last executing test programs: 5.229965397s ago: executing program 2 (id=5334): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@uprobe_multi={&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=[0x5, 0xea, 0x10, 0x2], &(0x7f0000000080)=[0x80, 0x0, 0x5, 0x4, 0x3], 0xb0c, 0x4}}, 0x40) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0x20000000) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x9c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x80, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6488}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={r1, &(0x7f0000000200)='}%#\x00', 0x4000, &(0x7f0000000240)={@_ha_fsid={[0x8]}, {0x0, 0x5, 0x7fff, 0x8}}, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=0x7}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001800010000000000000000001d0100000800050000fd000008000900", @ANYRES32=0x0, @ANYBLOB="05000d000100000008000a00", @ANYRES32=0x0, @ANYBLOB="15000100000000000000e2020000000000000070040000000c000b00000000000000000008"], 0x60}}, 0x0) 4.914196872s ago: executing program 2 (id=5338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x60, 0x0, &(0x7f0000000f00)) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {0x0, 0x0, 0x0, 0x401}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xe68}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d10fffff500e9ecffffffffffffff0000000a0001006f776e65720000000c00018008000100647570000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4048010) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa4, r7, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x52}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x82}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfb}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x34d}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x155}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x229}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, [{0xb}, {0x48, 0x1}, {0x2}, {0x5}, {0x16, 0x1}, {0x9, 0x1}, {0x0, 0x1}, {0x36, 0x1}, {0x24, 0x1}, {0x1b, 0x1}, {0x1, 0x1}, {0x12}, {0xc, 0x1}, {0x1b}, {0x6c}, {0xb}, {0x60}, {0x1b, 0x1}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7e21}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r7, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x3ff]}, @NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_b, @broadcast, @random="49e91d007127", {0x4, 0x4}}, 0x3f, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x90, 0x2, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x14, 0x7, 0xffffffff, 0xd, 0x3ff]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x191}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x3ec}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$SEG6_CMD_DUMPHMAC(r10, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r11, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x886, 0x9, 0x8]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) 4.727143131s ago: executing program 2 (id=5342): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f00000001c0), 0x4) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x4, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r1, 0x118, 0x1, 0x0, &(0x7f00000003c0)) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000100080c10000000000000000000", 0x58}], 0x1) 4.608838026s ago: executing program 2 (id=5345): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff0000070000080900020073797a3200000000050001"], 0x4c}}, 0x0) write$nci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='p\x00'], 0xc) 4.517982255s ago: executing program 4 (id=5348): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x44, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x44}}, 0x20000001) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r6) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x54, r12, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r14 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r14, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) (async) bind$inet(r14, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x7c, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x7c}}, 0x44000) (async) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) r16 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r16, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r15, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1f40, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 4.365522473s ago: executing program 3 (id=5350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000680)=""/180, 0xb4}], 0x1, 0x6, 0x7) (async, rerun: 64) socket$inet6(0x10, 0x2, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="b9ff03076804268c989e140088a8", 0x0, 0x4ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (rerun: 64) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) (async) setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0204965bf0"], 0x18) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000080)={r10, @in6={{0xa, 0x4e23, 0x4004, @empty, 0xc}}, 0x9, 0xb73}, 0x90) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={r10, 0x3c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0xfffffff9, @local, 0x5}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000300)=0x10) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0xff, @remote, @local, {[], @echo_request}}}}}, 0x0) (rerun: 32) 4.339487258s ago: executing program 1 (id=5351): r0 = socket(0x28, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x41, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) getsockopt$inet6_tcp_int(r2, 0x6, 0x7, 0x0, &(0x7f00000003c0)) (async) epoll_create(0x11ffffe) epoll_create(0x7) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1}, 0x10002) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) (async) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000004d0af0015d3677f99000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000040a00000a2c000000030a0fdb0000000000000000140020091400000011000000000000000000000100000a003d2d76a2eaa52462da9a634738bea99ecb6ba5d3e65c7dc3d1d2ccc6f1dfda9dcc92372131273cd456a169bebf8b2f4acda6db54b1cc0cc344424f1dc1eb8450de768062110118fffc1dbfcd89d8c59d8db6fb45c997bfa539aad9b401fc92f9a0b7732d83dd805d30cee349d3c837d30f5e283669b8dfb03377a9b9ce6a"], 0x54}, 0x1, 0x0, 0x0, 0x4040850}, 0x24000040) (async, rerun: 64) readv(r6, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) (async, rerun: 64) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x400448c9, &(0x7f00000000c0)={'wlan0\x00', 0x1}) (async) getsockopt$nfc_llcp(r5, 0x118, 0x0, &(0x7f00000002c0)=""/163, 0xa3) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x2000a212}) 4.23080877s ago: executing program 3 (id=5352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)={0x234, 0x2e, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x222, 0x10f3, 0x0, 0x1, [@nested={0x18, 0xe5, 0x0, 0x1, [@typed={0x14, 0xda, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @nested={0x13a, 0x131, 0x0, 0x1, [@generic="cc39cb9db042474549524889905886009171313736215baae9fdfd00355318c9977e4535d6b232b37dc0067392db2608b279505c77b74983531f58fce686effe61b609487abb81bc75d4e67ca3e055d72cb435ab6f1639ffd15c57dfcf7a0a6386e7afb30e5a0ce79b72d75913", @typed={0x8, 0x67, 0x0, 0x0, @ipv4=@broadcast}, @generic="8a1413e08e03a3389678ab2957a52405dabfa582c12516d13e7b20e21bec94abd3cc16f391bb36c846adb1a2dde9e7c38240b38b72f3f4f667a4f434dde0b0aeb0a2f56f7fd8eba140f139432ea7537f6f3f749d8dfca2af8f34aebbe449c0fda2131ad1c773103d88ebb282185baceaa3003f43f6993418a06f3f7a0a4a7342638a92486ebfdd5f632e95a74f510d67c3ea24374ce3676f13e058fe6d39426ccf2a0bf4c7e7ebab5b43d4756cbc7775fed402e1e066532afc62323a1bacacdf62"]}, @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@multicast2}, @generic="053b3a0b0a3176fa81d5dd205df77d46f70df08bc18894624e7bffe90164484395675b08b5cb590c676c2142be91e216739d0690e72a5925af7fb13fb2a4be76902e2211229172bd7c360f6d603e8eff61b35dd6ff34fe58dc5d3ba23ebb70b0d2f8d302084ad3e98ec61864d2cb9d0647451ab80d4f325eadc8d7ad364274f68cf6f7874b0d0c1b6442967dae092f893ad27643e311bc94a206618e9e36515064a0fab336692db34956ed512f98d73cf478601a", @generic="a911a5242bb4db87e697fe82a477"]}]}, 0x234}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000640), &(0x7f0000000680)=r4}, 0x20) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc0008c0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r8, 0x1, 0xc, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 4.212877338s ago: executing program 1 (id=5353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 4.128074565s ago: executing program 1 (id=5354): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) accept4$x25(r2, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x80000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) (async) r5 = socket(0x1, 0x803, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022bbd7000fbdbdf25050000001400018006790e0001000800f9ff070003007f00"], 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000000) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001980)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x20000, 0x32}, @in=@broadcast, {0x800, 0x0, 0x800000000, 0x0, 0x8, 0x0, 0x0, 0xf}, {0xffffffffffffffff, 0x3, 0x8a}, {0x0, 0x21}, 0x70bd28, 0x0, 0xa}, 0x0, 0xfffffffe}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x9}}]}, 0x104}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) 4.034606948s ago: executing program 1 (id=5355): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x400, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x5}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c801}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20000855}, 0x0) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x56, &(0x7f0000000340)={@random="c5a500429b3a", @remote, @void, {@canfd={0xd, {{0x0, 0x1, 0x1, 0x1}, 0x2c, 0x0, 0x0, 0x0, "0cb64de8c9eb25266a59adc6fcc1e25a9f29101dcf14c691eceece0b057c74746feb3b114ab2260e9d9aea79648d2b89adef59ed4c9b58bbc1f13e94eea8dacc"}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000380), 0x0}, 0x20) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) (async, rerun: 64) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) (rerun: 64) 3.754482523s ago: executing program 0 (id=5358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0x1, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {0xffe0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x8c8, @random="d409abdf8452", 'veth0_vlan\x00'}}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xe, &(0x7f0000f59ffc)=0xc, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000000611468000000000005000000000000009500000000000000779f9fa2e91cfa4af1ccc92c5a388253597a5af4a7db3b1ebf2645589098a327d63ecbd5e23c039b1c21acc73ea3ce5a35ff5c8d9aecbb8bbb1ce5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r6 = socket(0x2b, 0x1, 0x0) listen(r6, 0x0) close(0x4) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) 1.445981748s ago: executing program 3 (id=5359): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x6e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r7}, 0x38) r8 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r4, r6, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) syz_emit_ethernet(0xfdef, &(0x7f0000000200)={@empty, @remote, @val={@val={0x88a8, 0x4}, {0x8100, 0x2, 0x1, 0x4}}, {@mpls_uc}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000100001000000000000000000ac574400000000000000007f000001000000000000000000000000000000000000000002000000000a00ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x180}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) write(r10, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}, 0x1, 0x0, 0x0, 0x131e284dd61db437}, 0x0) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000200)=@req3={0x6, 0x5, 0x3d12, 0x81, 0xffffffff, 0x40, 0x80}, 0x1c) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0x2, &(0x7f0000000080)=0x19, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r13, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x4f) sendmsg$nl_route_sched(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) 1.445521731s ago: executing program 4 (id=5360): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000), 0x4) r1 = socket(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x0, 0x10001}, 0xc) 1.42209324s ago: executing program 2 (id=5361): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x4e23, @broadcast}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv4_delrule={0x4c, 0x21, 0x300, 0x70bd2d, 0x25dfdbfe, {0x2, 0x14, 0x0, 0x5, 0x47, 0x0, 0x0, 0x3, 0x10000}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x80000001}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7}, @FRA_FLOW={0x8, 0xb, 0x1fe}, @FRA_FLOW={0x8, 0xb, 0xffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r6, 0x110, 0x7, 0x0, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r9, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x4000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x89088000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) close(r0) 1.375037138s ago: executing program 0 (id=5362): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x2c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002d077000fbdbdf25020000000800010600000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 1.374625324s ago: executing program 1 (id=5363): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001b80)={'dummy0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9100000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.210687963s ago: executing program 4 (id=5364): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getpeername(r0, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, &(0x7f0000000140)=0x80) (async) r1 = socket(0x2, 0x3, 0x7) getsockopt(r1, 0xff, 0x100000000000001, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r2, r3, 0x0, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x10000000000}, 0x0, 0x200}, [@tmpl={0x104, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1bc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x25, 0x80000, 0x7) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x537b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) (async) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x80, 0x2}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000001855042b3bab0e61127400000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) 1.153866716s ago: executing program 0 (id=5365): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x40840) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x158}, 0x81edf542117d6e93) 1.04289648s ago: executing program 0 (id=5366): socket$netlink(0x10, 0x3, 0x9) socket$kcm(0xf, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="17ae0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r7, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x45, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bind$xdp(r8, &(0x7f0000000600)={0x2c, 0x7, r9, 0x1e}, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r11, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaa0700000000000000000086dd600a843500142f00fe8000000000020000000000000000bbfe8000000000000000000000000000aa000022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) socket$netlink(0x10, 0x3, 0x9) (async) socket$kcm(0xf, 0x3, 0x2) (async) socket$inet6(0xa, 0x3, 0x7) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="17ae0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$xdp(0x2c, 0x3, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r7, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x45, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) bind$xdp(r8, &(0x7f0000000600)={0x2c, 0x7, r9, 0x1e}, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r11, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) (async) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaa0700000000000000000086dd600a843500142f00fe8000000000020000000000000000bbfe8000000000000000000000000000aa000022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) (async) 1.04232149s ago: executing program 4 (id=5367): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 32) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xd, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe00, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x4c466994d56c53cd}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) 1.042020425s ago: executing program 1 (id=5368): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008054) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x40080d4) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x17c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0xf4, 0x13, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [{0xd, 0x1, '{](\\\\/\xc0/*'}, {0x5, 0x1, ')'}, {0x9, 0x1, '$-+[*'}, {0x4}, {0x4}, {0x4}, {0x5, 0x1, '*'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x6, 0x1, '%C'}, {0x4}, {0x4}, {0x5, 0x1, '#'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x6, 0x1, '&&'}, {0x8, 0x1, '$/\'('}, {0xd, 0x1, '@)$\'{-[-!'}, {0x5, 0x1, '&'}]}, {0x3c, 0x0, 0x0, 0x1, [{0x4}, {0xd, 0x1, '$!@$]!^+!'}, {0x9, 0x1, '/&[\'#'}, {0xb, 0x1, ':\xab&\\!}$'}, {0x4b, 0x1, '.(%G-#-\''}]}, {0x30, 0x0, 0x0, 0x1, [{0x5, 0x1, '!'}, {0x4}, {0x4}, {0x7, 0x1, '--$'}, {0xc, 0x1, '$@]-:+)('}, {0x6, 0x1, '\'&'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_LLC_SDP={0x54, 0x13, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [{0xd, 0x1, '{]!%,/!