last executing test programs: 6.080406934s ago: executing program 1 (id=5820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="6105070202ff00fb030401ade5516e8d"], 0xbe) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) 2.806687446s ago: executing program 1 (id=5831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37}, 0x28) (async) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000700039022dbd7000ffdbdf2507000000", @ANYRES32=r9, @ANYBLOB="0c00018008000100000001010c000180060002000e000000"], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x44014) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x1, 0x100000001}) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r11, &(0x7f0000000080)=ANY=[], 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000060000005b4200000400000080020000", @ANYRES32=r2, @ANYBLOB='\a\x00'/20, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0500000004000000000000000000000000f250000000000000000000"], 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x38}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 2.655590264s ago: executing program 1 (id=5833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair(0x1, 0x80004, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$ax25(r4, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x100) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x2000000, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x0, 0x1084}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x20044840) accept4(r6, 0x0, 0x0, 0x0) shutdown(r6, 0x1) getsockopt$bt_hci(r5, 0x84, 0x15, 0x0, &(0x7f0000000000)) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002b40)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x80}, 0x4008050) 2.600383462s ago: executing program 2 (id=5718): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_ts_info}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002740)="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", 0x111}, {&(0x7f0000000280)="7cd7b47bef26d7cfb4557f001d90015c488c62343eb635be2fd9f5b4c8954222c1a7b8b5be1a517a7b3116f5a61fe3fe5f40c01bc4e6c94e2a56e1536b6578e1535f04e1285cd3a417365a134185c1c85a98825024192ee6ecd851719167d744bcf5920cf2dee45728dd4f78b83ace20aad26851060869e96676a40f3f597840075828f7ea30f5ec2ceadb8dbe2a4ac0d7dfb7f1c91d05a5cd421246b26daeb6bd7ff31c73613e2faed931c11f48201c0461f664211d6bdb05b14d3b7049fd5530ab44b7da25b0b98459ad1ccf42ae55a098271795b487d7d25d925a281de15fb2e68dc6d0bf67de2bbb5cd7376484039d9a302554", 0xf5}, {&(0x7f0000000380)="2aa36751ba26a86e620c72bf2fc2", 0xe}, {&(0x7f00000003c0)="b853ca57ce6a12b3d0f47e30980a290b2e712d2aae895ef231f5af9589f655bb6268d4e630c0bff66d95de448670ac6ef3e52b5156eca9aff57df9481ac70a58499c8f2b2e67156da0e04a75f46e16690d299862c905cf8e33587bc007f751bc243f7e5e446b338d4e5580004d5d84dd48aab52a14b0631e87b7ea11bc8823d718dbc4201eab7a3d7272bb92ffdb66506faebe5accc2f088202c3cc5709002fbbb2f66162d72f26c0c3740e602ea1011744b2814e469fb30ac418f1d9cc33ba521e9f95270e6523740337a06e2c3586a124d441844b7b7de758ff5b443c8292765a3ec342c34940ff408f302a836d823c4b619d02ef908e3a2014ff0b7ea3b1193f6b6fc46b7bb81d45406fef53d41d8bed0c8a59278376af844d6e80379c6f8b6e1ff159ab1522c329f8855b2233d9066754b2888116ba2d93026b44ff8465de909125829b9d88df4aa01ae8239247d79fdc8134723e4ec221bcf714dc4236be90e472964254e5bf0679631f5c5262ab2d80814a1672cda4603139a51c8d8b6f33e50d40e120fa4dea27bd1db0bb27ab86c47299800ffd942549b1765a4f29cab83ef441c951c880b705056f3577ddb4d2dc1cdee712ee7fe19291fca5a13ee61ec0362e20513ce99fd479786852ab149302852cab0edaa5f381daafccfef4245a00b6f62048f9695665912bae8966b39ab565ae3e3f11302117b5440d7e4b15486d661f04afd6ad906236c5c93efed5fce66fffa9ce866c68c2e2baeafc29b86dba00b53e818cf920fda8a70db4c248a110a1df7f96438b9f87047bc914ff9ed3dacafac8cae06d3fe8569c15d22e9c43ac43901971ce400b4d9c4cb0e34ddd04354977e5ad7b4e1a14c677c76cf51dd1639f5b2c3188050a0fd20284b80899387bf38d4605e9a7024489a0afe36cc9b1f8fa7c0b7c10422d8eb9598e563fc1648987591ad6d9fba8dc98f867c0e00c643e6b84aeb234fe18630584d4413a11bcb8c063822fe7c3c7e19777c4f385b981617181346249b85830e0420a95c428c0e5047fe44ee601c1bca1d8662205ff004fad831538dafc2d22ccaa2bde4519ba0c283ccd64ffe4b43f77e3f51e958fc7d9abbcbec7baaab6924bf2f973810d65821d7e64cd32899419211ef0619d5e8cbf3e4c30bc68e5f88c41d539902b1c7774636528b095940acfa187e95b514b0060edaa9b570510722ef3d54fd6eb5e07b370af1bc19f13906b2ce010de7f3ad99e9e60fb6c5cff9b7894fe1426f8632dc2cd3a705ef4a1fd9f5af4465dce7fedeaf484a3f0337cb96d99793515b1fd6ad77b8609945b6af23866ecfbc63dcf9df5ce099759a90bb89fe1653a9e8f70e0d6d4add994614b778b8261e746fc67a24df2d6d65fd458050196b3f55052b99e8eb262a23eb033e0054ea0fd22415afd437e847fd1e31b4b83330c178ffcbe3e049166d4ddb981f13281f211f98317f5c6db0f5fbbd4d187462c2d9523f4a4500e07dc0dfbb14a7f201aa4559488240ffabec88d4f63360b7ec8ee1df495f75f43a56e952a15cf5b99a7e06e9053c5d1ed1291a449f0c6abc013bf062470a9a8668ff25a61f49582b8f4bd043eacd84477a31a6d923df7d6832617ec4a86dce4ea53dce288558ded342fa2a2d67fa973dfa23cd0b3ea8438f21b241945fc924aa8e5cd4f845d63650009af5b53a205a9ae6784f7c7d456a88e8527d039a33204d76da3b70297b3107f17b8d23fbc50d48031f0ef61997b4b499e0729ffe024d395cb38ecc", 0x4e6}], 0x4}}], 0x1, 0x4) 2.517211239s ago: executing program 0 (id=5836): getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r0, 0xf}, 0x8) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1, 0x1}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r1, 0xffffffffffffff41, 0xd, 0x7}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1, 0x680, 0x398c, 0x12d00, r3, 0x2, '\x00', 0x0, r3, 0x1, 0x4, 0x4, 0xb, @void, @value, @value=r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r2, r1, 0x0, 0x800) 2.097135451s ago: executing program 0 (id=5838): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x680, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r1], 0x50}}, 0xc0) 2.08828296s ago: executing program 0 (id=5842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x3, 0x9, 0xbffc}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) close(0x4) (async) close(0x4) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x70bd29, 0x100002, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xe}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x840) (async) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x840) r13 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r13, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) (async) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r13, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) write$nci(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="50010101"], 0xe4) 1.95962985s ago: executing program 4 (id=5844): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) r1 = socket$caif_stream(0x25, 0x1, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0xa8, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x1, 0x0, 0x9}, [@RTA_DST={0x8}, @RTA_NEWDST={0x84, 0x13, [{0x8, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x19, 0x0, 0x1}, {0xe}, {0xffe00}, {0x4, 0x0, 0x1}, {0x8e51}, {0xf36a, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x59b3}, {0x9, 0x0, 0x1}, {0x5}, {0x7ebc}, {0x8, 0x0, 0x1}, {0x7}, {0xffff7}, {0x2, 0x0, 0x1}, {0x173d}, {0xbf, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x24000, 0x0, 0x1}, {0xd, 0x0, 0x1}, {0x7}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7}, {0x8001}, {0x6, 0x0, 0x1}, {0x1000}]}]}, 0xa8}}, 0x0) 1.846974909s ago: executing program 4 (id=5846): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback=r0, r0, 0xe, 0x0, 0x0, @void, @value=r0}, 0x20) (async) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0xc, @loopback, 0xe}, @in={0x2, 0x4e22, @loopback}], 0x2c) 1.734965976s ago: executing program 1 (id=5848): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x6, 0xf, 0x6, 0x9}]}) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0x12, 0x4, &(0x7f0000000280)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000ff7f00000007000000a39df30010000027", @ANYRES32, @ANYRESOCT, @ANYBLOB="698f39af3688674afb4559204f0dca7846eb9720f2cf", @ANYRES32, @ANYBLOB="074000ff0300"/28], 0x48) mmap(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x1000001, 0x4000010, r5, 0x15323000) socket$packet(0x11, 0x2, 0x300) r7 = accept$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x13) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="7b53000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000018c0)={'team0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket(0x8, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0xf8f12a3fafdd7c9c, 0xfff1}, {0xffff, 0xc}, {0x32d41a8fa599f214, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000880) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 1.700415627s ago: executing program 4 (id=5850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000070a010200000000000000000b400000000208000940000000020900020073797a32000000000c00064000000000000000085e88c5b000002e0800014000000089000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004898) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[], 0xd4}}, 0x2000c084) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071103100000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0af8fe00000000720390ff00000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, 0x0, 0x29) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) sendmmsg(r7, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000340)="493d68a2070c2fbf71c9250957622fb15f4537f14d3507545c45f8eed2a14d387ecdbfb3f9feb6189c0da49060fda95d4365072b6ac374718ce7bccd7435ad980f463c5d8836fcc912aa2656ba95bc4ed679e82ef28d7938ab04", 0x5a}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="12f6cb435140d6997f49", 0xa}, {0x0}, {0x0}, {&(0x7f0000000700)}, {0x0}], 0x8}}, {{&(0x7f0000000b40)=@ethernet={0x1, @random="7b202e9bf5de"}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000bc0)}, {&(0x7f0000000d00)="2016924a", 0x4}], 0x2, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000c060000040000002da700000000000010000000000000000c01000006000000900000000000000011010000090000001dc8e914a69d29f6aea1c949af5aa192e266ca60aebadc1a6207e45a44bc4cf78a7fea6df9abafcc7e6157207f7e95d84498de399d2b674ba0bdb7e4bd22c151387f755e53fee984e4fbd8a54a068a007d3d2106949c2b3bc342d90aad5c6b27f3287725cc098533e7786242f463d4a9fb88099b1d0081da9100000000000000"], 0xb8}}, {{&(0x7f0000000ec0)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @multicast1}, 0x0, 0x4, 0x1, 0x4}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000580)="3e2e859e5c1e5f78fbf78b78489b57669693dc37dda554bd1f77d527013c9129e5202810312e33af7a05302ffcfdb34ff259056b36383b09b534d11b4e866b26502bcb44f9b42b09f7cadf96c99cadde5cc05970c52867dceb2321b3", 0x5c}, {&(0x7f0000001000)="bb50bfa2f29f2805c26024a36dc2def5ce1a2b899404b6eedc133a711eff31453c97c9641701e613890e24269a003f823d801d64b53bfa6039b594df3763fd306c924dbc9e69a07f6ba5c7ba10c8dda0ca29de4a50dc4cb68f2d22842053a736c37c2e37b6a52e0ea98e6431c86433e6de4717cedc5507c501322450148a23d7", 0x80}, {&(0x7f0000001080)="e495c02a5d32132e277da8575758ceb3", 0x10}, {&(0x7f0000001140)="3cbc4cec9e898b6148a094dcad7843603dc0e956cb60a8bc565c2f07b59f7ac61fe15e045415a050c4ace6dd22a4bb7ba71f0773e660bda200f7447575482676e7fa34369ab113c5bae80ddc6bc4a4c585adc176666040add61c601a663ac7765d7013e9daa29275375e4e95073ea76bae10fb2ee48d33a01465e5fbdff615fad3f6d1e35f1630c3f6513524dcff97b08c18299c9babb5cc9fc00d7e6944b4c9119306321f6f58d409690ab7168730ddca84f7da6a28988973f112253805b92474fcdca936", 0xc5}, {&(0x7f0000001240)}, {0x0}, {0x0}], 0x7}}], 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0xa}}}}]}, 0x44}}, 0x840b0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r10, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 1.647878978s ago: executing program 0 (id=5851): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0xfffffffe}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.6066294s ago: executing program 2 (id=5852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet(0xa, 0x801, 0x84) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000007c0)={0x8, 0xfffffffffffffff7, 0x2, 0x4, 0x9, 0x0, [{0x30000000000, 0x20, 0x9, '\x00', 0x200}, {0x3, 0x9, 0xffffffffffffff80, '\x00', 0x1}, {0x400, 0x3, 0xa6e, '\x00', 0x200f}, {0xe0, 0x80, 0x3, '\x00', 0x4000}, {0x2, 0x1000, 0xb, '\x00', 0x1286}, {0x3, 0x7, 0x6, '\x00', 0x1607}, {0x80, 0xe, 0x0, '\x00', 0x5808}, {0x0, 0x8001, 0x5, '\x00', 0x1000}, {0x7, 0x4, 0x3, '\x00', 0x2400}]}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x400c090}, 0x2008001) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = accept4(r4, 0x0, 0x0, 0x80400) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000100)=0x8, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_GETBMAP(r2, 0xc0205826, &(0x7f0000000040)={0xffffffff, 0x8, 0x9, 0xfffffffc, 0x8}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811207000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r9, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000008c5ab2c37cf586c7ee9ba3b44983b6d41d4c0d999a", @ANYRES16=r11, @ANYBLOB="01002dbd7000040200002500000005002b000100000005002e00020000000a0001007770616e30000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8014) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000004c0)={'wlan1\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) 1.43486041s ago: executing program 3 (id=5853): syz_emit_ethernet(0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080503910b978ca33a7da6d5932e60377c4d4a8d3b86e0bba8ac4b5ed7a86176196013460489b094362668d2f818390d3365513abcbe485928185c7899385b63084811e2422f5f7be0a54e884b56a83ee399e622f9647f65bfcf36eb161614378897814714dcf9dff2641ad2fd69eed6ccec446498eba8800890381d8d4cf109"], &(0x7f00000001c0)={0x0, 0x4, [0x91d, 0x9e6, 0xa76, 0xa5]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000200)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0x45) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, &(0x7f00000000c0)=0x8) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000100000a0900010073797a300000000048000000090a010100000000000000000100000808000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c000b4000000000000009212c0000000e0a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xbc}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) splice(r7, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) close(r8) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r5, 0x0, 0x1100000000f336, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r11, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)=ANY=[@ANYBLOB="b62b0000", @ANYRES16=r12, @ANYBLOB="130300000000000000002f000000"], 0x14}}, 0x0) r13 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d0200000000000000180000000000000084"], 0x38}, 0x41) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800e00010069703665727370616e0000002800028014000700ff02000000000000000000000000000108000d00040000000600030040000000126545e39de1125c0c374900b9022b9b995107800e0848d80dce2734d9f10e290ec4087493fa109c"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004b0000400000000000069078ac1e0001ac1e0001441005030000000000000000fffffffe860600"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800eeb54e9f6f59d72dac00"], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="b200000000010104000000000000000002000000440001800c000280050001003a00000005000340000400002c00018014000300fe80000000000000000000000000001c140004002001000000000000000000000000000000000280000001001100000100ac14144008000200e00000010c00028005000100000000000800074000000002"], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.271150896s ago: executing program 0 (id=5854): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1.260242593s ago: executing program 4 (id=5855): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x2e, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYRESHEX=r0], 0x3c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x701607f97e22f001) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd70100400000004e0000006000100050000000800090002"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r7 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000180)=0x79cf, 0x4) recvfrom$inet6(r7, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 1.182787394s ago: executing program 0 (id=5856): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000002a56dbdf250800000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 1.068304124s ago: executing program 3 (id=5857): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020019c32a8f7b1d16a440183ee69ddc0007000000000000000080000085000000750000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0xe8, 0x130, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0xc800) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000080), 0x4) getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, 0x0, &(0x7f00000000c0)) splice(r5, 0x0, r7, 0x0, 0x10d00, 0xf) 1.026074317s ago: executing program 1 (id=5858): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000001c0)=0x6) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) unshare(0x400) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r2, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) (async) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x2000}, 0x3) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedb0500030000000c000980080002000100000004000580040003800400018011dd2b13cf0474bfe15b47c34e998d59240bf9df172deb4c233106ec778e0d3a8080bf5efc938572b7d02a67d40945ff8bcd2d929e0bb14ec08e7cddf50527a5629c61a0c119d2dbadc351cda11a08253aeab9e54be2fc85b52d6049c81fafc472465a6e6ce964faf50dff88114e11adab376b3037966434a58ac5dad251738b607e619a0e918822d2fbf9ff63766b8abf094c03cb266465e7d64708712cdede6f9e8ac9ea0e3817f155619f983da12eaec2bee9fc9a14eaee2268f59dae5295571861e13fc2af4f8c5846f2ae0447f46f666846c2f9e7168e9ba4edb642ef3542697dfad8"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8100, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xb3e1, 0x3, 0x7, 0x5, 0x7}) 933.899582ms ago: executing program 2 (id=5859): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2c8d0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 866.154319ms ago: executing program 2 (id=5860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x54, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FAMILY={0x5}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x44001) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000000020000060900010073797a308000000018000480140001800a00030071750000040400058000000400"/60], 0x48}, 0x1, 0x0, 0x0, 0x20028000}, 0x40000) r2 = socket(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) shutdown(r4, 