last executing test programs: 16m2.327737204s ago: executing program 1 (id=4878): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xffffffffffffff06, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0xffffffffffffff8c, 0x0, 0x0, 0x0, 0x40000000, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x24}}, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001480)={0x1114, 0x12, 0x10, 0x70bd26, 0x25dfdbfd, {0x28, 0x6, 0x8, 0x80, {0x4e24, 0x4e21, [0x0, 0xd, 0x9, 0x6], [0x1ff, 0x8, 0xfff, 0x8], r1, [0x57d, 0x7]}, 0x4, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "c695994dd09545267f9b867e5f442045232303fe24e37f4f97987b3cc0135ff51dc011911e8fb5d1ad26880f1b01930fb746e32e6d214ac2f0190be2fea14c9d4174a34e4679c7f9dc2c685a0e103595336bfb4b01b7323f0ff7826ecafe121e21260493516b40dd9b4744299af0daf76b28488d8655a64cd125f015a9234af95f01ae13c0bb410bf6c4e0bd8854696a7049c9922519301e7755aaf73eea7969fbf55e50c88fd14110e1c75caea3af1ee93d8e19b38c79eec5f5e9997f67"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1114}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x39}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 16m2.168511504s ago: executing program 1 (id=4881): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="eb01001800000000000000180000001800000002000000080000000200001300"/42], 0x0, 0x32, 0x0, 0xfffffffe, 0x7ffffd}, 0x28) ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000000)={'bond_slave_0\x00', @ifru_flags=0x800}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0x0, 0xfff2}, {0xfff1, 0xffe0}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x31, &(0x7f0000001600), 0x4) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r8, 0x0, 0x4000) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000f80)={@in6={{0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "8aac4f23c59b321a1738763829f40de6514263b9b0b7023fb22bdc015174daab26ae82d6f820dd0320e82bc93d0f02bbce4b9f19d856884d638b771a2941e8ac694cb91fd1796fd3f40eb831690c6382"}, 0xd8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0x36, 0x1, 0x33fb1dc717048ae0}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) close(r9) 16m1.776976995s ago: executing program 1 (id=4887): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 16m1.500207142s ago: executing program 1 (id=4893): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c80), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0xc6, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0xfffffffffffffd9a, 0x83, 0x1}}, {@nsim={{0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000005680), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000005a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000003000000080002000000000008000400ac1414aa08000500e000000208000100", @ANYRES8=r4], 0x34}}, 0x48044) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000340)={{r1, &(0x7f0000000080)='\x00', 0x200000, &(0x7f0000000140)={@_ha_fsid={[0x0, 0xf5d]}, {0x0, 0x1ff, 0x6, 0x9}}, 0x4, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)=0x8000}, {[0x80a8, 0x8, 0xd9, 0x6]}, 0x1, 0x21, &(0x7f0000000280)=""/33}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r9, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r9, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x14) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) 16m1.320060121s ago: executing program 1 (id=4897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r1, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xd5, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) 16m0.993865377s ago: executing program 1 (id=4901): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000280)=0xa80, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x100, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xb8, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) sendto$inet6(r2, &(0x7f0000000000)="38ff0dadd44444da37a4b23a44ff15e9604820cfc602ffcf3f403c1cf5911d1921af9585dbd427", 0x27, 0x20000000, &(0x7f00000000c0)={0xa, 0x4e21, 0x5, @private1, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000004600000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf090000000000005509010000030000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15m45.04676444s ago: executing program 32 (id=4901): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000280)=0xa80, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x100, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xb8, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) sendto$inet6(r2, &(0x7f0000000000)="38ff0dadd44444da37a4b23a44ff15e9604820cfc602ffcf3f403c1cf5911d1921af9585dbd427", 0x27, 0x20000000, &(0x7f00000000c0)={0xa, 0x4e21, 0x5, @private1, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000004600000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf090000000000005509010000030000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.4356132s ago: executing program 3 (id=14881): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ac8add8607000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ff"], 0x38}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20040060}, 0x0) 3.340015068s ago: executing program 3 (id=14884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000001100)=0x8) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0xf270) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r4 = socket$rds(0x15, 0x5, 0x0) getsockopt(r4, 0x1, 0x45, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000040)={r5, 0xe869, 0x30, 0x7fff, 0x1}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r5, 0x100}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080007"], 0x104}}, 0x0) 2.757592306s ago: executing program 0 (id=14893): unshare(0x20000400) r0 = socket(0x23, 0x805, 0x0) connect$vsock_stream(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc1", @ANYBLOB="3baa7d57c5e2dc1040d8e43006bc76c2efa17e7c33073ba660775f37a2d892f43b7701ba97f1aca7afe1d9a6c593b8e098f331d6"], 0xfc}}, 0x4) listen(r1, 0x0) accept(r1, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) close(r4) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd090387237ee530000000"], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x7f}, 0x0, 0x0) 2.420168747s ago: executing program 3 (id=14900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x200}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000003e194700", @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf25140000000c000600010000000100000008001d00", @ANYRESDEC=r5, @ANYBLOB, @ANYRESOCT=r1], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e6", 0x3}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a43", 0x45}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) read$rfkill(r7, &(0x7f0000000440), 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xf, 0xd}, {0x5, 0xffe0}, {0x2, 0x9}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x2400c012) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r5) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r11, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) ppoll(&(0x7f0000000140)=[{r11, 0x200}, {r3, 0x421}], 0x2, 0x0, 0x0, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) 1.935997989s ago: executing program 5 (id=14908): r0 = socket(0x26, 0xa, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x1, 0x7}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180400000000000000000000000000007110a0000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf}, 0x90) 1.749761249s ago: executing program 5 (id=14912): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x17, 0xe, &(0x7f0000000200)=ANY=[@ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xf, "0476bc4b4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 1.741773865s ago: executing program 0 (id=14913): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0x143, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d080006400000008c080004400000001705000200940000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r0, 0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@delchain={0x2c, 0x65, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x4, 0xa}, {0x1, 0xfff2}, {0x5, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x2}}]}, 0x2c}}, 0x44080) r4 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000100)={&(0x7f0000000340)={0x2d, 0x0, 0x1f, 0x40000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 1.624986036s ago: executing program 2 (id=14914): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a3e25713fb34906f23bd7000fbdbdf25000000009e6da977b94ab662c897c7571ca47705fc8f02c3635b426f464465e1cee6459cbe0abada55389a1260579c3205f5d29462306054ac0309f78b41e3ecdc90d3eccf0563ee8ff362d85016acb09ecac0b0c0dc46710a2c10509b0fd6b19ebc855b3466621d500ec48f7c460114d11e2152f9761120c083e4e13b7c4954e71c118cfad310a263030000008685a318b603f3cd92b03b824db61ace9063ecbc410000000000", @ANYRES32=r3, @ANYBLOB="81b800000000000024001280110001006272696467655f736c617665000000000c0005800500200000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0x1, &(0x7f0000000240)="e9dccdf87ac98cc728df728fe8d7a7e65c2fe1d459c7fde07a7dfb8f11fda01b5d6c9d7b2594dea19a67ab111c6f8c5bb959744fec4ff1213202bb8e7044cf4a37089de01945f5f84393540a2cafd5c5a8b69613ddc7042162af363f9a8f5ce94c4e6733a2567fc97d9d1ce43fb4204ae7b2eaa12c1a700e0eb70947b2a57d98bdae5d8f2f34a06f7f7d33b5a5ceed0184fc01e97b82b768208a2cdf922db005860c68141085f52bf1f4fbaa80d0aefc1a13f49dcbe980d3226ec2b9b57c81ee79c44bd028bf9d1e362b598f5b68495f364723292440cca73d0774d6a4b964872cdd5b958310d49ff264927f1547525a45635244"}, 0x20) sendto$packet(r1, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@empty, 0x14, r4}) 1.624773211s ago: executing program 4 (id=14915): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x22}, @private1={0xfc, 0x1, '\x00', 0x7}, [0x0, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', 'veth0_to_team\x00', {}, {}, 0x2f, 0x1, 0x1, 0x1}, 0x0, 0xd0, 0xf8, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091ff0000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 1.589459308s ago: executing program 4 (id=14916): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x17}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r0}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 1.548500875s ago: executing program 0 (id=14917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x86, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast1, {[@timestamp_addr={0x44, 0x24, 0x9f, 0x1, 0xe, [{@multicast1, 0x88}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@broadcast, 0x8}, {@multicast1, 0x852}]}, @rr={0x7, 0x17, 0xd6, [@private=0xa010101, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @broadcast]}, @ssrr={0x89, 0xb, 0xc5, [@broadcast, @empty]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) connect$unix(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x8001}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 1.467561864s ago: executing program 4 (id=14918): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xfffffffffffffe32, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) close(r2) connect$netrom(r1, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x15, 0xa9, @random="ad93002848d07e00a9fd2a47532dddaadb"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000814) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r7, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, '\x00', {0x1}, 0x100}) 1.462027733s ago: executing program 2 (id=14919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005000000480311"], 0x35c}}, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r5, 0x2b5}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000002400)="800000800000210ee7decd7a0000", 0xe, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, r7, 0x1, 0x3}, 0x14) 1.461247356s ago: executing program 5 (id=14920): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)='%pi6 \x00'}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000540)={r1, &(0x7f0000000440)='\x00', 0x10080, &(0x7f0000000480)={@align=0x2, {0x9, 0x2, 0x7, 0x3}}, 0x9, &(0x7f00000004c0), &(0x7f0000000500)=0x46}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113e00000000008510000002000000850000000500000095003300000000009500250500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x17, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf887}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x5, 0x7, 0x6, 0x20, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @generic={0x9d, 0x4, 0x5, 0x7, 0x200}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xd809}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x35b, 0x1b, &(0x7f0000000380)=""/27, 0x41000, 0x1, '\x00', r4, @fallback=0x14, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x4, &(0x7f0000000580), &(0x7f00000005c0)=[{0x2, 0x2, 0xb, 0x2}, {0x3, 0x2, 0xf}, {0x3, 0x3, 0x0, 0x1}, {0x2, 0x5, 0x10, 0xe}], 0x10, 0x9c}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={0xffffffffffffffff, r4, 0x25, 0x8, @void}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.380791081s ago: executing program 3 (id=14921): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000680040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000001080)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x13}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x2f, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.368612695s ago: executing program 0 (id=14922): r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r4, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x25}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xa}, @NL80211_ATTR_BSS_HT_OPMODE={0xfffffffffffffed8, 0x6d, 0xa531}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x33}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f00000000c0)='\'+\x00', 0x4000, &(0x7f0000000100)={@_ha_fsid={[0x6, 0x80000000]}, {0x4, 0x7, 0x2, 0x1}}, 0x47, &(0x7f0000000140), &(0x7f00000001c0)=0x9}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r8, 0x200, 0x70bd29, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x9, 0x3, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x4080) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r9, &(0x7f0000000980), 0xe) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x4) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff02000000000000000000000000000117df"], 0xfdef) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000080)={&(0x7f0000000040)=[{0xd, 0x0, 0x0, {0x40, 0x1}}, {0xfffffffffffffffd, 0x2, 0x0, {0xfffffffffffffffe, 0x6}}], 0x2, 0x20, 0x5, 0x4}) 1.366656018s ago: executing program 4 (id=14923): unshare(0x20000400) r0 = socket(0x23, 0x805, 0x0) connect$vsock_stream(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc1", @ANYBLOB="3baa7d57c5e2dc1040d8e43006bc76c2efa17e7c33073ba660775f37a2d892f43b7701ba97f1aca7afe1d9a6c593b8e098f331d6"], 0xfc}}, 0x4) listen(r1, 0x0) accept(r1, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) close(r4) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x7f}, 0x0, 0x0) 607.884523ms ago: executing program 2 (id=14924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c000240000000000000000008000540000040000c00014000000000000004000800044000000001"], 0xc0}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)={r2}, &(0x7f00000002c0)=0x8) 481.732849ms ago: executing program 5 (id=14925): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x48212b8952c3aff5, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c095}, 0x4010) 481.317707ms ago: executing program 2 (id=14926): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@dellink={0x28, 0x11, 0x101, 0x0, 0xfffffffe, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000038000480140001800c0001006e6f747261636b000400028020000180070001006374000014000280080001400000000a080002400000009c"], 0x8c}}, 0x0) bind$alg(r3, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000000) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00000000d220f15a2008423c3e96b4925d1074a0dd64208f745417", @ANYRES16=r8, @ANYBLOB="01002bbd7000fedbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900b00d00007300000018"], 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x80400d0) recvmmsg$unix(r5, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000200)=""/252, 0xfc}], 0x1}}], 0x1, 0x10000, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000040800124080000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 467.380619ms ago: executing program 0 (id=14927): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "dfbeeade82915eb98791974cb8da386cf2a7fbaa4a9ee4c73e16b2ac46f745dd"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040c0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60044}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60044}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 435.131606ms ago: executing program 5 (id=14928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r2, 0x3a, 0x8, 0x0, 0x0) (async) setsockopt(r2, 0x3a, 0x8, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xd, 0x0, 0x9, 0xc}, 0x6, 0xfffffffd, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) (async) close(r7) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000340060dfc26d21740c7d0100f44da367a88ee6564f020211456727082f5debee8b1bf5eb73371a1b459b39220800098004e200801400020077670100000000190000000000000000267992181cf5daad56af398e7b90fde1eb16b6b94924140cb7410ade4a55568e456b2ab3a5a4b241b8964d2a3aaf326304e195247b7c3ec932c903ca9cf2b4660eddd36f16f39faf7b0d8a561c618262043a556e40d35d018f848bb7229b5743d6876f0bb2caea1462e0464d79d496cc290c31009722b4a34037d6a05fe42bd8fe0a5379f0f44d8e8c39654ee5c3179ec62d0b5b5a94e0f3bf67b9f68d25d93ff1e12b1fde30e834e3e8205c4834ca4164b1bd0293978e257e74a8f9413115400f09f2ab84a9060d"], 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00002cbd700000"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x10) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) (async) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000000000000f000175664228f29700aaaae000aac437a56d2230f7ffffff000000000000000000"], 0x24}}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0x2, 0x8, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x80005, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x1, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0xfffffffc, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x80000000}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x1, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffff9, 0x1, 0xfffffffc, 0x2}, {0x8, 0x2, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x9, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4006, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x1, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x21, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x6, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x4, 