\xee{'}, {0x9, 0x1, '@{].:'}, {0x4}, {0x5, 0x1, '\x1c'}, {0x7, 0x1, '})#'}, {0x5, 0x1, '@'}, {0x8, 0x1, '+@#@'}, {0x8, 0x1, '--%['}]}, {0x4}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40000}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d00792984"], 0x4c}}, 0x0) 923.483907ms ago: executing program 0 (id=5369): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001380)=[{{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)="723aa5669d6534e4069306556265a52d7b4979d14adbb3c76ab355fedcc87612f0f5", 0x25}, {&(0x7f00000008c0)="c23c31cc005949df9c3658d49469a5d9f7b75e57db1dd8e048dc77391e6f98f12d2ae5086ab922aa99faa10ab8c63a35cc1fcd2a91f1b5decaaae47dd93840897b55e1b7fc26f8dcec7273b7ef83a79295149a8a86df3b96136aa682dca6eb6d374e2f3f89566de2e177430bc165f6a00ea69cb9", 0x74}, {&(0x7f0000000940)="9ef74240a0e15251771c6030011864e9be14f804b512ac5a70158b1f144755b19c9f249b59d8e99cea6177b28d0cf7", 0xffffffb3}], 0x3, 0x0, 0x0, 0x20084044}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a40)="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", 0xfd}], 0x1}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000e40)="00a52754418d60845891f171de02b260178bb1c8bed61cf7d7c45894fed6c5128fb7860bdc03c3276d902a20fc0ff4796350bf2edbcf50c91ffc791b9588e666998c52ef9c0af37edd10731a1696e4f7a2955f25516f5012335c768acd9a9ee23898ed09cdb1abbd37c658e058f7c8", 0x6f}], 0x1, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="dc5aa9bcbf900b50b49e70a29077f17300a74f1d185d09941f2e48690bd59f9a13dfe5925e763c6d6cf4dbc2dab1dbb08f6ab89c843b7f633364ca0ee12ccb26f93ae74cc85f72c5f15ecbe413bfc2745e0127dcf44628d27d7d1b5b0b3459cfb79e2583be041efd9ce2afb953813cbf2f29", 0x72}], 0x1, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xb8}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001100)="21abb9324d4bb0e142c60944b8f4722af52b9ab909390262a5d6c32aba6fe9eee6016da156e93e257e23ece67f6e74b254c75e76a74a", 0x36}, {&(0x7f0000001140)="d92a4161e20fd18389f3347fc4a8db3900829b87945e91344d0c440a63262e30f6c1e1e39a527d22abceb7b783c115533e68681ca0ffbcfe4d04f890394456034e2f0f5e6259bc1119aceb1d2e079b8da4510a797c07685febda2c69cbc5533e701b1c5df2835bbb0e49697f72c19937f703fe94ae6ff9eb2ed9cb6d6e7fa72e64a6d4745413a1905f24acfeaeaf02a2f61575f13a824fbdfb1f15dd6563ff0971a07850a71f758f764333fc4a935df29c81f8f75bb9ae3a10d11e9e860b79d246866ee467fbbcaf52ce94aff48eed0b25357a507547b7949a6ab041764d3962878bbf66864d53560492cbd40c9d4ab0f450", 0xf2}, {&(0x7f0000001240)="81c1cb152774ad5120d3269d2a892740ccc92b0f67e099aa80e62e5c0d7e3da5d7fa714dce56bcc5cd", 0x29}], 0x3, &(0x7f00000012c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}], 0x5, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000002ac0)={{0xffffffffffffffff, &(0x7f00000001c0)='-++])]%(\x00', 0x4000, &(0x7f00000002c0)={@_ha_fsid={[0x655, 0x5]}, {0x3, 0x4, 0x0, 0x7dc}}, 0x3, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000380)=0x6}, {[0x8, 0x5, 0x0, 0x1]}, 0xb13, 0x1000, &(0x7f0000001ac0)=""/4096}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000002b40)=[@timestamp, @sack_perm, @mss={0x2, 0x858}], 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c", 0x0, 0x40f2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0003007ffffffe"], 0x98}, 0x1, 0x0, 0x0, 0x4801}, 0x4000) 892.407546ms ago: executing program 4 (id=5370): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="110000000400000004000000feffffff00000000", @ANYRES32, @ANYBLOB="00000000000000000b821dc31a5d2e39abbf7f1fe600000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 774.684242ms ago: executing program 3 (id=5371): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x2a, 0x0, 0x0, 0x800001}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000100800"], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000101840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff050000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10}, 0x94) 771.527529ms ago: executing program 4 (id=5372): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r3 = socket(0x2c, 0x4, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000340)=@netrom={'nr', 0x0}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd70000300000007000000050024000700000014000800"/42], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='p\x00'], 0xc) 753.987183ms ago: executing program 3 (id=5373): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r2}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r2) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r2}, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 669.875664ms ago: executing program 3 (id=5374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}}, 0x2004c840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_DIOINFO(r5, 0x800c581e, &(0x7f0000000100)) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000180)={0x10, 0x0, "f4fae4717c36f85ab84a735f5342efbd"}) r7 = socket(0x14, 0x3, 0x2000004) ioctl$sock_SIOCGIFINDEX(r7, 0x61d0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', 0x0}) recvfrom$packet(r7, &(0x7f00000002c0)=""/183, 0xb7, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2004c8a1}, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x26c, 0x72, 0x200, 0x0, 0x0, {0x2, 0x3}, [@nested={0x258, 0x133, 0x0, 0x1, [@generic="d85c57a2384a24de1de3db964aa7930603e89b13fc9957e947f40dfe506de811ac3c6fd01e4008fdf9ff115b59a0399dde30f3a79a64bd1c8511f66c9738bc5178bc8222738674cf8d430197a977544bcc9d2c4f5151c0ffffffc18b7acf393283bf050000000073146d200eea456648ab6eab6af242a0000000eeadbebfb8633dca4a8d1da8540a", @nested={0xbf, 0xab, 0x0, 0x1, [@nested={0x4, 0x14f}, @generic="74af53d63930a1577bff35d694363a621f0a9297942038685a8a9b2011327a80b0cb2728f0a4d5fe9a98a1c1439a4a6960cdf5c9164cf2799f86be994137fc147d846df5f6749f2808523a8a0bced6e4989419965a0506055e8fa7f8769e3a1ac2a0781ab43cffc78e5157169b78c246bd699c1eb9ce6eeed194689f1c0d5d39c6995250df16e8cfff294ca25de39e18ba83ded58634aba614a7b31fb91d709b2427b91566e8cfb92cd4d0f9880f3c33b3644c8cb953a8"]}, @nested={0x10c, 0x2e, 0x0, 0x1, [@nested={0x4, 0xc8}, @nested={0x4, 0x14b}, @typed={0x100, 0x76, 0x0, 0x0, @binary="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"}]}]}]}, 0x26c}}, 0x0) 433.3321ms ago: executing program 2 (id=5375): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x74, r2, 0x1, 0x0, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @loopback, 0x1002}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x74}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900060000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 0s ago: executing program 0 (id=5376): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x1, 0x1, 0x20, 0x67, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x4, 0xad, 0x0, 0xf}]}}, {0x1e, 0x7, 0x0, @multicast1}}}}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x400}) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r5 = accept4$unix(r2, 0x0, 0x0, 0x800) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x107, 0x102, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'virt_wifi0\x00', @remote}) ioctl(r1, 0x8b27, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="d35931b821b7ac86a814acf8e12ce2260c96", 0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000800600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000a8000000000000001c0017000000000000000000000000000000000000000000000000004800010073686132353600"/268], 0x154}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) kernel console output (not intermixed with test programs): 7835] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.260466][T17835] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.270438][T17835] bridge_slave_0: entered allmulticast mode [ 508.284350][T17835] bridge_slave_0: entered promiscuous mode [ 508.319991][T17835] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.348732][T17835] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.374981][T17835] bridge_slave_1: entered allmulticast mode [ 508.433141][T17835] bridge_slave_1: entered promiscuous mode [ 508.578837][ T6087] : left promiscuous mode [ 508.766906][T17979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3111'. [ 508.772776][T17982] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3108'. [ 508.882452][T17835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.912968][T17835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.941103][ T6087] tipc: Disabling bearer [ 508.951859][ T6087] tipc: Left network mode [ 509.103172][T17835] team0: Port device team_slave_0 added [ 509.158805][T17835] team0: Port device team_slave_1 added [ 509.171135][T17985] syz_tun: entered allmulticast mode [ 509.256207][ T50] Bluetooth: hci4: command tx timeout [ 509.357418][T17985] syz_tun: left allmulticast mode [ 509.380657][T17835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.420998][T17835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.540579][ T6087] IPVS: stopping master sync thread 9455 ... [ 509.577924][T17835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.680123][T17835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.687373][T17835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.735089][T17835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.851408][T18008] nbd1: detected capacity change from 0 to 127 [ 509.887560][ T50] block nbd1: Receive control failed (result -32) [ 509.933073][T17843] block nbd1: Dead connection, failed to find a fallback [ 509.975811][T17843] block nbd1: shutting down sockets [ 509.989052][T17843] blk_print_req_error: 138 callbacks suppressed [ 509.989067][T17843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.107942][T17843] buffer_io_error: 138 callbacks suppressed [ 510.107958][T17843] Buffer I/O error on dev nbd1, logical block 0, async page read [ 510.144576][T17843] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.156940][T17843] Buffer I/O error on dev nbd1, logical block 1, async page read [ 510.164899][T17843] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.175909][T17843] Buffer I/O error on dev nbd1, logical block 2, async page read [ 510.186167][T17843] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.227057][T17843] Buffer I/O error on dev nbd1, logical block 3, async page read [ 510.262256][T17843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.274606][T17843] Buffer I/O error on dev nbd1, logical block 0, async page read [ 510.282546][T17843] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.294198][T17843] Buffer I/O error on dev nbd1, logical block 1, async page read [ 510.302165][T17843] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.305825][T18019] netlink: 548 bytes leftover after parsing attributes in process `syz.3.3118'. [ 510.355373][T17843] Buffer I/O error on dev nbd1, logical block 2, async page read [ 510.367751][T17843] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.377785][T17843] Buffer I/O error on dev nbd1, logical block 3, async page read [ 510.387803][T17843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.396856][T17843] Buffer I/O error on dev nbd1, logical block 0, async page read [ 510.406597][T17843] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.415707][T17843] Buffer I/O error on dev nbd1, logical block 1, async page read [ 510.417128][T18024] netlink: 'syz.3.3118': attribute type 29 has an invalid length. [ 510.444903][T17843] ldm_validate_partition_table(): Disk read failed. [ 510.453519][T17843] Dev nbd1: unable to read RDB block 0 [ 510.459260][T18030] netlink: 'syz.3.3118': attribute type 29 has an invalid length. [ 510.495062][T17843] nbd1: unable to read partition table [ 510.535334][T17835] hsr_slave_0: entered promiscuous mode [ 510.551991][T17843] ldm_validate_partition_table(): Disk read failed. [ 510.561831][T17835] hsr_slave_1: entered promiscuous mode [ 510.575916][T17835] debugfs: 'hsr0' already exists in 'hsr' [ 510.577450][T17843] Dev nbd1: unable to read RDB block 0 [ 510.596114][T17843] nbd1: unable to read partition table [ 510.609572][T17835] Cannot create hsr debugfs directory [ 510.651273][T18042] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3121'. [ 510.870834][T18046] xt_l2tp: v2 sid > 0xffff: 1114112 [ 510.884756][ T5506] 8021q: adding VLAN 0 to HW filter on device eth1 [ 510.994315][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3123'. [ 511.236106][T18053] netlink: 'syz.1.3125': attribute type 1 has an invalid length. [ 511.333881][ T50] Bluetooth: hci4: command tx timeout [ 511.721959][T18066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3127'. [ 511.736866][T18068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3128'. [ 511.756102][T18066] netlink: 'syz.3.3127': attribute type 7 has an invalid length. [ 511.784574][T18066] netlink: 'syz.3.3127': attribute type 8 has an invalid length. [ 511.807856][T18066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3127'. [ 512.242009][T18080] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 512.450255][T18086] can: request_module (can-proto-0) failed. [ 513.670912][ T6087] veth0_macvtap: left promiscuous mode [ 513.686692][ T6087] veth1_vlan: left promiscuous mode [ 513.860472][T18127] ip6t_srh: unknown srh match flags 4000 [ 514.416161][T18130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3140'. [ 514.564099][T18130] 8021q: adding VLAN 0 to HW filter on device bond12 [ 514.629209][T17835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 514.671834][T17835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.717579][T17835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 514.759783][T17835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.786086][T17835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 514.857323][T17835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.875702][T17835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 514.911017][T18156] SET target dimension over the limit! [ 514.953822][T17835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.108214][ T6087] IPVS: stop unused estimator thread 0... [ 515.300099][T17835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.374481][T17835] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.397351][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.404567][ T6084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.432124][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.439331][ T6084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.632654][T18197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3155'. [ 515.698545][T18197] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 515.727589][T18197] gretap2: entered promiscuous mode [ 515.736860][T18197] gretap2: entered allmulticast mode [ 515.915672][T17835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.228384][T17835] veth0_vlan: entered promiscuous mode [ 516.320845][T17835] veth1_vlan: entered promiscuous mode [ 516.484992][T17835] veth0_macvtap: entered promiscuous mode [ 516.550196][T17835] veth1_macvtap: entered promiscuous mode [ 516.627394][T17835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.680960][T17835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.738138][ T6087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.781526][ T6087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.803325][T18252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3165'. [ 516.831361][ T6087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.855956][ T6087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.152776][ T6087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.173837][ T6087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.198925][T18273] netlink: 'syz.1.3171': attribute type 1 has an invalid length. [ 517.265880][T18273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.291477][ T6084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.321888][ T6084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.346494][T18273] vlan2: entered promiscuous mode [ 517.353178][T18273] bond1: entered promiscuous mode [ 517.360908][T18273] vlan2: entered allmulticast mode [ 517.366211][T18273] bond1: entered allmulticast mode [ 517.463397][T18282] bond1: (slave bridge1): making interface the new active one [ 517.504940][T18282] bridge1: entered promiscuous mode [ 517.534852][T18282] bridge1: entered allmulticast mode [ 517.553468][T18282] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 517.642072][T18291] netlink: 'syz.0.3076': attribute type 1 has an invalid length. [ 517.789720][T18302] netlink: 'syz.1.3175': attribute type 2 has an invalid length. [ 518.034986][T18314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3178'. [ 518.168103][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3180'. [ 518.293005][ T5162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 518.306142][ T5162] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 518.320324][ T5162] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 518.331303][ T5162] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 518.343942][ T5162] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 518.640413][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3182'. [ 518.696374][T18335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3182'. [ 518.737248][ T5506] veth0_macvtap: left promiscuous mode [ 519.025164][T18325] lo speed is unknown, defaulting to 1000 [ 519.263832][T18366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3192'. [ 519.302552][T18366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3192'. [ 519.306430][T18362] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 519.329712][T18366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3192'. [ 519.365239][T18366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3192'. [ 519.822328][T18325] vxcan1 speed is unknown, defaulting to 1000 [ 519.859601][T18389] syzkaller1: entered allmulticast mode [ 519.895029][T18389] bond0: entered allmulticast mode [ 519.910199][T18389] bond_slave_0: entered allmulticast mode [ 519.949880][T18389] bond_slave_1: entered allmulticast mode [ 520.155014][T18408] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 520.283987][T18413] netlink: 'syz.0.3202': attribute type 1 has an invalid length. [ 520.325596][T18413] netlink: 'syz.0.3202': attribute type 21 has an invalid length. [ 520.344977][T18415] Cannot find add_set index 0 as target [ 520.348774][T18413] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.438979][ T50] Bluetooth: hci0: command tx timeout [ 520.924540][T18440] __nla_validate_parse: 2 callbacks suppressed [ 520.924559][T18440] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3209'. [ 521.083107][T18325] chnl_net:caif_netlink_parms(): no params data found [ 521.222368][T18463] syzkaller0: entered promiscuous mode [ 521.234875][T18463] syzkaller0: entered allmulticast