0x1) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @empty, 0x3}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r3, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078008000840000000200600044000000000060005"], 0x64}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000003c0)={{r6, &(0x7f0000000240)='/\x00', 0x80280, &(0x7f0000000280)={@_ha_fsid={[0x5, 0x5]}, {0xb, 0x66, 0x7, 0x800}}, 0xfffffff9, &(0x7f00000002c0), &(0x7f0000000300)=0x6}, {[0x1, 0x9, 0x1aca, 0x80000000]}, 0x0, 0x7f, &(0x7f0000000340)=""/127}) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x33}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x2a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40080b1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r3, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r2}, 0x20) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)={0xffffff3c, 0x1404, 0x2, 0x70bd2b, 0x5dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 710.452868ms ago: executing program 1 (id=5861): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x36}}], 0x18}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) 603.147163ms ago: executing program 3 (id=5862): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x70}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000009c0)="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", 0x1000) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x40880) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="9eaaaaaaaaaaffffffffffff77dd60000000001806fffe800009000000000000000200000800000000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800001e020000"], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 578.131218ms ago: executing program 2 (id=5863): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000600)={{r1}, r2, 0x14, @inherit={0x50, &(0x7f0000000580)={0x1, 0x1, 0x6, 0x6e, {0x36, 0x4b1, 0x5, 0x2, 0xfae}, [0x10]}}, @subvolid=0x8}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x2}]}}}]}, 0x3c}}, 0x4008000) 112.454887ms ago: executing program 3 (id=5864): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000200)={r0, 0x0, 0xffffffffffffffef, 0x9, 0xffffffff, 0x1, [0x5d6, 0x10001, 0x8, 0x0, 0x40, 0x8]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x81, 0x9, 0x2, 0x11, 0x3, 0x9]}}]}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ff042bbd7000fd6130dbf22549000000080001107c0800", @ANYRES32=r6, @ANYBLOB="0c0099000300000069000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r5, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x24015}, 0x20000804) r7 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 108.647689ms ago: executing program 4 (id=5865): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x3) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000100)=@bpq0, 0x10) ioctl$SIOCAX25GETINFO(r0, 0x89ed, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 106.753667ms ago: executing program 3 (id=5866): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32], 0x3c}}, 0x0) (async) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f00000000c0), &(0x7f0000000280)=@udp=r3}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000540)='X&z', 0x0}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r1) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x74, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r10 = socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) (async) r13 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r13, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000140)={0x2, 0x3, 0x4}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x38, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r11, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x3, 0xa}}]}}]}, 0x38}}, 0x60040050) (async) socket$nl_route(0x10, 0x3, 0x0) 105.947038ms ago: executing program 2 (id=5867): r0 = socket(0x0, 0x5, 0x7fffffff) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) shutdown(r2, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @loopback, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) sendto$inet6(r2, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x40, @empty}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0xfffffffffffffefc, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x36}, {0x5, 0x8e, 0x1}}]}, 0x4c}}, 0x8000) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f00000006c0)='ns/time_for_children\x00') syz_open_procfs$namespace(r4, &(0x7f00000001c0)='ns/cgroup\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200090a000000000000000000000003000600000000000200000000000000000000000000000002000100140000000000000700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000000, 0x0, 0xff, 0x1, 0xfffc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x20) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000200), &(0x7f00000003c0)=r5}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d480eb00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="186200000900000000000000070000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006003827496dbd0009000000950000000000000018120000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000009700000005000000850000005000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 47.510803ms ago: executing program 4 (id=5868): connect$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000014000280040001000800020000000000040004"], 0x40}}, 0x2008040) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @null, 0x5, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r5, &(0x7f0000000280)={{0x3, @default, 0x1001}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r5) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 0s ago: executing program 3 (id=5869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x54}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b23, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_int(r4, 0x0, 0x14, 0x0, &(0x7f0000000180)) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000080)=0xfac, 0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {}, 0xfd}, 0x18) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x6, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r8, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) connect$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x11) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f00000005c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r5, @ANYBLOB="000000390088020534254039cac93fe5ea4924d6000e2887c34532dbc254204b59258234cf78f70d910a87387bb5e7a982e139ae2bb40911e9b2ced00000000c0003000900000000000000"], 0x178}, {&(0x7f0000000740)={0x140, 0x2e, 0x1, 0x70bd26, 0x10d, "", [@typed={0x8, 0x18, 0x0, 0x0, @fd}, @generic="072f81c6b205e4ed6024e63b74046c863ccc375618e9af32a9c0edc90778bc646253fdb144f9860977a43e8fec93", @nested={0x4, 0x8}, @generic="fdf5774841c6ef7a9f08cf5120c0deee04eebe8f5ce6e01e1223e8870c5f3c6a368310f2a8c113868ddb5a58c5a1d03aa4edad2550c54bf5a475442c0fd0aa3e69dea9ebbcff6c0a78c032d370899a4ad9bec42dbffca18ef804cac01a0b8019656a3403b10befb57b92331d6b00bdc9c928d4b7085c390f584a7323e01756a2abc7635f0d995647f4e5df6917c89040e07225c039e3063d0efb59b02052ee8b12adddd30b836d0799e190811d085db36fb59e7f9bdbe3f623f202c7004333dcb114bb2f08efd6dfd051f9c440de36b0d00249fcf32594798ad6354c393e1d50f229fcab589e33ff5e87e7009b27b05ff01a9d"]}, 0x140}, {&(0x7f0000000880)={0x438, 0x42, 0x1, 0x70bd25, 0x25dfdbfe, "", [@nested={0x3a9, 0x93, 0x0, 0x1, [@generic="cb368682b80e0a9684ad973bba56aa553abb86330d8aa2e7004b406d9ac56cc2c8a5197bfbf9c383ebc1d416179a592c5372671e4a0071ba52700ece586de975ec6b7cd59b4b23116dcff4c7cd81d0a2535ccf4d7abebe675e427c0cc9d099", @generic="d0ac1965b3ca7462e9eb2fe83c81d5b5dc58b9c096ad15097f020efae186f998d1ff91428418a3b8098c0314b7d40ab9b2f0a80d39aac2b2147516d42270e50691b8dd7c2f5ce1c7b3c29c2a2ea8e97c9431f366d03c2043679da9da2bfc4801462b23cb98b630803c21ec8050069fefa35f17a5ca9d2eefd7340170374dba01335a6ba6e5eec0f86e8d1152d71031c922edc60bfa1e1879d230b496b6877ebe7a7e0d49b5a6626ce16004e661c2c254", @nested={0x21d, 0x1a, 0x0, 0x1, [@generic="af917e6f26a44ac8c9b74aa1d029b18cdc5581a93b780746075400014d90ba39423d30d1cbf4fb2e8dffe809bdfdff47370e9b1810637b35b9f072a5dcffc0786561d5af8a", @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@mcast1}, @generic="fa3a4f06a56e28e4af9a1c2e9eb24896b10ac734bb40fd6ff9d28f59e556f54c14cefa3e833a49a0f8e2aefbe1d8dea126a9d0c8bc6140", @generic="5d20f0bb18b697ced43105e0e9741592de1f4a760a74e9e7078022187da88134958301a8350ce274ce8eb085540f7a7bdfc4da33f9d712f38f51ddd2fd204b7a9d289905d846fc8c0c68f7d199e62d5daa0c14341c389fcb81868fa02a9893074f224d28c7fb42cfcfd477593444a53f7cbfd764f2616b97d318bcecb0f8b62b4602efb37cdea5e9e9d2ad89b48dafe75ab1ef6b5667b56fca12501dd24e18b49667ebbf200b4333da2beacfdf7276a60345229b", @generic="cb3d9d09e196556acea01c5ce3982c6a2be3a4df6fa5ffed054e0e2c363ecafa7e2510dabc86c23ddcee8e96bcfd48086b5d384289996a586ebefbd5baf14170253cca334b08ca709b350bcb2e529d608e081244c82b10af96f20ff19dd57d6a6243361af110d2b0966893fca230ca0b97fc10002427788a082e2d5400397790fb1787973d", @generic="859976cadb0711bcb5416552e8d242bb60a3b952e35576586dd31bba6ec315d64726a045288309dbecc4ee2d4a05c48f4f5169794c9394f80050109945b594acde6c62377b982c09c6c3eff0", @typed={0x4, 0x10f}]}, @generic="d38844e480d269049f3254e269cd6ac1ea96460d4bd3c5d4386858da8c5be7edcf0077e9eef7db04fb4d1042002d61f621758575092032db4387f84aa53d84d24f7e265e6b77bf057b0cbf598ab82bd5085467f53f89e0a2670ad70b393527fa6097", @typed={0x14, 0x110, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @nested={0x36, 0xee, 0x0, 0x1, [@generic="0b5d2cf96c394284a13d3e2c54f8", @typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x8, 0xe8, 0x0, 0x0, @pid}, @nested={0x4, 0x52}, @typed={0xd, 0x34, 0x0, 0x0, @str=':\xa5W.&.n[\x00'}]}, @generic="ed093760b82e833adfa73c446a488822f504b77cdc505fd2097b244a27e120ef11688ac69b45225fbc6e02670c0ab1b30515def3d67d9557004725455c80aa84e5"]}, 0x438}], 0x3, 0x0, 0x0, 0x8800}, 0x40000) kernel console output (not intermixed with test programs): 598264][T20922] netlink: zone id is out of range [ 520.787376][T20892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.192429][T20936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3991'. [ 521.238150][T20936] block nbd4: Unsupported socket: should be TCP or UNIX. [ 521.260287][T20940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3992'. [ 521.282981][T20940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.293660][T20942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3993'. [ 521.365947][T20940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.428471][T20954] : renamed from hsr0 (while UP) [ 521.473813][T20954] syzkaller0: entered promiscuous mode [ 521.490791][T20954] syzkaller0: entered allmulticast mode [ 521.555628][T20960] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3995'. [ 521.573344][T20960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3995'. [ 521.584077][T20960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3995'. [ 522.592674][T21016] blkio.reset_stats is deprecated [ 522.704532][T21028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4015'. [ 523.395148][T21068] syzkaller0: entered promiscuous mode [ 523.402354][T21068] syzkaller0: entered allmulticast mode [ 523.591383][T21078] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4028'. [ 523.811792][T21082] nbd4: detected capacity change from 0 to 127 [ 523.840949][T21091] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4033'. [ 523.855017][ T5848] block nbd4: Receive control failed (result -104) [ 523.932608][T21094] tipc: Enabling of bearer rejected, media not registered [ 524.026221][T21102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4037'. [ 524.083696][T21105] netlink: 'syz.2.4039': attribute type 1 has an invalid length. [ 524.108158][T21098] syzkaller0: entered promiscuous mode [ 524.115209][T21098] syzkaller0: entered allmulticast mode [ 524.137419][T21102] netlink: 'syz.3.4037': attribute type 2 has an invalid length. [ 524.159301][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4037'. [ 524.207294][T21105] 8021q: adding VLAN 0 to HW filter on device bond3 [ 527.195535][T21118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4042'. [ 527.697470][T21151] syzkaller0: entered promiscuous mode [ 527.730178][T21151] syzkaller0: entered allmulticast mode [ 528.013045][T21180] syzkaller0: entered promiscuous mode [ 528.027425][T21180] syzkaller0: entered allmulticast mode [ 528.105098][T21194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4062'. [ 528.294285][T21207] vcan0: entered allmulticast mode [ 528.328254][T21210] xt_hashlimit: size too large, truncated to 1048576 [ 528.332793][T21206] siw: device registration error -23 [ 528.387802][T21212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4065'. [ 528.420291][T21213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4065'. [ 528.824001][T21240] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 528.834204][T21240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.235889][T21257] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.4081'. [ 529.742289][T21284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4090'. [ 529.888341][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4093'. [ 529.915605][T21293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4093'. [ 529.924941][T21293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4093'. [ 529.955395][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4093'. [ 529.971260][T21297] netlink: 'syz.2.4095': attribute type 32 has an invalid length. [ 529.979982][T21293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4093'. [ 529.991114][ T6089] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.001095][ T6089] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.011137][ T6089] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.064431][T21297] bond4: Setting coupled_control to off (0) [ 530.080343][ T6089] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.116873][T21302] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 530.339128][T21316] netlink: 'syz.2.4099': attribute type 11 has an invalid length. [ 531.557773][T21381] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 531.870318][T21405] xt_addrtype: ipv6 does not support BROADCAST matching [ 531.912034][T21404] gretap1: entered promiscuous mode [ 532.051061][T21413] netlink: 'syz.1.4125': attribute type 1 has an invalid length. [ 532.115270][T21413] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 532.149176][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.619715][T21456] IPVS: length: 8 != 1152 [ 532.747722][T21461] Bluetooth: MGMT ver 1.23 [ 533.078333][T21465] ip6_vti0: entered promiscuous mode [ 533.123303][T21465] __nla_validate_parse: 12 callbacks suppressed [ 533.123323][T21465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4138'. [ 533.332482][T21480] ipt_REJECT: TCP_RESET invalid for non-tcp [ 533.350044][T21475] syzkaller0: entered promiscuous mode [ 533.368741][T21475] syzkaller0: entered allmulticast mode [ 533.567685][T21492] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 533.590147][T21492] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.597878][T21492] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.631945][T21498] s5: renamed from vlan1 (while UP) [ 533.650745][T21498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4151'. [ 533.684483][T21498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4151'. [ 533.806424][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4152'. [ 533.816192][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4152'. [ 534.378478][T21514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4154'. [ 536.560046][T21527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4157'. [ 536.637133][T21533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4157'. [ 536.675933][T21536] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 536.700616][T21537] syzkaller0: entered promiscuous mode [ 536.708265][T21536] netlink: 'syz.3.4159': attribute type 17 has an invalid length. [ 536.717624][T21537] syzkaller0: entered allmulticast mode [ 536.719847][T21536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4159'. [ 536.745612][T21536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4159'. [ 536.773432][T21540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.612187][T21594] Cannot find set identified by id 65534 to match [ 537.753633][T21599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.801190][T21601] netlink: 'syz.1.4180': attribute type 10 has an invalid length. [ 537.810445][T21601] bond0: (slave wlan1): Opening slave failed [ 540.165187][T21567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.175690][T21608] netlink: 'syz.1.4182': attribute type 1 has an invalid length. [ 540.374446][T21638] geneve3: entered promiscuous mode [ 540.381184][T21635] netlink: 'syz.1.4191': attribute type 4 has an invalid length. [ 540.394355][T21643] wireguard: wg0: Could not create IPv4 socket [ 540.423061][T21642] wireguard: wg0: Could not create IPv4 socket [ 540.538356][T21650] __nla_validate_parse: 2 callbacks suppressed [ 540.538384][T21650] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4194'. [ 540.619761][T21650] tipc: Enabling of bearer rejected, already enabled [ 540.631084][T21655] netlink: 'syz.0.4195': attribute type 21 has an invalid length. [ 540.636187][T21657] netlink: 'syz.3.4197': attribute type 83 has an invalid length. [ 540.651073][T21650] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4194'. [ 540.658756][T21655] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4195'. [ 540.866103][T21665] netlink: 'syz.2.4199': attribute type 1 has an invalid length. [ 540.886699][T21672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4198'. [ 540.914420][T21672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4198'. [ 540.969750][T21669] bond0: (slave veth0_to_bond): Releasing active interface [ 541.012133][T21665] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 541.019525][T21672] erspan0: entered promiscuous mode [ 541.054376][T21672] gretap0: entered promiscuous mode [ 541.070719][T21672] debugfs: 'hsr1' already exists in 'hsr' [ 541.088243][T21672] Cannot create hsr debugfs directory [ 541.246098][T21670] syzkaller0: entered promiscuous mode [ 541.253903][T21670] syzkaller0: entered allmulticast mode [ 541.266438][T21687] veth0: entered promiscuous mode [ 541.277986][T21679] 8021q: VLANs not supported on sit0 [ 