0x7}, {0x1, 0x2, 0x4010, 0xffffffb1, 0x0, 0x751e}, {0xffed, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0xffffffff}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) (async) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 385.639349ms ago: executing program 3 (id=14929): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYBLOB, @ANYBLOB="080003"], 0x78}}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f4, &(0x7f0000000400)="16bbe57d55f686435bedc7800e69bb9d3c17bc3ce757f5669e78a0d5b3a38ae24e8f9a9a3e4b7863890e5aa6f43e31209ecda4585c9514f2d09f8d03f611210a5e764988") r1 = socket(0x2a, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000e218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000000000)={r3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x5c}}, 0x4000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r6, &(0x7f000018efdc)="240000005a001f0214f9f407000904fcffffff1010000300feffffff0800000000000000", 0x24) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2002600}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x3c, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 241.604698ms ago: executing program 4 (id=14930): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x17, 0xe, &(0x7f0000000200)=ANY=[@ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xf, "0476bc4b4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 179.923542ms ago: executing program 2 (id=14931): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000040), 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) sendmsg$tipc(r1, &(0x7f0000001880)={&(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x3}}, 0x10, 0x0}, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000140)={&(0x7f0000000100)=[{0x1ff, 0x5}, {0x59a, 0x8}], 0x2, 0x10, 0xc, 0x8001}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000000040)=""/4146, &(0x7f0000000000)=0x1032) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000204060103000000000000000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x4048021}, 0x24002050) 121.712541ms ago: executing program 3 (id=14932): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x437, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, 0x5394b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1ff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x24000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$isdn(0x22, 0x2, 0x23) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="393dbfe914000000020601f38700000600000000"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x5, 0xfffffffd, 0x53, @remote, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x7800, 0x0, 0x0, 0xfffffffa}}) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newroute={0x48, 0x18, 0x400, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x10, 0x1c, 0xfe, 0x2, 0xfe, 0xd, 0x200}, [@RTA_IIF={0x8, 0x3, r7}, @RTA_EXPIRES={0x8, 0x17, 0x8}, @RTA_EXPIRES={0x8, 0x17, 0x1}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0xf}}}}]}, 0x48}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, 0x0, 0x0) close(r8) close(r4) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'batadv_slave_0\x00', {0x2, 0x4e24, @local}}) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x100}}}, {{@ipv6={@remote, @private0, [0xff000000], [0xffffffff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'vlan0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x54}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x18, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f00000003c0)) 120.685317ms ago: executing program 0 (id=14933): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0xc0) sendmsg$tipc(r2, 0x0, 0x100) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000001c0)={r3, &(0x7f0000000000)='-\x00', 0xc000, &(0x7f0000000100)={@align=0x1, {0x9, 0x5, 0x9, 0xffffffffffffffe8}}, 0xbc, 0x0, 0x0}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000ec001fb6330d70000008000100", @ANYRES16=r8], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r9, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="1000000027002000ee007d0bdbea2900"], 0x10}, {&(0x7f0000000a00)={0x10, 0x25, 0x4, 0x70bd25, 0x25dfdbfe}, 0x10}], 0x2}, 0x880) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x82e, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x40005, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@delchain={0x178, 0x65, 0x625, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r1, {0xfff1, 0xb}, {0xfff1, 0x5}, {0x9, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_flower={{0xb}, {0x140, 0x2, [@TCA_FLOWER_ACT={0x134, 0x3, [@m_mpls={0x90, 0x8, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xdada}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf61ec}, @TCA_MPLS_PROTO={0x6, 0x4, 0x18}, @TCA_MPLS_TTL={0x5, 0x7, 0xfd}, @TCA_MPLS_LABEL={0x8, 0x5, 0x470f5}]}, {0x31, 0x6, "7a640b094424604e50aa509600520e34f70efcc21a916ecf2bbaeaed0389a9678d9feb6a25820a06f84762f003"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_vlan={0xa0, 0x14, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc1b}]}, {0x6b, 0x6, "faffa03b274e6a6350634d04e797c2e44e8e5b985c046432b85e0dcd7c19917b0e3f2c9938c6896e4434cc7754263d73790971bda01ca84b4bb62e470c63c50cc8c1f0df811ff9c59ff42219b0c23dbfc38741fec1bfaedeaa0563ec1efb8ceb8284f7a665e6f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xf8}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 92.623717ms ago: executing program 5 (id=14934): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a1400000011000100"], 0x70}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a010100000000000000000a00000a0900020073797a310000010073797a31000000002c000380280000800c00018006000100d10300000c000440000000002df31ab30c0005400000000000000081140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018008000300", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 63.866319ms ago: executing program 2 (id=14935): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005fc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}], 0x1, 0x800) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0xd78a}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/15, 0xf}], 0x1}}], 0x2, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x716, 0x70bd27, 0x25dfdbfc, {0x0, 0x8, 0x2, 0x0, 0x0, 0x7aa6, 0x4, 0x8, 0x0, 0x7, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) sendmsg$AUDIT_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x716, 0x70bd27, 0x25dfdbfc, {0x0, 0x8, 0x2, 0x0, 0x0, 0x7aa6, 0x4, 0x8, 0x0, 0x7, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 4 (id=14936): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}]}, 0x44}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r7, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x28}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): tes in process `syz.2.12980'. [ 1324.406989][T22436] netlink: 1 bytes leftover after parsing attributes in process `syz.2.12980'. [ 1324.573246][T22452] netlink: 'syz.3.12986': attribute type 5 has an invalid length. [ 1324.603555][T22449] netlink: 277 bytes leftover after parsing attributes in process `syz.4.12985'. [ 1324.866287][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12991'. [ 1324.880595][T22468] Cannot find del_set index 2 as target [ 1324.881882][T22469] netlink: 'syz.0.12989': attribute type 3 has an invalid length. [ 1325.074219][T22479] x9: renamed from bridge_slave_0 [ 1325.599398][T22516] __nla_validate_parse: 4 callbacks suppressed [ 1325.599420][T22516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13004'. [ 1325.647382][T22516] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13004'. [ 1325.679611][T22516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13004'. [ 1325.866633][T22535] netlink: 14 bytes leftover after parsing attributes in process `syz.5.13008'. [ 1325.883366][T22537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13009'. [ 1326.029981][T22548] sctp: [Deprecated]: syz.3.13010 (pid 22548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1326.029981][T22548] Use struct sctp_sack_info instead [ 1326.083738][T22548] sctp: [Deprecated]: syz.3.13010 (pid 22548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1326.083738][T22548] Use struct sctp_sack_info instead [ 1326.173670][T22520] infiniband syz0: set down [ 1326.178927][T22520] infiniband syz0: added batadv_slave_1 [ 1326.195798][T22548] sctp: [Deprecated]: syz.3.13010 (pid 22548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1326.195798][T22548] Use struct sctp_sack_info instead [ 1326.255117][T22548] sctp: [Deprecated]: syz.3.13010 (pid 22548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1326.255117][T22548] Use struct sctp_sack_info instead [ 1326.272996][T22548] sctp: [Deprecated]: syz.3.13010 (pid 22548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1326.272996][T22548] Use struct sctp_sack_info instead [ 1326.290220][T22548] sctp: [Deprecated]: syz.3.13010 (pid 22548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1326.290220][T22548] Use struct sctp_sack_info instead [ 1326.291925][T22520] RDS/IB: syz0: added [ 1326.306836][T22548] sctp: [Deprecated]: syz.3.13010 (pid 22548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1326.306836][T22548] Use struct sctp_sack_info instead [ 1326.306931][T22548] sctp: [Deprecated]: syz.3.13010 (pid 22548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1326.306931][T22548] Use struct sctp_sack_info instead [ 1326.306978][T22548] sctp: [Deprecated]: syz.3.13010 (pid 22548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1326.306978][T22548] Use struct sctp_sack_info instead [ 1326.307026][T22548] sctp: [Deprecated]: syz.3.13010 (pid 22548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1326.307026][T22548] Use struct sctp_sack_info instead [ 1326.429755][ T65] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1326.439601][ T65] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1326.448617][ T65] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1326.457671][ T65] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1326.468123][T22520] smc: adding ib device syz0 with port count 1 [ 1326.474400][T22520] smc: ib device syz0 port 1 has no pnetid [ 1326.541953][T22564] veth0: entered promiscuous mode [ 1326.853273][T22572] syzkaller0: entered promiscuous mode [ 1326.863422][T22572] syzkaller0: entered allmulticast mode [ 1327.046971][T22579] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13019'. [ 1329.530929][T22563] veth0: left promiscuous mode [ 1329.858992][T22598] syzkaller0: entered promiscuous mode [ 1329.886312][T22598] syzkaller0: entered allmulticast mode [ 1330.172028][T22614] netlink: 'syz.3.13029': attribute type 21 has an invalid length. [ 1332.469209][T22614] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1332.879221][T22634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13034'. [ 1332.971305][ T24] IPVS: starting estimator thread 0... [ 1332.995362][T22634] macsec1: entered promiscuous mode [ 1333.106034][T22638] IPVS: using max 25 ests per chain, 60000 per kthread [ 1333.310133][T22650] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13037'. [ 1333.640586][T22658] IPv6: sit1: Disabled Multicast RS [ 1333.647220][T22658] sit1: entered allmulticast mode [ 1333.809074][T22660] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13040'. [ 1333.974189][T22662] netlink: 'syz.3.13041': attribute type 10 has an invalid length. [ 1333.987912][T22662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.997351][T22662] bridge_slave_1: left allmulticast mode [ 1334.003387][T22662] bridge_slave_1: left promiscuous mode [ 1334.011376][T22662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.032008][T22662] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1334.229101][T22671] bond1: entered allmulticast mode [ 1334.249977][T22671] bridge2: entered promiscuous mode [ 1334.255262][T22671] bridge2: entered allmulticast mode [ 1334.268576][T22671] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1335.191322][T22585] siw: device registration error -23 [ 1335.501002][T22686] netlink: 'syz.5.13048': attribute type 2 has an invalid length. [ 1335.511168][T22686] netlink: 119 bytes leftover after parsing attributes in process `syz.5.13048'. [ 1335.813660][T22701] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13054'. [ 1335.898217][T22703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13053'. [ 1336.022528][T22715] sctp: [Deprecated]: syz.4.13056 (pid 22715) Use of int in maxseg socket option. [ 1336.022528][T22715] Use struct sctp_assoc_value instead [ 1336.123313][T22724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13058'. [ 1336.143573][T22724] vxcan0: entered allmulticast mode [ 1336.361550][T22743] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13062'. [ 1336.374581][T22743] netlink: 112 bytes leftover after parsing attributes in process `syz.3.13062'. [ 1338.792276][T22701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1338.802060][T22713] netlink: 'syz.5.13055': attribute type 4 has an invalid length. [ 1338.828180][T22739] netlink: 'syz.2.13063': attribute type 1 has an invalid length. [ 1338.879995][T22739] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13063'. [ 1338.996882][T22753] netlink: 'syz.0.13064': attribute type 24 has an invalid length. [ 1339.019376][T22755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13067'. [ 1339.103002][T22761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13064'. [ 1339.223461][T22770] netlink: 'syz.4.13069': attribute type 6 has an invalid length. [ 1339.552143][T22780] netlink: 'syz.4.13074': attribute type 1 has an invalid length. [ 1339.620967][T22780] bond2: entered promiscuous mode [ 1339.636695][T22780] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1339.677868][T22786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1339.739278][T22781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1339.761214][T22781] bond2: (slave vti1): The slave device specified does not support setting the MAC address [ 1339.823680][T22781] bond2: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 1339.839312][T22781] bond2: (slave vti1): making interface the new active one [ 1339.847017][T22781] vti1: entered promiscuous mode [ 1339.856718][T22781] bond2: (slave vti1): Enslaving as an active interface with an up link [ 1339.865512][T22791] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13077'. [ 1339.895039][T22783] netlink: set zone limit has 4 unknown bytes [ 1340.154552][T22809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13083'. [ 1340.489092][T22825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13087'. [ 1340.519167][T22825] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13087'. [ 1340.759140][T22838] openvswitch: netlink: Flow key attr not present in new flow. [ 1340.760144][T22839] netlink: 64 bytes leftover after parsing attributes in process `syz.5.13094'. [ 1340.781957][T22840] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1340.794828][T22840] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1340.817658][T22848] netlink: 'syz.4.13093': attribute type 2 has an invalid length. [ 1340.826389][T22848] netlink: 'syz.4.13093': attribute type 2 has an invalid length. [ 1340.834896][T22840] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1340.856500][T22840] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1340.881047][T22840] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1340.900471][T22840] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1340.911623][T22840] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1340.980816][T22856] ipvlan0: Caught tx_queue_len zero misconfig [ 1341.140975][T22859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13100'. [ 1341.509869][T22888] bond1: entered promiscuous mode [ 1341.786489][T22904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13112'. [ 1341.849682][T22912] : renamed from lo [ 1342.014002][T22920] sctp: [Deprecated]: syz.0.13114 (pid 22920) Use of int in maxseg socket option. [ 1342.014002][T22920] Use struct sctp_assoc_value instead [ 1342.084945][T22925] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1342.793946][T22956] F: renamed from gre0 [ 1342.807691][T22956] F: entered allmulticast mode [ 1342.920093][T22956] syzkaller1: entered promiscuous mode [ 1342.945765][T22956] syzkaller1: entered allmulticast mode [ 1343.322116][T22971] delete_channel: no stack [ 1344.656133][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1345.247152][T22935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1345.498050][T22996] bridge0: port 3(gretap0) entered disabled state [ 1345.504783][T22996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.762850][T23003] __nla_validate_parse: 68 callbacks suppressed [ 1345.762874][T23003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13139'. [ 1345.786458][T23012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13142'. [ 1345.918300][T23010] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1346.189306][T23035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13148'. [ 1346.207389][T23028] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13146'. [ 1346.241289][T23032] syzkaller0: entered promiscuous mode [ 1346.252328][T23032] syzkaller0: entered allmulticast mode [ 1346.271128][T23035] net_ratelimit: 82 callbacks suppressed [ 1346.271151][T23035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1346.290075][T23039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13150'. [ 1346.635497][T23057] netlink: 'syz.4.13156': attribute type 11 has an invalid length. [ 1347.204906][T23093] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 1347.311754][T23094] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13168'. [ 1347.358779][T23109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13173'. [ 1347.435133][T23111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13174'. [ 1347.822932][T23131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13182'. [ 1347.852434][T23136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13183'. [ 1347.917402][T23144] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1348.252110][T23159] syzkaller0: entered promiscuous mode [ 1348.274035][T23159] syzkaller0: entered allmulticast mode [ 1348.381767][T23169] netlink: 'syz.4.13194': attribute type 12 has an invalid length. [ 1348.406803][T23169] netlink: 'syz.4.13194': attribute type 11 has an invalid length. [ 1348.546612][T23180] netlink: 