last executing test programs: 28.768060138s ago: executing program 0 (id=2952): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x5, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e870", 0x2}], 0x1}], 0x1, 0x40800) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x14, 0x14, 0xf03, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) 25.602556691s ago: executing program 0 (id=2961): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9c2d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x3d}, @empty}}}], 0x20}}], 0x1, 0x8000004) r5 = getuid() ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x10, 0x10, 0x2, 0x3, {{0x23, 0x4, 0x3, 0x11, 0x8c, 0x68, 0x0, 0x99, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @remote, {[@timestamp_addr={0x44, 0x3c, 0x81, 0x1, 0x4, [{@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@loopback, 0xac}, {@loopback, 0xc}, {@remote, 0x9}, {@remote, 0x2}, {@empty, 0x27}]}, @ssrr={0x89, 0xf, 0x53, [@empty, @empty, @local]}, @rr={0x7, 0x13, 0x25, [@dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x5257ac1253648d54, 0x12, "3e2093e87ac3af64c0951cf7e4b0b1e7"}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@mpls_getroute={0x6c, 0x1a, 0x8, 0x70bd2a, 0x25dfdbfb, {0x1c, 0x10, 0x0, 0x40, 0xff, 0x3, 0xc8, 0x4, 0x700}, [@RTA_DST={0x8, 0x1, {0x9, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_VIA={0x14, 0x12, {0x2, "16bdc282bdb14af6bb21345f7ec2"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r6}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x8, 0x4, r6}}, @RTA_DST={0x8, 0x1, {0xd, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0xff, 0x0, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="000100002000010027bd7000fddbdf25d5000000ac1414bb000000000000000000000000fe8800000000000000000000000000014e2200044e2000080a0080a002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="08001e0009000000ac00fffffffffffffe8000000000000000000000000000124e2400074e2c00000200a0203a000100"/60, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="01000000000000000600000000000000030000000000000003000000000000000700000000000000070000000000000000000000000000000300000000000000070000000000000009000000000000000400000000000000070000000000000004000000c06b6e000000000300000000"], 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c, 0x4, 0x0, 0x3504, 0x2, 0x2}, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9c2d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x3d}, @empty}}}], 0x20}}], 0x1, 0x8000004) (async) getuid() (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x10, 0x10, 0x2, 0x3, {{0x23, 0x4, 0x3, 0x11, 0x8c, 0x68, 0x0, 0x99, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @remote, {[@timestamp_addr={0x44, 0x3c, 0x81, 0x1, 0x4, [{@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@loopback, 0xac}, {@loopback, 0xc}, {@remote, 0x9}, {@remote, 0x2}, {@empty, 0x27}]}, @ssrr={0x89, 0xf, 0x53, [@empty, @empty, @local]}, @rr={0x7, 0x13, 0x25, [@dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x5257ac1253648d54, 0x12, "3e2093e87ac3af64c0951cf7e4b0b1e7"}]}]}}}}}) (async) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@mpls_getroute={0x6c, 0x1a, 0x8, 0x70bd2a, 0x25dfdbfb, {0x1c, 0x10, 0x0, 0x40, 0xff, 0x3, 0xc8, 0x4, 0x700}, [@RTA_DST={0x8, 0x1, {0x9, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_VIA={0x14, 0x12, {0x2, "16bdc282bdb14af6bb21345f7ec2"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r6}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x8, 0x4, r6}}, @RTA_DST={0x8, 0x1, {0xd, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0xff, 0x0, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="000100002000010027bd7000fddbdf25d5000000ac1414bb000000000000000000000000fe8800000000000000000000000000014e2200044e2000080a0080a002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="08001e0009000000ac00fffffffffffffe8000000000000000000000000000124e2400074e2c00000200a0203a000100"/60, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="01000000000000000600000000000000030000000000000003000000000000000700000000000000070000000000000000000000000000000300000000000000070000000000000009000000000000000400000000000000070000000000000004000000c06b6e000000000300000000"], 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c, 0x4, 0x0, 0x3504, 0x2, 0x2}, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0) (async) 25.294068962s ago: executing program 0 (id=2965): r0 = socket(0x10, 0x803, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000007000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 25.038983008s ago: executing program 0 (id=2968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0xb) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000839600fadbdf250200000008000300", @ANYRES32=r5, @ANYBLOB="08002600f316000005001801270000000800a100081000000500190108"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x40400c4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r3, 0x4, 0x30bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6f}}}}, [@NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "527e7303294b"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xef}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) 24.860656316s ago: executing program 0 (id=2969): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "a40f78cb84bb1874"}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x80044) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)="e009bc297d2688e0261e51095c9e380c5899e11a13bb", 0x16}], 0x1}}], 0x1, 0x41) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x3, {0x0, 0x1, 0x1}}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) pwritev(r0, &(0x7f0000000c80)=[{&(0x7f0000000500)='\x00!G', 0x3}], 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000100)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000300)=""/270, 0x10e}], 0x1}, 0x40002102) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0100001a0013"], 0x16c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f00000002c0)={'rose0\x00', 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x17, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}}, 0x0) 1.570943658s ago: executing program 2 (id=2976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000100)=@qipcrtr, &(0x7f0000000180)=0x80) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000002c0)={{&(0x7f00000001c0)=""/176, 0xb0}, &(0x7f0000000280), 0xc}, 0x20) 1.557012056s ago: executing program 0 (id=2978): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="36579f42735a5e928895d502b500"/24, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x801) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtaction={0x24c, 0x30, 0x1, 0x0, 0x0, {}, [{0x238, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xe4}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x1b4, 0xc, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6211cb98, 0x0, 0x4, 0x5, 0x1ff}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xffff0000, 0x4, 0xd, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff0000ff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0x0, 0x3, 0x6, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x93, 0x4, 0x6, 0x8c42, 0x9f4}, @dev={0xac, 0x14, 0x14, 0x1c}, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7, 0x1, 0x9, 0xe}, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0xfff, 0x2, 0xe000, 0x2}, @multicast1, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x4, 0x2, 0x5}, @private=0xa010102, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x7, 0x6, 0x2}, @private=0xa010102, @loopback, 0xffffff00}}]}, {0x4b, 0x6, "dd1f9ce6c137f0f088e7e6baabc747eb6106674069132dc847dc69eb0c5d97fd2a86d03ab1ecf74f1d9773d617bce6cf1aa66b3f5330ba1465791b94d754d61a942057d76f3cd5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x24c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xf0, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r2) 1.551535141s ago: executing program 1 (id=2981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x101, 0x0, 0x0, {0xcbd7da2bf12e3fcb, 0x0, 0xa}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_EXPRESSIONS={0x88, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x64, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x95b00ad713fcbee2}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3f}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0xec}}, 0x0) 1.551074397s ago: executing program 2 (id=2982): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x6001, 0x0, 0x980, &(0x7f0000000100), 0x0}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x6001, 0x0, 0x980, &(0x7f0000000100), 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) (async) listen(r4, 0x0) sendfile(r3, r4, 0x0, 0x8) (async) sendfile(r3, r4, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010027bd700403dcdf2500000000", @ANYRES32=r8, @ANYBLOB="800000000168030024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000040)) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r9, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r9, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}]}]}]}, 0x38}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7) accept4(r0, 0x0, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) 1.548052601s ago: executing program 4 (id=2984): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$sock(r1, &(0x7f00000023c0)={&(0x7f0000000240)=@nfc_llcp={0x27, r3, 0x1, 0x7, 0xf, 0x40, "103d09f3dc3ce75ae95cecb7993a471a7ce72a1bee69984b501532d5bcdf9dc30241f898c4281b2647f7ea4f0ea4b2652de2413dc0aa85876528b8d47589c8", 0x3}, 0x80, &(0x7f0000002380)=[{&(0x7f00000002c0)="f8ddc88faddc852fc62d10fdba2d10831f0fb6c560240bc12e1efc925fa3f4a7ad0ea6cde70e5ea473b248e0fdc07439e689d6a00674c76af3c49d94d35a80f61b63ec52b1bee5535d2204d1f972f3862c7cfb20dfa00ab247259714c705fdab5ab13af2abb02a88ad50a7ab8f8d30d820a84582964574f73d27e173558f93af5b8901b524a7480a812fa94b1abbd2b08be2df5792b823e544dfd641e8ceeb18e424d467990aa3e48084b259d176c039ff3196", 0xb3}, {&(0x7f0000000380)="d737bfd151e7aa0401511c3160f335a3d152eeb01ae69343e244ffc7ffdef19b13e7b7bed359198c33c8213aa2eb73018c24ed73c35ac4be16c13413648a277fec25a1a8b9e48daae4f885cf259eabb4cbce414df148252dab76ec67bb2cc52c28a223a9188ab8302c314013d66ac0ef238ae51db83f04d19981a646ccd7504f29278f0f52706ad1ceaef2b245cf905a2a206ef2c6e696ce648e607428ce3e0941f41486da0fdbc6b02033f0f33e7d", 0xaf}, {&(0x7f0000001380)="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", 0x1000}], 0x3}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000040)) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) (async) sendmmsg$inet6(r2, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001340)='\'', 0x7ab8}], 0x1}}], 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000005050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x4000040) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000001c0), 0x4) (rerun: 32) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="016f0801010027000000140000004600000002ea2bd5d86b45dea91abb0e9b1f07000000844a1ea09f6f3960f4af305476724b0a78355899ce313f0f7f260600470645026443f6422ddf1cc793", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0003009078001809c400050200000000000000000002d58838068b91000000"], 0xfd6c) 1.381464501s ago: executing program 3 (id=2985): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_int(r4, 0x1, 0x12, 0x0, &(0x7f0000001ec0)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x5d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) splice(r8, 0x0, r7, 0x0, 0x8000f28, 0x0) vmsplice(r9, &(0x7f0000000940)=[{&(0x7f0000000400)="1333", 0x2}], 0x1, 0x0) recvfrom$netrom(r9, &(0x7f00000006c0)=""/214, 0xd6, 0x40000000, &(0x7f00000007c0)={{0x3, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r6, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x1f, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc1f}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x95, &(0x7f0000000340)=""/149, 0x41000, 0x40, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x9, 0x0, 0x4228}, 0x10, r6, 0x0, 0x9, &(0x7f0000000500), &(0x7f0000000540)=[{0x2, 0x4, 0xc, 0x7}, {0x4, 0x3, 0x2, 0x6}, {0x1, 0x1, 0xf, 0xb}, {0x0, 0x2, 0xa, 0x3}, {0x0, 0x1, 0xa, 0x7}, {0x3, 0x5, 0x2, 0x5}, {0x0, 0x3, 0x2, 0x6}, {0x0, 0x1, 0xf, 0xa}, {0x4, 0x4, 0x3, 0xb}], 0x10, 0x200}, 0x94) 1.303525205s ago: executing program 1 (id=2986): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x9c) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x8}, 0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) (async) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}}], 0x1, 0x20048040) 1.13969211s ago: executing program 2 (id=2987): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 1.084582277s ago: executing program 1 (id=2988): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r3, 0x1, 0x1070bd29, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1d}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.00875645s ago: executing program 3 (id=2989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000540)={0x0, 0x5, @status={[0x8e6, 0x4, 0x1, 0x2, 0xc, 0x2]}, [0x4db1, 0x6, 0x3e, 0x800, 0x2c790000000000, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x36ad80000, 0x400, 0x80000000, 0xffffffffffffffff, 0x7, 0xf, 0x9, 0x0, 0x40879c61, 0x0, 0xfef, 0x9, 0x7, 0x7, 0x0, 0xe4f138c, 0x1000, 0x80000001, 0xd99, 0x4, 0x6, 0x2, 0xbe1d, 0x7, 0x6, 0x400, 0xfff, 0xcb1f, 0xc, 0x8000, 0x807, 0x7, 0x3, 0xffffffffffff8000, 0x10001, 0x400, 0x7, 0x0, 0x2acb, 0x80010000000000, 0xdd8a, 0x1, 0x8, 0x9, 0x7, 0x8, 0x4, 0x8c, 0x7e6, 0xb, 0x5, 0x2, 0x100, 0x6, 0x3ff]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1412, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x604}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44040000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x8, 0x9a0d, 0x5, 0x4, 0x33c, 0x6}, {0x1, 0x80, 0x81, 0x9, 0x720, 0x3da}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 1.00530007s ago: executing program 4 (id=2990): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x1e}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8, 0x100000}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x0) 971.570729ms ago: executing program 1 (id=2991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14}}, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14}}, 0x68}}, 0x0) (async) 848.796458ms ago: executing program 2 (id=2992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14, 0x800) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x2}, 0x94) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000080)={r5}, &(0x7f0000000180)=0x8) (async) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000380)=0x5, 0x4) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r6) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf250100000000000000f52e0000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x2, 0x3, {0x2, 0xff, 0x2}, {0x1, 0xf0, 0x4}, 0x0, 0x2}, {0x1, 0x1, {0x1, 0x0, 0x2}, {0x0, 0x1, 0x2}, 0x0, 0x1}, {0x2, 0x1, {0x1, 0x0, 0x2}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}], 0x60) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000440)={'sit0\x00', r2, 0x700, 0x700, 0x2, 0x5, {{0x1d, 0x4, 0x0, 0x25, 0x74, 0x64, 0x0, 0x10, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ssrr={0x89, 0xf, 0x66, [@loopback, @private=0xa010102, @multicast1]}, @end, @timestamp_prespec={0x44, 0x24, 0xff, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x9}, {@local, 0x1}, {@loopback, 0x800}, {@empty}]}, @timestamp={0x44, 0x2c, 0x38, 0x0, 0x2, [0x1, 0x7, 0x6, 0xfffffeff, 0x8000, 0x3b, 0x1000, 0x4, 0xfffff0e4, 0x800]}]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4003, 0xfbfffdfc, {0x0, 0x0, 0x0, r9, {0xfff1, 0xb}, {0x8, 0xffff}, {0x2, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x800000}, 0x10) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) setsockopt$packet_int(r10, 0x107, 0xe, &(0x7f00000002c0)=0x6, 0x4) 775.197648ms ago: executing program 3 (id=2993): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="f9ffffff", 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x2}], "f841"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000300)=""/2, 0x44, 0x2, 0x1}, 0x20) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000000)=0x9c) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800a000fe08000008009f000d000002080026006c0900"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x20008880}}], 0x2, 0x4c054) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x48}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190fae8aee7f649bcb8aa0b0090780100000047000000000000000011000000000000e0000002792dadcbac1414bb4e20fffc443c00016401010200000000ac1414bb000000000a0101030000100000000000000008000000000000000000ac1e0001000004000000000000000000"], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, [{0x3, 0xa, "8cd86ff706598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async, rerun: 32) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0x4}, 0x6) (async) write(r11, &(0x7f0000000140)="41000200010001", 0x7) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r10, 0x0) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r10) (rerun: 32) sendmsg$NL80211_CMD_SET_MAC_ACL(r10, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="88000000370e611ef8cfcbcbc0b0518f11f0330dd60d024dd8cbb7b9da3f1ffecc6307df89232ef5ccc65e9a95ffe3d6faca8222dc41672a75bc60c048c20715685a7e8bf4f069b860fd2c161ce5ba2d23e1b5a84113dd7168f63d3c377758a44d23de0b73ade7f734864c1105c3624d1e3837184474b5befe0669ee4b08ff53db037b43e6c4faabe0132d1c", @ANYRES16=r12, @ANYBLOB="00012abd7000fcdbdf255d0000000c00990006000000480000002800a6800a00060008021100000100000a00060008021100000100000a00060008021100000100004000a6800a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x88}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r7, @ANYBLOB="0000000000000000185b0000090000000100000002000000950000000000000018000000070000000000000009000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 774.070601ms ago: executing program 1 (id=2994): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f0000000080)="ddf396378bc1c7e6b6ff0f60cb41f7a6af789cec25650223f857ea9cc781f10cfa3891f0bb6906caa6ea9ec8f9b4b282ea51dcf09034f6d23bd9fc3cbe2dac05e2d948a7eb05c5773111fba60f8517ca3acf72f5a2f0df6c73db349be5323f74328b2e0d484a03459b655e13958b3bcf5f23ebbf23866e4b79010123e91b8ca38909bf1e1cba764455f929be5718432a8e7b07c688525f8e1ef535435de65f2687b5ef3568b0c89b9d3680c4df09f51d61dc0257750dcf997b2d94ba8cee55a5e07d84044698a19018c909811a9778c4af9e0d183619f0bb9eda064e99d9e05dcdd551265d894bc0") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80c00000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x238, r6, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x307}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x640b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x595}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8629}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="77a2"], 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$FOU_CMD_DEL(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r11, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004801}, 0x20040850) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000014c0)={0x14, 0x1, 0x3, 0x103}, 0x14}}, 0x0) 755.434864ms ago: executing program 4 (id=2995): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], 0x44) 633.100424ms ago: executing program 3 (id=2996): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) socket$rxrpc(0x21, 0x2, 0xa) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl(r0, 0x8b21, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x29, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800"], 0x34}}, 0xc000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r3}) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000040000000000000000000000000000000000000000000000040000000000000000000040000000000000000000000000000000000000000000000000000000000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008000800080000070000"], 0x14c}}, 0x4810) 505.505123ms ago: executing program 2 (id=2997): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00000000000000ff020000000000000000000000000001000000000a"], 0xc0}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=@bridge_dellink={0xe0, 0x11, 0x20, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x0, 0x150}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'geneve0\x00'}, @IFLA_PORT_SELF={0x90, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "03872f6155397e7c418cefbaae6ad7de"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_PROFILE={0x9, 0x2, ',]^+\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4f97296ec5f5ded0f2b4d1ce0e76477c"}, @IFLA_PORT_PROFILE={0xd, 0x2, '!