mode [ 521.507511][T18325] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.530057][T18325] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.551635][T18325] bridge_slave_0: entered allmulticast mode [ 521.579838][T18325] bridge_slave_0: entered promiscuous mode [ 521.596184][T18495] netlink: 'syz.0.3221': attribute type 1 has an invalid length. [ 521.615066][T18325] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.638318][T18325] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.645606][T18325] bridge_slave_1: entered allmulticast mode [ 521.655724][T18325] bridge_slave_1: entered promiscuous mode [ 521.723393][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3221'. [ 521.767058][T18500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3223'. [ 521.823114][T18495] team0: Port device team_slave_1 removed [ 521.836603][T18505] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3223'. [ 521.870401][T18325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.910271][T18325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.941132][T18503] netlink: 'syz.2.3224': attribute type 1 has an invalid length. [ 521.971865][T18503] netlink: 'syz.2.3224': attribute type 2 has an invalid length. [ 522.075836][T18516] bond1: option miimon: invalid value (18446744073709551585) [ 522.083596][T18516] bond1: option miimon: allowed values 0 - 2147483647 [ 522.095259][T18516] bond1 (unregistering): Released all slaves [ 522.151529][T18325] team0: Port device team_slave_0 added [ 522.181472][T18325] team0: Port device team_slave_1 added [ 522.196307][T18525] openvswitch: netlink: Key type 343 is out of range max 32 [ 522.285097][T18325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.301685][T18325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.343429][T18533] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3230'. [ 522.353709][T18325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.381169][T18325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.388437][T18325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.394004][T18529] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 522.415094][T18325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.424975][T18529] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 522.518368][ T50] Bluetooth: hci0: command tx timeout [ 522.559352][T18325] hsr_slave_0: entered promiscuous mode [ 522.575873][T18325] hsr_slave_1: entered promiscuous mode [ 522.582804][T18325] debugfs: 'hsr0' already exists in 'hsr' [ 522.589055][T18325] Cannot create hsr debugfs directory [ 522.824437][T18546] netlink: 'syz.2.3235': attribute type 1 has an invalid length. [ 522.966507][T18325] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.015336][T18546] lo speed is unknown, defaulting to 1000 [ 523.086959][T18325] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.299595][T18325] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.433027][T18325] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.508988][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3245'. [ 523.528181][T18583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3245'. [ 523.642388][T18580] syzkaller1: entered promiscuous mode [ 523.673052][T18586] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3246'. [ 523.679781][T18580] syzkaller1: entered allmulticast mode [ 523.690924][T18546] vxcan1 speed is unknown, defaulting to 1000 [ 523.769376][T18576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.886304][T18325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 523.906940][T18325] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.919888][T18325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 523.931050][T18325] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.939797][T18325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 523.951403][T18325] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.961756][T18325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 523.973905][T18325] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 524.193950][T18325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.274955][T18325] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.332596][T18604] syzkaller1: entered promiscuous mode [ 524.353077][T18604] syzkaller1: entered allmulticast mode [ 524.390169][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.397437][ T6089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.437149][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.444407][ T6089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.477092][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3251'. [ 524.512230][T18611] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3251'. [ 524.572066][T18611] netlink: 'syz.1.3251': attribute type 1 has an invalid length. [ 524.607953][ T50] Bluetooth: hci0: command tx timeout [ 524.621779][T18615] syzkaller0: entered promiscuous mode [ 524.673671][T18615] syzkaller0: entered allmulticast mode [ 525.039266][T18620] bond1: Unable to set up delay as MII monitoring is disabled [ 525.049531][T18620] bond1 (unregistering): Released all slaves [ 525.276774][T18325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.302867][T18631] openvswitch: netlink: Key type 31 is not supported [ 525.330128][T18631] openvswitch: netlink: Key type 31 is not supported [ 525.349183][T18631] openvswitch: netlink: Key type 31 is not supported [ 525.464789][T18622] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 525.504821][T18622] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 525.704639][T18648] netlink: 'syz.0.3259': attribute type 1 has an invalid length. [ 525.840350][T18325] veth0_vlan: entered promiscuous mode [ 525.867520][T18325] veth1_vlan: entered promiscuous mode [ 525.962240][T18657] __nla_validate_parse: 8 callbacks suppressed [ 525.962259][T18657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3261'. [ 525.966062][T18325] veth0_macvtap: entered promiscuous mode [ 526.010488][T18325] veth1_macvtap: entered promiscuous mode [ 526.023008][T18657] netlink: zone id is out of range [ 526.035781][T18657] netlink: zone id is out of range [ 526.047705][T18657] netlink: zone id is out of range [ 526.052877][T18657] netlink: zone id is out of range [ 526.063581][T18325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.076144][T18657] netlink: zone id is out of range [ 526.086446][T18657] netlink: zone id is out of range [ 526.090901][T18654] IPv6: NLM_F_CREATE should be specified when creating new route [ 526.127191][T18325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.140737][T18654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3262'. [ 526.165882][ T6088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.192025][ T6088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.221203][ T6088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.322097][ T6088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.401815][ T8978] IPVS: starting estimator thread 0... [ 526.510464][T18685] IPVS: using max 32 ests per chain, 76800 per kthread [ 526.658420][T18692] netlink: 'syz.2.3272': attribute type 1 has an invalid length. [ 526.677726][ T50] Bluetooth: hci0: command tx timeout [ 526.687335][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.709049][T18692] netlink: 'syz.2.3272': attribute type 1 has an invalid length. [ 526.709196][T18703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.734828][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.744201][T18703] batadv_slave_0: entered promiscuous mode [ 526.879041][ T6089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.902783][ T6089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.035865][T18721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3281'. [ 527.093975][T18726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3283'. [ 527.171390][T18729] xt_nat: multiple ranges no longer supported [ 527.212800][T18733] syzkaller0: entered promiscuous mode [ 527.240486][T18733] syzkaller0: entered allmulticast mode [ 527.379752][T18741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3287'. [ 527.451117][T18743] xt_hashlimit: overflow, rate too high: 0 [ 527.603621][ T5162] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 527.613362][ T5162] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 527.625413][ T5162] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 527.642558][ T5162] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 527.652000][ T5162] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 527.704855][T18748] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3289'. [ 527.876974][T18745] lo speed is unknown, defaulting to 1000 [ 527.928986][T18762] net_ratelimit: 140 callbacks suppressed [ 527.929020][T18762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.306129][T18745] vxcan1 speed is unknown, defaulting to 1000 [ 528.770440][ T50] Bluetooth: hci0: command tx timeout [ 529.046087][T18794] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 529.236793][T18745] chnl_net:caif_netlink_parms(): no params data found [ 529.471277][T18745] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.486988][T18745] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.499566][T18745] bridge_slave_0: entered allmulticast mode [ 529.526319][T18745] bridge_slave_0: entered promiscuous mode [ 529.544527][T18745] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.559509][T18745] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.567105][T18745] bridge_slave_1: entered allmulticast mode [ 529.576480][T18745] bridge_slave_1: entered promiscuous mode [ 529.636547][T18745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.650950][T18745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.718902][ T50] Bluetooth: hci1: command tx timeout [ 529.755540][T18745] team0: Port device team_slave_0 added [ 529.759568][T18833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3313'. [ 529.784718][T18745] team0: Port device team_slave_1 added [ 529.872576][T18745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.886673][T18745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.913881][T18745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.929151][T18745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.940196][T18745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.967018][T18745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.012354][T18849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3314'. [ 530.060366][T18849] veth0_macvtap: left promiscuous mode [ 530.134084][T18745] hsr_slave_0: entered promiscuous mode [ 530.142457][T18745] hsr_slave_1: entered promiscuous mode [ 530.151224][T18745] debugfs: 'hsr0' already exists in 'hsr' [ 530.156987][T18745] Cannot create hsr debugfs directory [ 530.345694][T18745] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.356543][T18745] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.445748][T18745] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.466916][T18745] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.556519][T18745] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.566598][T18745] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.614936][T18745] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.626538][T18745] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.798001][ T50] Bluetooth: hci1: command tx timeout [ 532.747007][T18835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 532.818923][T18745] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 532.860561][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 532.869314][T18745] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 532.891688][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 532.919832][T18745] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 532.955524][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.979220][T18745] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 533.027500][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.032023][T18891] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3319'. [ 533.064715][T18891] openvswitch: netlink: Missing key (keys=40, expected=100) [ 533.069114][T18895] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3321'. [ 533.225325][T18909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3323'. [ 533.333261][T18745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.423078][T18745] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.461032][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.468260][ T6087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.513337][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.520509][ T6088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.580133][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3330'. [ 533.877845][ T50] Bluetooth: hci1: command tx timeout [ 534.176753][T18745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.284761][T18966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3341'. [ 534.321069][T18745] veth0_vlan: entered promiscuous mode [ 534.365244][T18745] veth1_vlan: entered promiscuous mode [ 534.492093][T18745] veth0_macvtap: entered promiscuous mode [ 534.540885][T18745] veth1_macvtap: entered promiscuous mode [ 534.586844][T18745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.624594][T18745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.662933][T18985] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3348'. [ 534.675019][ T6087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.698331][ T6087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.725240][T18988] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 534.727819][ T6087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.768208][ T6087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.852377][T18993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3349'. [ 535.005922][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.027233][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.081539][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3351'. [ 535.098489][ T6087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.098631][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3351'. [ 535.106903][ T6087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.421626][T19017] openvswitch: netlink: IP tunnel dst address not specified [ 535.968495][ T50] Bluetooth: hci1: command tx timeout [ 538.005656][T18996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.290374][T19045] smc: net device macvlan0 applied user defined pnetid SYZ0 [ 538.445109][T19054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3366'. [ 538.642880][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3372'. [ 538.754530][T19084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3374'. [ 538.764660][T19084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3374'. [ 538.785570][T19085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3374'. [ 538.818018][T19085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3374'. [ 538.836078][T19088] openvswitch: netlink: IP tunnel TTL not specified. [ 541.581931][T19065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.828602][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3390'. [ 541.846302][T19138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3390'. [ 541.887401][T19143] netlink: 'syz.0.3389': attribute type 8 has an invalid length. [ 541.899280][ T6089] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.908354][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3390'. [ 541.924426][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3389'. [ 541.930625][ T6089] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.970700][ T6089] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.011466][T19143] bond0: entered promiscuous mode [ 542.023616][T19143] bond_slave_0: entered promiscuous mode [ 542.052886][T19143] bond_slave_1: entered promiscuous mode [ 542.086604][T19143] gretap0: entered promiscuous mode [ 542.106472][T19143] ip6gretap0: entered promiscuous mode [ 542.116870][T19143] hsr1: entered promiscuous mode [ 542.123874][ T6089] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.723920][T19191] xt_socket: unknown flags 0x50 [ 542.796386][T19197] syzkaller0: entered promiscuous mode [ 542.802049][T19197] syzkaller0: entered allmulticast mode [ 545.435547][T19170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.074762][T19249] vlan2: entered allmulticast mode [ 546.091815][T19253] __nla_validate_parse: 5 callbacks suppressed [ 546.091834][T19253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3419'. [ 546.341475][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3423'. [ 546.378607][T19270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3424'. [ 546.386957][ T48] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.393700][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3423'. [ 546.397380][ T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.416037][ T48] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.426851][ T48] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.426978][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3423'. [ 547.080490][T19318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.163523][T19317] xt_hashlimit: max too large, truncated to 1048576 [ 547.262629][T19329] bridge2: entered promiscuous mode [ 547.268673][T19329] bridge2: entered allmulticast mode [ 547.532604][T19337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3442'. [ 547.544197][T19342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3442'. [ 547.561022][T19347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3442'. [ 547.743001][T19356] syzkaller0: entered promiscuous mode [ 547.759444][T19356] syzkaller0: entered allmulticast mode [ 547.793789][T19360] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3444'. [ 547.919986][T19365] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3449'. [ 547.963468][T19367] netlink: 'syz.1.3450': attribute type 62 has an invalid length. [ 547.986432][T19367] netlink: 