'syz.5.13195': attribute type 10 has an invalid length. [ 1348.571319][T23180] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1348.955137][T23211] IPv6: Can't replace route, no match found [ 1348.966899][T23211] IPv6: Can't replace route, no match found [ 1349.436448][T23241] ip6t_REJECT: ECHOREPLY is not supported [ 1350.218464][T23298] bridge0: port 3(gretap0) entered blocking state [ 1350.225232][T23298] bridge0: port 3(gretap0) entered forwarding state [ 1350.232327][T23298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.239585][T23298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1350.518277][T23325] syzkaller1: entered promiscuous mode [ 1350.533936][T23325] syzkaller1: entered allmulticast mode [ 1350.564491][T23325] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1350.766276][T23344] __nla_validate_parse: 40 callbacks suppressed [ 1350.766298][T23344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13245'. [ 1351.140596][T23362] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1351.209533][T23366] atomic_op ffff88803f451998 conn xmit_atomic 0000000000000000 [ 1351.222711][T23372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13252'. [ 1351.314572][T23369] : entered promiscuous mode [ 1351.396126][T23382] netlink: 'syz.5.13253': attribute type 51 has an invalid length. [ 1351.690376][T23397] ipip0: entered promiscuous mode [ 1351.838659][T23403] netlink: 'syz.0.13263': attribute type 4 has an invalid length. [ 1351.876839][T23407] openvswitch: netlink: Flow actions attr not present in new flow. [ 1351.891716][T23409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13264'. [ 1351.912114][T23410] netlink: 'syz.0.13263': attribute type 4 has an invalid length. [ 1351.942043][ T7169] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 1352.504747][ T7169] bond1 (unregistering): Released all slaves [ 1352.531816][ T7169] bond2 (unregistering): (slave vcan1): Releasing backup interface [ 1352.546425][ T7169] bond2 (unregistering): Released all slaves [ 1352.568650][ T7169] bond3 (unregistering): Released all slaves [ 1352.592184][ T7169] bond4 (unregistering): Released all slaves [ 1352.628296][ T7169] bond0 (unregistering): Released all slaves [ 1352.650870][ T7169] bond5 (unregistering): Released all slaves [ 1352.691582][ T7169] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1352.701812][ T7169] bond6 (unregistering): Released all slaves [ 1352.718963][ T7169] bond7 (unregistering): Released all slaves [ 1352.741644][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13261'. [ 1352.751456][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13261'. [ 1352.761243][T23404] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13261'. [ 1352.962734][ T7169] tipc: Disabling bearer [ 1352.997718][ T7169] tipc: Left network mode [ 1353.139976][T23459] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1353.228423][T23464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13270'. [ 1353.228486][T23467] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1353.259032][T23464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13270'. [ 1353.798446][T23487] netlink: 256 bytes leftover after parsing attributes in process `syz.2.13275'. [ 1353.845481][T23491] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13276'. [ 1354.029584][T23494] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1354.252426][T23502] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1354.568538][T23519] netlink: 'syz.3.13284': attribute type 33 has an invalid length. [ 1354.588342][T23512] netlink: 'syz.2.13283': attribute type 10 has an invalid length. [ 1354.868818][ T7169] hsr_slave_1: left promiscuous mode [ 1355.431266][T23545] bond3: entered promiscuous mode [ 1355.466395][T23545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1355.508564][T23557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1355.517386][T23557] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 1355.547573][T23557] bond3: (slave sit1): Error -95 calling set_mac_address [ 1355.562103][T23550] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1355.727459][T23564] netlink: 'syz.5.13293': attribute type 1 has an invalid length. [ 1355.753830][T23564] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 1356.031884][T23582] __nla_validate_parse: 5 callbacks suppressed [ 1356.031910][T23582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13298'. [ 1356.058744][T23581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13298'. [ 1356.068619][T23581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13298'. [ 1356.085068][T23582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13298'. [ 1356.088571][T23588] xt_time: unknown flags 0xf4 [ 1356.233802][T23593] syzkaller0: entered promiscuous mode [ 1356.240753][T23593] syzkaller0: entered allmulticast mode [ 1356.286019][T23598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13302'. [ 1356.352239][T23598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13302'. [ 1356.442217][T23609] netlink: 'syz.0.13303': attribute type 1 has an invalid length. [ 1356.805198][T23643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13315'. [ 1356.888560][T23645] netlink: 'syz.5.13316': attribute type 9 has an invalid length. [ 1357.004279][ T9715] IPVS: starting estimator thread 0... [ 1357.018875][T23652] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1357.037325][T23650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13318'. [ 1357.084588][T23650] macvlan2: entered allmulticast mode [ 1357.090582][T23650] hsr0: entered allmulticast mode [ 1357.096525][T23650] hsr_slave_0: entered allmulticast mode [ 1357.098487][T23653] IPVS: using max 27 ests per chain, 64800 per kthread [ 1357.102386][T23650] hsr_slave_1: entered allmulticast mode [ 1357.161084][T23659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13321'. [ 1357.177613][T23659] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1357.225500][T23662] netlink: zone id is out of range [ 1357.248916][T23662] netlink: zone id is out of range [ 1357.267372][T23661] veth7: entered allmulticast mode [ 1357.286182][T23662] netlink: zone id is out of range [ 1357.301841][T23662] netlink: zone id is out of range [ 1357.312553][T23662] netlink: zone id is out of range [ 1357.325993][T23662] netlink: zone id is out of range [ 1357.331227][T23662] netlink: zone id is out of range [ 1357.346327][T23662] netlink: zone id is out of range [ 1357.599367][T23691] netlink: 'syz.5.13330': attribute type 2 has an invalid length. [ 1357.635296][T23691] netlink: 'syz.5.13330': attribute type 11 has an invalid length. [ 1357.648214][T23691] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13330'. [ 1358.034199][T23706] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1359.484348][T23787] bond0: entered allmulticast mode [ 1359.490289][T23787] lo: entered allmulticast mode [ 1359.501679][T23792] netlink: 'syz.3.13361': attribute type 1 has an invalid length. [ 1359.788076][T23816] batman_adv: batadv0: Adding interface: dummy0 [ 1359.794533][T23816] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.821166][T23816] batman_adv: batadv0: Interface activated: dummy0 [ 1359.949682][T23820] netlink: 'syz.5.13370': attribute type 4 has an invalid length. [ 1360.274624][T23841] ip6gre1: entered allmulticast mode [ 1360.334456][T23851] xt_ecn: cannot match TCP bits for non-tcp packets [ 1360.610495][T23861] syzkaller1: entered promiscuous mode [ 1360.624361][T23861] syzkaller1: entered allmulticast mode [ 1360.767273][T23874] netlink: 'syz.3.13387': attribute type 3 has an invalid length. [ 1361.065451][T23886] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1361.105515][T23886] __nla_validate_parse: 18 callbacks suppressed [ 1361.105540][T23886] netlink: 10 bytes leftover after parsing attributes in process `syz.5.13389'. [ 1361.152439][T23886] batman_adv: batadv0: Interface deactivated: dummy0 [ 1361.211691][T23886] batman_adv: batadv0: Removing interface: dummy0 [ 1361.235023][T23898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13394'. [ 1361.280677][T23903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13395'. [ 1361.318541][T23903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13395'. [ 1361.370469][T23905] netlink: 'syz.4.13396': attribute type 2 has an invalid length. [ 1361.381636][T23909] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13397'. [ 1361.471996][T23913] x9: renamed from bridge_slave_0 (while UP) [ 1361.543295][T23913] delete_channel: no stack [ 1361.923659][T23939] netlink: 'syz.5.13405': attribute type 1 has an invalid length. [ 1361.939015][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.942625][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1361.946789][T23939] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13405'. [ 1361.964056][T23939] netlink: 'syz.5.13405': attribute type 10 has an invalid length. [ 1362.010772][T23943] netlink: 'syz.3.13407': attribute type 1 has an invalid length. [ 1362.152184][T23952] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.13409'. [ 1362.163247][T23948] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1362.179805][ T65] net_ratelimit: 235 callbacks suppressed [ 1362.179829][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1362.200129][T23954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13410'. [ 1362.265967][T23948] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1362.400756][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1362.550783][ T149] bond13: (slave bridge2): failed to get link speed/duplex [ 1362.696274][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1362.856046][ T149] bond13: (slave bridge2): failed to get link speed/duplex [ 1363.015972][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1363.161779][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1363.224511][T23994] netlink: 88 bytes leftover after parsing attributes in process `syz.2.13423'. [ 1363.346457][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1363.467903][ T149] bond13: (slave bridge2): failed to get link speed/duplex [ 1363.576513][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1363.611094][T23978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13419'. [ 1363.729269][T24009] netlink: 'syz.5.13426': attribute type 8 has an invalid length. [ 1363.740522][T24009] sch_fq: defrate 0 ignored. [ 1363.881328][T24019] vlan0: entered promiscuous mode [ 1364.194142][T24041] netlink: 'syz.4.13436': attribute type 1 has an invalid length. [ 1364.303960][T24045] netlink: 'syz.2.13437': attribute type 3 has an invalid length. [ 1364.783890][T24070] syzkaller0: entered promiscuous mode [ 1364.790992][T24070] syzkaller0: entered allmulticast mode [ 1364.807063][T24070] netlink: 'syz.2.13445': attribute type 7 has an invalid length. [ 1364.816939][T24070] netlink: 'syz.2.13445': attribute type 7 has an invalid length. [ 1365.085364][T24089] syz_tun: entered promiscuous mode [ 1365.123310][T24093] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1365.906670][T24143] syzkaller1: entered promiscuous mode [ 1365.912379][T24143] syzkaller1: entered allmulticast mode [ 1366.152908][T24159] __nla_validate_parse: 9 callbacks suppressed [ 1366.152928][T24159] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13469'. [ 1366.153991][T24165] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13469'. [ 1366.553649][T24172] syzkaller0: entered promiscuous mode [ 1366.698470][T24198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13478'. [ 1366.737781][T24202] sctp: [Deprecated]: syz.4.13479 (pid 24202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1366.737781][T24202] Use struct sctp_sack_info instead [ 1366.965096][T24209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13481'. [ 1366.993064][T24209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13481'. [ 1367.125737][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 1367.133812][ C1] lec:lec_tx_timeout: lec0 [ 1367.207012][T16899] Bluetooth: hci5: command 0x0405 tx timeout [ 1369.346011][ T1159] net_ratelimit: 217 callbacks suppressed [ 1369.346032][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1369.423661][T24225] xt_hashlimit: size too large, truncated to 1048576 [ 1369.778539][T16725] bond13: (slave bridge2): failed to get link speed/duplex [ 1369.837861][T24252] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.937782][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1370.114121][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13492'. [ 1370.179717][T24266] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.13492'. [ 1370.225942][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1370.279425][T24268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13495'. [ 1370.348728][T16725] bond13: (slave bridge2): failed to get link speed/duplex [ 1370.370997][T24270] netlink: 'syz.4.13496': attribute type 13 has an invalid length. [ 1370.381206][T24270] veth0_macvtap: left promiscuous mode [ 1370.396754][T24270] macvtap0: entered allmulticast mode [ 1370.411154][T24270] macvtap0: refused to change device tx_queue_len [ 1370.476605][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1370.585942][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1370.705533][T16725] bond13: (slave bridge2): failed to get link speed/duplex [ 1370.811974][T24281] syzkaller0: entered promiscuous mode [ 1370.817713][T24281] syzkaller0: entered allmulticast mode [ 1370.826503][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1371.007005][T24306] netlink: 'syz.0.13504': attribute type 1 has an invalid length. [ 1371.014899][T24306] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13504'. [ 1371.026738][T24306] netlink: 'syz.0.13504': attribute type 2 has an invalid length. [ 1372.836559][ T762] lec:lec_start_xmit: lec0:No lecd attached [ 1373.300681][T24306] 9: entered promiscuous mode [ 1373.336098][T16725] bond13: (slave bridge2): failed to get link speed/duplex [ 1373.607901][T24329] veth5: entered allmulticast mode [ 1373.809413][T24345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13515'. [ 1373.819763][T24345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1373.922775][T24345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1374.232428][T24374] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13524'. [ 1374.319260][T24381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13524'. [ 1374.426126][T16725] net_ratelimit: 6 callbacks suppressed [ 1374.426152][T16725] bond13: (slave bridge2): failed to get link speed/duplex [ 1374.449917][T24389] netlink: 'syz.2.13526': attribute type 1 has an invalid length. [ 1374.476935][T24389] netlink: 'syz.2.13526': attribute type 1 has an invalid length. [ 1374.572073][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1374.696677][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1374.802962][T24405] netlink: 'syz.2.13531': attribute type 1 has an invalid length. [ 1374.806191][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1374.877714][T24405] bond1: entered promiscuous mode [ 1374.883367][T24405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1374.957412][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1375.077450][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1375.196533][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1375.214795][T24431] rdma_op ffff8880433be9f0 conn xmit_rdma 0000000000000000 [ 1375.316204][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1375.447599][T16725] bond13: (slave bridge2): failed to get link speed/duplex [ 1375.575801][T16725] bond13: (slave bridge2): failed to get link speed/duplex [ 1375.604416][T24447] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.13544'. [ 1375.843502][T24464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13549'. [ 1375.930048][T24468] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.13549'. [ 1376.102804][T24473] netlink: 156 bytes leftover after parsing attributes in process `syz.4.13552'. [ 1376.116500][T24477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13554'. [ 1376.151740][T24477] hsr_slave_0 (unregistering): left promiscuous mode [ 1376.674005][T24513] netlink: 256 bytes leftover after parsing attributes in process `syz.5.13565'. [ 1376.690820][T24513] netem: unknown loss type 0 [ 1376.696083][T24513] netem: change failed [ 1376.932347][T24522] netlink: 'syz.0.13567': attribute type 1 has an invalid length. [ 1377.032127][T24526] Cannot find set identified by id 65534 to match [ 1377.037816][T24529] netlink: 'syz.4.13570': attribute type 39 has an invalid length. [ 1377.138291][T24537] netlink: 'syz.5.13571': attribute type 10 has an invalid length. [ 1377.149293][T24534] sctp: [Deprecated]: syz.2.13572 (pid 24534) Use of int in max_burst socket option. [ 1377.149293][T24534] Use struct sctp_assoc_value instead [ 1377.166923][T24537] bond0: (slave wlan1): Opening slave failed [ 1377.167780][T24538] netlink: 'syz.5.13571': attribute type 10 has an invalid length. [ 1377.206656][T24538] bond0: (slave wlan1): Opening slave failed [ 1378.043559][T24579] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13586'. [ 1378.165900][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 1378.174097][ C1] lec:lec_tx_timeout: lec0 [ 1378.317928][T24598] IPv6: sit1: Disabled Multicast RS [ 1378.583519][T24624] netlink: 'syz.3.13596': attribute type 1 has an invalid length. [ 1378.602072][T24620] macvtap1: entered allmulticast mode [ 1378.609274][T24620] veth0_macvtap: entered allmulticast mode [ 1378.620414][T24625] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1378.621625][T24624] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1378.874826][T24639] __nla_validate_parse: 5 callbacks suppressed [ 1378.874849][T24639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13598'. [ 1379.001269][T24641] bond2: entered allmulticast mode [ 1379.036274][T24644] bridge0: entered promiscuous mode [ 1379.041812][T24644] bridge0: entered allmulticast mode [ 1379.053605][T24644] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 1379.149573][T24655] xt_hashlimit: size too large, truncated to 1048576 [ 1379.359770][T24671] netlink: 'syz.0.13605': attribute type 1 has an invalid length. [ 1379.471648][T24671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1379.499659][ T7169] net_ratelimit: 33 callbacks suppressed [ 1379.499683][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1379.580829][T24671] macvtap2: entered allmulticast mode [ 1379.711221][T24682] bond3: (slave geneve2): making interface the new active one [ 1379.726226][T24690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13609'. [ 