last executing test programs: 3.645935463s ago: executing program 1 (id=1971): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005200010000000000000000000203000008000900"], 0x1c}}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="0a000100aaaa00"], 0x48}}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r4, 0x110, 0x6, 0x0, &(0x7f0000000280)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(r5, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x86c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.844433554s ago: executing program 4 (id=1988): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000009c0)={0x7, &(0x7f0000000480)=[{@none}, {}, {@none}, {@none}, {@none}, {@fixed}, {@none}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r2, 0x1, 0x70bd2b, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x240048d4}, 0x4000004) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, 0x8, 0x6, 0x801}, 0x14}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0xa4, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x2, 0x7, 0x6, 0xfffb, 0x8, 0x5, 0xffff, 0x5, [{0x7, 0x9, 0x81, 0xfff}, {0x7, 0x9, 0x5, 0x2}, {0x8, 0x8, 0x8, 0x6e}, {0x1, 0x1, 0x4, 0x5}, {0xb, 0x4, 0x8, 0x6}, {0x4, 0x3, 0x1ff, 0x3}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) ioctl(r7, 0x2, &(0x7f0000000080)="75ae41d17b8b40af57e0104bcecdd8779648b31c527ae0c780464cfee04e9a08a20076a3208ee1301f6942dac0ace4be8141f2c98e92b02545fd49e1f67b9b734baf587bfa9f101f94bda7f11a01faf6ee81acf0fc65084f1afb5ca7554080860a5d066605be90a7cb88386d98c9c669c57cbea4289ce5562dcb8e0a171d39971858b8e561") 2.73269646s ago: executing program 4 (id=1991): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) (async) 2.701966s ago: executing program 1 (id=1992): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(r0, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000014c0)={@val={0xa, 0x809b}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x2, 0x1c, 0x65, 0x0, 0xdc, 0x2, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1f, 0x7f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x36) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18004f000071100c000000000079ff8d04000000000000000100000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x9300}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.628771109s ago: executing program 4 (id=1994): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x48, r4, 0x101, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "4ffd7cf928"}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x20004014) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000240)=0xc) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r12, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r13 = socket$nl_route(0x10, 0x3, 0x0) splice(r13, 0x0, r12, 0x0, 0x2, 0x2) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r14) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r15, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r16, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r17 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x56}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r10}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r12}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r16}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x4e}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2d}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r17}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x43}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x40) r18 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r18}}, 0x40) syz_open_procfs$namespace(r18, &(0x7f0000000040)='ns/user\x00') sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@bridge_getlink={0x20, 0x12, 0x1, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0xc000, 0x8801}}, 0x20}, 0x1, 0x0, 0x0, 0x40811}, 0x0) 1.645494776s ago: executing program 4 (id=2008): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x2, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @rand_addr=0x64010100}, 0xc) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x7f}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) sendmsg$inet6(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0xa, 0x4e24, 0x6, @empty, 0x7}, 0x1c, 0x0}, 0x20000050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000040)=0x1) 1.358780335s ago: executing program 4 (id=2013): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x922000000003, 0x11) socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$kcm(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x4, 0x8000000002, 0xfffffffbffffffff, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x3, 0x0, 0xfffffffffffffc, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 1.355115415s ago: executing program 1 (id=2015): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) accept$inet(r1, 0x0, &(0x7f0000000240)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000040)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r2, 0xee00}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1.300428139s ago: executing program 2 (id=2016): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000080)="0d94124ee0e709", 0x7}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0]}}, 0x0, 0x2f, 0x0, 0xb}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000007110bb000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) 1.16103421s ago: executing program 1 (id=2017): syz_emit_ethernet(0x7e, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6015690900482ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000000003ff000000000800000086dd88a888be0800633f8018"], 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000000740)=""/209, 0x0, 0xd1, 0x1, 0xc}, 0x28) r1 = socket$inet(0x2, 0x5, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e00)={'veth0_to_team\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x16, 0xa, &(0x7f0000001e40)=ANY=[@ANYBLOB="1843", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085100000fcffffff"], &(0x7f0000001540)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001580)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r0, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000015c0)=[{0x0, 0x4, 0x5, 0x3}], 0x10, 0x1}, 0x94) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="54df85d951fd2cc2e9704adb6620fd6352a4f1d4ced38891d505111bc62d575909a63d3847e68e137ff343ca53d4bd7dd71d2ceec06138c08c3ea7e44944228136d038a3e23fbe0d6b436ccd02586ad21081d2b6fbcefc98f7a2ba68f6c8574bfd03f0016c09152b47f4a8706e89923e4c17e2a975c8516ebfbfbe1cf2e50e9ba1cda3716ff36f06e41dd62b777b7918039bb691a864e1631f6b7780007375fd071b6f992dd63e33c66ff3603b165b52fd778c06d11332e98eb49ddbe8e88b0c69c109476c7dc6859d2a97794e568ee44b0ee05e340ae46de26a10090521ebe5a72f1cebddf4a24c58bdae7a22a2d22018b749ff", 0xf4}, {&(0x7f0000000440)="32716dbefea70dce5fc057ee8d4e3802e9c83c220141a83aae2b0b9f741d46e7f4fce7e1cc0ab1c4e1df16c9245408aaa767f248c7c0297e2529eb984ee2944f33655deeb15ee7c2dab13b5537dd73e5ec", 0x51}, {&(0x7f00000008c0)="0361bd18490c6a72da938c665fd6932533b9d284bba9e35ceabe0635693635eab2171a7d77aab1add3873da03bb8a1daa2424497daeb5c00a11e402e7d51a92eb30f96631fd3455ff3ea14cad7ca74c1fb6e32daad0042fd66cbb5a45cdb38c87a4fd19712502102fda7b1366baec6a740af415438a33758055660d1adc43c8628a25cebcb6021922a89036c14b8f7f1cf902b4e9b724e9ce09362b3630f0443af5f62bc4b", 0xa5}], 0x3}, 0x4c080) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000017c0)={r3, &(0x7f0000000680)='\xfb\xe2y\xd9\x9bDS\xec\xc8\x1fJ[\xd9\x1fO\xe2\xa3k\xfa\xfd}x\xd6\xdc! \x8b\x8f\x01A\xa9 \xbd\x18\xb3\xf9\aw\x81T\n\xd0+\xfa\x05Bt\x92\x87\xf1\"\xd5Y\xa6\x89)\xfeh\x02\xf4Q\x1b\xdb\xd8\xd7%\xaf\x01\x1d\x16\x9d\x10_\xe7x\x80\xf3\x7f\xc1\xe9\v\x11\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00n!\xa7\xca\xef?\xdd\x1c\bZ\xfb3\xb8\xfd\x9c\xd0\x90\x03a\x00J_\xad\xce\xebF=l\x04>\x9c\xa6\xd4\xe9Q\xa3h\xd5\x17\xc7\x8dq6\x8f*\x03\x14', 0x141101, &(0x7f0000001700)={@_ha_fsid={[0x6, 0x8000]}, {0x401, 0x5, 0x8, 0x100000001}}, 0xa, &(0x7f0000001740)={@_ha_fsid}, &(0x7f0000001780)=0x6}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x2, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r6, r6, 0x2e, 0x2000}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtaction={0x14, 0x31, 0x8, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000018c0)=@filter={'filter\x00', 0xe, 0x4, 0x4d8, 0xffffffff, 0x0, 0x248, 0x0, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x2eeb1b6], 0x0, 0x21, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0xfffffffc, 0x3, 0x0, [0x905a, 0x7, 0xc, 0xe42, 0xff, 0x6, 0xf55c, 0x3, 0x3, 0x8, 0x4, 0x10, 0x8, 0x3, 0x1, 0x5c4], 0x10}}, @common=@ah={{0x30}, {[0x4d2, 0x4d5], 0x2, 0x1, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0x0, 0xff000000, 0xff], @ipv6=@remote, [0x101000000, 0x0, 0xffffffff, 0xff], @ipv4=@remote, [0xff000000, 0xffffff00, 0xff000000, 0xff], @ipv6=@empty, [0x0, 0xffffff00, 0xffffffff, 0xff], 0x0, 0x2, 0x2f, 0x4e20, 0x4e21, 0x4e21, 0x4e21, 0x40, 0x2039}, 0x0, 0x61}}, @common=@frag={{0x30}, {[0x81, 0x40], 0x41e, 0x5, 0x3}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000028c0)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sched_cls=0x36}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000003a000004010000000000000000002e3000000000"], 0x0, 0x28}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r11, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r12, r9, 0x3e, r9}, 0x5) ioctl$XFS_IOC_AG_GEOMETRY(r10, 0xc080583d, &(0x7f00000005c0)={0xf25b, 0xffffff84, 0x400, 0x5, 0x3, 0xfffffffe, 0x1, 0x2}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r14, &(0x7f0000000840)={0x2}) r15 = socket(0x1, 0x803, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r16, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r15], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000640)=[@in6={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb211}], 0x1c) 1.158644082s ago: executing program 2 (id=2018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf8566194200000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) accept(r4, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000240)=0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x1, 0x8, 0x29829a66, 0xa00, {{0x37, 0x4, 0x0, 0x1, 0xdc, 0x68, 0x0, 0x5, 0x2f, 0x0, @local, @remote, {[@end, @cipso={0x86, 0x30, 0x3, [{0x1, 0xa, "3edd9edf2345fbcb"}, {0x2, 0xc, "37352ae2cf9504a6f3c8"}, {0x5, 0x3, "87"}, {0x1, 0x3, "fe"}, {0x5, 0xe, "48f0709f351bf129ec7037a8"}]}, @timestamp_addr={0x44, 0x24, 0x9f, 0x1, 0x2, [{@private=0xa010102}, {@private=0xa010100, 0x2}, {@rand_addr=0x64010102, 0x7}, {@loopback, 0xff1}]}, @rr={0x7, 0x1f, 0x4, [@private=0xa010101, @local, @broadcast, @remote, @private=0xa010101, @multicast2, @rand_addr=0x64010102]}, @rr={0x7, 0x23, 0x68, [@rand_addr=0x64010100, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2, @rand_addr=0x64010102, @broadcast, @local]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe7, [@multicast1]}, @timestamp_addr={0x44, 0x24, 0xb0, 0x1, 0x7, [{@multicast2, 0x8}, {@remote, 0x1a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@empty, 0x9}]}]}}}}}) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x101, @vifc_lcl_ifindex=r6, @multicast1}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}}, 0x24040800) 1.156933436s ago: executing program 3 (id=2019): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000003c0)=0x5, 0x4) r1 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000c00100023860000800000000000000000000d1d9c23091439f73519250e6e58f5465f221e880da5fecf1daaa9a9b12e92fde85c1dd6212562cf35a41806851d0b2219beb0325d3252c954388e154cf34ce02b94ce5a87deeee4a8cf0ed7d8aa9d530683f4f8a1ddaed1a29522c948306000c6528daf814475fdaf23d9a4f8fd7d14d09d317fe937f140d358fefe16dd69c013735ca4a56b88f51e65d73b06c697f47dddb0fcbca84e12359dd492800c3f83c597334dd15dac8a2e5a315b4c37ca51bbfd00b40dfa4a5afdf9cb9b47be11f4900dd559909d4020d9a7", @ANYRES32=r5, @ANYBLOB="0000000000000000280012800b00010067656e65766500001800028014000700ff020000000000000000000000000001"], 0x48}, 0x1, 0x2}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x69}}, &(0x7f0000000000)='GPL\x00'}, 0x90) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000)=0x5, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000335200400"/17], 0x44}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f207000000005c71a5788638742f9a0000fdffffffd40e00002000000495447f7f3c68530f2008658f30301ffa8973cecb830c8db622ec0790"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, r7}, 0x94) 1.090477572s ago: executing program 0 (id=2020): r0 = socket(0x1d, 0x2, 0x6) bind$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c0004800500030080ff00000500030004080000050003000600faff05000300000000000500030000f3000008000100ffffffff080002"], 0x50}}, 0x0) recvfrom$packet(r0, &(0x7f0000000000)=""/122, 0x7a, 0x10040, &(0x7f0000000100)={0x11, 0x5, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) syz_emit_ethernet(0xe4d, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) 993.403444ms ago: executing program 3 (id=2021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56661, 0x70bf29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xffff, 0xfffd}}}]}, 