}+/,@@.\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d6b1e148c80daa5a1b2f1ef2b033eec6"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0c17f7165603fc558200b4e82f1608e5"}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x6c70a4af}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24000080}, 0x20040000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000040000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4884) readv(r5, &(0x7f00000001c0), 0x100000000000010b) (async) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFINDEX(r8, 0x400454da, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000140)) r9 = socket$packet(0x11, 0x3, 0x300) (async) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000040)='syzkaller1\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'ip_vti0\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r11, 0x2, 0x6, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x1000000}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x3]}}, 0x0, 0x2b, 0x0, 0xa}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40500000000000079108100000000000500000000000000950004000000000060a633a45c6314764f8f0d80197bcfaae5c754979187bfd9a21bb0d7209bb7a0807413d4926746aa34"], &(0x7f0000003ff6)='GPL\x00', 0x800005, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x4000000}, 0x10}, 0x94) 476.486673ms ago: executing program 4 (id=2998): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$isdn(0x22, 0x3, 0x1) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r2}) sendto(r3, &(0x7f0000000180)="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", 0x1000, 0x4000010, &(0x7f0000001180)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) close(r1) close(r2) close(r3) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000001200)={0x8, 0x4, 0x6, 0x0, 0x88}) sendto(r0, &(0x7f0000001240)="6dfbe8fb97302f7251ed80fe854423ada108ec357d94b7d5654537ef47280a90a384242bd2b9a06c91a31a9bddea5aeaf083a47c5bafee78a3124d0db77a73466ef2efce0e8136cde54d30757aa67c2456e1d792e5bb03c7db8455", 0x5b, 0x40050, &(0x7f00000012c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x80) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x81000) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000001340)={0x73, @loopback, 0x4e22, 0x0, 'fo\x00', 0x2, 0x9, 0x39}, 0x2c) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000001380)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000013c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x35}}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e20, 0x7, @loopback, 0xfffffffe}], 0x4c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000001440)={'NETMAP\x00'}, &(0x7f0000001480)=0x1e) sendmmsg(r5, &(0x7f0000003f40)=[{{&(0x7f00000014c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000002680)=[{&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="e65ed333e86d89bc747951b8329aa213a6886a6ab14669fd95c8116a9c7f2baac5a6d206", 0x24}, {&(0x7f0000002580)="49ca400795f21aa8c5ee575bcb9d44f3917eec15f9f641be5473bbb822d06500b51201be2bdedb2a29d3c8c4b6395f12a7cd1f6b76982bc0b8c18d02fba780c4be360480c477c4e391b271b0c1727f0ec455ec6fa6149a2f24165c6af1af9783fd648c8a0122682c4ddceb8febb2763b04e359227e038ac593bb1ea86314856debdc8d2073997fc245e0f5230c55ecf5233efcd5fd00845d297970e54b07a5c56c518d3ec1ce110ebf9ad1f89ccd6d80c0ff300ae936785ae634cc06d2e6851a2f8e46e5c09c5782aac4baad5064bb6b54e29b51445cfe37", 0xd8}], 0x3, &(0x7f00000026c0)=[{0xc8, 0x10c, 0x1, "5a85b54f94ad311558eb9cb5881ef4e1b5fc7dcf97f6600625e784114d0e3f1e6c6c02406639805e025641e4be600472ec1f75f69e80ef391ce8078ccfeed96f6a932e55080bb714bac3d1c0a950db710b3974d5545d0fc4fd6fd9280707f1da393d284f07e063c5487d6d0d754b06c8f70d46ec67da3ebf1448736adf77302cd13406e9971ba06d4bc57f90779c517ac1cc5f55e6aa80d3a082c4228f338b6f4f3bee35312e5cf4c66dcea59583a08b528b7842"}, {0x40, 0x116, 0x1, "29a8b9125c207a38dfebe5749d6072150e22d003fad9edd0e1bae5fe8d363839b98b85d988fb78cf89ddb626"}, {0x60, 0x88, 0x1, "6f49dd9f5441c132f97e7dd7c03c777bebab3280aba0eb4132729accc15d5c4baea00a11931680aaeb940f9e43cf16ae86c942f5297cd5c0094002b5384e0226f47bfa86589765c1ae1e03c12e74e219"}, {0x88, 0x11, 0x3c7d, "b814b4db3ea082437f4639fa090d0bae4d1b5ebec8c10a676d6ff019718d5965e7eef6d9e7d9f121c6384d7ce1f8e3a0d23443c2a6db0408d9f157f471266e8f887aa54f3d70d24b7b919235c72f56ebf6321eaa61b933b22a9242fba9239a10f3b0c3332a03758a2c05aa1548184f351d2bb48bae11"}], 0x1f0}}, {{&(0x7f00000028c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002940)="36737de42a8f83687101ecfd17318bfd50d6c47dbb93302002708f5bb7bc164b6c441a21339e63241295b9b1601e0d129144469356328c4965002fce7b7d5b1d65f1ebd1f73a25700c3dce703469decf1cf71ca63dd87e14d77fdaf67d45179eb64b7b8d9b287b43ac6306ee019f0cbaf8c6e0a1cb5f42c4eb475c006260c0656b41e6e802ac4900cf30581b13023ccbc64cc1e5f0978b1ef908652ddcbe0a897de511bec5eea88f78ba7e3037defa5ca54d277738ea303206859852efce18589670b533fcc2c30c95a9e03063dcb99ce591855c64f834a40c24e26da6d369cbc14a902e6e5e280d", 0xe8}, {&(0x7f0000002a40)="33d5e361c360fb9026f97280e298a151b0de402596228405f24bc359b09fbd17b59ba47249d1cd8f1d52755402f9e99e3d77d8feeb53378045515c16f54392a31bca07f805819e727715f90c32caa7195a3db2aa85546c31e5507c4dd6e2642c58773490b83edf2acabddcafc3d17f52dd93056dd8a90ac8fd6023d60c4a0fb99482031fa09a2e1b046b524f346f3d508a7c50eb700b6810be", 0x99}, {&(0x7f0000002b00)="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", 0x1000}, {&(0x7f0000003b00)="cc14d1011b19b94790d90ea753350334310dc8d2ec45c1eeae97aa92e264043257b2714ad043592d0440a485f633d651ad58194bde615b0c1954c84723ae5436f73f5a8ab428ca24e87beecbf4236e410002b8c0a6a6aa366927cc98a3081868452d6f8cf31bde884525991526a0b0aa7301e382752e06770ae46334fe5bd997586928ade046f7a7aded92349901a7ddc44a3c6ca8065de627134966df96e0c929cab222318efc50bf4e9767f8b6ba97658971e30ec301ac29eb44842835787c79da39dfab2666d643c9b95f1d3aec1d8e81b67f123f54b8bff02f2370478b1e91de53ae185484327d9e37535125538019336acb1217d4f61d4c6da302", 0xfd}, {&(0x7f0000003c00)="21dca5a6405b8419d0c8c844642cf257fef1ef946f3ad31a7e30ec6aa50c7dbaa18d240bbed363727d52e25ce1ee543c243b7fc5325344089af146ade3bebaa5091b58f5a92d3e05025fb7344a3c7d95f747f75547f8384e142d32d429c64492ae79ebba5d0fbd5f0fb2b5c43d6dc1e9b7ec0f6304196b5c0b73c65034f23636cf07f439e34751907934225c40e6fc9dcf84b8f6be0327e0ce95efffef08f23150e1be1583e3b3f2b53a063ff6016f017753535135d4efa760038f234bf78be99c5f", 0xc2}, {&(0x7f0000003d00)="54a9425b3224e3cb339aec5ea36037d43a7815a25a31f1d6af161a8fddca5100cc1078780eaa87641e4bded6639d51130dc41749cf18cdb6e4374ed7b75fdc045c28953792c8def382939348195581400c1c419370829caab5255d279032525fc2e7e027e26d6bd1088b917c240d61aebdb07a322b60e6e764dfcd5c532d2cc60af491fb8828da19cc1a171e66bd3e63f6ee1b279eb60e60bc3a4aa9c848126e013fc92723d586", 0xa7}, {&(0x7f0000003dc0)="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", 0xfa}], 0x7}}], 0x2, 0x40000) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000003fc0)={0x0, 0x3, 0x10, 0x10, 0x6}, &(0x7f0000004000)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000004040)={r7, 0xc177, 0x10}, &(0x7f0000004080)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f00000040c0)={'dummy0\x00'}) close(r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000004240)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004200)={&(0x7f0000004140)={0xb0, 0x1403, 0x10, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0xb0}}, 0x800) socket(0x27, 0x1, 0x7) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004280)={{{@in=@multicast2, @in6=@dev}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000004380)=0xe8) 286.097145ms ago: executing program 4 (id=2999): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000780)=ANY=[@ANYRES32=r2], 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 194.360735ms ago: executing program 3 (id=3000): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@setneightbl={0x20, 0x43, 0xc19, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xc, 0x1, 'ip_vti0\x00'}]}, 0x20}}, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x6, 0x0, 0x7, 0x0, 0x0, [{{r0}, 0x40}, {{r0}, 0x2}, {{r0}}, {{r0}, 0x9}, {{r0}, 0x7fff}, {{r0}, 0x6}, {{r0}, 0x5}]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x40080) 161.885271ms ago: executing program 1 (id=3001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x400}) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000045e1caea020073797a310000000008000a40fffffffc0c00098008000140000000010800084000000001140000001100ed02e26e0000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 90.013018ms ago: executing program 4 (id=3002): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003340), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="784e9f9b812336dc2ddc3c6ea4a0178012d3f75d8980f4cb46754fdc87c02da2dbb1694e1b61d692cbf16299d4", @ANYRES16=r2, @ANYBLOB="11a029bd7000ffdbdf25170000004800308005000200000000002800018008000100000000001c0003800600010002000000080002000200000006000100030000001400040000bbfb8608180ce4d3c9a4d3f77c6a6b0c0006000100000001000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100003050000007bc9a628909a000000000000000000", @ANYRES32=0x0, @ANYBLOB="c486070000000000180012800b0001006970366772650000080002800400120008001f0002000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x3ff, @mcast2, 0xe}}, 0x97, 0x101, 0x9, 0x7bf, 0x4, 0x100, 0x7}, &(0x7f0000000180)=0x9c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000001c0)={r4}, 0x8) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x100800) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000080)={0x59e, 0x7, 0x1, 0x3, 0x6, 0x13, 0x22, "5f3092c58089c14a2cd8291198f79e497e5123a5", "8e8a670dffcd836d87c94d2a31db8cb882c1b84a"}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) 9.510917ms ago: executing program 3 (id=3003): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x10, 0x22, 0x1}, 0x10}], 0x1}, 0x80) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) accept$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000002c0)=0x60) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0xf8, 0x120, 0x0, 0x0) 0s ago: executing program 2 (id=3004): pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44014) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x840) write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="71050802030602000001801947b5163d4df44bb364e5060000006e27483e1bef9f1ecbf1e00007030900"], 0x2a) close(0xffffffffffffffff) kernel console output (not intermixed with test programs): 4][ T8519] nbd: couldn't find a device at index 1048580 [ 173.622454][ T8531] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 173.661204][ T8531] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 173.844948][ T8543] netlink: 'syz.2.733': attribute type 21 has an invalid length. [ 173.874856][ T8543] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.919499][ T8545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.735'. [ 173.944152][ T8543] syzkaller1: entered promiscuous mode [ 173.962536][ T8543] syzkaller1: entered allmulticast mode [ 174.537436][ T8582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.741'. [ 174.719436][ T8588] syzkaller0: entered promiscuous mode [ 174.743955][ T8588] syzkaller0: entered allmulticast mode [ 174.943889][ T8601] syzkaller0: entered promiscuous mode [ 174.954517][ T8601] syzkaller0: entered allmulticast mode [ 174.967502][ T8599] syzkaller0: entered promiscuous mode [ 174.982138][ T8599] syzkaller0: entered allmulticast mode [ 175.147204][ T8601] netlink: 132 bytes leftover after parsing attributes in process `syz.4.748'. [ 175.530777][ T8628] netlink: 68 bytes leftover after parsing attributes in process `syz.1.756'. [ 175.573812][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.756'. [ 175.608656][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.756'. [ 175.709979][ T8637] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 175.766586][ T8637] Cannot find set identified by id 3 to match [ 175.794315][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 175.935172][ T8647] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 176.292387][ T7576] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe0 [ 176.517062][ T8674] x_tables: duplicate entry at hook 1 [ 176.970369][ T8696] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 177.050767][ T8687] syzkaller0: entered promiscuous mode [ 177.108249][ T8687] syzkaller0: entered allmulticast mode [ 177.247085][ T8711] veth0_to_bridge: entered promiscuous mode [ 177.348324][ T8712] bridge1: left allmulticast mode [ 177.385837][ T8712] geneve3: left allmulticast mode [ 177.499973][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.781'. [ 177.583691][ T8730] vlan2: entered allmulticast mode [ 177.589766][ T8730] bridge2: entered allmulticast mode [ 177.909540][ T8740] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 178.028030][ T8743] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.786'. [ 178.039573][ T8710] veth0_to_bridge: left promiscuous mode [ 178.245251][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 178.284472][ T8752] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 178.485494][ T8761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.699915][ T8772] netlink: 'syz.3.797': attribute type 39 has an invalid length. [ 179.607595][ T8814] netlink: 'syz.4.807': attribute type 1 has an invalid length. [ 179.670673][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.808'. [ 179.685894][ T8814] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.719420][ T8822] bond3: (slave gretap1): making interface the new active one [ 179.731157][ T8822] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 179.762541][ T8820] macvtap1: entered promiscuous mode [ 179.773406][ T8820] macvtap1: entered allmulticast mode [ 179.781745][ T8820] veth1_vlan: entered allmulticast mode [ 180.455756][ T8862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.758876][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 180.964245][ T8892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.820'. [ 180.973766][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 181.017418][ T8895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.820'. [ 181.027590][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 181.360549][ T8904] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20003 [ 181.390963][ T8904] netlink: 'syz.1.821': attribute type 10 has an invalid length. [ 181.458317][ T8904] batman_adv: batadv0: Adding interface:  [ 181.487081][ T8904] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.578295][ T8923] netlink: 27 bytes leftover after parsing attributes in process `syz.4.825'. [ 181.583985][ T8904] batman_adv: batadv0: Not using interface  (retrying later): interface not active [ 181.640374][ T8915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.887871][ T8935] netlink: 48 bytes leftover after parsing attributes in process `syz.1.828'. [ 182.098192][ T8939] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 182.326819][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.835'. [ 182.422613][ T8956] bond0: Unable to set up delay as MII monitoring is disabled [ 182.466607][ T8956] bond0 (unregistering): Released all slaves [ 182.735737][ T8971] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 183.483608][ T8997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.499877][ T9004] netlink: 'syz.0.849': attribute type 1 has an invalid length. [ 183.581038][ T9010] netlink: 'syz.0.849': attribute type 21 has an invalid length. [ 183.643617][ T9013] netlink: 'syz.2.851': attribute type 1 has an invalid length. [ 183.679380][ T9004] bond2: entered promiscuous mode [ 183.685845][ T9004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.701214][ T9008] __nla_validate_parse: 2 callbacks suppressed [ 183.701234][ T9008] netlink: 32 bytes leftover after parsing attributes in process `syz.1.850'. [ 183.775215][ T9019] delete_channel: no stack [ 183.786158][ T9010] macvtap2: entered allmulticast mode [ 183.843469][ T9014] bond2: (slave bridge3): making interface the new active one [ 183.851293][ T9014] bridge3: entered promiscuous mode [ 183.866010][ T9014] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 183.892512][ T9023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.855'. [ 183.903248][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.854'. [ 184.436478][ T9050] netlink: 64 bytes leftover after parsing attributes in process `syz.1.864'. [ 184.513207][ T9058] netlink: 'syz.2.866': attribute type 9 has an invalid length. [ 184.530563][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 184.567032][ T9058] netlink: 'syz.2.866': attribute type 9 has an invalid length. [ 184.575829][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 184.907535][ T9077] batadv_slave_0: entered promiscuous mode [ 185.003403][ T9084] syzkaller0: entered promiscuous mode [ 185.022048][ T9084] syzkaller0: entered allmulticast mode [ 185.038975][ T9084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.057560][ T9086] netlink: 76 bytes leftover after parsing attributes in process `syz.0.873'. [ 185.063497][ T9090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.322539][ T9094] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.876'. [ 185.425955][ T9076] batadv_slave_0: left promiscuous mode [ 185.676101][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.880'. [ 186.095003][ T9133] netlink: 'syz.4.885': attribute type 1 has an invalid length. [ 186.105476][ T9132] xt_TCPMSS: Only works on TCP SYN packets [ 186.151784][ T9136] netlink: 'syz.4.885': attribute type 1 has an invalid length. [ 186.467227][ T9149] netlink: 68 bytes leftover after parsing attributes in process `syz.4.891'. [ 186.484001][ T29] IPVS: starting estimator thread 0... [ 186.492976][ T9148] syzkaller1: entered promiscuous mode [ 186.500174][ T9148] syzkaller1: entered allmulticast mode [ 186.587396][ T9154] IPVS: using max 25 ests per chain, 60000 per kthread [ 187.020910][ T9182] netlink: 'syz.2.901': attribute type 2 has an invalid length. [ 187.020920][ T9183] ip6t_REJECT: ECHOREPLY is not supported [ 187.039669][ T9182] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 187.299320][ T9196] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 188.098166][ T9228] netlink: 'syz.0.918': attribute type 7 has an invalid length. [ 188.221331][ T9233] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 188.235170][ T9233] bond4 (unregistering): Released all slaves [ 188.276722][ T9228] erspan0: entered promiscuous mode [ 188.290823][ T9228] gretap0: entered promiscuous mode [ 188.648146][ T9260] openvswitch: netlink: IP tunnel dst address not specified [ 188.947078][ T9272] netlink: 'syz.4.931': attribute type 4 has an invalid length. [ 189.014662][ T9275] netlink: 'syz.4.931': attribute type 39 has an invalid length. [ 189.959447][ T9300] netlink: 'syz.3.933': attribute type 7 has an invalid length. [ 189.990873][ T9300] __nla_validate_parse: 13 callbacks suppressed [ 189.990893][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.933'. [ 190.027443][ T9300] gretap0: left allmulticast mode [ 190.037537][ T9300] gretap0: left promiscuous mode [ 190.052755][ T9300] bridge0: port 3(gretap0) entered disabled state [ 190.071847][ T9306] netlink: 'syz.3.933': attribute type 7 has an invalid length. [ 190.101812][ T9300] bridge_slave_0: left allmulticast mode [ 190.121046][ T9300] bridge_slave_0: left promiscuous mode [ 190.130561][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.529627][ T9250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.683996][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.939'. [ 191.856198][ T9351] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.943'. [ 192.070549][ T9358] syzkaller0: entered promiscuous mode [ 192.087033][ T9358] 0: reclassify loop, rule prio 0, protocol 800 [ 192.141889][ T9360] netlink: 'syz.1.946': attribute type 2 has an invalid length. [ 192.157026][ T9360] netlink: 'syz.1.946': attribute type 2 has an invalid length. [ 192.233935][ T9363] tunl0: entered promiscuous mode [ 192.258048][ T9363] netlink: 'syz.2.947': attribute type 3 has an invalid length. [ 192.268863][ T9363] netlink: 9 bytes leftover after parsing attributes in process `syz.2.947'. [ 192.729168][ T9382] netlink: 'syz.2.952': attribute type 21 has an invalid length. [ 192.761208][ T9382] netlink: 128 bytes leftover after parsing attributes in process `syz.2.952'. [ 192.799038][ T9382] netlink: 3 bytes leftover after parsing attributes in process `syz.2.952'. [ 193.211690][ T9405] C: renamed from lo [ 193.239396][ T9405] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 193.410352][ T9414] netlink: 224 bytes leftover after parsing attributes in process `syz.3.962'. [ 193.645829][ T9425] syzkaller0: entered promiscuous mode [ 193.665996][ T9425] syzkaller0: entered allmulticast mode [ 193.749954][ T9427] netlink: 56 bytes leftover after parsing attributes in process `syz.3.965'. [ 193.779923][ T9426] netlink: 56 bytes leftover after parsing attributes in process `syz.3.965'. [ 193.981953][ T9435] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 194.059756][ T9442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.971'. [ 194.191765][ T9444] syzkaller0: entered promiscuous mode [ 194.208038][ T9444] syzkaller0: entered allmulticast mode [ 194.659009][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.668162][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.739471][ T9470] : renamed from hsr0 (while UP) [ 194.873190][ T9473] vlan3: entered allmulticast mode [ 194.909347][ T9473] bridge2: entered allmulticast mode [ 194.937186][ T9479] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 194.966553][ T9491] geneve2: entered promiscuous mode [ 194.983731][ T9491] geneve2: entered allmulticast mode [ 194.991902][ T9488] tipc: Enabling of bearer rejected, failed to enable media [ 195.005856][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 195.032979][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 195.054983][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 195.118162][ T9495] __nla_validate_parse: 2 callbacks suppressed [ 195.118182][ T9495] netlink: 72 bytes leftover after parsing attributes in process `syz.1.986'. [ 195.135928][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 195.224713][ T9501] netlink: 32 bytes leftover after parsing attributes in process `syz.0.988'. [ 195.299499][ T9503] netlink: 'syz.3.989': attribute type 1 has an invalid length. [ 195.357967][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 195.372683][ T9503] bond6: entered promiscuous mode [ 195.375673][ T9508] xt_bpf: check failed: parse error [ 195.380138][ T9503] 8021q: adding VLAN 0 to HW filter on device bond6 [ 195.395171][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 195.495930][ T9503] bond6: (slave bridge0): making interface the new active one [ 195.507346][ T9503] bridge0: entered promiscuous mode [ 195.516558][ T9503] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 196.221320][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 196.638199][ T9570] bond7 (unregistering): Released all slaves [ 196.898529][ T9580] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 196.933080][ T9580] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 197.381113][ T9593] syzkaller0: entered promiscuous mode [ 197.401503][ T9593] syzkaller0: entered allmulticast mode [ 197.449865][ T9619] netlink: 'syz.3.1013': attribute type 1 has an invalid length. [ 197.467315][ T9620] netlink: 'syz.3.1013': attribute type 1 has an invalid length. [ 197.547269][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 197.550696][ T9619] bond7: entered promiscuous mode [ 197.562740][ T9619] 8021q: adding VLAN 0 to HW filter on device bond7 [ 197.590353][ T9624] bond7: (slave bridge4): making interface the new active one [ 197.598372][ T9624] bridge4: entered promiscuous mode [ 197.598744][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 197.614047][ T9624] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 197.614471][ T9625] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1014'. [ 197.633815][ T9625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1014'. [ 197.723252][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 198.146157][ T9645] netlink: 'syz.1.1021': attribute type 1 has an invalid length. [ 198.182689][ T9647] syzkaller0: entered promiscuous mode [ 198.214746][ T9647] syzkaller0: entered allmulticast mode [ 198.305943][ T9652] delete_channel: no stack [ 198.341488][ T9653] rose0: left allmulticast mode [ 198.895040][ T9681] tipc: Started in network mode [ 198.916508][ T9681] tipc: Node identity ac14140f, cluster identity 4711 [ 198.931104][ T9681] tipc: New replicast peer: 255.255.255.255 [ 198.938580][ T9681] tipc: Enabled bearer , priority 10 [ 199.057372][ T9689] netlink: 'syz.1.1034': attribute type 2 has an invalid length. [ 199.420913][ T9705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.573970][ T9715] netlink: 'syz.3.1041': attribute type 3 has an invalid length. [ 199.608384][ T9699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.612481][ T9717] netlink: 'syz.3.1041': attribute type 3 has an invalid length. [ 199.968637][ T9726] sctp: [Deprecated]: syz.4.1045 (pid 9726) Use of int in maxseg socket option. [ 199.968637][ T9726] Use struct sctp_assoc_value instead [ 200.019878][ T9725] vlan3: entered allmulticast mode [ 200.036039][ T9725] bond0: entered allmulticast mode [ 200.062460][ T9725] bond_slave_0: entered allmulticast mode [ 200.069971][ T9725] bond_slave_1: entered allmulticast mode [ 200.076835][ T9725] bridge_slave_1: entered allmulticast mode [ 200.096328][ T5927] tipc: Node number set to 2886997007 [ 200.273289][ T9735] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 200.281413][ T9735] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 200.501601][ T9745] openvswitch: netlink: IP tunnel dst address not specified [ 200.636477][ T9753] __nla_validate_parse: 14 callbacks suppressed [ 200.636498][ T9753] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1053'. [ 201.041176][ T9767] netlink: 'syz.3.1057': attribute type 1 has an invalid length. [ 201.069438][ T9767] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1057'. [ 201.291580][ T9788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.475180][ T9799] netlink: 'syz.0.1066': attribute type 13 has an invalid length. [ 201.484163][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1066'. [ 201.513762][ T9799] netlink: 'syz.0.1066': attribute type 13 has an invalid length. [ 201.521906][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1066'. [ 201.522182][ T47] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.555479][ T47] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.566381][ T9791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.731699][ T9807] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 201.745341][ T9819] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1069'. [ 201.763420][ T9807] bond4 (unregistering): Released all slaves [ 201.825103][ T47] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.857658][ T9819] vlan3: entered allmulticast mode [ 201.863217][ T9819] erspan0: entered allmulticast mode [ 201.880421][ T47] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.924802][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1068'. [ 201.974238][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1068'. [ 202.013924][ T9829] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 202.103398][ T9835] netlink: 'syz.4.1072': attribute type 1 has an invalid length. [ 202.738386][ T9858] tipc: Enabling of bearer rejected, already enabled [ 203.204919][ T9878] netlink: 'syz.4.1084': attribute type 11 has an invalid length. [ 203.232210][ T9878] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1084'. [ 203.491798][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1090'. [ 203.576479][ T9902] netlink: 'syz.1.1091': attribute type 4 has an invalid length. [ 203.606870][ T9862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1080'. [ 203.670475][ T9911] x_tables: unsorted underflow at hook 2 [ 203.710643][ T9916] netlink: 'syz.2.1092': attribute type 1 has an invalid length. [ 206.573528][ T9902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.759896][ T9938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.782316][ T9937] __nla_validate_parse: 4 callbacks suppressed [ 206.782335][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 206.980133][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 206.980327][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 206.986497][ T5162] Bluetooth: hci2: command 0x0406 tx timeout [ 207.172726][ T9953] netlink: 'syz.1.1102': attribute type 1 has an invalid length. [ 207.198183][ T9941] netlink: 'syz.2.1099': attribute type 1 has an invalid length. [ 207.236732][ T9953] bond4: entered promiscuous mode [ 207.242843][ T9953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.250385][ T9944] syzkaller1: entered promiscuous mode [ 207.259394][ T9944] syzkaller1: entered allmulticast mode [ 207.379044][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 207.388361][ T9953] bond4: (slave bridge3): making interface the new active one [ 207.399993][ T9953] bridge3: entered promiscuous mode [ 207.414167][ T9953] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 207.515352][ T9959] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 207.553530][ T9959] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 207.820623][ T9974] batman_adv: batadv0: Removing interface:  [ 208.059994][ T9986] netlink: 'syz.2.1111': attribute type 32 has an invalid length. [ 208.103551][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'. [ 208.173118][ T9986] bond3: option coupled_control: invalid value (192) [ 208.186598][ T9986] bond3 (unregistering): Released all slaves [ 208.522588][T10014] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1118'. [ 208.532756][T10014] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1118'. [ 208.543884][T10014] netlink: 'syz.2.1118': attribute type 5 has an invalid length. [ 208.552785][T10014] netlink: 'syz.2.1118': attribute type 6 has an invalid length. [ 208.564574][T10014] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1118'. [ 208.786573][T10030] x_tables: duplicate underflow at hook 2 [ 208.949115][T10034] veth3: entered allmulticast mode [ 209.221374][T10049] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 209.467267][T10060] vlan4: entered allmulticast mode [ 209.618240][T10065] syzkaller1: entered promiscuous mode [ 209.624726][T10065] syzkaller1: entered allmulticast mode [ 209.899734][T10071] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1137'. [ 209.969396][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 210.056788][T10075] tipc: Can't bind to reserved service type 0 [ 210.296435][T10088] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 210.633663][T10096] netlink: 'syz.0.1142': attribute type 1 has an invalid length. [ 210.878823][T10114] nbd: illegal input index 2958377 [ 210.891614][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1147'. [ 210.947559][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 211.097867][T10118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.725953][T10155] Cannot find del_set index 4 as target [ 212.628865][T10195] netlink: 'syz.4.1167': attribute type 3 has an invalid length. [ 214.398878][T10134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.675381][T10211] netlink: 'syz.1.1172': attribute type 2 has an invalid length. [ 214.686442][T10211] netlink: 'syz.1.1172': attribute type 8 has an invalid length. [ 214.687563][T10205] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 214.697315][T10211] __nla_validate_parse: 392 callbacks suppressed [ 214.697331][T10211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1172'. [ 214.720231][T10205] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 214.740139][T10205] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 214.761772][T10214] ip6tnl0: Caught tx_queue_len zero misconfig [ 215.039427][T10231] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1178'. [ 215.058101][T10231] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1178'. [ 215.206111][T10239] macvlan0: left promiscuous mode [ 215.216618][T10239] netlink: 'syz.1.1181': attribute type 2 has an invalid length. [ 217.910920][T10223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.152995][T10266] IPv6: Can't replace route, no match found [ 218.182881][T10268] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1191'. [ 218.219024][T10264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1190'. [ 218.263432][T10265] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1188'. [ 218.263937][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 218.292318][T10265] netlink: 'syz.0.1188': attribute type 2 has an invalid length. [ 218.319943][T10264] netlink: 'syz.2.1190': attribute type 1 has an invalid length. [ 218.340414][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'. [ 218.350798][T10274] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1193'. [ 218.661513][T10289] netlink: 'syz.1.1197': attribute type 1 has an invalid length. [ 218.661674][T10286] syzkaller0: entered promiscuous mode [ 218.700772][T10286] syzkaller0: entered allmulticast mode [ 218.829701][T10289] 8021q: adding VLAN 0 to HW filter on device bond5 [ 218.961483][T10279] bond5: (slave geneve3): making interface the new active one [ 218.980342][T10279] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 219.069729][T10309] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1203'. [ 219.261215][T10317] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 219.336276][T10324] delete_channel: no stack [ 219.601221][T10333] xt_hashlimit: size too large, truncated to 1048576 [ 219.659716][T10339] netlink: 'syz.1.1213': attribute type 15 has an invalid length. [ 219.850124][T10354] netlink: 'syz.2.1217': attribute type 2 has an invalid length. [ 219.879890][T10354] netlink: 'syz.2.1217': attribute type 2 has an invalid length. [ 220.241734][T10360] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 220.273172][T10360] bond3 (unregistering): Released all slaves [ 220.303030][T10375] netlink: 'syz.1.1222': attribute type 1 has an invalid length. [ 220.327276][T10377] SET target dimension over the limit! [ 220.515649][T10380] "syz.4.1225" (10380) uses obsolete ecb(arc4) skcipher [ 220.571598][T10375] 8021q: adding VLAN 0 to HW filter on device bond6 [ 220.635137][T10368] 8021q: adding VLAN 0 to HW filter on device bond7 [ 220.669599][T10368] bond6: (slave bond7): Enslaving as an active interface with a down link [ 220.676831][T10394] __nla_validate_parse: 3 callbacks suppressed [ 220.676851][T10394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1228'. [ 220.750562][T10397] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 220.931329][T10390] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 220.935570][T10397] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1228'. [ 220.944107][T10401] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 220.998131][T10404] veth0_macvtap: Caught tx_queue_len zero misconfig [ 221.000697][T10406] netlink: 'syz.1.1230': attribute type 10 has an invalid length. [ 221.020728][T10406] netlink: 396 bytes leftover after parsing attributes in process `syz.1.1230'. [ 221.653937][T10421] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1236'. [ 221.689223][T10421] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1236'. [ 221.796929][T10421] netlink: 'syz.2.1236': attribute type 1 has an invalid length. [ 221.904474][T10421] team0: Port device syz_tun removed [ 222.063975][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 222.275429][T10441] team0: Caught tx_queue_len zero misconfig [ 222.470951][T10451] xt_bpf: check failed: parse error [ 222.511095][T10451] xt_bpf: check failed: parse error [ 222.879542][T10467] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 223.298203][T10491] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1250'. [ 223.809678][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1253'. [ 224.231345][T10518] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1255'. [ 224.466107][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 224.616958][T10531] netlink: 'syz.2.1260': attribute type 13 has an invalid length. [ 226.417012][T10590] xt_hashlimit: size too large, truncated to 1048576 [ 226.534572][T10579] syzkaller0: entered promiscuous mode [ 226.560343][T10579] syzkaller0: entered allmulticast mode [ 226.591487][T10584] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 227.641685][T10625] netlink: 'syz.4.1276': attribute type 1 has an invalid length. [ 227.824751][T10625] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.867181][T10636] veth1_macvtap: mtu less than device minimum [ 227.907212][T10636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.914635][T10636] IPv6: NLM_F_CREATE should be set when creating new route [ 227.922492][T10636] IPv6: NLM_F_CREATE should be set when creating new route [ 227.938174][T10625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1276'. [ 228.384188][T10653] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1281'. [ 228.457389][T10656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1278'. [ 228.996156][T10669] pimreg: entered allmulticast mode [ 229.269867][T10683] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.1287'. [ 229.333932][T10684] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1287'. [ 229.446429][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1288'. [ 229.885668][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'. [ 229.929906][T10709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1289'. [ 230.040132][T10712] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1289'. [ 230.163227][ T30] audit: type=1107 audit(1777225423.194:7): pid=10714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 230.356043][T10721] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 230.585980][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'. [ 230.641774][T10730] netlink: 'syz.1.1298': attribute type 1 has an invalid length. [ 230.663834][T10730] netlink: 'syz.1.1298': attribute type 2 has an invalid length. [ 231.551704][T10758] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 231.575159][T10762] netlink: 'syz.0.1305': attribute type 4 has an invalid length. [ 231.634783][T10758] virt_wifi0: entered promiscuous mode [ 231.654795][T10758] virt_wifi0: entered allmulticast mode [ 231.910123][T10771] netlink: 'syz.3.1307': attribute type 8 has an invalid length. [ 232.304082][T10787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.089033][T10809] openvswitch: netlink: IP tunnel TTL not specified. [ 233.727992][T10822] __nla_validate_parse: 6 callbacks suppressed [ 233.728013][T10822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1317'. [ 234.148773][T10831] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.1322'. [ 234.240266][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 235.217138][T10870] netlink: 'syz.2.1331': attribute type 33 has an invalid length. [ 235.390774][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1331'. [ 235.446205][T10870] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 235.570283][T10870] bond3 (unregistering): Released all slaves [ 236.238160][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 236.243729][T10894] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1337'. [ 236.278789][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 236.318006][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1339'. [ 236.329154][T10895] netlink: 39363 bytes leftover after parsing attributes in process `syz.0.1338'. [ 236.615262][T10901] batadv_slave_0: entered promiscuous mode [ 236.800866][T10904] batadv_slave_0: left promiscuous mode [ 237.002815][T10919] netlink: 'syz.0.1346': attribute type 2 has an invalid length. [ 237.067025][T10919] syzkaller0: entered promiscuous mode [ 237.091637][T10919] syzkaller0: entered allmulticast mode [ 237.197714][T10926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1346'. [ 237.441797][T10933] lo: Caught tx_queue_len zero misconfig [ 238.888764][T10958] __nla_validate_parse: 2 callbacks suppressed [ 238.888787][T10958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1353'. [ 239.006678][T10968] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1355'. [ 240.661936][T10998] xt_hashlimit: size too large, truncated to 1048576 [ 241.750350][T10970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.005878][T11002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 242.301458][T11011] netlink: 'syz.2.1364': attribute type 39 has an invalid length. [ 242.354891][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'. [ 242.669907][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'. [ 242.860577][T11032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.183241][T11038] gretap1: entered allmulticast mode [ 243.303163][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 243.339272][T11043] netlink: 'syz.1.1374': attribute type 23 has an invalid length. [ 243.414912][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 243.435862][T11046] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1376'. [ 243.477868][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1376'. [ 243.529152][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1378'. [ 243.634842][T11051] xt_hashlimit: size too large, truncated to 1048576 [ 243.787368][T11056] Bluetooth: MGMT ver 1.23 [ 243.838264][T11056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.291711][T11052] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 245.312176][T11052] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 245.334254][T11052] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 245.441429][T11052] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 245.700871][T11052] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 245.882770][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 245.932608][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1392'. [ 245.994827][T11093] xt_hashlimit: max too large, truncated to 1048576 [ 246.568848][T11115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.627594][T11114] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 246.663779][T11114] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1398'. [ 246.707412][T11114] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 246.758826][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 246.805135][T11113] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 246.845779][T11113] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1398'. [ 246.880357][T11113] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 246.912807][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 246.979930][T11132] netlink: 'syz.2.1402': attribute type 1 has an invalid length. [ 247.022546][T11132] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1402'. [ 248.170200][T11161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1409'. [ 248.637031][T11184] bond0: entered promiscuous mode [ 248.645141][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1414'. [ 248.675266][T11184] bond_slave_0: entered promiscuous mode [ 248.702797][T11184] bond_slave_1: entered promiscuous mode [ 248.719605][T11184] bridge_slave_1: entered promiscuous mode [ 248.774055][ T24] syz1: Port: 1 Link DOWN [ 249.023437][T11198] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.579198][T11206] netlink: 'syz.3.1417': attribute type 3 has an invalid length. [ 249.640252][T11206] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1417'. [ 250.322585][T11233] xt_hashlimit: size too large, truncated to 1048576 [ 250.373756][T11234] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 250.496285][T11212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.109227][T11253] __nla_validate_parse: 2 callbacks suppressed [ 251.109245][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'. [ 251.158662][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1429'. [ 251.238328][ T5848] Bluetooth: hci4: link tx timeout [ 251.249407][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 251.576985][T11250] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 251.730849][T11250] bond3 (unregistering): Released all slaves [ 251.828242][T11274] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1432'. [ 251.871342][T11274] netlink: Conntrack attr has 3 unknown bytes [ 251.897377][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1431'. [ 252.330038][T11289] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1437'. [ 252.350785][T11290] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1435'. [ 252.468176][T11281] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 252.604728][T11281] bond8: (slave lo): Enslaving as an active interface with an up link [ 252.656941][T11281] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 252.819048][T11304] veth0_macvtap: Caught tx_queue_len zero misconfig [ 252.938174][T11295] syzkaller0: entered promiscuous mode [ 252.962434][T11295] syzkaller0: entered allmulticast mode [ 253.031556][T11311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.212324][ T5843] Bluetooth: hci4: link tx timeout [ 253.216410][T11323] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1445'. [ 253.218971][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.250107][ T5843] Bluetooth: hci4: link tx timeout [ 253.255654][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.292803][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 253.427780][T11329] netlink: 'syz.0.1446': attribute type 1 has an invalid length. [ 253.436566][T11329] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1446'. [ 253.578697][T11343] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1450'. [ 253.598194][T11343] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1450'. [ 256.106485][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.113841][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.084042][T11371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.399655][T11443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.788306][T11469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.840125][T11470] __nla_validate_parse: 2 callbacks suppressed [ 257.840148][T11470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1477'. [ 257.886574][T11458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1476'. [ 257.911187][T11470] geneve1: entered promiscuous mode [ 257.916033][T11458] netlink: 'syz.4.1476': attribute type 7 has an invalid length. [ 257.932354][T11458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1476'. [ 257.955988][T11472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.566268][T11496] netlink: 'syz.2.1484': attribute type 39 has an invalid length. [ 258.671078][T11502] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1486'. [ 258.687628][T11493] netlink: 'syz.0.1486': attribute type 12 has an invalid length. [ 258.926666][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'. [ 258.943926][T11508] netlink: 'syz.0.1490': attribute type 3 has an invalid length. [ 258.959193][T11509] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 258.978436][T11507] xt_hashlimit: size too large, truncated to 1048576 [ 259.021247][T11510] IPVS: ip_vs_edit_dest(): server weight less than zero [ 259.274172][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'. [ 259.300793][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1493'. [ 259.593822][T11526] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1495'. [ 259.948095][T11540] netlink: 'syz.1.1499': attribute type 1 has an invalid length. [ 259.968561][T11540] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1499'. [ 259.981744][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1500'. [ 260.064010][T11546] xt_addrtype: ipv6 does not support BROADCAST matching [ 260.096582][T11548] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 260.131343][T11551] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 260.485304][T11571] netlink: 'syz.2.1511': attribute type 1 has an invalid length. [ 260.485777][T11572] netlink: 'syz.2.1511': attribute type 1 has an invalid length. [ 260.574079][T11571] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.623465][T11570] bond3: (slave veth0_to_bond): making interface the new active one [ 260.635186][T11570] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 260.800073][T11571] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.811833][T11571] bond3: (slave bond4): Enslaving as an active interface with a down link [ 261.291739][T11609] netlink: 'syz.4.1524': attribute type 3 has an invalid length. [ 261.302404][T11609] netlink: 'syz.4.1524': attribute type 3 has an invalid length. [ 263.532529][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 264.198357][T11603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.499932][T11648] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 264.537995][T11653] __nla_validate_parse: 1 callbacks suppressed [ 264.538016][T11653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1531'. [ 264.580421][T11653] block nbd2: Unsupported socket: should be TCP or UNIX. [ 264.604393][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 264.632978][T11660] netlink: 'syz.1.1532': attribute type 1 has an invalid length. [ 264.636658][T11662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1534'. [ 264.675070][T11660] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1532'. [ 264.715061][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 264.741765][T11660] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1532'. [ 264.754365][T11662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1534'. [ 264.958304][T11660] ip6gretap0: entered promiscuous mode [ 265.140326][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1538'. [ 265.180466][T11681] ip6t_REJECT: ECHOREPLY is not supported [ 265.638076][T11709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1546'. [ 265.897004][T11719] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.901621][T11729] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1550'. [ 268.434643][T11701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.860123][T11787] block nbd2: Unsupported socket: should be TCP or UNIX. [ 269.743387][T11810] __nla_validate_parse: 6 callbacks suppressed [ 269.743409][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1569'. [ 269.798543][T11810] bond6: (slave bridge0): Releasing backup interface [ 269.806681][T11810] bridge0 (unregistering): left promiscuous mode [ 269.846899][T11818] netlink: 'syz.1.1572': attribute type 10 has an invalid length. [ 269.872460][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1572'. [ 272.389450][T11869] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:0 [ 272.776782][T11814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.091771][T11882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.207185][T11888] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.506738][T11900] netlink: zone id is out of range [ 273.516721][T11900] netlink: zone id is out of range [ 273.524671][T11900] netlink: zone id is out of range [ 273.530107][T11900] netlink: zone id is out of range [ 273.544904][T11900] netlink: zone id is out of range [ 273.557694][T11900] netlink: zone id is out of range [ 273.573189][T11900] netlink: zone id is out of range [ 273.590368][T11900] netlink: zone id is out of range [ 273.617159][T11900] netlink: zone id is out of range [ 273.642490][T11900] netlink: zone id is out of range [ 274.063910][T11924] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1600'. [ 274.179297][T11932] erspan0: entered promiscuous mode [ 274.905868][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 274.932730][T11974] 8021q: adding VLAN 0 to HW filter on device bond5 [ 276.974874][T11918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.375700][T12002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1622'. [ 277.418513][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 277.710301][T12014] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 277.799549][T12026] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1627'. [ 277.844188][T12027] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1627'. [ 277.947192][T12030] netlink: 'syz.4.1628': attribute type 3 has an invalid length. [ 277.978630][T12026] tipc: Enabling of bearer rejected, failed to enable media [ 278.410665][T12062] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 278.609234][T12069] netlink: 'syz.3.1638': attribute type 13 has an invalid length. [ 278.646253][T12067] netlink: 'syz.3.1638': attribute type 13 has an invalid length. [ 278.656082][T12074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1641'. [ 278.691456][T12067] veth0_macvtap: left promiscuous mode [ 278.715362][T12067] macvtap0: entered allmulticast mode [ 278.736773][T12067] macvtap0: refused to change device tx_queue_len [ 278.747502][T12069] macvtap0: refused to change device tx_queue_len [ 278.933798][T12092] netlink: 'syz.3.1644': attribute type 21 has an invalid length. [ 278.991213][T12092] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.027831][T12092] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1644'. [ 279.113608][T12099] net_ratelimit: 44 callbacks suppressed [ 279.113630][T12099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.139141][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'. [ 279.159187][T12101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1647'. [ 279.218923][T12101] geneve4: entered promiscuous mode [ 279.260391][T12101] geneve4: entered allmulticast mode [ 279.315505][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1651'. [ 279.352621][T12113] netlink: 'syz.4.1651': attribute type 30 has an invalid length. [ 279.405734][T12115] netlink: 'syz.4.1651': attribute type 30 has an invalid length. [ 279.626775][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.655885][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.819054][T12133] lo: entered promiscuous mode [ 279.856270][T12133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.906985][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.966333][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.275930][T12154] netlink: 'syz.3.1658': attribute type 4 has an invalid length. [ 280.289019][T12154] __nla_validate_parse: 1 callbacks suppressed [ 280.289041][T12154] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1658'. [ 280.325919][T12154] .`: renamed from bond0 [ 280.350687][T12159] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 280.716269][T12170] xt_SECMARK: invalid mode: 9 [ 280.726663][T12170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1665'. [ 280.845803][T12179] netlink: 'syz.1.1666': attribute type 1 has an invalid length. [ 281.326213][T12199] can: request_module (can-proto-0) failed. [ 281.347357][T12191] bond5: entered allmulticast mode [ 281.530667][T12195] veth3: entered allmulticast mode [ 281.587208][T12195] bond5: (slave veth3): Enslaving as an active interface with an up link [ 281.630497][T12226] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1672'. [ 281.679574][T12200] bond5 (unregistering): (slave veth3): Releasing backup interface [ 281.717167][T12200] bond5 (unregistering): Released all slaves [ 281.784032][T12233] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1673'. [ 282.039255][T12226] syzkaller0: entered promiscuous mode [ 282.048862][T12240] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1677'. [ 282.057288][T12226] syzkaller0: entered allmulticast mode [ 282.058925][T12240] netlink: 'syz.0.1677': attribute type 2 has an invalid length. [ 282.108520][T12228] syzkaller0: entered promiscuous mode [ 282.114305][T12228] syzkaller0: entered allmulticast mode [ 282.202609][T12241] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1676'. [ 283.414050][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 287.565111][T12260] gre1: entered promiscuous mode [ 287.570235][T12260] gre1: entered allmulticast mode [ 287.776932][T12290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1688'. [ 287.817433][T12290] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1688'. [ 288.047533][T12310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1691'. [ 288.297126][T12316] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1693'. [ 288.341418][ T30] audit: type=1804 audit(1777225481.374:8): pid=12318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1694" name="/newroot/329/cgroup.controllers" dev="tmpfs" ino=1697 res=1 errno=0 [ 288.346137][T12320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1695'. [ 288.378401][ T30] audit: type=1800 audit(1777225481.374:9): pid=12318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1694" name="cgroup.controllers" dev="tmpfs" ino=1697 res=0 errno=0 [ 289.438396][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'. [ 289.692118][ C1] af_packet: tpacket_rcv: packet too big, clamped from 124 to 4294967272. macoff=96 [ 289.716074][T12337] veth7: entered allmulticast mode [ 290.392895][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1713'. [ 290.437256][T12368] xt_hashlimit: overflow, try lower: 3/0 [ 290.458325][T12369] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1712'. [ 290.489103][T12369] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1712'. [ 290.737751][T12379] netlink: 'syz.0.1716': attribute type 3 has an invalid length. [ 290.770786][T12379] netlink: 'syz.0.1716': attribute type 3 has an invalid length. [ 290.849400][T12389] netlink: 'syz.1.1718': attribute type 10 has an invalid length. [ 290.880647][T12391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1720'. [ 291.154231][T12396] syzkaller0: entered promiscuous mode [ 291.175382][T12396] syzkaller0: entered allmulticast mode [ 291.495786][T12424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.503120][T12424] IPv6: NLM_F_CREATE should be set when creating new route [ 291.889299][T12448] tipc: Enabled bearer , priority 10 [ 291.924879][T12447] IPv6: NLM_F_CREATE should be specified when creating new route [ 292.475129][T12480] xt_hashlimit: max too large, truncated to 1048576 [ 292.481084][T12477] pimreg3: entered allmulticast mode [ 293.041315][T12508] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 293.071145][T12509] __nla_validate_parse: 6 callbacks suppressed [ 293.071167][T12509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1757'. [ 293.139355][T12519] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 293.296938][T12522] IPVS: set_ctl: invalid protocol: 135 172.20.20.52:20002 [ 293.503102][T12524] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 293.539989][T12524] bond5 (unregistering): Released all slaves [ 294.260096][T12579] netlink: 'syz.0.1776': attribute type 13 has an invalid length. [ 294.315325][T12579] veth0_macvtap: left promiscuous mode [ 294.330253][T12579] macvtap0: entered allmulticast mode [ 294.620107][T12604] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1781'. [ 294.656740][T12604] sch_fq: defrate 0 ignored. [ 294.728487][T12607] bond5: option min_links: invalid value (18446744073709551614) [ 294.737003][T12607] bond5: option min_links: allowed values 0 - 2147483647 [ 294.747946][T12607] bond5 (unregistering): Released all slaves [ 294.978489][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1784'. [ 295.000797][T12614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1784'. [ 295.367916][T12623] ªªªªª_congesti: renamed from erspan0 (while UP) [ 295.389997][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1788'. [ 297.015493][T12563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.257384][T12633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1790'. [ 297.290597][T12638] IPVS: set_ctl: invalid protocol: 914 255.255.255.255:20003 [ 297.302586][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'. [ 297.311131][T12631] kthread_run failed with err -4 [ 297.505031][T12654] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.1795'. [ 297.603516][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1799'. [ 297.665135][T12662] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 297.780340][T12670] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1801'. [ 297.908497][T12668] delete_channel: no stack [ 297.983237][T12672] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.990689][T12672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.145811][T12691] __nla_validate_parse: 2 callbacks suppressed [ 298.145834][T12691] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1806'. [ 298.219815][T12694] --map-set only usable from mangle table [ 298.292822][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1804'. [ 298.928993][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1818'. [ 299.093759][T12736] 8021q: adding VLAN 0 to HW filter on device bond8 [ 299.128255][T12736] bond8 (unregistering): Released all slaves [ 300.350629][T12766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1825'. [ 301.696505][T12722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 301.980814][T12775] syzkaller0: entered promiscuous mode [ 302.007924][T12775] syzkaller0: entered allmulticast mode [ 302.130990][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1827'. [ 302.153029][T12775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1827'. [ 302.601125][T12805] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1835'. [ 302.678966][T12810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.718122][T12813] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1838'. [ 302.946450][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1840'. [ 303.091356][T12835] netlink: 'syz.3.1843': attribute type 1 has an invalid length. [ 303.104256][T12835] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1843'. [ 303.126831][T12835] netlink: 'syz.3.1843': attribute type 1 has an invalid length. [ 303.127194][T12824] bond5: entered promiscuous mode [ 303.143199][T12824] 8021q: adding VLAN 0 to HW filter on device bond5 [ 303.152677][T12835] __nla_validate_parse: 1 callbacks suppressed [ 303.152699][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'. [ 303.221758][T12824] 8021q: adding VLAN 0 to HW filter on device bond5 [ 303.244661][T12824] bond5: (slave sit3): The slave device specified does not support setting the MAC address [ 303.257149][T12824] bond5: (slave sit3): Error -95 calling set_mac_address [ 303.546815][T12852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1846'. [ 303.636844][T12852] Unsupported ieee802154 address type: 0 [ 303.745135][T12862] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1850'. [ 303.786426][T12867] pimreg: left allmulticast mode [ 303.895579][T12876] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1853'. [ 303.925422][T12876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1853'. [ 304.020193][T12881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.084802][T12886] syzkaller1: entered promiscuous mode [ 304.090760][T12886] syzkaller1: entered allmulticast mode [ 304.105840][ T30] audit: type=1107 audit(1777225497.144:10): pid=12888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ºcʱ‚ýŸ‡1㻳#”,EñD¦úI§ÎÙhÆ oÛ/á\+¼Ú‡Z½þ,¾Yò_@+¸ï ñà·ÂÛíF'›­€äcÛå' [ 304.131431][T12890] sit0: entered promiscuous mode [ 304.555087][T12908] tunl0: entered promiscuous mode [ 304.565390][T12908] netlink: 'syz.0.1862': attribute type 3 has an invalid length. [ 304.574801][T12908] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1862'. [ 304.643179][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 304.699203][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 304.721013][T12912] netlink: 'syz.1.1864': attribute type 12 has an invalid length. [ 304.740936][T12912] netlink: 'syz.1.1864': attribute type 11 has an invalid length. [ 305.221632][T12943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1873'. [ 305.426086][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 305.439873][T12955] xt_socket: unknown flags 0x8 [ 305.449164][T12962] xt_socket: unknown flags 0x8 [ 306.819466][T13023] sock: sock_set_timeout: `syz.3.1898' (pid 13023) tries to set negative timeout [ 306.874663][T13019] veth7: entered promiscuous mode [ 306.880097][T13019] veth7: entered allmulticast mode [ 307.100783][T13039] IPVS: Unknown mcast interface: syzkaller1 [ 307.243529][T13050] ieee802154 phy1 wpan1: encryption failed: -22 [ 308.652191][ T5927] page_pool_release_retry() stalled pool shutdown: id 50, 1 inflight 60 sec [ 310.111380][T13043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.397453][T13077] netlink: 'syz.0.1910': attribute type 10 has an invalid length. [ 310.487481][T13082] geneve2: entered promiscuous mode [ 310.504689][T13082] geneve2: entered allmulticast mode [ 310.927137][T13106] netlink: 'syz.2.1917': attribute type 39 has an invalid length. [ 311.020850][T13111] __nla_validate_parse: 9 callbacks suppressed [ 311.020872][T13111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1918'. [ 311.046461][T13111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1918'. [ 311.074358][T13114] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 311.118916][T13114] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.135099][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'. [ 311.246847][T13121] bond10: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 311.275148][T13121] bond10 (unregistering): Released all slaves [ 311.337038][T13128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1923'. [ 311.347698][T13128] syzkaller0: entered promiscuous mode [ 311.358810][T13128] syzkaller0: entered allmulticast mode [ 311.502535][T13136] Bluetooth: MGMT ver 1.23 [ 311.645956][T13140] netlink: 'syz.1.1929': attribute type 33 has an invalid length. [ 311.654162][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1928'. [ 311.666889][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1928'. [ 311.701573][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1928'. [ 311.803089][T13147] netlink: 'syz.1.1931': attribute type 24 has an invalid length. [ 312.125995][T13156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1933'. [ 312.183456][T13159] netlink: 'syz.1.1935': attribute type 1 has an invalid length. [ 312.420108][T13165] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 312.497859][T13172] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1938'. [ 312.634227][T13175] netlink: 'syz.4.1938': attribute type 5 has an invalid length. [ 312.672114][T13175] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1938'. [ 312.984115][T13187] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 313.017127][T13187] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 313.040942][T13187] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 313.114440][T13187] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 313.200124][T13196] sit0: Caught tx_queue_len zero misconfig [ 313.270898][T13192] pim6reg: entered allmulticast mode [ 313.481587][T13206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.565430][T13206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.566252][ T9449] smbdirect: ib_dev[syz2] removed [ 313.610651][T13219] netlink: zone id is out of range [ 313.631745][T13219] netlink: zone id is out of range [ 313.655073][T13219] netlink: zone id is out of range [ 313.673444][T13219] netlink: zone id is out of range [ 313.719034][T13219] netlink: zone id is out of range [ 313.736487][T13219] netlink: zone id is out of range [ 313.754973][T13219] netlink: zone id is out of range [ 313.765374][T13219] netlink: zone id is out of range [ 313.815993][T13219] netlink: zone id is out of range [ 314.413007][T13249] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 314.641472][ T5848] Bluetooth: hci4: link tx timeout [ 314.647716][ T5848] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 315.249929][T13282] netlink: 'syz.1.1967': attribute type 13 has an invalid length. [ 315.367732][T13286] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 315.570060][T13283] macvlan0: entered promiscuous mode [ 315.711117][T13303] tipc: Enabling of bearer rejected, failed to enable media [ 316.160157][T13324] __nla_validate_parse: 3 callbacks suppressed [ 316.160180][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1979'. [ 316.733429][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 317.186728][T13370] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.1986'. [ 317.487388][T13364] syzkaller0: entered promiscuous mode [ 317.503443][T13364] syzkaller0: entered allmulticast mode [ 317.537421][T13387] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1991'. [ 317.539890][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.666171][T13391] x_tables: duplicate entry at hook 1 [ 317.847046][T13402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1994'. [ 317.939473][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1995'. [ 318.513664][T13428] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 318.563557][T13428] IPVS: Unknown mcast interface: syz_tun [ 318.840718][T13441] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 318.841815][T13444] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2004'. [ 318.865877][T13444] ip6tnl0: Caught tx_queue_len zero misconfig [ 319.257707][T13458] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2008'. [ 319.273064][T13458] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2008'. [ 319.307686][T13463] tap0: tun_chr_ioctl cmd 1074025672 [ 319.323648][T13463] tap0: ignored: set checksum disabled [ 319.806624][T13476] syzkaller1: entered promiscuous mode [ 319.838898][T13483] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2011'. [ 319.866407][T13476] syzkaller1: entered allmulticast mode [ 320.764526][T13504] ip6gre2: entered promiscuous mode [ 320.789883][T13504] ip6gre2: entered allmulticast mode [ 322.430625][T13569] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 322.460205][T13569] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2033'. [ 322.505494][T13569] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 322.546671][T13569] netlink: 'syz.3.2033': attribute type 8 has an invalid length. [ 322.584007][T13569] netlink: 582 bytes leftover after parsing attributes in process `syz.3.2033'. [ 322.736949][T13584] TCP: TCP_TX_DELAY enabled [ 322.781852][T13580] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.811339][T13580] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2036'. [ 323.036460][T13592] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 324.949898][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2058'. [ 324.990774][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2058'. [ 325.033876][T13680] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2058'. [ 325.396483][ T9450] tipc: Subscription rejected, illegal request [ 325.651684][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'. [ 325.839522][T13714] netlink: 'syz.0.2068': attribute type 1 has an invalid length. [ 326.011757][T13720] netlink: 'syz.1.2070': attribute type 33 has an invalid length. [ 326.187344][T13728] netlink: 'syz.2.2072': attribute type 1 has an invalid length. [ 326.233391][T13720] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 326.253472][T13730] net_ratelimit: 53 callbacks suppressed [ 326.253495][T13730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.293963][T13720] bond10 (unregistering): Released all slaves [ 326.659588][T13728] bond6: entered promiscuous mode [ 326.685132][T13728] 8021q: adding VLAN 0 to HW filter on device bond6 [ 326.701157][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'. [ 326.725460][T13753] netlink: 'syz.0.2074': attribute type 10 has an invalid length. [ 326.729290][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2075'. [ 326.753039][T13751] netlink: 'syz.1.2075': attribute type 12 has an invalid length. [ 326.777271][T13751] netlink: 'syz.1.2075': attribute type 11 has an invalid length. [ 326.810323][T13743] bond6: (slave bridge7): making interface the new active one [ 326.840754][T13743] bridge7: entered promiscuous mode [ 326.853598][T13743] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 326.971857][T13753] team0 (unregistering): Port device team_slave_0 removed [ 327.015713][T13753] team0 (unregistering): Port device team_slave_1 removed [ 327.703098][T13785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2081'. [ 327.703697][T13794] xt_ecn: cannot match TCP bits for non-tcp packets [ 327.732167][T13785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2081'. [ 327.973118][T13798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2084'. [ 328.113457][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'. [ 328.196563][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'. [ 328.410915][T13821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2091'. [ 328.442174][T13821] netlink: 'syz.4.2091': attribute type 7 has an invalid length. [ 328.455730][T13821] netlink: 'syz.4.2091': attribute type 8 has an invalid length. [ 328.511152][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 328.544050][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2092'. [ 328.618521][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2093'. [ 328.662840][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2093'. [ 328.685590][T13832] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.841428][T13834] bridge8: port 1(vlan4) entered blocking state [ 328.859962][T13834] bridge8: port 1(vlan4) entered disabled state [ 328.875401][T13834] vlan4: entered allmulticast mode [ 328.890129][T13834] bridge8: entered allmulticast mode [ 328.934229][T13834] vlan4: left allmulticast mode [ 328.980379][T13834] bridge8: left allmulticast mode [ 348.465987][T13949] __nla_validate_parse: 1 callbacks suppressed [ 348.466010][T13949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2108'. [ 348.547334][T13952] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2107'. [ 348.665510][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2110'. [ 348.771839][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2110'. [ 348.809600][T13964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2110'. [ 348.835433][T13971] netlink: 'syz.4.2110': attribute type 10 has an invalid length. [ 348.852469][T13973] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2113'. [ 348.868443][T13958] 8021q: adding VLAN 0 to HW filter on device bond7 [ 348.880115][T13971] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.888343][T13971] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.929673][T13971] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.937097][T13971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.945068][T13971] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.952617][T13971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.970592][T13971] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 349.581713][T14010] netlink: 'syz.3.2127': attribute type 1 has an invalid length. [ 350.145730][T14038] netlink: 'syz.1.2134': attribute type 58 has an invalid length. [ 350.162665][T14038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2134'. [ 350.208825][T14036] bond8: entered promiscuous mode [ 350.220920][T14036] bond8: entered allmulticast mode [ 350.228146][T14036] 8021q: adding VLAN 0 to HW filter on device bond8 [ 350.509189][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2138'. [ 351.020938][T14080] netlink: 'syz.2.2146': attribute type 1 has an invalid length. [ 351.040935][T14080] netlink: 760 bytes leftover after parsing attributes in process `syz.2.2146'. [ 351.112891][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2149'. [ 351.114441][T14084] netlink: 'syz.1.2148': attribute type 39 has an invalid length. [ 351.387921][T14095] bond0: entered promiscuous mode [ 351.406393][T14095] bond0: left promiscuous mode [ 352.411847][T14155] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 352.809378][ T36] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 352.840255][ T5846] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 352.852627][ T36] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 353.090854][T14190] tipc: Enabled bearer , priority 0 [ 353.123932][T14192] openvswitch: netlink: Key type 343 is out of range max 32 [ 353.182216][ T5846] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 353.518549][T14212] __nla_validate_parse: 10 callbacks suppressed [ 353.518572][T14212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2189'. [ 353.617122][ T5846] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 353.853824][T14222] veth0: entered promiscuous mode [ 353.891624][T14221] veth0: left promiscuous mode [ 354.029048][T14229] netlink: 'syz.1.2195': attribute type 15 has an invalid length. [ 354.046171][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2195'. [ 354.078328][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 354.708402][T14266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2205'. [ 354.841651][T14266] netlink: 'syz.2.2205': attribute type 12 has an invalid length. [ 354.876373][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2205'. [ 354.948655][T14276] xt_ipcomp: unknown flags 1D [ 355.071065][T14287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2210'. [ 355.118254][T14290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2211'. [ 355.222414][T14295] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2212'. [ 355.344224][T14301] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2214'. [ 355.405828][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2215'. [ 355.567421][T14312] vlan0: entered promiscuous mode [ 355.714371][T14319] netlink: 'syz.1.2219': attribute type 1 has an invalid length. [ 355.994270][T14335] netlink: 'syz.0.2220': attribute type 58 has an invalid length. [ 356.144784][T14319] 8021q: adding VLAN 0 to HW filter on device bond10 [ 356.207250][T14327] syzkaller0: entered promiscuous mode [ 356.223605][T14327] syzkaller0: entered allmulticast mode [ 356.982756][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 357.579752][T14388] netlink: 'syz.4.2235': attribute type 3 has an invalid length. [ 357.626882][T14399] netlink: 'syz.1.2237': attribute type 3 has an invalid length. [ 358.448540][T14427] syzkaller0: entered promiscuous mode [ 358.467183][T14427] syzkaller0: entered allmulticast mode [ 358.476225][ T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 358.833053][ T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 359.252916][T14472] netlink: 'syz.2.2259': attribute type 1 has an invalid length. [ 359.438332][T14484] netlink: 'syz.2.2264': attribute type 10 has an invalid length. [ 359.472585][T14484] batadv0: left allmulticast mode [ 359.481294][T14484] batadv0: left promiscuous mode [ 359.491765][T14484] bridge0: port 3(batadv0) entered disabled state [ 359.510856][T14488] netlink: 'syz.2.2264': attribute type 10 has an invalid length. [ 359.525138][T14489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.525651][T14488] __nla_validate_parse: 10 callbacks suppressed [ 359.525667][T14488] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2264'. [ 359.818292][T14484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.838125][T14484] .