1379.729224][T24682] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1379.735554][T24690] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1379.759156][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1379.945191][T24701] netlink: 14416 bytes leftover after parsing attributes in process `syz.4.13609'. [ 1379.962597][T24704] netlink: 208 bytes leftover after parsing attributes in process `syz.2.13614'. [ 1379.979550][T24701] openvswitch: netlink: Flow key attr not present in new flow. [ 1380.005914][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1380.107716][T24717] xt_bpf: check failed: parse error [ 1380.116196][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1380.127797][T24717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13616'. [ 1380.209178][T24720] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13617'. [ 1380.219231][T24720] 8021q: VLANs not supported on F [ 1380.226837][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1380.330595][T24724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13619'. [ 1380.340226][T16725] bond13: (slave bridge2): failed to get link speed/duplex [ 1380.371397][T24724] netlink: 92 bytes leftover after parsing attributes in process `syz.0.13619'. [ 1380.411031][T24726] netlink: 'syz.2.13618': attribute type 62 has an invalid length. [ 1380.422892][T24726] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1380.457636][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1380.511725][T24731] team0: Caught tx_queue_len zero misconfig [ 1380.566439][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1382.698641][T24691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1382.931082][T24740] netlink: 'syz.2.13625': attribute type 11 has an invalid length. [ 1382.955404][T24743] bridge0: port 3(gretap0) entered disabled state [ 1382.963158][T24740] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13625'. [ 1382.984481][T24743] bridge0: port 1(0x9) entered disabled state [ 1383.017003][T24748] netlink: 'syz.3.13626': attribute type 16 has an invalid length. [ 1383.065908][T24752] netlink: 'syz.4.13627': attribute type 1 has an invalid length. [ 1383.071118][T24748] netlink: 'syz.3.13626': attribute type 17 has an invalid length. [ 1383.122209][T24752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13627'. [ 1383.182678][T24754] netlink: 'syz.5.13628': attribute type 2 has an invalid length. [ 1383.209807][T24748] bridge0: port 3(gretap0) entered blocking state [ 1383.216476][T24748] bridge0: port 3(gretap0) entered forwarding state [ 1383.493432][T24778] netlink: 'syz.3.13634': attribute type 1 has an invalid length. [ 1383.962663][T24806] veth7: entered allmulticast mode [ 1384.252781][T24818] macvlan0: entered promiscuous mode [ 1384.443282][T24826] __nla_validate_parse: 3 callbacks suppressed [ 1384.443298][T24826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13649'. [ 1384.461395][T24826] macvlan0: left promiscuous mode [ 1384.471914][T24826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13649'. [ 1384.486029][T16899] Bluetooth: hci4: command 0x0406 tx timeout [ 1384.595923][T16725] net_ratelimit: 33 callbacks suppressed [ 1384.595950][T16725] bond13: (slave bridge2): failed to get link speed/duplex [ 1384.715959][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1384.826273][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1384.936055][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1385.056069][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1385.165979][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1385.276303][T16725] bond13: (slave bridge2): failed to get link speed/duplex [ 1385.385871][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1385.496156][T16725] bond13: (slave bridge2): failed to get link speed/duplex [ 1385.607195][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1386.743972][T24793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1386.755168][T24826] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13649'. [ 1386.806871][T24826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13649'. [ 1386.980508][T24839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13654'. [ 1387.029466][T24839] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1387.053363][T24839] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1387.069191][T24839] gretap1: entered promiscuous mode [ 1387.074687][T24839] gretap1: entered allmulticast mode [ 1387.177306][T24841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13653'. [ 1387.182151][T24845] netlink: 'syz.5.13655': attribute type 1 has an invalid length. [ 1387.202138][T24845] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13655'. [ 1387.278117][T24853] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.13657'. [ 1387.290322][T24853] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.13657'. [ 1387.537350][T24867] Cannot find set identified by id 65534 to match [ 1387.553547][T24868] netlink: 'syz.4.13662': attribute type 1 has an invalid length. [ 1387.620587][T24877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13661'. [ 1389.615485][T22962] Bluetooth: hci6: command 0x0406 tx timeout [ 1390.513458][T24868] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1390.560040][T24870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1390.622808][ T7169] net_ratelimit: 13 callbacks suppressed [ 1390.622863][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1390.779934][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1390.928002][T24916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13671'. [ 1390.946610][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1391.056922][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1391.197735][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1391.288835][T24937] netlink: 'syz.3.13677': attribute type 10 has an invalid length. [ 1391.306622][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1391.381204][T24937] team0: Port device dummy0 added [ 1391.440401][T16725] bond13: (slave bridge2): failed to get link speed/duplex [ 1391.556078][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1391.660993][T24953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13682'. [ 1391.686125][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1391.795981][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1394.184813][T24929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1394.439504][T24974] netlink: 220 bytes leftover after parsing attributes in process `syz.4.13688'. [ 1394.492520][T24976] netlink: 548 bytes leftover after parsing attributes in process `syz.5.13686'. [ 1394.943185][T24990] syzkaller1: entered promiscuous mode [ 1394.949016][T24990] syzkaller1: entered allmulticast mode [ 1394.957292][T24994] x_tables: unsorted entry at hook 1 [ 1395.148224][T25011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13693'. [ 1395.151075][T25012] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20004 [ 1395.171321][T25012] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1395.315437][T25022] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1395.383593][T25024] netlink: 'syz.5.13701': attribute type 16 has an invalid length. [ 1395.392289][T25024] netlink: 'syz.5.13701': attribute type 17 has an invalid length. [ 1395.421092][T25024] netlink: 'syz.5.13701': attribute type 2 has an invalid length. [ 1395.430569][T25024] netlink: 119 bytes leftover after parsing attributes in process `syz.5.13701'. [ 1395.646990][ T7175] net_ratelimit: 32 callbacks suppressed [ 1395.647016][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1395.767207][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1395.875967][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1395.986469][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1396.096049][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1396.206036][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1396.316517][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1396.426069][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1396.536102][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1396.646972][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1398.009367][T24999] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1398.381023][T25042] netlink: 'syz.5.13706': attribute type 58 has an invalid length. [ 1398.424093][T25042] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13706'. [ 1398.430780][T25038] can: request_module (can-proto-0) failed. [ 1398.581252][T25053] xt_addrtype: ipv6 does not support BROADCAST matching [ 1398.619733][T25056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13712'. [ 1398.693041][T25061] netlink: 'syz.4.13713': attribute type 1 has an invalid length. [ 1398.848090][T25077] xt_nat: multiple ranges no longer supported [ 1398.855446][T25080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13718'. [ 1398.866193][T25080] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13718'. [ 1398.882918][T25080] gretap1: entered promiscuous mode [ 1398.890668][T25080] gretap1: entered allmulticast mode [ 1399.023924][T25087] netlink: 'syz.5.13721': attribute type 4 has an invalid length. [ 1399.051423][T25089] bond_slave_1: entered allmulticast mode [ 1399.572439][T25123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13728'. [ 1399.626239][T25125] x_tables: unsorted entry at hook 3 [ 1400.687981][ T1159] net_ratelimit: 36 callbacks suppressed [ 1400.688006][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1400.806390][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1400.915966][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1401.026604][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1401.136578][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1401.245978][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1401.356583][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1401.465874][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1401.576378][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1401.662833][T25060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1401.688361][T25107] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13725'. [ 1401.706429][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1401.862325][T25130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13730'. [ 1402.383226][T25177] netlink: 'syz.2.13743': attribute type 30 has an invalid length. [ 1402.885970][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1402.902066][T13095] bridge_slave_0: left allmulticast mode [ 1402.909049][T13095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.116110][T13095] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1403.591965][T13095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.603536][T13095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.614782][T13095] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1403.630308][T13095] bond0 (unregistering): Released all slaves [ 1403.641914][T13095] bond1 (unregistering): (slave vlan0): Releasing backup interface [ 1403.651532][T13095] veth0_vlan: left promiscuous mode [ 1403.658133][T13095] bond1 (unregistering): Released all slaves [ 1403.672912][T13095] bond2 (unregistering): Released all slaves [ 1403.686968][T13095] bond3 (unregistering): Released all slaves [ 1403.701960][T13095] bond4 (unregistering): Released all slaves [ 1403.717692][T13095] bond5 (unregistering): Released all slaves [ 1403.827147][T13095] tipc: Disabling bearer [ 1403.843919][T13095] tipc: Left network mode [ 1404.530562][T13095] hsr_slave_0: left promiscuous mode [ 1404.559428][T13095] hsr_slave_1: left promiscuous mode [ 1404.568220][T13095] veth1_vlan: left allmulticast mode [ 1404.573725][T13095] veth1_macvtap: left promiscuous mode [ 1404.579898][T13095] veth0_macvtap: left promiscuous mode [ 1404.585448][T13095] veth1_vlan: left promiscuous mode [ 1404.639454][T13095] pimreg3 (unregistering): left allmulticast mode [ 1404.667964][T13095] pim6reg (unregistering): left allmulticast mode [ 1405.144387][T13095] IPVS: stop unused estimator thread 0... [ 1405.254279][T25162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1405.730310][ T7175] net_ratelimit: 22 callbacks suppressed [ 1405.730336][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1405.798173][T25228] netlink: 'syz.0.13754': attribute type 3 has an invalid length. [ 1405.818803][T25228] netlink: 'syz.0.13754': attribute type 3 has an invalid length. [ 1405.847343][T25228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13754'. [ 1405.859557][T25233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13751'. [ 1405.877417][ T149] bond13: (slave bridge2): failed to get link speed/duplex [ 1405.921502][T25234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13754'. [ 1406.126871][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1406.243200][T25249] can: request_module (can-proto-3) failed. [ 1406.259615][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1406.299820][T25258] netlink: 19 bytes leftover after parsing attributes in process `syz.4.13759'. [ 1406.430252][T25265] bond3 (unregistering): Released all slaves [ 1406.497248][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1406.534316][T25284] netlink: 'syz.4.13766': attribute type 10 has an invalid length. [ 1406.650074][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1406.760759][T25298] xt_hashlimit: size too large, truncated to 1048576 [ 1406.767830][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1407.119995][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1407.130448][T25309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13774'. [ 1407.210629][T25319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1407.235894][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1407.345814][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1407.429336][T25324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13779'. [ 1407.697338][T25313] infiniband syz2: set active [ 1407.711036][T25313] infiniband syz2: added veth0_macvtap [ 1407.848515][T25313] RDS/IB: syz2: added [ 1407.852657][T25313] smc: adding ib device syz2 with port count 1 [ 1407.864982][T25313] smc: ib device syz2 port 1 has no pnetid [ 1407.905357][T25351] netlink: 'syz.2.13788': attribute type 1 has an invalid length. [ 1408.038890][T25351] bond2: (slave ip6gretap0): making interface the new active one [ 1408.069649][T25351] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1408.102950][T25351] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1408.125948][T25351] bond2: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1408.187171][T25362] tipc: Enabling of bearer rejected, failed to enable media [ 1408.282633][T25362] bond4: (slave gre0): Device is not bonding slave [ 1408.290714][T25362] bond4: option active_slave: invalid value (gre0) [ 1408.318493][T25362] bond4 (unregistering): Released all slaves [ 1408.468284][ T29] audit: type=1107 audit(1775044236.415:20): pid=25371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='mLӼoݝB$7;YyӁ Gvj4 o)@ocd8㫔NHg`9:hd-k~+70b3mPNcXJȑ(Y.lL]ś`0"`IK ʨ8HȾ>4L@OޱiyQ[u *01%ɃOtV7Sid' [ 1408.623057][T25380] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.13798'. [ 1408.749061][T25385] netlink: 45 bytes leftover after parsing attributes in process `syz.4.13799'. [ 1408.881855][T25390] netlink: 'syz.2.13800': attribute type 1 has an invalid length. [ 1408.885153][T25392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13801'. [ 1408.912019][T25390] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13800'. [ 1408.988565][T25396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1409.214055][T25404] bond3: option miimon: invalid value (18446744073709551585) [ 1409.231658][T25404] bond3: option miimon: allowed values 0 - 2147483647 [ 1409.257973][T25404] bond3 (unregistering): Released all slaves [ 1409.399412][T25408] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1410.331611][T25451] 8021q: VLANs not supported on ip_vti0 [ 1410.489207][T25461] netlink: 'syz.2.13823': attribute type 2 has an invalid length. [ 1410.825857][ T7175] net_ratelimit: 28 callbacks suppressed [ 1410.825880][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1410.955880][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1411.027129][T25489] netlink: 'syz.2.13830': attribute type 4 has an invalid length. [ 1411.044373][T25489] __nla_validate_parse: 10 callbacks suppressed [ 1411.044395][T25489] netlink: 17 bytes leftover after parsing attributes in process `syz.2.13830'. [ 1411.077341][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1411.097377][T25488] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13831'. [ 1411.108898][T25497] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.13830'. [ 1411.186070][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1411.306951][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1411.451770][ T65] bond13: (slave bridge2): failed to get link speed/duplex [ 1411.531252][T25515] netlink: 'syz.5.13836': attribute type 10 has an invalid length. [ 1411.595858][ T149] bond13: (slave bridge2): failed to get link speed/duplex [ 1411.682010][T25522] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1411.787933][T25526] syzkaller0: entered promiscuous mode [ 1411.802612][T25526] syzkaller0: entered allmulticast mode [ 1411.863615][T25526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13837'. [ 1411.883147][ T149] bond13: (slave bridge2): failed to get link speed/duplex [ 1411.902687][T25526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13837'. [ 1412.039970][T25531] syzkaller0: entered allmulticast mode [ 1412.061677][T25536] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1412.220883][T25542] tipc: Started in network mode [ 1412.240560][T25542] tipc: Node identity 4, cluster identity 4711 [ 1412.271009][T25542] tipc: Node number set to 4 [ 1412.342730][T25548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13844'. [ 1412.346923][T25549] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1412.386003][T25549] syzkaller1: linktype set to 823 [ 1412.432345][T25552] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1412.439683][T25552] IPv6: NLM_F_CREATE should be set when creating new route [ 1412.447006][T25552] IPv6: NLM_F_CREATE should be set when creating new route [ 1412.598980][T25557] syzkaller0: entered promiscuous mode [ 1412.615143][T25557] syzkaller0: entered allmulticast mode [ 1412.633258][T25557] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13848'. [ 1412.729999][T25562] netlink: 1 bytes