0x38}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x10003, 0x8, 0x20000000, 0x3, 0x2}, 0x2, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'vlan1\x00', {0x2, 0x0, @multicast2}}) 922.422232ms ago: executing program 2 (id=2022): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0xa2ec8b013dc0bd73, &(0x7f0000002580)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000130001b39454e0a3d0f26900050000009cfd1d66688ff37dc60ccf794815f08ef8641a6473813ea9c45f7c4b185571"], 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600110d0000000000000000030000000000000008000a00fe03ffff"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x10000000000037) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r6, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0xa, 0x1, 0x42028, r4, 0xd0c, '\x00', 0x0, r5, 0x5, 0x2, 0x2, 0x1}, 0x50) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0x17, 0x34, @random="4890901a1ce845ae539948d7cec57dc2df35ce"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "2bac4ec5a1e1a1ff75058e0460ed9ead"}, @NL80211_ATTR_PMKID={0x14, 0x55, "8216b26ad4adf8f832c2b3e4bbc1b6f8"}]}, 0x78}, 0x1, 0x0, 0x0, 0x48000}, 0x5) shutdown(r3, 0x2) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000400)={0x6, &(0x7f0000000300)=[{0x6, 0x8, 0x5, 0x75b}, {0x1, 0x0, 0x5, 0x456}, {0xe0e3, 0xc, 0x1, 0x646}, {0x1, 0x0, 0x10, 0xfffffffc}, {0x5, 0x5, 0xfe, 0xd2}, {0x8, 0x0, 0x4, 0xd}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000180)=0x1, 0x4) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8f7f1c18000020000000e6c809d51eabbdbe"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31}, 0x94) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0xd}}}, 0x24}}, 0x4000000) recvmmsg$unix(r10, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c) r11 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r11, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x16, 0x8}}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0x6}, {0x5}}}, 0x24}, 0x1, 0x40030000000000, 0x0, 0x4000091}, 0x4000810) 921.252122ms ago: executing program 1 (id=2023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab", @ANYRESOCT=r0], 0xfdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x7fffd, 0x80, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000000) 914.927488ms ago: executing program 0 (id=2024): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1835eb265ba7f20e413597129961ed189d63c3391c4854d66a1452ed6b21900c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b710000004d0012803b6f2811032d68bea0612044f47c2842b277eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eba9024644942e3645a3e6db0d1191744909497df00d71a338c0c6a42d17"], 0xb4}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 737.866265ms ago: executing program 0 (id=2025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000040), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) 654.510232ms ago: executing program 1 (id=2026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x43030, r0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8a75, 0x14}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5bc29c2109"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5a58c230d6abb9d82b3dc0ac59"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x58}}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x3, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="410401c3"], 0x4) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x43030, r0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8a75, 0x14}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5bc29c2109"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5a58c230d6abb9d82b3dc0ac59"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x58}}, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x3, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) (async) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="410401c3"], 0x4) (async) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) 648.305331ms ago: executing program 3 (id=2027): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x168, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x1]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRES64=r4, @ANYRES8=r4, @ANYRESOCT=r0], 0x38}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000100039042abd708818f09906384e9ce4", @ANYRES32=r5, @ANYBLOB="03000000611007002000128008000100736974001400028006000d0000080000080003000a010102"], 0x40}}, 0x24008044) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140), 0x4) (async) r6 = accept4$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, &(0x7f0000000700)=0x10, 0x80000) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000740)="42cb354739cd889939faa2e7fcfbc142401a43cb63cde000c16740ce01105d8741ad10f6cd475067b4631868b34b7a", 0x2f) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010029bd708a622a5213b7c70ee000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004090) (async) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400002d2707000000878802f86a517d8e24d5d1ed8805560b614edbdf250d000e00a2a91a3735d7ad2c21a2bc768ae794f853b21c88581550922ed860ad913c9df50457e123f00dd997f97b1741826451c6f83ebe45da7a29901324d0e25feb35edeb0a4da38febc65179eb9242b83dbec17afcbdbafc53a37c2cda5ac4412c6f76ae683f37beff492c6fad0320f31c8994582f6366ea4045526c9cf729beae5d6423c4a3b88c747e0004ef6bcdef648d530308d064f7f27583534c45c0b0ae105065e678be23d95cb6ce994067232c"], 0x14}}, 0x4008810) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f0000000440)={0x6}, 0x1) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async, rerun: 64) sendto$inet6(r10, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0xff01, 0x5, 0xfb, 0x46}]}, 0x10) close(0x3) (async, rerun: 32) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x2, 0x3, 0x78d, 0x9, 0x5}, &(0x7f0000000080)=0x14) (rerun: 32) 642.649321ms ago: executing program 2 (id=2028): r0 = socket$netlink(0x10, 0x3, 0xb0c562e5a8e32db) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000000)={0x2, 0x4, @status={[0x3, 0x43, 0x4801, 0x7, 0x3ff, 0x3]}, [0xd72f, 0x3ff, 0x3ff, 0x5, 0x7, 0x100, 0x2, 0x7, 0x3, 0x6, 0x7, 0x3, 0x47, 0x4b2525f6, 0x2, 0x6, 0x9, 0x1, 0x9, 0x8, 0x100000001, 0x1, 0x7fffffffffffffff, 0xffffffffffffffa4, 0x2, 0x8, 0x7fff, 0x0, 0x10000, 0x563b, 0x3, 0x4, 0x5, 0x9, 0x6, 0xfffffffffffffffd, 0xe5, 0x3, 0x5, 0x1, 0x40, 0x0, 0x7ff, 0x2, 0x7, 0x1d, 0x6, 0x5d28, 0x6, 0x98, 0xf, 0xfc, 0x0, 0xa56, 0xfffffffffffff6a1, 0x9, 0xffffffff, 0x5, 0x7, 0x5, 0x0, 0x6, 0xffff, 0x7]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000b80)={r0, &(0x7f0000000a80)='+[\xd4:\x00', 0x2200, &(0x7f0000000ac0)={@_ha_fsid={[0x100, 0x2]}, {0x7fff, 0x5, 0x8, 0xc77}}, 0x4, &(0x7f0000000b00)={@_ha_fsid}, &(0x7f0000000b40)=0x7f}) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000c00)={0x4, &(0x7f0000000bc0)=[{0x7, 0x2, 0x8, 0x9}, {0x84, 0x1, 0x7, 0x3}, {0xfffe, 0x65, 0x3, 0x4}, {0x24d, 0x8, 0x9, 0x324}]}) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000cc0)={0x9, &(0x7f0000000c40)=[{0x1, 0x2, 0xf, 0x1}, {0xffff, 0xa3, 0x1, 0xa666}, {0x9, 0xfd, 0xa, 0x3}, {0x9, 0x31, 0x1, 0xc03d}, {0x4, 0xae, 0x4}, {0x0, 0x4, 0xe, 0x6}, {0xe2, 0xda, 0x4, 0x4}, {0x1, 0xf9, 0x6, 0xe5}, {0x8000, 0x9, 0x3, 0x2}]}, 0x10) close(r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000d00)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000d40)={0x1d, r3}, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000d80)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x200, 0xde89, 0x0, 0xc5, "bdac4ca3532516cb8d14facc8cb58aa5afeb2b6d53698acb0570b2f898c900e9e7f1dd5764fd804e30a6a150c0a692e31bfdd2b4d5047880a5fdfdb191d0a5a4f33187b978a52a23cced56c555a682b8d71bb2afb7b789588a26ca714afebd463abc04e2ad8a5f733e093b85b47f511ffaf2df3e9b64c7f28bef3980d534c162"}) syz_emit_ethernet(0x10a, &(0x7f0000000e40)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@llc={0x4, {@snap={0xaa, 0x1fe, "c5ea", "e90dd6", 0x8848, "130008af51f2f8a6284334ccdb61b2fa9192de4699c792f18c7e078b1883528f4c3247ced2f571942609b10d3faf5adcff8452ac2d696b1fe1453009e6a5e2211e6bf8fc2f00c85ebea0839584d71ed566a8f69625fadee6369fea49dde99a3adf07109a88b801fa417b8cdb84a5e8c06e38ff30a4aacee3cca4e6ead1939dbeddcc054d1dbc1225ccf28bceeb920b3bd1364290bcae7e42ea288b0d62b6e9813babc6164f3b5a43242bda937cc66277e1830baa45136c093d7a0a29a8ebc6ffd8c9171214dd0b1aca3a42d4c8b016f5373cd4d13a401750b48d87a5b5301cd217d02113b01da5544ab0007bcc5200e58b9c58"}}}}}, &(0x7f0000000f80)={0x0, 0x4, [0xd85, 0x83, 0xba1, 0x914]}) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000001000)={0x3, &(0x7f0000000fc0)=[{0x6, 0x4, 0xfb, 0x7}, {0x101, 0x1, 0x3, 0x3}, {0x7, 0x80, 0x7, 0xc22}]}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f0000001140)={r1, &(0x7f0000001040)='&+@@*\x00', 0x80000, &(0x7f0000001080)={@align=0x1a8255324000000, {0x3, 0x5, 0x8, 0x5}}, 0x25c, &(0x7f00000010c0)={@_ha_fsid}, &(0x7f0000001100)=0x6da4}) write$bt_hci(r2, &(0x7f0000001180)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc8, {0xf1, 0x8, 0xeeb9, 0x4, 0x2, 0x7b46}, {0x80, 0xc, 0x6, 0x200, 0x401, 0xd9800000}}}}, 0x25) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0xfffffffffffffffe, 0x0) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f00000011c0), &(0x7f0000001200)=0x8) sendto$inet6(r2, &(0x7f0000001240)="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", 0x1000, 0x20004000, &(0x7f0000002240)={0xa, 0x4e23, 0x9, @private0, 0x7ff}, 0x1c) accept$alg(r2, 0x0, 0x0) r6 = socket$kcm(0x29, 0xa, 0x0) sendmsg$kcm(r6, &(0x7f0000003940)={&(0x7f0000002280)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002300)="b4093e5c69ec78f299479916470379cfbe4fdc37179a1a72e1101f2879045b31d69d6506e77b266fd10d75ba86900868d8d3ebe1c342084fe29b86498f741e58d420c25cf32c79e427fe3d9d812167153dfd36830b5735308dbdbb180c3c2ba9d8bc3a97c480aa2f5fdd3cf37ded48e2c31b6fbe452287951ebfb6ef11d6f09dfc2cce3c5d2ffbfc4f4dcfa2ce3196fc54b4b9265e160eeddf70af2c7710fb881c4398bf56be8b62e99d8878756d561cf921917abe95c9cb09a24eda08a160bcaf52d6192ef3fe1b4885a033f1427ceccddca041d9dc562e36b9a39648a01ac2463f92c932cf2ee8e4f8a011427e2b892c05e7ccb7d088", 0xf7}, {&(0x7f0000002400)="d34cdcec6229375c60ec445be37c167517e1d90bf4e744544a22fa8258d8d16931f11ac108b3e3bc1f0a787be1c2d07a02c8c31715bd49cb7c6d631dd53d01f115ed1112f4d78631430a3d307a86e4d8518fdb4df2fe11416bacbdc151289ae4a0c172e93b08933e0bc596b6ac3d959a3cf5733dd82e831dc9a2baa6558d458e8e284633138dccc5bd92782083b3018c77d2d30da350e754e4773bce615abb46452dd539b537e6f0560f5aaec73e89782b6c", 0xb2}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="69b32b05c6fd9b60e1087e634068f167dcd0a85ff8ead91c0f0482cb8796f8492a5cda91ae582e19d580eaed976509283d782e50bfb0b9ba2cfdda5559fcc1da42ee9253e449045f8b3bac26d5e543ca5ad95c59e8127639f25bbf9d162a262dfb6f96d86d3ec0ec86a04ba3172d726f5b9dc754ec19b1773c50ca752a183c42b711c5a853d19e1ed053a7c08ea0d2751d1682aa127548bf2b3cd0eeab82ec656d00d516fc4720a69067351bc289204e5362843882ef50738f3d64ed4fe4b48f2e8bf2f288822fe18689c9da1d496238ba75fc45060fbbdd182782ff53464b21896bf2396ea1c669c7de5fd710b99ea77f813afd", 0xf4}, {&(0x7f00000035c0)="1dd0a7f718deeee043dc730e00f80ea953d2bfc4daa8f3518c74134d4a5b7e09cac6e0611ea8fcf287ffa6b355a8404d12daa73f15f7c182aae3f7cbddbfbc1d7fab73554db26a8a08aed9b4b7ca864a887603aecf35f8af2d2914d302e89c454b377115f911b853e25ac3794af0b7c26d4739e3108dfe2a6271bdc16338b58206f1b35cbafabefe17e13614bb6346a8410a80", 0x93}, {&(0x7f0000003680)="d161d8a16e92a75b24b33b7ece0b2d8c07bd8592100b268ede2bd616387e3e927acc6b912204a5bce0f29382b70a5b711171af42891f024111c6e614a5d4b651b925a5afd24443addb2b780003344f6fd491ccfc521f6c491a3334707e16bb4b7a27a5d9cc0f3982de0a819cc6a5d6a551a2bebcd6cb8e16c11db90c1d8e6868338b70d9", 0x84}, {&(0x7f0000003740)="b55b8e46901a73a8b8024449182125c8dd217cd32b50fe419ca7b9b9e844d669dc580ef0a710aa9fc510ad15511c4f128020deb274096bd6228f3e0c40e2b26f2d83d180ff1dd778debfed19e1551a9a0083fd2754b6d55661021f2fb2022271", 0x60}], 0x7, &(0x7f0000003840)=[{0xd0, 0x88, 0x2, "4c4f6fbc66ce5787dba1f42004e63b8f1086d36b1d00d43ee5d55e9b46aba4c733c176f060843f762af4e113cfd2175eee6af33905171d31d6d59569b9a7c7db28fa72e37dcd7834ce5a2289e480cd4d09de0b1cf3890237df1bffcf8efcdcb7757b98144cf9fccca8c3c2f0414aaee37ffc32e292d95f71416dc23d37e095a6aee20c81a3859be9d2e16860c59ff620410e4e7e6734acf6700add4c1dc2bafccbe647e3e53d15cf59f491f11a3afebf15662bd898ff95faad4f5287e8c843"}], 0xd0}, 0x4000000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000003980)={0x0, 0x8, 0x1, 0x4, 0x2, 0x5, 0x3ff}, 0xc) r7 = socket$rxrpc(0x21, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000003a00)=@o_path={&(0x7f00000039c0)='./file0\x00', 0x0, 0x18, r7}, 0x18) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000003b80)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000003a40)=""/89, 0x59, 0x1, &(0x7f0000003ac0)=""/180, 0xb4}, &(0x7f0000003bc0)=0x40) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000003d00)={r0, &(0x7f0000003c00)='\xff\xff\xff\xff\xff\xff', 0x0, &(0x7f0000003c40)={@align=0x32a9a931, {0xf, 0x1, 0x38, 0xfffffffffffffffc}}, 0xfffffff8, &(0x7f0000003c80)={@_ha_fsid}, &(0x7f0000003cc0)=0x6}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 526.505468ms ago: executing program 0 (id=2029): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000030a0fdb00000000000000000a002005090003003f5ad5e8000000000900010073797a310000000014000480080002403cb140bb08000140000000031c0008800c00024000000000000000050c0a01400000000000000002140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x8948) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, '\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 525.203836ms ago: executing program 2 (id=2030): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, &(0x7f0000000080)=0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, 0x0) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="1dbe65faed397e3d8ad724393368dc05270c3479c43895a1a3d8a56563ab3b88ac2d1bc82c93ead406b5324f33316f4410e0ca0bfd66bdbbb86f31fe34faf411d41f44f6c83e38d83a0a55e7c94cc0fc0e5a8a8467fbf08798362318e48893ce0621d730bb98ec12f8860d0c7f3e46ce0125feee1f5af9bc4e93afca"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) sendmsg$rds(r5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) bind$x25(r7, &(0x7f0000000180), 0x12) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r10}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_open_procfs$namespace(r10, &(0x7f00000000c0)='ns/pid_for_children\x00') r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r9) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 429.065923ms ago: executing program 4 (id=2031): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4c010}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x44, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4004) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000000800000000000000000000000000000004d478409fe8d9043dc7a7c4f3e4ad255aaaed31c454789ae9a25d61292adb77bef3ec115fffad49a3de89c33db4d3343651f77f9b385081", @ANYRES32=r3, @ANYBLOB="46060900000000002400128009000100626f6e640000040014000280"], 0x44}, 0x1, 0x0, 0x0, 0x20000690}, 0x20048040) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/78, 0x4e}], 0x2}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448ca, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r11 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r11, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r10, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$key(0xf, 0x3, 0x2) 408.866638ms ago: executing program 3 (id=2032): r0 = socket(0x5, 0x2, 0x57fe) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'nq\x00', 0x1, 0x80005, 0x1f}, 0x2c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x10c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x3}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x390}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0x44e}, {0x5, 0x12, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44801}, 0x4800) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e25, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000100)={0x3, 'ip6gre0\x00', {}, 0x6}) 326.204452ms ago: executing program 0 (id=2033): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) pipe(&(0x7f0000000000)) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000200)="083972bdb3a605c4c1188e9986dd02ff4284860186ddba71f16b7d", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140000001f000100000080000000000004000080ecf2d64e56ee71196721924602387bf10242a01d713c40bea703b902f007bb3ca49b3748441c69c0746f5336e8804d14b720f860980cde4417c17dec0b22fd43ede6c358921a35f025d3d9d42f76009d919a3d93640e2c77"], 0x14}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x99}, 0x0) 311.336932ms ago: executing program 2 (id=2034): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000001000000080000000200000000000000", @ANYRES32, @ANYBLOB="000025108298ba49c39e9309d229ad622408000019e23629bb04f08c729a81a87e81662636da4691658a2e0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r2, &(0x7f0000000380), 0x0}, 0x20) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r5, &(0x7f0000000080), 0x0}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSBULKSTAT(r6, 0xc0205865, &(0x7f00000006c0)={&(0x7f0000000080)=0x8, 0x2, &(0x7f0000000440)=[{}, {}, {}], &(0x7f0000000680)}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 193.302501ms ago: executing program 3 (id=2035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000005b860000000000000000000000000000006f000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.938764ms ago: executing program 3 (id=2036): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000107000000000000000001"], 0x114}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) 0s ago: executing program 0 (id=2037): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00c34be43000"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000240)=0x7, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): [ 90.117797][ T5836] team0: Port device team_slave_0 added [ 90.125515][ T5828] team0: Port device team_slave_1 added [ 90.166689][ T5836] team0: Port device team_slave_1 added [ 90.186431][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.196115][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.203583][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.211046][ T5834] bridge_slave_0: entered allmulticast mode [ 90.219019][ T5834] bridge_slave_0: entered promiscuous mode [ 90.234780][ T5826] hsr_slave_0: entered promiscuous mode [ 90.241402][ T5826] hsr_slave_1: entered promiscuous mode [ 90.284501][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.294736][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.302296][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.309770][ T5834] bridge_slave_1: entered allmulticast mode [ 90.316423][ T5144] Bluetooth: hci0: command tx timeout [ 90.316423][ T51] Bluetooth: hci4: command tx timeout [ 90.316875][ T5144] Bluetooth: hci3: command tx timeout [ 90.327881][ T5834] bridge_slave_1: entered promiscuous mode [ 90.353818][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.360805][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.387338][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.398138][ T5144] Bluetooth: hci1: command tx timeout [ 90.404156][ T5839] Bluetooth: hci2: command tx timeout [ 90.409176][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.417245][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.443605][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.455424][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.462816][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.489230][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.531578][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.539178][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.565878][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.609948][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.623522][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.643181][ T5827] team0: Port device team_slave_0 added [ 90.692429][ T5834] team0: Port device team_slave_0 added [ 90.699964][ T5827] team0: Port device team_slave_1 added [ 90.754306][ T5834] team0: Port device team_slave_1 added [ 90.815036][ T5836] hsr_slave_0: entered promiscuous mode [ 90.821772][ T5836] hsr_slave_1: entered promiscuous mode [ 90.829377][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 90.835302][ T5836] Cannot create hsr debugfs directory [ 90.842258][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.849578][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.875713][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.893880][ T5828] hsr_slave_0: entered promiscuous mode [ 90.900443][ T5828] hsr_slave_1: entered promiscuous mode [ 90.906925][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 90.912781][ T5828] Cannot create hsr debugfs directory [ 90.938096][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.945323][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.971410][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.992560][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.999631][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.027330][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.066245][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.073572][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.100018][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.253137][ T5827] hsr_slave_0: entered promiscuous mode [ 91.259705][ T5827] hsr_slave_1: entered promiscuous mode [ 91.266219][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 91.272435][ T5827] Cannot create hsr debugfs directory [ 91.371720][ T5834] hsr_slave_0: entered promiscuous mode [ 91.379564][ T5834] hsr_slave_1: entered promiscuous mode [ 91.386532][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 91.393242][ T5834] Cannot create hsr debugfs directory [ 91.683140][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.721809][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.749814][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.785251][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.851848][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.864694][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.879072][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.890886][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.977405][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.008588][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.032237][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.042823][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.130972][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.153578][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.175808][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.186924][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.235967][ T10] cfg80211: failed to load regulatory.db [ 92.321462][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.338081][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.351195][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.368086][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.379759][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.392568][ T5839] Bluetooth: hci3: command tx timeout [ 92.392828][ T51] Bluetooth: hci0: command tx timeout [ 92.398369][ T5144] Bluetooth: hci4: command tx timeout [ 92.451145][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.474694][ T5144] Bluetooth: hci1: command tx timeout [ 92.480166][ T5144] Bluetooth: hci2: command tx timeout [ 92.497026][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.507477][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.514881][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.538505][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.545794][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.602885][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.635514][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.649161][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.675967][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.683317][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.710634][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.735574][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.751469][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.758913][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.781876][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.789100][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.799586][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.806829][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.837000][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.844166][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.854132][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.861528][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.018159][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.130531][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.159789][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.167042][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.235845][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.243154][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.330952][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.489843][ T5826] veth0_vlan: entered promiscuous mode [ 93.506695][ T5826] veth1_vlan: entered promiscuous mode [ 93.630211][ T5826] veth0_macvtap: entered promiscuous mode [ 93.640642][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.667660][ T5826] veth1_macvtap: entered promiscuous mode [ 93.758288][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.776582][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.824952][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.867605][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.897985][ T5836] veth0_vlan: entered promiscuous mode [ 93.944568][ T84] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.969736][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.987122][ T5836] veth1_vlan: entered promiscuous mode [ 94.001650][ T84] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.035371][ T84] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.046533][ T84] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.139427][ T5828] veth0_vlan: entered promiscuous