'syz.1.3450': attribute type 10 has an invalid length. [ 548.053872][T19369] netlink: 'syz.1.3450': attribute type 11 has an invalid length. [ 548.067040][T19372] openvswitch: netlink: Flow actions attr not present in new flow. [ 548.261777][T19377] Bluetooth: MGMT ver 1.23 [ 548.409355][T19390] netlink: 'syz.1.3459': attribute type 21 has an invalid length. [ 548.432723][T19393] xt_TCPMSS: Only works on TCP SYN packets [ 548.501320][T19383] syzkaller0: entered promiscuous mode [ 548.526088][T19383] syzkaller0: entered allmulticast mode [ 548.645842][T19404] xt_HMARK: spi-set and port-set can't be combined [ 548.724373][T19405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.746717][T19408] macvlan2: entered promiscuous mode [ 548.806020][T19408] macvlan2: entered allmulticast mode [ 548.834861][T19410] bond1: (slave vti0): refused to change device type [ 551.847063][T19418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 552.084206][T19462] __nla_validate_parse: 11 callbacks suppressed [ 552.084226][T19462] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.3477'. [ 552.156102][T19462] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3477'. [ 552.240260][T19467] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3479'. [ 552.552093][T19491] x_tables: duplicate underflow at hook 3 [ 552.561352][T19490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3484'. [ 552.603314][T19490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3484'. [ 552.655565][T19490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3484'. [ 553.031494][T19528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3494'. [ 553.054632][T19530] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 553.600766][T19576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3505'. [ 553.612365][T19576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3505'. [ 553.629836][T19576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3505'. [ 553.811525][T19588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.680581][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 555.237858][ T5162] Bluetooth: hci1: command tx timeout [ 556.231975][T19541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 556.665095][T19636] openvswitch: netlink: IP tunnel dst address not specified [ 556.684669][T19636] openvswitch: netlink: IP tunnel dst address not specified [ 557.654997][T19690] __nla_validate_parse: 32 callbacks suppressed [ 557.655018][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3544'. [ 557.716407][T19690] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 557.775833][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3544'. [ 557.814915][T19690] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 557.851513][T19690] gretap2: entered promiscuous mode [ 557.871699][T19690] gretap2: entered allmulticast mode [ 557.981640][T19710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3550'. [ 558.056216][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3552'. [ 558.070027][T19716] veth1_macvtap: left promiscuous mode [ 558.094427][T19720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3554'. [ 558.114526][T19720] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3554'. [ 558.234124][T19725] xt_socket: unknown flags 0x8 [ 558.345407][T19730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3559'. [ 558.536631][T19743] netlink: 'syz.1.3562': attribute type 51 has an invalid length. [ 558.545673][T19742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.558061][T19742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.568892][T19742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.577267][T19742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.287490][T19783] netlink: 'syz.2.3578': attribute type 7 has an invalid length. [ 559.311895][T19788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3576'. [ 559.475476][T19800] netlink: 'syz.2.3581': attribute type 1 has an invalid length. [ 559.702446][T19817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3587'. [ 559.720048][T19819] xt_hashlimit: invalid interval [ 559.737242][T19821] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3588'. [ 559.757593][T19821] 8021q: VLANs not supported on gre0 [ 559.979131][T19831] ipt_rpfilter: unknown options [ 560.201332][T19844] syzkaller0: entered allmulticast mode [ 560.232746][T19844] netlink: 'syz.0.3596': attribute type 33 has an invalid length. [ 560.488624][T19862] netlink: 'syz.3.3601': attribute type 1 has an invalid length. [ 560.514058][T19862] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 561.041532][T19879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 561.107108][T19891] x_tables: duplicate underflow at hook 2 [ 561.322185][T19903] netlink: 'syz.2.3610': attribute type 1 has an invalid length. [ 561.789885][T19913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 562.071060][T19934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.850231][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.547520][T19983] syzkaller1: entered promiscuous mode [ 563.563165][T19983] syzkaller1: entered allmulticast mode [ 563.747166][T19997] __nla_validate_parse: 19 callbacks suppressed [ 563.747184][T19997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3631'. [ 563.831045][T19999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3634'. [ 563.862474][T19999] netlink: 'syz.2.3634': attribute type 18 has an invalid length. [ 563.889119][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3634'. [ 563.952190][ T6087] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.962055][T19999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3634'. [ 563.973009][ T6087] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.992766][T19999] netlink: 'syz.2.3634': attribute type 18 has an invalid length. [ 564.003147][ T6087] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.024593][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3634'. [ 564.045798][ T6087] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.055624][T20007] x_tables: duplicate underflow at hook 1 [ 564.603970][T20042] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3646'. [ 564.607110][T20037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.714851][T20048] netlink: 'syz.2.3649': attribute type 1 has an invalid length. [ 564.723875][T20015] netlink: 'syz.3.3639': attribute type 16 has an invalid length. [ 564.749882][T20015] netlink: 'syz.3.3639': attribute type 17 has an invalid length. [ 564.795948][T20050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3651'. [ 564.827219][T20015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.108167][T20066] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3655'. [ 565.153909][T20066] bond2: entered promiscuous mode [ 565.159714][T20066] bond2: entered allmulticast mode [ 565.165448][T20066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.281488][T20073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3656'. [ 565.359592][T20079] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3659'. [ 565.528687][T20090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.543686][T20090] openvswitch: netlink: Message has 8 unknown bytes. [ 565.575131][T20090] veth1_to_bond: entered allmulticast mode [ 565.856468][T20106] netlink: 'syz.1.3669': attribute type 21 has an invalid length. [ 566.034605][T20112] syzkaller0: entered promiscuous mode [ 566.044600][T20112] syzkaller0: entered allmulticast mode [ 566.137355][T20119] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 566.154414][T20119] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 566.207550][T20121] netlink: 'syz.2.3675': attribute type 1 has an invalid length. [ 566.653187][T20154] vlan2: entered promiscuous mode [ 566.658542][T20154] geneve1: entered promiscuous mode [ 566.666651][T20154] vlan2: entered allmulticast mode [ 566.672525][T20154] geneve1: entered allmulticast mode [ 566.684247][T20154] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 566.920017][T20169] netlink: 'syz.3.3690': attribute type 1 has an invalid length. [ 566.973261][T20173] veth0: entered promiscuous mode [ 567.232172][T20186] veth0_to_bond: entered allmulticast mode [ 567.260746][T20191] netlink: 'syz.4.3699': attribute type 10 has an invalid length. [ 567.279954][T20191] veth0_vlan: left promiscuous mode [ 567.286496][T20191] veth0_vlan: entered promiscuous mode [ 567.296751][T20191] team0: Device veth0_vlan failed to register rx_handler [ 567.330460][T20193] netlink: 'syz.0.3698': attribute type 1 has an invalid length. [ 567.503007][ T1353] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.549823][ T1353] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.793177][T20223] macsec1: entered promiscuous mode [ 567.799746][T20223] bridge0: entered promiscuous mode [ 567.818594][T20223] macsec1: entered allmulticast mode [ 567.824278][T20223] bridge0: entered allmulticast mode [ 567.844056][T20223] bridge0: port 3(macsec1) entered blocking state [ 567.863519][T20223] bridge0: port 3(macsec1) entered disabled state [ 567.895686][T20223] bridge0: left allmulticast mode [ 567.918665][ T5905] bridge0: left promiscuous mode [ 570.038098][T17837] Bluetooth: hci3: command 0x0406 tx timeout [ 570.664785][T20209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.899830][T20248] __nla_validate_parse: 16 callbacks suppressed [ 570.899849][T20248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3717'. [ 570.933007][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3715'. [ 570.934888][T20253] syzkaller0: entered promiscuous mode [ 570.947914][T20253] syzkaller0: entered allmulticast mode [ 570.956048][T20242] syzkaller0: entered promiscuous mode [ 570.976071][T20242] syzkaller0: entered allmulticast mode [ 571.017469][T20257] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 571.275978][T20271] openvswitch: netlink: Multiple metadata blocks provided [ 571.306005][T20271] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3722'. [ 571.346646][T20274] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 571.943006][T20301] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 571.999999][T20309] validate_nla: 5 callbacks suppressed [ 572.000012][T20309] netlink: 'syz.3.3733': attribute type 1 has an invalid length. [ 572.023083][T20301] bond2: (slave lo): Enslaving as an active interface with an up link [ 572.072969][T20301] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 572.097176][T20309] netlink: 'syz.3.3733': attribute type 4 has an invalid length. [ 572.139347][T20309] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3733'. [ 572.295572][T20326] netlink: 'syz.1.3741': attribute type 29 has an invalid length. [ 572.336594][T20329] Cannot find add_set index 65532 as target [ 572.395052][T20337] netlink: 'syz.1.3741': attribute type 15 has an invalid length. [ 572.410086][T20337] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3741'. [ 572.436275][T20337] netlink: 'syz.1.3741': attribute type 1 has an invalid length. [ 572.474842][T20337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3741'. [ 572.711821][T20353] netlink: 'syz.3.3750': attribute type 3 has an invalid length. [ 572.742044][T20353] netlink: 766 bytes leftover after parsing attributes in process `syz.3.3750'. [ 572.812620][T20358] netlink: 'syz.4.3752': attribute type 13 has an invalid length. [ 572.867430][T20356] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3750'. [ 572.933931][T20353] bond3: entered allmulticast mode [ 573.375126][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3759'. [ 573.751621][T20413] netlink: 'syz.4.3766': attribute type 1 has an invalid length. [ 573.793900][T20413] bond2: entered promiscuous mode [ 573.801264][T20413] bond2: entered allmulticast mode [ 573.806925][T20413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 573.909147][T20420] Bluetooth: MGMT ver 1.23 [ 573.917099][T20420] IPv6: NLM_F_CREATE should be specified when creating new route [ 573.925177][T20420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3767'. [ 573.996881][T20422] x_tables: duplicate underflow at hook 1 [ 574.023016][T20422] x_tables: duplicate underflow at hook 1 [ 574.134088][T20435] netlink: 'syz.3.3772': attribute type 4 has an invalid length. [ 574.187443][T20438] hsr_slave_0: left promiscuous mode [ 574.193791][T20438] hsr_slave_1: left promiscuous mode [ 574.316170][T20441] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 576.459763][T20390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 576.661082][T20458] __nla_validate_parse: 3 callbacks suppressed [ 576.661101][T20458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3780'. [ 576.900055][T20473] veth5: entered allmulticast mode [ 577.660023][T20506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3796'. [ 577.724063][T20510] openvswitch: netlink: EtherType 5 is less than min 600 [ 577.892995][T20518] netlink: 'syz.1.3798': attribute type 1 has an invalid length. [ 578.073970][T20522] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 578.082889][T20522] bond1: option packets_per_slave: allowed values 0 - 65535 [ 578.103227][T20522] bond1 (unregistering): Released all slaves [ 578.627581][ T6089] tipc: Subscription rejected, illegal request [ 578.680560][T20552] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3811'. [ 578.874893][T20567] netlink: 'syz.0.3817': attribute type 1 has an invalid length. [ 578.907578][T20567] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3817'. [ 578.932232][T20567] netlink: 'syz.0.3817': attribute type 1 has an invalid length. [ 578.941379][T20567] netlink: 'syz.0.3817': attribute type 8 has an invalid length. [ 578.949434][T20567] netlink: 582 bytes leftover after parsing attributes in process `syz.0.3817'. [ 579.151540][T20584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3822'. [ 579.167500][T20575] netlink: 'syz.4.3819': attribute type 1 has an invalid length. [ 579.182652][T20584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3822'. [ 579.503786][T20597] syzkaller0: entered promiscuous mode [ 579.519709][T20597] syzkaller0: entered allmulticast mode [ 579.544278][T20598] tc action pedit 'at' offset 134217728 out of bounds [ 579.552176][T20598] tc action pedit 'at' offset 134217728 out of bounds [ 579.558999][T20598] tc action pedit 'at' offset 134217728 out of bounds [ 579.565791][T20598] tc action pedit 'at' offset 134217728 out of bounds [ 579.572583][T20598] tc action pedit 'at' offset 134217728 out of bounds [ 579.579376][T20598] tc action pedit 'at' offset 134217728 out of bounds [ 579.586225][T20598] tc action pedit 'at' offset 134217728 out of bounds [ 579.593020][T20598] tc action pedit 'at' offset 134217728 out of bounds [ 579.599824][T20598] tc action pedit 'at' offset 134217728 out of bounds [ 579.606603][T20598] tc action pedit 'at' offset 134217728 out of bounds [ 579.613427][T20598] 0: reclassify loop, rule prio 0, protocol 800 [ 579.709380][T20607] ip6t_srh: unknown srh invflags 4000 [ 579.905116][T20612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3829'. [ 580.060221][T20619] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3832'. [ 580.083011][T20619] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3832'. [ 580.606916][T20653] netlink: 'syz.2.3842': attribute type 3 has an invalid length. [ 580.615460][T20653] netlink: 'syz.2.3842': attribute type 2 has an invalid length. [ 580.774116][T20660] : renamed from veth1_vlan (while UP) [ 580.793964][T20666] xfrm0: entered allmulticast mode [ 581.140609][T20686] netlink: 'syz.2.3853': attribute type 1 has an invalid length. [ 581.149401][T20686] netlink: 'syz.2.3853': attribute type 1 has an invalid length. [ 581.223686][T20637] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 581.508572][T20704] syzkaller0: entered promiscuous mode [ 581.520839][T20704] syzkaller0: entered allmulticast mode [ 581.576502][T20709] : entered promiscuous mode [ 584.253032][T20762] bridge3: entered promiscuous mode [ 584.272944][T20762] bridge3: entered allmulticast mode [ 584.320456][T20769] syzkaller0: entered promiscuous mode [ 584.342429][T20769] syzkaller0: entered allmulticast mode [ 584.403500][T20775] __nla_validate_parse: 9 callbacks suppressed [ 584.403518][T20775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3880'. [ 584.423109][T20775] netlink: 'syz.2.3880': attribute type 30 has an invalid length. [ 584.454867][T20781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3880'. [ 584.464458][T20781] netlink: 'syz.2.3880': attribute type 30 has an invalid length. [ 584.490676][T20773] netlink: 'syz.3.3879': attribute type 5 has an invalid length. [ 584.589483][T20787] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.3880'. [ 584.600653][T20787] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 584.953284][T20789] ipt_REJECT: TCP_RESET invalid for non-tcp [ 585.072920][T20796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3886'. [ 585.167293][T20803] sctp: [Deprecated]: syz.2.3888 (pid 20803) Use of int in maxseg socket option. [ 585.167293][T20803] Use struct sctp_assoc_value instead [ 585.170652][T20805] netlink: 'syz.3.3890': attribute type 4 has an invalid length. [ 585.202340][T20805] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3890'. [ 585.229630][T20805] .