leftover after parsing attributes in process `syz.3.13850'. [ 1412.799342][T25564] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1412.997738][T25573] netlink: 'syz.2.13855': attribute type 1 has an invalid length. [ 1413.089502][T25573] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1413.199991][T25579] vlan2: entered allmulticast mode [ 1413.233919][T25579] bond3: entered allmulticast mode [ 1413.269732][T25581] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.13854'. [ 1413.311193][T25573] bond3: (slave geneve2): making interface the new active one [ 1413.345702][T25573] geneve2: entered allmulticast mode [ 1413.358773][T25573] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1413.358908][T25579] netlink: 'syz.2.13855': attribute type 10 has an invalid length. [ 1413.446696][ T149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.465493][ T149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.474891][ T149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.532611][ T149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.792209][T25602] netlink: 80 bytes leftover after parsing attributes in process `syz.5.13863'. [ 1414.041106][T25612] netlink: 'syz.2.13865': attribute type 1 has an invalid length. [ 1414.237955][T25614] bond20 (unregistering): Released all slaves [ 1414.478770][T25623] H: renamed from dummy0 [ 1414.816446][ T29] audit: type=1800 audit(1775044242.755:21): pid=25638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.13875" name="memory.events" dev="tmpfs" ino=2994 res=0 errno=0 [ 1414.861126][T25644] netlink: 'syz.3.13873': attribute type 1 has an invalid length. [ 1415.099932][T25648] syzkaller0: entered promiscuous mode [ 1415.105476][T25648] syzkaller0: entered allmulticast mode [ 1415.498835][T25671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1415.754696][T25678] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.997937][T25678] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.046796][T13095] net_ratelimit: 37 callbacks suppressed [ 1416.046819][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1416.073325][T25704] __nla_validate_parse: 6 callbacks suppressed [ 1416.073346][T25704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13892'. [ 1416.083084][T25700] nlmon0: Caught tx_queue_len zero misconfig [ 1416.092705][T25704] netlink: 'syz.4.13892': attribute type 1 has an invalid length. [ 1416.126350][T25704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13892'. [ 1416.211432][T25678] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.290636][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1416.440819][T25678] bond0: (slave netdevsim0): Releasing backup interface [ 1416.479591][T25726] netlink: 'syz.3.13898': attribute type 58 has an invalid length. [ 1416.500050][T25678] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.518479][T25726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13898'. [ 1416.547330][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1416.666669][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1416.714570][ T149] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.749895][ T7169] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.811997][ T1159] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.841120][ T149] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.856060][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1416.961830][T25738] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13902'. [ 1416.964660][T25744] nft_compat: unsupported protocol 5 [ 1416.982323][T25741] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.13903'. [ 1416.983245][T25744] nft_compat: unsupported protocol 5 [ 1417.016699][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1417.027734][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13903'. [ 1417.136142][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1417.247838][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1417.369383][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1417.453224][T25771] netlink: 'syz.0.13912': attribute type 8 has an invalid length. [ 1417.474564][T25771] sch_fq: defrate 0 ignored. [ 1417.580972][ T1159] bond13: (slave bridge2): failed to get link speed/duplex [ 1417.708213][T25781] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13917'. [ 1417.736520][T25777] netlink: 'syz.0.13915': attribute type 11 has an invalid length. [ 1417.744491][T25777] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13915'. [ 1417.763800][T25777] syzkaller0: entered promiscuous mode [ 1417.824998][T25785] bond4: option fail_over_mac: invalid value (16) [ 1417.842749][T25785] bond4 (unregistering): Released all slaves [ 1417.884420][T25786] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1418.030644][T25790] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13919'. [ 1418.051663][T25790] tipc: Invalid UDP bearer configuration [ 1418.051726][T25790] tipc: Enabling of bearer rejected, failed to enable media [ 1418.170186][T25789] syzkaller0: entered promiscuous mode [ 1418.178621][T25789] syzkaller0: entered allmulticast mode [ 1419.524204][T25832] netlink: 'syz.3.13931': attribute type 1 has an invalid length. [ 1423.218333][ T7169] net_ratelimit: 1 callbacks suppressed [ 1423.218359][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1423.342082][T25840] tipc: Started in network mode [ 1423.348214][T25840] tipc: Node identity 4, cluster identity 5 [ 1423.355500][T25840] tipc: Node number set to 4 [ 1423.369305][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1423.389271][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1423.440561][T25847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1423.447907][T25847] IPv6: NLM_F_CREATE should be set when creating new route [ 1423.455240][T25847] IPv6: NLM_F_CREATE should be set when creating new route [ 1423.462567][T25847] IPv6: NLM_F_CREATE should be set when creating new route [ 1423.489862][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1423.518849][T25845] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 1423.532626][T25847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1423.630643][T25855] netlink: 204 bytes leftover after parsing attributes in process `syz.2.13938'. [ 1423.763006][T25843] tun0: tun_chr_ioctl cmd 1074025675 [ 1423.768744][T25843] tun0: persist disabled [ 1423.797707][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1423.850574][T25865] bond4: option mode: invalid value (133) [ 1423.859049][T25865] bond4 (unregistering): Released all slaves [ 1423.917512][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1424.033939][ T7169] bond13: (slave bridge2): failed to get link speed/duplex [ 1424.176862][T22851] bond13: (slave bridge2): failed to get link speed/duplex [ 1424.299161][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1424.374451][T25892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13946'. [ 1424.406104][T25892] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1424.428111][ T7175] bond13: (slave bridge2): failed to get link speed/duplex [ 1424.731370][T25906] can: request_module (can-proto-0) failed. [ 1424.755407][T25906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13950'. [ 1424.891477][T25925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13956'. [ 1425.263811][T25947] xt_hashlimit: size too large, truncated to 1048576 [ 1425.264404][T25950] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 1425.469283][T25961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13967'. [ 1425.584230][T25962] bridge0: port 4(batadv3) entered blocking state [ 1425.594663][T25962] bridge0: port 4(batadv3) entered disabled state [ 1425.608937][T25962] batadv3: entered allmulticast mode [ 1425.623398][T25962] batadv3: entered promiscuous mode [ 1425.706560][T25968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13969'. [ 1425.939432][T25981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13973'. [ 1426.076905][ T48] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 1426.087093][ T48] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 1426.117133][T16899] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1426.130968][T16899] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1426.140880][T16899] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1426.149272][T16899] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1426.160177][T16899] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1426.404036][T22851] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.456832][T25995] netlink: 'syz.2.13977': attribute type 1 has an invalid length. [ 1426.546988][T22851] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.644634][T25998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13977'. [ 1426.720748][T26002] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1426.919996][T22851] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.966277][T26006] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13979'. [ 1427.651768][T22851] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.204787][T26051] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13991'. [ 1428.241489][T26051] netlink: 'syz.4.13991': attribute type 2 has an invalid length. [ 1428.254147][T13095] net_ratelimit: 22 callbacks suppressed [ 1428.254179][T13095] bond13: (slave bridge2): failed to get link speed/duplex [ 1428.269987][T22962] Bluetooth: hci2: command tx timeout [ 1428.398070][T16724] bond13: (slave bridge2): failed to get link speed/duplex [ 1428.413136][T25986] chnl_net:caif_netlink_parms(): no params data found [ 1428.539292][T26065] syzkaller0: entered promiscuous mode [ 1428.548922][T26065] syzkaller0: entered allmulticast mode [ 1428.560198][T16724] bond13: (slave bridge2): failed to get link speed/duplex [ 1428.652733][T26079] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1429.047351][T22851] dvmrp0 (unregistering): left allmulticast mode [ 1429.082582][T22851] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1429.125633][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 1429.133731][ C1] lec:lec_tx_timeout: lec0 [ 1429.152460][T22851] bond13 (unregistering): (slave bridge2): Removing an active aggregator [ 1429.161788][T22851] bond13 (unregistering): (slave bridge2): Releasing backup interface [ 1429.171146][T22851] bridge2 (unregistering): left promiscuous mode [ 1429.178240][T22851] bridge2 (unregistering): left allmulticast mode [ 1429.372053][T22851] bond0 (unregistering): Released all slaves [ 1429.383813][T22851] bond1 (unregistering): Released all slaves [ 1429.398055][T22851] bond2 (unregistering): Released all slaves [ 1429.412354][T22851] bond3 (unregistering): Released all slaves [ 1429.431526][T22851] bond4 (unregistering): Released all slaves [ 1429.450902][T22851] bond5 (unregistering): Released all slaves [ 1429.464471][T22851] bond6 (unregistering): Released all slaves [ 1429.481298][T22851] bond7 (unregistering): Released all slaves [ 1429.495404][T22851] bond8 (unregistering): Released all slaves [ 1429.513343][T22851] bond9 (unregistering): Released all slaves [ 1429.536992][T22851] bond10 (unregistering): Released all slaves [ 1429.550629][T22851] bond11 (unregistering): Released all slaves [ 1429.565113][T22851] bond12 (unregistering): Released all slaves [ 1429.582910][T22851] bond13 (unregistering): Released all slaves [ 1429.598252][T22851] bond14 (unregistering): Released all slaves [ 1429.618077][T22851] bond15 (unregistering): (slave lo): Releasing backup interface [ 1429.628489][T22851] bond15 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1429.641129][T22851] bond15 (unregistering): Released all slaves [ 1429.655202][T22851] bond16 (unregistering): Released all slaves [ 1429.669751][T22851] bond17 (unregistering): Released all slaves [ 1429.683611][T22851] bond18 (unregistering): Released all slaves [ 1429.706042][T22851] bond19 (unregistering): Released all slaves [ 1430.081551][T22851] : left promiscuous mode [ 1430.266319][T22851] tipc: Disabling bearer [ 1430.278160][T22851] tipc: Left network mode [ 1430.331368][T22962] Bluetooth: hci2: command tx timeout [ 1430.334825][T26128] __nla_validate_parse: 3 callbacks suppressed [ 1430.334843][T26128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14007'. [ 1430.401037][T25986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.413824][T26127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14007'. [ 1430.417529][T25986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.439830][T25986] bridge_slave_0: entered allmulticast mode [ 1430.479043][T25986] bridge_slave_0: entered promiscuous mode [ 1430.512858][T25986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.531454][T25986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.557920][T25986] bridge_slave_1: entered allmulticast mode [ 1430.578317][T25986] bridge_slave_1: entered promiscuous mode [ 1430.600744][T26137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14008'. [ 1430.762996][T26137] bond3: entered promiscuous mode [ 1430.807484][T26137] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1430.868368][T25986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.893262][T25986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.162781][T26157] IPv6: sit1: Disabled Multicast RS [ 1431.170046][T26157] sit1: entered allmulticast mode [ 1431.241120][T25986] team0: Port device team_slave_0 added [ 1431.264076][T25986] team0: Port device team_slave_1 added [ 1431.368182][T26164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14013'. [ 1431.423913][T25986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1431.439245][T26164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14013'. [ 1431.462874][T25986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.500198][T25986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1431.515097][T25986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1431.523184][T25986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.551960][T26177] netlink: 'syz.0.14018': attribute type 9 has an invalid length. [ 1431.565988][T25986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.660229][T26183] netlink: 'syz.4.14021': attribute type 1 has an invalid length. [ 1431.670827][T26183] netlink: 476 bytes leftover after parsing attributes in process `syz.4.14021'. [ 1431.680997][T26183] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.14021'. [ 1431.710484][T26183] digital: digital_start_poll: Unknown protocol [ 1431.884505][T25986] hsr_slave_0: entered promiscuous mode [ 1431.907279][T25986] hsr_slave_1: entered promiscuous mode [ 1432.270300][T26198] H: renamed from dummy0 [ 1432.409882][T22962] Bluetooth: hci2: command tx timeout [ 1432.907402][T26232] x_tables: unsorted entry at hook 3 [ 1433.311551][T22851] hsr_slave_0: left promiscuous mode [ 1433.346927][T22851] 0: left promiscuous mode [ 1433.395930][T22851] veth1_macvtap: left promiscuous mode [ 1433.401491][T22851] veth0_macvtap: left promiscuous mode [ 1433.408367][T22851] veth1_vlan: left promiscuous mode [ 1433.413894][T22851] veth0_vlan: left promiscuous mode [ 1434.392290][T26277] netlink: 'syz.2.14045': attribute type 1 has an invalid length. [ 1434.431420][T26277] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1434.491036][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a617000: rx timeout, send abort [ 1434.500170][T22962] Bluetooth: hci2: command tx timeout [ 1434.549039][T26277] tipc: Enabled bearer , priority 0 [ 1434.582384][T26277] syzkaller0: entered promiscuous mode [ 1434.596979][T22851] IPVS: stop unused estimator thread 0... [ 1434.603034][T26277] syzkaller0: entered allmulticast mode [ 1434.667974][T26279] tipc: Resetting bearer [ 1434.760523][T26279] tipc: Resetting bearer [ 1434.846673][T26279] tipc: Disabling bearer [ 1434.976306][T26296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14047'. [ 1434.980994][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a617c00: rx timeout, send abort [ 1434.999364][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a617000: abort rx timeout. Force session deactivation [ 1435.152620][T25986] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1435.221848][T25986] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1435.253936][T25986] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1435.417568][T26315] IPv6: sit1: Disabled Multicast RS [ 1435.435281][T26315] sit1: entered allmulticast mode [ 1435.477031][T25986] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1435.493669][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a617c00: abort rx timeout. Force session deactivation [ 1435.501323][T26324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14053'. [ 1435.532728][T26325] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1435.654140][T26339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14054'. [ 1435.793350][T25986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.835107][T25986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.858512][T13094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.865755][T13094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.903391][T13094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.910653][T13094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.044101][T26354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1436.127037][T26359] netlink: 'syz.4.14059': attribute type 1 has an invalid length. [ 1436.148582][T26359] netlink: 'syz.4.14059': attribute type 1 has an invalid length. [ 1436.656585][T26389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14065'. [ 1436.661991][T25986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.537821][T26426] bond_slave_1: left allmulticast mode [ 1437.643696][T26426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.659534][T26434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14075'. [ 1438.237418][ T762] lec:lec_start_xmit: lec0:No lecd attached [ 1438.389744][T26426] bond0: left allmulticast mode [ 1438.394645][T26426] lo: left allmulticast mode [ 1438.420988][T26426] bond1: left promiscuous mode [ 1438.429877][T26426] ipip0: left promiscuous mode [ 1438.447445][T26426] veth0_macvtap: left allmulticast mode [ 1438.459839][T26426] macvtap1: left allmulticast mode [ 1438.471705][T26426] bond2: left allmulticast mode [ 1438.478848][T26426] bridge0: left promiscuous mode [ 1438.483835][T26426] bridge0: left allmulticast mode [ 1438.514634][T26426] macvtap2: left allmulticast mode [ 1438.548972][T26426] gretap1: left promiscuous mode [ 1438.554016][T26426] gretap1: left allmulticast mode [ 1438.623143][T26434] bond2: (slave ip6gretap0): Releasing active interface [ 1438.674975][T26454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14077'. [ 1438.711317][ T979] syz2: Port: 1 Link DOWN [ 1438.713534][ T7161] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1438.725357][ T7161] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.738306][T26459] netlink: 220 bytes leftover after parsing attributes in process `syz.0.14078'. [ 1438.772253][ T7161] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1438.791884][T26459] netlink: 'syz.0.14078': attribute type 2 has an invalid length. [ 1438.796376][ T7161] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.833317][T26456] veth0: entered promiscuous mode [ 1438.859348][ T7161] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1438.890167][ T7161] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.925772][ T7161] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1438.934714][ T7161] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.988452][T26453] veth0: left promiscuous mode [ 1439.103556][T25986] veth0_vlan: entered promiscuous mode [ 1439.154967][T25986] veth1_vlan: entered promiscuous mode [ 1439.291853][T25986] veth0_macvtap: entered promiscuous mode [ 1439.348046][T25986] veth1_macvtap: entered promiscuous mode [ 1439.441381][T25986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1439.488498][T26492] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.14086'. [ 1439.510140][T25986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1439.524357][T26492] netlink: Conntrack attr has 3 unknown bytes [ 1439.540618][T26492] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14086'. [ 1439.553873][T26492] netlink: 64 bytes leftover after parsing attributes in process `syz.4.14086'. [ 1439.651067][T13094] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.672338][T13094] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.673039][T26497] netlink: 'syz.3.14087': attribute type 10 has an invalid length. [ 1439.689802][T13094] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.689850][T13094] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.837331][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14089'. [ 1440.007724][T16724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1440.033382][T16724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.217100][ T7161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1440.234813][ T7161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.252162][T26521] tipc: Enabling of bearer rejected, failed to enable media [ 1440.579899][T26539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14098'. [ 1440.728982][T26551] netdevsim netdevsim2: Direct firmware load for .. @ failed with error -2 [ 1440.759985][T26551] netdevsim netdevsim2: Falling back to sysfs fallback for: .. @ [ 1440.821906][T26557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1440.829342][T26557] IPv6: NLM_F_CREATE should be set when creating new route [ 1440.839315][T26557] lo: entered allmulticast mode [ 1440.847532][T26557] tunl0: entered allmulticast mode [ 1440.855218][T26559] netlink: 'syz.2.14102': attribute type 7 has an invalid length. [ 1440.856820][T26557] gre0: entered allmulticast mode [ 1440.888479][T26557] gretap0: entered allmulticast mode [ 1440.936685][T26557] erspan0: entered allmulticast mode [ 1440.949432][T26557] ip_vti0: entered allmulticast mode [ 1440.987775][T26557] ip6_vti0: entered allmulticast mode [ 1441.019006][T26557] sit0: entered allmulticast mode [ 1441.050213][T26557] ip6tnl0: entered allmulticast mode [ 1441.112163][T26557] ip6gre0: entered allmulticast mode [ 1441.123586][T26557] syz_tun: entered allmulticast mode [ 1441.158445][T26557] ip6gretap0: entered allmulticast mode [ 1441.234932][T26557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.242784][T26557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.256323][T26557] bridge0: entered allmulticast mode [ 1441.266669][T26557] vcan0: entered allmulticast mode [ 1441.315141][T26557] bond0: entered allmulticast mode [ 1441.328569][T26557] bond_slave_0: entered allmulticast mode [ 1441.335237][T26557] bond_slave_1: entered allmulticast mode [ 1441.347835][T26557] team0: entered allmulticast mode [ 1441.353024][T26557] team_slave_0: entered allmulticast mode [ 1441.366403][T26557] team_slave_1: entered allmulticast mode [ 1441.375372][T26557] dummy0: entered allmulticast mode [ 1441.398805][T26557] nlmon0: entered allmulticast mode [ 1441.425029][T26557] caif0: entered allmulticast mode [ 1441.431751][T26557] batadv0: entered allmulticast mode [ 1441.443315][T26557] vxcan0: entered allmulticast mode [ 1441.466436][T26557] vxcan1: entered allmulticast mode [ 1441.478206][T26557] veth0: entered allmulticast mode [ 1441.490757][T26557] veth1: entered allmulticast mode [ 1441.513586][T26557] wg0: entered allmulticast mode [ 1441.523230][T26557] wg1: entered allmulticast mode [ 1441.542065][T26557] wg2: entered allmulticast mode [ 1441.565445][T26557] veth0_to_bridge: entered allmulticast mode [ 1441.599256][T26557] veth1_to_bridge: entered allmulticast mode [ 1441.632145][T26557] veth0_to_bond: entered allmulticast mode [ 1441.668206][T26557] veth1_to_bond: entered allmulticast mode [ 1441.702169][T26557] veth0_to_team: entered allmulticast mode [ 1441.727301][T26557] veth1_to_team: entered allmulticast mode [ 1441.761659][T26557] veth0_to_batadv: entered allmulticast mode [ 1441.783562][T26557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1441.798436][T26557] batadv_slave_0: entered allmulticast mode [ 1441.811552][T26557] veth1_to_batadv: entered allmulticast mode [ 1441.829942][T26557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1441.847184][T26557] batadv_slave_1: entered allmulticast mode [ 1441.857395][T26557] xfrm0: entered allmulticast mode [ 1441.908180][T26557] veth0_to_hsr: entered allmulticast mode [ 1441.920088][T26557] hsr_slave_0: entered allmulticast mode [ 1441.938829][T26557] veth1_to_hsr: entered allmulticast mode [ 1441.956635][T26557] hsr_slave_1: entered allmulticast mode [ 1441.988676][T26557] hsr0: entered allmulticast mode [ 1442.003748][T26557] veth1_virt_wifi: entered allmulticast mode [ 1442.019968][T26557] veth0_virt_wifi: entered allmulticast mode [ 1442.038918][T26557] virt_wifi0: entered allmulticast mode [ 1442.044827][T26557] veth1_vlan: entered allmulticast mode [ 1442.066302][T26557] veth0_vlan: entered allmulticast mode [ 1442.109860][T26557] vlan0: entered allmulticast mode [ 1442.136182][T26557] vlan1: entered allmulticast mode [ 1442.142088][T26557] macvlan0: entered allmulticast mode [ 1442.176028][T26557] macvlan1: entered allmulticast mode [ 1442.187466][T26557] ipvlan0: entered allmulticast mode [ 1442.192970][T26557] ipvlan1: entered allmulticast mode [ 1442.199355][T26557] veth1_macvtap: entered allmulticast mode [ 1442.217954][T26557] veth0_macvtap: entered allmulticast mode [ 1442.243828][T26557] macvtap0: entered allmulticast mode [ 1442.261245][T26557] macsec0: entered allmulticast mode [ 1442.286252][T26557] geneve0: entered allmulticast mode [ 1442.306543][T26557] geneve1: entered allmulticast mode [ 1442.323762][T26557] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1442.348515][T26557] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1442.367878][T26557] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 1442.400573][T26557] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 1442.424212][T26557] mac80211_hwsim hwsim171 wlan0: entered allmulticast mode [ 1442.451501][T26557] mac80211_hwsim hwsim172 wlan1: entered allmulticast mode [ 1442.515500][ T7161] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.536523][ T7161] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.556372][ T7161] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.565334][ T7161] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.789101][T26598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14114'. [ 1442.813916][T26598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14114'. [ 1442.881856][ T7161] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1442.920547][ T7161] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1442.984560][ T7161] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1443.004514][T26611] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1443.017742][ T7161] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1443.101476][T26622] netlink: 'syz.2.14120': attribute type 10 has an invalid length. [ 1443.136542][T26622] team0: Device veth0_vlan failed to register rx_handler [ 1443.233402][T26628] netlink: 'syz.0.14121': attribute type 1 has an invalid length. [ 1443.246376][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1443.254532][ C1] lec:lec_tx_timeout: lec0 [ 1443.257982][T26628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14121'. [ 1443.277262][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14123'. [ 1443.539568][T26645] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14125'. [ 1443.574843][T26645] syzkaller1: entered promiscuous mode [ 1443.580929][T26645] syzkaller1: entered allmulticast mode [ 1443.593499][T26645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14125'. [ 1443.807281][T26662] xt_hashlimit: size too large, truncated to 1048576 [ 1444.142183][T26679] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14136'. [ 1444.143332][T26677] netlink: 'syz.0.14137': attribute type 11 has an invalid length. [ 1444.160894][T26677] netlink: 'syz.0.14137': attribute type 4 has an invalid length. [ 1444.169994][T26677] netlink: 'syz.0.14137': attribute type 5 has an invalid length. [ 1444.179371][T26677] netlink: 'syz.0.14137': attribute type 6 has an invalid length. [ 1444.187386][T26677] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.14137'. [ 1444.374334][T26692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14141'. [ 1444.391444][T26692] mac80211_hwsim hwsim156 wlan1: entered allmulticast mode [ 1444.546860][T26695] netlink: 'syz.0.14142': attribute type 1 has an invalid length. [ 1444.847705][T26712] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1445.452230][T26749] netlink: 'syz.4.14158': attribute type 10 has an invalid length. [ 1445.940146][T26775] xt_TCPMSS: Only works on TCP SYN packets [ 1447.964599][T26718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1448.146556][T26788] __nla_validate_parse: 4 callbacks suppressed [ 1448.146578][T26788] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14168'. [ 1448.339400][T26806] netlink: 'syz.2.14175': attribute type 1 has an invalid length. [ 1448.402601][T26809] netlink: 'syz.4.14173': attribute type 1 has an invalid length. [ 1448.432604][T26806] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1448.439627][T26809] netlink: 228 bytes leftover after parsing attributes in process `syz.4.14173'. [ 1448.449284][T26809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14173'. [ 1448.543859][T26808] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1448.554157][T26821] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14176'. [ 1448.574690][T26806] vlan3: entered allmulticast mode [ 1448.580974][T26806] veth0_to_bond: entered allmulticast mode [ 1448.588757][T26806] bond5: (slave vlan3): Opening slave failed [ 1448.633385][T26812] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1448.978600][T26824] netlink: 'syz.5.14178': attribute type 16 has an invalid length. [ 1448.993311][T26824] netlink: 'syz.5.14178': attribute type 17 has an invalid length. [ 1449.021857][T26824] lo: left allmulticast mode [ 1449.042660][T26824] tunl0: left allmulticast mode [ 1449.067927][T26824] gre0: left allmulticast mode [ 1449.078685][T26824] gretap0: left allmulticast mode [ 1449.087116][T26824] erspan0: left allmulticast mode [ 1449.094977][T26824] ip_vti0: left allmulticast mode [ 1449.102727][T26824] ip6_vti0: left allmulticast mode [ 1449.110910][T26824] sit0: left allmulticast mode [ 1449.130447][T26824] ip6tnl0: left allmulticast mode [ 1449.150926][T26824] ip6gre0: left allmulticast mode [ 1449.169624][T26824] syz_tun: left allmulticast mode [ 1449.187901][T26824] ip6gretap0: left allmulticast mode [ 1449.207476][T26824] bridge0: left allmulticast mode [ 1449.218849][T26824] vcan0: left allmulticast mode [ 1449.226353][T26824] bond0: left allmulticast mode [ 1449.233544][T26824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.242866][T26824] team0: left allmulticast mode [ 1449.258126][T26824] 8021q: adding VLAN 0 to HW filter on device team0 [ 1449.274291][T26824] dummy0: left allmulticast mode [ 1449.283460][T26824] nlmon0: left allmulticast mode [ 1449.290531][T26824] caif0: left allmulticast mode [ 1449.295480][T26824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1449.332390][T26840] netlink: 'syz.0.14183': attribute type 13 has an invalid length. [ 1449.342015][T26840] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14183'. [ 1449.506705][T26848] netlink: 7 bytes leftover after parsing attributes in process `syz.0.14185'. [ 1449.630938][T26857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14187'. [ 1449.662575][T26858] sctp_setsockopt_delayed_ack: 23 callbacks suppressed [ 1449.662598][T26858] sctp: [Deprecated]: syz.5.14186 (pid 26858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1449.662598][T26858] Use struct sctp_sack_info instead [ 1449.717013][T26861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14187'. [ 1450.041563][T26877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14191'. [ 1450.124842][T14909] IPVS: starting estimator thread 0... [ 1450.215945][T26886] IPVS: using max 26 ests per chain, 62400 per kthread [ 1450.297835][T26875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14190'. [ 1450.520374][T26902] : Caught tx_queue_len zero misconfig [ 1450.542226][T26903] netlink: 'syz.0.14198': attribute type 1 has an invalid length. [ 1451.310972][T26947] netlink: 'syz.5.14209': attribute type 1 has an invalid length. [ 1451.773433][T26975] IPVS: set_ctl: invalid protocol: 63 10.1.1.2:21 [ 1451.792573][T26975] netlink: 'syz.4.14216': attribute type 12 has an invalid length. [ 1451.869140][T26975] bond4: option primary_reselect: invalid value (255) [ 1451.878533][T26975] bond4 (unregistering): Released all slaves [ 1452.212162][T27010] syzkaller0: entered promiscuous mode [ 1452.220832][T27010] syzkaller0: entered allmulticast mode [ 1452.831027][T27049] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1452.863421][T27049] bond4: entered promiscuous mode [ 1452.883051][T27049] macvlan2: entered promiscuous mode [ 1452.888695][T27049] macvlan2: entered allmulticast mode [ 1452.896395][T27049] bond4: (slave macvlan2): Opening slave failed [ 1453.079099][T27058] vlan2: entered promiscuous mode [ 1453.084210][T27058] geneve1: entered promiscuous mode [ 1453.106115][T27058] vlan2: entered allmulticast mode [ 1453.111465][T27058] geneve1: entered allmulticast mode [ 1453.375208][T27074] veth7: entered promiscuous mode [ 1453.397920][T27074] veth7: entered allmulticast mode [ 1453.433879][T27075] veth9: entered promiscuous mode [ 1453.439351][T27075] veth9: entered allmulticast mode [ 1453.460828][T27081] __nla_validate_parse: 8 callbacks suppressed [ 1453.460878][T27081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14246'. [ 1453.574490][T27085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14249'. [ 1453.614423][T27085] hsr_slave_1: left promiscuous mode [ 1453.633715][T27085] hsr0 (unregistering): left allmulticast mode [ 1453.660670][T27087] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1453.919420][T27109] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1454.481911][T27139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14264'. [ 1454.735099][T27127] syzkaller1: entered promiscuous mode [ 1454.749890][T27127] syzkaller1: entered allmulticast mode [ 1454.868425][T27146] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1455.136628][T27152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14268'. [ 1455.763905][T27176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14275'. [ 1455.780942][T27176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1455.804879][T27176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1455.872405][T27183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14277'. [ 1455.912392][T27183] bond0: (slave bridge0): Releasing backup interface [ 1456.058933][T27194] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14279'. [ 1456.193625][T27201] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14280'. [ 1456.612549][T27225] set match dimension is over the limit! [ 1456.621128][T27225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14287'. [ 1456.639324][T27225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14287'. [ 1456.750188][T27229] netlink: 'syz.4.14289': attribute type 24 has an invalid length. [ 1457.173006][T27248] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1457.189485][T27252] netlink: 'syz.5.14293': attribute type 1 has an invalid length. [ 1457.201173][T27252] netlink: 'syz.5.14293': attribute type 1 has an invalid length. [ 1457.482358][T27262] veth7: entered allmulticast mode [ 1457.530464][T27264] veth9: entered allmulticast mode [ 1457.688216][T27275] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 1457.699659][T27280] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1457.726396][T27284] netlink: 'syz.3.14302': attribute type 6 has an invalid length. [ 1457.781318][T27288] geneve3: entered promiscuous mode [ 1457.787246][T27288] geneve3: entered allmulticast mode [ 1457.986788][T27302] netlink: 'syz.0.14309': attribute type 10 has an invalid length. [ 1458.001206][T27302] team0: Device vxcan1 is of different type [ 1458.017122][T27295] netlink: 'syz.2.14308': attribute type 39 has an invalid length. [ 1458.314776][T27320] batadv0: left allmulticast mode [ 1458.350657][T27320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1458.862298][T27349] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 1458.908479][T13094] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.932274][T27357] netlink: zone id is out of range [ 1458.939052][T27357] netlink: zone id is out of range [ 1458.997891][T27360] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1459.267285][T27373] __nla_validate_parse: 11 callbacks suppressed [ 1459.267309][T27373] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14329'. [ 1459.518590][T27396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1459.561751][T27399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14333'. [ 1459.599082][T27399] team0 (unregistering): Port