mode [ 94.210736][ T5836] veth0_macvtap: entered promiscuous mode [ 94.230086][ T5828] veth1_vlan: entered promiscuous mode [ 94.244878][ T5836] veth1_macvtap: entered promiscuous mode [ 94.274575][ T5834] veth0_vlan: entered promiscuous mode [ 94.307467][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.328693][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.351052][ T5827] veth0_vlan: entered promiscuous mode [ 94.366408][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.386929][ T5834] veth1_vlan: entered promiscuous mode [ 94.407205][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.428233][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.437139][ T5827] veth1_vlan: entered promiscuous mode [ 94.438774][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.460718][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.473309][ T5144] Bluetooth: hci0: command tx timeout [ 94.473327][ T51] Bluetooth: hci4: command tx timeout [ 94.478777][ T5144] Bluetooth: hci3: command tx timeout [ 94.507873][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.517847][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.541344][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.552283][ T5144] Bluetooth: hci2: command tx timeout [ 94.559836][ T5144] Bluetooth: hci1: command tx timeout [ 94.592116][ T5828] veth0_macvtap: entered promiscuous mode [ 94.616251][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.675570][ T5828] veth1_macvtap: entered promiscuous mode [ 94.689428][ T5834] veth0_macvtap: entered promiscuous mode [ 94.707438][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.707462][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.786115][ T5827] veth0_macvtap: entered promiscuous mode [ 94.801855][ T5834] veth1_macvtap: entered promiscuous mode [ 94.834122][ T5827] veth1_macvtap: entered promiscuous mode [ 94.847852][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.858116][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.866889][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.879700][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.911870][ T129] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.942689][ T129] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.951568][ T129] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.986347][ T129] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.018214][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.043001][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.095885][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.124518][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.142326][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.151532][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.207599][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.262542][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.285130][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.318499][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.333107][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.335010][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 95.341886][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.414089][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 95.473442][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 95.481607][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.486207][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 95.491443][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.538422][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 95.564925][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 95.596101][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 95.614632][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.615140][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 95.639404][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.653640][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.659930][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 95.676681][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.720359][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 95.747733][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.764368][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.885000][ T129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.909540][ T129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.970247][ T5961] Zero length message leads to an empty skb [ 95.985075][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.007370][ T5961] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 96.013677][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.425734][ T5974] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 96.537607][ T5980] Bluetooth: MGMT ver 1.23 [ 96.553303][ T5144] Bluetooth: hci3: command tx timeout [ 96.562651][ T5839] Bluetooth: hci0: command tx timeout [ 96.568174][ T5144] Bluetooth: hci4: command tx timeout [ 96.632593][ T5839] Bluetooth: hci2: command tx timeout [ 96.638182][ T5144] Bluetooth: hci1: command tx timeout [ 96.682081][ T5986] syz.2.15 uses obsolete (PF_INET,SOCK_PACKET) [ 96.697301][ T5988] netlink: 'syz.3.17': attribute type 2 has an invalid length. [ 96.831493][ T5995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.841717][ T5952] IPVS: starting estimator thread 0... [ 97.872231][ T6047] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 97.924268][ T6054] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 97.972128][ T6049] IPVS: using max 37 ests per chain, 88800 per kthread [ 98.015932][ T6048] bond1: option packets_per_slave: invalid value (8388608) [ 98.060607][ T6048] bond1: option packets_per_slave: allowed values 0 - 65535 [ 98.105194][ T6048] bond1 (unregistering): Released all slaves [ 98.189565][ T6062] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 98.745080][ T6081] macvtap1: entered promiscuous mode [ 98.750611][ T6081] vlan0: entered promiscuous mode [ 98.758840][ T6081] macvtap1: entered allmulticast mode [ 98.764591][ T6081] vlan0: entered allmulticast mode [ 98.769919][ T6081] veth0_vlan: entered allmulticast mode [ 98.815989][ T6089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.083809][ T5909] IPVS: starting estimator thread 0... [ 99.183851][ T6105] IPVS: using max 30 ests per chain, 72000 per kthread [ 99.213720][ T6111] netlink: 'syz.1.52': attribute type 64 has an invalid length. [ 99.494325][ T6123] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.704551][ T6129] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 100.063953][ T6144] warning: `syz.3.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.534243][ T6163] __nla_validate_parse: 31 callbacks suppressed [ 100.534264][ T6163] netlink: 256 bytes leftover after parsing attributes in process `syz.3.73'. [ 100.669742][ T6169] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 100.692441][ T6172] netlink: 'syz.1.71': attribute type 4 has an invalid length. [ 100.701398][ T6169] netlink: 96 bytes leftover after parsing attributes in process `syz.2.74'. [ 100.720070][ T6169] netlink: 1 bytes leftover after parsing attributes in process `syz.2.74'. [ 100.746394][ T6178] netlink: 'syz.1.71': attribute type 4 has an invalid length. [ 100.762094][ T6169] netlink: 658 bytes leftover after parsing attributes in process `syz.2.74'. [ 100.909277][ T6178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'. [ 100.994457][ T6191] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 101.474312][ T6215] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 101.739415][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 101.858993][ T6230] netlink: 'syz.4.87': attribute type 83 has an invalid length. [ 102.028352][ T6236] tipc: Enabling of bearer rejected, failed to enable media [ 102.290221][ T6245] netlink: 220 bytes leftover after parsing attributes in process `syz.3.91'. [ 102.307153][ T6245] tc_dump_action: action bad kind [ 102.348229][ T6248] tipc: Started in network mode [ 102.362092][ T6248] tipc: Node identity ac14140f, cluster identity 4711 [ 102.381248][ T6248] tipc: New replicast peer: 255.255.255.255 [ 102.413562][ T6248] tipc: Enabled bearer , priority 10 [ 102.514175][ T6249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.539115][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 102.594929][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.95'. [ 102.643383][ T6249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.802975][ T6255] bridge0: entered promiscuous mode [ 102.854863][ T6255] macsec1: entered promiscuous mode [ 102.928139][ T6255] macsec1: entered allmulticast mode [ 102.986408][ T6255] bridge0: entered allmulticast mode [ 103.051605][ T6266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.97'. [ 103.106316][ T65] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.134514][ T65] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.199106][ T65] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.229119][ T65] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.390288][ T6281] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.412668][ T6281] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 103.467044][ T5916] tipc: Node number set to 2886997007 [ 103.834990][ T6293] netlink: 'syz.3.102': attribute type 1 has an invalid length. [ 104.992849][ T6332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.006663][ T6334] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 105.269035][ T6346] netlink: 'syz.2.116': attribute type 9 has an invalid length. [ 105.487834][ T6359] x_tables: duplicate underflow at hook 3 [ 105.801403][ T6371] xt_hashlimit: size too large, truncated to 1048576 [ 106.158354][ T6363] syzkaller0: entered promiscuous mode [ 106.201791][ T6363] syzkaller0: entered allmulticast mode [ 106.250974][ T6389] __nla_validate_parse: 5 callbacks suppressed [ 106.250994][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 106.454663][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 106.575301][ T6399] raw_sendmsg: syz.1.121 forgot to set AF_INET. Fix it! [ 106.791138][ T6411] netlink: 'syz.2.133': attribute type 10 has an invalid length. [ 106.929434][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 107.000168][ T6423] netlink: 'syz.0.135': attribute type 1 has an invalid length. [ 108.005745][ T6411] batman_adv: batadv0: Adding interface: netdevsim0 [ 108.012957][ T6411] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.039945][ T6411] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 108.068724][ T6423] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 108.270519][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 108.392733][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 108.685159][ T6449] netlink: 'syz.2.142': attribute type 14 has an invalid length. [ 108.787320][ T6462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.823724][ T6457] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 109.389307][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.401492][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.995740][ T6524] ip6tnl1: entered allmulticast mode [ 110.014304][ T6524] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.166'. [ 110.027526][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 110.038743][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 110.466002][ T6543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.909884][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 110.950287][ T6568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.177'. [ 111.263570][ T6588] netlink: 'syz.0.179': attribute type 21 has an invalid length. [ 111.337289][ T6578] __nla_validate_parse: 3 callbacks suppressed [ 111.337310][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.179'. [ 111.581611][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 111.591491][ T6588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.179'. [ 111.628254][ T6593] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 111.662081][ T6593] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 111.672590][ T6593] gretap1: entered promiscuous mode [ 111.678305][ T6593] gretap1: entered allmulticast mode [ 111.696389][ T6597] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 111.775847][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 111.785545][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 111.883964][ T6605] netlink: 104 bytes leftover after parsing attributes in process `syz.4.186'. [ 112.183514][ T6615] syzkaller0: entered allmulticast mode [ 112.489777][ T6630] netlink: 108 bytes leftover after parsing attributes in process `syz.2.192'. [ 112.735286][ T6640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.074766][ T6662] IPv6: NLM_F_REPLACE set, but no existing node found! [ 113.576161][ T6659] syzkaller0: entered promiscuous mode [ 113.581777][ T6659] syzkaller0: entered allmulticast mode [ 115.638932][ T6706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.870268][ T6708] netlink: 44 bytes leftover after parsing attributes in process `syz.2.207'. [ 115.892499][ T6709] netlink: 44 bytes leftover after parsing attributes in process `syz.2.207'. [ 