d72b12dfcea7f6f7ad81192e62813130753668b6323827a40a7e760180d1d100a018d5c5ed99b0877e1d033728b6c2333e9b66df779061962fcf8b77e3cdf1b6eee156bdeedf09a53c8e604ab86802634131974c024dc0dd5b2973a1a82817e3673bf7b9128640551df3b490c9ccd264581dad408f8ee083c678ad5acb198fcfb44edf0b84600eb23519910e778a3558df0ac7abcd638ed178ca"], 0xa8, 0x20000890}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000018c0)="cace821b880b3a8987565eed8a72f0eef1166e48a615adc16324c4264858c007848b5e2b273947b7680780de46e099afa9d82129d03f1a9ead7da77bf32b3c4a27cb113771c2e0d03cfc8e646926d60cd0fabb01e0385c46a30be1069653f25c1e4d4d3c979ced90af9af626eeac8451d554261e3db0997c44a7", 0x7a}], 0x1, &(0x7f0000001940)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @iv={0x38, 0x117, 0x2, 0x20, "e0350c31f1901a88a5a54e880133c2d4b3b64a772071db29240aaa9098a6987c"}, @assoc={0x18, 0x117, 0x4, 0x1f6}, @assoc={0x18, 0x117, 0x4, 0x1ad7}, @op={0x18}, @iv={0x90, 0x117, 0x2, 0x76, "b034ecdb9a2f83c12a7541b7da7337796db9c8d8fb30046841a38bc2aa5733ed092a13ad75be2e0c57456a98d91f84bc497a9aca698d7fbde0d3a9e1294b34096cce1d942445f4eb53791e8a05cdeedee523ebd7ca1a66f6c49f8a58f44cb30024f2a0ec4901166f8860653dd95a85dd71eb1b46b737"}], 0x128, 0x24008000}], 0x2, 0x8c0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7c}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r10, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r11, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x48c6) 367.568334ms ago: executing program 3 (id=5122): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000004c0)={0x2, 0x1, 0x9af8b5df6eddb20b}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)=""/239, 0x26, 0xef, 0x2}, 0x28) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000300)={{r1, &(0x7f0000000000)='--)}', 0x0, &(0x7f0000000040)={@align=0x6, {0x3, 0x6, 0xa61, 0x7}}, 0x400, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x7f}, {[0x56e26a3b, 0x30000, 0x7, 0x8]}, 0x2de05a7e, 0x87, &(0x7f0000000240)=""/135}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x40, 0x2, 0x3c157f50, {{0xb, 0x4, 0x3, 0xd, 0x2c, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @noop, @generic={0x94, 0x11, "0b291bf8bab5b9f196ddbe304c6078"}, @end]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x9, '\x00', r3, r1, 0x3, 0x3, 0x2}, 0x50) 268.516785ms ago: executing program 0 (id=5123): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newchain={0x60, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0xe, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_ACT={0x30, 0x4, [@m_ife={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x60}}, 0x44004) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000851) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket(0x1, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) (async) listen(r5, 0x0) (async) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000004d00)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "e7bdd191486e8e3bf0795161b2"}]}, 0x28}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xda6424dc7ce17f98}, 0x85) 212.801456ms ago: executing program 3 (id=5124): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x140000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x8, 0x82e1, 0x2, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r3, 0x3}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={r3, 0xa2, 0x7, [0x9, 0x1, 0xcb62, 0x0, 0x8d, 0x9, 0x81b6]}, 0x16) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r7, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xffff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r8 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf8, r9, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5017649f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22cc852a}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3aa941ea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f4821b3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dc63f68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ddbd4ca}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27dc5b3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41d7d384}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42f3676c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ee9327d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6104579e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25184629}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x44000}, 0x1) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000580)={0x28, 0x0, 0x0, @hyper}, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b00)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000001080)=[{{&(0x7f00000005c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000600)="d6f75fe9567e", 0x6}, {&(0x7f0000000640)="8713fffe93d754dae494a1d763384e17bba33b737f92d527c65d5e4b33c757c5951b2496c46ef27bc4b16b658e9707e1580865a28ecdf8f788671a4df8f3087dc397cba8b369ff41c3", 0x49}, {&(0x7f00000006c0)="253bf9134a87ac46fa37d879c14cb1e4b33ed3826ac87f365e2391d05d9aba3a02ce3a161664db0a36972b66119cfcc90a2430645c8e4b4fc62fac45daffc26152720e44665605b955a86ba4262f2534cbd8a895e32b66a2d31bacda3f165e53955e2e7e318c37b6b49e20c4b9ae1152c89c02d57b44671442f2a42da684732c2157a533122904298f5c", 0x8a}, {&(0x7f0000000780)="cc0a3d67a44f1db772ff52f9dd6f0b37b77d2e21a71271e90a0192743b086a86353805a7d13d13", 0x27}], 0x4, &(0x7f0000000900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xb8}}, {{&(0x7f00000009c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="9f33e76b6dd562c225f784a74c7deb41e4017560c7e2d9df3d60b352182cceddeef4de19d767ca467c84a5d2773ea3c6a0c8ea44eaa9bf515a25417fce1d189f344ca5893501e145b81831a2a6ee4b49c24e8ebfdeee75fa57a5450f4d8402b9bc020d9a8c9daa3dd5ad3cc9c853cf881e8fcab5f2cc39698a8fabc164ff011da1e8ec0bbe8bafbdb74462e0b3051e8f7e22dc9b2e6f561851774b95542e55", 0x9f}], 0x1, &(0x7f0000000b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @local, @broadcast}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x3, 0x6d}, @timestamp={0x44, 0x28, 0xf2, 0x0, 0x0, [0x0, 0x7, 0x2, 0x240000, 0xdf7, 0x3, 0xb, 0x4, 0xfffffad6]}, @rr={0x7, 0x17, 0x6d, [@broadcast, @multicast2, @private=0xa010101, @empty, @dev={0xac, 0x14, 0x14, 0x32}]}, @ssrr={0x89, 0x13, 0x80, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x53}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x79}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x71, 0x1, 0x9, [{@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x14bd}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x3, "7f"}, {0x5, 0xc, "c11481c8d5f3ca4573ce"}, {0x0, 0x12, "36bad4c19fae5ab01820e1d7ff361bdf"}, {0x2, 0x5, "53df7a"}, {0x0, 0x8, "5c5ecadf733e"}, {0x0, 0xa, "c31d5315a78ba259"}]}, @lsrr={0x83, 0xb, 0x57, [@broadcast, @rand_addr=0x64010100]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x60, 0x0, 0x7, {[@end, @end, @timestamp_prespec={0x44, 0x14, 0x2e, 0x3, 0x1, [{@multicast2, 0x5}, {@multicast1, 0x9}]}, @rr={0x7, 0xb, 0xde, [@multicast1, @multicast1]}, @cipso={0x86, 0x21, 0x1, [{0x5, 0x6, "8bb3de22"}, {0x5, 0xe, "5a320b8af35ffaa772aada6e"}, {0x5, 0x7, "f4f4832127"}]}, @ssrr={0x89, 0xb, 0xa7, [@multicast2, @private=0xa010101]}]}}}], 0x1c8}}, {{&(0x7f0000000d40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000d80)="fd2402721ffe153695204f843dbefea0bcf85836c1857ae0bc0eb1bdf2da4122875200780cd53280f3703ed04b6f8a821b75cb20145d707ac2577efe745b967ae074b05f1ec6e694e2c2e42daffe5b97a54354fd1cfc22d09a0d8d7213a32cbf264336bbabd24bd15532746c671ed737ad6996", 0x73}], 0x1, &(0x7f0000000e40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @empty}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000e80)="bd6a351afc10b5f6e63b7c458fcc829a3333edef0d3a4dbace471b4e1a8270bc01ac5afa317abe25a2f614c9c34fb5b770365e94557017fc767f581067e562417d91981e981200d1dcd8a267d4d4c39d382975b8c54f28713a47e4cf19e0c020", 0x60}, {&(0x7f0000000f00)="aa2ff802828bd0187f028f35bc6194349cb5b22908bf1b93852478168fc8e02c26701eea914cdd65c9109ab27936a17a4ce02c694bd004ac90ccb517a32a8bcf971195526c85ab5d762cf587ded6d051d3932608e9b975244e7016e17cd88cf2e58a10715e2415a47ceacfec35d73bd08dd273822ea012484e8293839175558dbd5f6ce7cc9a2a253eb1daedc80113c1f02f5e68c1ef21a137410467b6823a683a3c146c041084b5f41acfe34ab49ce54850c1ec38d49b97da0f6e3fc1b25f609d5e436211d8225cc2dabcdbabfd93d9b2c94541ee0a6d00ef8da0929283c684c81d1ba33a905fc460e8e6ac5d64f53e075a1bc9", 0xf4}], 0x2, &(0x7f0000001040)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x30}}], 0x4, 0x4040) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r14, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r16, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4440}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x6c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) 201.812364ms ago: executing program 4 (id=5125): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) write(r0, &(0x7f0000000100)="240000001a005f0214f9f40700090100000000000000000500b3b3e700040001000000", 0x23) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e00090027bd7000fedbdf250400000010001a8004000480080001"], 0x24}, 0x1, 0x0, 0x0, 0x4042844}, 0x84) 165.965315ms ago: executing program 2 (id=5126): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x87d0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, 0x4, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000005001000050000000500000001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, 0x2e, 0x9, 0x70bd27, 0x3, {0x4}, [@typed={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000180)=""/177}, 0x20) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0xd0, 0x38, 0x4, 0x70bd29, 0x25dfdbff, {0x7}, [@nested={0xbc, 0x142, 0x0, 0x1, [@nested={0xb0, 0x13a, 0x0, 0x1, [@typed={0xac, 0x5e, 0x0, 0x0, @binary="7347f99baf87c9c3fe13254600029efaea7d29438ae1377c8dc7680725f2a2c7a8ec7a65e873bac5e6bf3765c625ab4f180e0ee1fcd1b4aff9125cf1c689d2df3158646a1e0118b8f6f8a18bdf2f5f9295f3f41eff58c493ba0e6744f6432123c62717e7b98225048ea169dc949866bf8795b0fca710d5a2a7c866cdcc0677f1f29b84c71530932feac30d88ebaea9d8dd2d006ef0a00bc9c0ca282ce6c7e30678cd409edbac2727"}]}, @typed={0x8, 0x131, 0x0, 0x0, @ipv4=@empty}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24040800}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r4, 0x4, 0x0, 0x6}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c", 0x6}, {&(0x7f00000001c0)='f', 0x1}], 0x2}], 0x1, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000326bd7000fbdbdf255c00000008000300", @ANYRES32=0x0, @ANYBLOB="08006b003c00000008006b00b400000008006b007800000008006b000a00000008006b000a00000008006b006801000008006b005a00000008006b00e001000008006b006e00000008006b003c000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 0s ago: executing program 0 (id=5127): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000fdffffff00000000000000007110ae000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002300)={0xffffffffffffffff, 0x20, &(0x7f00000022c0)={&(0x7f0000002180)=""/240, 0xf0, 0x0, &(0x7f0000002280)=""/31, 0x1f}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0xe, &(0x7f0000000880)=ANY=[@ANYRES16=r0], &(0x7f0000002340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x40000000}, 0x10, r0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000100000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0xfffffffffffffd28, 0x0, 0x0, 0x10, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) kernel console output (not intermixed with test programs): cted cc 0x0c03 length: 249 > 1 [ 422.799077][ T5146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 422.809469][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 422.823495][ T5146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 422.836016][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 423.120062][ T5821] syz_tun (unregistering): left allmulticast mode [ 423.655013][T18979] chnl_net:caif_netlink_parms(): no params data found [ 423.671055][T19011] netlink: 'syz.3.3220': attribute type 83 has an invalid length. [ 423.674522][T19008] syzkaller1: entered promiscuous mode [ 423.686183][T19008] syzkaller1: entered allmulticast mode [ 423.776033][T19013] netlink: 'syz.3.3221': attribute type 1 has an invalid length. [ 423.793709][T19015] openvswitch: netlink: IP tunnel attribute has 116 unknown bytes. [ 423.991557][T18979] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.019098][T18979] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.033371][T18979] bridge_slave_0: entered allmulticast mode [ 424.047851][T18979] bridge_slave_0: entered promiscuous mode [ 424.066007][T18979] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.081678][T18979] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.091480][T19030] __nla_validate_parse: 1 callbacks suppressed [ 424.091496][T19030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3225'. [ 424.115184][T18979] bridge_slave_1: entered allmulticast mode [ 424.129592][T18979] bridge_slave_1: entered promiscuous mode [ 424.215713][T18979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.239427][T18979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.443153][T18979] team0: Port device team_slave_0 added [ 424.491436][T18979] team0: Port device team_slave_1 added [ 424.631880][T18979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.658656][T19046] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3229'. [ 424.663082][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.727361][T18979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.787726][T18979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.797284][T19053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3230'. [ 424.814550][T19053] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 424.855109][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.891621][ T5146] Bluetooth: hci3: command tx timeout [ 424.905797][T18979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.019191][T19061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3233'. [ 425.080378][T19063] netlink: 'syz.4.3233': attribute type 14 has an invalid length. [ 425.089389][T18979] hsr_slave_0: entered promiscuous mode [ 425.096472][T19067] netlink: 'syz.4.3233': attribute type 14 has an invalid length. [ 425.132205][T18979] hsr_slave_1: entered promiscuous mode [ 425.140749][T19067] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3233'. [ 425.150343][T19063] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3233'. [ 425.152756][T18979] debugfs: 'hsr0' already exists in 'hsr' [ 425.174328][T18979] Cannot create hsr debugfs directory [ 425.433813][T19080] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 425.607891][T19093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3239'. [ 426.251874][T18979] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.278559][T18979] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 426.365920][T19108] netlink: 'syz.4.3241': attribute type 17 has an invalid length. [ 426.375328][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3241'. [ 426.622793][T19108] bond0: option all_slaves_active: invalid value (64) [ 426.676136][T18979] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.720360][T18979] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 426.881050][T18979] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.904118][T18979] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 426.917800][T19126] netlink: 'syz.4.3245': attribute type 1 has an invalid length. [ 426.938532][T19126] netlink: 'syz.4.3245': attribute type 2 has an invalid length. [ 426.955591][T19126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3245'. [ 426.965391][ T5146] Bluetooth: hci3: command tx timeout [ 427.128234][T18979] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.151130][T18979] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 427.556785][T19159] syzkaller1: entered promiscuous mode [ 427.565822][T19159] syzkaller1: entered allmulticast mode [ 427.593691][T19159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3249'. [ 427.615357][T19162] xfrm0: entered allmulticast mode [ 427.630765][T18979] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 427.650112][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.661250][T18979] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.682091][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.701224][T18979] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.718581][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.730159][T18979] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.747076][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.909679][T18979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.957889][T18979] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.981812][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.988976][ T9541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.043215][ T9537] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.050515][ T9537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.173690][T19193] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 428.832679][T19224] nbd: nbd1 already in use [ 428.845287][T19224] block nbd1: NBD_DISCONNECT [ 428.858000][T19224] block nbd1: Send disconnect failed -32 [ 428.866623][T18979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.898509][T19224] block nbd1: shutting down sockets [ 428.960997][T18979] veth0_vlan: entered promiscuous mode [ 429.007285][T18979] veth1_vlan: entered promiscuous mode [ 429.046349][ T5146] Bluetooth: hci3: command tx timeout [ 429.112344][T19230] __nla_validate_parse: 5 callbacks suppressed [ 429.112362][T19230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3266'. [ 429.177979][T18979] veth0_macvtap: entered promiscuous mode [ 429.199153][T18979] veth1_macvtap: entered promiscuous mode [ 429.253016][T18979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.288016][ T9541] vlan3: left allmulticast mode [ 429.292923][ T9541] geneve0: left allmulticast mode [ 429.299205][ T9541] vlan3: left promiscuous mode [ 429.309322][ T9541] geneve0: left promiscuous mode [ 429.319073][ T9541] bridge0: port 3(vlan3) entered disabled state [ 429.330155][T19244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3270'. [ 429.339892][ T9541] bridge_slave_1: left allmulticast mode [ 429.346342][ T9541] bridge_slave_1: left promiscuous mode [ 429.354389][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.363332][ T9541] bridge_slave_0: left allmulticast mode [ 429.369973][ T9541] bridge_slave_0: left promiscuous mode [ 429.377057][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.640712][ T9541] dvmrp6: left allmulticast mode [ 429.787292][T19255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3272'. [ 430.513729][ T9541] bond12 (unregistering): (slave bridge8): Releasing backup interface [ 430.731374][ T9541] bond1 (unregistering): Released all slaves [ 430.747207][ T9541] bond2 (unregistering): Released all slaves [ 430.770266][ T9541] bond3 (unregistering): Released all slaves [ 430.783632][ T9541] bond4 (unregistering): Released all slaves [ 430.798159][ T9541] bond5 (unregistering): Released all slaves [ 430.811909][ T9541] bond6 (unregistering): Released all slaves [ 430.836995][ T9541] bond7 (unregistering): Released all slaves [ 430.854584][ T9541] bond8 (unregistering): Released all slaves [ 430.873747][ T9541] bond9 (unregistering): Released all slaves [ 430.888062][ T9541] bond10 (unregistering): Released all slaves [ 430.901052][ T9541] bond11 (unregistering): Released all slaves [ 430.925467][ T9541] bond0 (unregistering): Released all slaves [ 430.938437][ T9541] bond12 (unregistering): Released all slaves [ 430.953161][ T9541] bond13 (unregistering): (slave wireguard1): Releasing backup interface [ 430.961753][ T9541] wireguard1: left promiscuous mode [ 430.979495][ T9541] bond13 (unregistering): Released all slaves [ 430.994569][ T9541] bond14 (unregistering): Released all slaves [ 431.016767][T18979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.111760][ T3502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.124420][ T5146] Bluetooth: hci3: command tx timeout [ 431.127964][ T3502] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.192733][ T9541] !: left promiscuous mode [ 431.276873][ T3502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.310152][ T3502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.362151][ T9541] hm3): left promiscuous mode [ 431.511108][T19273] ip6tnl1: entered promiscuous mode [ 431.546195][T19273] ip6tnl1: entered allmulticast mode [ 431.631893][ T9541] tipc: Disabling bearer [ 431.642566][ T9541] tipc: Left network mode [ 431.801509][T19291] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 432.003627][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.048100][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.085332][T19297] unsupported nlmsg_type 40 [ 432.469641][ T9537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.506079][ T9537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.888851][T19344] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3296'. [ 432.918609][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3296'. [ 432.928648][ T9541] hsr_slave_0: left promiscuous mode [ 432.945045][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3296'. [ 432.974675][ T9541] hsr_slave_1: left promiscuous mode [ 433.009702][ T9541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.028729][T19344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3296'. [ 433.049996][ T9541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.073434][ T9541] pim6reg99999991 (unregistering): left allmulticast mode [ 433.084778][T19346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3296'. [ 433.120194][T19358] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3298'. [ 433.480057][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3303'. [ 433.779495][ T9541] team0 (unregistering): Port device team_slave_1 removed [ 433.848542][ T9541] team0 (unregistering): Port device team_slave_0 removed [ 434.087701][T19372] vlan3: entered allmulticast mode [ 434.102266][T19372] macvtap0: entered allmulticast mode [ 434.114454][T19372] veth0_macvtap: entered allmulticast mode [ 434.196991][T19392] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 434.238818][T19398] netlink: 'syz.1.3309': attribute type 28 has an invalid length. [ 434.268399][T19398] x_tables: duplicate underflow at hook 1 [ 434.423704][T19404] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 434.782618][T19427] __nla_validate_parse: 4 callbacks suppressed [ 434.782634][T19427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3315'. [ 434.799928][T19427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3315'. [ 434.830278][T19427] netlink: 'syz.3.3315': attribute type 1 has an invalid length. [ 434.870361][ T9541] IPVS: stop unused estimator thread 0... [ 434.972144][T19431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3317'. [ 434.999334][T19431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3317'. [ 435.397668][T19453] Cannot find add_set index 0 as target [ 435.616825][T19465] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3324'. [ 435.688045][T19472] nbd: socks must be embedded in a SOCK_ITEM attr [ 435.748142][T19472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3327'. [ 435.788569][T19471] delete_channel: no stack [ 435.813608][T19479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3328'. [ 435.856841][T19479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3328'. [ 435.879331][T19479] netlink: 'syz.3.3328': attribute type 6 has an invalid length. [ 435.897569][T19479] netlink: 'syz.3.3328': attribute type 5 has an invalid length. [ 435.950164][ T3502] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.950997][T19479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3328'. [ 435.979373][T19485] netlink: 'syz.4.3329': attribute type 1 has an invalid length. [ 435.996198][T19479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3328'. [ 435.998595][ T3502] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.015492][T19479] netlink: 'syz.3.3328': attribute type 6 has an invalid length. [ 436.015514][T19479] netlink: 'syz.3.3328': attribute type 5 has an invalid length. [ 436.045794][ T3502] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.076758][ T3502] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.998022][T19531] netlink: 'syz.3.3336': attribute type 13 has an invalid length. [ 437.041765][T19531] netlink: 'syz.3.3336': attribute type 11 has an invalid length. [ 437.893524][T19574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.923218][T19573] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 438.002596][T19579] xt_TCPMSS: Only works on TCP SYN packets [ 438.068734][T19582] bridge_slave_0: left allmulticast mode [ 438.083626][T19582] bridge_slave_0: left promiscuous mode [ 438.115269][T19582] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.142950][T19582] bridge_slave_1: left allmulticast mode [ 438.154311][T19582] bridge_slave_1: left promiscuous mode [ 438.160303][T19582] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.188947][T19582] bond0: (slave bond_slave_0): Releasing backup interface [ 438.232802][T19582] bond0: (slave bond_slave_1): Releasing backup interface [ 438.263350][T19582] team_slave_0: left promiscuous mode [ 438.290897][T19582] team0: Port device team_slave_0 removed [ 438.301914][T19582] team_slave_1: left promiscuous mode [ 438.319963][T19582] team0: Port device team_slave_1 removed [ 438.327207][T19582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.334820][T19582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.345476][T19582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.355401][T19582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.366592][T19582] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 438.663651][T19615] netlink: 'syz.4.3362': attribute type 21 has an invalid length. [ 439.146904][T19641] bond1: entered promiscuous mode [ 439.178122][T19641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.277139][T19648] bond1: (slave bridge1): making interface the new active one [ 439.301278][T19648] bridge1: entered promiscuous mode [ 439.323621][T19648] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 439.331539][ T7442] IPVS: starting estimator thread 0... [ 439.332960][T19660] validate_nla: 2 callbacks suppressed [ 439.332976][T19660] netlink: 'syz.3.3371': attribute type 1 has an invalid length. [ 439.435382][T19661] IPVS: using max 35 ests per chain, 84000 per kthread [ 439.481081][T19660] bond2: entered promiscuous mode [ 439.487431][T19660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.610807][T19660] bond2: (slave bridge1): making interface the new active one [ 439.653521][T19660] bridge1: entered promiscuous mode [ 439.666604][T19660] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 439.678198][T19675] netlink: 'syz.0.3375': attribute type 1 has an invalid length. [ 439.694629][ T5146] Bluetooth: hci3: command tx timeout [ 439.813575][T19678] 8021q: VLANs not supported on ipvlan0 [ 439.952776][T19688] __nla_validate_parse: 12 callbacks suppressed [ 439.952795][T19688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3378'. [ 440.456961][T19690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3379'. [ 440.482538][T19696] netlink: 'syz.4.3381': attribute type 4 has an invalid length. [ 440.494202][T19690] openvswitch: netlink: Flow key attr not present in new flow. [ 440.731112][T19703] RDS: rds_bind could not find a transport for ::8011:0:20:0, load rds_tcp or rds_rdma? [ 440.802489][T19712] netlink: 'syz.2.3388': attribute type 10 has an invalid length. [ 440.920867][T19712] team0: left promiscuous mode [ 440.975185][T19712] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.008184][T19712] bond0: (slave team0): Enslaving as an active interface with an up link [ 441.295907][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3393'. [ 441.491774][T19747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3398'. [ 441.611065][T19758] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 441.751215][T19765] atomic_op ffff888078b9a198 conn xmit_atomic 0000000000000000 [ 442.343712][T19785] syzkaller0: entered promiscuous mode [ 442.359699][T19785] syzkaller0: entered allmulticast mode [ 442.488112][T19805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3409'. [ 444.700443][T19796] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 444.726508][T19796] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 444.736732][T19796] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 444.915106][T19823] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3414'. [ 444.940759][T19814] ip6tnl2: entered allmulticast mode [ 445.256309][T19833] netlink: 'syz.4.3419': attribute type 16 has an invalid length. [ 445.274831][T19833] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3419'. [ 445.627717][T19845] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3422'. [ 445.755367][T19849] IPv6: NLM_F_CREATE should be specified when creating new route [ 445.776059][T19849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.783346][T19849] IPv6: NLM_F_CREATE should be set when creating new route [ 445.790654][T19849] IPv6: NLM_F_CREATE should be set when creating new route [ 445.797921][T19849] IPv6: NLM_F_CREATE should be set when creating new route [ 445.863031][T19854] netlink: 5612 bytes leftover after parsing attributes in process `syz.3.3426'. [ 446.146683][T19868] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3431'. [ 446.371755][T19885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3436'. [ 446.399285][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3436'. [ 446.422706][T19885] netlink: 'syz.0.3436': attribute type 29 has an invalid length. [ 446.452966][T19885] netlink: 'syz.0.3436': attribute type 29 has an invalid length. [ 446.543470][T19890] syzkaller0: entered promiscuous mode [ 446.550493][T19890] syzkaller0: entered allmulticast mode [ 446.843348][T19906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3443'. [ 446.862975][T19908] netlink: 'syz.4.3441': attribute type 1 has an invalid length. [ 447.066943][T19917] Bluetooth: MGMT ver 1.23 [ 447.097656][T19919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3445'. [ 447.382342][T19932] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.3450'. [ 447.490321][T19938] netlink: 'syz.3.3452': attribute type 1 has an invalid length. [ 447.499190][T19938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.615149][T19940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.056954][T19970] xt_ecn: cannot match TCP bits for non-tcp packets [ 448.066824][T19970] netlink: 'syz.1.3463': attribute type 1 has an invalid length. [ 448.081507][T19964] xt_limit: Overflow, try lower: 28676/2147483648 [ 448.092526][T19954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.105404][T19954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.159194][T19969] netlink: 'syz.0.3462': attribute type 1 has an invalid length. [ 448.272213][T19954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.283528][T19979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3463'. [ 448.319500][T19954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.388386][T19973] ip6tnl2: left allmulticast mode [ 448.492485][T19954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.528618][T19954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.728219][T19954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.741456][T19954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.126311][ T9529] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.151586][ T9529] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.232085][ T9506] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.240547][ T9506] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.256386][T20020] netlink: 'syz.1.3476': attribute type 1 has an invalid length. [ 449.275985][ T9506] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.292372][ T9506] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.336216][ T9514] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.344997][ T9514] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.370630][T20023] bond2: (slave geneve2): making interface the new active one [ 449.379049][T20023] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 449.390032][ T9506] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 449.435747][ T9506] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 449.470102][T20025] syzkaller0: entered promiscuous mode [ 449.488642][T20025] syzkaller0: entered allmulticast mode [ 449.607908][ T9506] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 449.629044][ T9506] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 450.062282][T20054] syzkaller0: entered promiscuous mode [ 450.082837][T20054] syzkaller0: entered allmulticast