device team_slave_0 removed [ 1459.641999][T27399] team0 (unregistering): Port device team_slave_1 removed [ 1459.668570][T27410] netlink: 256 bytes leftover after parsing attributes in process `syz.0.14338'. [ 1459.765085][T27391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1460.229995][T27445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14345'. [ 1460.628719][T27459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14349'. [ 1460.651200][T27461] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1460.666197][T27461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1460.754887][T27459] bond5: entered promiscuous mode [ 1460.767722][T27459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1460.824151][T27459] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1460.904690][T27459] syzkaller0: entered promiscuous mode [ 1460.955758][T27459] syzkaller0: entered allmulticast mode [ 1460.978647][T27466] tipc: Enabled bearer , priority 0 [ 1461.021389][T27459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14349'. [ 1461.063222][T27459] macvlan2: entered promiscuous mode [ 1461.069002][T27459] macvlan2: entered allmulticast mode [ 1461.091147][T27459] bond5: (slave macvlan2): Opening slave failed [ 1461.097236][T27478] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14352'. [ 1461.421830][T27458] tipc: Resetting bearer [ 1461.531524][T27458] tipc: Disabling bearer [ 1461.992055][T27517] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1462.449734][T27535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14368'. [ 1462.476772][T27535] netlink: 120 bytes leftover after parsing attributes in process `syz.2.14368'. [ 1462.508752][T27535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14368'. [ 1463.270782][T27572] netlink: 'syz.0.14377': attribute type 64 has an invalid length. [ 1463.350242][T27576] netlink: 'syz.2.14380': attribute type 1 has an invalid length. [ 1463.439427][T27575] vlan2: entered promiscuous mode [ 1463.455843][T27575] bridge0: entered promiscuous mode [ 1463.469623][T27578] hsr_slave_0: left promiscuous mode [ 1463.510057][T27578] hsr_slave_1: left promiscuous mode [ 1463.789534][T27590] netlink: 'syz.0.14385': attribute type 10 has an invalid length. [ 1463.822113][T27590] team0: Device vxcan1 is of different type [ 1464.382380][T27606] __nla_validate_parse: 5 callbacks suppressed [ 1464.382402][T27606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14389'. [ 1464.406959][T27606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14389'. [ 1464.416272][T27606] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1464.652464][T27632] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1464.752701][T27639] netlink: 'syz.5.14396': attribute type 1 has an invalid length. [ 1464.844932][T27646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14398'. [ 1465.043184][T27659] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14400'. [ 1465.223199][T27672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14403'. [ 1465.240769][T27672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14403'. [ 1465.306917][T27674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14403'. [ 1465.467584][T27678] netlink: 'syz.3.14405': attribute type 1 has an invalid length. [ 1465.651272][T27678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1465.666568][T27695] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1465.731651][T27697] macvlan0: entered promiscuous mode [ 1465.755299][T27697] macvlan0: entered allmulticast mode [ 1465.764246][T27697] bond5: entered promiscuous mode [ 1465.775206][T27697] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1465.797834][T27697] bond5: left promiscuous mode [ 1465.834196][T27693] bond5: (slave gretap1): making interface the new active one [ 1465.844903][T27704] netlink: 4840 bytes leftover after parsing attributes in process `syz.5.14411'. [ 1465.860824][T27693] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1465.919965][T27418] Set syz1 is full, maxelem 65536 reached [ 1466.036956][T27710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14414'. [ 1466.056386][T27711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14415'. [ 1466.108075][T27708] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1466.290384][T27731] syzkaller0: entered promiscuous mode [ 1466.297204][T27731] syzkaller0: entered allmulticast mode [ 1466.562867][T27747] netlink: 'syz.5.14425': attribute type 2 has an invalid length. [ 1466.621084][T27747] 9: entered promiscuous mode [ 1466.779601][T27760] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1467.668527][T27812] netlink: 'syz.2.14444': attribute type 39 has an invalid length. [ 1467.713373][T27816] netlink: 'syz.3.14445': attribute type 1 has an invalid length. [ 1467.746914][T27817] netlink: 'syz.3.14445': attribute type 1 has an invalid length. [ 1468.501402][T27852] ip6gre2: entered promiscuous mode [ 1468.508317][T27852] ip6gre2: entered allmulticast mode [ 1468.902728][T27878] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1468.950128][T27882] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 1469.177689][T27894] tipc: Enabled bearer , priority 5 [ 1469.408090][T27907] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1469.521589][T27920] netlink: 'syz.2.14476': attribute type 1 has an invalid length. [ 1469.530239][T27920] __nla_validate_parse: 8 callbacks suppressed [ 1469.530259][T27920] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14476'. [ 1469.751501][T27930] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14480'. [ 1470.070012][T27947] netlink: 184 bytes leftover after parsing attributes in process `syz.5.14483'. [ 1470.874658][T28001] erspan0: entered allmulticast mode [ 1471.114747][T28023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14502'. [ 1471.132649][T28006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14500'. [ 1471.336787][T28032] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14506'. [ 1471.509759][T28042] bond0: entered promiscuous mode [ 1471.545416][T28044] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14510'. [ 1471.647160][T28049] netlink: 'syz.0.14511': attribute type 64 has an invalid length. [ 1474.226508][T28027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1474.450099][T28071] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.14518'. [ 1474.485929][T28071] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.14518'. [ 1474.638444][T28085] netlink: 'syz.4.14521': attribute type 1 has an invalid length. [ 1474.668428][T28085] netlink: 228 bytes leftover after parsing attributes in process `syz.4.14521'. [ 1474.732104][T28088] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1474.951694][T28094] bond6: Unable to set down delay as MII monitoring is disabled [ 1474.994301][T28094] bond6 (unregistering): Released all slaves [ 1475.184279][T28109] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14527'. [ 1475.444915][T28118] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14530'. [ 1475.513398][T28118] syzkaller1: entered promiscuous mode [ 1475.536926][T28118] syzkaller1: entered allmulticast mode [ 1475.782047][T28139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14536'. [ 1475.871526][T28139] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1475.888784][T28147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14536'. [ 1475.955649][T28147] netlink: 'syz.4.14536': attribute type 3 has an invalid length. [ 1475.963528][T28147] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14536'. [ 1476.453086][T28185] netlink: 'syz.4.14549': attribute type 21 has an invalid length. [ 1476.468624][T28185] IPv6: NLM_F_CREATE should be specified when creating new route [ 1476.987706][T28186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.180120][T28222] x_tables: duplicate underflow at hook 1 [ 1478.069669][T28284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14570'. [ 1478.088762][T28284] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14570'. [ 1478.183276][T28289] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.14573'. [ 1478.194486][T28289] rdma_rxe: rxe_newlink: failed to add veth0_macvtap [ 1478.234411][T28291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14574'. [ 1478.332261][T28297] netlink: 'syz.0.14574': attribute type 1 has an invalid length. [ 1478.572558][T28304] netlink: 'syz.5.14578': attribute type 1 has an invalid length. [ 1478.576089][T28306] netlink: 'syz.5.14578': attribute type 4 has an invalid length. [ 1478.648235][T28304] netlink: 'syz.5.14578': attribute type 4 has an invalid length. [ 1479.112458][T28326] netlink: 'syz.4.14584': attribute type 5 has an invalid length. [ 1479.296443][T28333] netlink: 'syz.5.14586': attribute type 1 has an invalid length. [ 1479.304465][T28333] netlink: 'syz.5.14586': attribute type 2 has an invalid length. [ 1480.750124][T28276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1480.986047][T28338] __nla_validate_parse: 4 callbacks suppressed [ 1480.986071][T28338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14589'. [ 1481.040527][T28348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14588'. [ 1481.339472][T28369] netlink: 208 bytes leftover after parsing attributes in process `syz.2.14595'. [ 1481.495988][T28378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14599'. [ 1481.797247][T28397] validate_nla: 1 callbacks suppressed [ 1481.797271][T28397] netlink: 'syz.5.14604': attribute type 10 has an invalid length. [ 1481.801311][T28399] netlink: 'syz.0.14605': attribute type 1 has an invalid length. [ 1481.847149][T28399] netlink: 'syz.0.14605': attribute type 1 has an invalid length. [ 1481.855031][T28399] netlink: 'syz.0.14605': attribute type 1 has an invalid length. [ 1481.893356][T28403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1481.900803][T28403] IPv6: NLM_F_CREATE should be set when creating new route [ 1481.910461][T28399] netlink: 'syz.0.14605': attribute type 2 has an invalid length. [ 1481.937918][T28399] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14605'. [ 1482.139882][T28414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14609'. [ 1482.178212][T28417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14610'. [ 1482.701971][T28438] netlink: 'syz.4.14617': attribute type 2 has an invalid length. [ 1482.707927][T28442] Cannot find add_set index 0 as target [ 1482.769979][T28446] bond6: entered promiscuous mode [ 1482.784970][T28452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14617'. [ 1482.821911][T28438] syzkaller0: entered promiscuous mode [ 1482.838188][T28438] syzkaller0: entered allmulticast mode [ 1482.914039][ C1] vcan0: j1939_tp_rxtimer: 0xffff888046bbe800: rx timeout, send abort [ 1482.933762][T28454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14621'. [ 1483.421437][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c1db000: rx timeout, send abort [ 1483.430043][ C1] vcan0: j1939_tp_rxtimer: 0xffff888046bbe800: abort rx timeout. Force session deactivation [ 1483.936626][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c1db000: abort rx timeout. Force session deactivation [ 1484.811686][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1484.832627][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1485.553293][T28476] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.14625'. [ 1485.606080][T28491] veth0: entered promiscuous mode [ 1485.639341][T28491] tipc: Started in network mode [ 1485.644299][T28491] tipc: Node identity c2938bbe177a, cluster identity 4711 [ 1485.690564][T28491] tipc: Enabled bearer , priority 0 [ 1485.698500][T28493] syzkaller0: entered promiscuous mode [ 1485.704099][T28493] syzkaller0: entered allmulticast mode [ 1485.719702][T28492] tipc: Enabling of bearer rejected, already enabled [ 1485.816703][T28490] tipc: Resetting bearer [ 1485.884845][T28490] tipc: Disabling bearer [ 1485.931996][T28490] veth0: left promiscuous mode [ 1486.447928][T16899] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1486.462632][T16899] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1486.476370][T16899] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1486.488096][T16899] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1486.508687][T16899] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1486.604520][T28536] netlink: 'syz.3.14640': attribute type 4 has an invalid length. [ 1486.614503][T28536] netlink: 'syz.3.14640': attribute type 4 has an invalid length. [ 1486.675192][T28536] netlink: 'syz.3.14640': attribute type 4 has an invalid length. [ 1486.687555][T28536] netlink: 'syz.3.14640': attribute type 4 has an invalid length. [ 1486.704998][T28540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14641'. [ 1486.742782][T28540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14641'. [ 1486.816593][T28536] validate_nla: 20 callbacks suppressed [ 1486.816615][T28536] netlink: 'syz.3.14640': attribute type 4 has an invalid length. [ 1486.843275][T28536] netlink: 'syz.3.14640': attribute type 4 has an invalid length. [ 1486.892090][T28542] xt_cgroup: invalid path, errno=-2 [ 1486.931329][T28536] netlink: 'syz.3.14640': attribute type 4 has an invalid length. [ 1486.954621][T28536] netlink: 'syz.3.14640': attribute type 4 has an invalid length. [ 1486.969645][T28536] netlink: 'syz.3.14640': attribute type 4 has an invalid length. [ 1486.988811][T28536] netlink: 'syz.3.14640': attribute type 4 has an invalid length. [ 1487.007100][T28536] netlink: 'syz.3.14640': attribute type 4 has an invalid length. [ 1487.026301][T28536] netlink: 'syz.3.14640': attribute type 4 has an invalid length. [ 1487.057946][T28536] netlink: 'syz.3.14640': attribute type 4 has an invalid length. [ 1487.076560][T28536] netlink: 'syz.3.14640': attribute type 4 has an invalid length. [ 1487.203853][T28546] syzkaller1: entered promiscuous mode [ 1487.235927][T28546] syzkaller1: entered allmulticast mode [ 1487.295383][T28546] netlink: 43 bytes leftover after parsing attributes in process `syz.2.14644'. [ 1487.327675][T28555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14647'. [ 1487.420182][T28557] syzkaller0: entered allmulticast mode [ 1487.682207][T28565] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14651'. [ 1487.895444][T28580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14655'. [ 1488.140608][T28591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1488.147930][T28591] IPv6: NLM_F_CREATE should be set when creating new route [ 1488.208407][T28591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14656'. [ 1488.508694][T28526] chnl_net:caif_netlink_parms(): no params data found [ 1488.566568][T22962] Bluetooth: hci3: command tx timeout [ 1488.669555][T28617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14661'. [ 1488.929074][T28526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.946100][T28526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.953534][T28526] bridge_slave_0: entered allmulticast mode [ 1488.978856][T28526] bridge_slave_0: entered promiscuous mode [ 1488.997898][T28526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.005190][T28526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.021291][T28526] bridge_slave_1: entered allmulticast mode [ 1489.030308][T28526] bridge_slave_1: entered promiscuous mode [ 1489.148990][T28526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.200522][T28631] bond6: entered promiscuous mode [ 1489.243083][T28636] macvlan2: entered promiscuous mode [ 1489.249049][T28636] macvlan2: entered allmulticast mode [ 1489.257162][T28636] bond6: (slave macvlan2): Opening slave failed [ 1489.281223][T28526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.428628][T28526] team0: Port device team_slave_0 added [ 1489.457895][T28526] team0: Port device team_slave_1 added [ 1489.480515][T28651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14668'. [ 1489.716234][T28526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1489.733638][T28526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1489.795938][T28526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1489.817167][T28659] tipc: Started in network mode [ 1489.822106][T28659] tipc: Node identity de5ef484e8cc, cluster identity 4711 [ 1489.829860][T28659] tipc: Enabled bearer , priority 0 [ 1489.850143][T28654] syzkaller0: entered promiscuous mode [ 1489.876620][T28654] syzkaller0: entered allmulticast mode [ 1489.947088][T28526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1489.954428][T28526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.020857][T28526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1490.043198][T28657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14669'. [ 1490.076195][T28659] tipc: Resetting bearer [ 1490.165661][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5330 ms [ 1490.173742][ C1] lec:lec_tx_timeout: lec0 [ 1490.200753][T28650] tipc: Resetting bearer [ 1490.256434][T28650] tipc: Disabling bearer [ 1490.296666][T28526] hsr_slave_0: entered promiscuous mode [ 1490.303801][T28526] hsr_slave_1: entered promiscuous mode [ 1490.343638][T28526] debugfs: 'hsr0' already exists in 'hsr' [ 1490.355795][T28526] Cannot create hsr debugfs directory [ 1490.650068][T22962] Bluetooth: hci3: command tx timeout [ 1490.880219][T28526] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1490.893335][T28526] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.040093][T28526] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1491.052055][T28526] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.140458][T28526] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1491.153410][T28526] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.381061][T28526] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1491.391378][T28526] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1491.401916][T28526] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1491.412499][T28526] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1491.485069][T28526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.504589][T28526] 8021q: adding VLAN 0 to HW filter on device team0 [ 1491.518646][T13092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.525855][T13092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1491.542613][T22851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.549914][T22851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1491.723400][T28526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1491.929175][T28526] veth0_vlan: entered promiscuous mode [ 1491.941806][T28526] veth1_vlan: entered promiscuous mode [ 