541.283920][T21670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4200'. [ 541.296229][T21687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4203'. [ 541.305695][ T808] syzkaller1: tun_net_xmit 90 [ 541.313781][T21679] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 541.320958][T21679] syzkaller1: Linktype set failed because interface is up [ 542.230944][ T808] syzkaller1: tun_net_xmit 90 [ 544.154117][T21708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4209'. [ 544.240175][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4211'. [ 544.372768][T21724] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4209'. [ 545.002094][T21765] netlink: 'syz.2.4224': attribute type 6 has an invalid length. [ 545.362681][T21765] syzkaller1: entered allmulticast mode [ 545.653394][T21791] __nla_validate_parse: 2 callbacks suppressed [ 545.653411][T21791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4232'. [ 545.734720][T21795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4234'. [ 545.913381][T21805] netlink: 'syz.1.4237': attribute type 10 has an invalid length. [ 545.933985][T21805] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4237'. [ 545.949142][T21805] dummy0: entered promiscuous mode [ 545.977532][T21805] bridge0: port 3(dummy0) entered blocking state [ 545.984674][T21806] xt_TPROXY: Can be used only with -p tcp or -p udp [ 546.009091][T21805] bridge0: port 3(dummy0) entered disabled state [ 546.015812][T21805] dummy0: entered allmulticast mode [ 546.107077][T21814] xt_TPROXY: Can be used only with -p tcp or -p udp [ 546.222237][T21827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4242'. [ 546.424363][T21845] netlink: 'syz.0.4248': attribute type 1 has an invalid length. [ 546.448503][T21845] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4248'. [ 546.487521][T21845] NCSI netlink: No device for ifindex 0 [ 546.493847][T21839] netlink: 'syz.4.4246': attribute type 12 has an invalid length. [ 546.510809][T21839] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4246'. [ 546.555417][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4248'. [ 546.591731][T21845] netlink: 'syz.0.4248': attribute type 4 has an invalid length. [ 546.610399][T21845] netlink: 'syz.0.4248': attribute type 4 has an invalid length. [ 546.684259][T21861] netlink: 'syz.3.4250': attribute type 8 has an invalid length. [ 546.726461][T21861] netlink: 'syz.3.4250': attribute type 8 has an invalid length. [ 546.758497][T21861] netlink: 'syz.3.4250': attribute type 8 has an invalid length. [ 546.794196][T21861] netlink: 'syz.3.4250': attribute type 8 has an invalid length. [ 547.214479][T21872] syzkaller0: entered promiscuous mode [ 547.220515][T21872] syzkaller0: entered allmulticast mode [ 547.253045][T21890] bond1: option miimon: invalid value (18446744073709551585) [ 547.260845][T21890] bond1: option miimon: allowed values 0 - 2147483647 [ 547.277606][T21890] bond1 (unregistering): Released all slaves [ 547.488832][T21903] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4262'. [ 550.559657][T21941] syzkaller0: entered allmulticast mode [ 551.022488][T21975] validate_nla: 29 callbacks suppressed [ 551.022506][T21975] netlink: 'syz.1.4277': attribute type 1 has an invalid length. [ 551.059298][T21975] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4277'. [ 551.434000][T21995] netlink: 'syz.4.4282': attribute type 28 has an invalid length. [ 551.447707][T21995] netlink: 'syz.4.4282': attribute type 3 has an invalid length. [ 551.488803][T21995] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4282'. [ 551.583907][T22005] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4286'. [ 551.598198][T22005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.605509][T22005] IPv6: NLM_F_CREATE should be set when creating new route [ 551.612822][T22005] IPv6: NLM_F_CREATE should be set when creating new route [ 551.637614][T21960] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 552.187225][T22039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4295'. [ 552.436510][T22057] netlink: 'syz.1.4298': attribute type 2 has an invalid length. [ 552.512529][T22067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4303'. [ 552.538004][T22067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4303'. [ 552.647229][T22071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4305'. [ 552.652484][T22070] pim6reg1: entered promiscuous mode [ 552.667305][T22070] pim6reg1: entered allmulticast mode [ 552.735067][T22075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4307'. [ 552.746026][T22075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4307'. [ 552.939665][T22082] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 553.367798][T22109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4316'. [ 553.842414][T22146] netlink: 'syz.4.4325': attribute type 1 has an invalid length. [ 553.861502][T22146] netlink: 'syz.4.4325': attribute type 11 has an invalid length. [ 553.885872][T22147] netlink: 'syz.4.4325': attribute type 1 has an invalid length. [ 553.914301][ T1679] block nbd4: Possible stuck request ffff8880271b5080: control (read@0,1024B). Runtime 30 seconds [ 553.932752][ T1679] block nbd4: Possible stuck request ffff8880271b5240: control (read@1024,1024B). Runtime 30 seconds [ 553.944968][ T1679] block nbd4: Possible stuck request ffff8880271b5400: control (read@2048,1024B). Runtime 30 seconds [ 553.956987][ T1679] block nbd4: Possible stuck request ffff8880271b55c0: control (read@3072,1024B). Runtime 30 seconds [ 554.255223][T22171] netlink: 'syz.4.4326': attribute type 1 has an invalid length. [ 554.582007][T22172] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 554.596913][T22172] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 554.615636][T22172] bond4: (slave ip6gre1): making interface the new active one [ 554.643290][T22172] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 554.711315][T22179] : entered promiscuous mode [ 555.167174][T22224] netlink: 'syz.0.4339': attribute type 2 has an invalid length. [ 555.200009][ T5848] Bluetooth: hci2: link tx timeout [ 555.200946][T22224] netlink: 'syz.0.4339': attribute type 8 has an invalid length. [ 555.206491][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 555.319874][T22235] sch_tbf: burst 12 is lower than device bridge2 mtu (1514) ! [ 555.339347][ T5848] Bluetooth: hci2: link tx timeout [ 555.348388][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 555.371207][ T5848] Bluetooth: hci2: link tx timeout [ 555.377527][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 555.547472][T22248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.070145][ T5848] Bluetooth: hci2: link tx timeout [ 556.077008][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 556.153079][ T5848] Bluetooth: hci2: link tx timeout [ 556.158284][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 556.195941][T22276] __nla_validate_parse: 4 callbacks suppressed [ 556.195974][T22276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4352'. [ 556.214696][T22273] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4350'. [ 556.282809][T22287] IPVS: Error connecting to the multicast addr [ 556.348376][T22293] ip6gre1: entered allmulticast mode [ 556.412490][T22295] netlink: 'syz.1.4358': attribute type 6 has an invalid length. [ 556.688187][T22313] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4361'. [ 556.935154][ T5848] Bluetooth: hci2: link tx timeout [ 556.941859][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 557.068406][T22342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4368'. [ 557.087049][T22344] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 557.087167][T22342] netlink: 'syz.1.4368': attribute type 18 has an invalid length. [ 557.106090][T22342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4368'. [ 557.127239][T16699] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.127333][T22342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4368'. [ 557.147020][T22342] netlink: 'syz.1.4368': attribute type 18 has an invalid length. [ 557.147948][T16699] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.155538][T22342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4368'. [ 557.194344][ T5848] Bluetooth: hci2: link tx timeout [ 557.198649][T16699] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.201916][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 557.215649][T16699] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.269202][ T5848] Bluetooth: hci2: command 0x0405 tx timeout [ 557.363319][T22362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4374'. [ 557.472534][T22368] netlink: 'syz.2.4376': attribute type 1 has an invalid length. [ 557.696159][T22383] netlink: 'syz.3.4380': attribute type 1 has an invalid length. [ 557.704503][T22383] netlink: 'syz.3.4380': attribute type 2 has an invalid length. [ 557.725801][T22387] netlink: 'syz.2.4381': attribute type 20 has an invalid length. [ 557.737017][T22387] IPv6: NLM_F_CREATE should be specified when creating new route [ 560.026910][T22337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.194305][T22393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.311905][T22409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4383'. [ 560.629360][T22429] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4389'. [ 560.687714][T22417] 8021q: adding VLAN 0 to HW filter on device bond5 [ 561.160464][T22445] netlink: 'syz.1.4397': attribute type 1 has an invalid length. [ 561.199832][T22445] netlink: 'syz.1.4397': attribute type 11 has an invalid length. [ 561.223363][T22445] __nla_validate_parse: 1 callbacks suppressed [ 561.223382][T22445] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4397'. [ 561.276712][T22445] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4397'. [ 561.546419][T22467] openvswitch: netlink: IP tunnel TTL not specified. [ 561.701474][T22485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4409'. [ 561.710994][T22485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4409'. [ 561.745087][T22479] bond6: entered promiscuous mode [ 561.770558][T22479] bond6: entered allmulticast mode [ 561.789807][T22479] 8021q: adding VLAN 0 to HW filter on device bond6 [ 561.956825][T22507] veth0_to_team: entered promiscuous mode [ 562.021544][T22507] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4415'. [ 562.083913][T22517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4418'. [ 562.099969][T22517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4418'. [ 562.170153][T22517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4418'. [ 562.183505][T22517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4418'. [ 562.457914][T22540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4424'. [ 562.466596][T22539] netlink: 'syz.3.4426': attribute type 75 has an invalid length. [ 562.489798][T22539] openvswitch: netlink: Flow key attr not present in new flow. [ 562.579010][T22545] bridge_slave_1: left allmulticast mode [ 562.593920][T22545] bridge_slave_1: left promiscuous mode [ 562.600647][T22545] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.613519][T22545] bridge_slave_0: left allmulticast mode [ 562.620600][T22545] bridge_slave_0: left promiscuous mode [ 562.626487][T22545] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.782545][T22554] openvswitch: netlink: IP tunnel dst address not specified [ 562.877325][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.887840][ T1315] clip:clip_start_xmit: skb_dst(skb) == NULL [ 563.051229][T22563] netlink: 'syz.4.4434': attribute type 1 has an invalid length. [ 563.162342][T22568] bond5: (slave gretap1): making interface the new active one [ 563.172541][T22568] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 564.073028][T22627] netlink: 'syz.2.4454': attribute type 1 has an invalid length. [ 564.150505][T22627] 8021q: adding VLAN 0 to HW filter on device bond7 [ 564.701493][T22677] netlink: 'syz.1.4468': attribute type 1 has an invalid length. [ 564.834530][T22677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 565.016417][ T808] IPVS: starting estimator thread 0... [ 565.066069][T22712] netlink: 'syz.1.4478': attribute type 4 has an invalid length. [ 565.118627][T22708] IPVS: using max 32 ests per chain, 76800 per kthread [ 565.120133][T22712] .`: renamed from bond0 [ 565.960461][T22769] netlink: 'syz.0.4482': attribute type 21 has an invalid length. [ 565.961985][T22764] 8021q: adding VLAN 0 to HW filter on device bond6 [ 566.009971][T22766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.033160][T22766] bond6: (slave bond0): making interface the new active one [ 566.046352][T22766] bond6: (slave bond0): Enslaving as an active interface with an up link [ 566.080944][T22759] veth0_to_team: entered promiscuous mode [ 566.087049][T22759] macvtap1: entered allmulticast mode [ 566.092812][T22759] veth0_to_team: entered allmulticast mode [ 566.324232][T22791] __nla_validate_parse: 18 callbacks suppressed [ 566.324246][T22791] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4488'. [ 567.595881][T22670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 567.770430][T22837] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 567.799960][T22840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4493'. [ 567.839672][T22849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4495'. [ 567.923093][T22855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4495'. [ 567.972385][T22855] gtp0: entered promiscuous mode [ 567.986983][T22855] gtp0: entered allmulticast mode [ 568.146860][T22868] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4499'. [ 568.931114][T22919] syzkaller0: entered promiscuous mode [ 568.936870][T22919] syzkaller0: entered allmulticast mode [ 568.970405][T22865] delete_channel: no stack [ 569.303579][T22939] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.434354][T22947] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 569.527020][T22960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4525'. [ 569.800067][T22974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4532'. [ 569.807803][T22972] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 569.821916][T22974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4532'. [ 569.836480][T22974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4532'. [ 569.857653][T22978] netlink: 294 bytes leftover after parsing attributes in process `syz.1.4534'. [ 569.869292][T22972] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 569.881167][T22978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.899368][T22972] gretap2: entered promiscuous mode [ 569.909917][T22972] gretap2: entered allmulticast mode [ 569.946158][T22982] netlink: 'syz.2.4535': attribute type 1 has an invalid length. [ 570.049417][T22989] ip6t_srh: unknown srh invflags 4000 [ 570.129329][T22982] 8021q: adding VLAN 0 to HW filter on device bond8 [ 570.314248][T23002] bridge3: entered promiscuous mode [ 570.326604][T23002] bridge3: entered allmulticast mode [ 570.494120][T23018] netem: change failed [ 570.528864][T23020] SET target dimension over the limit! [ 570.577804][T23027] openvswitch: netlink: IP tunnel dst address not specified [ 570.692274][T23033] netlink: 'syz.0.4551': attribute type 11 has an invalid length. [ 570.737857][T23033] netlink: 'syz.0.4551': attribute type 11 has an invalid length. [ 570.782406][T23033] netlink: 'syz.0.4551': attribute type 11 has an invalid length. [ 570.819851][T23033] netlink: 'syz.0.4551': attribute type 11 has an invalid length. [ 570.843131][T23033] netlink: 'syz.0.4551': attribute type 11 has an invalid length. [ 570.862018][T23033] netlink: 'syz.0.4551': attribute type 11 has an invalid length. [ 570.886048][T23033] netlink: 'syz.0.4551': attribute type 11 has an invalid length. [ 570.906541][T23033] netlink: 'syz.0.4551': attribute type 11 has an invalid length. [ 570.927054][T23033] netlink: 'syz.0.4551': attribute type 11 has an invalid length. [ 570.952484][T23033] netlink: 'syz.0.4551': attribute type 11 has an invalid length. [ 571.034699][T23049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.226678][T23068] IPv6: sit1: Disabled Multicast RS [ 571.238258][T23068] sit1: entered allmulticast mode [ 571.592564][T23085] tap0: tun_chr_ioctl cmd 1074025676 [ 571.603614][T23085] tap0: owner set to 0 [ 571.910827][T23095] syzkaller0: entered promiscuous mode [ 571.929020][T23095] syzkaller0: entered allmulticast mode [ 572.439814][T23122] __nla_validate_parse: 68 callbacks suppressed [ 572.439831][T23122] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4580'. [ 574.706907][T23117] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4578'. [ 574.797197][T23127] syzkaller1: entered promiscuous mode [ 574.806718][T23127] syzkaller1: entered allmulticast mode [ 574.827317][T23132] netlink: 'syz.0.4582': attribute type 1 has an invalid length. [ 574.855012][T23132] netlink: 'syz.0.4582': attribute type 1 has an invalid length. [ 574.914596][T23140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4584'. [ 575.052151][T23150] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4585'. [ 575.137693][T23150] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4585'. [ 575.215602][T23152] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 575.242128][T23152] netlink: 'syz.1.4587': attribute type 2 has an invalid length. [ 575.282511][T23152] netlink: 'syz.1.4587': attribute type 11 has an invalid length. [ 575.320099][T23152] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4587'. [ 575.493623][T23170] xt_hashlimit: size too large, truncated to 1048576 [ 575.516039][T23174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4594'. [ 575.531521][T23174] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 575.553793][T23174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4594'. [ 575.636347][T23185] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4597'. [ 575.722438][T23181] syzkaller1: entered promiscuous mode [ 575.762213][T23181] syzkaller1: entered allmulticast mode [ 575.857543][T23193] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 575.870219][T23194] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 575.895682][T23195] netlink: 'syz.0.4600': attribute type 4 has an invalid length. [ 575.907866][T23195] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4600'. [ 575.917983][T23195] netlink: 'syz.0.4600': attribute type 4 has an invalid length. [ 576.205439][T23215] bond0: Unable to