116.190400][ T6728] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 116.204385][ T6728] netlink: 224 bytes leftover after parsing attributes in process `syz.0.208'. [ 116.415366][ T6750] syzkaller1: entered promiscuous mode [ 116.421165][ T6750] syzkaller1: entered allmulticast mode [ 116.491387][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 116.513215][ T6754] bond0: entered promiscuous mode [ 116.518538][ T6754] bond_slave_0: entered promiscuous mode [ 116.525220][ T6754] bond_slave_1: entered promiscuous mode [ 116.534061][ T6754] bond0: left promiscuous mode [ 116.539380][ T6754] bond_slave_0: left promiscuous mode [ 116.546858][ T6754] bond_slave_1: left promiscuous mode [ 119.030235][ T6714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.250410][ T6766] netlink: 52 bytes leftover after parsing attributes in process `syz.1.217'. [ 119.305976][ T6773] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 119.326264][ T6766] netlink: 'syz.1.217': attribute type 1 has an invalid length. [ 119.341341][ T6779] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 119.350051][ T6778] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 119.394233][ T6766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.678335][ T6797] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.223'. [ 119.721217][ T6791] syzkaller0: entered promiscuous mode [ 119.727939][ T6791] syzkaller0: entered allmulticast mode [ 120.168863][ T6821] xt_hashlimit: size too large, truncated to 1048576 [ 120.417653][ T6841] bond1: option lp_interval: invalid value (0) [ 120.450458][ T6841] bond1: option lp_interval: allowed values 1 - 2147483647 [ 120.451406][ T6846] SET target dimension over the limit! [ 120.497829][ T6841] bond1 (unregistering): Released all slaves [ 120.623163][ T6850] tipc: Started in network mode [ 120.628105][ T6850] tipc: Node identity ac141441, cluster identity 4711 [ 120.638303][ T6850] tipc: Enabled bearer , priority 10 [ 120.759116][ T6861] netlink: 'syz.1.243': attribute type 1 has an invalid length. [ 120.833591][ T6868] netlink: 56 bytes leftover after parsing attributes in process `syz.4.244'. [ 120.933750][ T6871] netlink: 'syz.1.245': attribute type 8 has an invalid length. [ 120.947624][ T6849] syzkaller1: entered promiscuous mode [ 120.958396][ T6849] syzkaller1: entered allmulticast mode [ 121.177004][ T6877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.248'. [ 121.210185][ T6880] sock: sock_set_timeout: `syz.1.247' (pid 6880) tries to set negative timeout [ 121.238700][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 121.260391][ T6885] netlink: 'syz.4.251': attribute type 1 has an invalid length. [ 121.271807][ T6882] netlink: 'syz.1.247': attribute type 1 has an invalid length. [ 121.385482][ T6885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.251'. [ 121.415935][ T6887] bond1: (slave geneve2): making interface the new active one [ 121.447883][ T6887] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 121.476222][ T6885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.494083][ T84] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.511419][ T84] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.547483][ T6898] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 121.553983][ T6898] syzkaller1: linktype set to 823 [ 121.595797][ T84] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.615606][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.762202][ T5901] tipc: Node number set to 2886997057 [ 121.820999][ T6916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.257'. [ 121.899078][ T6924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'. [ 121.954480][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 122.058290][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.258'. [ 122.166674][ T6932] netdevsim netdevsim3: Direct firmware load for | failed with error -2 [ 122.198613][ T6932] netdevsim netdevsim3: Falling back to sysfs fallback for: | [ 122.289404][ T6941] trusted_key: syz.4.260 sent an empty control message without MSG_MORE. [ 122.301004][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'. [ 122.429720][ T6950] netlink: 36 bytes leftover after parsing attributes in process `syz.1.263'. [ 122.544870][ T6954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.264'. [ 122.624194][ T6956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.265'. [ 122.967116][ T6974] vlan2: entered allmulticast mode [ 122.972932][ T6974] bridge0: entered allmulticast mode [ 122.978796][ T6974] bridge0: port 3(vlan2) entered blocking state [ 122.985548][ T6974] bridge0: port 3(vlan2) entered disabled state [ 123.008700][ T6978] syzkaller0: entered promiscuous mode [ 123.019795][ T6978] syzkaller0: entered allmulticast mode [ 123.502805][ T6999] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.524244][ T6999] netlink: 'syz.2.276': attribute type 4 has an invalid length. [ 123.564009][ T6999] netlink: 17 bytes leftover after parsing attributes in process `syz.2.276'. [ 123.569747][ T7003] netlink: 'syz.1.277': attribute type 11 has an invalid length. [ 123.620091][ T6999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.276'. [ 124.349532][ T7046] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 124.382607][ T7046] syzkaller0: entered allmulticast mode [ 124.391612][ T7046] vlan1: entered promiscuous mode [ 124.510945][ T7052] tipc: Enabling of bearer rejected, media not registered [ 124.845221][ T7073] netlink: 'syz.3.298': attribute type 10 has an invalid length. [ 124.885190][ T7071] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 124.945068][ T7073] batman_adv: batadv0: Adding interface: netdevsim0 [ 124.968516][ T7073] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.002181][ T7073] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 126.809852][ T7129] openvswitch: netlink: IP tunnel dst address not specified [ 126.871343][ T7131] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 127.039882][ T7131] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.047628][ T7138] __nla_validate_parse: 8 callbacks suppressed [ 127.047648][ T7138] netlink: 830 bytes leftover after parsing attributes in process `syz.3.315'. [ 127.126779][ T7139] bond2: (slave bridge3): making interface the new active one [ 127.159588][ T7139] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 127.363056][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 127.377109][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 127.454843][ T7168] netlink: 'syz.4.318': attribute type 1 has an invalid length. [ 127.520665][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.528479][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.566911][ T7174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.752110][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 127.763621][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 127.811379][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.845476][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.178940][ T7173] bond3: (slave geneve3): making interface the new active one [ 128.291683][ T7173] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 128.390821][ T7185] bond2: entered promiscuous mode [ 128.424225][ T7185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.465747][ T7186] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 128.512987][ T7186] netlink: 'syz.3.319': attribute type 2 has an invalid length. [ 128.617078][ T7197] bridge1: entered promiscuous mode [ 128.625159][ T7197] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 128.660339][ T7201] macvlan2: entered promiscuous mode [ 128.666379][ T7201] macvlan2: entered allmulticast mode [ 128.672531][ T7201] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 128.688827][ T168] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.698631][ T168] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.710999][ T168] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.722365][ T168] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.734573][ T168] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.743862][ T168] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.788787][ T168] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.849523][ T168] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.885148][ T168] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 128.924520][ T168] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 128.952717][ T168] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 129.014554][ T7248] netlink: 'syz.2.330': attribute type 1 has an invalid length. [ 129.033622][ T168] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 129.034788][ T7244] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 129.079074][ T7248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.088084][ T7244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.329'. [ 129.141033][ T7248] bond1: (slave geneve2): making interface the new active one [ 129.150985][ T7248] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 129.164036][ T155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.202419][ T155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.300011][ T7261] netlink: 7 bytes leftover after parsing attributes in process `syz.2.332'. [ 129.311198][ T155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.343013][ T155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.758421][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 129.826499][ T7288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.340'. [ 130.226761][ T7306] netlink: 'syz.4.345': attribute type 4 has an invalid length. [ 130.254437][ T7306] netlink: 'syz.4.345': attribute type 9 has an invalid length. [ 130.355686][ T7309] netlink: 'syz.1.346': attribute type 4 has an invalid length. [ 130.402038][ T7309] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 130.425970][ T7309] netlink: 228 bytes leftover after parsing attributes in process `syz.1.346'. [ 130.480913][ T7313] tipc: Started in network mode [ 130.491719][ T7313] tipc: Node identity aab64761b944, cluster identity 4711 [ 130.523697][ T7313] tipc: Enabled bearer , priority 0 [ 130.605940][ T7313] syzkaller0: entered promiscuous mode [ 130.611598][ T7313] syzkaller0: entered allmulticast mode [ 130.620698][ T7313] tipc: Resetting bearer [ 130.720122][ T7312] tipc: Resetting bearer [ 132.137733][ T7312] tipc: Disabling bearer [ 132.249586][ T7195] tipc: Node number set to 334645089 [ 132.307118][ T7364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.634398][ T7378] netlink: 'syz.1.363': attribute type 13 has an invalid length. [ 133.104577][ T7408] __nla_validate_parse: 4 callbacks suppressed [ 133.104596][ T7408] netlink: 104 bytes leftover after parsing attributes in process `syz.3.372'. [ 133.141778][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 133.167889][ T7402] veth3: entered allmulticast mode [ 133.195415][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.202419][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.420509][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 133.472960][ T7430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.771195][ T7452] block nbd0: not configured, cannot reconfigure [ 133.779406][ T7452] netlink: 'syz.0.383': attribute type 2 has an invalid length. [ 133.798237][ T7454] block nbd0: not configured, cannot reconfigure [ 134.008708][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 134.033608][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'. [ 134.339581][ T7475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.388'. [ 134.408412][ T7477] netlink: 'syz.0.389': attribute type 2 has an invalid length. [ 134.454617][ T7477] 9: entered promiscuous mode [ 134.902343][ T7491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.394'. [ 135.366332][ T7518] netlink: 48 bytes leftover after parsing attributes in process `syz.0.401'. [ 135.450491][ T7523] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 135.471262][ T7523] netlink: 'syz.1.404': attribute type 1 has an invalid length. [ 135.482818][ T7519] geneve4: entered promiscuous mode [ 135.496399][ T7519] geneve4: entered allmulticast mode [ 135.502400][ T7523] netlink: 224 bytes leftover after parsing attributes in process `syz.1.404'. [ 135.519793][ T13] netdevsim netdevsim4 netdevsim0: set [1, 3] type 2 family 0 port 19999 - 0 [ 135.560478][ T13] netdevsim netdevsim4 netdevsim1: set [1, 3] type 2 family 0 port 19999 - 0 [ 135.601603][ T13] netdevsim netdevsim4 netdevsim2: set [1, 3] type 2 family 0 port 19999 - 0 [ 135.651362][ T13] netdevsim netdevsim4 netdevsim3: set [1, 3] type 2 family 0 port 19999 - 0 [ 136.174203][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 136.221613][ T7548] syzkaller1: entered promiscuous mode [ 136.227612][ T7548] syzkaller1: entered allmulticast mode [ 136.420622][ T7556] netlink: 'syz.1.415': attribute type 26 has an invalid length. [ 136.473426][ T7556] netlink: 'syz.1.415': attribute type 26 has an invalid length. [ 136.670296][ T7571] netlink: 'syz.0.419': attribute type 10 has an invalid length. [ 136.783615][ T7579] netlink: 'syz.4.420': attribute type 10 has an