1491.970477][T28526] veth0_macvtap: entered promiscuous mode [ 1491.980875][T28526] veth1_macvtap: entered promiscuous mode [ 1492.001389][T28526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1492.019226][T28526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1492.033372][ T149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.043221][ T149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.058714][ T149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.068299][ T149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.244257][T13094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1492.261875][T13094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.290999][T13094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1492.299047][T13094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.726283][T22962] Bluetooth: hci3: command tx timeout [ 1494.806183][T22962] Bluetooth: hci3: command tx timeout [ 1502.732428][ T762] lec:lec_start_xmit: lec0:No lecd attached [ 1508.165707][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1508.173773][ C1] lec:lec_tx_timeout: lec0 [ 1510.356035][T28708] validate_nla: 2 callbacks suppressed [ 1510.356058][T28708] netlink: 'syz.4.14675': attribute type 4 has an invalid length. [ 1510.471538][T28714] veth9: entered promiscuous mode [ 1510.491665][T28714] veth9: entered allmulticast mode [ 1510.722486][T28733] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.14678'. [ 1510.831744][T28740] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14683'. [ 1510.847065][T28742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14682'. [ 1510.876368][T28742] netlink: 'syz.0.14682': attribute type 6 has an invalid length. [ 1510.900443][T28744] netlink: 'syz.0.14682': attribute type 1 has an invalid length. [ 1510.902759][T28742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14682'. [ 1510.961791][T28749] netlink: 56 bytes leftover after parsing attributes in process `syz.3.14686'. [ 1510.972455][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1510.976801][T28749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14686'. [ 1510.993615][T28749] netlink: 31 bytes leftover after parsing attributes in process `syz.3.14686'. [ 1511.004090][T28749] netlink: 'syz.3.14686': attribute type 3 has an invalid length. [ 1511.012342][T28749] netlink: 'syz.3.14686': attribute type 2 has an invalid length. [ 1511.014437][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1511.029918][T28749] netlink: 31 bytes leftover after parsing attributes in process `syz.3.14686'. [ 1511.073590][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1511.105777][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1511.185421][T28757] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1511.449830][T28781] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1511.645265][T28791] netlink: 'syz.5.14695': attribute type 21 has an invalid length. [ 1511.725093][T28791] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1511.739391][T28791] bond1 (unregistering): Released all slaves [ 1511.774818][T28802] netlink: 'syz.3.14694': attribute type 2 has an invalid length. [ 1511.783573][T28802] netlink: 100 bytes leftover after parsing attributes in process `syz.3.14694'. [ 1511.888775][T28795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14694'. [ 1512.500328][T28824] netlink: 'syz.5.14702': attribute type 4 has an invalid length. [ 1512.579886][T28830] macsec0: entered promiscuous mode [ 1512.585364][T28830] macsec0: entered allmulticast mode [ 1514.280133][T28771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1514.631170][T28866] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1514.682247][T28868] Bluetooth: MGMT ver 1.23 [ 1515.342203][T28911] bond0: Caught tx_queue_len zero misconfig [ 1515.469192][T28921] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1515.623658][T28930] netlink: 'syz.2.14733': attribute type 21 has an invalid length. [ 1515.632330][T28930] netlink: 'syz.2.14733': attribute type 6 has an invalid length. [ 1515.663798][T28933] netlink: 'syz.0.14734': attribute type 24 has an invalid length. [ 1515.848019][T28944] __nla_validate_parse: 4 callbacks suppressed [ 1515.848039][T28944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14739'. [ 1516.455808][T28985] x_tables: unsorted underflow at hook 4 [ 1516.636904][T28998] sit0: entered promiscuous mode [ 1516.699360][T28998] netlink: 'syz.5.14753': attribute type 1 has an invalid length. [ 1516.719972][T28998] netlink: 1 bytes leftover after parsing attributes in process `syz.5.14753'. [ 1516.746587][T28998] netlink: 'syz.5.14753': attribute type 9 has an invalid length. [ 1516.757523][T28998] netlink: 'syz.5.14753': attribute type 11 has an invalid length. [ 1516.800976][T28998] netlink: 'syz.5.14753': attribute type 12 has an invalid length. [ 1516.837680][T29007] "syz.0.14756" (29007) uses obsolete ecb(arc4) skcipher [ 1516.852764][T29003] netlink: 79 bytes leftover after parsing attributes in process `syz.5.14753'. [ 1516.862295][T28998] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.14753'. [ 1517.220856][T29027] xt_hashlimit: size too large, truncated to 1048576 [ 1517.225763][T29026] xt_hashlimit: size too large, truncated to 1048576 [ 1517.267068][T29032] netlink: 'syz.0.14762': attribute type 9 has an invalid length. [ 1517.501931][T29047] sctp: [Deprecated]: syz.5.14764 (pid 29047) Use of int in maxseg socket option. [ 1517.501931][T29047] Use struct sctp_assoc_value instead [ 1517.633917][T29047] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14764'. [ 1517.675081][T29009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1517.684805][T29020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14759'. [ 1517.780235][T29050] batadv_slave_1: entered promiscuous mode [ 1517.838277][T29049] batadv_slave_1: left promiscuous mode [ 1518.054400][T29067] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14770'. [ 1518.070240][T29073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14771'. [ 1518.284329][T29077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14773'. [ 1518.317687][T29077] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1518.324255][T29077] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1518.429002][T29083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14775'. [ 1518.478736][T29087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1518.566728][T29093] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1518.572608][T29093] syzkaller1: Linktype set failed because interface is up [ 1518.586543][T26575] syzkaller1: tun_net_xmit 90 [ 1518.804358][T29105] netlink: 'syz.4.14779': attribute type 2 has an invalid length. [ 1518.847814][T29105] v: entered promiscuous mode [ 1519.616983][T29139] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1519.629110][T29139] bond7 (unregistering): Released all slaves [ 1520.812677][T29171] 8021q: VLANs not supported on ip6_vti0 [ 1521.421388][T29087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1521.625082][T29181] __nla_validate_parse: 4 callbacks suppressed [ 1521.625104][T29181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14799'. [ 1521.867730][T29203] netlink: 'syz.0.14805': attribute type 2 has an invalid length. [ 1521.887477][T29203] netlink: 'syz.0.14805': attribute type 1 has an invalid length. [ 1522.024023][T29212] netlink: 'syz.2.14808': attribute type 2 has an invalid length. [ 1522.553071][T29223] IPVS: Unknown mcast interface: veth1_vlan [ 1522.813741][T29207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1523.026925][T29240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14816'. [ 1523.056636][T29240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14816'. [ 1523.329856][T29251] syzkaller0: entered promiscuous mode [ 1523.336587][T29267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14824'. [ 1523.346929][T29251] syzkaller0: entered allmulticast mode [ 1523.583793][T29274] syzkaller1: entered promiscuous mode [ 1523.590686][T29274] syzkaller1: entered allmulticast mode [ 1525.777004][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1526.061080][T29288] delete_channel: no stack [ 1526.076904][T29288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14832'. [ 1526.211195][T29294] bond1 (unregistering): Released all slaves [ 1526.256784][T29297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14835'. [ 1526.483454][T29310] netlink: 27 bytes leftover after parsing attributes in process `syz.4.14836'. [ 1526.549952][T29304] udevd[29304]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1526.603125][T29315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14839'. [ 1526.624617][T28726] udevd[28726]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1526.751793][T29330] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14843'. [ 1526.854714][T29330] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14843'. [ 1526.885510][T29341] tunl0: entered promiscuous mode [ 1526.912825][T29331] block nbd3: not configured, cannot reconfigure [ 1526.918892][T29340] Unsupported ieee802154 address type: 0 [ 1526.951225][T29341] netlink: 'syz.3.14842': attribute type 3 has an invalid length. [ 1527.011496][T29341] netlink: 9 bytes leftover after parsing attributes in process `syz.3.14842'. [ 1527.302458][T28726] udevd[28726]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 1527.347182][T29363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14850'. [ 1527.827634][T29390] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14858'. [ 1527.953713][T29390] smc: net device team0 applied user defined pnetid SYZ2 [ 1527.989999][T29395] netlink: 96 bytes leftover after parsing attributes in process `syz.5.14861'. [ 1528.069868][T29400] netlink: 'syz.4.14859': attribute type 1 has an invalid length. [ 1528.087555][T29400] netlink: 212 bytes leftover after parsing attributes in process `syz.4.14859'. [ 1528.098326][T29400] netlink: 5 bytes leftover after parsing attributes in process `syz.4.14859'. [ 1528.133846][T29404] syzkaller1: entered promiscuous mode [ 1528.142637][T29404] syzkaller1: entered allmulticast mode [ 1528.582111][T29437] sctp: [Deprecated]: syz.5.14869 (pid 29437) Use of int in max_burst socket option. [ 1528.582111][T29437] Use struct sctp_assoc_value instead [ 1528.786564][T29446] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 1528.799278][T29446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14875'. [ 1528.893181][T29453] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.14876'. [ 1529.573799][T29491] netlink: 'syz.4.14885': attribute type 1 has an invalid length. [ 1529.608356][T29491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1529.646419][T29491] bond1: (slave geneve2): making interface the new active one [ 1529.673061][T29491] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1529.976222][T29520] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1529.989483][T29520] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1529.997849][T29520] gretap1: entered promiscuous mode [ 1530.003932][T29520] gretap1: entered allmulticast mode [ 1531.299854][T29594] openvswitch: netlink: IP tunnel dst address not specified [ 1531.310873][T29597] syzkaller0: entered promiscuous mode [ 1531.326461][T29597] syzkaller0: entered allmulticast mode [ 1532.221670][T29626] __nla_validate_parse: 4 callbacks suppressed [ 1532.221693][T29626] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14929'. [ 1532.277801][T29632] netlink: 'syz.3.14929': attribute type 3 has an invalid length. [ 1532.540161][T29642] ip6gre3: entered promiscuous mode [ 1532.574564][T29642] delete_channel: no stack [ 1532.616551][T29642] xt_hashlimit: size too large, truncated to 1048576 [ 1532.638635][T29647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14934'. [ 1532.652368][T29644] [ 1532.654796][T29644] ====================================================== [ 1532.661930][T29644] WARNING: possible circular locking dependency detected [ 1532.668989][T29644] syzkaller #0 Not tainted [ 1532.669282][T29647] netlink: 56 bytes leftover after parsing attributes in process `syz.5.14934'. [ 1532.673424][T29644] ------------------------------------------------------ [ 1532.673437][T29644] syz.0.14933/29644 is trying to acquire lock: [ 1532.673449][T29644] ffffffff8fd4bf58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 1532.705012][T29644] [ 1532.705012][T29644] but task is already holding lock: [ 1532.712433][T29644] ffff8880a5228570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1532.721887][T29644] [ 1532.721887][T29644] which lock already depends on the new lock. [ 1532.721887][T29644] [ 1532.732483][T29644] [ 1532.732483][T29644] the existing dependency chain (in reverse order) is: [ 1532.741505][T29644] [ 1532.741505][T29644] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1532.749528][T29644] _raw_spin_lock_bh+0x36/0x50 [ 1532.754928][T29644] nr_rt_ioctl+0x215/0xf90 [ 1532.759990][T29644] sock_do_ioctl+0x101/0x320 [ 1532.765142][T29644] sock_ioctl+0x5c6/0x7f0 [ 1532.770012][T29644] __se_sys_ioctl+0xfc/0x170 [ 1532.775136][T29644] do_syscall_64+0x14d/0xf80 [ 1532.780260][T29644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.786780][T29644] [ 1532.786780][T29644] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1532.794613][T29644] _raw_spin_lock_bh+0x36/0x50 [ 1532.799907][T29644] nr_rt_device_down+0xbe/0x860 [ 1532.805390][T29644] nr_device_event+0x137/0x150 [ 1532.810703][T29644] notifier_call_chain+0x1be/0x400 [ 1532.816374][T29644] __dev_notify_flags+0x16d/0x310 [ 1532.821952][T29644] netif_change_flags+0xe8/0x1a0 [ 1532.827439][T29644] dev_change_flags+0x130/0x260 [ 1532.832830][T29644] dev_ioctl+0x7b4/0x1150 [ 1532.837711][T29644] sock_do_ioctl+0x23e/0x320 [ 1532.842838][T29644] sock_ioctl+0x5c6/0x7f0 [ 1532.847696][T29644] __se_sys_ioctl+0xfc/0x170 [ 1532.852836][T29644] do_syscall_64+0x14d/0xf80 [ 1532.858059][T29644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.864500][T29644] [ 1532.864500][T29644] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1532.872434][T29644] __lock_acquire+0x15a5/0x2cf0 [ 1532.877825][T29644] lock_acquire+0xf0/0x2e0 [ 1532.882785][T29644] _raw_spin_lock_bh+0x36/0x50 [ 1532.888078][T29644] nr_remove_neigh+0x25/0xe0 [ 1532.893211][T29644] nr_add_node+0x1e41/0x2630 [ 1532.898332][T29644] nr_rt_ioctl+0xe59/0xf90 [ 1532.903275][T29644] sock_do_ioctl+0x101/0x320 [ 1532.908489][T29644] sock_ioctl+0x5c6/0x7f0 [ 1532.913346][T29644] __se_sys_ioctl+0xfc/0x170 [ 1532.918552][T29644] do_syscall_64+0x14d/0xf80 [ 1532.923679][T29644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.930102][T29644] [ 1532.930102][T29644] other info that might help us debug this: [ 1532.930102][T29644] [ 1532.940419][T29644] Chain exists of: [ 1532.940419][T29644] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1532.940419][T29644] [ 1532.954340][T29644] Possible unsafe locking scenario: [ 1532.954340][T29644] [ 1532.961794][T29644] CPU0 CPU1 [ 1532.967164][T29644] ---- ---- [ 1532.972534][T29644] lock(&nr_node->node_lock); [ 1532.977305][T29644] lock(nr_node_list_lock); [ 1532.984427][T29644] lock(&nr_node->node_lock); [ 1532.991803][T29644] lock(nr_neigh_list_lock); [ 1532.996491][T29644] [ 1532.996491][T29644] *** DEADLOCK *** [ 1532.996491][T29644] [ 1533.004732][T29644] 1 lock held by syz.0.14933/29644: [ 1533.009931][T29644] #0: ffff8880a5228570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1533.019781][T29644] [ 1533.019781][T29644] stack backtrace: [ 1533.025681][T29644] CPU: 0 UID: 0 PID: 29644 Comm: syz.0.14933 Not tainted syzkaller #0 PREEMPT(full) [ 1533.025702][T29644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1533.025713][T29644] Call Trace: [ 1533.025721][T29644] [ 1533.025729][T29644] dump_stack_lvl+0xe8/0x150 [ 1533.025754][T29644] print_circular_bug+0x2e1/0x300 [ 1533.025781][T29644] check_noncircular+0x12e/0x150 [ 1533.025808][T29644] __lock_acquire+0x15a5/0x2cf0 [ 1533.025838][T29644] lock_acquire+0xf0/0x2e0 [ 1533.025857][T29644] ? nr_remove_neigh+0x25/0xe0 [ 1533.025879][T29644] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1533.025896][T29644] ? nr_remove_neigh+0x25/0xe0 [ 1533.025916][T29644] _raw_spin_lock_bh+0x36/0x50 [ 1533.025932][T29644] ? nr_remove_neigh+0x25/0xe0 [ 1533.025952][T29644] nr_remove_neigh+0x25/0xe0 [ 1533.025972][T29644] nr_add_node+0x1e41/0x2630 [ 1533.025994][T29644] ? dev_get_by_name+0x21/0x200 [ 1533.026015][T29644] ? dev_get_by_name+0x21/0x200 [ 1533.026034][T29644] ? nr_call_to_digi+0x136/0x1b0 [ 1533.026061][T29644] nr_rt_ioctl+0xe59/0xf90 [ 1533.026083][T29644] ? kasan_quarantine_put+0xbb/0x1f0 [ 1533.026101][T29644] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1533.026123][T29644] ? apparmor_capable+0x126/0x170 [ 1533.026144][T29644] ? capable+0x88/0xe0 [ 1533.026166][T29644] ? nr_ioctl+0x1b1/0x3b0 [ 1533.026182][T29644] sock_do_ioctl+0x101/0x320 [ 1533.026206][T29644] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1533.026226][T29644] ? do_futex+0x333/0x420 [ 1533.026252][T29644] sock_ioctl+0x5c6/0x7f0 [ 1533.026274][T29644] ? __pfx_sock_ioctl+0x10/0x10 [ 1533.026295][T29644] ? __fget_files+0x2a/0x420 [ 1533.026319][T29644] ? __fget_files+0x3a0/0x420 [ 1533.026342][T29644] ? __fget_files+0x2a/0x420 [ 1533.026367][T29644] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1533.026388][T29644] ? __pfx_sock_ioctl+0x10/0x10 [ 1533.026409][T29644] __se_sys_ioctl+0xfc/0x170 [ 1533.026430][T29644] do_syscall_64+0x14d/0xf80 [ 1533.026448][T29644] ? trace_irq_disable+0x3b/0x150 [ 1533.026463][T29644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.026480][T29644] ? clear_bhb_loop+0x40/0x90 [ 1533.026498][T29644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.026514][T29644] RIP: 0033:0x7f3142b9c819 [ 1533.026529][T29644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1533.026545][T29644] RSP: 002b:00007f3143afe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1533.026563][T29644] RAX: ffffffffffffffda RBX: 00007f3142e15fa0 RCX: 00007f3142b9c819 [ 1533.026575][T29644] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000008 [ 1533.026587][T29644] RBP: 00007f3142c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1533.026597][T29644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1533.026607][T29644] R13: 00007f3142e16038 R14: 00007f3142e15fa0 R15: 00007fffe78b7268 [ 1533.026626][T29644] [ 1533.323896][T16899] Bluetooth: hci5: command 0x0405 tx timeout [ 1533.371402][T29658] openvswitch: netlink: Flow actions attr not present in new flow. [ 1533.404086][T29657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14937'.