`¹: (slave batadv0): Enslaving as an active interface with an up link [ 359.867238][ T30] audit: type=1800 audit(1777225552.894:11): pid=14476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2260" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 359.868292][T14488] batadv0: entered promiscuous mode [ 359.896048][T14476] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 359.905382][T14488] batadv0: entered allmulticast mode [ 359.937261][T14476] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 359.937860][T14488] .`¹: (slave batadv0): Releasing backup interface [ 359.963166][T14476] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 359.986420][T14488] bridge0: port 1(batadv0) entered blocking state [ 360.011705][T14488] bridge0: port 1(batadv0) entered disabled state [ 360.159482][T14509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2267'. [ 360.198493][T14509] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 360.367313][T14521] vlan3: entered promiscuous mode [ 360.386970][T14521] bridge0: entered promiscuous mode [ 360.427983][T14530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2272'. [ 360.448274][T14529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2272'. [ 360.523220][ T3520] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 360.532865][ T3520] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 360.534788][T14536] openvswitch: netlink: Key type 163 is out of range max 32 [ 360.628908][T14539] netlink: 'syz.2.2276': attribute type 16 has an invalid length. [ 360.659131][T14539] netlink: 'syz.2.2276': attribute type 17 has an invalid length. [ 360.708515][T14539] netlink: 'syz.2.2276': attribute type 27 has an invalid length. [ 360.738250][T14538] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.743212][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2278'. [ 360.910443][T14546] bond9: entered promiscuous mode [ 360.919369][T14546] bond9: entered allmulticast mode [ 360.928639][T14546] 8021q: adding VLAN 0 to HW filter on device bond9 [ 361.076255][T14569] lo: Caught tx_queue_len zero misconfig [ 361.224222][T14574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2284'. [ 361.276906][T14580] netlink: 576 bytes leftover after parsing attributes in process `syz.3.2284'. [ 361.644527][T14600] rdma_op ffff88805386b1f0 conn xmit_rdma 0000000000000000 [ 362.188198][T14633] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2304'. [ 362.204098][T14633] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2304'. [ 362.324189][T14641] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2303'. [ 362.506798][T14650] netlink: 'syz.4.2309': attribute type 10 has an invalid length. [ 362.590249][T14650] veth0_vlan: left promiscuous mode [ 362.609297][T14650] veth0_vlan: entered promiscuous mode [ 362.626177][T14650] team0: Device veth0_vlan failed to register rx_handler [ 362.924535][T14668] lo: entered promiscuous mode [ 362.948522][T14668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.237188][T14681] delete_channel: no stack [ 363.481492][T14693] syzkaller1: entered promiscuous mode [ 363.496192][T14693] syzkaller1: entered allmulticast mode [ 363.607444][T14689] netlink: 'syz.3.2323': attribute type 4 has an invalid length. [ 363.678155][T14706] xt_limit: Overflow, try lower: 604147548/4200216962 [ 363.707672][T14700] : entered promiscuous mode [ 363.947700][T14716] netlink: 'syz.0.2331': attribute type 1 has an invalid length. [ 364.134027][T14730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.525441][T14746] netlink: 'syz.1.2341': attribute type 10 has an invalid length. [ 364.538229][T14746] netlink: 'syz.1.2341': attribute type 10 has an invalid length. [ 364.557870][T14746] __nla_validate_parse: 8 callbacks suppressed [ 364.557891][T14746] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2341'. [ 364.976671][T14769] netlink: 'syz.3.2349': attribute type 1 has an invalid length. [ 365.043165][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2352'. [ 365.064834][T14773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2350'. [ 365.098471][T14767] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.106773][T14767] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.119707][T14779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.202764][T14781] netlink: 'syz.1.2354': attribute type 4 has an invalid length. [ 365.222661][T14781] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2354'. [ 365.264502][T14781] .`¹: renamed from bond0 (while UP) [ 365.339332][T14788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2356'. [ 365.356758][T14788] tipc: Invalid UDP bearer configuration [ 365.356819][T14788] tipc: Enabling of bearer rejected, failed to enable media [ 365.532271][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 365.604048][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2360'. [ 365.648056][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2360'. [ 365.670166][T14816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2361'. [ 365.671476][T14812] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.2363'. [ 365.702349][T14815] netlink: 'syz.0.2362': attribute type 83 has an invalid length. [ 365.730746][T14816] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2361'. [ 366.011172][T14826] syzkaller0: entered promiscuous mode [ 366.027228][T14826] syzkaller0: entered allmulticast mode [ 366.123958][T14841] batadv_slave_0: Caught tx_queue_len zero misconfig [ 366.133960][T14841] tunl0: Caught tx_queue_len zero misconfig [ 366.437977][T14864] netlink: 'syz.0.2375': attribute type 13 has an invalid length. [ 366.824079][T14886] syzkaller1: entered promiscuous mode [ 366.840626][T14886] syzkaller1: entered allmulticast mode [ 367.127888][T14893] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 367.373989][T14904] xt_TCPMSS: Only works on TCP SYN packets [ 367.471698][T14909] syzkaller0: entered promiscuous mode [ 367.481011][T14909] syzkaller0: entered allmulticast mode [ 367.543482][T14909] openvswitch: netlink: Flow actions attr not present in new flow. [ 367.837079][T14930] netlink: 'syz.0.2397': attribute type 13 has an invalid length. [ 369.477523][T14955] IPv6: NLM_F_CREATE should be specified when creating new route [ 370.361600][T14919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.376648][T14956] __nla_validate_parse: 11 callbacks suppressed [ 370.376674][T14956] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2403'. [ 370.702870][T14967] geneve2: entered promiscuous mode [ 370.742818][T13881] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 52196 - 0 [ 370.774295][T13881] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 52196 - 0 [ 370.810607][T13881] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 52196 - 0 [ 370.993981][T14988] netlink: 'syz.3.2412': attribute type 1 has an invalid length. [ 371.148510][T14988] 8021q: adding VLAN 0 to HW filter on device bond8 [ 371.239726][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2419'. [ 371.240624][T14994] bond8: (slave veth0_to_bond): making interface the new active one [ 371.284257][T14994] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 371.368130][T15009] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2418'. [ 371.625909][T15017] xt_hl: Unknown Hop Limit match mode: 206 [ 371.707526][T15023] netlink: 'syz.1.2424': attribute type 2 has an invalid length. [ 371.730553][T15023] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2424'. [ 372.016300][T15038] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2426'. [ 372.073931][T15038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2426'. [ 372.094253][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2427'. [ 372.134937][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2427'. [ 372.173486][T15044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2428'. [ 372.178384][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2429'. [ 372.527667][T15064] netlink: 'syz.4.2433': attribute type 1 has an invalid length. [ 372.953992][T15087] nbd: must specify a device to reconfigure [ 373.222236][ T24] IPVS: starting estimator thread 0... [ 373.267243][T15097] netlink: 'syz.0.2443': attribute type 15 has an invalid length. [ 373.322585][T15096] IPVS: using max 27 ests per chain, 64800 per kthread [ 373.334157][T15097] netlink: 'syz.0.2443': attribute type 15 has an invalid length. [ 373.380829][ T3520] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 373.410159][ T3520] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 373.431109][ T3520] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 373.458400][ T3520] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 373.867231][T15118] netlink: 'syz.3.2448': attribute type 1 has an invalid length. [ 374.141703][T15126] bond9: (slave bridge9): making interface the new active one [ 374.196063][T15126] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 374.414769][T15147] netlink: 'syz.1.2451': attribute type 16 has an invalid length. [ 374.448243][T15147] netlink: 'syz.1.2451': attribute type 17 has an invalid length. [ 374.527996][T15118] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 374.551620][T15147] lo: left promiscuous mode [ 374.576925][T15147] sit0: left promiscuous mode [ 374.749589][T15147] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 374.767089][T15147] macvlan0: left promiscuous mode [ 374.789626][T15147] veth0_macvtap: entered promiscuous mode [ 374.797405][T15147] veth0_macvtap: entered allmulticast mode [ 374.806504][T15147] macvtap0: left allmulticast mode [ 374.814870][T15147] veth0_macvtap: left allmulticast mode [ 374.834938][T15147] 8021q: adding VLAN 0 to HW filter on device  [ 374.848601][T15147] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 374.921406][T15172] lo: left promiscuous mode [ 375.147309][T15176] xt_CT: No such helper "pptp" [ 375.314169][T15190] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 375.378595][T15192] syzkaller0: entered promiscuous mode [ 375.394391][T15192] syzkaller0: entered allmulticast mode [ 375.468196][T15192] bond0: Caught tx_queue_len zero misconfig [ 375.849786][T15221] __nla_validate_parse: 7 callbacks suppressed [ 375.849808][T15221] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2476'. [ 375.867036][T15222] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2476'. [ 376.006330][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'. [ 376.101095][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'. [ 376.163974][T15241] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.527736][T15262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2486'. [ 376.545561][T15265] veth0: entered promiscuous mode [ 376.551583][T15268] H: renamed from veth1_to_hsr (while UP) [ 376.569300][T15263] veth0: left promiscuous mode [ 376.796477][T15278] netlink: 'syz.0.2492': attribute type 4 has an invalid length. [ 376.818305][T15278] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20004 [ 377.471626][T15306] sctp: [Deprecated]: syz.0.2499 (pid 15306) Use of int in maxseg socket option. [ 377.471626][T15306] Use struct sctp_assoc_value instead [ 377.559348][T15309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.565372][T15311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'. [ 377.579032][T15311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'. [ 377.760955][T15318] wlan1: mtu less than device minimum [ 377.789043][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806e793400: rx timeout, send abort [ 377.801561][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806e793400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 378.306483][T15341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2511'. [ 378.506528][T15342] .`: (slave batadv0): Releasing backup interface [ 378.571608][T15342] .`: (slave bridge_slave_1): Releasing backup interface [ 378.586279][T15342] bridge_slave_1: left promiscuous mode [ 378.599203][T15342] bridge_slave_1: left allmulticast mode [ 378.629147][T15342] bond8: (slave veth0_to_bond): Releasing active interface [ 378.660367][T15342] .`: (slave bond_slave_0): Releasing backup interface [ 378.676527][T15342] bond_slave_0: left promiscuous mode [ 378.684045][T15342] bond_slave_0: left allmulticast mode [ 378.717225][T15342] .`: (slave bond_slave_1): Releasing backup interface [ 378.736153][T15342] bond_slave_1: left promiscuous mode [ 378.744902][T15342] bond_slave_1: left allmulticast mode [ 378.776000][T15342] team0: Port device team_slave_0 removed [ 378.809515][T15342] team0: Port device team_slave_1 removed [ 378.834071][T15342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.843260][T15342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.855248][T15342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.863653][T15342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.874439][T15342] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 378.979787][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.992490][T15366] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2517'. [ 379.009784][T15366] openvswitch: netlink: Flow key attr not present in new flow. [ 379.137145][T15373] syz_tun: entered allmulticast mode [ 379.141801][T15369] sctp: [Deprecated]: syz.2.2519 (pid 15369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.141801][T15369] Use struct sctp_sack_info instead [ 379.366777][T15381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.371269][T15389] netlink: 'syz.3.2524': attribute type 1 has an invalid length. [ 379.421056][T15389] 8021q: adding VLAN 0 to HW filter on device bond10 [ 379.556471][T15396] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2525'. [ 379.786842][T15410] netlink: 'syz.4.2529': attribute type 1 has an invalid length. [ 380.601456][T15452] geneve4: entered promiscuous mode [ 380.628899][ T3520] netdevsim netdevsim2 netdevsim1: set [1, 3] type 2 family 0 port 61899 - 0 [ 380.661747][ T3520] netdevsim netdevsim2 netdevsim2: set [1, 3] type 2 family 0 port 61899 - 0 [ 380.749307][ T3520] netdevsim netdevsim2 netdevsim3: set [1, 3] type 2 family 0 port 61899 - 0 [ 380.866675][T15472] __nla_validate_parse: 5 callbacks suppressed [ 380.866696][T15472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2541'. [ 380.889066][T15474] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2544'. [ 380.949995][T15452] syzkaller0: entered promiscuous mode [ 380.956448][T15452] syzkaller0: entered allmulticast mode [ 381.022808][T15463] wireguard0: entered promiscuous mode [ 381.042576][T15463] wireguard0: entered allmulticast mode [ 381.112866][T15484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2547'. [ 381.317340][T15496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2548'. [ 381.606480][T15499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2550'. [ 381.636446][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2550'. [ 381.637090][T15501] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2551'. [ 381.812832][T15506] xt_l2tp: v2 doesn't support IP mode [ 381.996693][T15513] netlink: 'syz.4.2555': attribute type 2 has an invalid length. [ 382.005245][T15513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2555'. [ 382.179933][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 384.571156][T15499] netlink: 'syz.0.2550': attribute type 1 has an invalid length. [ 384.600698][T15499] netlink: 'syz.0.2550': attribute type 2 has an invalid length. [ 384.999411][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2562'. [ 385.333366][T15553] netlink: 6048 bytes leftover after parsing attributes in process `syz.2.2570'. [ 385.458670][T15559] netlink: 'syz.2.2574': attribute type 10 has an invalid length. [ 385.580222][T15566] gretap0: entered promiscuous mode [ 385.810553][T15576] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 385.974862][T15593] __nla_validate_parse: 3 callbacks suppressed [ 385.974887][T15593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2579'. [ 386.006062][T15566] gretap0: left promiscuous mode [ 386.041585][T15596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2579'. [ 386.111001][T15597] Bluetooth: MGMT ver 1.23 [ 386.128166][T15597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 386.209486][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2581'. [ 386.316169][T15603] x_tables: unsorted entry at hook 1 [ 386.333746][T15605] ip6erspan0: entered promiscuous mode [ 386.476367][T15614] netlink: 'syz.2.2582': attribute type 1 has an invalid length. [ 386.500623][T15614] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2582'. [ 386.573669][T15614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2582'. [ 386.675156][T15626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2582'. [ 386.701664][T15620] netlink: 'syz.0.2585': attribute type 1 has an invalid length. [ 386.703384][T15626] netlink: 'syz.2.2582': attribute type 7 has an invalid length. [ 386.724964][T15620] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2585'. [ 386.734472][T15626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2582'. [ 386.744145][T15626] .`¹: entered promiscuous mode [ 386.749680][T15626] bond_slave_0: entered promiscuous mode [ 386.756973][T15620] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2585'. [ 386.776760][T15626] bond_slave_1: entered promiscuous mode [ 386.826544][T15626] .`¹: left promiscuous mode [ 386.831503][T15626] bond_slave_0: left promiscuous mode [ 386.854634][T15626] bond_slave_1: left promiscuous mode [ 387.609888][T15665] syzkaller1: entered promiscuous mode [ 387.627216][T15665] syzkaller1: entered allmulticast mode [ 387.771608][T15679] netlink: 'syz.2.2597': attribute type 10 has an invalid length. [ 387.785587][T15679] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.794273][T15679] bridge_slave_1: left allmulticast mode [ 387.800595][T15679] bridge_slave_1: left promiscuous mode [ 387.807485][T15679] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.825786][T15679] .