`: renamed from bond0 (while UP) [ 585.243880][T20808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3890'. [ 585.272023][T20805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3890'. [ 585.554672][T20828] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3895'. [ 585.622990][T20834] ip6tnl0: Caught tx_queue_len zero misconfig [ 585.745247][T20844] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3901'. [ 586.005235][T20862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3902'. [ 586.059637][T20856] syzkaller0: entered promiscuous mode [ 586.082921][T20856] syzkaller0: entered allmulticast mode [ 586.358465][T20884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.575014][T20978] __nla_validate_parse: 1 callbacks suppressed [ 610.575034][T20978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3939'. [ 610.667302][T20978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3939'. [ 610.778968][T20988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3939'. [ 610.806587][T20987] bond2: entered promiscuous mode [ 610.827047][ T1353] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.855629][ T1353] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.889907][ T1353] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.925553][ T1353] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.993462][T20992] h: entered promiscuous mode [ 611.214918][T21002] netlink: 'syz.3.3945': attribute type 1 has an invalid length. [ 611.258834][T21002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3945'. [ 611.408838][T21013] netlink: 'syz.4.3948': attribute type 29 has an invalid length. [ 611.420225][T21014] netlink: 'syz.4.3948': attribute type 29 has an invalid length. [ 611.458490][T21013] netlink: 'syz.4.3948': attribute type 32 has an invalid length. [ 611.466356][T21013] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3948'. [ 611.604060][T21025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3952'. [ 611.624601][T21029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3953'. [ 611.734376][T21025] 8021q: adding VLAN 0 to HW filter on device bond4 [ 611.897179][T21039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3950'. [ 611.980762][T21053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3961'. [ 611.990576][T21053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3961'. [ 612.309215][T21066] netlink: 'syz.4.3965': attribute type 1 has an invalid length. [ 612.385762][T21072] delete_channel: no stack [ 612.586950][T21081] netlink: 'syz.4.3966': attribute type 9 has an invalid length. [ 612.826305][T21086] Unknown options in mask b7f2 [ 613.273740][T21102] tipc: Started in network mode [ 613.296349][T21102] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 613.321044][T21102] tipc: Enabled bearer , priority 10 [ 613.785174][T21125] netlink: 'syz.1.3981': attribute type 1 has an invalid length. [ 613.841106][T21125] bond5: entered promiscuous mode [ 613.846712][T21125] 8021q: adding VLAN 0 to HW filter on device bond5 [ 613.896783][T21125] bond5: (slave bridge2): making interface the new active one [ 613.905673][T21125] bridge2: entered promiscuous mode [ 613.914126][T21125] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 614.467944][ T8975] tipc: Node number set to 10136234 [ 615.599934][T21200] __nla_validate_parse: 50 callbacks suppressed [ 615.599954][T21200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4003'. [ 615.621862][T21200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.642272][T21200] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4003'. [ 615.835622][ T8971] hid (null): global environment stack underflow [ 615.889754][ T8971] hid-generic 0005:15C2:0004.0002: global environment stack underflow [ 615.901519][ T8971] hid-generic 0005:15C2:0004.0002: item 0 0 1 11 parsing failed [ 615.910706][ T8971] hid-generic 0005:15C2:0004.0002: probe with driver hid-generic failed with error -22 [ 615.936099][T21220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4011'. [ 615.960341][T21221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 615.996148][T21216] wireguard0: entered promiscuous mode [ 616.003332][T21216] wireguard0: entered allmulticast mode [ 616.352454][T21239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4016'. [ 616.753980][T21273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4026'. [ 616.936853][T21284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4028'. [ 616.962361][T21288] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20001 [ 617.310946][T21302] geneve2: entered promiscuous mode [ 617.325570][ T6089] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 34053 - 0 [ 617.350466][ T6089] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 34053 - 0 [ 617.373043][T21302] netlink: 'syz.3.4034': attribute type 29 has an invalid length. [ 617.382476][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4034'. [ 617.401222][T21311] lo: Caught tx_queue_len zero misconfig [ 617.438438][ T6089] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 34053 - 0 [ 617.448632][ T6089] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 34053 - 0 [ 617.463243][T21305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.900102][T21336] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 618.222728][T21369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 618.268162][T21370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 618.345337][T21381] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4057'. [ 618.443104][T21385] netlink: 'syz.0.4060': attribute type 3 has an invalid length. [ 618.472283][T21385] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4060'. [ 618.767146][T21414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4068'. [ 618.840952][T21414] bond6: entered promiscuous mode [ 618.855014][T21414] 8021q: adding VLAN 0 to HW filter on device bond6 [ 618.889560][T21422] ipvlan2: entered allmulticast mode [ 618.897973][T21422] bond6: entered allmulticast mode [ 619.022344][T21429] erspan0: entered promiscuous mode [ 619.041524][T21429] erspan0: entered allmulticast mode [ 620.444990][T21500] veth0: entered promiscuous mode [ 620.717069][T21511] IPVS: length: 104 != 8 [ 620.838507][T21517] nbd: illegal input index 2958377 [ 620.895269][T21513] __nla_validate_parse: 11 callbacks suppressed [ 620.895288][T21513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4094'. [ 620.944955][T21513] tipc: Started in network mode [ 620.961474][T21513] tipc: Node identity ac14140f, cluster identity 4711 [ 620.980334][T21513] tipc: New replicast peer: 172.20.20.187 [ 620.996496][T21513] tipc: Enabled bearer , priority 10 [ 621.403846][T21539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4102'. [ 621.809216][T21555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4107'. [ 621.871423][T21557] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4107'. [ 621.898768][T21555] 8021q: adding VLAN 0 to HW filter on device bond3 [ 621.940958][T21555] netlink: 'syz.2.4107': attribute type 10 has an invalid length. [ 621.949832][T21555] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.957281][T21555] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.988117][T21555] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.995341][T21555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.002915][T21555] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.010098][T21555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.026671][T21555] bridge0: entered allmulticast mode [ 622.032950][T21555] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 622.162770][T21563] bond0: entered promiscuous mode [ 622.196961][T18262] tipc: Node number set to 2886997007 [ 622.299340][T21570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4113'. [ 622.311321][T21570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4113'. [ 622.362402][T21570] gretap1: entered promiscuous mode [ 622.387777][T21570] gretap1: entered allmulticast mode [ 622.472366][T21580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4114'. [ 622.512040][T21582] delete_channel: no stack [ 622.590822][T21592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4118'. [ 622.662590][T21596] syzkaller0: entered promiscuous mode [ 622.670757][T21596] syzkaller0: entered allmulticast mode [ 622.696686][T21596] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 622.829733][T21602] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4122'. [ 622.853611][T21605] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4124'. [ 622.887659][T21605] nbd: illegal input index -8454144 [ 623.363714][T21645] batadv_slave_0: Caught tx_queue_len zero misconfig [ 623.801823][ T1353] wlan1: Trigger new scan to find an IBSS to join [ 624.057937][T21688] openvswitch: netlink: IPv4 tun info is not correct [ 624.283760][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.436623][T21714] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.466411][T21714] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.505921][T21714] .` (unregistering): Released all slaves [ 624.547272][T21717] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 625.019942][T21747] netlink: 'syz.2.4161': attribute type 3 has an invalid length. [ 625.180535][T21752] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 625.199716][T21756] openvswitch: netlink: IP tunnel dst address not specified [ 625.679849][T21794] netlink: 'syz.1.4177': attribute type 7 has an invalid length. [ 625.691586][T21796] netlink: 'syz.3.4176': attribute type 7 has an invalid length. [ 625.721178][T21796] netlink: 'syz.3.4176': attribute type 8 has an invalid length. [ 625.902386][T21810] __nla_validate_parse: 13 callbacks suppressed [ 625.902405][T21810] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4179'. [ 625.922130][T21808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4181'. [ 626.034316][T21808] bond4: option xmit_hash_policy: invalid value (64) [ 626.050571][T21808] bond4 (unregistering): Released all slaves [ 626.283712][T21814] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.4182'. [ 626.306968][T21831] xt_connbytes: Forcing CT accounting to be enabled [ 626.381327][T21834] netlink: 'syz.2.4186': attribute type 1 has an invalid length. [ 626.389936][T21834] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4186'. [ 626.419906][T21831] xt_CT: No such helper "netbios-ns" [ 626.444268][T21836] netlink: 'syz.4.4187': attribute type 4 has an invalid length. [ 626.471229][T21836] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4187'. [ 626.504204][T21839] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.4187'. [ 626.764024][ T1353] wlan1: Trigger new scan to find an IBSS to join [ 626.885368][T21864] pim6reg: entered allmulticast mode [ 626.904323][T21864] bridge0: entered allmulticast mode [ 627.029732][T21880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4194'. [ 627.118265][T21882] netlink: 'syz.1.4199': attribute type 15 has an invalid length. [ 627.225728][T21889] netlink: 'syz.3.4202': attribute type 1 has an invalid length. [ 627.258935][T21889] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 627.601935][T21916] netdevsim netdevsim3: Direct firmware load for r1 failed with error -2 [ 627.622323][T21916] netdevsim netdevsim3: Falling back to sysfs fallback for: r1 [ 627.631908][T21917] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.4211'. [ 627.899451][T21932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4217'. [ 627.999538][T21935] openvswitch: netlink: Missing key (keys=40, expected=80) [ 628.025728][T21938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 629.257346][T22022] netlink: 'syz.2.4243': attribute type 2 has an invalid length. [ 629.296704][T22022] netlink: 'syz.2.4243': attribute type 2 has an invalid length. [ 629.360103][T22026] bond7: option mode: invalid value (133) [ 629.414433][T22026] bond7 (unregistering): Released all slaves [ 629.798722][ T6088] wlan1: Trigger new scan to find an IBSS to join [ 630.731962][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.824512][T22109] gretap2: entered promiscuous mode [ 630.846297][T22109] batman_adv: batadv0: Adding interface: gretap2 [ 630.850767][T22112] openvswitch: netlink: Flow key attr not present in new flow. [ 630.856780][T22109] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.862724][T22080] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 630.904651][T22109] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 630.921194][T22112] netlink: 'syz.4.4266': attribute type 21 has an invalid length. [ 630.952085][T22112] netlink: 'syz.4.4266': attribute type 6 has an invalid length. [ 630.973763][T22112] __nla_validate_parse: 16 callbacks suppressed [ 630.973780][T22112] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4266'. [ 631.019614][T22117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4266'. [ 631.044610][T22112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4266'. [ 631.143450][T22121] netlink: 'syz.1.4270': attribute type 1 has an invalid length. [ 631.168166][T22121] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4270'. [ 631.191226][T22121] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4270'. [ 631.211462][T22121] netlink: 'syz.1.4270': attribute type 1 has an invalid length. [ 631.232352][T22121] netlink: 634 bytes leftover after parsing attributes in process `syz.1.4270'. [ 631.485727][T22144] x_tables: duplicate underflow at hook 1 [ 631.671001][T22157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4280'. [ 631.733231][T22161] netlink: 'syz.3.4279': attribute type 10 has an invalid length. [ 631.946081][T22171] netlink: 'syz.1.4286': attribute type 63 has an invalid length. [ 631.990445][T22171] netlink: 'syz.1.4286': attribute type 63 has an invalid length. [ 632.118873][ T5162] Bluetooth: hci0: command 0x0401 tx timeout [ 632.187122][T22188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4288'. [ 632.254236][T22192] tipc: Trying to set illegal importance in message [ 632.376099][T22195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4289'. [ 632.435392][T22201] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4291'. [ 632.463359][T22198] netlink: 'syz.1.4290': attribute type 5 has an invalid length. [ 632.663752][T22218] openvswitch: netlink: Unknown nsh attribute 0 [ 632.856544][T22230] netlink: 'syz.3.4299': attribute type 21 has an invalid length. [ 633.099869][T22242] block nbd2: Unsupported socket: should be TCP or UNIX. [ 633.423843][T22267] nbd: must specify at least one socket [ 633.854466][T22289] netlink: 'syz.4.4320': attribute type 1 has an invalid length. [ 634.000093][ T8975] IPVS: starting estimator thread 0... [ 634.052562][T22289] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 634.076314][T22292] bond3: (slave geneve2): making interface the new active one [ 634.109677][T22292] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 634.120810][T22293] IPVS: using max 26 ests per chain, 62400 per kthread [ 634.132145][ T6089] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 634.158981][ T6089] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 634.183326][T22289] 8021q: adding VLAN 0 to HW filter on device bond3 [ 634.214230][ T6086] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 634.494037][T22312] 8021q: adding VLAN 0 to HW filter on device bond7 [ 634.624749][T22319] bond7: (slave geneve2): making interface the new active one [ 634.657236][T22319] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 634.691595][T22328] tipc: Started in network mode [ 634.697076][T22328] tipc: Node identity ac14140f, cluster identity 4711 [ 634.725535][T22328] tipc: New replicast peer: 255.255.255.255 [ 634.773470][T22328] tipc: Enabled bearer , priority 10 [ 635.539824][T22367] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 635.822244][T18262] tipc: Node number set to 2886997007 [ 636.113940][T22418] __nla_validate_parse: 17 callbacks suppressed [ 636.113958][T22418] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.4362'. [ 636.177023][T22420] sit0: entered promiscuous mode [ 636.194292][T22420] validate_nla: 2 callbacks suppressed [ 636.194307][T22420] netlink: 'syz.3.4363': attribute type 1 has an invalid length. [ 636.237451][T22420] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4363'. [ 636.473288][T22450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4368'. [ 636.521520][T22450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4368'. [ 636.533638][T22450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4368'. [ 636.756990][T22464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4374'. [ 636.776673][T22464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4374'. [ 637.288916][T22490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 637.290991][T22497] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 637.603338][T22520] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4388'. [ 637.629546][T22520] veth1_to_bond: left allmulticast mode [ 637.914020][T22533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4393'. [ 638.078862][T22544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4395'. [ 638.293299][T22555] netlink: 'syz.4.4398': attribute type 18 has an invalid length. [ 638.325385][T22555] netlink: 'syz.4.4398': attribute type 18 has an invalid length. [ 638.393406][ T24] IPVS: starting estimator thread 0... [ 638.498911][T22558] IPVS: using max 34 ests per chain, 81600 per kthread [ 638.506512][T22565] netlink: 'syz.1.4403': attribute type 1 has an invalid length. [ 638.666929][T22584] netlink: 'syz.2.4408': attribute type 1 has an invalid length. [ 638.791442][T22584] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 638.954038][T22604] netlink: 'syz.3.4413': attribute type 9 has an invalid length. [ 639.112415][T22621] rdma_rxe: rxe_newlink: failed to add lo [ 639.226499][T22623] syzkaller0: entered promiscuous mode [ 639.258434][T22623] syzkaller0: entered allmulticast mode [ 640.083302][T22679] xt_hashlimit: size too large, truncated to 1048576 [ 640.431333][T22689] IPv6: Can't replace route, no match found [ 640.451429][T22689] IPv6: Can't replace route, no match found [ 640.687240][T22700] netlink: 'syz.1.4438': attribute type 9 has an invalid length. [ 641.206651][T22740] __nla_validate_parse: 23 callbacks suppressed [ 641.206670][T22740] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4451'. [ 641.236259][T22740] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4451'. [ 641.461405][T22752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4455'. [ 641.478771][T22752] netlink: 'syz.3.4455': attribute type 1 has an invalid length. [ 641.491598][T22752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4455'. [ 641.502951][T22752] netlink: 'syz.3.4455': attribute type 1 has an invalid length. [ 641.518579][T22752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4455'. [ 