mode [ 451.036869][T20095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.084825][T20095] __nla_validate_parse: 73 callbacks suppressed [ 451.084842][T20095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3493'. [ 451.115603][T20097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3494'. [ 451.248814][T20105] netlink: 'syz.0.3496': attribute type 1 has an invalid length. [ 451.250961][T20103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3494'. [ 451.301474][T20105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.396278][T20111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3497'. [ 451.555606][T20118] smc: net device wlan0 applied user defined pnetid SYZ0 [ 451.620972][T20121] xt_NFQUEUE: number of total queues is 0 [ 451.702004][T20124] tipc: Started in network mode [ 451.712850][T20124] tipc: Node identity ac14140f, cluster identity 4711 [ 451.723101][T20124] tipc: New replicast peer: 255.255.255.255 [ 451.730800][T20124] tipc: Enabled bearer , priority 10 [ 451.826660][T20132] batadv_slave_0: entered promiscuous mode [ 451.841333][T20129] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3503'. [ 451.870271][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3503'. [ 451.878617][T20132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3505'. [ 451.940234][T20131] batadv_slave_0: left promiscuous mode [ 451.961663][T20136] netlink: 'syz.4.3506': attribute type 1 has an invalid length. [ 451.971250][T20137] netlink: 'syz.4.3506': attribute type 1 has an invalid length. [ 451.997378][T20136] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.058998][T20136] bond2: (slave veth3): Enslaving as an active interface with a down link [ 452.106852][T20136] bond2: (slave veth5): Enslaving as an active interface with a down link [ 452.116962][T20136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3506'. [ 452.117002][T20142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3507'. [ 452.142116][T20136] bond2: (slave bridge4): Enslaving as an active interface with a down link [ 452.200776][T20146] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 452.208718][T20142] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 452.211192][T20146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.217148][T20142] block (null): Could not allocate knbd recv work queue. [ 452.287566][T20142] nbd: failed to add new device [ 452.292594][T20143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3507'. [ 452.302893][T20150] sctp: [Deprecated]: syz.4.3508 (pid 20150) Use of int in maxseg socket option. [ 452.302893][T20150] Use struct sctp_assoc_value instead [ 452.378058][T20143] nbd: socks must be embedded in a SOCK_ITEM attr [ 452.405780][T20154] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002 [ 452.758134][ T982] tipc: Node number set to 2886997007 [ 453.409625][T20197] syzkaller0: entered promiscuous mode [ 453.433579][T20197] syzkaller0: entered allmulticast mode [ 453.601578][T20216] nbd: couldn't find a device at index 0 [ 455.346344][T20276] xt_HMARK: spi-set and port-set can't be combined [ 455.973763][T20313] netlink: 'syz.3.3555': attribute type 6 has an invalid length. [ 456.002858][T20311] gtp0: entered promiscuous mode [ 456.044471][T20311] gtp0: entered allmulticast mode [ 456.183524][T20328] __nla_validate_parse: 1 callbacks suppressed [ 456.183542][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3559'. [ 456.295423][T20329] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3556'. [ 456.305838][T20329] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3556'. [ 456.316122][T20329] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 456.340624][T20333] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 456.351246][T20333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.449204][T20326] syzkaller0: entered promiscuous mode [ 456.828966][T20353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3564'. [ 457.032472][T20353] bond3: entered promiscuous mode [ 457.050718][T20353] 8021q: adding VLAN 0 to HW filter on device bond3 [ 457.144794][T20362] 8021q: adding VLAN 0 to HW filter on device bond4 [ 457.186951][T20362] bond4: entered promiscuous mode [ 457.206770][T20362] bond3: (slave bond4): Enslaving as an active interface with an up link [ 457.558410][T20370] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 457.623826][T20370] bond2 (unregistering): Released all slaves [ 458.040942][T20386] syzkaller1: entered promiscuous mode [ 458.057556][T20386] syzkaller1: entered allmulticast mode [ 458.411748][T20400] netlink: 'syz.3.3577': attribute type 83 has an invalid length. [ 458.575066][T20408] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 458.817359][T20415] netlink: 4164 bytes leftover after parsing attributes in process `syz.0.3582'. [ 458.867744][T20423] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 458.987278][T20420] syzkaller0: entered promiscuous mode [ 459.001144][T20420] syzkaller0: entered allmulticast mode [ 459.196807][T20438] xt_hashlimit: size too large, truncated to 1048576 [ 459.250278][T20437] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 459.338575][T20444] lo: entered allmulticast mode [ 459.356100][T20444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.571036][T20456] openvswitch: netlink: IPv4 tun info is not correct [ 459.636585][T20458] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3593'. [ 459.675697][T20460] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3593'. [ 459.814614][T20471] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3597'. [ 459.864522][T20471] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3597'. [ 459.911426][T20479] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3600'. [ 460.173684][T20493] bridge_slave_1: left allmulticast mode [ 460.184110][T20493] bridge_slave_1: left promiscuous mode [ 460.191519][T20493] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.207436][T20493] bridge_slave_0: left allmulticast mode [ 460.223250][T20493] bridge_slave_0: left promiscuous mode [ 460.229382][T20493] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.470200][T20461] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 460.520766][T20511] netlink: 'syz.2.3610': attribute type 10 has an invalid length. [ 460.537374][T20511] team0: Device veth1_vlan failed to register rx_handler [ 460.549412][T20511] netlink: 'syz.2.3610': attribute type 10 has an invalid length. [ 460.561322][ T7442] IPVS: starting estimator thread 0... [ 460.586015][T20511] team0: Device veth1_vlan failed to register rx_handler [ 460.656417][T20513] IPVS: using max 32 ests per chain, 76800 per kthread [ 460.723646][T20517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.838263][T20527] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 460.838263][T20527] Please contact the netfilter-devel mailing list or update your nftables rules. [ 460.917268][T20523] Bluetooth: MGMT ver 1.23 [ 461.145587][T20542] hsr_slave_0: left promiscuous mode [ 461.173923][T20542] hsr_slave_1: left promiscuous mode [ 461.305955][T20562] hsr0: entered promiscuous mode [ 461.346936][T20564] __nla_validate_parse: 6 callbacks suppressed [ 461.346957][T20564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3622'. [ 461.494784][T20570] block nbd1: Unsupported socket: should be TCP or UNIX. [ 461.514785][T20570] netlink: 'syz.1.3626': attribute type 3 has an invalid length. [ 461.530351][T20570] netlink: 772 bytes leftover after parsing attributes in process `syz.1.3626'. [ 461.541793][T20570] netlink: 'syz.1.3626': attribute type 3 has an invalid length. [ 461.549937][T20570] netlink: 772 bytes leftover after parsing attributes in process `syz.1.3626'. [ 461.573024][T20570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3626'. [ 461.658568][T20572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3627'. [ 461.843003][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3630'. [ 461.887095][T20585] netlink: 'syz.1.3631': attribute type 1 has an invalid length. [ 461.993610][T20588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3631'. [ 462.105745][T20598] netlink: 'syz.2.3635': attribute type 1 has an invalid length. [ 462.151025][T20598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.226076][T20598] bond2: (slave veth5): Enslaving as an active interface with an up link [ 462.282310][T20598] netlink: 'syz.2.3635': attribute type 1 has an invalid length. [ 462.320428][T20598] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 462.350399][T20598] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 462.430297][T20611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3637'. [ 462.445063][T20609] ip6tnl1: entered allmulticast mode [ 462.459548][T20611] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 462.601633][T20622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3641'. [ 462.741194][T20632] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 462.743929][T20633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3644'. [ 462.893154][T20638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 462.900460][T20638] IPv6: NLM_F_CREATE should be set when creating new route [ 462.907777][T20638] IPv6: NLM_F_CREATE should be set when creating new route [ 463.311097][T20673] netlink: 'syz.3.3652': attribute type 8 has an invalid length. [ 463.346447][T20654] block nbd1: server does not support multiple connections per device. [ 463.362729][T20654] block nbd1: shutting down sockets [ 463.740911][T20692] vxcan3: entered promiscuous mode [ 463.873521][T20696] syzkaller0: entered promiscuous mode [ 463.896474][T20696] syzkaller0: entered allmulticast mode [ 465.778610][ T9514] wlan1: Trigger new scan to find an IBSS to join [ 466.586766][T20723] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 466.861965][T20738] __nla_validate_parse: 15 callbacks suppressed [ 466.861986][T20738] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3673'. [ 467.049465][T20751] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3675'. [ 467.162911][T20755] netlink: 'syz.4.3678': attribute type 1 has an invalid length. [ 467.185692][T20755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.186118][T20757] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 467.237706][T20755] netlink: 'syz.4.3678': attribute type 61 has an invalid length. [ 467.696745][T20776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3682'. [ 468.031439][T20799] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 468.814242][ T9517] wlan1: Trigger new scan to find an IBSS to join [ 470.205871][T20759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.545206][T20834] x_tables: duplicate underflow at hook 2 [ 470.616293][T20842] netlink: 'syz.0.3699': attribute type 4 has an invalid length. [ 470.823031][T20851] delete_channel: no stack [ 471.159803][T20870] syzkaller1: entered promiscuous mode [ 471.173865][T20870] syzkaller1: entered allmulticast mode [ 471.190249][T20840] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3698'. [ 471.770968][ T9512] wlan1: Trigger new scan to find an IBSS to join [ 471.949154][ T9542] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 471.982955][ T9542] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 472.005601][T20911] vlan2: entered allmulticast mode [ 472.016185][T20911] bridge0: port 3(vlan2) entered blocking state [ 472.033470][T20911] bridge0: port 3(vlan2) entered disabled state [ 472.065705][T20911] vlan2: entered promiscuous mode [ 472.076992][ T9531] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 472.092272][ T9531] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 472.217539][T20925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3718'. [ 472.273931][T20925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3718'. [ 472.361147][T20925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3718'. [ 472.707918][ T9534] wlan1: Creating new IBSS network, BSSID 62:ee:1d:0d:4c:97 [ 472.875995][T20948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3725'. [ 472.978854][T20955] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 473.013492][T20956] x_tables: duplicate underflow at hook 1 [ 473.110243][T20961] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3728'. [ 473.148212][T20964] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3729'. [ 473.209958][T20966] bond3: option tlb_dynamic_lb: invalid value (5) [ 473.228493][T20966] bond3 (unregistering): Released all slaves [ 473.239657][T20960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.296712][T20970] netlink: 'syz.0.3729': attribute type 2 has an invalid length. [ 473.314318][T20970] netlink: 'syz.0.3729': attribute type 2 has an invalid length. [ 473.404870][T20973] macsec1: entered promiscuous mode [ 473.423129][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3733'. [ 473.433758][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3733'. [ 473.523946][T20972] pim6reg1: entered promiscuous mode [ 473.530531][T20972] pim6reg1: entered allmulticast mode [ 474.198324][T21011] sctp: [Deprecated]: syz.3.3741 (pid 21011) Use of int in max_burst socket option. [ 474.198324][T21011] Use struct sctp_assoc_value instead [ 476.519994][T21013] netlink: 62967 bytes leftover after parsing attributes in process `syz.3.3742'. [ 476.530238][T21015] veth1_macvtap: left promiscuous mode [ 476.536437][T21015] macsec0: entered promiscuous mode [ 476.545306][T21023] veth1_macvtap: entered promiscuous mode [ 476.562277][T21023] macsec0: left promiscuous mode [ 476.727953][T21030] syzkaller0: entered promiscuous mode [ 476.745415][T21030] syzkaller0: entered allmulticast mode [ 476.787193][T21042] pim6reg1: entered promiscuous mode [ 476.792930][T21042] pim6reg1: entered allmulticast mode [ 476.830893][T21042] syzkaller0: entered promiscuous mode [ 476.839858][T21042] syzkaller0: entered allmulticast mode [ 477.037674][T21059] bond6: Unable to set up delay as MII monitoring is disabled [ 477.062721][T21056] can: request_module (can-proto-0) failed. [ 477.064275][T21059] bond6 (unregistering): Released all slaves [ 477.199810][T21064] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 477.215326][T21070] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 477.254409][T21070] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3757'. [ 477.388486][T21082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3760'. [ 477.625302][T21094] netlink: 'syz.2.3763': attribute type 11 has an invalid length. [ 478.499796][T21142] kthread_run failed with err -4 [ 478.792059][T21162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3778'. [ 478.820693][T21164] netlink: 'syz.3.3779': attribute type 16 has an invalid length. [ 479.062929][T21176] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac14:14aa [ 479.313306][T21192] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 479.401484][T21194] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 479.481502][T21201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3787'. [ 479.570523][T21211] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3792'. [ 479.584994][T21212] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 479.896513][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3796'. [ 479.938713][T21225] ip6tnl1: entered allmulticast mode [ 479.944777][T21227] syzkaller1: entered promiscuous mode [ 479.962971][T21227] syzkaller1: entered allmulticast mode [ 480.235417][T21247] 8021q: VLANs not supported on ip6gre0 [ 480.336614][T21252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3803'. [ 480.448214][T21259] IPVS: set_ctl: invalid protocol: 136 100.1.1.0:20002 [ 480.491911][T21264] netlink: 'syz.2.3807': attribute type 3 has an invalid length. [ 480.501842][T21264] netlink: zone id is out of range [ 480.502368][T21252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3803'. [ 480.508754][T21264] netlink: zone id is out of range [ 480.521976][T21264] netlink: zone id is out of range [ 480.533016][T21264] netlink: zone id is out of range [ 480.541172][T21264] netlink: zone id is out of range [ 480.555226][T21264] netlink: zone id is out of range [ 480.573343][T21264] pim6reg: entered allmulticast mode [ 480.588981][T21263] pim6reg: left allmulticast mode [ 480.605610][T21269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3808'. [ 480.967134][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3810'. [ 481.138434][T21306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.365634][T21323] sctp: [Deprecated]: syz.2.3817 (pid 21323) Use of int in maxseg socket option. [ 481.365634][T21323] Use struct sctp_assoc_value instead [ 481.571741][T21335] macsec1: entered promiscuous mode [ 481.585070][T21335] erspan0: entered promiscuous mode [ 481.630400][T21335] erspan0: left promiscuous mode [ 482.198396][T21366] syzkaller0: entered promiscuous mode [ 482.218073][T21366] syzkaller0: entered allmulticast mode [ 485.683803][T21429] __nla_validate_parse: 3 callbacks suppressed [ 485.683823][T21429] netlink: 276 bytes leftover after parsing attributes in process `syz.4.3845'. [ 485.755573][T21434] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3847'. [ 486.004230][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 486.230315][T21470] openvswitch: netlink: Missing valid actions attribute. [ 486.238906][T21470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.819681][T21493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3860'. [ 487.127823][T21508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3864'. [ 487.198411][T21508] openvswitch: netlink: Unknown key attributes 2 [ 487.296007][T21514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3866'. [ 487.351396][T21518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3868'. [ 487.379865][T21512] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3866'. [ 487.466260][T21512] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3866'. [ 487.510052][T21512] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3866'. [ 488.271136][T21528] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 488.551652][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 488.746323][T21583] bond2: option broadcast_neighbor: invalid value (30) [ 488.803001][T21583] bond2 (unregistering): Released all slaves [ 488.895126][T21595] syzkaller0: entered promiscuous mode [ 488.929548][T21595] syzkaller0: entered allmulticast mode [ 489.047313][T21601] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 489.066630][T21601] bond6 (unregistering): Released all slaves [ 489.282498][T21614] syzkaller1: entered promiscuous mode [ 489.301441][T21614] syzkaller1: entered allmulticast mode [ 489.362312][T21634] netlink: 'syz.4.3898': attribute type 12 has an invalid length. [ 489.461163][T21642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 489.627405][T21661] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 490.229414][T21671] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 490.251248][T21640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.274180][T21673] netlink: 'syz.4.3906': attribute type 3 has an invalid length. [ 490.283082][T21673] netlink: 'syz.4.3906': attribute type 3 has an invalid length. [ 490.808589][T21704] __nla_validate_parse: 12 callbacks suppressed [ 490.808609][T21704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3914'. [ 490.860641][T21708] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3914'. [ 491.028437][T21713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3915'. [ 491.088289][T21715] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3915'. [ 491.139851][T21713] vlan2: entered allmulticast mode [ 491.160633][T21713] bond0: entered allmulticast mode [ 491.170974][T21713] team0: entered allmulticast mode [ 491.183286][T21717] netlink: 'syz.0.3916': attribute type 10 has an invalid length. [ 491.248741][T21715] bond0 (unregistering): (slave team0): Releasing backup interface [ 491.272137][T21715] team0: left allmulticast mode [ 491.296457][T21715] bond0 (unregistering): Released all slaves [ 491.361553][T21717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.383805][T21717] team0: Port device netdevsim0 added [ 491.515120][T21732] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3922'. [ 491.552954][T21731] tipc: Started in network mode [ 491.559005][T21731] tipc: Node identity 727f1b975e6d, cluster identity 4711 [ 491.578106][T21731] tipc: Enabled bearer , priority 0 [ 491.619944][T21733] tipc: Enabling of bearer rejected, already enabled [ 491.655059][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3925'. [ 491.665461][T21745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3925'. [ 491.687062][T21731] syzkaller0: entered promiscuous mode [ 491.693332][T21731] syzkaller0: entered allmulticast mode [ 491.713525][T21731] tipc: Resetting bearer [ 491.733657][T21728] tipc: Resetting bearer [ 491.807726][T21754] xt_HMARK: proto mask must be zero with L3 mode [ 491.817501][T21754] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3926'. [ 494.081604][T21728] tipc: Disabling bearer [ 494.092590][T21741] kthread_run failed with err -4 [ 494.106482][ T5894] tipc: Node number set to 739384215 [ 495.312705][T21811] netlink: 'syz.4.3938': attribute type 1 has an invalid length. [ 495.321962][T21812] netlink: 'syz.4.3938': attribute type 1 has an invalid length. [ 495.335575][T21811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3938'. [ 497.072193][T21829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3942'. [ 497.116348][T21835] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3944'. [ 497.151697][T21829] geneve2: entered allmulticast mode [ 497.210275][T21835] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3944'. [ 497.230681][T21835] IPv6: sit2: Disabled Multicast RS [ 497.237555][T21835] sit2: entered allmulticast mode [ 497.271136][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'. [ 497.410166][T21851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3949'. [ 498.047831][T21873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3956'. [ 498.279148][T21879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3958'. [ 498.418371][T21889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3960'. [ 498.479962][T21889] tipc: Enabled bearer , priority 10 [ 498.881681][T21905] bond6: option lacp_rate: invalid value (128) [ 498.899445][T21905] bond6 (unregistering): Released all slaves [ 498.995878][T21912] No such timeout policy "syz0" [ 498.999590][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3969'. [ 499.011158][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3969'. [ 499.020968][T21909] tipc: New replicast peer: 255.255.255.255 [ 499.033128][T21909] tipc: Enabled bearer , priority 10 [ 499.429949][T21934] bond6: entered promiscuous mode [ 499.448520][T21934] bond6: entered allmulticast mode [ 499.462224][T21934] 8021q: adding VLAN 0 to HW filter on device bond6 [ 499.658517][T21953] netlink: 'syz.2.3979': attribute type 7 has an invalid length. [ 499.679480][T21952] pim6reg1: entered promiscuous mode [ 499.685608][T21952] pim6reg1: entered allmulticast mode [ 499.755460][T21959] macvtap0: entered promiscuous mode [ 499.809686][T21958] macvtap0: left promiscuous mode [ 499.909517][T21972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.935952][T21972] netlink: 'syz.3.3982': attribute type 11 has an invalid length. [ 499.952755][ T5146] Bluetooth: hci3: link tx timeout [ 499.966248][ T5146] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 500.082550][T21983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.288890][T21997] netlink: 'syz.3.3992': attribute type 6 has an invalid length. [ 501.110420][T22034] IPVS: Unknown mcast interface: vcan0 [ 501.166787][T22033] xt_CT: No such helper "syz0" [ 501.262077][T22046] netlink: 'syz.3.4008': attribute type 1 has an invalid length. [ 501.296836][T22046] netlink: 'syz.3.4008': attribute type 2 has an invalid length. [ 501.338107][T22047] netlink: 'syz.0.4007': attribute type 4 has an invalid length. [ 501.354399][T22053] pim6reg: entered allmulticast mode [ 501.522917][T22045] pim6reg: left allmulticast mode [ 501.786550][T22065] netlink: 'syz.3.4014': attribute type 1 has an invalid length. [ 501.886571][T22072] netlink: 'syz.0.4007': attribute type 4 has an invalid length. [ 502.004346][T21979] Bluetooth: hci3: command 0x0406 tx timeout [ 502.478310][T22097] __nla_validate_parse: 6 callbacks suppressed [ 502.478330][T22097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4020'. [ 502.512880][T22097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4020'. [ 502.596163][ T7454] IPVS: starting estimator thread 0... [ 502.603468][T22099] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 502.694437][T22102] IPVS: using max 31 ests per chain, 74400 per kthread [ 503.168699][T22124] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4027'. [ 503.559572][T22148] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 503.569075][T22148] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 503.828679][T22167] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4037'. [ 504.023506][T22175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4042'. [ 504.247257][T22180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4044'. [ 504.647085][T22199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4047'. [ 504.739603][T22199] bond7: option broadcast_neighbor: invalid value (30) [ 504.759848][T22199] bond7 (unregistering): Released all slaves [ 504.780353][T22206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.811249][T22206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.849693][T22202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4049'. [ 504.859438][T22207] ip6_vti0: entered promiscuous mode [ 504.891728][T22207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'. [ 504.951136][T22204] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 505.164982][T22221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.182449][T22218] x_tables: duplicate underflow at hook 3 [ 505.236203][T22226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4058'. [ 505.331497][T22232] bridge_slave_0: left allmulticast mode [ 505.341396][T22232] bridge_slave_0: left promiscuous mode [ 505.349484][T22232] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.380159][T22232] bridge_slave_1: left allmulticast mode [ 505.394120][T22232] bridge_slave_1: left promiscuous mode [ 505.400107][T22232] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.430031][T22232] bond0: (slave bond_slave_0): Releasing backup interface [ 505.468267][T22232] bond0: (slave bond_slave_1): Releasing backup interface [ 505.515472][T22232] team0: Port device team_slave_0 removed [ 505.542986][T22232] team0: Port device team_slave_1 removed [ 505.565846][T22232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.594805][T22232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.617296][T22232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.635972][T22232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.657537][T22232] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 505.736101][T22246] bond7 (unregistering): Released all slaves [ 505.919048][T22258] tap0: tun_chr_ioctl cmd 2148553947 [ 507.053610][T22328] netlink: 'syz.4.4089': attribute type 1 has an invalid length. [ 507.083799][T22328] bond7: entered promiscuous mode [ 507.090265][T22328] 8021q: adding VLAN 0 to HW filter on device bond7 [ 507.153368][T22328] bond7: (slave veth9): making interface the new active one [ 507.162636][T22328] veth9: entered promiscuous mode [ 507.177194][T22328] bond7: (slave veth9): Enslaving as an active interface with an up link [ 507.219341][T22327] bond7: (slave veth11): Enslaving as a backup interface with an up link [ 507.523734][T22353] __nla_validate_parse: 13 callbacks suppressed [ 507.523753][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4096'. [ 507.574709][T22360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4097'. [ 507.589454][T22358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4099'. [ 507.593884][T22360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4097'. [ 507.608020][T22358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4099'. [ 507.940328][T22378] netlink: 'syz.1.4105': attribute type 2 has an invalid length. [ 507.959303][T22378] sch_tbf: peakrate 2 is lower than or equals to rate 8607250805684256844 ! [ 508.519268][T22398] hsr0: entered promiscuous mode [ 508.549773][T22399] netlink: 'syz.0.4110': attribute type 1 has an invalid length. [ 508.589620][T22399] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4110'. [ 508.632751][T22404] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4111'. [ 508.787184][T22410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4113'. [ 509.653431][T22450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4117'. [ 509.695066][T22450] netlink: 'syz.4.4117': attribute type 21 has an invalid length. [ 509.939434][T22465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4125'. [ 509.975726][T22455] bridge0: port 3(vlan4) entered blocking state [ 509.984674][T22455] bridge0: port 3(vlan4) entered disabled state [ 509.992519][T22455] vlan4: entered allmulticast mode [ 509.999216][T22455] geneve0: entered allmulticast mode [ 510.008013][T22455] vlan4: entered promiscuous mode [ 510.013212][T22455] geneve0: entered promiscuous mode [ 511.161937][T22509] sctp: [Deprecated]: syz.4.4137 (pid 22509) Use of int in max_burst socket option. [ 511.161937][T22509] Use struct sctp_assoc_value instead [ 511.235481][T22492] gtp0: left promiscuous mode [ 511.247310][T22492] gtp0: left allmulticast mode [ 511.376264][T22492] ip6tnl1: left allmulticast mode [ 511.395303][T22492] sit2: left allmulticast mode [ 511.452655][ T5894] syz0: Port: 1 Link DOWN [ 511.452727][ T9542] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.452777][ T9542] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.539766][ T9542] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.580901][ T9534] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.675883][ T9534] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.719712][T22529] bond0: option arp_interval: invalid value (18446744073709551615) [ 511.730331][T22529] bond0: option arp_interval: allowed values 0 - 2147483647 [ 511.747258][T22529] bond0 (unregistering): Released all slaves [ 511.785788][ T9534] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.798035][ T9534] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.808820][ T9534] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.878092][T22537] netlink: 'syz.1.4141': attribute type 1 has an invalid length. [ 511.968033][T22540] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 512.215863][T22551] netlink: 'syz.3.4146': attribute type 1 has an invalid length. [ 512.256158][T22537] bond3: entered promiscuous mode [ 512.283068][T22537] 8021q: adding VLAN 0 to HW filter on device bond3 [ 512.332886][T22544] 8021q: adding VLAN 0 to HW filter on device bond3 [ 512.340315][T22544] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 512.350649][T22544] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 512.405090][T22544] bond3: (slave gre1): making interface the new active one [ 512.431180][T22544] gre1: entered promiscuous mode [ 512.445914][T22544] bond3: (slave gre1): Enslaving as an active interface with an up link [ 512.499087][T22551] 8021q: adding VLAN 0 to HW filter on device bond4 [ 512.562831][T22552] bond4: (slave gretap1): making interface the new active one [ 512.606373][T22552] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 512.838147][T22580] tipc: Enabled bearer , priority 0 [ 512.895214][T22578] tipc: Resetting bearer [ 512.913467][T22586] IPVS: Unknown mcast interface: vcan0 [ 512.929969][T22589] __nla_validate_parse: 11 callbacks suppressed [ 512.929985][T22589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4155'. [ 513.013837][T22577] tipc: Disabling bearer [ 513.062477][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4154'. [ 513.087752][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4154'. [ 513.126317][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4154'. [ 513.149668][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4154'. [ 513.162251][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4154'. [ 513.176584][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4154'. [ 513.187654][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4154'. [ 513.205401][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4154'. [ 513.217968][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4154'. [ 513.241367][T22592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.251664][T22592] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.273553][T22592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 513.295968][T22606] netlink: 'syz.3.4158': attribute type 7 has an invalid length. [ 