`¹: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 389.692953][T15629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.935503][T15691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.961698][T15692] xt_limit: Overflow, try lower: 604147548/4200216962 [ 389.998132][T15692] geneve2: entered promiscuous mode [ 390.010715][T15692] geneve2: entered allmulticast mode [ 390.272463][T15709] team0: Caught tx_queue_len zero misconfig [ 390.295457][T15711] netlink: 'syz.2.2608': attribute type 1 has an invalid length. [ 390.327754][T15718] netlink: 'syz.4.2610': attribute type 1 has an invalid length. [ 390.520763][T15718] bond11: entered promiscuous mode [ 390.533648][T15718] 8021q: adding VLAN 0 to HW filter on device bond11 [ 390.581210][T15728] bond11: (slave bridge2): making interface the new active one [ 390.593802][T15728] bridge2: entered promiscuous mode [ 390.606273][T15728] bond11: (slave bridge2): Enslaving as an active interface with an up link [ 390.654967][T15733] sch_fq: defrate 0 ignored. [ 390.737081][T15732] syzkaller0: entered promiscuous mode [ 390.761484][T15732] syzkaller0: entered allmulticast mode [ 390.870431][T15750] netlink: 'syz.1.2619': attribute type 32 has an invalid length. [ 391.112503][T15765] __nla_validate_parse: 6 callbacks suppressed [ 391.112522][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'. [ 391.187090][T15765] bond0: entered promiscuous mode [ 391.216490][T15765] bond0: left promiscuous mode [ 391.234405][T15779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'. [ 391.266894][T15779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2623'. [ 391.325975][T15765] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2623'. [ 391.519651][T15789] netlink: 'syz.4.2629': attribute type 12 has an invalid length. [ 391.766203][T15801] team0: Device vlan4 is already an upper device of the team interface [ 391.793956][T15811] xt_cgroup: invalid path, errno=-2 [ 391.859578][T15812] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2636'. [ 391.891469][T15814] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2638'. [ 392.426903][T15833] netlink: 'syz.2.2642': attribute type 1 has an invalid length. [ 392.485107][T15833] 8021q: adding VLAN 0 to HW filter on device bond10 [ 392.584306][T15836] bond10: (slave gretap3): making interface the new active one [ 392.610623][T15836] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 392.975189][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2649'. [ 393.143501][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2649'. [ 393.350866][T15884] netlink: 'syz.4.2654': attribute type 2 has an invalid length. [ 393.601379][T15891] netlink: 'syz.1.2657': attribute type 1 has an invalid length. [ 393.725178][T15891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.777045][T15911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2663'. [ 393.831645][T15902] bond0: (slave geneve5): making interface the new active one [ 393.865463][T15902] bond0: (slave geneve5): Enslaving as an active interface with an up link [ 393.875381][T15909] s5ÿÿø: renamed from vlan1 [ 393.897509][T15891] ip6tnl0: Caught tx_queue_len zero misconfig [ 393.971669][T15917] Unsupported ieee802154 address type: 0 [ 394.031763][T15902] syz.1.2657 (15902) used greatest stack depth: 16120 bytes left [ 394.158855][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2669'. [ 394.516279][T15949] tipc: Resetting bearer [ 396.675881][T16041] __nla_validate_parse: 1 callbacks suppressed [ 396.675903][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2693'. [ 396.678649][T16040] netlink: 'syz.3.2693': attribute type 1 has an invalid length. [ 396.712109][T16041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'. [ 396.856820][T16039] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 396.980552][T16046] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 397.173844][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'. [ 397.314689][T16055] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2697'. [ 397.449614][T16067] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2697'. [ 397.921059][T16092] xt_TCPMSS: Only works on TCP SYN packets [ 397.998653][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2706'. [ 398.262285][T16114] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.281718][T16112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.307927][T16112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2709'. [ 398.400841][T16122] openvswitch: netlink: EtherType 0 is less than min 600 [ 398.514331][T16126] SET target dimension over the limit! [ 398.603781][T16129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2712'. [ 399.016356][T16138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2716'. [ 399.058828][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'. [ 399.103523][T16142] netlink: 'syz.1.2714': attribute type 3 has an invalid length. [ 399.304744][T16148] netlink: 'syz.2.2717': attribute type 10 has an invalid length. [ 399.417566][T16131] netlink: 'syz.4.2713': attribute type 1 has an invalid length. [ 399.512867][T16131] bond12: entered promiscuous mode [ 399.544649][T16131] 8021q: adding VLAN 0 to HW filter on device bond12 [ 399.981586][T16176] openvswitch: netlink: Missing key (keys=40, expected=80) [ 400.236587][T16185] xt_bpf: check failed: parse error [ 400.471472][T16193] ip6t_srh: unknown srh invflags 4000 [ 400.613221][T16200] syzkaller0: entered promiscuous mode [ 400.624300][T16200] syzkaller0: entered allmulticast mode [ 400.690933][T16202] syzkaller0: entered promiscuous mode [ 400.697194][T16202] syzkaller0: entered allmulticast mode [ 400.716032][T16211] sctp: [Deprecated]: syz.1.2737 (pid 16211) Use of int in maxseg socket option. [ 400.716032][T16211] Use struct sctp_assoc_value instead [ 400.735640][T16210] tipc: Enabled bearer , priority 0 [ 400.768506][T16201] tipc: Resetting bearer [ 400.853915][T16201] tipc: Disabling bearer [ 401.103862][ T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 401.393642][T16247] 8021q: adding VLAN 0 to HW filter on device bond3 [ 401.398330][T16256] netlink: 'syz.0.2750': attribute type 10 has an invalid length. [ 401.404658][T16251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.418097][T16251] bond3: (slave bond0): Enslaving as an active interface with a down link [ 401.445029][T16256] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.643010][ T5846] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 402.088014][T16303] __nla_validate_parse: 10 callbacks suppressed [ 402.088036][T16303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2764'. [ 402.175272][T16306] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2765'. [ 402.194159][T16310] netlink: 'syz.1.2764': attribute type 1 has an invalid length. [ 402.555973][T16327] netlink: 'syz.0.2770': attribute type 2 has an invalid length. [ 403.012907][T16354] : renamed from bond0 (while UP) [ 403.604109][T16366] netlink: 'syz.3.2781': attribute type 3 has an invalid length. [ 403.630208][T16362] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.2780'. [ 403.663044][T16362] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.2780'. [ 403.676722][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 403.734121][T16370] netlink: 'syz.3.2783': attribute type 21 has an invalid length. [ 403.753684][T16370] IPv6: NLM_F_CREATE should be specified when creating new route [ 404.119801][T16383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2789'. [ 404.152723][T16383] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2789'. [ 404.355804][T16394] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.810876][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2797'. [ 405.637380][T16449] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2804'. [ 405.660988][T16449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2804'. [ 405.688380][T16449] openvswitch: netlink: IPv4 frag type 95 is out of range max 2 [ 406.135989][T16464] netlink: 'syz.1.2808': attribute type 7 has an invalid length. [ 406.493930][T16494] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 406.524784][T16483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.536035][T16494] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 406.999440][T16524] tipc: Started in network mode [ 407.024339][T16524] tipc: Node identity bbbbbb, cluster identity 4711 [ 407.041654][T16524] tipc: Enabled bearer , priority 10 [ 407.295262][T16549] xt_nat: multiple ranges no longer supported [ 407.839780][T16578] netlink: 'syz.1.2841': attribute type 1 has an invalid length. [ 407.860479][T16585] netlink: 'syz.3.2844': attribute type 1 has an invalid length. [ 407.870455][T16578] __nla_validate_parse: 6 callbacks suppressed [ 407.870477][T16578] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2841'. [ 407.889500][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2844'. [ 407.909852][T16578] netlink: 'syz.1.2841': attribute type 1 has an invalid length. [ 407.920198][T16578] netlink: 'syz.1.2841': attribute type 8 has an invalid length. [ 407.928989][T16578] netlink: 582 bytes leftover after parsing attributes in process `syz.1.2841'. [ 408.050520][T16594] netlink: 'syz.4.2845': attribute type 13 has an invalid length. [ 408.068601][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 408.083294][T16594] netlink: 'syz.4.2845': attribute type 13 has an invalid length. [ 408.091233][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 408.152354][ T5927] tipc: Node number set to 3149642496 [ 408.289609][T16610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2851'. [ 408.330038][T16613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2854'. [ 408.377108][T16619] netlink: 'syz.4.2855': attribute type 1 has an invalid length. [ 408.408000][T16624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2854'. [ 408.408390][T16619] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2855'. [ 408.462607][T16619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2855'. [ 408.474516][T16628] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 408.719343][T16634] netlink: 'syz.2.2858': attribute type 1 has an invalid length. [ 408.919855][T16644] veth0: entered promiscuous mode [ 409.107228][T16647] syzkaller0: entered promiscuous mode [ 409.117958][T16642] veth0: left promiscuous mode [ 409.164923][T16666] netlink: 'syz.3.2867': attribute type 33 has an invalid length. [ 412.678344][T16721] gretap2: entered promiscuous mode [ 412.694266][T16721] batman_adv: batadv0: Adding interface: gretap2 [ 412.700843][T16721] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 412.738988][T16721] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 412.914757][T16737] netlink: 'syz.3.2888': attribute type 21 has an invalid length. [ 412.921540][T16721] bond4: entered promiscuous mode [ 412.923460][T16738] netlink: 'syz.3.2888': attribute type 21 has an invalid length. [ 412.938901][T16721] bond4: entered allmulticast mode [ 412.950320][T16721] 8021q: adding VLAN 0 to HW filter on device bond4 [ 412.961798][T16737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.968229][T16741] netlink: 'syz.4.2889': attribute type 1 has an invalid length. [ 412.985532][T16738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.023794][T16741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.056578][T16741] bond0: (slave veth0_to_bond): making interface the new active one [ 413.068454][T16741] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 413.087340][T16741] bond0: entered promiscuous mode [ 413.093382][T16741] veth0_to_bond: entered promiscuous mode [ 413.105538][T16741] bond0: entered allmulticast mode [ 413.113808][T16741] veth0_to_bond: entered allmulticast mode [ 413.160211][T16741] __nla_validate_parse: 9 callbacks suppressed [ 413.160235][T16741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2889'. [ 413.209578][T16741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.608291][T16777] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.2900'. [ 413.633719][T16780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2901'. [ 413.674936][T16780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'. [ 413.775978][T16792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2904'. [ 413.947783][T16809] vcan0: tx address claim with dlc 0 [ 414.351685][T16831] netlink: 'syz.3.2916': attribute type 1 has an invalid length. [ 414.363695][T16831] netlink: 476 bytes leftover after parsing attributes in process `syz.3.2916'. [ 414.391107][T16831] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2916'. [ 414.466901][T16835] veth0_to_bond: entered allmulticast mode [ 414.469814][T16837] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2918'. [ 414.594071][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 414.607912][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 414.618693][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 414.628412][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 414.640704][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 414.685226][T16840] netlink: 'syz.2.2918': attribute type 2 has an invalid length. [ 414.748513][T16840] netlink: 'syz.2.2918': attribute type 2 has an invalid length. [ 414.925982][T16854] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 415.311831][T16871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2926'. [ 415.452241][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 415.580745][T16885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2929'. [ 415.891631][T13881] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.941136][T13881] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.992216][T13881] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 416.256044][T13881] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.278823][T13881] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.296804][T13881] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 416.388662][T16841] chnl_net:caif_netlink_parms(): no params data found [ 416.608192][T16925] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 416.687861][T13881] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.709572][T13881] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.737389][T13881] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 416.741026][ T5843] Bluetooth: hci5: command tx timeout [ 417.109633][T13881] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.139297][T13881] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.162730][T13881] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 417.283760][T16944] netlink: 'syz.2.2944': attribute type 4 has an invalid length. [ 417.296998][T16946] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 417.325507][T16841] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.353926][T16841] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.372351][T16841] bridge_slave_0: entered allmulticast mode [ 417.385113][T16841] bridge_slave_0: entered promiscuous mode [ 417.416851][T16841] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.429186][T16841] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.449109][T16841] bridge_slave_1: entered allmulticast mode [ 417.472922][T16841] bridge_slave_1: entered promiscuous mode [ 417.608443][T16841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.668830][T16841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.869073][T16841] team0: Port device team_slave_0 added [ 417.883964][T16841] team0: Port device team_slave_1 added [ 417.956226][T16965] 8021q: adding VLAN 0 to HW filter on device bond11 [ 418.019325][T16841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.027287][T16841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.063739][T16841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.120707][T13881] vlan2: left allmulticast mode [ 418.131974][T13881] geneve0: left allmulticast mode [ 418.147080][T13881] vlan2: left promiscuous mode [ 418.162446][T13881] geneve0: left promiscuous mode [ 418.175388][T13881] bridge0: port 3(vlan2) entered disabled state [ 418.208253][T13881] bridge_slave_1: left allmulticast mode [ 418.217064][T13881] bridge_slave_1: left promiscuous mode [ 418.239246][T13881] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.277020][T13881] bridge_slave_0: left allmulticast mode [ 418.283541][T13881] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.315707][T13881] pimreg3: left allmulticast mode [ 418.331844][T16977] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 418.683853][T13881] bond3 (unregistering): (slave gretap1): Releasing active interface [ 418.764850][T13881]  (unregistering): (slave bridge0): Releasing backup interface [ 418.814759][ T5843] Bluetooth: hci5: command tx timeout [ 418.838180][T13881] bond11 (unregistering): (slave bridge2): Releasing backup interface [ 418.848292][T13881] bridge2 (unregistering): left promiscuous mode [ 418.939173][T13881]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.953549][T13881]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.967458][T13881]  (unregistering): (slave batadv0): Releasing backup interface [ 418.981549][T13881]  (unregistering): Released all slaves [ 418.993369][T13881] bond1 (unregistering): Released all slaves [ 419.008861][T13881] bond2 (unregistering): Released all slaves [ 419.025766][T13881] bond3 (unregistering): Released all slaves [ 419.050348][T13881] bond4 (unregistering): Released all slaves [ 419.067333][T13881] bond5 (unregistering): Released all slaves [ 419.082457][T13881] bond6 (unregistering): Released all slaves [ 419.097267][T13881] bond7 (unregistering): Released all slaves [ 419.115097][T13881] bond8 (unregistering): Released all slaves [ 419.134271][T13881] bond9 (unregistering): Released all slaves [ 419.151001][T13881] bond10 (unregistering): Released all slaves [ 419.192245][T13881] bond11 (unregistering): Released all slaves [ 419.208525][T13881] bond12 (unregistering): Released all slaves [ 419.225991][T13881] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 419.239028][T13881] veth0_to_bond: left promiscuous mode [ 419.246770][T13881] veth0_to_bond: left allmulticast mode [ 419.254590][T13881] bond0 (unregistering): Released all slaves [ 419.270374][T16841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.277942][T16841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.307155][T16841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.332159][T16983] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 419.450865][T16989] __nla_validate_parse: 6 callbacks suppressed [ 419.450888][T16989] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2956'. [ 419.513796][T16841] hsr_slave_0: entered promiscuous mode [ 419.535316][T16841] hsr_slave_1: entered promiscuous mode [ 419.560966][T16841] debugfs: 'hsr0' already exists in 'hsr' [ 419.570391][T16841] Cannot create hsr debugfs directory [ 419.677070][T16996] ieee802154 phy1 wpan1: encryption failed: -22 [ 420.577872][T16999] netlink: 'syz.2.2959': attribute type 3 has an invalid length. [ 420.606035][T13881] hsr_slave_0: left promiscuous mode [ 420.613737][T13881] hsr_slave_1: left promiscuous mode [ 420.619971][T13881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.628893][T13881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.647978][T13881] veth1_macvtap: left promiscuous mode [ 420.656127][T13881] veth1_vlan: left promiscuous mode [ 420.871012][T13881] team0 (unregistering): Port device team_slave_1 removed [ 420.892039][ T5843] Bluetooth: hci5: command tx timeout [ 420.901350][T13881] team0 (unregistering): Port device team_slave_0 removed [ 421.219834][T16971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.268625][T16841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 421.411741][T16841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.436231][T16841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 421.477574][T16841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.503305][T16841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 