641.552415][T22759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.756145][T22770] IPv6: addrconf: prefix option has invalid lifetime [ 641.811245][T22772] xt_hashlimit: size too large, truncated to 1048576 [ 643.887117][T22715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 644.222076][T22797] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4470'. [ 644.254199][T22797] netem: invalid attributes len -24 [ 644.289877][T22797] netem: change failed [ 644.345295][T22808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4469'. [ 644.379297][T22808] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4469'. [ 644.452189][T22814] netlink: 'syz.0.4473': attribute type 10 has an invalid length. [ 644.464519][T22814] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4473'. [ 644.517015][T22815] delete_channel: no stack [ 651.957914][T17837] Bluetooth: hci0: command 0x0401 tx timeout [ 670.428437][ T48] bridge_slave_1: left allmulticast mode [ 670.434115][ T48] bridge_slave_1: left promiscuous mode [ 670.440744][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.472327][ T48] dvmrp0: left allmulticast mode [ 670.710327][ T48] bond1 (unregistering): (slave geneve2): Releasing active interface [ 670.880596][T22830] block nbd1: NBD_DISCONNECT [ 670.894607][T22838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4481'. [ 670.901771][T22830] block nbd1: Send disconnect failed -32 [ 671.072723][T22855] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 671.311980][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.321967][ T48] bond_slave_0: left allmulticast mode [ 671.334552][ T48] bond0 (unregistering): Released all slaves [ 671.355759][ T48] bond1 (unregistering): Released all slaves [ 671.377432][ T48] bond2 (unregistering): Released all slaves [ 671.406504][ T48] bond3 (unregistering): (slave vxcan3): Releasing backup interface [ 671.421855][ T48] bond3 (unregistering): (slave vxcan5): Releasing backup interface [ 671.432803][ T48] bond3 (unregistering): Released all slaves [ 671.454079][ T48] bond4 (unregistering): Released all slaves [ 671.478856][ T48] bond5 (unregistering): (slave lo): Releasing backup interface [ 671.487244][ T48] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 671.510067][ T48] bond5 (unregistering): Released all slaves [ 671.534584][ T48] bond6 (unregistering): Released all slaves [ 671.555117][ T48] bond7 (unregistering): Released all slaves [ 671.592238][T22838] vxcan2: entered promiscuous mode [ 671.597510][T22838] vxcan2: entered allmulticast mode [ 671.685490][ T24] lo speed is unknown, defaulting to 1000 [ 671.691754][ T5906] lo speed is unknown, defaulting to 1000 [ 671.717321][ T24] syz0: Port: 1 Link DOWN [ 671.849877][ T48] : left promiscuous mode [ 671.861967][T22867] SET target dimension over the limit! [ 671.963991][ T48] tipc: Disabling bearer [ 671.976542][ T48] tipc: Left network mode [ 672.081560][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4492'. [ 672.126157][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4492'. [ 672.145488][ T48] IPVS: stopping master sync thread 15398 ... [ 672.364189][T22893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 672.417131][T22894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 672.441639][T17837] Bluetooth: hci4: command 0x0406 tx timeout [ 672.466518][T22902] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4496'. [ 673.310360][T22940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4509'. [ 673.336290][T22937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4512'. [ 673.559022][T22948] netlink: 'syz.2.4513': attribute type 1 has an invalid length. [ 673.596600][T22948] netlink: 'syz.2.4513': attribute type 1 has an invalid length. [ 673.625250][T22948] netlink: 'syz.2.4513': attribute type 1 has an invalid length. [ 673.627852][T22953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4515'. [ 673.696522][T22955] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4515'. [ 673.742815][T22953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4515'. [ 673.777164][T22957] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4515'. [ 673.934413][T22955] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.943562][T22955] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.973270][T22957] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.980556][T22957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.988084][T22957] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.995259][T22957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.023121][T22957] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.032460][T22957] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.317745][ T48] hsr_slave_0: left promiscuous mode [ 674.335178][ T48] hsr_slave_1: left promiscuous mode [ 674.369936][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.403877][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.444743][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.474618][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.506111][ T48] batman_adv: batadv0: Interface deactivated: dummy0 [ 674.516053][ T48] batman_adv: batadv0: Removing interface: dummy0 [ 674.590581][ T5162] block nbd1: Receive control failed (result -1) [ 674.611024][ T48] veth0_macvtap: left allmulticast mode [ 674.616646][ T48] veth1_vlan: left allmulticast mode [ 674.622655][ T48] veth1_macvtap: left promiscuous mode [ 674.628391][ T48] veth0_macvtap: left promiscuous mode [ 674.633963][ T48] veth1_vlan: left promiscuous mode [ 674.640008][ T48] veth0_vlan: left promiscuous mode [ 674.997505][ T48] team0 (unregistering): Port device team_slave_1 removed [ 675.013698][ T48] team0 (unregistering): Port device team_slave_0 removed [ 675.223089][ T6086] smbdirect: ib_dev[syz0] removed [ 675.553899][T23032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.664070][T23036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 676.173658][T23069] __nla_validate_parse: 3 callbacks suppressed [ 676.173678][T23069] netlink: 1012 bytes leftover after parsing attributes in process `syz.2.4546'. [ 676.490952][T23064] vxcan1 speed is unknown, defaulting to 1000 [ 676.703024][T23096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4554'. [ 677.085993][T23103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4556'. [ 677.173658][T23106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4557'. [ 677.556942][T23115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4559'. [ 677.776610][T23120] xt_l2tp: wrong L2TP version: 0 [ 679.331711][T23078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 679.569307][T23124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4561'. [ 679.632016][T23131] netlink: 'syz.3.4564': attribute type 1 has an invalid length. [ 679.633028][T23132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4562'. [ 679.663199][T23131] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4564'. [ 679.687815][T23131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4564'. [ 679.818718][T23140] xt_hashlimit: size too large, truncated to 1048576 [ 680.034678][T23151] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.103854][T23151] bridge_slave_0 (unregistering): left allmulticast mode [ 680.111570][T23151] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.662781][T23176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4574'. [ 680.676111][T23175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 680.786131][T23187] veth1_macvtap: entered promiscuous mode [ 680.794755][T23187] macsec1: entered promiscuous mode [ 680.802133][T23187] veth1_macvtap: left promiscuous mode [ 682.872853][T23146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 683.346314][T23221] netlink: 'syz.1.4587': attribute type 12 has an invalid length. [ 683.383973][T23221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'. [ 683.438486][T23221] netlink: 'syz.1.4587': attribute type 12 has an invalid length. [ 683.446872][T23221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'. [ 683.756481][T23244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4588'. [ 683.782329][T23244] ip6erspan0: entered promiscuous mode [ 683.840725][T23251] veth1_to_bond: entered allmulticast mode [ 683.853368][T23251] veth1_to_bond: left allmulticast mode [ 684.317539][T23275] netlink: 'syz.0.4601': attribute type 5 has an invalid length. [ 684.321767][T23276] netlink: 'syz.0.4601': attribute type 5 has an invalid length. [ 684.405853][T23282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4600'. [ 684.415539][T23282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4600'. [ 685.723064][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.607219][T23236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 686.852190][T23288] team0: Port device gretap4 added [ 686.970938][T23299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4608'. [ 687.070469][T23309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4609'. [ 687.258696][ T24] syzkaller1: tun_net_xmit 90 [ 687.286716][T23325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4615'. [ 687.316474][T23325] netlink: 'syz.1.4615': attribute type 5 has an invalid length. [ 687.333983][T23332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4617'. [ 687.341189][T23325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4615'. [ 687.562508][T23331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 687.591310][T23332] bond1: option mode: unable to set because the bond device is up [ 687.626243][T23325] geneve3: entered promiscuous mode [ 687.651517][T23325] geneve3: entered allmulticast mode [ 687.692572][ T6088] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 687.733037][ T6088] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 687.763032][ T6088] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 687.790779][ T6088] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 687.844899][T23363] geneve3: entered promiscuous mode [ 687.863870][T23363] geneve3: entered allmulticast mode [ 688.435967][T23409] netlink: 'syz.2.4635': attribute type 27 has an invalid length. [ 688.453610][T23401] __nla_validate_parse: 5 callbacks suppressed [ 688.453629][T23401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4633'. [ 688.457414][T23403] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4636'. [ 688.554206][T23403] syzkaller1: entered promiscuous mode [ 688.592068][T23417] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4633'. [ 688.594943][T23403] syzkaller1: entered allmulticast mode [ 688.693032][T23423] syzkaller0: entered promiscuous mode [ 688.706333][T23423] syzkaller0: entered allmulticast mode [ 688.746591][T23423] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4638'. [ 688.786498][T23428] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4640'. [ 688.962215][T23439] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4643'. [ 688.970569][T23443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4644'. [ 688.972695][T23441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4642'. [ 688.995463][T23439] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 689.024517][T23447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4644'. [ 689.111704][T23441] 8021q: adding VLAN 0 to HW filter on device bond4 [ 689.115452][T23450] netlink: 640 bytes leftover after parsing attributes in process `syz.3.4645'. [ 689.133540][T23450] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 689.134349][T23441] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 689.164260][T23441] bond4: (slave xfrm1): Error -95 calling set_mac_address [ 689.190390][T23450] block nbd2: Unsupported socket: should be TCP or UNIX. [ 689.534863][ T6084] nci: nci_rsp_packet: unknown rsp opcode 0x124 [ 689.575136][T23479] x_tables: duplicate underflow at hook 3 [ 689.907109][T23500] Cannot find set identified by id 0 to match [ 689.994150][T23502] H: renamed from dummy0 (while UP) [ 690.837349][T23504] netlink: 'syz.2.4659': attribute type 8 has an invalid length. [ 690.850670][T23504] bond0: entered promiscuous mode [ 690.855843][T23504] bond_slave_0: entered promiscuous mode [ 690.861965][T23504] bond_slave_1: entered promiscuous mode [ 690.867915][T23504] bridge0: entered promiscuous mode [ 690.880161][T23504] gretap0: entered promiscuous mode [ 690.886825][T23504] ip6gretap0: entered promiscuous mode [ 690.895342][T23504] debugfs: 'hsr1' already exists in 'hsr' [ 690.901470][T23504] Cannot create hsr debugfs directory [ 690.907246][T23504] hsr1: entered promiscuous mode [ 692.340781][T23460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 692.558134][T23521] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 692.581936][T23521] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 692.637906][T23528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 692.824530][T23538] IPVS: Unknown mcast interface: syzkaller1 [ 692.994007][T23552] netlink: 'syz.3.4678': attribute type 6 has an invalid length. [ 693.117457][T23557] netlink: 'syz.3.4679': attribute type 28 has an invalid length. [ 693.126705][ T8975] IPVS: starting estimator thread 0... [ 693.135745][T23553] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 693.141317][T23557] netlink: 'syz.3.4679': attribute type 3 has an invalid length. [ 693.180526][ T6086] bond0: (slave bond_slave_0): interface is now down [ 693.193851][T23561] netlink: 'syz.3.4679': attribute type 28 has an invalid length. [ 693.204935][ T6086] bond0: (slave bond_slave_1): interface is now down [ 693.222477][ T6086] bond0: (slave bridge0): interface is now down [ 693.251327][T23558] IPVS: using max 32 ests per chain, 76800 per kthread [ 693.270039][T23561] netlink: 'syz.3.4679': attribute type 3 has an invalid length. [ 693.545702][T23580] netlink: 'syz.3.4685': attribute type 62 has an invalid length. [ 693.584736][T23584] __nla_validate_parse: 9 callbacks suppressed [ 693.584755][T23584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4687'. [ 693.601923][T23547] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4672'. [ 693.618903][T23585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4686'. [ 693.743613][T23591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4689'. [ 693.808019][T23594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.823822][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4689'. [ 693.904516][T23598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4692'. [ 694.184468][T23607] syzkaller0: entered promiscuous mode [ 694.210745][T23607] syzkaller0: entered allmulticast mode [ 694.418656][T23622] ip6tnl2: entered promiscuous mode [ 694.637038][T23638] IPVS: length: 133 != 8 [ 694.748315][T23640] block nbd4: NBD_DISCONNECT [ 694.966113][T23650] nbd: socks must be embedded in a SOCK_ITEM attr [ 694.994365][T23650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4705'. [ 695.312349][T23664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4708'. [ 695.375244][T23664] macvtap0: entered promiscuous mode [ 695.381607][T23664] vlan0: entered promiscuous mode [ 695.387320][T23664] macvtap0: entered allmulticast mode [ 695.395732][T23664] vlan0: entered allmulticast mode [ 695.401210][T23664] veth0_vlan: entered allmulticast mode [ 695.503201][T23669] xt_hashlimit: size too large, truncated to 1048576 [ 695.570815][T23669] xt_hashlimit: size too large, truncated to 1048576 [ 695.785252][T23692] netlink: 'syz.4.4715': attribute type 1 has an invalid length. [ 695.799277][ T6086] bond0: (slave bond_slave_0): interface is now down [ 695.823109][ T6086] bond0: (slave bond_slave_1): interface is now down [ 695.844838][ T6086] bond0: (slave bridge0): interface is now down [ 695.908986][ T6086] bond0: now running without any active interface! [ 696.185733][T23715] netlink: 'syz.4.4722': attribute type 2 has an invalid length. [ 696.506088][T23724] bond2: entered promiscuous mode [ 696.528575][T23724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 696.558727][T23732] netlink: 'syz.1.4727': attribute type 153 has an invalid length. [ 697.032248][T23762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4736'. [ 697.176084][T23766] netlink: 'syz.1.4739': attribute type 10 has an invalid length. [ 697.187071][T23769] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 697.200023][T23766] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.205617][T23770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4740'. [ 697.210292][T23766] bridge_slave_1: left allmulticast mode [ 697.222423][T23766] bridge_slave_1: left promiscuous mode [ 697.229972][T23766] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.246151][T23770] openvswitch: netlink: Flow actions attr not present in new flow. [ 697.287442][T23766] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 698.022150][T23823] validate_nla: 4 callbacks suppressed [ 698.022168][T23823] netlink: 'syz.3.4753': attribute type 1 has an invalid length. [ 698.033373][T23822] vlan3: entered promiscuous mode [ 698.059799][T23822] geneve1: entered promiscuous mode [ 698.065591][T23823] netlink: 'syz.3.4753': attribute type 2 has an invalid length. [ 698.069560][T23825] netlink: 'syz.1.4756': attribute type 1 has an invalid length. [ 698.074926][T23823] netlink: 'syz.3.4753': attribute type 1 has an invalid length. [ 698.083228][T23822] vlan3: entered allmulticast mode [ 698.091319][T23823] netlink: 'syz.3.4753': attribute type 1 has an invalid length. [ 698.101700][T23822] geneve1: entered allmulticast mode [ 698.103326][T23823] netlink: 'syz.3.4753': attribute type 1 has an invalid length. [ 698.116840][T23823] netlink: 'syz.3.4753': attribute type 1 has an invalid length. [ 698.126262][T23823] netlink: 'syz.3.4753': attribute type 1 has an invalid length. [ 698.193544][T23825] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 698.208330][T23825] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 698.261901][T23835] bond8: (slave bridge5): Enslaving as an active interface with a down link [ 698.285434][T17735] IPVS: starting estimator thread 0... [ 698.335967][T23825] bond8: (slave gretap1): making interface the new active one [ 698.351478][T23825] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 