513.431170][T22610] tap0: tun_chr_ioctl cmd 3224918120 [ 513.457820][T22610] tap0: tun_chr_ioctl cmd 21731 [ 513.504243][T22610] tap0: tun_chr_ioctl cmd 21731 [ 513.551373][T22615] gretap0: entered promiscuous mode [ 513.564731][T22615] 8021q: VLANs not supported on ip_vti0 [ 514.014546][T22652] netlink: 'syz.0.4170': attribute type 6 has an invalid length. [ 514.055943][T22636] hsr0: left promiscuous mode [ 514.157734][ T9517] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.175026][T22658] netlink: 'syz.3.4171': attribute type 7 has an invalid length. [ 514.184261][ T9517] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.203091][ T9517] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.225816][ T9517] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.243158][ T9517] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.262979][ T9517] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.441911][T22661] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.455506][T22661] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.473269][ T9517] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.492993][ T9517] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.555313][T22661] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.588631][T22661] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.741463][T22661] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.759765][T22684] netlink: 'syz.0.4177': attribute type 1 has an invalid length. [ 514.774448][T22661] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.858317][T22661] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.899018][T22661] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.961338][T22696] netlink: 'syz.1.4178': attribute type 10 has an invalid length. [ 515.020998][T22692] xt_CT: No such helper "netbios-ns" [ 515.066473][T22679] syzkaller1: entered promiscuous mode [ 515.074094][T22679] syzkaller1: entered allmulticast mode [ 515.254976][ T9514] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.276120][ T9514] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.341863][ T9512] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.376081][ T9512] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.463665][ T9531] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.492478][ T9531] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.629364][ T9531] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.656903][ T9531] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.721997][T22729] veth1_macvtap: entered allmulticast mode [ 515.918777][T22737] syzkaller1: tun_chr_ioctl cmd 35108 [ 516.322596][T22768] syzkaller1: entered promiscuous mode [ 516.340985][T22768] syzkaller1: entered allmulticast mode [ 516.355727][T22768] syzkaller1: left promiscuous mode [ 516.361049][T22768] syzkaller1: left allmulticast mode [ 516.421865][T22780] netlink: 'syz.2.4199': attribute type 1 has an invalid length. [ 516.494377][ T9514] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.512469][ T9514] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.547827][ T9514] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.569293][ T9514] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.632336][T22784] tun0: tun_chr_ioctl cmd 1074025672 [ 516.667513][T22784] tun0: ignored: set checksum disabled [ 516.709963][T22795] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 516.721688][T22795] xt_TPROXY: Can be used only with -p tcp or -p udp [ 516.831362][T22800] syzkaller1: entered promiscuous mode [ 516.843248][T22800] syzkaller1: entered allmulticast mode [ 517.157591][T22813] syzkaller1: entered promiscuous mode [ 517.163663][T22813] syzkaller1: entered allmulticast mode [ 517.334779][T22819] netlink: ct family unspecified [ 517.339990][T22819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.355958][ T5146] block nbd1: Receive control failed (result -1) [ 517.993536][T22851] netlink: 'syz.1.4218': attribute type 1 has an invalid length. [ 518.002311][T22851] __nla_validate_parse: 60 callbacks suppressed [ 518.002330][T22851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4218'. [ 518.271699][T22868] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4222'. [ 518.291551][T22868] netlink: 'syz.2.4222': attribute type 9 has an invalid length. [ 518.311526][T22868] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4222'. [ 518.332923][T22868] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4222'. [ 518.354096][T22872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4225'. [ 518.358141][T22878] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4224'. [ 518.374329][T22875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4222'. [ 518.443267][T22880] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4224'. [ 518.676215][T22899] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4233'. [ 518.966122][T22911] netlink: 'syz.3.4235': attribute type 13 has an invalid length. [ 519.025826][T22911] hsr0: left promiscuous mode [ 519.192356][T22923] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4240'. [ 519.326967][T22929] xt_hashlimit: size too large, truncated to 1048576 [ 519.484603][T22933] netlink: 'syz.1.4242': attribute type 8 has an invalid length. [ 519.494765][T22935] netlink: 'syz.2.4243': attribute type 39 has an invalid length. [ 520.302354][T22983] tipc: Enabling of bearer rejected, failed to enable media [ 520.350280][T22983] netlink: 'syz.3.4258': attribute type 15 has an invalid length. [ 520.370365][T22983] netlink: 'syz.3.4258': attribute type 25 has an invalid length. [ 520.403743][T22988] netlink: 'syz.3.4258': attribute type 4 has an invalid length. [ 520.429095][T22988] .`: renamed from bond0 (while UP) [ 520.533334][T22995] netlink: 'syz.0.4261': attribute type 1 has an invalid length. [ 520.601039][T22995] bond2: entered promiscuous mode [ 520.619654][T22995] bond2: entered allmulticast mode [ 520.640309][T22995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 520.648178][T22991] netlink: 'syz.3.4260': attribute type 62 has an invalid length. [ 521.001647][T23021] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 521.399244][T23045] x_tables: duplicate underflow at hook 3 [ 521.437093][T23046] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20001 [ 521.548904][T23053] nr0: tun_chr_ioctl cmd 1074025677 [ 521.558891][T23053] nr0: linktype set to 774 [ 521.650216][T23063] openvswitch: netlink: EtherType 50a is less than min 600 [ 521.799438][T23067] sctp: [Deprecated]: syz.0.4279 (pid 23067) Use of int in max_burst socket option. [ 521.799438][T23067] Use struct sctp_assoc_value instead [ 523.054375][T23112] xt_TCPMSS: Only works on TCP SYN packets [ 523.116502][T23107] bond4 (unregistering): Released all slaves [ 523.171523][T23115] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 523.201172][T23118] validate_nla: 6 callbacks suppressed [ 523.201190][T23118] netlink: 'syz.0.4293': attribute type 4 has an invalid length. [ 523.259734][T23117] netlink: 'syz.0.4293': attribute type 4 has an invalid length. [ 523.289148][T23114] syzkaller1: entered promiscuous mode [ 523.301308][T23114] syzkaller1: entered allmulticast mode [ 523.535917][T23134] 8021q: VLANs not supported on wg0 [ 523.627892][T23139] __nla_validate_parse: 14 callbacks suppressed [ 523.627911][T23139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'. [ 523.645807][T23139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'. [ 523.752818][T23146] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4301'. [ 523.769730][T23146] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4301'. [ 523.781527][T23146] IPVS: set_ctl: invalid protocol: 12 10.1.1.5:20004 [ 523.991500][T23159] ip6t_srh: unknown srh match flags 4000 [ 524.021339][T23161] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4305'. [ 524.077275][T23168] netlink: 'syz.3.4306': attribute type 1 has an invalid length. [ 524.103133][T23171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4307'. [ 524.129497][T23169] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4306'. [ 524.163507][T23168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4306'. [ 524.228960][ T7456] IPVS: starting estimator thread 0... [ 524.234766][T23168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.334147][T23182] IPVS: using max 31 ests per chain, 74400 per kthread [ 524.496391][T23190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4311'. [ 524.550969][T23199] netlink: 'syz.0.4314': attribute type 1 has an invalid length. [ 524.695782][T23208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4316'. [ 524.809327][T23208] netlink: 'syz.2.4316': attribute type 21 has an invalid length. [ 525.092170][T23223] bridge3: port 1(vlan0) entered blocking state [ 525.105705][T23223] bridge3: port 1(vlan0) entered disabled state [ 525.125577][T23223] vlan0: entered allmulticast mode [ 525.153429][T23223] bridge3: entered allmulticast mode [ 525.178736][T23223] vlan0: left allmulticast mode [ 525.198687][T23223] bridge3: left allmulticast mode [ 525.615819][T23241] bond0: (slave bond_slave_0): Releasing backup interface [ 525.670104][T23241] bond0: (slave bond_slave_1): Releasing backup interface [ 525.773173][T23241] team0: Port device team_slave_0 removed [ 525.808008][T23259] xt_TCPMSS: Only works on TCP SYN packets [ 525.822089][T23241] team0: Port device team_slave_1 removed [ 525.846507][T23241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.875264][T23241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.231320][T23241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.256766][T23241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.281983][T23241] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 526.801180][T23293] dvmrp1: entered allmulticast mode [ 526.816590][T23293] dvmrp1: left allmulticast mode [ 526.877377][T23300] x_tables: duplicate underflow at hook 2 [ 526.927456][T23303] tun0: tun_chr_ioctl cmd 1074025675 [ 526.967119][T23303] tun0: persist enabled [ 527.042390][T23307] tun0: tun_chr_ioctl cmd 1074025675 [ 527.054069][T23307] tun0: persist disabled [ 527.159808][T23309] syzkaller0: entered promiscuous mode [ 527.610931][T23327] netlink: 'syz.4.4345': attribute type 6 has an invalid length. [ 529.055815][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 529.902519][T23334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.916276][T23327] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^&J?=\l[[i5` [ 529.982389][T23329] __nla_validate_parse: 16 callbacks suppressed [ 529.982407][T23329] netlink: 840 bytes leftover after parsing attributes in process `syz.4.4345'. [ 530.339950][T23369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4354'. [ 530.463228][T23379] netlink: 'syz.2.4356': attribute type 1 has an invalid length. [ 530.525097][T23379] netlink: 'syz.2.4356': attribute type 1 has an invalid length. [ 530.533095][T23379] netlink: 'syz.2.4356': attribute type 2 has an invalid length. [ 530.542036][T23379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4356'. [ 530.551194][T23386] bond2: left promiscuous mode [ 530.556250][T23386] bond2: left allmulticast mode [ 530.557209][T23379] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4356'. [ 533.109561][T23349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 533.696791][T23426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4369'. [ 533.707781][T23426] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 533.748643][T23432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4371'. [ 533.909248][T23438] tap0: tun_chr_ioctl cmd 2147767521 [ 533.927095][T23444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4372'. [ 534.218013][T23436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4372'. [ 534.281010][T23444] bond4 (unregistering): Released all slaves [ 534.316226][T23460] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4372'. [ 534.819466][T23478] syzkaller0: entered promiscuous mode [ 534.827434][T23478] syzkaller0: entered allmulticast mode [ 535.170471][T23514] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4388'. [ 535.344322][T23526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4391'. [ 535.365243][T23525] syzkaller0: entered promiscuous mode [ 535.381219][T23525] syzkaller0: entered allmulticast mode [ 535.720590][T23537] xt_hashlimit: size too large, truncated to 1048576 [ 535.902076][T23548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4396'. [ 536.182479][T23561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4400'. [ 536.193037][T23559] syzkaller0: entered promiscuous mode [ 536.206787][T23559] syzkaller0: entered allmulticast mode [ 536.797656][T23593] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4409'. [ 537.221167][T23611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4414'. [ 539.042476][T23593] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4409'. [ 539.283000][T23622] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4419'. [ 539.291046][ T5146] Bluetooth: hci4: command 0x0406 tx timeout [ 539.333383][T23625] tipc: Enabling of bearer rejected, already enabled [ 539.363452][T23627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4419'. [ 539.615523][T23644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.635985][T23632] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4418'. [ 539.943300][T23661] netlink: 'syz.0.4427': attribute type 1 has an invalid length. [ 540.004282][T23661] bond3: entered promiscuous mode [ 540.009855][T23661] 8021q: adding VLAN 0 to HW filter on device bond3 [ 540.057129][T23666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 540.064602][T23666] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 540.075410][T23666] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 540.091052][T23666] bond3: (slave wireguard0): making interface the new active one [ 540.100841][T23666] wireguard0: entered promiscuous mode [ 540.111076][T23666] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 540.397927][T23685] bridge_slave_0: default FDB implementation only supports local addresses [ 540.559757][T23690] netlink: 'syz.3.4434': attribute type 2 has an invalid length. [ 540.574582][T23693] syz_tun: entered allmulticast mode [ 540.709966][T23700] __nla_validate_parse: 1 callbacks suppressed [ 540.709985][T23700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4438'. [ 540.961896][T23706] syzkaller0: entered promiscuous mode [ 540.984399][T23706] syzkaller0: entered allmulticast mode [ 541.024360][T23706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4440'. [ 541.180420][T23727] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4444'. [ 543.840536][T23741] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 543.862099][T23741] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 544.249234][T23735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 544.618891][T23798] lo speed is unknown, defaulting to 1000 [ 544.635536][T23798] lo speed is unknown, defaulting to 1000 [ 544.652954][T23798] lo speed is unknown, defaulting to 1000 [ 544.692506][T23798] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 544.783192][T23798] lo speed is unknown, defaulting to 1000 [ 544.802230][T23798] lo speed is unknown, defaulting to 1000 [ 544.826427][T23798] lo speed is unknown, defaulting to 1000 [ 544.838092][T23798] lo speed is unknown, defaulting to 1000 [ 544.847542][T23798] lo speed is unknown, defaulting to 1000 [ 544.855728][T23798] lo speed is unknown, defaulting to 1000 [ 544.862507][T23798] lo speed is unknown, defaulting to 1000 [ 544.879478][T23798] lo speed is unknown, defaulting to 1000 [ 545.013361][T23803] sctp: [Deprecated]: syz.2.4462 (pid 23803) Use of int in maxseg socket option. [ 545.013361][T23803] Use struct sctp_assoc_value instead [ 545.029961][T23803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4462'. [ 545.181730][T23805] syzkaller0: entered promiscuous mode [ 545.197885][T23805] syzkaller0: entered allmulticast mode [ 545.269337][T23818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4466'. [ 545.381323][T23818] netlink: 'syz.4.4466': attribute type 4 has an invalid length. [ 545.461960][T23818] erspan0: entered promiscuous mode [ 545.937128][T23859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4479'. [ 546.040931][T23864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4479'. [ 546.072223][ T9531] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.082650][T23864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4479'. [ 