421.512365][T17011] netlink: 'syz.3.2960': attribute type 1 has an invalid length. [ 421.554666][T16841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.571735][T16841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.606472][T16841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.677466][T13881] IPVS: stop unused estimator thread 0... [ 421.988652][T16841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.024849][T16841] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.076194][ T9452] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.083592][ T9452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.156279][ T9452] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.163726][ T9452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.228231][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2969'. [ 422.460885][T17059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2969'. [ 422.520517][T17061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2969'. [ 422.559206][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2969'. [ 422.974038][ T5843] Bluetooth: hci5: command tx timeout [ 423.001600][T16841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.250359][T17096] x_tables: unsorted underflow at hook 3 [ 423.302593][T17096] macvtap1: entered promiscuous mode [ 423.322074][T17096] macvtap1: entered allmulticast mode [ 423.331558][T17096] veth1_vlan: entered allmulticast mode [ 423.404346][T17102] macvtap2: entered promiscuous mode [ 423.415979][T17102] macvtap2: entered allmulticast mode [ 423.635304][T16841] veth0_vlan: entered promiscuous mode [ 423.653583][T16841] veth1_vlan: entered promiscuous mode [ 423.705295][T16841] veth0_macvtap: entered promiscuous mode [ 423.718411][T16841] veth1_macvtap: entered promiscuous mode [ 423.737787][T16841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.754788][T16841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.768794][ T3520] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.779600][ T3520] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.791162][ T3520] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.800999][ T3520] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.929896][T13881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.951257][T13881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.983070][T13881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.993682][T13881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.415195][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.575272][T17130] netlink: 'syz.2.2982': attribute type 15 has an invalid length. [ 445.635285][T17126] netlink: 'syz.2.2982': attribute type 15 has an invalid length. [ 445.679363][T17135] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2985'. [ 445.682657][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 445.714397][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 445.724052][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 445.746167][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 445.758674][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 445.835471][T17136] tipc: Resetting bearer [ 446.069543][T17157] netlink: 'syz.4.2990': attribute type 15 has an invalid length. [ 446.507971][T17180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.758672][T17136] chnl_net:caif_netlink_parms(): no params data found [ 446.897238][T17202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3001'. [ 446.933548][T17202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3001'. [ 446.935598][T17198] [ 446.945496][T17198] ====================================================== [ 446.952740][T17198] WARNING: possible circular locking dependency detected [ 446.959815][T17198] syzkaller #0 Not tainted [ 446.964494][T17198] ------------------------------------------------------ [ 446.971560][T17198] syz.1.3001/17198 is trying to acquire lock: [ 446.977745][T17198] ffffffff8ff61938 (nr_node_list_lock){+.-.}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 446.987479][T17198] [ 446.987479][T17198] but task is already holding lock: [ 446.995287][T17198] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 447.005290][T17198] [ 447.005290][T17198] which lock already depends on the new lock. [ 447.005290][T17198] [ 447.014542][T17208] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3002'. [ 447.016420][T17198] [ 447.016420][T17198] the existing dependency chain (in reverse order) is: [ 447.016432][T17198] [ 447.016432][T17198] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 447.043594][T17198] _raw_spin_lock_bh+0x36/0x50 [ 447.049147][T17198] nr_rt_ioctl+0x40c/0xf90 [ 447.054308][T17198] sock_do_ioctl+0x101/0x320 [ 447.059576][T17198] sock_ioctl+0x5c6/0x7f0 [ 447.064674][T17198] __se_sys_ioctl+0xfc/0x170 [ 447.070296][T17198] do_syscall_64+0x15f/0xf80 [ 447.075536][T17198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.082205][T17198] [ 447.082205][T17198] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 447.090969][T17198] _raw_spin_lock_bh+0x36/0x50 [ 447.096404][T17198] nr_rt_ioctl+0x215/0xf90 [ 447.101485][T17198] sock_do_ioctl+0x101/0x320 [ 447.106653][T17198] sock_ioctl+0x5c6/0x7f0 [ 447.111651][T17198] __se_sys_ioctl+0xfc/0x170 [ 447.116822][T17198] do_syscall_64+0x15f/0xf80 [ 447.122490][T17198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.129316][T17198] [ 447.129316][T17198] -> #0 (nr_node_list_lock){+.-.}-{3:3}: [ 447.137921][T17198] __lock_acquire+0x15a5/0x2cf0 [ 447.143790][T17198] lock_acquire+0x106/0x350 [ 447.149174][T17198] _raw_spin_lock_bh+0x36/0x50 [ 447.155030][T17198] nr_rt_device_down+0xbe/0x860 [ 447.160451][T17198] nr_device_event+0x137/0x150 [ 447.167842][T17198] notifier_call_chain+0x1ad/0x3d0 [ 447.173836][T17198] netif_close_many+0x2ae/0x420 [ 447.179623][T17198] netif_close+0x160/0x220 [ 447.184715][T17198] dev_close+0x10a/0x220 [ 447.189621][T17198] bpq_device_event+0x377/0x6a0 [ 447.195312][T17198] notifier_call_chain+0x1ad/0x3d0 [ 447.201166][T17198] __dev_notify_flags+0x16d/0x310 [ 447.207146][T17198] netif_change_flags+0xe8/0x1a0 [ 447.213169][T17198] dev_change_flags+0x130/0x270 [ 447.218584][T17198] dev_ioctl+0x7b4/0x1150 [ 447.223493][T17198] sock_do_ioctl+0x23e/0x320 [ 447.230253][T17198] sock_ioctl+0x5c6/0x7f0 [ 447.235619][T17198] __se_sys_ioctl+0xfc/0x170 [ 447.241206][T17198] do_syscall_64+0x15f/0xf80 [ 447.246834][T17198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.253619][T17198] [ 447.253619][T17198] other info that might help us debug this: [ 447.253619][T17198] [ 447.265066][T17198] Chain exists of: [ 447.265066][T17198] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 447.265066][T17198] [ 447.279574][T17198] Possible unsafe locking scenario: [ 447.279574][T17198] [ 447.287277][T17198] CPU0 CPU1 [ 447.292955][T17198] ---- ---- [ 447.298891][T17198] lock(nr_neigh_list_lock); [ 447.303989][T17198] lock(&nr_node->node_lock); [ 447.311562][T17198] lock(nr_neigh_list_lock); [ 447.319075][T17198] lock(nr_node_list_lock); [ 447.323880][T17198] [ 447.323880][T17198] *** DEADLOCK *** [ 447.323880][T17198] [ 447.333269][T17198] 2 locks held by syz.1.3001/17198: [ 447.339105][T17198] #0: ffffffff8fde4240 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 447.348053][T17198] #1: ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 447.358399][T17198] [ 447.358399][T17198] stack backtrace: [ 447.364474][T17198] CPU: 1 UID: 0 PID: 17198 Comm: syz.1.3001 Not tainted syzkaller #0 PREEMPT(full) [ 447.364495][T17198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.364506][T17198] Call Trace: [ 447.364512][T17198] [ 447.364518][T17198] dump_stack_lvl+0xe8/0x150 [ 447.364545][T17198] print_circular_bug+0x2e1/0x300 [ 447.364566][T17198] check_noncircular+0x12e/0x150 [ 447.364585][T17198] __lock_acquire+0x15a5/0x2cf0 [ 447.364613][T17198] ? __lock_acquire+0x6b5/0x2cf0 [ 447.364637][T17198] ? dsa_user_netdevice_event+0x495/0x2850 [ 447.364656][T17198] ? packet_notifier+0x121/0xf70 [ 447.364677][T17198] ? nr_rt_device_down+0xbe/0x860 [ 447.364691][T17198] lock_acquire+0x106/0x350 [ 447.364714][T17198] ? nr_rt_device_down+0xbe/0x860 [ 447.364729][T17198] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 447.364750][T17198] ? nr_rt_device_down+0xbe/0x860 [ 447.364764][T17198] _raw_spin_lock_bh+0x36/0x50 [ 447.364783][T17198] ? nr_rt_device_down+0xbe/0x860 [ 447.364797][T17198] nr_rt_device_down+0xbe/0x860 [ 447.364810][T17198] ? nr_device_event+0x12f/0x150 [ 447.364837][T17198] nr_device_event+0x137/0x150 [ 447.364859][T17198] notifier_call_chain+0x1ad/0x3d0 [ 447.364880][T17198] netif_close_many+0x2ae/0x420 [ 447.364902][T17198] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.364923][T17198] ? __pfx_netif_close_many+0x10/0x10 [ 447.364946][T17198] ? bond_netdev_event+0x231/0xfa0 [ 447.364969][T17198] ? __neigh_ifdown+0x7fd/0x8c0 [ 447.364992][T17198] netif_close+0x160/0x220 [ 447.365014][T17198] ? __pfx_netif_close+0x10/0x10 [ 447.365035][T17198] ? __asan_memset+0x22/0x50 [ 447.365052][T17198] ? macvtap_device_event+0xd1/0x400 [ 447.365070][T17198] dev_close+0x10a/0x220 [ 447.365085][T17198] bpq_device_event+0x377/0x6a0 [ 447.365106][T17198] notifier_call_chain+0x1ad/0x3d0 [ 447.365125][T17198] __dev_notify_flags+0x16d/0x310 [ 447.365142][T17198] ? __pfx___dev_notify_flags+0x10/0x10 [ 447.365156][T17198] ? __dev_change_flags+0x5a0/0x7e0 [ 447.365173][T17198] ? __pfx___dev_change_flags+0x10/0x10 [ 447.365190][T17198] ? full_name_hash+0x92/0xe0 [ 447.365247][T17198] netif_change_flags+0xe8/0x1a0 [ 447.365265][T17198] dev_change_flags+0x130/0x270 [ 447.365281][T17198] dev_ioctl+0x7b4/0x1150 [ 447.365306][T17198] sock_do_ioctl+0x23e/0x320 [ 447.365327][T17198] ? __pfx_sock_do_ioctl+0x10/0x10 [ 447.365346][T17198] ? do_futex+0x395/0x420 [ 447.365367][T17198] sock_ioctl+0x5c6/0x7f0 [ 447.365387][T17198] ? __pfx_sock_ioctl+0x10/0x10 [ 447.365406][T17198] ? __fget_files+0x2a/0x420 [ 447.365422][T17198] ? __fget_files+0x3a0/0x420 [ 447.365437][T17198] ? __fget_files+0x2a/0x420 [ 447.365453][T17198] ? bpf_lsm_file_ioctl+0x9/0x20 [ 447.365474][T17198] ? __pfx_sock_ioctl+0x10/0x10 [ 447.365493][T17198] __se_sys_ioctl+0xfc/0x170 [ 447.365513][T17198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.365530][T17198] do_syscall_64+0x15f/0xf80 [ 447.365551][T17198] ? trace_irq_disable+0x3b/0x140 [ 447.365572][T17198] ? clear_bhb_loop+0x40/0x90 [ 447.365589][T17198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.365605][T17198] RIP: 0033:0x7f4e0359cdd9 [ 447.365620][T17198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 447.365635][T17198] RSP: 002b:00007f4e04425028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.365653][T17198] RAX: ffffffffffffffda RBX: 00007f4e03815fa0 RCX: 00007f4e0359cdd9 [ 447.365665][T17198] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 447.365675][T17198] RBP: 00007f4e03632d69 R08: 0000000000000000 R09: 0000000000000000 [ 447.365685][T17198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.365696][T17198] R13: 00007f4e03816038 R14: 00007f4e03815fa0 R15: 00007ffde0fdb218 [ 447.365713][T17198] [ 447.852889][ T5843] Bluetooth: hci3: command tx timeout [ 447.892065][T17136] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 448.116787][T17229] syz_tun (unregistering): left allmulticast mode [ 448.305315][ T3520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.339365][ T3520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 52196 - 0 [ 448.444317][ T3520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.481117][ T3520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 52196 - 0 [ 448.616952][ T3520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.628739][ T3520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 52196 - 0 [ 448.884474][ T3520] lo: left allmulticast mode [ 448.889693][ T3520] tipc: Resetting bearer [ 449.011445][ T3520] tipc: Disabling bearer [ 449.023068][ T3520] bond9 (unregistering): (slave gretap2): Releasing active interface [ 449.134230][ T3520] bond3 (unregistering): (slave bridge3): Releasing active interface [ 449.194456][ T3520] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 449.203163][ T3520] bridge4 (unregistering): left promiscuous mode [ 449.474513][ T3520] bond9 (unregistering): (slave bridge9): Releasing active interface [ 449.590021][T13881] smbdirect: ib_dev[syz1] removed [ 449.596606][ T3520] .` (unregistering): Released all slaves [ 449.607792][ T3520] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 449.619128][ T3520] bond1 (unregistering): (slave vxcan5): Releasing backup interface [ 449.628929][ T3520] bond1 (unregistering): Released all slaves [ 449.639430][ T3520] bond2 (unregistering): Released all slaves [ 449.649500][ T3520] bond3 (unregistering): Released all slaves [ 449.659820][ T3520] bond4 (unregistering): Released all slaves [ 449.669319][ T3520] bond5 (unregistering): Released all slaves [ 449.682476][ T3520] bond6 (unregistering): Released all slaves [ 449.696155][ T3520] bond7 (unregistering): Released all slaves [ 449.708261][ T3520] bond0 (unregistering): Released all slaves [ 449.719281][ T3520] bond8 (unregistering): Released all slaves [ 449.728752][ T3520] bond9 (unregistering): Released all slaves [ 449.745655][ T3520] bond10 (unregistering): Released all slaves [ 449.870455][ T3520] : left promiscuous mode [ 449.969353][ T3520] tipc: Left network mode [ 450.166502][ T5506] 8021q: adding VLAN 0 to HW filter on device eth1 [ 450.280556][ T3520] hsr_slave_1: left promiscuous mode [ 450.288402][ T3520] veth1_vlan: left allmulticast mode [ 450.295893][ T3520] veth1_macvtap: left promiscuous mode [ 450.301501][ T3520] veth1_vlan: left promiscuous mode [ 450.592412][ T5506] 8021q: adding VLAN 0 to HW filter on device eth2 [ 450.744969][ T3520] IPVS: stop unused estimator thread 0... [ 450.850806][ T3520] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.905031][ T5506] 8021q: adding VLAN 0 to HW filter on device eth3 [ 450.929341][ T3520] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.988546][ T3520] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.052171][ T3520] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.198146][ T3520] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.209092][ T3520] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 451.220763][ T3520] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 451.231786][ T3520] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 61899 - 0 [ 451.246798][ T5506] 8021q: adding VLAN 0 to HW filter on device eth4 [ 451.282972][ T3520] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.294571][ T3520] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 451.306831][ T3520] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 451.320564][ T3520] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 61899 - 0 [ 451.418376][ T3520] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.430688][ T3520] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 451.442260][ T3520] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 451.456025][ T3520] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 61899 - 0 [ 451.569855][ T3520] bridge_slave_1: left allmulticast mode [ 451.577596][ T3520] bridge_slave_1: left promiscuous mode [ 451.585144][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.595998][ T3520] bridge_slave_0: left allmulticast mode [ 451.603197][ T3520] bridge_slave_0: left promiscuous mode [ 451.609451][ T3520] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.622195][ T3520] bridge0: port 1(batadv0) entered disabled state [ 451.787333][ T3520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.797724][ T3520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.808070][ T3520] bond0 (unregistering): Released all slaves [ 451.848402][ T3520] bond0 (unregistering): Released all slaves [ 451.951560][ T3520] bond10 (unregistering): (slave gretap3): Releasing active interface [ 451.973775][ T3520] bond2 (unregistering): (slave geneve2): Releasing active interface [ 452.336784][ T3520] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 452.345178][ T3520] bridge7 (unregistering): left promiscuous mode [ 452.504887][ T3520] .`¹ (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.516347][ T3520] .`¹ (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.526776][ T3520] .`¹ (unregistering): (slave bridge_slave_1): Releasing backup interface [ 452.536915][ T3520] .`¹ (unregistering): Released all slaves [ 452.545454][ T3520] bond1 (unregistering): Released all slaves [ 452.556765][ T3520] bond2 (unregistering): Released all slaves [ 452.567287][ T3520] bond0 (unregistering): Released all slaves [ 452.578973][ T3520] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 452.589697][ T3520] bond3 (unregistering): (slave bond4): Releasing active interface [ 452.598668][ T3520] bond3 (unregistering): Released all slaves [ 452.615341][ T3520] bond4 (unregistering): Released all slaves [ 452.625525][ T3520] bond5 (unregistering): Released all slaves [ 452.635151][ T3520] bond6 (unregistering): Released all slaves [ 452.645505][ T3520] bond7 (unregistering): Released all slaves [ 452.655817][ T3520] bond8 (unregistering): Released all slaves [ 452.667587][ T3520] bond9 (unregistering): Released all slaves [ 452.680835][ T3520] bond10 (unregistering): Released all slaves [ 452.698261][ T3520] bond11 (unregistering): Released all slaves [ 452.709965][ T5506] 8021q: adding VLAN 0 to HW filter on device eth5 [ 452.908892][ T3520] tipc: Disabling bearer [ 452.915253][ T3520] tipc: Left network mode [ 453.133168][ T5506] 8021q: adding VLAN 0 to HW filter on device eth6 [ 453.424518][ T5506] 8021q: adding VLAN 0 to HW filter on device eth7 [ 453.550684][ T3520] hsr_slave_0: left promiscuous mode [ 453.557109][ T3520] hsr_slave_1: left promiscuous mode [ 453.568946][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.576973][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.588386][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.598280][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.611187][ T3520] hsr_slave_0: left promiscuous mode [ 453.617907][ T3520] hsr_slave_1: left promiscuous mode [ 453.627147][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.635298][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.647196][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.655446][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.671699][ T3520] veth1_macvtap: left promiscuous mode [ 453.679225][ T3520] veth0_macvtap: left promiscuous mode [ 453.684907][ T3520] veth1_vlan: left promiscuous mode [ 453.690309][ T3520] veth0_vlan: left promiscuous mode [ 453.696997][ T3520] veth1_vlan: left allmulticast mode [ 453.702673][ T3520] veth1_macvtap: left promiscuous mode [ 453.708373][ T3520] veth0_macvtap: left promiscuous mode [ 453.714620][ T3520] veth1_vlan: left promiscuous mode [ 453.719947][ T3520] veth0_vlan: left promiscuous mode [ 453.881003][ T3520] team0 (unregistering): Port device team_slave_1 removed [ 453.901022][ T3520] team0 (unregistering): Port device team_slave_0 removed [ 454.097273][ T3520] team0 (unregistering): Port device team_slave_1 removed [ 454.108584][ T3520] team0 (unregistering): Port device team_slave_0 removed [ 454.178160][ T5506] 8021q: adding VLAN 0 to HW filter on device eth8 [ 454.610662][ T3520] IPVS: stop unused estimator thread 0... [ 454.790321][ T5506] 8021q: adding VLAN 0 to HW filter on device eth9 [ 455.059362][ T5506] 8021q: adding VLAN 0 to HW filter on device eth10 [ 455.295962][ T5506] 8021q: adding VLAN 0 to HW filter on device eth11 [ 455.563886][ T5506] 8021q: adding VLAN 0 to HW filter on device eth12