set up delay as MII monitoring is disabled [ 576.225251][T23215] netlink: 'syz.3.4606': attribute type 5 has an invalid length. [ 576.258761][T23215] geneve2: entered promiscuous mode [ 576.268193][T23215] geneve2: entered allmulticast mode [ 576.289430][ T3509] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 576.332912][ T3509] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 576.352413][ T3509] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 576.386792][ T3509] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 576.847489][T23255] sctp: [Deprecated]: syz.3.4620 (pid 23255) Use of int in maxseg socket option. [ 576.847489][T23255] Use struct sctp_assoc_value instead [ 577.014429][T23264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.051302][T23268] delete_channel: no stack [ 577.063217][T23264] bond0 (unregistering): Released all slaves [ 577.288010][T23284] xt_cgroup: path and classid specified [ 577.615610][T23312] __nla_validate_parse: 12 callbacks suppressed [ 577.615627][T23312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4633'. [ 577.816012][T23314] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 577.855894][T23312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4633'. [ 578.265126][T23350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4641'. [ 578.307696][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4641'. [ 578.417128][T23355] x_tables: duplicate underflow at hook 1 [ 578.549866][T23362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4644'. [ 578.695418][T23367] xt_hashlimit: overflow, rate too high: 0 [ 578.819788][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4647'. [ 578.852185][T23371] netlink: 'syz.2.4647': attribute type 30 has an invalid length. [ 578.933364][T16701] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.963486][T16701] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.982396][T23379] netlink: 'syz.0.4648': attribute type 21 has an invalid length. [ 579.033101][T23383] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4650'. [ 579.066682][T23374] netlink: set zone limit has 4 unknown bytes [ 579.081611][T16701] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.104519][T16701] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.329814][T23391] vlan0: entered allmulticast mode [ 579.332413][T23395] nbd: must specify at least one socket [ 579.345464][T23391] bond0: entered allmulticast mode [ 579.353648][T23397] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4656'. [ 579.365538][T23398] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4653'. [ 579.433040][T23400] syzkaller1: entered promiscuous mode [ 579.455666][T23400] syzkaller1: entered allmulticast mode [ 579.625665][T23417] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4662'. [ 579.917507][T23449] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 579.926257][T23450] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 580.186831][ T5904] IPVS: starting estimator thread 0... [ 580.232270][T23468] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 580.256818][T23468] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 580.281294][T23464] IPVS: using max 39 ests per chain, 93600 per kthread [ 580.460364][T23491] netlink: 'syz.1.4679': attribute type 1 has an invalid length. [ 580.532767][T23491] bond2: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 580.545059][T23491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 580.564808][ T36] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 580.714429][T23508] netlink: 'syz.1.4682': attribute type 1 has an invalid length. [ 580.775536][T23506] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.785541][ T1158] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 580.786385][T23506] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.807224][T23511] netlink: 'syz.0.4683': attribute type 1 has an invalid length. [ 580.808738][T23506] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 580.933073][T23515] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 580.947736][T23506] netdevsim netdevsim3 veth1_macvtap: renamed from netdevsim0 [ 580.994854][T23508] 8021q: adding VLAN 0 to HW filter on device bond3 [ 581.160398][T23526] netlink: 'syz.4.4688': attribute type 4 has an invalid length. [ 581.183078][T23526] netlink: 'syz.4.4688': attribute type 4 has an invalid length. [ 581.368832][T23543] netlink: 'syz.1.4692': attribute type 1 has an invalid length. [ 581.502900][T23543] bond4: entered promiscuous mode [ 581.511019][T23543] 8021q: adding VLAN 0 to HW filter on device bond4 [ 581.564800][T23557] 8021q: adding VLAN 0 to HW filter on device bond4 [ 581.599562][T23557] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 581.652618][T23557] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 581.712317][T23557] bond4: (slave vti0): making interface the new active one [ 581.734205][T23557] vti0: entered promiscuous mode [ 581.764443][T23557] bond4: (slave vti0): Enslaving as an active interface with an up link [ 581.970584][T23564] syzkaller1: entered promiscuous mode [ 581.987695][T23564] syzkaller1: entered allmulticast mode [ 581.997288][T23588] netdevsim netdevsim1 : renamed from netdevsim0 [ 582.212550][T23589] netlink: 'syz.2.4700': attribute type 5 has an invalid length. [ 582.292131][T23604] netlink: 'syz.1.4703': attribute type 21 has an invalid length. [ 582.381890][T23604] netlink: 'syz.1.4703': attribute type 5 has an invalid length. [ 582.390260][T23604] netlink: 'syz.1.4703': attribute type 6 has an invalid length. [ 582.407008][ T5509] 8021q: adding VLAN 0 to HW filter on device veth1_macvtap [ 582.840842][T23636] __nla_validate_parse: 17 callbacks suppressed [ 582.840860][T23636] netlink: 512 bytes leftover after parsing attributes in process `syz.1.4712'. [ 582.879390][T23636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4712'. [ 582.940972][T23641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4715'. [ 582.950333][T23641] team0: Caught tx_queue_len zero misconfig [ 582.956364][T23641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4715'. [ 582.968369][T23644] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4716'. [ 582.996613][T23639] syzkaller0: entered promiscuous mode [ 583.004802][T23639] syzkaller0: entered allmulticast mode [ 583.017767][T23639] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4714'. [ 583.127612][T23636] 8021q: adding VLAN 0 to HW filter on device bond6 [ 583.233720][T23636] bond6 (unregistering): Released all slaves [ 583.324577][T23664] nla_validate_range_unsigned: 55 callbacks suppressed [ 583.324595][T23664] netlink: 'syz.0.4719': attribute type 11 has an invalid length. [ 583.341665][T23664] netlink: 162244 bytes leftover after parsing attributes in process `syz.0.4719'. [ 583.426399][T23662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.565158][T23666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.573669][T23666] bond0: (slave xfrm1): The slave device specified does not support setting the MAC address [ 583.591419][T23666] bond0: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 583.626951][T23666] bond0: (slave xfrm1): making interface the new active one [ 583.636435][T23666] bond0: (slave xfrm1): Enslaving as an active interface with an up link [ 583.698340][T23668] bond7: entered promiscuous mode [ 583.705885][T23668] 8021q: adding VLAN 0 to HW filter on device bond7 [ 583.733462][T23673] 8021q: adding VLAN 0 to HW filter on device bond7 [ 583.759618][T23673] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 583.774254][T23673] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 583.794755][T23673] bond7: (slave vti0): making interface the new active one [ 583.802700][T23673] vti0: entered promiscuous mode [ 583.810129][T23673] bond7: (slave vti0): Enslaving as an active interface with an up link [ 583.847437][T23686] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4728'. [ 584.001373][ T1679] block nbd4: Possible stuck request ffff8880271b5080: control (read@0,1024B). Runtime 60 seconds [ 584.013310][ T1679] block nbd4: Possible stuck request ffff8880271b5240: control (read@1024,1024B). Runtime 60 seconds [ 584.025757][ T1679] block nbd4: Possible stuck request ffff8880271b5400: control (read@2048,1024B). Runtime 60 seconds [ 584.037926][ T1679] block nbd4: Possible stuck request ffff8880271b55c0: control (read@3072,1024B). Runtime 60 seconds [ 584.277692][T23711] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4734'. [ 584.303674][T23711] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4734'. [ 584.796419][T23739] syzkaller0: entered promiscuous mode [ 584.807881][T23739] syzkaller0: entered allmulticast mode [ 585.146711][T23758] 8021q: adding VLAN 0 to HW filter on device bond2 [ 585.212389][T23758] bond2: (slave geneve3): making interface the new active one [ 585.234326][T23758] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 585.594238][T23792] validate_nla: 10 callbacks suppressed [ 585.594258][T23792] netlink: 'syz.4.4759': attribute type 29 has an invalid length. [ 585.791940][T23801] netlink: 'syz.2.4763': attribute type 2 has an invalid length. [ 585.810236][T23798] netlink: 'syz.1.4761': attribute type 11 has an invalid length. [ 585.957943][T23817] netlink: 'syz.3.4765': attribute type 1 has an invalid length. [ 587.564796][T23917] vxcan1 speed is unknown, defaulting to 1000 [ 587.600685][T23917] vxcan1 speed is unknown, defaulting to 1000 [ 587.719425][T23917] vxcan1 speed is unknown, defaulting to 1000 [ 588.257663][ T6078] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 588.297778][T23946] __nla_validate_parse: 15 callbacks suppressed [ 588.297797][T23946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4803'. [ 588.337968][T23954] netlink: 'syz.0.4805': attribute type 32 has an invalid length. [ 588.354747][T23954] netlink: 776 bytes leftover after parsing attributes in process `syz.0.4805'. [ 588.382584][T23952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4805'. [ 588.416529][T23952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4805'. [ 588.447175][T23917] infiniband syz2: set down [ 588.453095][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 588.464741][T23917] infiniband syz2: added vxcan1 [ 588.494626][T23917] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 588.515663][T23917] infiniband syz2: Couldn't open port 1 [ 588.550031][T23917] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 588.585128][T23917] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 588.604528][T23917] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 588.696578][T23965] IPVS: set_ctl: invalid protocol: 60 172.30.0.5:20004 [ 588.716435][T23917] RDS/IB: syz2: added [ 588.726410][T23917] smc: adding ib device syz2 with port count 1 [ 588.756513][T23917] smc: ib device syz2 port 1 has no pnetid [ 588.773158][ T5904] vxcan1 speed is unknown, defaulting to 1000 [ 588.790158][T23917] vxcan1 speed is unknown, defaulting to 1000 [ 589.086280][T23980] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 589.236807][T23989] netlink: 'syz.0.4820': attribute type 2 has an invalid length. [ 589.264731][T23990] netlink: 'syz.0.4820': attribute type 2 has an invalid length. [ 589.296297][T23989] netlink: 'syz.0.4820': attribute type 1 has an invalid length. [ 589.301080][T23917] vxcan1 speed is unknown, defaulting to 1000 [ 589.332777][T23990] netlink: 'syz.0.4820': attribute type 1 has an invalid length. [ 589.350618][T23989] netlink: 'syz.0.4820': attribute type 1 has an invalid length. [ 589.370068][T23990] netlink: 'syz.0.4820': attribute type 1 has an invalid length. [ 589.408165][T23995] : entered promiscuous mode [ 589.768018][T24010] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4827'. [ 589.937761][T24017] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4828'. [ 590.006363][T24016] bond3: entered promiscuous mode [ 590.012228][T24016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.021642][T23917] vxcan1 speed is unknown, defaulting to 1000 [ 590.287453][T24038] openvswitch: netlink: Missing key (keys=40, expected=80) [ 590.306684][T24038] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4835'. [ 590.330190][T24040] syzkaller0: entered promiscuous mode [ 590.337756][T24040] syzkaller0: entered allmulticast mode [ 590.563244][T23917] vxcan1 speed is unknown, defaulting to 1000 [ 590.570721][T24059] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:21 [ 590.884637][T23917] vxcan1 speed is unknown, defaulting to 1000 [ 591.282465][T23917] vxcan1 speed is unknown, defaulting to 1000 [ 591.477000][T24091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 591.484445][T24091] IPv6: NLM_F_CREATE should be set when creating new route [ 591.547726][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4846'. [ 591.694752][T24104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4849'. [ 591.931068][T23917] vxcan1 speed is unknown, defaulting to 1000 [ 591.956093][T24116] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4853'. [ 591.998029][T24116] tipc: Enabled bearer , priority 0 [ 592.014054][T24116] syzkaller0: entered promiscuous mode [ 592.039399][T24116] syzkaller0: entered allmulticast mode [ 592.076571][T24116] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 592.154683][T24116] tipc: Resetting bearer [ 592.177238][T24116] tipc: Resetting bearer [ 592.219884][T24116] tipc: Disabling bearer [ 592.329861][T24123] syzkaller0: entered promiscuous mode [ 592.339177][T24123] syzkaller0: entered allmulticast mode [ 592.843625][T24126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.407482][T24193] validate_nla: 1 callbacks suppressed [ 593.407501][T24193] netlink: 'syz.3.4874': attribute type 5 has an invalid length. [ 593.519284][T24197] __nla_validate_parse: 3 callbacks suppressed [ 593.519304][T24197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4876'. [ 593.561145][T24197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4876'. [ 593.572289][T24197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4876'. [ 593.639323][T24201] netlink: 'syz.1.4877': attribute type 1 has an invalid length. [ 593.652538][T24197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4876'. [ 593.670299][T24197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4876'. [ 593.692755][T24197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4876'. [ 593.720812][T24201] bond6: entered promiscuous mode [ 593.729788][T24201] bond6: entered allmulticast mode [ 593.736402][T24201] 8021q: adding VLAN 0 to HW filter on device bond6 [ 593.747486][T24210] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.4880'. [ 593.753926][T24202] macvlan0: entered promiscuous mode [ 593.762950][T24202] macvlan0: entered allmulticast mode [ 593.773616][T24202] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 593.922118][T24220] netlink: 'syz.1.4884': attribute type 3 has an invalid length. [ 593.929345][T24223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 593.949119][T24220] netlink: 'syz.1.4884': attribute type 1 has an invalid length. [ 593.965651][T24220] netlink: 'syz.1.4884': attribute type 3 has an invalid length. [ 593.967279][T24223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4883'. [ 593.977391][T24220] netlink: 'syz.1.4884': attribute type 1 has an invalid length. [ 594.000110][T24226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4882'. [ 594.020064][T24220] netlink: 'syz.1.4884': attribute type 3 has an invalid length. [ 594.027981][T24226] tipc: Invalid UDP bearer configuration [ 594.028035][T24226] tipc: Enabling of bearer rejected, failed to enable media [ 594.043320][T24220] netlink: 'syz.1.4884': attribute type 1 has an invalid length. [ 594.066707][T24220] netlink: 'syz.1.4884': attribute type 3 has an invalid length. [ 594.079303][T24220] netlink: 'syz.1.4884': attribute type 1 has an invalid length. [ 594.220685][T24242] syzkaller0: entered promiscuous mode [ 594.233544][T24242] syzkaller0: entered allmulticast mode [ 594.505277][T24261] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 594.765227][T24277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4897'. [ 595.530825][T24315] batadv_slave_0: Caught tx_queue_len zero misconfig [ 596.736899][T24340] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 596.747267][T24340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 598.024892][T24299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 598.231494][T24370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 598.461736][T24384] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 598.492860][T24388] validate_nla: 61 callbacks suppressed [ 598.492880][T24388] netlink: 'syz.2.4931': attribute type 15 has an invalid length. [ 598.515758][T24389] netlink: 'syz.0.4929': attribute type 1 has an invalid length. [ 598.522508][ T37] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 598.533267][T24388] netlink: 'syz.2.4931': attribute type 15 has an invalid length. [ 598.542697][ T37] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 598.554787][T24388] __nla_validate_parse: 9 callbacks suppressed [ 598.554819][T24388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4931'. [ 598.677797][T24397] bond4: (slave geneve2): making interface the new active one [ 598.686688][T24397] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 598.697959][T24391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 598.698658][ T37] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 598.719193][T24400] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 598.745630][ T37] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 598.768092][ T37] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 598.796116][T24403] x9: renamed from bridge_slave_0 (while UP) [ 598.812826][T24411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4935'. [ 598.827631][ T37] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 598.847190][ T37] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 598.888693][ T37] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.073617][T24432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4940'. [ 599.464721][T24446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4946'. [ 599.542710][T24446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4946'. [ 599.695858][T24454] syzkaller0: entered promiscuous mode [ 599.710123][T24454] syzkaller0: entered allmulticast mode [ 599.725285][T24454] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 