546.098738][ T9531] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.122172][ T9531] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.152499][ T9531] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.230744][T23878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4484'. [ 546.650179][T23897] lo speed is unknown, defaulting to 1000 [ 546.814714][T23912] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 546.832603][T23912] bond5: (slave lo): Enslaving as an active interface with an up link [ 546.843484][T23912] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 547.012390][T23928] netlink: 'syz.2.4494': attribute type 1 has an invalid length. [ 547.030978][T23928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4494'. [ 547.057032][T23931] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4493'. [ 547.059384][T23928] netlink: 'syz.2.4494': attribute type 1 has an invalid length. [ 547.098135][T23931] dvmrp1: entered allmulticast mode [ 547.111620][T23935] netlink: 'syz.3.4495': attribute type 10 has an invalid length. [ 547.123607][T23931] dvmrp1: left allmulticast mode [ 547.151936][T23928] syzkaller1: entered promiscuous mode [ 547.164080][T23928] syzkaller1: entered allmulticast mode [ 547.213185][T23931] syzkaller1: entered promiscuous mode [ 547.230398][T23931] syzkaller1: entered allmulticast mode [ 547.306626][T23941] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 547.347234][T23941] bond6 (unregistering): Released all slaves [ 547.689913][T23961] syzkaller0: entered promiscuous mode [ 547.716660][T23961] syzkaller0: entered allmulticast mode [ 547.795107][T23968] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4502'. [ 547.853861][T23970] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 547.884108][T23971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4504'. [ 548.019549][T23970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.113378][T23986] netlink: 'syz.4.4507': attribute type 6 has an invalid length. [ 548.129067][T23986] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4507'. [ 548.146835][T23983] netlink: 'syz.2.4506': attribute type 21 has an invalid length. [ 548.155075][T23983] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4506'. [ 548.165490][T23983] netlink: 'syz.2.4506': attribute type 4 has an invalid length. [ 548.182217][T23983] netlink: 'syz.2.4506': attribute type 5 has an invalid length. [ 548.251336][T23993] bond8: option all_slaves_active: invalid value (5) [ 548.259852][T23993] bond8 (unregistering): Released all slaves [ 551.226304][T24048] syzkaller0: entered promiscuous mode [ 551.232030][T24048] syzkaller0: entered allmulticast mode [ 554.132893][T24092] lo: Caught tx_queue_len zero misconfig [ 554.257553][T24102] __nla_validate_parse: 3 callbacks suppressed [ 554.257573][T24102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4532'. [ 554.278187][T24101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4533'. [ 554.502146][T24113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.506993][T24112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.728599][T24129] x_tables: unsorted entry at hook 2 [ 554.755096][T24134] netlink: 'syz.1.4544': attribute type 13 has an invalid length. [ 554.763914][T24134] netlink: 'syz.1.4544': attribute type 17 has an invalid length. [ 554.783541][T24125] lo speed is unknown, defaulting to 1000 [ 554.829364][T24139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4545'. [ 554.861659][T24140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4544'. [ 554.931513][T24134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.106217][T24142] block nbd0: NBD_DISCONNECT [ 555.142374][T24157] netlink: 1100 bytes leftover after parsing attributes in process `syz.4.4550'. [ 555.156558][T24142] syz_tun: left allmulticast mode [ 555.175331][T24142] siw: device registration error -23 [ 555.358949][T24175] netlink: 'syz.0.4554': attribute type 10 has an invalid length. [ 555.582925][T24187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.606901][T24190] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4557'. [ 555.629523][T24187] netlink: 'syz.2.4558': attribute type 1 has an invalid length. [ 555.634421][T24192] "syz.3.4559" (24192) uses obsolete ecb(arc4) skcipher [ 555.682031][T24196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4560'. [ 555.792523][T24197] bond4: (slave bridge8): Enslaving as a backup interface with an up link [ 555.877230][T24187] macvlan2: entered promiscuous mode [ 555.895308][T24187] macvlan2: entered allmulticast mode [ 555.918549][T24187] bond4: entered promiscuous mode [ 555.934195][T24187] bridge8: entered promiscuous mode [ 555.949223][T24187] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 555.957864][T24187] bond4: left promiscuous mode [ 555.962694][T24187] bridge8: left promiscuous mode [ 556.128965][T24219] netlink: 'syz.1.4564': attribute type 15 has an invalid length. [ 556.199508][T24224] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20000 [ 556.285695][T24224] lo speed is unknown, defaulting to 1000 [ 556.377888][T24236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4569'. [ 556.420911][T24236] netlink: 'syz.2.4569': attribute type 14 has an invalid length. [ 556.444339][T24236] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4569'. [ 556.481878][T24240] netlink: 'syz.2.4569': attribute type 3 has an invalid length. [ 556.493223][T24240] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4569'. [ 556.673220][T24252] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 556.766559][T24247] lo speed is unknown, defaulting to 1000 [ 556.873355][T24263] netlink: 'syz.1.4577': attribute type 2 has an invalid length. [ 556.890573][T24263] netlink: 'syz.1.4577': attribute type 1 has an invalid length. [ 557.336714][T24274] syzkaller0: entered promiscuous mode [ 557.344864][T24274] syzkaller0: entered allmulticast mode [ 557.983252][T24306] lo speed is unknown, defaulting to 1000 [ 558.051245][T24310] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 558.356840][T24341] IPVS: sh: FWM 3 0x00000003 - no destination available [ 558.564600][T24339] lo speed is unknown, defaulting to 1000 [ 559.510864][T24386] batman_adv: batadv0: Adding interface: dummy0 [ 559.519933][T24385] netlink: 'syz.3.4608': attribute type 1 has an invalid length. [ 559.541873][T24386] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.565807][T24385] __nla_validate_parse: 9 callbacks suppressed [ 559.565824][T24385] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4608'. [ 559.599972][T24386] batman_adv: batadv0: Interface activated: dummy0 [ 559.669502][T24388] batadv0: mtu less than device minimum [ 559.688006][T24388] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.701587][T24388] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.713273][T24388] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.726646][T24388] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.738371][T24388] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.750023][T24388] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.761777][T24388] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.773490][T24388] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.785228][T24388] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 560.039306][T24408] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4613'. [ 560.100977][T24413] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4613'. [ 560.101676][T24412] xt_socket: unknown flags 0x4 [ 560.143777][T24415] SET target dimension over the limit! [ 560.183296][T24415] netlink: 'syz.0.4617': attribute type 1 has an invalid length. [ 560.225616][T24415] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.4617'. [ 560.253346][T24419] ip6_vti0: Caught tx_queue_len zero misconfig [ 560.285606][T24423] netlink: 'syz.2.4619': attribute type 2 has an invalid length. [ 560.317297][T24423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4619'. [ 560.376077][T24429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4619'. [ 560.389604][T24427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4620'. [ 560.423766][T24423] team1: entered promiscuous mode [ 560.435337][T24423] team1: entered allmulticast mode [ 560.441381][T24423] 8021q: adding VLAN 0 to HW filter on device team1 [ 560.459748][T24426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4621'. [ 560.563653][T24437] syzkaller1: entered promiscuous mode [ 560.570259][T24437] syzkaller1: entered allmulticast mode [ 561.255006][T24463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4631'. [ 561.442955][T24472] tipc: Enabled bearer , priority 0 [ 561.456355][T24471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4634'. [ 561.470023][T24472] syzkaller0: entered promiscuous mode [ 561.479280][T24472] syzkaller0: entered allmulticast mode [ 561.493712][T24471] netlink: 'syz.3.4634': attribute type 1 has an invalid length. [ 561.508340][T24476] tipc: Enabled bearer , priority 0 [ 561.526383][T24476] syzkaller0: entered promiscuous mode [ 561.532157][T24476] syzkaller0: entered allmulticast mode [ 561.540014][T24472] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 561.557031][T24472] netem: change failed [ 561.588903][T24472] tipc: Resetting bearer [ 561.608912][T24476] tipc: Resetting bearer [ 561.630429][T24470] tipc: Resetting bearer [ 561.677019][T24470] tipc: Disabling bearer [ 561.699231][T24475] tipc: Resetting bearer [ 561.722389][T24475] tipc: Disabling bearer [ 561.967062][T24495] netlink: 'syz.2.4641': attribute type 3 has an invalid length. [ 561.981479][T24495] netlink: 'syz.2.4641': attribute type 3 has an invalid length. [ 562.050333][T24505] netlink: 'syz.1.4644': attribute type 1 has an invalid length. [ 562.543249][T24534] lo speed is unknown, defaulting to 1000 [ 563.240667][T24571] netlink: 'syz.3.4665': attribute type 5 has an invalid length. [ 563.312174][T24577] netlink: 'syz.3.4665': attribute type 5 has an invalid length. [ 563.455190][T24587] bond4: entered allmulticast mode [ 563.460965][T24587] 8021q: adding VLAN 0 to HW filter on device bond4 [ 564.886000][T21979] Bluetooth: hci5: command 0x0406 tx timeout [ 566.589038][T24613] __nla_validate_parse: 8 callbacks suppressed [ 566.589057][T24613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4675'. [ 566.611180][T24613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4675'. [ 566.623010][T24618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4675'. [ 566.644614][T24618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4675'. [ 566.798603][T24627] lo speed is unknown, defaulting to 1000 [ 566.825812][T24633] netlink: 'syz.4.4681': attribute type 1 has an invalid length. [ 566.867264][T24633] bond8: entered promiscuous mode [ 566.872391][T24633] bond8: entered allmulticast mode [ 566.878041][T24633] 8021q: adding VLAN 0 to HW filter on device bond8 [ 566.951468][T24633] tipc: Enabling of bearer rejected, already enabled [ 566.995673][T24638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.085586][T24644] SET target dimension over the limit! [ 567.138165][T24647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4686'. [ 567.160168][T24649] netlink: 5440 bytes leftover after parsing attributes in process `syz.1.4687'. [ 567.247673][T24647] team1: entered promiscuous mode [ 567.253801][T24647] team1: entered allmulticast mode [ 567.260130][T24647] 8021q: adding VLAN 0 to HW filter on device team1 [ 567.263886][T24654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4686'. [ 567.370965][T24654] team2: entered promiscuous mode [ 567.384412][T24654] team2: entered allmulticast mode [ 567.403296][T24654] 8021q: adding VLAN 0 to HW filter on device team2 [ 567.489125][T24658] netlink: 'syz.2.4690': attribute type 1 has an invalid length. [ 567.540244][T24658] bond5: entered promiscuous mode [ 567.559817][T24658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 567.647315][T24664] 8021q: adding VLAN 0 to HW filter on device bond5 [ 567.673157][T24664] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 567.710406][T24664] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 567.737592][T24664] bond5: (slave wireguard0): making interface the new active one [ 567.748689][T24664] wireguard0: entered promiscuous mode [ 567.760286][T24664] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 567.788451][T24658] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 567.815819][T24658] bond5: (slave wireguard1): Enslaving as a backup interface with an up link [ 567.952533][T24692] nbd: must specify a device to reconfigure [ 567.970998][T24692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4698'. [ 567.992058][T24692] nbd: illegal input index -1113835520 [ 568.000368][T24692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4698'. [ 568.021193][T24692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4698'. [ 568.350010][T24712] netlink: 'syz.2.4704': attribute type 3 has an invalid length. [ 568.452173][T24705] lo speed is unknown, defaulting to 1000 [ 568.550937][T24721] x_tables: duplicate underflow at hook 2 [ 569.353807][T24773] lo speed is unknown, defaulting to 1000 [ 569.363629][T24768] net_ratelimit: 12 callbacks suppressed [ 569.363650][T24768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.379372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.415157][T24739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.035580][T24811] ipip1: entered promiscuous mode [ 570.890197][T24854] lo speed is unknown, defaulting to 1000 [ 571.029886][T24862] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 571.052435][T24862] bond7 (unregistering): Released all slaves [ 571.070042][T24872] netlink: 'syz.3.4733': attribute type 1 has an invalid length. [ 571.218356][T24833] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 571.427946][T24884] tipc: Trying to set illegal importance in message [ 572.278888][T24877] lec:lec_atm_close: lec0: Shut down! [ 573.389526][T24904] 8021q: VLANs not supported on wg0 [ 573.590876][T24945] xt_connbytes: Forcing CT accounting to be enabled [ 573.629412][T24938] xt_connbytes: Forcing CT accounting to be enabled [ 573.832343][T24952] tipc: Started in network mode [ 573.850161][T24952] tipc: Node identity ce57b0d0518e, cluster identity 4711 [ 573.885606][T24952] tipc: Enabled bearer , priority 0 [ 573.910109][T24956] syzkaller0: entered promiscuous mode [ 573.931248][T24955] __nla_validate_parse: 9 callbacks suppressed [ 573.931264][T24955] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4749'. [ 573.952669][T24956] syzkaller0: entered allmulticast mode [ 574.025198][ T5894] lec:lec_start_xmit: lec0:No lecd attached [ 574.112810][T24967] tipc: Resetting bearer [ 574.140983][T24950] tipc: Resetting bearer [ 574.150204][T24974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4753'. [ 574.204843][T24950] tipc: Disabling bearer [ 574.227773][T24974] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 574.248319][T24978] batadv1: entered promiscuous mode [ 574.283265][T24983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4755'. [ 574.290609][T24978] batadv1: entered allmulticast mode [ 574.381510][T24983] bond0: entered promiscuous mode [ 574.390126][T24983] bond0: left promiscuous mode [ 574.422606][T24987] bridge8: entered promiscuous mode [ 574.443139][T24987] bridge8: entered allmulticast mode [ 574.463327][T24986] sch_fq: defrate 53322 ignored. [ 574.588230][T25002] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4760'. [ 574.723004][T25015] IPv6: addrconf: prefix option has invalid lifetime [ 574.765036][T25015] IPv6: addrconf: prefix option has invalid lifetime [ 574.801883][T25015] IPv6: addrconf: prefix option has invalid lifetime [ 574.842496][T25015] IPv6: addrconf: prefix option has invalid lifetime [ 574.863424][T25026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4765'. [ 574.875966][T25015] IPv6: addrconf: prefix option has invalid lifetime [ 574.895470][T25015] IPv6: addrconf: prefix option has invalid lifetime [ 574.923311][T25015] IPv6: addrconf: prefix option has invalid lifetime [ 574.941171][T25015] IPv6: addrconf: prefix option has invalid lifetime [ 574.942366][T25029] netlink: 'syz.1.4766': attribute type 1 has an invalid length. [ 574.963653][T25015] IPv6: addrconf: prefix option has invalid lifetime [ 574.996401][T25015] IPv6: addrconf: prefix option has invalid lifetime [ 575.143359][T25029] sctp: [Deprecated]: syz.1.4766 (pid 25029) Use of int in maxseg socket option. [ 575.143359][T25029] Use struct sctp_assoc_value instead [ 575.215197][T25033] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 575.269995][T25041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4766'. [ 575.299115][T25033] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 575.462806][T25041] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 575.496241][T25054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4771'. [ 575.505816][T25029] macvlan3: entered promiscuous mode [ 575.505842][T25029] macvlan3: entered allmulticast mode [ 575.507840][T25029] bond5: entered promiscuous mode [ 575.525255][T25029] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 575.533495][T25029] bond5: left promiscuous mode [ 575.572487][T25032] lo speed is unknown, defaulting to 1000 [ 575.722629][T25069] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4773'. [ 575.900404][T25081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4776'. [ 575.966918][T25085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4778'. [ 576.037561][T25083] batadv_slave_1: entered promiscuous mode [ 576.064956][T25087] batadv_slave_1 (unregistering): left promiscuous mode [ 576.097117][T25087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.384983][T25101] netlink: 'syz.0.4781': attribute type 14 has an invalid length. [ 576.399296][ T7456] IPVS: starting estimator thread 0... [ 576.414801][T25101] netlink: 'syz.0.4781': attribute type 12 has an invalid length. [ 576.534172][T25104] IPVS: using max 31 ests per chain, 74400 per kthread [ 576.570279][T25101] netlink: 'syz.0.4781': attribute type 14 has an invalid length. [ 576.593219][T25101] netlink: 'syz.0.4781': attribute type 12 has an invalid length. [ 577.413038][T25167] netlink: 'syz.2.4799': attribute type 4 has an invalid length. [ 577.459834][T25170] netlink: 'syz.2.4799': attribute type 4 has an invalid length. [ 577.570848][T25166] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.580941][T25166] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.598717][T25175] netlink: 'syz.1.4802': attribute type 7 has an invalid length. [ 577.614390][T25175] netlink: 'syz.1.4802': attribute type 8 has an invalid length. [ 577.844339][T25166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.136552][T25172] tipc: Enabling of bearer rejected, failed to enable media [ 578.176577][T25175] bridge0: entered promiscuous mode [ 578.192794][T25175] ip6gretap0: entered promiscuous mode [ 578.215668][T25175] bridge0: left promiscuous mode [ 578.227877][T25175] ip6gretap0: left promiscuous mode [ 578.263337][ T9544] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.288107][ T9544] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.306517][T25160] lo speed is unknown, defaulting to 1000 [ 578.312532][ T9544] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.334427][ T9544] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.344234][ T7437] lo speed is unknown, defaulting to 1000 [ 578.363598][ T7437] syz2: Port: 1 Link ACTIVE [ 578.425925][T25159] lo speed is unknown, defaulting to 1000 [ 578.462880][ T9544] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.491581][ T9544] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.519114][ T9544] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.554922][ T9544] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.763972][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 579.774802][ C1] lec:lec_tx_timeout: lec0 [ 579.779989][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 579.810476][T25279] SET target dimension over the limit! [ 579.821779][T25278] __nla_validate_parse: 16 callbacks suppressed [ 579.821797][T25278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4819'. [ 579.877223][T25281] IPVS: length: 528 != 1256 [ 579.969425][T25257] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4819'. [ 580.212176][T25269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4821'. [ 580.224630][T25277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4821'. [ 580.587262][T25319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4829'. [ 580.596617][T25319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4829'. [ 580.608418][T25319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4829'. [ 580.651185][T25309] bond7: option arp_all_targets: invalid value (129) [ 580.668431][T25323] netlink: 'syz.2.4830': attribute type 3 has an invalid length. [ 580.678873][T25323] netlink: 'syz.2.4830': attribute type 1 has an invalid length. [ 580.687284][T25323] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4830'. [ 580.702428][T25309] bond7 (unregistering): Released all slaves [ 580.712400][T25323] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4830'. [ 580.779558][T25319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4829'. [ 580.880520][T25321] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 581.097924][T25334] lo speed is unknown, defaulting to 1000 [ 581.263082][T25354] ip6tnl0: Caught tx_queue_len zero misconfig [ 581.770523][T25375] veth7: entered promiscuous mode [ 581.800504][T25374] veth9: entered promiscuous mode [ 582.023499][T25386] netlink: 'syz.2.4842': attribute type 4 has an invalid length. [ 582.080402][T25392] sctp: [Deprecated]: syz.4.4844 (pid 25392) Use of int in max_burst socket option. [ 582.080402][T25392] Use struct sctp_assoc_value instead [ 582.083184][T25391] net_ratelimit: 24 callbacks suppressed [ 582.083202][T25391] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 582.171480][T25397] netlink: Unknown conntrack attr (0) [ 582.235039][T25400] netlink: 'syz.4.4849': attribute type 4 has an invalid length. [ 582.264446][T25400] netlink: 'syz.4.4849': attribute type 4 has an invalid length. [ 582.295769][T25400] netlink: 'syz.4.4849': attribute type 2 has an invalid length. [ 582.304790][T25400] netlink: 'syz.4.4849': attribute type 1 has an invalid length. [ 582.497515][T25417] netlink: 'syz.4.4849': attribute type 2 has an invalid length. [ 582.843794][T25400] veth0_macvtap: left allmulticast mode [ 583.105111][T25426] macsec1: entered allmulticast mode [ 583.115812][T25426] macsec0: entered allmulticast mode [ 583.135010][ T9542] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.174281][ T9542] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.211477][ T9542] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.247058][ T9542] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.294368][ T9542] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.321778][ T9542] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.373347][T25447] netlink: 'syz.4.4860': attribute type 1 has an invalid length. [ 583.418818][ T9542] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.447937][ T9542] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.601701][T25447] bond9: entered promiscuous mode [ 583.632048][T25447] 8021q: adding VLAN 0 to HW filter on device bond9 [ 583.677467][T25460] netlink: 'syz.2.4863': attribute type 1 has an invalid length. [ 583.876831][T25460] 8021q: adding VLAN 0 to HW filter on device bond6 [ 583.950677][T25466] bond6: (slave gretap1): making interface the new active one [ 583.984759][T25466] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 584.105779][T25467] lo speed is unknown, defaulting to 1000 [ 584.235524][T25481] gretap1: entered promiscuous mode [ 584.255461][T25481] gretap1: entered allmulticast mode [ 584.362541][ T982] lo speed is unknown, defaulting to 1000 [ 584.378898][ T982] syz2: Port: 1 Link DOWN [ 584.682442][T25519] xt_hashlimit: overflow, rate too high: 0 [ 584.793961][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 584.802043][ C1] lec:lec_tx_timeout: lec0 [ 584.808178][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 584.879688][T25518] __nla_validate_parse: 18 callbacks suppressed [ 584.879706][T25518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4873'. [ 584.965656][T25518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4873'. [ 585.053312][T25525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4876'. [ 585.126423][ T9544] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.150439][ T9544] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.169096][ T9544] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.189009][ T9544] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.308956][T25547] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 585.325440][T25541] lo speed is unknown, defaulting to 1000 [ 585.335081][T25547] team0: Device wg1 is of different type [ 585.768210][T25562] xt_CT: You must specify a L4 protocol and not use inversions on it [ 585.858605][T25567] syzkaller0: refused to change device tx_queue_len [ 586.081124][T25583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4892'. [ 586.276672][T25599] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 586.355647][T25595] syzkaller0: entered promiscuous mode [ 586.370968][T25603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4899'. [ 586.380304][T25595] syzkaller0: entered allmulticast mode [ 586.394926][T25606] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4900'. [ 586.433108][T25607] syzkaller1: entered allmulticast mode [ 586.560230][T25612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.591087][T25615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 586.609563][T25612] syzkaller0: entered promiscuous mode [ 586.621077][T25612] syzkaller0: entered allmulticast mode [ 586.973464][T25640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4911'. [ 587.470306][T25654] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 587.624719][T25650] lo speed is unknown, defaulting to 1000 [ 587.641365][T25675] lo speed is unknown, defaulting to 1000 [ 587.661437][T25684] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4918'. [ 587.730188][T25684] validate_nla: 2 callbacks suppressed [ 587.730206][T25684] netlink: 'syz.0.4918': attribute type 3 has an invalid length. [ 587.975639][T25698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4922'. [ 587.996920][T25698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4922'. [ 588.009340][T25696] team0: No ports can be present during mode change [ 588.148533][T25696] tipc: Enabling of bearer rejected, failed to enable media [ 588.265186][T25705] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 588.369785][T25715] openvswitch: netlink: IP tunnel TTL not specified. [ 588.476226][T25718] syzkaller0: entered promiscuous mode [ 588.494137][T25718] syzkaller0: entered allmulticast mode [ 588.568661][T25728] 8021q: VLANs not supported on caif0 [ 588.668435][T25730] lo speed is unknown, defaulting to 1000 [ 588.780342][T25753] bond0: (slave macvlan0): Opening slave failed [ 588.865781][T25755] vlan0: entered promiscuous mode [ 588.872374][T25755] .`: entered promiscuous mode [ 588.880568][T25755] bond_slave_0: entered promiscuous mode [ 588.887016][T25755] bond_slave_1: entered promiscuous mode [ 588.909384][ T30] audit: type=1804 audit(1776666163.997:7): pid=25761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4936" name="/newroot/375/cgroup.controllers" dev="tmpfs" ino=1945 res=1 errno=0 [ 588.939597][T25763] openvswitch: netlink: Message has 144 unknown bytes. [ 588.954968][ T30] audit: type=1800 audit(1776666163.997:8): pid=25761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4936" name="cgroup.controllers" dev="tmpfs" ino=1945 res=0 errno=0 [ 589.092323][T25767] lo speed is unknown, defaulting to 1000 [ 589.100235][T25769] netlink: 'syz.4.4938': attribute type 30 has an invalid length. [ 589.127882][T25769] netlink: 'syz.4.4938': attribute type 30 has an invalid length. [ 589.157202][ T9544] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.174147][ T9544] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.206284][ T9544] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.215819][ T9544] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.824010][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 589.832128][ C1] lec:lec_tx_timeout: lec0 [ 589.836837][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 590.070115][T25786] __nla_validate_parse: 5 callbacks suppressed [ 590.070133][T25786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4943'. [ 591.597790][T25737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 591.611464][T25746] netlink: 'syz.0.4933': attribute type 1 has an invalid length. [ 591.632543][T25746] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4933'. [ 591.643553][T25746] workqueue: Failed to create a rescuer kthread for wq "phy4-mac-cmds": -EINTR [ 591.869422][T25813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4945'. [ 592.121225][T25834] batadv_slave_1: entered promiscuous mode [ 592.181779][T25818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4949'. [ 592.237544][T25818] batadv_slave_1 (unregistering): left promiscuous mode [ 593.086508][T25878] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 593.243164][T25885] netlink: 'syz.2.4961': attribute type 13 has an invalid length. [ 593.277069][T25885] netlink: 'syz.2.4961': attribute type 17 has an invalid length. [ 593.301728][T25891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4961'. [ 593.312614][T25888] sctp: [Deprecated]: syz.3.4963 (pid 25888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 593.312614][T25888] Use struct sctp_sack_info instead [ 593.335167][T25889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4962'. [ 593.350906][T25888] sctp: [Deprecated]: syz.3.4963 (pid 25888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 593.350906][T25888] Use struct sctp_sack_info instead [ 593.368101][T25889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4962'. [ 593.391537][T25888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.396587][T25889] netlink: 'syz.4.4962': attribute type 20 has an invalid length. [ 593.445135][T25885] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.467583][T25885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 593.494581][ T982] lo speed is unknown, defaulting to 1000 [ 593.507091][ T982] syz2: Port: 1 Link ACTIVE [ 593.728614][T25906] netlink: 656 bytes leftover after parsing attributes in process `syz.4.4969'. [ 593.760621][T25906] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4969'. [ 593.797277][T25911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4967'. [ 593.832717][T25914] netlink: 'syz.0.4970': attribute type 64 has an invalid length. [ 593.983260][T25923] netlink: 'syz.2.4973': attribute type 28 has an invalid length. [ 594.005696][T25923] netlink: 'syz.2.4973': attribute type 3 has an invalid length. [ 594.231681][T25932] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 594.299287][T25938] netlink: 'syz.2.4976': attribute type 1 has an invalid length. [ 594.844019][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 594.852129][ C1] lec:lec_tx_timeout: lec0 [ 594.857587][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 595.397589][T25972] netlink: 'syz.0.4985': attribute type 1 has an invalid length. [ 595.417223][T25972] __nla_validate_parse: 6 callbacks suppressed [ 595.417244][T25972] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4985'. [ 595.498664][T25973] netlink: 'syz.3.4984': attribute type 1 has an invalid length. [ 595.581328][T25970] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4984'. [ 596.280457][ T7456] lo speed is unknown, defaulting to 1000 [ 596.286681][T25992] : renamed from wg2 [ 596.291272][ T7456] syz2: Port: 1 Link DOWN [ 596.679166][T26003] veth0_to_batadv: entered promiscuous mode [ 596.691774][T26003] veth0_to_batadv: entered allmulticast mode [ 596.780912][T26003] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 596.792009][T26003] CPU: 0 UID: 0 PID: 26003 Comm: syz.0.4993 Not tainted syzkaller #0 PREEMPT(full) [ 596.792037][T26003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 596.792053][T26003] Call Trace: [ 596.792060][T26003] [ 596.792070][T26003] dump_stack_lvl+0xe8/0x150 [ 596.792116][T26003] sysfs_warn_dup+0x8e/0xa0 [ 596.792143][T26003] sysfs_do_create_link_sd+0xc0/0x110 [ 596.792171][T26003] device_add_class_symlinks+0x1cf/0x240 [ 596.792201][T26003] device_add+0x475/0xb70 [ 596.792229][T26003] wiphy_register+0x1dc5/0x2dc0 [ 596.792271][T26003] ? __pfx_wiphy_register+0x10/0x10 [ 596.792294][T26003] ? __pfx_netdev_run_todo+0x10/0x10 [ 596.792314][T26003] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 596.792351][T26003] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 596.792379][T26003] ieee80211_register_hw+0x3d82/0x4a70 [ 596.792420][T26003] ? ieee80211_register_hw+0x1981/0x4a70 [ 596.792470][T26003] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 596.792499][T26003] ? __asan_memset+0x22/0x50 [ 596.792526][T26003] ? __hrtimer_setup+0x1b7/0x260 [ 596.792553][T26003] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 596.792588][T26003] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 596.792654][T26003] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 596.792681][T26003] ? kstrndup+0xbf/0x160 [ 596.792713][T26003] hwsim_new_radio_nl+0xf6a/0x1c00 [ 596.792763][T26003] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 596.792801][T26003] ? rcu_is_watching+0x15/0xb0 [ 596.792829][T26003] ? trace_kmalloc+0x2a/0xf0 [ 596.792862][T26003] ? __nla_parse+0x40/0x60 [ 596.792886][T26003] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 596.792909][T26003] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 596.792941][T26003] genl_family_rcv_msg_doit+0x22a/0x330 [ 596.792971][T26003] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 596.793008][T26003] ? bpf_lsm_capable+0x9/0x20 [ 596.793029][T26003] ? security_capable+0x7e/0x2c0 [ 596.793061][T26003] genl_rcv_msg+0x61c/0x7a0 [ 596.793088][T26003] ? __pfx_genl_rcv_msg+0x10/0x10 [ 596.793109][T26003] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 596.793152][T26003] netlink_rcv_skb+0x232/0x4b0 [ 596.793180][T26003] ? __pfx_genl_rcv_msg+0x10/0x10 [ 596.793203][T26003] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 596.793249][T26003] ? down_read+0x270/0x2e0 [ 596.793273][T26003] ? genl_rcv+0xd/0x40 [ 596.793295][T26003] genl_rcv+0x28/0x40 [ 596.793313][T26003] netlink_unicast+0x75c/0x8e0 [ 596.793350][T26003] netlink_sendmsg+0x813/0xb40 [ 596.793386][T26003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.793418][T26003] ? aa_sock_msg_perm+0xf1/0x1b0 [ 596.793446][T26003] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 596.793476][T26003] ____sys_sendmsg+0x972/0x9f0 [ 596.793506][T26003] ? __might_fault+0xaf/0x130 [ 596.793541][T26003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.793581][T26003] ? import_iovec+0x73/0xa0 [ 596.793614][T26003] ___sys_sendmsg+0x2a5/0x360 [ 596.793643][T26003] ? __lock_acquire+0x6b5/0x2cf0 [ 596.793674][T26003] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.793711][T26003] ? futex_wake+0x4ac/0x580 [ 596.793762][T26003] ? __fget_files+0x2a/0x420 [ 596.793786][T26003] ? __fget_files+0x3a0/0x420 [ 596.793822][T26003] __x64_sys_sendmsg+0x1bd/0x2a0 [ 596.793851][T26003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 596.793887][T26003] ? rcu_is_watching+0x15/0xb0 [ 596.793921][T26003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.793942][T26003] do_syscall_64+0x15f/0xf80 [ 596.793963][T26003] ? trace_irq_disable+0x3b/0x140 [ 596.793983][T26003] ? clear_bhb_loop+0x40/0x90 [ 596.794005][T26003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.794033][T26003] RIP: 0033:0x7f37b939c819 [ 596.794052][T26003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.794069][T26003] RSP: 002b:00007f37ba328028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.794091][T26003] RAX: ffffffffffffffda RBX: 00007f37b9615fa0 RCX: 00007f37b939c819 [ 596.794104][T26003] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a [ 596.794117][T26003] RBP: 00007f37b9432c91 R08: 0000000000000000 R09: 0000000000000000 [ 596.794129][T26003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.794141][T26003] R13: 00007f37b9616038 R14: 00007f37b9615fa0 R15: 00007fffc710f0d8 [ 596.794173][T26003] [ 597.835758][T26023] macsec2: entered allmulticast mode [ 597.855675][T26023] macsec0: entered allmulticast mode [ 598.074150][ T5146] block nbd0: Receive control failed (result -32) [ 598.074646][T21979] block nbd0: Receive control failed (result -32) [ 598.154506][T20734] block nbd0: NBD_DISCONNECT [ 598.183707][T20734] block nbd0: Send disconnect failed -32 [ 598.241624][T20734] block nbd0: Send disconnect failed -32 [ 598.266332][T20734] block nbd0: shutting down sockets [ 598.485901][T26056] lo speed is unknown, defaulting to 1000 [ 598.630565][T20734] udevd[20734]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 598.683231][T26066] syzkaller0: entered promiscuous mode [ 598.705586][T26066] syzkaller0: entered allmulticast mode [ 598.966780][T26080] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5013'. [ 599.631949][T26112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5025'. [ 599.642164][T26111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5023'. [ 599.652064][T26109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5024'. [ 599.791591][T26119] netlink: 'syz.0.5028': attribute type 13 has an invalid length. [ 599.863994][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 599.872087][ C1] lec:lec_tx_timeout: lec0 [ 599.876718][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 600.240919][T26143] can: request_module (can-proto-5) failed. [ 600.663187][T26163] SET target dimension over the limit! [ 600.862241][T26171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5042'. [ 600.933222][T26174] netlink: 16194 bytes leftover after parsing attributes in process `syz.4.5042'. [ 600.968825][T26173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5043'. [ 601.023668][T26173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5043'. [ 601.110080][T26182] lo speed is unknown, defaulting to 1000 [ 601.119728][T26185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5046'. [ 601.132732][T26185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5046'. [ 601.291895][T26197] netlink: 'syz.4.5049': attribute type 1 has an invalid length. [ 601.306454][T26197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5049'. [ 601.320343][T26197] netlink: 'syz.4.5049': attribute type 32 has an invalid length. [ 601.328897][T26197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5049'. [ 601.473847][T26197] bond10: option coupled_control: invalid value (20) [ 601.487285][T26197] bond10 (unregistering): Released all slaves [ 601.501387][T26208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5051'. [ 601.595608][T26210] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5052'. [ 602.203701][T26250] netlink: 'syz.3.5062': attribute type 4 has an invalid length. [ 602.273738][T26252] netlink: 'syz.4.5061': attribute type 1 has an invalid length. [ 602.678802][T26273] 8021q: adding VLAN 0 to HW filter on device bond4 [ 602.712303][T26281] 8021q: adding VLAN 0 to HW filter on device bond5 [ 602.721484][T26281] bond4: (slave bond5): Enslaving as an active interface with an up link [ 602.779207][T26273] bond4 (unregistering): (slave bond5): Releasing backup interface [ 602.793136][T26273] bond4 (unregistering): Released all slaves [ 602.813452][T26278] lo speed is unknown, defaulting to 1000 [ 603.280536][T26304] netlink: 'syz.0.5081': attribute type 9 has an invalid length. [ 603.879345][T26332] netlink: 'syz.1.5089': attribute type 1 has an invalid length. [ 604.177046][T26349] netlink: 'syz.4.5092': attribute type 7 has an invalid length. [ 604.196514][T26349] netlink: 'syz.4.5092': attribute type 7 has an invalid length. [ 604.659825][T26379] SET target dimension over the limit! [ 604.884134][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 604.892268][ C1] lec:lec_tx_timeout: lec0 [ 604.897349][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 605.186212][T26395] netlink: 'syz.2.5107': attribute type 17 has an invalid length. [ 605.358467][T26402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.433641][T26403] lo speed is unknown, defaulting to 1000 [ 606.074898][T26419] __nla_validate_parse: 11 callbacks suppressed [ 606.074932][T26419] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5113'. [ 606.093263][T26423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5116'. [ 606.146887][T26423] bridge6: entered promiscuous mode [ 606.160521][T26419] netlink: 'syz.2.5113': attribute type 10 has an invalid length. [ 606.206278][T26419] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5113'. [ 606.244977][T26419] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 606.265425][T26419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.281202][T26419] hsr0: entered promiscuous mode [ 606.289478][T26419] bridge0: port 1(hsr0) entered blocking state [ 606.300005][T26419] bridge0: port 1(hsr0) entered disabled state [ 606.311162][T26419] hsr0: entered allmulticast mode [ 606.320052][T26419] hsr_slave_0: entered allmulticast mode [ 606.328129][T26419] hsr_slave_1: entered allmulticast mode [ 606.344692][T26438] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 606.376979][T26436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5120'. [ 606.413744][T26436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5120'. [ 606.444421][T26436] netlink: 'syz.1.5120': attribute type 11 has an invalid length. [ 606.477381][T26447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5120'. [ 606.507643][T26450] netlink: 'syz.0.5123': attribute type 8 has an invalid length. [ 606.521809][T26436] netlink: 'syz.1.5120': attribute type 12 has an invalid length. [ 606.544352][T26450] netlink: 'syz.0.5123': attribute type 4 has an invalid length. [ 606.615589][T26463] [ 606.617960][T26463] ====================================================== [ 606.624977][T26463] WARNING: possible circular locking dependency detected [ 606.632012][T26463] syzkaller #0 Not tainted [ 606.636429][T26463] ------------------------------------------------------ [ 606.643449][T26463] syz.2.5126/26463 is trying to acquire lock: [ 606.649504][T26463] ffffffff8ff4be18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x57d/0xbb0 [ 606.658655][T26463] [ 606.658655][T26463] but task is already holding lock: [ 606.666027][T26463] ffff888025424b70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 606.675264][T26463] [ 606.675264][T26463] which lock already depends on the new lock. [ 606.675264][T26463] [ 606.685663][T26463] [ 606.685663][T26463] the existing dependency chain (in reverse order) is: [ 606.694669][T26463] [ 606.694669][T26463] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 606.702664][T26463] _raw_spin_lock_bh+0x36/0x50 [ 606.707952][T26463] nr_rt_device_down+0x153/0x860 [ 606.713408][T26463] nr_device_event+0x137/0x150 [ 606.718689][T26463] notifier_call_chain+0x1ad/0x3d0 [ 606.724318][T26463] __dev_notify_flags+0x16d/0x310 [ 606.729873][T26463] netif_change_flags+0xe8/0x1a0 [ 606.735334][T26463] dev_change_flags+0x130/0x260 [ 606.740711][T26463] dev_ioctl+0x7b4/0x1150 [ 606.745561][T26463] sock_do_ioctl+0x23e/0x320 [ 606.750669][T26463] sock_ioctl+0x5c6/0x7f0 [ 606.755511][T26463] __se_sys_ioctl+0xfc/0x170 [ 606.760628][T26463] do_syscall_64+0x15f/0xf80 [ 606.765738][T26463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.772241][T26463] [ 606.772241][T26463] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 606.780062][T26463] _raw_spin_lock_bh+0x36/0x50 [ 606.785344][T26463] nr_rt_device_down+0xbe/0x860 [ 606.790714][T26463] nr_device_event+0x137/0x150 [ 606.796013][T26463] notifier_call_chain+0x1ad/0x3d0 [ 606.801730][T26463] __dev_notify_flags+0x16d/0x310 [ 606.807273][T26463] netif_change_flags+0xe8/0x1a0 [ 606.812732][T26463] dev_change_flags+0x130/0x260 [ 606.818109][T26463] dev_ioctl+0x7b4/0x1150 [ 606.822965][T26463] sock_do_ioctl+0x23e/0x320 [ 606.828074][T26463] sock_ioctl+0x5c6/0x7f0 [ 606.832923][T26463] __se_sys_ioctl+0xfc/0x170 [ 606.838028][T26463] do_syscall_64+0x15f/0xf80 [ 606.843141][T26463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.849549][T26463] [ 606.849549][T26463] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 606.857449][T26463] __lock_acquire+0x15a5/0x2cf0 [ 606.862821][T26463] lock_acquire+0x106/0x350 [ 606.867931][T26463] _raw_spin_lock_bh+0x36/0x50 [ 606.873209][T26463] nr_del_node+0x57d/0xbb0 [ 606.878154][T26463] nr_rt_ioctl+0xb34/0xf90 [ 606.883088][T26463] sock_do_ioctl+0x101/0x320 [ 606.888192][T26463] sock_ioctl+0x5c6/0x7f0 [ 606.893033][T26463] __se_sys_ioctl+0xfc/0x170 [ 606.898135][T26463] do_syscall_64+0x15f/0xf80 [ 606.903245][T26463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.909655][T26463] [ 606.909655][T26463] other info that might help us debug this: [ 606.909655][T26463] [ 606.919961][T26463] Chain exists of: [ 606.919961][T26463] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 606.919961][T26463] [ 606.933784][T26463] Possible unsafe locking scenario: [ 606.933784][T26463] [ 606.941325][T26463] CPU0 CPU1 [ 606.946689][T26463] ---- ---- [ 606.952052][T26463] lock(&nr_node->node_lock); [ 606.956815][T26463] lock(nr_node_list_lock); [ 606.963940][T26463] lock(&nr_node->node_lock); [ 606.971398][T26463] lock(nr_neigh_list_lock); [ 606.976068][T26463] [ 606.976068][T26463] *** DEADLOCK *** [ 606.976068][T26463] [ 606.984197][T26463] 2 locks held by syz.2.5126/26463: [ 606.989413][T26463] #0: ffffffff8ff4be78 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0x253/0xbb0 [ 606.998902][T26463] #1: ffff888025424b70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 607.008592][T26463] [ 607.008592][T26463] stack backtrace: [ 607.014474][T26463] CPU: 0 UID: 0 PID: 26463 Comm: syz.2.5126 Not tainted syzkaller #0 PREEMPT(full) [ 607.014494][T26463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 607.014504][T26463] Call Trace: [ 607.014511][T26463] [ 607.014519][T26463] dump_stack_lvl+0xe8/0x150 [ 607.014543][T26463] print_circular_bug+0x2e1/0x300 [ 607.014567][T26463] check_noncircular+0x12e/0x150 [ 607.014592][T26463] __lock_acquire+0x15a5/0x2cf0 [ 607.014620][T26463] ? nr_del_node+0x57d/0xbb0 [ 607.014639][T26463] lock_acquire+0x106/0x350 [ 607.014656][T26463] ? nr_del_node+0x57d/0xbb0 [ 607.014677][T26463] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 607.014691][T26463] ? nr_del_node+0x247/0xbb0 [ 607.014712][T26463] ? nr_del_node+0x57d/0xbb0 [ 607.014730][T26463] _raw_spin_lock_bh+0x36/0x50 [ 607.014746][T26463] ? nr_del_node+0x57d/0xbb0 [ 607.014764][T26463] nr_del_node+0x57d/0xbb0 [ 607.014786][T26463] nr_rt_ioctl+0xb34/0xf90 [ 607.014808][T26463] ? kasan_quarantine_put+0xbb/0x1f0 [ 607.014835][T26463] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 607.014858][T26463] ? apparmor_capable+0x126/0x170 [ 607.014876][T26463] ? capable+0x88/0xe0 [ 607.014895][T26463] ? nr_ioctl+0x1b1/0x3b0 [ 607.014912][T26463] sock_do_ioctl+0x101/0x320 [ 607.014930][T26463] ? __pfx_sock_do_ioctl+0x10/0x10 [ 607.014945][T26463] ? do_futex+0x333/0x420 [ 607.014970][T26463] sock_ioctl+0x5c6/0x7f0 [ 607.014987][T26463] ? __pfx_sock_ioctl+0x10/0x10 [ 607.015001][T26463] ? __fget_files+0x2a/0x420 [ 607.015019][T26463] ? __fget_files+0x3a0/0x420 [ 607.015035][T26463] ? __fget_files+0x2a/0x420 [ 607.015053][T26463] ? bpf_lsm_file_ioctl+0x9/0x20 [ 607.015068][T26463] ? __pfx_sock_ioctl+0x10/0x10 [ 607.015083][T26463] __se_sys_ioctl+0xfc/0x170 [ 607.015097][T26463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.015112][T26463] do_syscall_64+0x15f/0xf80 [ 607.015129][T26463] ? trace_irq_disable+0x3b/0x140 [ 607.015146][T26463] ? clear_bhb_loop+0x40/0x90 [ 607.015162][T26463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.015176][T26463] RIP: 0033:0x7ff36c79c819 [ 607.015190][T26463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.015204][T26463] RSP: 002b:00007ff36d709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.015220][T26463] RAX: ffffffffffffffda RBX: 00007ff36ca15fa0 RCX: 00007ff36c79c819 [ 607.015231][T26463] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000004 [ 607.015241][T26463] RBP: 00007ff36c832c91 R08: 0000000000000000 R09: 0000000000000000 [ 607.015250][T26463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.015259][T26463] R13: 00007ff36ca16038 R14: 00007ff36ca15fa0 R15: 00007ffdea173568 [ 607.015277][T26463] [ 607.327686][T26463] ieee80211 phy56: Selected rate control algorithm 'minstrel_ht' [ 609.904010][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 609.912044][ C1] lec:lec_tx_timeout: lec0 [ 609.916703][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 614.923963][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 614.931978][ C1] lec:lec_tx_timeout: lec0 [ 614.936682][ C1] lec:lec_start_xmit: lec0:No lecd attached