698.380676][T23839] IPVS: using max 32 ests per chain, 76800 per kthread [ 698.678975][T23861] __nla_validate_parse: 7 callbacks suppressed [ 698.678992][T23861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4767'. [ 698.715402][T23861] bridge_slave_1: left allmulticast mode [ 698.730275][T23861] bridge_slave_1: left promiscuous mode [ 698.738310][T23861] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.768902][T23861] bridge_slave_0: left allmulticast mode [ 698.776981][T23861] bridge_slave_0: left promiscuous mode [ 698.783331][T23861] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.823125][T23861] bond0: (slave bridge0): Releasing backup interface [ 698.838275][T23861] bridge0 (unregistering): left promiscuous mode [ 698.864634][T23861] bridge0 (unregistering): left allmulticast mode [ 699.247248][T23892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4773'. [ 699.251862][T23891] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4774'. [ 699.298321][T23891] rdma_rxe: rxe_newlink: failed to add lo [ 699.426688][T23906] netlink: 'syz.0.4778': attribute type 1 has an invalid length. [ 699.446802][T23906] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 699.601891][T23920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4781'. [ 699.716508][T23931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4784'. [ 699.748682][T23923] vlan3: entered allmulticast mode [ 699.762891][T23923] veth0_to_bond: entered allmulticast mode [ 699.785635][T23931] netlink: 'syz.1.4784': attribute type 29 has an invalid length. [ 699.841166][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4787'. [ 700.590177][T23964] can: request_module (can-proto-4) failed. [ 702.703190][T23931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 703.086052][T23986] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4798'. [ 703.367489][T24008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 703.404676][T24004] can: request_module (can-proto-0) failed. [ 703.463475][T24011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4806'. [ 703.537365][T24011] validate_nla: 2 callbacks suppressed [ 703.537383][T24011] netlink: 'syz.4.4806': attribute type 2 has an invalid length. [ 703.580762][T24019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4808'. [ 703.586411][T24011] xt_TCPMSS: Only works on TCP SYN packets [ 706.211701][ T6086] bond5: left allmulticast mode [ 706.216609][ T6086] bond5: left promiscuous mode [ 706.221794][ T6086] bridge2: port 1(bond5) entered disabled state [ 706.311978][ T6086] bond0 (unregistering): (slave ip6gre1): Releasing backup interface [ 706.320600][ T6086] ip6gre1 (unregistering): left promiscuous mode [ 706.661787][ T6086] bond1 (unregistering): Released all slaves [ 706.675456][ T6086] bond2 (unregistering): Released all slaves [ 706.690512][ T6086] bond3 (unregistering): Released all slaves [ 706.704547][ T6086] bond0 (unregistering): Released all slaves [ 706.724259][ T6086] bond4 (unregistering): Released all slaves [ 706.739885][ T6086] bond5 (unregistering): Released all slaves [ 706.753267][ T6086] bond6 (unregistering): Released all slaves [ 706.773997][ T6086] bond7 (unregistering): (slave lo): Releasing backup interface [ 706.782666][ T6086] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 706.798576][ T6086] bond7 (unregistering): Released all slaves [ 707.504308][ T6086] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 707.511353][ T6086] batman_adv: batadv0: Removing interface: ipvlan0 [ 707.534527][ T6086] veth1_macvtap: left promiscuous mode [ 707.901127][ T6084] smc: removing ib device syz1 [ 708.003870][ T6089] smc: removing ib device syz2 [ 708.071172][ T6089] smbdirect: ib_dev[syz2] removed [ 708.088799][ T8971] syz1: Port: 1 Link DOWN [ 708.094257][T17735] vxcan1 speed is unknown, defaulting to 1000 [ 708.103681][T17735] syz2: Port: 1 Link DOWN [ 708.153248][ T6084] smbdirect: ib_dev[syz1] removed [ 711.137541][ T6086] IPVS: stop unused estimator thread 0... [ 726.558808][T24134] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4812'. [ 726.559323][T24133] netlink: 'syz.2.4811': attribute type 1 has an invalid length. [ 726.569158][T24135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4813'. [ 726.605197][T24134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4812'. [ 726.634620][T24133] netlink: 'syz.2.4811': attribute type 4 has an invalid length. [ 726.673381][T24133] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4811'. [ 726.750883][T24141] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 726.768770][T24141] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 726.770418][T24146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4817'. [ 726.794949][T24146] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4817'. [ 726.843823][T24146] geneve2: entered promiscuous mode [ 726.856458][T24146] geneve2: entered allmulticast mode [ 726.921642][T24159] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.932573][T24154] pim6reg1: entered allmulticast mode [ 727.225285][T24170] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4821'. [ 727.257535][T24169] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4821'. [ 727.373138][T24178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4824'. [ 727.490206][T24188] SET target dimension over the limit! [ 727.541508][T24188] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4828'. [ 727.606923][T24193] No such timeout policy "syz1" [ 727.634193][T24193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 727.641516][T24193] IPv6: NLM_F_CREATE should be set when creating new route [ 727.648807][T24193] IPv6: NLM_F_CREATE should be set when creating new route [ 727.656031][T24193] IPv6: NLM_F_CREATE should be set when creating new route [ 727.813099][T24200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 727.964251][ T6084] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 728.212265][T24228] xt_hashlimit: size too large, truncated to 1048576 [ 728.695775][T24255] syzkaller0: entered promiscuous mode [ 728.712240][T24255] syzkaller0: entered allmulticast mode [ 728.755622][T24256] bridge5: entered promiscuous mode [ 728.764031][T24256] bridge5: entered allmulticast mode [ 728.821662][T24261] dvmrp0: entered allmulticast mode [ 728.948800][T24266] syzkaller1: entered promiscuous mode [ 728.954431][T24266] syzkaller1: entered allmulticast mode [ 728.964660][T24266] netlink: 'syz.3.4849': attribute type 3 has an invalid length. [ 728.978797][T24266] batadv0: entered promiscuous mode [ 728.985938][T24266] macsec2: entered promiscuous mode [ 728.992752][T24266] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 729.002494][T24266] batadv0: left promiscuous mode [ 729.689816][T24309] x_tables: unsorted entry at hook 3 [ 729.721874][T24268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.756026][T24312] netlink: 'syz.0.4859': attribute type 1 has an invalid length. [ 730.063588][T24327] syzkaller1: entered promiscuous mode [ 730.077254][T24327] syzkaller1: entered allmulticast mode [ 730.127097][T24342] netlink: 'syz.1.4867': attribute type 51 has an invalid length. [ 732.640334][T24367] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 732.802640][T24381] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 733.084352][ T5162] block nbd2: Receive control failed (result -32) [ 733.196984][T24413] __nla_validate_parse: 7 callbacks suppressed [ 733.197001][T24413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4882'. [ 735.943046][T24405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 736.131256][T24435] netlink: 'syz.0.4895': attribute type 1 has an invalid length. [ 736.166123][T24435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 736.177405][T24435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4895'. [ 736.186965][T24435] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 736.198913][T24435] bond3: entered allmulticast mode [ 736.332221][T24435] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 736.336036][T24450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4897'. [ 736.518096][T24459] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4900'. [ 736.623819][T24471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4903'. [ 736.652502][T24451] tipc: Resetting bearer [ 736.663677][T24451] tipc: Resetting bearer [ 736.721009][T24471] chnl_net:caif_netlink_parms(): no params data found [ 736.865150][T24469] syzkaller0: entered promiscuous mode [ 736.887858][T24469] syzkaller0: entered allmulticast mode [ 736.988541][T24487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4909'. [ 737.284698][T24499] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4909'. [ 738.970692][T24487] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 739.086891][T24509] ip6gre0: Master is either lo or non-ether device [ 739.151148][T24509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4912'. [ 739.168496][T24514] openvswitch: netlink: Flow actions attr not present in new flow. [ 739.385627][T24524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4918'. [ 739.474296][T24532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4921'. [ 739.645774][T24548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4922'. [ 739.669718][T24548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4922'. [ 739.865691][T24561] veth0: entered promiscuous mode [ 739.884874][T24561] veth0: left promiscuous mode [ 740.170371][T24567] syzkaller0: entered promiscuous mode [ 740.175889][T24567] syzkaller0: entered allmulticast mode [ 740.320360][T24591] netlink: 'syz.4.4937': attribute type 11 has an invalid length. [ 740.332756][T24591] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4937'. [ 740.406577][T24597] netlink: 'syz.0.4940': attribute type 1 has an invalid length. [ 740.444769][ T6084] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 740.451421][T24597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 740.554809][T24603] 8021q: adding VLAN 0 to HW filter on device bond4 [ 740.576097][T24603] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 740.593506][T24603] bond4: (slave vcan0): Error -95 calling set_mac_address [ 740.807333][T24622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4945'. [ 740.848789][T24622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4945'. [ 740.879720][ T6084] nci: nci_ntf_packet: unknown ntf opcode 0x107 [ 740.899377][T24624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 740.933924][T24632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4948'. [ 741.081061][T24639] xt_SECMARK: invalid mode: 9 [ 741.328986][T24646] netlink: 'syz.0.4952': attribute type 1 has an invalid length. [ 742.944568][T24635] tipc: Started in network mode [ 742.945320][T24622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4945'. [ 742.949534][T24635] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 742.950265][T24635] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 742.976939][T24635] tipc: Enabled bearer , priority 10 [ 743.293215][T24666] netlink: 'syz.0.4958': attribute type 2 has an invalid length. [ 743.965569][T24720] netlink: 'syz.1.4973': attribute type 7 has an invalid length. [ 743.975421][T24720] netlink: 'syz.1.4973': attribute type 8 has an invalid length. [ 744.092446][ T8971] tipc: Node number set to 1 [ 744.666629][T24748] vxcan1 speed is unknown, defaulting to 1000 [ 744.690954][T24748] vxcan1 speed is unknown, defaulting to 1000 [ 744.729621][T24748] vxcan1 speed is unknown, defaulting to 1000 [ 744.763243][T24767] __nla_validate_parse: 9 callbacks suppressed [ 744.763258][T24767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4982'. [ 744.845492][T24767] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 744.889125][T24771] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 744.978840][T24779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4984'. [ 745.072689][T24783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4986'. [ 745.256668][T24796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.278092][T24795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.344430][T24796] netlink: 'syz.3.4989': attribute type 1 has an invalid length. [ 745.365459][T24796] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4989'. [ 745.383259][T24748] infiniband syz2: set active [ 745.385585][T24795] netlink: 'syz.3.4989': attribute type 1 has an invalid length. [ 745.394900][T24748] infiniband syz2: added vxcan1 [ 745.409218][T24802] sctp: [Deprecated]: syz.0.4992 (pid 24802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 745.409218][T24802] Use struct sctp_sack_info instead [ 745.414612][T24748] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 745.429285][T24795] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4989'. [ 745.429381][T24748] infiniband syz2: Couldn't open port 1 [ 745.471931][T24748] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 745.493039][T24748] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 745.511730][T24748] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 745.523908][ T5906] vxcan1 speed is unknown, defaulting to 1000 [ 745.566556][T24748] RDS/IB: syz2: added [ 745.573969][T24748] smc: adding ib device syz2 with port count 1 [ 745.582304][T24748] smc: ib device syz2 port 1 has no pnetid [ 745.607902][ T5906] vxcan1 speed is unknown, defaulting to 1000 [ 745.617518][T24748] vxcan1 speed is unknown, defaulting to 1000 [ 745.946434][T24831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5000'. [ 745.976527][T24831] netlink: 'syz.2.5000': attribute type 7 has an invalid length. [ 746.013132][T24831] netlink: 'syz.2.5000': attribute type 8 has an invalid length. [ 746.029342][T24831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5000'. [ 746.076393][T24748] vxcan1 speed is unknown, defaulting to 1000 [ 746.306398][T24846] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.5004'. [ 746.324572][T24846] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.5004'. [ 746.339130][T24846] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.5004'. [ 746.584944][T24855] syzkaller0: entered promiscuous mode [ 746.585862][T24864] IPv6: Can't replace route, no match found [ 746.599822][T24855] syzkaller0: entered allmulticast mode [ 746.671372][ T5162] block nbd3: Receive control failed (result -1) [ 746.733503][T24870] netlink: 'syz.0.5010': attribute type 13 has an invalid length. [ 746.753186][T24748] vxcan1 speed is unknown, defaulting to 1000 [ 746.760753][T24870] gretap0: refused to change device tx_queue_len [ 746.768156][T24870] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 747.171185][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.564285][T24748] vxcan1 speed is unknown, defaulting to 1000 [ 750.104701][T24941] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 750.180664][T24946] netlink: 'syz.2.5027': attribute type 24 has an invalid length. [ 750.216260][T24748] vxcan1 speed is unknown, defaulting to 1000 [ 750.231822][T24948] __nla_validate_parse: 41 callbacks suppressed [ 750.231839][T24948] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5027'. [ 750.278080][T24948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5027'. [ 750.323088][T24952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5029'. [ 750.325018][T24955] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5028'. [ 750.335238][T24952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5029'. [ 750.368475][T24949] can: request_module (can-proto-3) failed. [ 750.515313][T24962] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5032'. [ 750.570286][T24964] syzkaller1: entered promiscuous mode [ 750.587548][T24964] syzkaller1: entered allmulticast mode [ 750.822336][T24978] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5035'. [ 750.843083][T24748] vxcan1 speed is unknown, defaulting to 1000 [ 750.856216][T24978] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.5035'. [ 750.877076][T24981] netlink: 'syz.0.5037': attribute type 19 has an invalid length. [ 750.894961][T24981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5037'. [ 750.939149][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.939270][T24981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5037'. [ 750.957338][T24981] netlink: 'syz.0.5037': attribute type 19 has an invalid length. [ 750.969728][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.986689][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.997303][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.026703][T24991] gretap2: entered promiscuous mode [ 751.041907][T24991] batman_adv: batadv0: Adding interface: gretap2 [ 751.049127][T24991] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 751.069326][T24991] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 751.778492][T25025] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 751.917166][T25034] syzkaller1: entered promiscuous mode [ 751.927509][T25034] syzkaller1: entered allmulticast mode [ 751.948856][T25037] netlink: 'syz.2.5058': attribute type 1 has an invalid length. [ 751.990771][T25037] 8021q: adding VLAN 0 to HW filter on device bond4 [ 752.076077][T25037] vlan3: entered allmulticast mode [ 752.088571][T25037] veth0_to_bond: entered allmulticast mode [ 752.102842][T25037] bond4: (slave vlan3): making interface the new active one [ 752.114114][T25037] bond4: (slave vlan3): Enslaving as an active interface with an up link [ 752.269326][T25049] tipc: Enabled bearer , priority 0 [ 752.287335][T25049] syzkaller0: MTU too low for tipc bearer [ 752.305255][T25049] tipc: Disabling bearer [ 752.693394][T25081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.135575][T25122] xt_TCPMSS: Only works on TCP SYN packets [ 753.201624][T25125] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 753.256055][T25131] openvswitch: netlink: Missing key (keys=40, expected=100) [ 753.901521][T24982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 754.137224][T25180] xt_hashlimit: size too large, truncated to 1048576 [ 754.230838][T25187] xt_hashlimit: size too large, truncated to 