599.878811][T24463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4954'. [ 599.903359][T24465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4954'. [ 599.937465][T24465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4954'. [ 600.115389][T24477] netlink: 'syz.2.4958': attribute type 1 has an invalid length. [ 600.123503][T24477] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4958'. [ 600.166553][T24480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4959'. [ 600.233968][ T1158] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.247510][ T1158] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.275200][ T1158] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.324323][ T1158] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.630054][T24514] netlink: 'syz.0.4969': attribute type 1 has an invalid length. [ 601.100260][T24539] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 601.112567][T24539] bond8 (unregistering): Released all slaves [ 601.207198][T24548] sctp: [Deprecated]: syz.3.4977 (pid 24548) Use of int in max_burst socket option deprecated. [ 601.207198][T24548] Use struct sctp_assoc_value instead [ 601.224772][T24553] bridge6: entered promiscuous mode [ 601.232413][T24553] bridge6: entered allmulticast mode [ 601.264760][T24553] team0: Port device bridge6 added [ 601.300534][T24559] bridge0: port 3(team0) entered blocking state [ 601.329657][T24559] bridge0: port 3(team0) entered disabled state [ 601.356013][T24559] team0: entered allmulticast mode [ 601.378085][T24559] team_slave_0: entered allmulticast mode [ 601.407578][T24559] team_slave_1: entered allmulticast mode [ 601.421239][T24567] netlink: 'syz.0.4985': attribute type 4 has an invalid length. [ 601.451109][T24559] team0: entered promiscuous mode [ 601.456927][T24559] team_slave_0: entered promiscuous mode [ 601.464926][T24559] team_slave_1: entered promiscuous mode [ 601.484981][T24559] bridge0: port 3(team0) entered blocking state [ 601.491449][T24559] bridge0: port 3(team0) entered forwarding state [ 601.510713][T24570] netlink: 'syz.0.4985': attribute type 1 has an invalid length. [ 601.564608][T24572] netlink: 'syz.1.4987': attribute type 2 has an invalid length. [ 602.177617][T24610] geneve2: entered promiscuous mode [ 602.194440][T24610] geneve2: entered allmulticast mode [ 602.207892][ T36] netdevsim netdevsim1 : set [1, 0] type 2 family 0 port 6081 - 0 [ 602.224734][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.242541][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.271226][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.343685][T24621] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 602.481728][T24629] syzkaller0: entered promiscuous mode [ 602.488449][T24629] syzkaller0: entered allmulticast mode [ 602.492379][T24632] netlink: 'syz.4.5006': attribute type 1 has an invalid length. [ 602.520180][T24629] netlink: 'syz.1.5005': attribute type 1 has an invalid length. [ 603.404623][T24677] erspan0: left promiscuous mode [ 603.424720][T24677] erspan0: left allmulticast mode [ 603.524964][T24677] 8021q: adding VLAN 0 to HW filter on device .` [ 603.563272][T24677] bridge0: port 3(dummy0) entered blocking state [ 603.571838][T24677] bridge0: port 3(dummy0) entered forwarding state [ 603.595511][T24677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.826415][T24708] __nla_validate_parse: 20 callbacks suppressed [ 603.826434][T24708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5025'. [ 603.875357][T24713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5026'. [ 604.061485][T24720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5028'. [ 604.137166][T24720] vlan2: entered allmulticast mode [ 604.158229][T24720] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 604.240607][T24730] ieee802154 phy1 wpan1: encryption failed: -22 [ 604.402581][T24740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5032'. [ 604.426365][T24738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5033'. [ 604.438019][T24740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5032'. [ 604.614359][T24747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5038'. [ 604.637206][T24747] ksmbd: Daemon and kernel module version mismatch. ksmbd: 248, kernel module: 1. User-space ksmbd should terminate. [ 604.762041][T24758] validate_nla: 3 callbacks suppressed [ 604.762059][T24758] netlink: 'syz.4.5041': attribute type 18 has an invalid length. [ 604.886507][T16701] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.911030][T16701] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.937863][ T37] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.976329][ T37] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.036977][T24768] syzkaller0: entered promiscuous mode [ 605.050300][T24768] syzkaller0: entered allmulticast mode [ 605.085973][T24774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 605.142490][T24768] netlink: 'syz.1.5044': attribute type 10 has an invalid length. [ 605.217494][T24768] team0 (unregistering): Port device team_slave_0 removed [ 605.244397][T24781] netlink: 'syz.0.5052': attribute type 11 has an invalid length. [ 605.265033][T24768] team0 (unregistering): Port device team_slave_1 removed [ 605.273374][T24786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5053'. [ 605.311717][T24768] team0 (unregistering): Port device bridge2 removed [ 605.326015][T24790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5053'. [ 605.397271][T24792] xt_hashlimit: size too large, truncated to 1048576 [ 605.566970][T24795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5055'. [ 605.798011][T24805] FAULT_INJECTION: forcing a failure. [ 605.798011][T24805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.899293][T24805] CPU: 1 UID: 0 PID: 24805 Comm: syz.3.5059 Not tainted syzkaller #0 PREEMPT(full) [ 605.899320][T24805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 605.899330][T24805] Call Trace: [ 605.899337][T24805] [ 605.899345][T24805] dump_stack_lvl+0xe8/0x150 [ 605.899375][T24805] should_fail_ex+0x412/0x560 [ 605.899406][T24805] _copy_from_iter+0x1d3/0x1670 [ 605.899429][T24805] ? rcu_is_watching+0x15/0xb0 [ 605.899454][T24805] ? __pfx__copy_from_iter+0x10/0x10 [ 605.899480][T24805] ? netlink_sendmsg+0x650/0xb40 [ 605.899498][T24805] ? skb_put+0x11b/0x210 [ 605.899517][T24805] netlink_sendmsg+0x6c0/0xb40 [ 605.899544][T24805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.899565][T24805] ? aa_sock_msg_perm+0xf1/0x1b0 [ 605.899585][T24805] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 605.899610][T24805] ____sys_sendmsg+0x972/0x9f0 [ 605.899629][T24805] ? __might_fault+0xaf/0x130 [ 605.899655][T24805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 605.899682][T24805] ? import_iovec+0x73/0xa0 [ 605.899703][T24805] ___sys_sendmsg+0x2a5/0x360 [ 605.899720][T24805] ? __lock_acquire+0x6b5/0x2cf0 [ 605.899748][T24805] ? __pfx____sys_sendmsg+0x10/0x10 [ 605.899798][T24805] ? __fget_files+0x2a/0x420 [ 605.899814][T24805] ? __fget_files+0x3a0/0x420 [ 605.899839][T24805] __x64_sys_sendmsg+0x1bd/0x2a0 [ 605.899860][T24805] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 605.899886][T24805] ? __pfx_ksys_write+0x10/0x10 [ 605.899914][T24805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.899934][T24805] do_syscall_64+0x15f/0xf80 [ 605.899957][T24805] ? trace_irq_disable+0x3b/0x140 [ 605.899979][T24805] ? clear_bhb_loop+0x40/0x90 [ 605.900002][T24805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.900019][T24805] RIP: 0033:0x7f66c599cdd9 [ 605.900034][T24805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.900050][T24805] RSP: 002b:00007f66c678a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.900070][T24805] RAX: ffffffffffffffda RBX: 00007f66c5c15fa0 RCX: 00007f66c599cdd9 [ 605.900083][T24805] RDX: 0000000024004810 RSI: 0000200000000140 RDI: 0000000000000003 [ 605.900095][T24805] RBP: 00007f66c678a090 R08: 0000000000000000 R09: 0000000000000000 [ 605.900106][T24805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.900116][T24805] R13: 00007f66c5c16038 R14: 00007f66c5c15fa0 R15: 00007fff76f311b8 [ 605.900145][T24805] [ 606.244497][T24819] netlink: 'syz.2.5063': attribute type 21 has an invalid length. [ 607.089728][T24872] xt_time: unknown flags 0xf4 [ 607.230387][T24876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.276530][T24876] : renamed from bond0 (while UP) [ 607.732274][T24907] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 607.769555][T24915] netlink: 'syz.4.5091': attribute type 4 has an invalid length. [ 607.818397][T24923] sctp: [Deprecated]: syz.3.5090 (pid 24923) Use of int in maxseg socket option. [ 607.818397][T24923] Use struct sctp_assoc_value instead [ 607.880508][T24923] H: renamed from dummy0 (while UP) [ 608.000718][T24926] netlink: 'syz.2.5092': attribute type 1 has an invalid length. [ 608.015157][T24928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.101491][T24926] bond9 (unregistering): Released all slaves [ 608.631819][T24969] FAULT_INJECTION: forcing a failure. [ 608.631819][T24969] name failslab, interval 1, probability 0, space 0, times 0 [ 608.671373][T24969] CPU: 1 UID: 0 PID: 24969 Comm: syz.2.5103 Not tainted syzkaller #0 PREEMPT(full) [ 608.671399][T24969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 608.671411][T24969] Call Trace: [ 608.671418][T24969] [ 608.671426][T24969] dump_stack_lvl+0xe8/0x150 [ 608.671458][T24969] should_fail_ex+0x412/0x560 [ 608.671491][T24969] should_failslab+0xa8/0x100 [ 608.671516][T24969] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 608.671539][T24969] ? __alloc_skb+0x186/0x7d0 [ 608.671555][T24969] ? __alloc_skb+0x1d0/0x7d0 [ 608.671568][T24969] ? __local_bh_enable_ip+0xd0/0x130 [ 608.671597][T24969] __alloc_skb+0x1d0/0x7d0 [ 608.671614][T24969] ? netlink_ack_tlv_len+0x6c/0x210 [ 608.671635][T24969] netlink_ack+0x146/0xa50 [ 608.671650][T24969] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 608.671675][T24969] ? ref_tracker_free+0x693/0x840 [ 608.671697][T24969] ? __pfx_ref_tracker_free+0x10/0x10 [ 608.671714][T24969] ? __asan_memcpy+0x40/0x70 [ 608.671732][T24969] ? __skb_clone+0x63/0x7a0 [ 608.671757][T24969] netlink_rcv_skb+0x2b6/0x4b0 [ 608.671776][T24969] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 608.671804][T24969] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 608.671834][T24969] ? netlink_deliver_tap+0x2e/0x1b0 [ 608.671852][T24969] ? netlink_deliver_tap+0x2e/0x1b0 [ 608.671875][T24969] netlink_unicast+0x75c/0x8e0 [ 608.671910][T24969] netlink_sendmsg+0x813/0xb40 [ 608.671937][T24969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.671958][T24969] ? aa_sock_msg_perm+0xf1/0x1b0 [ 608.671976][T24969] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 608.671999][T24969] ____sys_sendmsg+0x972/0x9f0 [ 608.672015][T24969] ? __might_fault+0xaf/0x130 [ 608.672038][T24969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 608.672062][T24969] ? import_iovec+0x73/0xa0 [ 608.672083][T24969] ___sys_sendmsg+0x2a5/0x360 [ 608.672100][T24969] ? __lock_acquire+0x6b5/0x2cf0 [ 608.672128][T24969] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.672174][T24969] ? __fget_files+0x2a/0x420 [ 608.672199][T24969] ? __fget_files+0x3a0/0x420 [ 608.672225][T24969] __x64_sys_sendmsg+0x1bd/0x2a0 [ 608.672245][T24969] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 608.672271][T24969] ? __pfx_ksys_write+0x10/0x10 [ 608.672297][T24969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.672316][T24969] do_syscall_64+0x15f/0xf80 [ 608.672339][T24969] ? trace_irq_disable+0x3b/0x140 [ 608.672360][T24969] ? clear_bhb_loop+0x40/0x90 [ 608.672382][T24969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.672398][T24969] RIP: 0033:0x7f66c5b9cdd9 [ 608.672418][T24969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.672433][T24969] RSP: 002b:00007f66c6a02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.672451][T24969] RAX: ffffffffffffffda RBX: 00007f66c5e16090 RCX: 00007f66c5b9cdd9 [ 608.672463][T24969] RDX: 0000000024004810 RSI: 0000200000000140 RDI: 0000000000000003 [ 608.672473][T24969] RBP: 00007f66c6a02090 R08: 0000000000000000 R09: 0000000000000000 [ 608.672482][T24969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.672492][T24969] R13: 00007f66c5e16128 R14: 00007f66c5e16090 R15: 00007fffe6ed5188 [ 608.672520][T24969] [ 609.518425][T25008] netlink: 'syz.1.5119': attribute type 2 has an invalid length. [ 609.535541][T25009] __nla_validate_parse: 22 callbacks suppressed [ 609.535559][T25009] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5120'. [ 609.624370][T25005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5118'. [ 609.650793][T25005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5118'. [ 609.884756][T25032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5128'. [ 609.952207][T25034] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5129'. [ 609.988045][T25036] netlink: 'syz.2.5130': attribute type 1 has an invalid length. [ 609.997527][T25036] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5130'. [ 610.007518][T25036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5130'. [ 610.308332][T25064] FAULT_INJECTION: forcing a failure. [ 610.308332][T25064] name failslab, interval 1, probability 0, space 0, times 0 [ 610.322971][T25065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5136'. [ 610.364762][T25064] CPU: 1 UID: 0 PID: 25064 Comm: syz.2.5135 Not tainted syzkaller #0 PREEMPT(full) [ 610.364788][T25064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.364799][T25064] Call Trace: [ 610.364805][T25064] [ 610.364812][T25064] dump_stack_lvl+0xe8/0x150 [ 610.364842][T25064] should_fail_ex+0x412/0x560 [ 610.364871][T25064] should_failslab+0xa8/0x100 [ 610.364893][T25064] ? skb_clone+0x212/0x3a0 [ 610.364914][T25064] kmem_cache_alloc_noprof+0x87/0x650 [ 610.364941][T25064] skb_clone+0x212/0x3a0 [ 610.364962][T25064] __netlink_deliver_tap+0x404/0x850 [ 610.364989][T25064] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.365008][T25064] netlink_deliver_tap+0x19c/0x1b0 [ 610.365026][T25064] netlink_sendskb+0x68/0x140 [ 610.365053][T25064] netlink_rcv_skb+0x2b6/0x4b0 [ 610.365071][T25064] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 610.365100][T25064] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.365128][T25064] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.365153][T25064] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.365174][T25064] netlink_unicast+0x75c/0x8e0 [ 610.365208][T25064] netlink_sendmsg+0x813/0xb40 [ 610.365231][T25064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.365254][T25064] ? aa_sock_msg_perm+0xf1/0x1b0 [ 610.365273][T25064] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 610.365296][T25064] ____sys_sendmsg+0x972/0x9f0 [ 610.365315][T25064] ? __might_fault+0xaf/0x130 [ 610.365339][T25064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.365367][T25064] ? import_iovec+0x73/0xa0 [ 610.365389][T25064] ___sys_sendmsg+0x2a5/0x360 [ 610.365407][T25064] ? __lock_acquire+0x6b5/0x2cf0 [ 610.365437][T25064] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.365485][T25064] ? __fget_files+0x2a/0x420 [ 610.365503][T25064] ? __fget_files+0x3a0/0x420 [ 610.365527][T25064] __x64_sys_sendmsg+0x1bd/0x2a0 [ 610.365546][T25064] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 610.365572][T25064] ? __pfx_ksys_write+0x10/0x10 [ 610.365598][T25064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.365617][T25064] do_syscall_64+0x15f/0xf80 [ 610.365641][T25064] ? trace_irq_disable+0x3b/0x140 [ 610.365662][T25064] ? clear_bhb_loop+0x40/0x90 [ 610.365683][T25064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.365700][T25064] RIP: 0033:0x7f66c5b9cdd9 [ 610.365717][T25064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.365731][T25064] RSP: 002b:00007f66c6a02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.365749][T25064] RAX: ffffffffffffffda RBX: 00007f66c5e16090 RCX: 00007f66c5b9cdd9 [ 610.365759][T25064] RDX: 0000000024004810 RSI: 0000200000000140 RDI: 0000000000000003 [ 610.365770][T25064] RBP: 00007f66c6a02090 R08: 0000000000000000 R09: 0000000000000000 [ 610.365780][T25064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.365790][T25064] R13: 00007f66c5e16128 R14: 00007f66c5e16090 R15: 00007fffe6ed5188 [ 610.365820][T25064] [ 611.177959][T25090] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 611.189617][T25090] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 611.221388][T25090] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 611.232375][T25090] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 611.243360][T25090] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 611.254452][T25090] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 611.265113][T25090] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 611.275686][T25090] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 611.286490][T25090] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 611.297434][T25090] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 611.416556][T25104] IPVS: length: 8 != 1152 [ 611.519083][T25108] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20003 [ 612.105279][T25115] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5153'. [ 614.079563][ T1679] block nbd4: Possible stuck request ffff8880271b5080: control (read@0,1024B). Runtime 90 seconds [ 614.090901][ T1679] block nbd4: Possible stuck request ffff8880271b5240: control (read@1024,1024B). Runtime 90 seconds [ 614.102956][ T1679] block nbd4: Possible stuck request ffff8880271b5400: control (read@2048,1024B). Runtime 90 seconds [ 614.115019][ T1679] block nbd4: Possible stuck request ffff8880271b55c0: control (read@3072,1024B). Runtime 90 seconds [ 614.155225][T25089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 614.384964][T25138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5158'. [ 614.476642][T25143] sctp: [Deprecated]: syz.0.5157 (pid 25143) Use of int in maxseg socket option. [ 614.476642][T25143] Use struct sctp_assoc_value instead [ 614.698203][T25161] ipt_ECN: cannot use operation on non-tcp rule [ 614.924483][T25172] __nla_validate_parse: 1 callbacks suppressed [ 614.924502][T25172] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5172'. [ 614.959920][T25172] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5172'. [ 615.403392][T25194] dvmrp0: entered allmulticast mode [ 615.626070][T25208] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5179'. [ 