invalid length. [ 136.853326][ T7579] team0: Port device dummy0 added [ 137.525399][ T7602] netlink: 'syz.0.427': attribute type 4 has an invalid length. [ 138.153522][ T7615] Bluetooth: MGMT ver 1.23 [ 138.158151][ T7615] Bluetooth: hci1: too big key_count value 32778 [ 138.479147][ T7459] Set syz1 is full, maxelem 65536 reached [ 138.888289][ T7649] veth0_to_team: entered allmulticast mode [ 139.080882][ T7661] __nla_validate_parse: 4 callbacks suppressed [ 139.080902][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 139.108566][ T7662] geneve3: entered promiscuous mode [ 139.114017][ T7662] geneve3: entered allmulticast mode [ 139.152299][ T7662] netlink: 'syz.2.441': attribute type 5 has an invalid length. [ 140.556749][ T7604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.832317][ T7677] netlink: 40 bytes leftover after parsing attributes in process `syz.0.444'. [ 141.163762][ T7696] netlink: 'syz.4.451': attribute type 12 has an invalid length. [ 141.281815][ T7708] netlink: 'syz.3.453': attribute type 10 has an invalid length. [ 141.334443][ T7708] team0: Device ipvlan1 failed to register rx_handler [ 141.608701][ T7731] veth0: entered promiscuous mode [ 141.701531][ T7730] veth0: left promiscuous mode [ 141.936542][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.469'. [ 142.299310][ T7786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.474'. [ 142.337390][ T7789] netlink: 'syz.4.476': attribute type 1 has an invalid length. [ 142.380447][ T7789] netlink: 'syz.4.476': attribute type 3 has an invalid length. [ 142.422273][ T7789] netlink: 172 bytes leftover after parsing attributes in process `syz.4.476'. [ 142.441871][ T7789] NCSI netlink: No device for ifindex 813332851 [ 142.453133][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'. [ 142.549269][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 142.684672][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.480'. [ 142.818927][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 142.841419][ T7818] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 142.859941][ T7818] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 142.960964][ T7818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.073113][ T7820] bond1: (slave gretap1): making interface the new active one [ 143.090809][ T7833] netlink: 'syz.1.488': attribute type 4 has an invalid length. [ 143.102346][ T7820] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 143.110349][ T7833] netlink: 17 bytes leftover after parsing attributes in process `syz.1.488'. [ 143.190541][ T7839] netlink: 'syz.4.489': attribute type 23 has an invalid length. [ 143.320016][ T7845] netlink: ct family unspecified [ 143.423137][ T7851] syzkaller0: entered promiscuous mode [ 143.428781][ T7851] syzkaller0: entered allmulticast mode [ 143.621800][ T7861] unsupported nla_type 58 [ 143.886334][ T7877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.120618][ T7890] __nla_validate_parse: 10 callbacks suppressed [ 144.120641][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 144.231178][ T7894] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.506'. [ 144.249356][ T7894] ip6gre0: Master is either lo or non-ether device [ 144.274665][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 144.406750][ T7903] netlink: 'syz.2.508': attribute type 1 has an invalid length. [ 144.439192][ T7903] netlink: 96 bytes leftover after parsing attributes in process `syz.2.508'. [ 144.472637][ T7903] netlink: 1 bytes leftover after parsing attributes in process `syz.2.508'. [ 144.497356][ T7903] netlink: 'syz.2.508': attribute type 1 has an invalid length. [ 144.499290][ T7912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.530802][ T7903] netlink: 'syz.2.508': attribute type 8 has an invalid length. [ 144.542174][ T7903] netlink: 606 bytes leftover after parsing attributes in process `syz.2.508'. [ 144.696970][ T7919] x_tables: duplicate underflow at hook 1 [ 144.741549][ T7917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.512'. [ 144.763343][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.512'. [ 144.842250][ T7930] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 145.011747][ T5847] block nbd64: NBD_DISCONNECT [ 145.338826][ T7954] bond0: entered promiscuous mode [ 145.363862][ T7954] bond_slave_0: entered promiscuous mode [ 145.377037][ T7956] netlink: 808 bytes leftover after parsing attributes in process `syz.4.522'. [ 145.397683][ T7954] bond_slave_1: entered promiscuous mode [ 145.418774][ T5847] udevd[5847]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 145.624841][ T7973] netlink: 'syz.2.527': attribute type 4 has an invalid length. [ 145.956356][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'. [ 146.358125][ T8021] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 146.459161][ T8026] ip6gre1: entered promiscuous mode [ 146.499712][ T8031] netlink: 'syz.3.542': attribute type 1 has an invalid length. [ 146.538302][ T8031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.587308][ T8031] bond2: (slave geneve2): making interface the new active one [ 146.598026][ T8031] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 146.608928][ T168] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 146.619146][ T168] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 146.648137][ T168] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 146.658534][ T168] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 146.670113][ T8038] ip6tnl0: Caught tx_queue_len zero misconfig [ 146.685842][ T8031] netlink: 'syz.3.542': attribute type 4 has an invalid length. [ 146.694648][ T8031] netlink: 'syz.3.542': attribute type 1 has an invalid length. [ 147.093445][ T8060] lo: Caught tx_queue_len zero misconfig [ 147.136900][ T8065] openvswitch: netlink: Multiple metadata blocks provided [ 147.622099][ T7195] IPVS: starting estimator thread 0... [ 147.711092][ T8099] ¾x9ÿ: renamed from bridge_slave_0 [ 147.732041][ T8095] IPVS: using max 25 ests per chain, 60000 per kthread [ 147.843647][ T8109] batadv_slave_0: entered promiscuous mode [ 148.076395][ T8122] x_tables: unsorted underflow at hook 3 [ 148.089784][ T8109] batadv_slave_0: left promiscuous mode [ 148.103491][ T8122] sctp: [Deprecated]: syz.1.568 (pid 8122) Use of int in maxseg socket option. [ 148.103491][ T8122] Use struct sctp_assoc_value instead [ 148.374499][ T8128] syzkaller0: entered promiscuous mode [ 148.381446][ T8128] syzkaller0: entered allmulticast mode [ 148.393889][ T8139] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 148.444823][ T8141] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 148.543969][ T8143] netlink: 'syz.4.574': attribute type 1 has an invalid length. [ 148.585611][ T8143] bond4: entered promiscuous mode [ 148.591689][ T8143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.685780][ T8149] netlink: 'syz.1.578': attribute type 2 has an invalid length. [ 148.788402][ T8155] xt_hashlimit: size too large, truncated to 1048576 [ 148.867018][ T8160] IPv6: sit1: Disabled Multicast RS [ 148.927099][ T8160] sit1: entered allmulticast mode [ 149.235239][ T8175] __nla_validate_parse: 7 callbacks suppressed [ 149.235260][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.583'. [ 149.292390][ T8175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.583'. [ 149.487225][ T8183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'. [ 149.996271][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.594'. [ 150.325017][ T8231] netlink: 152 bytes leftover after parsing attributes in process `syz.0.600'. [ 150.330636][ T8228] netlink: 'syz.3.599': attribute type 1 has an invalid length. [ 150.345541][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 150.354963][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 150.372581][ T8228] netlink: 'syz.3.599': attribute type 2 has an invalid length. [ 150.381554][ T8228] netlink: 'syz.3.599': attribute type 2 has an invalid length. [ 150.390428][ T8228] netlink: 'syz.3.599': attribute type 2 has an invalid length. [ 150.480348][ T8238] netlink: 'syz.0.603': attribute type 4 has an invalid length. [ 151.350303][ T8265] syzkaller1: entered promiscuous mode [ 151.362695][ T8265] syzkaller1: entered allmulticast mode [ 151.981871][ T8302] syzkaller1: entered promiscuous mode [ 152.024296][ T8302] syzkaller1: entered allmulticast mode [ 152.127338][ T8313] netlink: 112 bytes leftover after parsing attributes in process `syz.1.622'. [ 152.232763][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 152.285699][ T8315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.623'. [ 152.416316][ T8330] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 152.459075][ T8330] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 152.577717][ T8333] IPVS: length: 52 != 24 [ 152.838795][ T8351] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 152.860597][ T8351] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 152.903406][ T8351] team0: Failed to send options change via netlink (err -105) [ 152.911031][ T8351] team0: Port device batadv1 added [ 153.013072][ T8359] tipc: Started in network mode [ 153.018031][ T8359] tipc: Node identity c64a1118bc98, cluster identity 4711 [ 153.042337][ T8359] tipc: Enabled bearer , priority 0 [ 153.113620][ T8355] syzkaller0: entered promiscuous mode [ 153.132007][ T8355] syzkaller0: entered allmulticast mode [ 153.168026][ T8355] tipc: Resetting bearer [ 153.269932][ T8355] can: request_module (can-proto-0) failed. [ 153.330342][ T8352] tipc: Resetting bearer [ 153.377848][ T8352] tipc: Disabling bearer [ 153.864222][ T8408] syzkaller0: entered promiscuous mode [ 153.869770][ T8408] syzkaller0: entered allmulticast mode [ 153.909162][ T8415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.926697][ T8413] netlink: 'syz.0.648': attribute type 1 has an invalid length. [ 153.949544][ T8413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.133211][ T8433] block nbd0: not configured, cannot reconfigure [ 154.393991][ T8441] C: renamed from lo (while UP) [ 154.424862][ T8441] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 154.552527][ T8455] Can't find ip_set type [ 154.592101][ T8451] Can't find ip_set type [ 154.714540][ T8463] __nla_validate_parse: 11 callbacks suppressed [ 154.714562][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 154.847423][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.665'. [ 155.055788][ T8480] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 155.110960][ T8491] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 155.190032][ T8480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.236438][ T8491] vxlan1: entered promiscuous mode [ 155.258183][ T8499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.675'. [ 155.279705][ T8500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.675'. [ 155.481106][ T8510] netlink: 260 bytes leftover after parsing attributes in process `syz.2.678'. [ 155.512953][ T8505] netlink: 224 bytes leftover after parsing attributes in process `syz.0.676'. [ 155.664428][ T8519] TCP: TCP_TX_DELAY enabled [ 155.875323][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 156.046291][ T8547] SET target dimension over the limit! [ 156.104848][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 156.205263][ T8554] netlink: 232 bytes leftover after parsing attributes in process `syz.4.688'. [ 156.293862][ T8560] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 156.324367][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 156.568635][ T8556] syzkaller0: entered promiscuous mode [ 156.584118][ T8556] syzkaller0: entered allmulticast mode [ 156.612059][ T8575] : renamed from hsr0 (while UP) [ 157.957240][ T8592] syzkaller0: entered promiscuous mode [ 157.962816][ T8592] syzkaller0: entered allmulticast mode [ 159.541843][ T8630] netlink: 'syz.2.707': attribute type 1 has an invalid length. [ 159.575177][ T8638] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 159.618185][ T8630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.696888][ T8638] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 159.749080][ T8651] __nla_validate_parse: 8 callbacks suppressed [ 159.749101][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.711'. [ 160.224628][ T8683] netlink: 'syz.2.722': attribute type 23 has an invalid length. [ 160.240624][ T8678] netlink: 52 bytes leftover after parsing attributes in process `syz.1.721'. [ 160.333168][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'. [ 160.359146][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'. [ 160.548362][ T8702] syzkaller0: entered promiscuous mode [ 160.554932][ T8702] syzkaller0: entered allmulticast mode [ 160.557539][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 160.589160][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 160.808542][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'. [ 161.451136][ T8756] netlink: 'syz.3.740': attribute type 15 has an invalid length. [ 161.564900][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 161.646817][ T8767] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.167871][ T8799] sctp: [Deprecated]: syz.2.752 (pid 