1048576 [ 754.313781][T25192] openvswitch: netlink: Flow actions attr not present in new flow. [ 754.413943][T25195] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 754.471036][T25199] ip6tnl0: Caught tx_queue_len zero misconfig [ 754.543907][T25204] netlink: 'syz.4.5102': attribute type 1 has an invalid length. [ 754.716537][T25201] tun0: tun_chr_ioctl cmd 1074025675 [ 754.733108][T25201] tun0: persist enabled [ 754.966796][T25230] netlink: 'syz.4.5110': attribute type 1 has an invalid length. [ 755.001428][T25230] bond5: entered promiscuous mode [ 755.006605][T25230] bond5: entered allmulticast mode [ 755.012316][T25230] 8021q: adding VLAN 0 to HW filter on device bond5 [ 755.124771][T25232] syzkaller1: entered promiscuous mode [ 755.140394][T25232] syzkaller1: entered allmulticast mode [ 755.538920][T25256] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 757.883436][T25286] netlink: 'syz.0.5127': attribute type 1 has an invalid length. [ 757.925704][T25286] bond5: entered promiscuous mode [ 757.946024][T25286] 8021q: adding VLAN 0 to HW filter on device bond5 [ 758.032906][T25286] 8021q: adding VLAN 0 to HW filter on device bond5 [ 758.057587][T25286] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 758.069745][T25286] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 758.093452][T25286] bond5: (slave ip6gre1): making interface the new active one [ 758.108778][T25286] ip6gre1: entered promiscuous mode [ 758.119839][T25286] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 758.263056][T25309] netlink: 'syz.1.5132': attribute type 10 has an invalid length. [ 758.273413][T25309] __nla_validate_parse: 17 callbacks suppressed [ 758.273430][T25309] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5132'. [ 758.473257][T25316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.478540][T25323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5137'. [ 758.492993][T25316] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5134'. [ 758.513024][T25323] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5137'. [ 758.549824][T25323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5137'. [ 758.814813][T25338] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5142'. [ 759.285399][ T5162] block nbd4: Receive control failed (result -32) [ 759.545407][T25383] netlink: 'syz.2.5155': attribute type 2 has an invalid length. [ 759.556080][T25383] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5155'. [ 759.585568][T25385] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5157'. [ 759.796821][T25404] xt_TPROXY: Can be used only with -p tcp or -p udp [ 759.834614][T25408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5164'. [ 759.839496][T25409] netlink: 'syz.4.5161': attribute type 8 has an invalid length. [ 759.844365][T25408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5164'. [ 759.889019][T25412] IPv6: addrconf: prefix option has invalid lifetime [ 760.410896][T25436] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 762.723078][T25398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 762.734561][T25406] netlink: 'syz.1.5165': attribute type 1 has an invalid length. [ 763.012232][T25458] netlink: 'syz.2.5176': attribute type 1 has an invalid length. [ 763.153969][T25464] openvswitch: netlink: Actions may not be safe on all matching packets [ 763.174158][T25458] 8021q: adding VLAN 0 to HW filter on device bond5 [ 763.389655][T25480] tipc: Can't bind to reserved service type 0 [ 763.391726][T25484] nbd: must specify a size in bytes for the device [ 763.869913][T25505] __nla_validate_parse: 6 callbacks suppressed [ 763.869932][T25505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5196'. [ 764.019240][T25510] bridge0: port 3(vlan4) entered blocking state [ 764.041581][T25510] bridge0: port 3(vlan4) entered disabled state [ 764.059001][T25510] vlan4: entered allmulticast mode [ 764.070392][T25510] geneve0: entered allmulticast mode [ 764.079351][T25510] vlan4: entered promiscuous mode [ 764.083591][T25519] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5200'. [ 764.084464][T25510] geneve0: entered promiscuous mode [ 764.336003][T25525] netlink: 'syz.4.5201': attribute type 1 has an invalid length. [ 764.350846][T25525] netlink: 'syz.4.5201': attribute type 4 has an invalid length. [ 764.381398][T25525] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5201'. [ 764.689355][T25558] veth1_mac: renamed from veth0_vlan [ 764.932510][ T6084] nci: nci_rsp_packet: unknown rsp opcode 0x124 [ 767.785775][T25583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.993036][T25617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5222'. [ 768.152782][T25618] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 768.221341][T25618] bond6 (unregistering): Released all slaves [ 768.296076][T25645] sctp: [Deprecated]: syz.3.5228 (pid 25645) Use of int in maxseg socket option. [ 768.296076][T25645] Use struct sctp_assoc_value instead [ 768.587922][T25663] netlink: 948 bytes leftover after parsing attributes in process `syz.4.5231'. [ 768.628997][T25665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5233'. [ 768.766196][T25673] netlink: 'syz.1.5234': attribute type 10 has an invalid length. [ 768.813176][T25673] team0: Port device dummy0 added [ 768.886769][T25677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5234'. [ 769.074567][T25688] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 769.337376][T25697] Bluetooth: MGMT ver 1.23 [ 769.509744][T25705] xt_cgroup: invalid path, errno=-2 [ 769.710249][T25714] delete_channel: no stack [ 769.746548][T25717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5243'. [ 770.053845][T25738] syz.0.5249 uses old SIOCAX25GETINFO [ 770.055561][T25717] xfrm1: entered promiscuous mode [ 770.083442][T25717] xfrm1: entered allmulticast mode [ 770.260656][T25742] tipc: Enabled bearer , priority 0 [ 770.291322][T25742] syzkaller0: entered promiscuous mode [ 770.307107][T25742] syzkaller0: entered allmulticast mode [ 770.326496][T25752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5251'. [ 770.546287][T25769] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5256'. [ 770.711856][T25778] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5259'. [ 770.739032][T25778] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5259'. [ 770.898069][T25778] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 770.919178][T25778] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 771.111974][T25784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5261'. [ 771.171954][T25787] xt_CT: You must specify a L4 protocol and not use inversions on it [ 771.432924][T25741] tipc: Resetting bearer [ 771.605468][T25804] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5264'. [ 771.662556][T25741] tipc: Disabling bearer [ 771.766436][T25809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5266'. [ 771.792300][T25809] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5266'. [ 772.135143][T25826] netlink: 'syz.4.5270': attribute type 9 has an invalid length. [ 772.667641][T25852] tipc: Enabled bearer , priority 10 [ 773.083190][T25876] netlink: 'syz.4.5284': attribute type 10 has an invalid length. [ 773.160344][T25876] netlink: 'syz.4.5284': attribute type 10 has an invalid length. [ 773.178200][T25876] batadv0: entered promiscuous mode [ 773.183595][T25876] batadv0: entered allmulticast mode [ 773.194554][T25876] bridge0: port 3(batadv0) entered blocking state [ 773.211502][T25885] xt_hashlimit: max too large, truncated to 1048576 [ 773.219022][T25876] bridge0: port 3(batadv0) entered disabled state [ 773.242820][T25876] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 773.323672][T25888] netlink: 'syz.1.5288': attribute type 39 has an invalid length. [ 773.383666][T25893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.780576][T25916] xt_hashlimit: invalid rate [ 774.472905][T25974] __nla_validate_parse: 15 callbacks suppressed [ 774.472923][T25974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5316'. [ 774.538875][T25966] vxcan1 speed is unknown, defaulting to 1000 [ 774.546158][T25970] team_slave_1: Caught tx_queue_len zero misconfig [ 775.193066][T26008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5326'. [ 775.195651][T26009] netlink: 'syz.2.5326': attribute type 1 has an invalid length. [ 775.254109][T26009] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5326'. [ 775.834735][T26037] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5332'. [ 775.886072][T26040] netlink: 'syz.2.5332': attribute type 1 has an invalid length. [ 776.021220][T26043] netlink: 'syz.4.5333': attribute type 29 has an invalid length. [ 776.063384][T26043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5333'. [ 776.141280][T26045] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 776.207257][T26045] bond4: (slave lo): Enslaving as an active interface with an up link [ 776.223198][T26045] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 776.246010][T26051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 776.301920][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 776.512969][T26067] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5340'. [ 776.596708][T26077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5343'. [ 776.824987][T26105] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5345'. [ 777.063940][T26123] syzkaller0: entered promiscuous mode [ 777.072516][T26123] syzkaller0: entered allmulticast mode [ 777.141630][T26127] netlink: 'syz.1.5354': attribute type 1 has an invalid length. [ 777.152239][T26127] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 777.414363][T26143] netlink: 'syz.0.5357': attribute type 62 has an invalid length. [ 779.708604][T26087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 779.924949][T26151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5359'. [ 779.958696][T26153] pim6reg: entered allmulticast mode [ 779.968630][T26159] netlink: 'syz.2.5361': attribute type 29 has an invalid length. [ 780.017518][T26159] netlink: 'syz.2.5361': attribute type 29 has an invalid length. [ 780.028517][T26160] nbd: must specify an index to disconnect [ 780.060001][T26159] netlink: 'syz.2.5361': attribute type 32 has an invalid length. [ 780.103817][T26159] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5361'. [ 780.132840][T26167] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5359'. [ 780.414268][T26196] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5369'. [ 781.320096][T26226] [ 781.322463][T26226] ====================================================== [ 781.329479][T26226] WARNING: possible circular locking dependency detected [ 781.336509][T26226] syzkaller #0 Not tainted [ 781.340928][T26226] ------------------------------------------------------ [ 781.347945][T26226] syz.0.5376/26226 is trying to acquire lock: [ 781.354007][T26226] ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 781.363524][T26226] [ 781.363524][T26226] but task is already holding lock: [ 781.370891][T26226] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 781.380490][T26226] [ 781.380490][T26226] which lock already depends on the new lock. [ 781.380490][T26226] [ 781.390897][T26226] [ 781.390897][T26226] the existing dependency chain (in reverse order) is: [ 781.399912][T26226] [ 781.399912][T26226] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 781.407837][T26226] _raw_spin_lock_bh+0x36/0x50 [ 781.413143][T26226] nr_rt_ioctl+0x40c/0xf90 [ 781.418093][T26226] sock_do_ioctl+0x101/0x320 [ 781.423220][T26226] sock_ioctl+0x5c6/0x7f0 [ 781.428088][T26226] __se_sys_ioctl+0xfc/0x170 [ 781.433218][T26226] do_syscall_64+0x15f/0xf80 [ 781.438344][T26226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.444768][T26226] [ 781.444768][T26226] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 781.452785][T26226] _raw_spin_lock_bh+0x36/0x50 [ 781.458096][T26226] nr_rt_ioctl+0x215/0xf90 [ 781.463044][T26226] sock_do_ioctl+0x101/0x320 [ 781.468172][T26226] sock_ioctl+0x5c6/0x7f0 [ 781.473037][T26226] __se_sys_ioctl+0xfc/0x170 [ 781.478166][T26226] do_syscall_64+0x15f/0xf80 [ 781.483293][T26226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.489715][T26226] [ 781.489715][T26226] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 781.497548][T26226] __lock_acquire+0x15a5/0x2cf0 [ 781.502940][T26226] lock_acquire+0x106/0x350 [ 781.507986][T26226] _raw_spin_lock_bh+0x36/0x50 [ 781.513281][T26226] nr_rt_device_down+0xbe/0x860 [ 781.518663][T26226] nr_device_event+0x137/0x150 [ 781.523985][T26226] notifier_call_chain+0x1ad/0x3d0 [ 781.529626][T26226] netif_close_many+0x2ae/0x420 [ 781.535009][T26226] netif_close+0x160/0x220 [ 781.539962][T26226] dev_close+0x10a/0x220 [ 781.544735][T26226] bpq_device_event+0x377/0x6a0 [ 781.550184][T26226] notifier_call_chain+0x1ad/0x3d0 [ 781.555829][T26226] __dev_notify_flags+0x16d/0x310 [ 781.561383][T26226] netif_change_flags+0xe8/0x1a0 [ 781.566868][T26226] dev_change_flags+0x130/0x270 [ 781.572244][T26226] dev_ioctl+0x7b4/0x1150 [ 781.577114][T26226] sock_do_ioctl+0x23e/0x320 [ 781.582238][T26226] sock_ioctl+0x5c6/0x7f0 [ 781.587105][T26226] __se_sys_ioctl+0xfc/0x170 [ 781.592226][T26226] do_syscall_64+0x15f/0xf80 [ 781.597354][T26226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.603770][T26226] [ 781.603770][T26226] other info that might help us debug this: [ 781.603770][T26226] [ 781.613981][T26226] Chain exists of: [ 781.613981][T26226] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 781.613981][T26226] [ 781.627783][T26226] Possible unsafe locking scenario: [ 781.627783][T26226] [ 781.635230][T26226] CPU0 CPU1 [ 781.640604][T26226] ---- ---- [ 781.645956][T26226] lock(nr_neigh_list_lock); [ 781.650618][T26226] lock(&nr_node->node_lock); [ 781.657883][T26226] lock(nr_neigh_list_lock); [ 781.665058][T26226] lock(nr_node_list_lock); [ 781.669629][T26226] [ 781.669629][T26226] *** DEADLOCK *** [ 781.669629][T26226] [ 781.677759][T26226] 2 locks held by syz.0.5376/26226: [ 781.682960][T26226] #0: ffffffff8fde4240 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 781.691767][T26226] #1: ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 781.701774][T26226] [ 781.701774][T26226] stack backtrace: [ 781.707664][T26226] CPU: 1 UID: 0 PID: 26226 Comm: syz.0.5376 Not tainted syzkaller #0 PREEMPT(full) [ 781.707678][T26226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 781.707693][T26226] Call Trace: [ 781.707699][T26226] [ 781.707705][T26226] dump_stack_lvl+0xe8/0x150 [ 781.707724][T26226] print_circular_bug+0x2e1/0x300 [ 781.707738][T26226] check_noncircular+0x12e/0x150 [ 781.707751][T26226] __lock_acquire+0x15a5/0x2cf0 [ 781.707770][T26226] ? __lock_acquire+0x6b5/0x2cf0 [ 781.707791][T26226] ? dsa_user_netdevice_event+0x495/0x2850 [ 781.707804][T26226] ? packet_notifier+0x121/0xf70 [ 781.707818][T26226] ? nr_rt_device_down+0xbe/0x860 [ 781.707827][T26226] lock_acquire+0x106/0x350 [ 781.707842][T26226] ? nr_rt_device_down+0xbe/0x860 [ 781.707853][T26226] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 781.707867][T26226] ? nr_rt_device_down+0xbe/0x860 [ 781.707876][T26226] _raw_spin_lock_bh+0x36/0x50 [ 781.707890][T26226] ? nr_rt_device_down+0xbe/0x860 [ 781.707899][T26226] nr_rt_device_down+0xbe/0x860 [ 781.707908][T26226] ? nr_device_event+0x12f/0x150 [ 781.707925][T26226] nr_device_event+0x137/0x150 [ 781.707941][T26226] notifier_call_chain+0x1ad/0x3d0 [ 781.707955][T26226] netif_close_many+0x2ae/0x420 [ 781.707970][T26226] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 781.707984][T26226] ? __pfx_netif_close_many+0x10/0x10 [ 781.707999][T26226] ? bond_netdev_event+0x231/0xfa0 [ 781.708013][T26226] ? __neigh_ifdown+0x7fd/0x8c0 [ 781.708031][T26226] netif_close+0x160/0x220 [ 781.708046][T26226] ? __pfx_netif_close+0x10/0x10 [ 781.708069][T26226] ? __asan_memset+0x22/0x50 [ 781.708089][T26226] ? macvtap_device_event+0xd1/0x400 [ 781.708112][T26226] dev_close+0x10a/0x220 [ 781.708123][T26226] bpq_device_event+0x377/0x6a0 [ 781.708137][T26226] notifier_call_chain+0x1ad/0x3d0 [ 781.708150][T26226] __dev_notify_flags+0x16d/0x310 [ 781.708161][T26226] ? __pfx___dev_notify_flags+0x10/0x10 [ 781.708171][T26226] ? __dev_change_flags+0x5a0/0x7e0 [ 781.708182][T26226] ? __pfx___dev_change_flags+0x10/0x10 [ 781.708194][T26226] ? full_name_hash+0x92/0xe0 [ 781.708204][T26226] netif_change_flags+0xe8/0x1a0 [ 781.708216][T26226] dev_change_flags+0x130/0x270 [ 781.708227][T26226] dev_ioctl+0x7b4/0x1150 [ 781.708244][T26226] sock_do_ioctl+0x23e/0x320 [ 781.708258][T26226] ? __pfx_sock_do_ioctl+0x10/0x10 [ 781.708271][T26226] ? do_futex+0x333/0x420 [ 781.708285][T26226] sock_ioctl+0x5c6/0x7f0 [ 781.708298][T26226] ? __pfx_sock_ioctl+0x10/0x10 [ 781.708311][T26226] ? __fget_files+0x2a/0x420 [ 781.708322][T26226] ? __fget_files+0x3a0/0x420 [ 781.708331][T26226] ? __fget_files+0x2a/0x420 [ 781.708342][T26226] ? bpf_lsm_file_ioctl+0x9/0x20 [ 781.708356][T26226] ? __pfx_sock_ioctl+0x10/0x10 [ 781.708368][T26226] __se_sys_ioctl+0xfc/0x170 [ 781.708382][T26226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.708392][T26226] do_syscall_64+0x15f/0xf80 [ 781.708407][T26226] ? trace_irq_disable+0x3b/0x140 [ 781.708421][T26226] ? clear_bhb_loop+0x40/0x90 [ 781.708433][T26226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.708443][T26226] RIP: 0033:0x7ff39fd9cdd9 [ 781.708454][T26226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.708464][T26226] RSP: 002b:00007ff3a0b8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 781.708475][T26226] RAX: ffffffffffffffda RBX: 00007ff3a0015fa0 RCX: 00007ff39fd9cdd9 [ 781.708483][T26226] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008 [ 781.708490][T26226] RBP: 00007ff39fe32d69 R08: 0000000000000000 R09: 0000000000000000 [ 781.708496][T26226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.708503][T26226] R13: 00007ff3a0016038 R14: 00007ff3a0015fa0 R15: 00007ffca3ffdd98 [ 781.708515][T26226] [ 782.101431][T26226] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5376'. [ 783.239753][T26178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512