615.667436][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5181'. [ 615.894457][T25228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5184'. [ 616.111011][T25244] netlink: 210136 bytes leftover after parsing attributes in process `syz.1.5186'. [ 616.207840][ T5839] Bluetooth: hci2: link tx timeout [ 616.214314][ T5839] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 616.251527][T25250] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 616.317907][T25256] syz.1.5190: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 616.347703][T25256] CPU: 1 UID: 0 PID: 25256 Comm: syz.1.5190 Not tainted syzkaller #0 PREEMPT(full) [ 616.347732][T25256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 616.347745][T25256] Call Trace: [ 616.347752][T25256] [ 616.347760][T25256] dump_stack_lvl+0xe8/0x150 [ 616.347808][T25256] warn_alloc+0x249/0x340 [ 616.347837][T25256] ? stack_trace_save+0xa9/0x100 [ 616.347868][T25256] ? __pfx_warn_alloc+0x10/0x10 [ 616.347900][T25256] ? kasan_save_track+0x4f/0x80 [ 616.347922][T25256] ? kasan_save_track+0x3e/0x80 [ 616.347944][T25256] ? __kasan_kmalloc+0x93/0xb0 [ 616.347967][T25256] ? __kmalloc_cache_noprof+0x31c/0x660 [ 616.347991][T25256] ? xskq_create+0x56/0x170 [ 616.348015][T25256] ? xsk_setsockopt+0x54c/0x990 [ 616.348036][T25256] ? do_sock_setsockopt+0x17c/0x1b0 [ 616.348056][T25256] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 616.348075][T25256] ? do_syscall_64+0x15f/0xf80 [ 616.348110][T25256] __vmalloc_node_range_noprof+0x132/0x1750 [ 616.348167][T25256] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 616.348199][T25256] ? __kasan_kmalloc+0x93/0xb0 [ 616.348229][T25256] vmalloc_user_noprof+0xad/0xe0 [ 616.348253][T25256] ? xskq_create+0xbf/0x170 [ 616.348278][T25256] xskq_create+0xbf/0x170 [ 616.348307][T25256] xsk_init_queue+0x8a/0xe0 [ 616.348333][T25256] xsk_setsockopt+0x54c/0x990 [ 616.348359][T25256] ? __pfx_xsk_setsockopt+0x10/0x10 [ 616.348382][T25256] ? __pfx_aa_sk_perm+0x10/0x10 [ 616.348417][T25256] ? aa_sock_opt_perm+0xff/0x1a0 [ 616.348440][T25256] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 616.348465][T25256] ? __pfx_xsk_setsockopt+0x10/0x10 [ 616.348490][T25256] do_sock_setsockopt+0x17c/0x1b0 [ 616.348512][T25256] __x64_sys_setsockopt+0x13d/0x1b0 [ 616.348532][T25256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.348553][T25256] do_syscall_64+0x15f/0xf80 [ 616.348579][T25256] ? trace_irq_disable+0x3b/0x140 [ 616.348605][T25256] ? clear_bhb_loop+0x40/0x90 [ 616.348631][T25256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.348651][T25256] RIP: 0033:0x7f9d94b9cdd9 [ 616.348670][T25256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.348686][T25256] RSP: 002b:00007f9d95b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 616.348707][T25256] RAX: ffffffffffffffda RBX: 00007f9d94e15fa0 RCX: 00007f9d94b9cdd9 [ 616.348721][T25256] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 616.348733][T25256] RBP: 00007f9d94c32d69 R08: 0000000000000004 R09: 0000000000000000 [ 616.348744][T25256] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.348757][T25256] R13: 00007f9d94e16038 R14: 00007f9d94e15fa0 R15: 00007fff96998308 [ 616.348796][T25256] [ 616.623342][T25256] Mem-Info: [ 616.648144][T25256] active_anon:6071 inactive_anon:0 isolated_anon:0 [ 616.648144][T25256] active_file:3095 inactive_file:40332 isolated_file:0 [ 616.648144][T25256] unevictable:768 dirty:137 writeback:0 [ 616.648144][T25256] slab_reclaimable:12136 slab_unreclaimable:122826 [ 616.648144][T25256] mapped:29566 shmem:1377 pagetables:3636 [ 616.648144][T25256] sec_pagetables:0 bounce:0 [ 616.648144][T25256] kernel_misc_reclaimable:0 [ 616.648144][T25256] free:1284780 free_pcp:20729 free_cma:0 [ 616.709348][T25256] Node 0 active_anon:24384kB inactive_anon:0kB active_file:12380kB inactive_file:161124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:81400kB dirty:548kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15156kB pagetables:14512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 616.721766][T25263] netlink: 'syz.0.5193': attribute type 1 has an invalid length. [ 616.754827][T25256] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36864kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 616.788792][T25256] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 616.834915][T25256] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 616.863018][T25256] Node 0 DMA32 free:1329404kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24356kB inactive_anon:0kB active_file:12380kB inactive_file:161124kB unevictable:1536kB writepending:548kB zspages:0kB present:3129332kB managed:2550864kB mlocked:0kB bounce:0kB free_pcp:36512kB local_pcp:15860kB free_cma:0kB [ 616.903949][T25256] lowmem_reserve[]: 0 0 0 0 0 [ 616.909778][T25256] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:588kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 616.926847][T25275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5195'. [ 616.940658][T25256] lowmem_reserve[]: 0 0 0 0 0 [ 616.955928][T25256] Node 1 Normal free:3799892kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:45496kB local_pcp:24532kB free_cma:0kB [ 617.000532][T25273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5194'. [ 617.009688][T25256] lowmem_reserve[]: 0 0 0 0 0 [ 617.030211][T25256] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 617.082590][T25256] Node 0 DMA32: 7972*4kB (UM) 6772*8kB (UME) 3498*16kB (UME) 295*32kB (UM) 688*64kB (UME) 1235*128kB (UME) 877*256kB (UME) 554*512kB (UM) 309*1024kB (UM) 74*2048kB (UM) 0*4096kB = 1329712kB [ 617.141068][T25256] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 617.161929][T25256] Node 1 Normal: 3*4kB (U) 14*8kB (UM) 12*16kB (UM) 6*32kB (UM) 7*64kB (UM) 6*128kB (UM) 5*256kB (UM) 8*512kB (UM) 4*1024kB (UM) 4*2048kB (U) 923*4096kB (UM) = 3799996kB [ 617.186445][T25281] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5198'. [ 617.195234][T25256] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 617.205966][T25256] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 617.216638][T25256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 617.237788][T25256] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 617.251325][T25279] syzkaller0: entered promiscuous mode [ 617.258868][T25256] 44798 total pagecache pages [ 617.263711][T25256] 0 pages in swap cache [ 617.269029][T25279] syzkaller0: entered allmulticast mode [ 617.279550][T25256] Free swap = 124996kB [ 617.288754][T25256] Total swap = 124996kB [ 617.296210][T25256] 2097051 pages RAM [ 617.315425][T25256] 0 pages HighMem/MovableOnly [ 617.336050][T25285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5196'. [ 617.355778][T25256] 427573 pages reserved [ 617.368977][T25256] 0 pages cma reserved [ 617.424332][T25295] netlink: 'syz.4.5201': attribute type 1 has an invalid length. [ 617.515153][T25295] bond8: entered promiscuous mode [ 617.521572][T25295] 8021q: adding VLAN 0 to HW filter on device bond8 [ 617.651211][T25301] syzkaller0: entered promiscuous mode [ 617.663452][T25301] syzkaller0: entered allmulticast mode [ 618.234444][ T5848] Bluetooth: hci2: command 0x0405 tx timeout [ 618.302889][T25346] xt_bpf: check failed: parse error [ 618.343179][T25346] xt_bpf: check failed: parse error [ 618.751865][T25372] tipc: Enabled bearer , priority 0 [ 618.964714][T25377] syzkaller0: entered promiscuous mode [ 618.983915][T25384] netlink: 'syz.3.5224': attribute type 1 has an invalid length. [ 618.984892][T25377] syzkaller0: entered allmulticast mode [ 619.013724][T25371] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 619.237372][T25400] netlink: 'syz.1.5226': attribute type 10 has an invalid length. [ 619.285767][T25400] net_ratelimit: 8875 callbacks suppressed [ 619.285785][T25400] wlan1: mtu less than device minimum [ 619.332152][T25400] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 619.374158][T25361] tipc: Resetting bearer [ 619.426586][T25400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.475654][T25361] tipc: Disabling bearer [ 622.494448][T25414] netlink: 'syz.1.5229': attribute type 33 has an invalid length. [ 622.504622][T25430] tipc: Started in network mode [ 622.523165][T25430] tipc: Node identity 4, cluster identity 4711 [ 622.541489][T25430] tipc: Node number set to 4 [ 622.548057][T25416] syzkaller1: entered promiscuous mode [ 622.560789][ T5214] udevd[5214]: worker [20556] /devices/virtual/block/nbd4 is taking a long time [ 622.561714][T25416] syzkaller1: entered allmulticast mode [ 622.623448][T25436] __nla_validate_parse: 7 callbacks suppressed [ 622.623467][T25436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5231'. [ 622.993186][T25454] openvswitch: netlink: IPv6 tunnel dst address is zero [ 623.366205][T25478] tipc: Enabling not permitted [ 623.392070][T25478] tipc: Enabling of bearer rejected, failed to enable media [ 623.392546][T25481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5245'. [ 623.736199][T25496] syzkaller0: entered promiscuous mode [ 623.971123][T25509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5252'. [ 624.321860][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.334443][ T1315] clip:clip_start_xmit: skb_dst(skb) == NULL [ 624.371447][T25523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5256'. [ 624.416054][T25529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5257'. [ 624.523155][T25523] hsr_slave_0 (unregistering): left promiscuous mode [ 624.994923][T25563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5265'. [ 625.138817][T25567] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5266'. [ 625.304116][T25576] vlan0: entered allmulticast mode [ 625.327142][T25576] bond0: entered allmulticast mode [ 625.347025][T25576] bond_slave_0: entered allmulticast mode [ 625.376939][T25576] bond_slave_1: entered allmulticast mode [ 625.585865][T25594] netlink: 'syz.4.5273': attribute type 64 has an invalid length. [ 625.828075][T25608] bond0: (slave bond_slave_1): Releasing backup interface [ 625.882755][T25608] bond_slave_1: left allmulticast mode [ 626.128381][T25626] netlink: 'syz.4.5281': attribute type 3 has an invalid length. [ 626.147835][T25626] netlink: 'syz.4.5281': attribute type 3 has an invalid length. [ 626.189677][T25629] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.5281'. [ 626.198298][T25619] nbd5: detected capacity change from 0 to 127 [ 626.221944][ T5839] block nbd5: Receive control failed (result -32) [ 626.236336][T25626] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5281'. [ 626.246986][T22232] block nbd5: Dead connection, failed to find a fallback [ 626.264972][T22232] block nbd5: shutting down sockets [ 626.272259][T22232] blk_print_req_error: 138 callbacks suppressed [ 626.272273][T22232] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.296091][T22232] buffer_io_error: 138 callbacks suppressed [ 626.296107][T22232] Buffer I/O error on dev nbd5, logical block 0, async page read [ 626.330436][T22232] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.353616][T22232] Buffer I/O error on dev nbd5, logical block 1, async page read [ 626.373084][T22232] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.425336][T22232] Buffer I/O error on dev nbd5, logical block 2, async page read [ 626.457495][T22232] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.506019][T22232] Buffer I/O error on dev nbd5, logical block 3, async page read [ 626.540366][T22232] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.581074][T22232] Buffer I/O error on dev nbd5, logical block 0, async page read [ 626.605710][T22232] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.633673][T22232] Buffer I/O error on dev nbd5, logical block 1, async page read [ 626.660972][T22232] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.713292][T22232] Buffer I/O error on dev nbd5, logical block 2, async page read [ 626.751016][T22232] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.777118][T22232] Buffer I/O error on dev nbd5, logical block 3, async page read [ 626.805425][T22232] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.836291][T22232] Buffer I/O error on dev nbd5, logical block 0, async page read [ 626.850795][T22232] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.877423][T22232] Buffer I/O error on dev nbd5, logical block 1, async page read [ 626.932032][T22232] ldm_validate_partition_table(): Disk read failed. [ 626.966170][T22232] Dev nbd5: unable to read RDB block 0 [ 627.016466][T22232] nbd5: unable to read partition table [ 627.085487][T22232] ldm_validate_partition_table(): Disk read failed. [ 627.125952][T22232] Dev nbd5: unable to read RDB block 0 [ 627.161187][T22232] nbd5: unable to read partition table [ 627.252236][T25672] IPv6: sit1: Disabled Multicast RS [ 627.258457][T25677] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5289'. [ 627.480083][T25688] netlink: 'syz.1.5293': attribute type 11 has an invalid length. [ 627.504079][T25684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.524332][T25684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.690271][T25695] __nla_validate_parse: 3 callbacks suppressed [ 627.690289][T25695] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5294'. [ 627.712615][T25695] unsupported nlmsg_type 40 [ 627.732905][T25695] syzkaller1: entered promiscuous mode [ 627.739122][T25695] syzkaller1: entered allmulticast mode [ 627.759804][T25695] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5294'. [ 627.893068][T25694] SET target dimension over the limit! [ 628.294062][T25730] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.306354][T25711] ipvlan0: entered promiscuous mode [ 628.383994][T25734] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5304'. [ 628.403885][T25711] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5297'. [ 628.431829][T25711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5297'. [ 628.433978][T25739] netlink: 'syz.3.5304': attribute type 1 has an invalid length. [ 628.454054][T25711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5297'. [ 628.475721][T25734] gretap0: entered allmulticast mode [ 628.671943][T25739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 628.722793][T25734] bond3: entered promiscuous mode [ 628.731250][T25734] bond3: entered allmulticast mode [ 628.952535][T25759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5310'. [ 629.078005][T25759] bond9: entered promiscuous mode [ 629.105238][T25759] bond9: entered allmulticast mode [ 629.144306][T25759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5310'. [ 629.191359][T25759] bond0: entered promiscuous mode [ 629.206791][T25759] bond0: left promiscuous mode [ 629.709451][T25806] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.716711][T25806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.736934][T25811] vcan0: entered allmulticast mode [ 629.914618][T25819] sctp: [Deprecated]: syz.4.5323 (pid 25819) Use of int in maxseg socket option. [ 629.914618][T25819] Use struct sctp_assoc_value instead [ 630.307354][T25849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.381720][T25849] geneve2: entered promiscuous mode [ 630.386981][T25849] geneve2: entered allmulticast mode [ 630.432768][T25855] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5330'. [ 630.455632][ T30] audit: type=1107 audit(1777054026.355:4): pid=25854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 630.461954][T25855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5330'. [ 630.500625][ T30] audit: type=1107 audit(1777054026.355:5): pid=25854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 630.639412][T25863] netlink: 'syz.4.5334': attribute type 1 has an invalid length. [ 630.645826][T25868] tc_dump_action: action bad kind [ 630.736355][T25872] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 630.757987][T25872] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 630.824659][T25882] netlink: 'syz.2.5338': attribute type 1 has an invalid length. [ 630.891060][T25863] bond9: (slave bridge6): Enslaving as an active interface with a down link [ 630.925261][T25881] bond9: (slave gretap3): making interface the new active one [ 630.942868][T25881] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 631.017192][T25896] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 631.628316][T25903] netlink: 'syz.2.5341': attribute type 21 has an invalid length. [ 631.637214][T25903] netlink: 'syz.2.5341': attribute type 21 has an invalid length. [ 633.585496][T25918] netlink: 'syz.2.5346': attribute type 16 has an invalid length. [ 633.593713][T25918] netlink: 'syz.2.5346': attribute type 17 has an invalid length. [ 633.610886][T25918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 633.632286][T25918] __nla_validate_parse: 3 callbacks suppressed [ 633.632299][T25918] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5346'. [ 633.635803][T25865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 633.691720][T25918] bond10 (unregistering): Released all slaves [ 634.396061][T25953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.408206][T25953] batadv_slave_0: entered promiscuous mode [ 634.482752][T25958] netlink: set zone limit has 4 unknown bytes [ 634.892464][T25984] netlink: 300 bytes leftover after parsing attributes in process `syz.3.5368'. [ 634.893777][T25987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5366'. [ 634.964843][T25992] netlink: 'syz.2.5369': attribute type 3 has an invalid length. [ 635.081935][T26001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5371'. [ 635.505198][T26018] netlink: 788 bytes leftover after parsing attributes in process `syz.3.5377'. [ 635.582605][T26020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5377'. [ 635.602741][T26030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5380'. [ 635.621353][T26030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5380'. [ 636.046127][T26056] nlmon0: Caught tx_queue_len zero misconfig [ 636.082706][T26059] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5388'. [ 636.226094][T26066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5391'. [ 636.245788][T26066] bond0: ARP target 8.4.0.0 is already present [ 636.320096][T26066] bond0: option arp_ip_target: invalid value (1032) [ 636.575093][T26092] bond0: option mode: unable to set because the bond device has slaves [ 636.774081][T26097] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 636.824785][ T30] audit: type=1800 audit(1777054032.725:6): pid=26098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5393" name="memory.events" dev="tmpfs" ino=2023 res=0 errno=0 [ 636.855172][T26097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 636.898129][ T30] audit: type=1804 audit(1777054032.755:7): pid=26098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5393" name="/newroot/394/memory.events" dev="tmpfs" ino=2023 res=1 errno=0 [ 637.081640][T26111] bond10: entered promiscuous mode [ 637.086866][T26111] bond10: entered allmulticast mode [ 637.631352][T26160] wireguard0: entered allmulticast mode [ 637.720162][T26170] rdma_rxe: rxe_newlink: failed to add lo [ 638.087303][T26191] bond10 (unregistering): Released all slaves [ 638.696003][T26241] __nla_validate_parse: 6 callbacks suppressed [ 638.696022][T26241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5438'. [ 638.890074][T26254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5439'. [ 638.929820][T26267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5439'. [ 638.977238][T26268] veth1_macvtap: left promiscuous mode [ 639.102129][T26254] netlink: 'syz.4.5439': attribute type 1 has an invalid length. [ 639.143988][T26254] netlink: 'syz.4.5439': attribute type 21 has an invalid length. [ 639.154702][T26254] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5439'. [ 639.217839][T26280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5446'. [ 639.232184][T26280] tipc: Invalid UDP bearer configuration [ 639.232268][T26280] tipc: Enabling of bearer rejected, failed to enable media [ 639.332135][T26292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5450'. [ 639.435838][T26302] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5452'. [ 639.582992][T26304] syzkaller0: entered promiscuous mode [ 639.597409][T26304] syzkaller0: entered allmulticast mode [ 639.656440][ T808] IPVS: starting estimator thread 0... [ 639.661178][T26316] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 639.760785][T26321] IPVS: using max 33 ests per chain, 79200 per kthread [ 640.020115][T26337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5460'. [ 640.030176][T26337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.037434][T26337] IPv6: NLM_F_CREATE should be set when creating new route [ 642.686645][T26320] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 642.695428][T26320] tipc: Enabled bearer , priority 10 [ 642.890351][T26354] netlink: 67 bytes leftover after parsing attributes in process `syz.3.5464'. [ 643.012478][T26363] vlan1: entered promiscuous mode [ 643.025390][T26363] geneve1: entered promiscuous mode [ 643.040969][T26363] vlan1: entered allmulticast mode [ 643.046316][T26363] geneve1: entered allmulticast mode [ 643.352896][T26393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5476'. [ 643.814596][T26430] netlink: 'syz.4.5489': attribute type 39 has an invalid length. [ 643.879066][T26430] hsr_slave_1 (unregistering): left promiscuous mode [ 644.166068][ T1679] block nbd4: Possible stuck request ffff8880271b5080: control (read@0,1024B). Runtime 120 seconds [ 644.182366][ T1679] block nbd4: Possible stuck request ffff8880271b5240: control (read@1024,1024B). Runtime 120 seconds [ 644.194583][ T1679] block nbd4: Possible stuck request ffff8880271b5400: control (read@2048,1024B). Runtime 120 seconds [ 644.206689][ T1679] block nbd4: Possible stuck request ffff8880271b55c0: control (read@3072,1024B). Runtime 120 seconds [ 644.234085][T26449] syzkaller1: entered promiscuous mode [ 644.253290][T26449] syzkaller1: entered allmulticast mode [ 644.280812][T26449] sch_fq: defrate 16 ignored. [ 644.535447][T26467] netlink: 'syz.2.5502': attribute type 1 has an invalid length. [ 644.545819][T26467] __nla_validate_parse: 1 callbacks suppressed [ 644.545835][T26467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5502'. [ 644.564032][T26467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5502'. [ 645.412640][T26532] netlink: 'syz.0.5519': attribute type 1 has an invalid length. [ 645.544047][T26538] IPVS: ip_vs_edit_dest(): server weight less than zero [ 647.796807][T26481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 648.037674][T26553] xt_cluster: node mask cannot exceed total number of nodes [ 648.095246][T26556] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5527'. [ 648.146851][T26558] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 648.322697][T26569] bond11: entered allmulticast mode [ 648.373287][T26567] veth5: entered allmulticast mode [ 648.385894][T26579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5535'. [ 648.397940][T26578] delete_channel: no stack [ 648.398065][T26577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5534'. [ 648.784717][T26602] xt_hashlimit: size too large, truncated to 1048576 [ 648.885316][T26610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5541'. [ 649.001704][T26610] xt_hashlimit: size too large, truncated to 1048576 [ 649.469659][T26602] netlink: 'syz.4.5539': attribute type 29 has an invalid length. [ 649.491748][T26602] netlink: 'syz.4.5539': attribute type 29 has an invalid length. [ 649.552578][T26602] bond0: Caught tx_queue_len zero misconfig [ 649.593574][T26602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5539'. [ 649.639000][T26602] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5539'. [ 649.794070][T26670] : renamed from virt_wifi0 [ 649.834310][T26673] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5555'. [ 650.007028][T26687] netlink: 'syz.2.5557': attribute type 32 has an invalid length. [ 650.052426][T26687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5557'. [ 650.172213][T26687] bond10: option coupled_control: invalid value (192) [ 650.203162][T26687] bond10 (unregistering): Released all slaves [ 650.321681][T26708] netlink: 'syz.3.5564': attribute type 21 has an invalid length. [ 650.345153][T26708] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5564'. [ 650.394065][T26712] ipt_REJECT: TCP_RESET invalid for non-tcp [ 650.675684][T26725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5569'. [ 650.852876][T26742] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5574'. [ 650.900724][T26748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5575'. [ 651.030816][T26755] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5577'. [ 651.042300][T26755] netlink: Unknown conntrack attr (0) [ 651.049977][T26757] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5578'. [ 651.340278][T26784] netlink: 'syz.3.5587': attribute type 29 has an invalid length. [ 651.356549][T26784] netlink: 'syz.3.5587': attribute type 29 has an invalid length. [ 652.020256][T26831] netlink: 'syz.3.5599': attribute type 1 has an invalid length. [ 652.056442][T26831] bond4: entered promiscuous mode [ 652.062975][T26831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 652.087504][T26831] bond4: (slave bridge5): making interface the new active one [ 652.095899][T26831] bridge5: entered promiscuous mode [ 652.103372][T26831] bridge5: left promiscuous mode [ 652.199724][T26836] veth11: entered promiscuous mode [ 652.255608][T26838] netlink: 'syz.1.5602': attribute type 39 has an invalid length. [ 652.266126][T26839] netlink: 'syz.1.5602': attribute type 39 has an invalid length. [ 652.366849][T26843] xfrm2: entered promiscuous mode [ 652.373400][T26843] xfrm2: entered allmulticast mode [ 652.392509][T26845] netlink: 'syz.1.5604': attribute type 4 has an invalid length. [ 652.426156][T26845] netlink: 'syz.1.5604': attribute type 3 has an invalid length. [ 652.435498][T26845] netlink: 'syz.1.5604': attribute type 1 has an invalid length. [ 653.276889][T26900] tipc: Enabling of bearer rejected, failed to enable media [ 653.583836][T26916] openvswitch: netlink: IP tunnel dst address not specified [ 653.637782][T26919] openvswitch: netlink: IP tunnel dst address not specified [ 653.752475][T26925] syzkaller1: entered promiscuous mode [ 653.769190][T26925] syzkaller1: entered allmulticast mode [ 654.184649][T26956] syzkaller0: entered allmulticast mode [ 654.335634][T26959] syzkaller0: entered promiscuous mode [ 654.375899][T26959] syzkaller0: entered allmulticast mode [ 654.422633][T26956] syzkaller0: left allmulticast mode [ 654.586113][T26976] ieee802154 phy1 wpan1: encryption failed: -22 [ 655.018837][T27001] __nla_validate_parse: 21 callbacks suppressed [ 655.018856][T27001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5641'. [ 655.048141][T26997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5640'. [ 655.059912][T26997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5640'. [ 655.105478][T26997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5640'. [ 655.236331][T27007] bridge5: entered promiscuous mode [ 655.254135][T27007] bridge5: entered allmulticast mode [ 655.265216][T27007] team0: Port device bridge5 added [ 655.274422][T27007] bridge0: port 3(team0) entered blocking state [ 655.281228][T27007] bridge0: port 3(team0) entered disabled state [ 655.287855][T27007] team0: entered allmulticast mode [ 655.294301][T27007] team_slave_0: entered allmulticast mode [ 655.306887][T27007] team_slave_1: entered allmulticast mode [ 655.342668][T27007] team0: entered promiscuous mode [ 655.359869][T27007] team_slave_0: entered promiscuous mode [ 655.369465][T27007] team_slave_1: entered promiscuous mode [ 655.378090][T27007] bridge0: port 3(team0) entered blocking state [ 655.384610][T27007] bridge0: port 3(team0) entered forwarding state [ 655.676630][T27034] syzkaller0: entered promiscuous mode [ 655.691367][T27034] syzkaller0: entered allmulticast mode [ 655.809378][T27037] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5655'. [ 655.836438][T27041] H: renamed from dummy0 (while UP) [ 655.845274][T27037] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5655'. [ 655.916035][T27043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5649'. [ 655.956820][T27048] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 655.967936][T27045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5658'. [ 655.990811][T27048] validate_nla: 3 callbacks suppressed [ 655.990833][T27048] netlink: 'syz.4.5659': attribute type 39 has an invalid length. [ 656.044800][T27046] gtp1: entered promiscuous mode [ 656.090799][T27046] gtp1: entered allmulticast mode [ 656.177392][T27060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5662'. [ 656.380440][T27071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5663'. [ 656.475289][T27073] bond12: option packets_per_slave: invalid value (18446744073709551615) [ 656.495643][T27073] bond12: option packets_per_slave: allowed values 0 - 65535 [ 656.517158][T27073] bond12 (unregistering): Released all slaves [ 656.595310][T27093] netlink: 'syz.3.5669': attribute type 7 has an invalid length. [ 656.603899][T27093] netlink: 'syz.3.5669': attribute type 8 has an invalid length. [ 656.797470][T27088] gretap0: entered promiscuous mode [ 656.820159][T27088] gretap0: left promiscuous mode [ 656.882597][T27104] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 657.004155][T27108] netlink: 'syz.4.5675': attribute type 1 has an invalid length. [ 657.041660][T27108] bond12: entered promiscuous mode [ 657.047480][T27108] 8021q: adding VLAN 0 to HW filter on device bond12 [ 657.122486][T27108] 8021q: adding VLAN 0 to HW filter on device bond12 [ 657.134453][T27108] bond12: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 657.177847][T27108] bond12: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 657.208309][T27108] bond12: (slave ip6gre2): making interface the new active one [ 657.225346][T27108] ip6gre2: entered promiscuous mode [ 657.242192][T27108] bond12: (slave ip6gre2): Enslaving as an active interface with an up link [ 657.272246][T27128] syzkaller0: entered allmulticast mode [ 657.384356][T27128] syzkaller0 (unregistering): left allmulticast mode [ 657.476359][T27138] dummy0: left allmulticast mode [ 657.482395][T27138] dummy0: left promiscuous mode [ 657.487893][T27138] bridge0: port 3(dummy0) entered disabled state [ 657.523842][T27138] bridge_slave_0: left allmulticast mode [ 657.540776][T27138] bridge_slave_0: left promiscuous mode [ 657.570084][T27138] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.635167][T27138] bridge_slave_1: left allmulticast mode [ 657.644508][T27138] bridge_slave_1: left promiscuous mode [ 657.653346][T27138] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.667373][T27138] .`: (slave bond_slave_0): Releasing backup interface [ 657.680199][T27138] .`: (slave bond_slave_1): Releasing backup interface [ 657.726584][T27138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.744651][T27138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.780233][T27138] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 657.855451][T27168] openvswitch: netlink: Flow actions attr not present in new flow. [ 657.905793][T27136] veth0_macvtap: Caught tx_queue_len zero misconfig [ 658.053825][T27172] bridge_slave_0: default FDB implementation only supports local addresses [ 658.204354][T27176] bond10: option arp_all_targets: invalid value (18446744073709551613) [ 658.359415][T27176] bond10 (unregistering): Released all slaves [ 658.823304][T27214] delete_channel: no stack [ 658.912500][T27227] xt_CT: You must specify a L4 protocol and not use inversions on it [ 659.370496][T27260] bridge: RTM_NEWNEIGH with invalid ether address [ 659.917258][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 659.933974][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 659.946954][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 659.963806][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 659.975896][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 660.514563][T27308] __nla_validate_parse: 16 callbacks suppressed [ 660.514584][T27308] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5725'. [ 660.590160][T27306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5724'. [ 660.621557][T27311] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 660.659242][T27311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.836010][T27321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5730'. [ 661.028121][T27323] syzkaller0: entered promiscuous mode [ 661.036098][T27323] syzkaller0: entered allmulticast mode [ 662.089997][ T5848] Bluetooth: hci3: command tx timeout [ 662.963894][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 664.158841][ T5848] Bluetooth: hci3: command tx timeout [ 664.213811][T27289] vxcan1 speed is unknown, defaulting to 1000 [ 664.414028][T27354] geneve3: entered promiscuous mode [ 664.429733][T27354] geneve3: entered allmulticast mode [ 664.493465][T27359] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5742'. [ 664.496184][T27357] netlink: 'syz.1.5741': attribute type 25 has an invalid length. [ 664.600774][T27366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5742'. [ 664.612936][T27360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5743'. [ 665.232712][T27289] chnl_net:caif_netlink_parms(): no params data found [ 665.375261][T27400] sctp: [Deprecated]: syz.3.5751 (pid 27400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 665.375261][T27400] Use struct sctp_sack_info instead [ 665.400670][T27401] netlink: 408 bytes leftover after parsing attributes in process `syz.0.5750'. [ 665.469611][T27289] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.477065][T27289] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.499093][T27289] bridge_slave_0: entered allmulticast mode [ 665.530275][T27289] bridge_slave_0: entered promiscuous mode [ 665.560501][T27409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5752'. [ 665.580657][T27289] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.599165][T27289] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.619549][T27289] bridge_slave_1: entered allmulticast mode [ 665.630657][T27289] bridge_slave_1: entered promiscuous mode [ 665.751869][T27415] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 665.803637][T27289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.852951][T27289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.985815][T27289] team0: Port device team_slave_0 added [ 666.010938][T27289] team0: Port device team_slave_1 added [ 666.130965][T27289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.148079][T27450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5761'. [ 666.151123][T27289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.185929][T27289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.222219][T27289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.239397][ T5848] Bluetooth: hci3: command tx timeout [ 666.240288][T27289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.315026][T27289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.430292][T27289] hsr_slave_0: entered promiscuous mode [ 666.440658][T27289] hsr_slave_1: entered promiscuous mode [ 666.670655][T27472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5771'. [ 666.687360][T27474] netlink: 'syz.0.5772': attribute type 2 has an invalid length. [ 666.714410][T27472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5771'. [ 666.840485][T27482] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5773'. [ 666.975767][T27289] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.988172][T27289] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 667.001742][T27289] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.012548][T27289] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 667.179445][T27289] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.190625][T27289] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 667.220300][T27289] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.244450][T27289] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 667.305933][T27507] netlink: 5324 bytes leftover after parsing attributes in process `syz.4.5781'. [ 667.321172][T27509] netlink: 5324 bytes leftover after parsing attributes in process `syz.4.5781'. [ 667.420145][T27289] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.441500][T27289] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 667.453842][T27289] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.465018][T27289] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 667.574901][T27289] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.599910][T27289] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 667.611107][T27289] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.622490][T27289] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 667.959933][T27532] netlink: 'syz.0.5785': attribute type 1 has an invalid length. [ 668.048468][T27537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5786'. [ 668.059752][T27537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5786'. [ 668.070591][T27536] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5787'. [ 668.234456][T27289] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 668.291602][T27289] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 668.311102][ T5848] Bluetooth: hci3: command tx timeout [ 668.321762][T27289] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 668.363082][T27289] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 668.395865][T27289] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 668.441495][T27289] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 668.464717][T27289] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 668.495230][T27289] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 668.803473][T27578] netlink: 'syz.1.5800': attribute type 1 has an invalid length. [ 668.881689][T27578] 8021q: adding VLAN 0 to HW filter on device bond7 [ 668.980491][T27289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.096666][T27597] netlink: 'syz.0.5804': attribute type 1 has an invalid length. [ 669.105632][T27597] netlink: 'syz.0.5804': attribute type 7 has an invalid length. [ 669.121329][T27597] netlink: 'syz.0.5804': attribute type 8 has an invalid length. [ 669.143065][T27597] NCSI netlink: No device for ifindex 65584 [ 669.283601][T27289] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.357977][T16702] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.365296][T16702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.406481][T16702] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.413710][T16702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.847307][T27626] hsr_slave_0 (unregistering): left promiscuous mode [ 670.040255][T27289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.090908][T27638] netlink: 'syz.0.5814': attribute type 4 has an invalid length. [ 670.173001][T27289] veth0_vlan: entered promiscuous mode [ 670.201855][T27289] veth1_vlan: entered promiscuous mode [ 670.324612][T27289] veth0_macvtap: entered promiscuous mode [ 670.387947][T27289] veth1_macvtap: entered promiscuous mode [ 670.388868][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 670.475776][T27289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.492364][T27289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.506178][T16702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.587678][T16702] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.600508][T16702] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.625647][T16702] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.974268][T27686] __nla_validate_parse: 38 callbacks suppressed [ 670.974283][T27686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5826'. [ 673.495614][T27661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.587997][T16701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.617427][T16701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.738288][T27693] Bluetooth: MGMT ver 1.23 [ 673.745603][ T6091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.771398][ T6091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.033966][T27716] netlink: 'syz.3.5834': attribute type 2 has an invalid length. [ 674.042513][T27716] netlink: 'syz.3.5834': attribute type 1 has an invalid length. [ 674.055431][T27716] netlink: 'syz.3.5834': attribute type 2 has an invalid length. [ 674.064744][T27716] netlink: 'syz.3.5834': attribute type 2 has an invalid length. [ 674.127884][T27722] netlink: 300 bytes leftover after parsing attributes in process `syz.4.5837'. [ 674.196203][T27724] netlink: 'syz.0.5838': attribute type 1 has an invalid length. [ 674.205722][T27724] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5838'. [ 674.219260][T27724] netlink: 658 bytes leftover after parsing attributes in process `syz.0.5838'. [ 674.233387][ T1679] block nbd4: Possible stuck request ffff8880271b5080: control (read@0,1024B). Runtime 150 seconds [ 674.246589][ T1679] block nbd4: Possible stuck request ffff8880271b5240: control (read@1024,1024B). Runtime 150 seconds [ 674.259356][ T1679] block nbd4: Possible stuck request ffff8880271b5400: control (read@2048,1024B). Runtime 150 seconds [ 674.271229][ T1679] block nbd4: Possible stuck request ffff8880271b55c0: control (read@3072,1024B). Runtime 150 seconds [ 674.282922][T27724] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5838'. [ 674.577084][T27752] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5844'. [ 674.590269][T27742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 674.597288][T27752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5844'. [ 674.610485][T27746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 674.680834][T27759] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.5845'. [ 674.752358][T27767] netlink: 'syz.3.5847': attribute type 1 has an invalid length. [ 674.895567][T27769] syzkaller0: entered promiscuous mode [ 674.901441][T27772] netlink: 11 bytes leftover after parsing attributes in process `syz.3.5849'. [ 674.931074][T27769] syzkaller0: entered allmulticast mode [ 674.932327][T27773] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5850'. [ 675.225536][T27778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.246829][T27778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.275750][T27778] bond0 (unregistering): Released all slaves [ 675.488376][T27800] xt_CT: No such helper "syz1" [ 675.489600][T27795] syz.0.5856: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 675.519432][T27795] CPU: 1 UID: 0 PID: 27795 Comm: syz.0.5856 Not tainted syzkaller #0 PREEMPT(full) [ 675.519489][T27795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 675.519515][T27795] Call Trace: [ 675.519531][T27795] [ 675.519548][T27795] dump_stack_lvl+0xe8/0x150 [ 675.519593][T27795] warn_alloc+0x249/0x340 [ 675.519638][T27795] ? stack_trace_save+0xa9/0x100 [ 675.519671][T27795] ? __pfx_warn_alloc+0x10/0x10 [ 675.519704][T27795] ? kasan_save_track+0x4f/0x80 [ 675.519726][T27795] ? kasan_save_track+0x3e/0x80 [ 675.519748][T27795] ? __kasan_kmalloc+0x93/0xb0 [ 675.519770][T27795] ? __kmalloc_cache_noprof+0x31c/0x660 [ 675.519789][T27795] ? xskq_create+0x56/0x170 [ 675.519813][T27795] ? xsk_setsockopt+0x54c/0x990 [ 675.519834][T27795] ? do_sock_setsockopt+0x17c/0x1b0 [ 675.519855][T27795] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 675.519875][T27795] ? do_syscall_64+0x15f/0xf80 [ 675.519905][T27795] __vmalloc_node_range_noprof+0x132/0x1750 [ 675.519963][T27795] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 675.519994][T27795] ? __kasan_kmalloc+0x93/0xb0 [ 675.520023][T27795] vmalloc_user_noprof+0xad/0xe0 [ 675.520048][T27795] ? xskq_create+0xbf/0x170 [ 675.520074][T27795] xskq_create+0xbf/0x170 [ 675.520102][T27795] xsk_init_queue+0x8a/0xe0 [ 675.520129][T27795] xsk_setsockopt+0x54c/0x990 [ 675.520156][T27795] ? __pfx_xsk_setsockopt+0x10/0x10 [ 675.520179][T27795] ? __pfx_aa_sk_perm+0x10/0x10 [ 675.520215][T27795] ? aa_sock_opt_perm+0xff/0x1a0 [ 675.520240][T27795] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 675.520264][T27795] ? __pfx_xsk_setsockopt+0x10/0x10 [ 675.520289][T27795] do_sock_setsockopt+0x17c/0x1b0 [ 675.520316][T27795] __x64_sys_setsockopt+0x13d/0x1b0 [ 675.520346][T27795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.520368][T27795] do_syscall_64+0x15f/0xf80 [ 675.520397][T27795] ? clear_bhb_loop+0x40/0x90 [ 675.520423][T27795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.520444][T27795] RIP: 0033:0x7f0cccb9cdd9 [ 675.520464][T27795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.520483][T27795] RSP: 002b:00007f0ccdacc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 675.520507][T27795] RAX: ffffffffffffffda RBX: 00007f0ccce15fa0 RCX: 00007f0cccb9cdd9 [ 675.520523][T27795] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 675.520536][T27795] RBP: 00007f0cccc32d69 R08: 0000000000000004 R09: 0000000000000000 [ 675.520549][T27795] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.520562][T27795] R13: 00007f0ccce16038 R14: 00007f0ccce15fa0 R15: 00007fffaa4ab698 [ 675.520596][T27795] [ 675.521282][T27795] Mem-Info: [ 675.715342][T27806] bond0: Error: Cannot enslave bond to itself. [ 675.749935][T27795] active_anon:5991 inactive_anon:0 isolated_anon:0 [ 675.749935][T27795] active_file:3095 inactive_file:40358 isolated_file:0 [ 675.749935][T27795] unevictable:768 dirty:72 writeback:0 [ 675.749935][T27795] slab_reclaimable:12475 slab_unreclaimable:127515 [ 675.749935][T27795] mapped:29686 shmem:1375 pagetables:3599 [ 675.749935][T27795] sec_pagetables:0 bounce:0 [ 675.749935][T27795] kernel_misc_reclaimable:0 [ 675.749935][T27795] free:1277636 free_pcp:22989 free_cma:0 [ 675.878376][T27795] Node 0 active_anon:24060kB inactive_anon:0kB active_file:12380kB inactive_file:161228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:61328kB dirty:284kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15812kB pagetables:14248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 675.931828][T27795] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:57344kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 675.980593][T27795] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 676.013237][T27795] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 676.019870][T27795] Node 0 DMA32 free:1349960kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24160kB inactive_anon:0kB active_file:12380kB inactive_file:161228kB unevictable:1536kB writepending:284kB zspages:0kB present:3129332kB managed:2550864kB mlocked:0kB bounce:0kB free_pcp:37264kB local_pcp:16808kB free_cma:0kB [ 676.057087][T27795] lowmem_reserve[]: 0 0 0 0 0 [ 676.076768][T27813] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 676.079217][T27795] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:588kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 676.122582][T27795] lowmem_reserve[]: 0 0 0 0 0 [ 676.127658][T27795] Node 1 Normal free:3749560kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:54916kB local_pcp:25272kB free_cma:0kB [ 676.176426][T27813] bond0 (unregistering): Released all slaves [ 676.217669][T27795] lowmem_reserve[]: 0 0 0 0 0 [ 676.235293][T27795] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 676.257062][T27795] Node 0 DMA32: 9322*4kB (UM) 7236*8kB (UME) 3864*16kB (UME) 172*32kB (UME) 465*64kB (UME) 1252*128kB (UME) 880*256kB (UM) 568*512kB (UM) 316*1024kB (UME) 73*2048kB (UM) 2*4096kB (U) = 1349896kB [ 676.298879][T27795] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 676.311799][T27795] Node 1 Normal: 3*4kB (U) 14*8kB (UM) 13*16kB (UM) 7*32kB (UM) 7*64kB (UM) 8*128kB (UM) 7*256kB (UM) 10*512kB (UM) 3*1024kB (UM) 5*2048kB (U) 910*4096kB (UM) = 3749612kB [ 676.329922][T27795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.340689][T27795] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 676.350996][T27795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.361447][T27795] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 676.372578][T27795] 44823 total pagecache pages [ 676.381530][T27795] 0 pages in swap cache [ 676.402563][T27795] Free swap = 124996kB [ 676.418868][T27795] Total swap = 124996kB [ 676.423122][T27795] 2097051 pages RAM [ 676.427032][T27795] 0 pages HighMem/MovableOnly [ 676.438925][T27795] 427573 pages reserved [ 676.445877][T27795] 0 pages cma reserved [ 676.464754][T27829] __nla_validate_parse: 3 callbacks suppressed [ 676.464771][T27829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5867'. [ 676.504676][T27832] [ 676.507059][T27832] ====================================================== [ 676.514084][T27832] WARNING: possible circular locking dependency detected [ 676.521110][T27832] syzkaller #0 Not tainted [ 676.525522][T27832] ------------------------------------------------------ [ 676.532610][T27832] syz.4.5868/27832 is trying to acquire lock: [ 676.538666][T27832] ffffffff8ff61938 (nr_node_list_lock){+.-.}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 676.548148][T27832] [ 676.548148][T27832] but task is already holding lock: [ 676.555497][T27832] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 676.565070][T27832] [ 676.565070][T27832] which lock already depends on the new lock. [ 676.565070][T27832] [ 676.575480][T27832] [ 676.575480][T27832] the existing dependency chain (in reverse order) is: [ 676.584505][T27832] [ 676.584505][T27832] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 676.592431][T27832] _raw_spin_lock_bh+0x36/0x50 [ 676.597717][T27832] nr_rt_ioctl+0x40c/0xf90 [ 676.602645][T27832] sock_do_ioctl+0x101/0x320 [ 676.607749][T27832] sock_ioctl+0x5c6/0x7f0 [ 676.612638][T27832] __se_sys_ioctl+0xfc/0x170 [ 676.617756][T27832] do_syscall_64+0x15f/0xf80 [ 676.622878][T27832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.629286][T27832] [ 676.629286][T27832] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 676.637286][T27832] _raw_spin_lock_bh+0x36/0x50 [ 676.642586][T27832] nr_rt_ioctl+0x215/0xf90 [ 676.647521][T27832] sock_do_ioctl+0x101/0x320 [ 676.652633][T27832] sock_ioctl+0x5c6/0x7f0 [ 676.657485][T27832] __se_sys_ioctl+0xfc/0x170 [ 676.662597][T27832] do_syscall_64+0x15f/0xf80 [ 676.667727][T27832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.674136][T27832] [ 676.674136][T27832] -> #0 (nr_node_list_lock){+.-.}-{3:3}: [ 676.681963][T27832] __lock_acquire+0x15a5/0x2cf0 [ 676.687364][T27832] lock_acquire+0x106/0x350 [ 676.692385][T27832] _raw_spin_lock_bh+0x36/0x50 [ 676.697672][T27832] nr_rt_device_down+0xbe/0x860 [ 676.703050][T27832] nr_device_event+0x137/0x150 [ 676.708352][T27832] notifier_call_chain+0x1ad/0x3d0 [ 676.713983][T27832] __dev_notify_flags+0x16d/0x310 [ 676.719530][T27832] netif_change_flags+0xe8/0x1a0 [ 676.724982][T27832] dev_change_flags+0x130/0x270 [ 676.730355][T27832] dev_ioctl+0x7b4/0x1150 [ 676.735204][T27832] sock_do_ioctl+0x23e/0x320 [ 676.740310][T27832] sock_ioctl+0x5c6/0x7f0 [ 676.745158][T27832] __se_sys_ioctl+0xfc/0x170 [ 676.750269][T27832] do_syscall_64+0x15f/0xf80 [ 676.755383][T27832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.761786][T27832] [ 676.761786][T27832] other info that might help us debug this: [ 676.761786][T27832] [ 676.771998][T27832] Chain exists of: [ 676.771998][T27832] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 676.771998][T27832] [ 676.785901][T27832] Possible unsafe locking scenario: [ 676.785901][T27832] [ 676.793354][T27832] CPU0 CPU1 [ 676.798707][T27832] ---- ---- [ 676.804055][T27832] lock(nr_neigh_list_lock); [ 676.808729][T27832] lock(&nr_node->node_lock); [ 676.816025][T27832] lock(nr_neigh_list_lock); [ 676.823216][T27832] lock(nr_node_list_lock); [ 676.827892][T27832] [ 676.827892][T27832] *** DEADLOCK *** [ 676.827892][T27832] [ 676.836020][T27832] 2 locks held by syz.4.5868/27832: [ 676.841206][T27832] #0: ffffffff8fde4240 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 676.850008][T27832] #1: ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 676.860017][T27832] [ 676.860017][T27832] stack backtrace: [ 676.865897][T27832] CPU: 0 UID: 0 PID: 27832 Comm: syz.4.5868 Not tainted syzkaller #0 PREEMPT(full) [ 676.865917][T27832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 676.865927][T27832] Call Trace: [ 676.865936][T27832] [ 676.865943][T27832] dump_stack_lvl+0xe8/0x150 [ 676.865971][T27832] print_circular_bug+0x2e1/0x300 [ 676.865992][T27832] check_noncircular+0x12e/0x150 [ 676.866012][T27832] __lock_acquire+0x15a5/0x2cf0 [ 676.866039][T27832] ? __lock_acquire+0x6b5/0x2cf0 [ 676.866063][T27832] ? dsa_user_netdevice_event+0x495/0x2850 [ 676.866084][T27832] ? packet_notifier+0x121/0xf70 [ 676.866104][T27832] ? nr_rt_device_down+0xbe/0x860 [ 676.866118][T27832] lock_acquire+0x106/0x350 [ 676.866141][T27832] ? nr_rt_device_down+0xbe/0x860 [ 676.866156][T27832] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 676.866177][T27832] ? nr_rt_device_down+0xbe/0x860 [ 676.866191][T27832] _raw_spin_lock_bh+0x36/0x50 [ 676.866211][T27832] ? nr_rt_device_down+0xbe/0x860 [ 676.866224][T27832] nr_rt_device_down+0xbe/0x860 [ 676.866238][T27832] ? nr_device_event+0x12f/0x150 [ 676.866264][T27832] nr_device_event+0x137/0x150 [ 676.866287][T27832] notifier_call_chain+0x1ad/0x3d0 [ 676.866307][T27832] __dev_notify_flags+0x16d/0x310 [ 676.866324][T27832] ? __pfx___dev_notify_flags+0x10/0x10 [ 676.866339][T27832] ? __dev_change_flags+0x5a0/0x7e0 [ 676.866356][T27832] ? __pfx___dev_change_flags+0x10/0x10 [ 676.866372][T27832] ? full_name_hash+0x92/0xe0 [ 676.866389][T27832] netif_change_flags+0xe8/0x1a0 [ 676.866406][T27832] dev_change_flags+0x130/0x270 [ 676.866423][T27832] dev_ioctl+0x7b4/0x1150 [ 676.866448][T27832] sock_do_ioctl+0x23e/0x320 [ 676.866470][T27832] ? __pfx_sock_do_ioctl+0x10/0x10 [ 676.866489][T27832] ? do_futex+0x395/0x420 [ 676.866510][T27832] sock_ioctl+0x5c6/0x7f0 [ 676.866529][T27832] ? __pfx_sock_ioctl+0x10/0x10 [ 676.866548][T27832] ? __fget_files+0x2a/0x420 [ 676.866563][T27832] ? __fget_files+0x3a0/0x420 [ 676.866578][T27832] ? __fget_files+0x2a/0x420 [ 676.866594][T27832] ? bpf_lsm_file_ioctl+0x9/0x20 [ 676.866615][T27832] ? __pfx_sock_ioctl+0x10/0x10 [ 676.866634][T27832] __se_sys_ioctl+0xfc/0x170 [ 676.866654][T27832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.866671][T27832] do_syscall_64+0x15f/0xf80 [ 676.866693][T27832] ? trace_irq_disable+0x3b/0x140 [ 676.866713][T27832] ? clear_bhb_loop+0x40/0x90 [ 676.866730][T27832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.866747][T27832] RIP: 0033:0x7f785e59cdd9 [ 676.866762][T27832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.866777][T27832] RSP: 002b:00007f785c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 676.866794][T27832] RAX: ffffffffffffffda RBX: 00007f785e815fa0 RCX: 00007f785e59cdd9 [ 676.866806][T27832] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000007 [ 676.866817][T27832] RBP: 00007f785e632d69 R08: 0000000000000000 R09: 0000000000000000 [ 676.866827][T27832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.866837][T27832] R13: 00007f785e816038 R14: 00007f785e815fa0 R15: 00007ffdf9495e58 [ 676.866855][T27832] [ 685.750417][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.757575][ T1315] clip:clip_start_xmit: skb_dst(skb) == NULL