8799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.167871][ T8799] Use struct sctp_sack_info instead [ 162.351845][ T8814] netlink: 60 bytes leftover after parsing attributes in process `syz.0.756'. [ 162.408959][ T8814] netlink: 400 bytes leftover after parsing attributes in process `syz.0.756'. [ 162.517360][ T8825] netlink: 'syz.2.759': attribute type 4 has an invalid length. [ 162.852771][ T8839] netlink: 'syz.4.764': attribute type 1 has an invalid length. [ 162.897178][ T8839] netlink: 'syz.4.764': attribute type 2 has an invalid length. [ 162.998675][ T8851] netlink: 'syz.0.767': attribute type 1 has an invalid length. [ 163.022578][ T8851] netlink: 'syz.0.767': attribute type 2 has an invalid length. [ 163.159767][ T8859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.242895][ T8861] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 163.393825][ T8869] syzkaller0: entered promiscuous mode [ 163.399487][ T8869] syzkaller0: entered allmulticast mode [ 163.412647][ T8869] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 164.007458][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058adc400: rx timeout, send abort [ 164.508335][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058add000: rx timeout, send abort [ 164.516891][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058adc400: abort rx timeout. Force session deactivation [ 164.561502][ T8906] validate_nla: 1 callbacks suppressed [ 164.561517][ T8906] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 164.580990][ T8906] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 165.016848][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058add000: abort rx timeout. Force session deactivation [ 166.481609][ T8874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.494556][ T8888] netlink: 'syz.0.782': attribute type 11 has an invalid length. [ 166.502764][ T8888] __nla_validate_parse: 7 callbacks suppressed [ 166.502782][ T8888] netlink: 224 bytes leftover after parsing attributes in process `syz.0.782'. [ 167.283394][ T8951] xt_l2tp: missing protocol rule (udp|l2tpip) [ 167.293715][ T8951] netlink: 64 bytes leftover after parsing attributes in process `syz.1.800'. [ 167.312142][ T8951] netlink: 64 bytes leftover after parsing attributes in process `syz.1.800'. [ 167.540509][ T8961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.803'. [ 167.574655][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.803'. [ 167.631982][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 167.774952][ T8978] syz_tun: entered allmulticast mode [ 167.840458][ T8982] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.176974][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 168.422241][ T9011] IPVS: Unknown mcast interface: bridge_slave_0 [ 168.443670][ T9013] IPVS: Unknown mcast interface: bridge_slave_0 [ 168.687233][ T9029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.820'. [ 168.741444][ T9033] netlink: zone id is out of range [ 168.766997][ T9033] netlink: zone id is out of range [ 168.776842][ T9027] bond3: Unable to set down delay as MII monitoring is disabled [ 168.785709][ T9033] netlink: zone id is out of range [ 168.791548][ T9033] netlink: zone id is out of range [ 168.799999][ T9027] bond3 (unregistering): Released all slaves [ 168.825757][ T9033] netlink: zone id is out of range [ 168.866122][ T9033] netlink: zone id is out of range [ 168.892515][ T9033] netlink: zone id is out of range [ 168.898773][ T9033] netlink: zone id is out of range [ 168.925431][ T9033] netlink: zone id is out of range [ 168.952226][ T9033] netlink: zone id is out of range [ 169.213943][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.828'. [ 169.250783][ T9053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.828'. [ 169.324533][ T9053] geneve3: entered promiscuous mode [ 169.333238][ T9053] geneve3: entered allmulticast mode [ 169.419300][ T7218] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.429267][ T7218] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.461603][ T7218] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.477541][ T7218] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.073277][ T9084] netlink: 'syz.1.838': attribute type 1 has an invalid length. [ 170.264034][ T9092] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 170.292223][ T9092] netlink: 'syz.3.842': attribute type 2 has an invalid length. [ 171.162104][ T9119] syzkaller0: entered promiscuous mode [ 171.167917][ T9119] syzkaller0: entered allmulticast mode [ 171.280889][ T9126] netlink: 'syz.4.852': attribute type 1 has an invalid length. [ 171.439031][ T9135] netlink: 'syz.3.855': attribute type 2 has an invalid length. [ 171.479658][ T9135] bond3: entered promiscuous mode [ 171.552482][ T9135] bond3: entered allmulticast mode [ 171.576360][ T9140] __nla_validate_parse: 12 callbacks suppressed [ 171.576379][ T9140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.856'. [ 171.598079][ T9135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.657275][ T9141] netlink: 'syz.1.856': attribute type 10 has an invalid length. [ 171.709777][ T9141] team0: Device ipvlan1 failed to register rx_handler [ 172.090496][ T9165] tipc: Enabled bearer , priority 11 [ 172.097786][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.862'. [ 172.128237][ T9169] netlink: 'syz.1.865': attribute type 1 has an invalid length. [ 172.157962][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 172.198375][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 172.225980][ T9169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.272886][ T9174] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 173.057694][ T9205] team0: Device gtp0 is up. Set it down before adding it as a team port [ 173.499689][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 173.528929][ T9227] netlink: 'syz.3.882': attribute type 1 has an invalid length. [ 173.538857][ T9227] netlink: 96 bytes leftover after parsing attributes in process `syz.3.882'. [ 173.552013][ T9227] netlink: 1 bytes leftover after parsing attributes in process `syz.3.882'. [ 173.561998][ T9227] netlink: 658 bytes leftover after parsing attributes in process `syz.3.882'. [ 173.817468][ T9254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.886'. [ 174.078064][ T9262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.890'. [ 174.432533][ T9282] netlink: 'syz.2.898': attribute type 28 has an invalid length. [ 174.471471][ T9282] netlink: 'syz.2.898': attribute type 3 has an invalid length. [ 174.773461][ T9306] pim6reg: entered allmulticast mode [ 174.787056][ T9307] team0: Device vxcan1 is of different type [ 175.711483][ T9359] validate_nla: 3 callbacks suppressed [ 175.711500][ T9359] netlink: 'syz.4.918': attribute type 1 has an invalid length. [ 175.777383][ T9359] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.144683][ T9380] block nbd0: not configured, cannot reconfigure [ 176.256708][ T9383] net_ratelimit: 44 callbacks suppressed [ 176.256731][ T9383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.458144][ T9392] veth3: entered allmulticast mode [ 176.570078][ T9399] IPv6: sit1: Disabled Multicast RS [ 176.578258][ T9399] sit1: entered allmulticast mode [ 176.588944][ T9409] netlink: 'syz.0.931': attribute type 1 has an invalid length. [ 176.630385][ T9409] __nla_validate_parse: 9 callbacks suppressed [ 176.630403][ T9409] netlink: 280 bytes leftover after parsing attributes in process `syz.0.931'. [ 176.818236][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.934'. [ 176.958285][ T9435] netlink: 76 bytes leftover after parsing attributes in process `syz.4.937'. [ 176.979654][ T9423] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 176.981228][ T9429] tipc: Started in network mode [ 177.001745][ T9429] tipc: Node identity , cluster identity 4711 [ 177.011108][ T9429] tipc: Failed to obtain node identity [ 177.040193][ T9429] tipc: Enabling of bearer rejected, failed to enable media [ 177.405009][ T9465] netlink: 'syz.3.946': attribute type 1 has an invalid length. [ 177.428932][ T9456] netlink: 72 bytes leftover after parsing attributes in process `syz.4.943'. [ 177.434811][ T9464] netlink: 'syz.3.946': attribute type 1 has an invalid length. [ 177.454338][ T9465] netlink: 'syz.3.946': attribute type 2 has an invalid length. [ 177.466988][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 177.509081][ T9467] netlink: 60 bytes leftover after parsing attributes in process `syz.1.947'. [ 177.523712][ T9464] netlink: 'syz.3.946': attribute type 2 has an invalid length. [ 177.554517][ T9465] netlink: 'syz.3.946': attribute type 1 has an invalid length. [ 177.566337][ T9456] team0: Port device team_slave_0 removed [ 177.566376][ T9464] netlink: 'syz.3.946': attribute type 1 has an invalid length. [ 177.640239][ T9465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.946'. [ 177.650921][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.946'. [ 177.866875][ T9486] netlink: 'syz.4.952': attribute type 1 has an invalid length. [ 178.035556][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 180.868715][ T9498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.130546][ T9538] netlink: 88 bytes leftover after parsing attributes in process `syz.4.963'. [ 181.495150][ T9557] tunl0: entered promiscuous mode [ 181.515716][ T9557] netlink: 'syz.3.969': attribute type 3 has an invalid length. [ 181.898378][ T9573] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 182.274966][ T9596] __nla_validate_parse: 2 callbacks suppressed [ 182.274987][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.980'. [ 182.861228][ T9633] xt_l2tp: v2 doesn't support IP mode [ 182.911742][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 182.960309][ T9638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.988'. [ 182.970293][ T9638] nbd: must specify at least one socket [ 183.254846][ T9654] netlink: 'syz.2.992': attribute type 1 has an invalid length. [ 183.339404][ T9663] Bluetooth: MGMT ver 1.23 [ 183.351416][ T9654] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.393383][ T9662] vlan0: entered allmulticast mode [ 183.398787][ T9662] bond5: entered allmulticast mode [ 183.428096][ T9665] bridge_slave_0: left allmulticast mode [ 183.434532][ T9665] bridge_slave_0: left promiscuous mode [ 183.441600][ T9665] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.458445][ T9663] netlink: 'syz.4.994': attribute type 1 has an invalid length. [ 183.470011][ T9665] bridge_slave_1: left allmulticast mode [ 183.476902][ T9665] bridge_slave_1: left promiscuous mode [ 183.482913][ T9665] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.511188][ T9668] xt_hashlimit: overflow, rate too high: 0 [ 183.531148][ T9665] bond0: (slave bond_slave_0): Releasing backup interface [ 183.557600][ T9665] bond0: (slave bond_slave_1): Releasing backup interface [ 183.583063][ T9665] team0: Port device team_slave_0 removed [ 183.607510][ T9665] team0: Port device team_slave_1 removed [ 183.616347][ T9665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.624366][ T9665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.655739][ T9665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.669714][ T9665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.724612][ T9665] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 183.872262][ T9672] syzkaller0: entered promiscuous mode [ 183.880978][ T9672] syzkaller0: entered allmulticast mode [ 185.417849][ T9710] team0: Device gtp0 is up. Set it down before adding it as a team port [ 185.644873][ T9720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1009'. [ 185.854674][ T9735] netlink: 'syz.4.1014': attribute type 1 has an invalid length. [ 185.866577][ T9739] SET target dimension over the limit! [ 186.049198][ T9746] bond6: (slave gretap1): making interface the new active one [ 186.062843][ T9746] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 186.148812][ T9768] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.1020'. [ 186.420227][ T9781] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1025'. [ 186.461669][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 186.490734][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1026'. [ 186.504283][ T9788] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1027'. [ 186.618703][ T9783] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1026'. [ 187.015685][ T9826] netlink: 'syz.4.1039': attribute type 1 has an invalid length. [ 187.277084][ T9842] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 187.298517][ T9842] __nla_validate_parse: 5 callbacks suppressed [ 187.298537][ T9842] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1043'. [ 187.470359][ T9798] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 187.528187][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 187.570326][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 187.570975][ T147] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.601000][ T147] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.630103][ T147] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.653112][ T147] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.761530][ T9870] veth1_macvtap: renamed from vlan1 [ 188.285656][ T9898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.530488][ T9907] IPv6: sit1: Disabled Multicast RS [ 188.563104][ T9907] sit1: entered allmulticast mode [ 188.583592][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1061'. [ 188.818326][ T9918] geneve5: entered promiscuous mode [ 188.852101][ T9918] geneve5: entered allmulticast mode [ 188.936277][ T9923] sctp: [Deprecated]: syz.0.1065 (pid 9923) Use of int in max_burst socket option. [ 188.936277][ T9923] Use struct sctp_assoc_value instead [ 189.415498][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1070'. [ 189.415875][ T9948] x_tables: duplicate underflow at hook 1 [ 189.892272][ T9965] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1078'. [ 189.954810][ T9971] netlink: 'syz.1.1080': attribute type 11 has an invalid length. [ 190.135855][ T9988] netlink: 'syz.2.1083': attribute type 9 has an invalid length. [ 190.174373][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1083'. [ 190.207623][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 190.263792][ T9988] netlink: 'syz.2.1083': attribute type 9 has an invalid length. [ 190.296117][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1083'. [ 190.332990][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 190.655650][T10014] sctp: [Deprecated]: syz.0.1088 (pid 10014) Use of int in max_burst socket option deprecated. [ 190.655650][T10014] Use struct sctp_assoc_value instead [ 190.696151][ T7176] IPVS: starting estimator thread 0... [ 190.711159][T10014] IPVS: ip_vs_add_dest(): server weight less than zero [ 190.725563][T10025] wg1: entered promiscuous mode [ 190.751202][T10025] wg1: entered allmulticast mode [ 190.792601][T10020] IPVS: using max 24 ests per chain, 57600 per kthread [ 190.847449][T10032] nbd: must specify at least one socket [ 191.422498][T10063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.764349][T10081] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.978197][T10092] netlink: 'syz.0.1109': attribute type 1 has an invalid length. [ 192.169660][T10092] bond3: entered promiscuous mode [ 192.176568][T10092] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.235381][T10104] bond3: (slave bridge2): making interface the new active one [ 192.243297][T10104] bridge2: entered promiscuous mode [ 192.260213][T10104] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 192.410153][T10116] syzkaller0: entered promiscuous mode [ 192.453398][T10116] syzkaller0: entered allmulticast mode [ 192.572156][T10131] __nla_validate_parse: 8 callbacks suppressed [ 192.572175][T10131] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1116'. [ 192.772085][T10139] netlink: 63 bytes leftover after parsing attributes in process `syz.4.1118'. [ 193.880257][T10141] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 194.089143][T10152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1121'. [ 194.147942][T10156] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 194.226650][T10158] netlink: 'syz.4.1123': attribute type 10 has an invalid length. [ 194.234923][T10158] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.242805][T10158] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.274180][T10158] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.281573][T10158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.289203][T10158] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.296614][T10158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.365791][T10158] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 194.565753][T10178] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1128'. [ 194.640958][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.650705][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1131'. [ 194.652119][T10186] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1128'. [ 194.671238][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.986231][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1138'. [ 195.038105][T10216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.193468][T10223] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 195.560705][T10246] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 195.597115][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1150'. [ 195.646869][T10246] bridge0 (unregistering): left allmulticast mode [ 195.669199][T10252] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1152'. [ 195.862498][T10262] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1154'. [ 195.871608][T10262] netlink: 'syz.4.1154': attribute type 1 has an invalid length. [ 196.366656][T10256] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 196.451541][T10293] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 196.464125][T10293] netlink: 'syz.2.1164': attribute type 2 has an invalid length. [ 196.474399][T10293] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 196.491792][T10294] xt_ecn: cannot match TCP bits for non-tcp packets [ 196.570386][T10297] ip6tnl2: entered allmulticast mode [ 196.685392][T10307] netlink: 'syz.3.1168': attribute type 13 has an invalid length. [ 196.717521][T10309] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 198.436257][T10403] syzkaller0: entered promiscuous mode [ 198.445104][T10403] 0: reclassify loop, rule prio 0, protocol 800 [ 198.528190][T10407] __nla_validate_parse: 6 callbacks suppressed [ 198.528212][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1196'. [ 198.760700][T10415] netlink: 'syz.1.1197': attribute type 29 has an invalid length. [ 198.791760][T10415] netlink: 'syz.1.1197': attribute type 29 has an invalid length. [ 198.857134][T10419] netlink: 'syz.1.1197': attribute type 29 has an invalid length. [ 198.928831][T10415] netlink: 'syz.1.1197': attribute type 29 has an invalid length. [ 199.339416][T10403] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.362232][T10403] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 199.370563][T10438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1203'. [ 199.399072][T10403] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.416733][T10403] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 199.449353][T10403] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 199.482960][T10403] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 199.528282][T10403] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 199.551953][T10403] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 199.755965][T10455] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1207'. [ 199.845714][T10457] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 200.105920][T10469] team_slave_1: Caught tx_queue_len zero misconfig [ 200.720627][T10492] validate_nla: 3 callbacks suppressed [ 200.720646][T10492] netlink: 'syz.3.1219': attribute type 5 has an invalid length. [ 200.811855][T10492] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1219'. [ 201.228730][T10516] team_slave_1: Caught tx_queue_len zero misconfig [ 201.295881][T10520] netlink: 'syz.3.1225': attribute type 1 has an invalid length. [ 201.316145][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1225'. [ 201.333719][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 201.343310][T10524] IPVS: ip_vs_add_dest(): server weight less than zero [ 201.364816][T10524] netlink: 'syz.0.1224': attribute type 11 has an invalid length. [ 201.377929][T10524] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1224'. [ 201.419202][T10527] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 201.466483][T10527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.816832][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 201.938636][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'. [ 201.951437][T10562] netlink: 'syz.3.1234': attribute type 83 has an invalid length. [ 202.024919][T10568] netlink: 'syz.4.1235': attribute type 1 has an invalid length. [ 202.254621][T10578] syzkaller0: entered promiscuous mode [ 202.270841][T10578] syzkaller0: entered allmulticast mode [ 202.413443][T10588] netlink: 'syz.0.1240': attribute type 1 has an invalid length. [ 203.157903][T10597] bond4: (slave gretap1): making interface the new active one [ 203.208995][T10597] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 203.252213][T10625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1242'. [ 203.840567][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1249'. [ 204.460584][T10692] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1257'. [ 204.554871][T10693] openvswitch: netlink: IPv4 tun info is not correct [ 204.628515][T10693] geneve0: entered promiscuous mode [ 204.952333][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'. [ 205.284497][T10719] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1262'. [ 205.475424][T10733] syzkaller1: entered promiscuous mode [ 205.495164][T10733] syzkaller1: entered allmulticast mode [ 205.757136][T10740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.837033][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1268'. [ 205.908060][T10759] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20001 [ 206.027434][T10765] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 206.192202][T10740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.253408][T10771] C: Caught tx_queue_len zero misconfig [ 206.348755][T10740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.428291][T10740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.538852][T10785] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1278'. [ 206.593525][ T168] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 40823 - 0 [ 206.633903][ T84] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 40823 - 0 [ 206.695026][ T84] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 40823 - 0 [ 206.728711][ T84] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 40823 - 0 [ 206.947299][T10792] syzkaller0: entered promiscuous mode [ 206.963864][T10792] syzkaller0: entered allmulticast mode [ 209.046475][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 209.065273][T10857] ipt_REJECT: TCP_RESET invalid for non-tcp [ 209.131579][ T84] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.141024][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 209.162055][ T84] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.170972][ T84] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.261076][T10859] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 209.328458][ T84] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.455320][T10874] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.1295'. [ 209.607575][T10885] netlink: 'syz.4.1298': attribute type 13 has an invalid length. [ 209.626708][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1299'. [ 209.697552][T10891] netlink: 'syz.3.1300': attribute type 16 has an invalid length. [ 209.717767][T10891] netlink: 'syz.3.1300': attribute type 17 has an invalid length. [ 209.953619][T10891] tunl0: left promiscuous mode [ 210.064958][T10891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.195950][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 210.567247][T10920] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 210.596542][T10920] bond6: (slave lo): Enslaving as an active interface with an up link [ 210.626197][T10920] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 210.719095][T10937] team0: Cannot enslave team device to itself [ 210.756013][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1311'. [ 210.829634][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'. [ 210.847996][T10946] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1314'. [ 210.857815][T10940] netlink: 'syz.0.1311': attribute type 5 has an invalid length. [ 210.867155][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1311'. [ 210.878146][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'. [ 210.956662][ T84] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.968354][ T84] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.978231][T10940] netlink: 'syz.0.1311': attribute type 5 has an invalid length. [ 211.016293][ T84] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.028708][ T84] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.159614][ T29] audit: type=1804 audit(1775424231.898:2): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1316" name="/newroot/266/cgroup.controllers" dev="tmpfs" ino=1371 res=1 errno=0 [ 211.199491][ T29] audit: type=1800 audit(1775424231.898:3): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1316" name="cgroup.controllers" dev="tmpfs" ino=1371 res=0 errno=0 [ 211.548289][T10978] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 211.739716][T10990] SET target dimension over the limit! [ 211.745971][T10989] SET target dimension over the limit! [ 212.081535][T11005] netlink: 'syz.3.1330': attribute type 1 has an invalid length. [ 212.129885][T11018] SET target dimension over the limit! [ 212.176274][T11005] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.305016][T11026] Cannot find add_set index 0 as target [ 212.334703][T11026] block nbd0: not configured, cannot reconfigure [ 212.804014][T11055] sock: sock_set_timeout: `syz.2.1341' (pid 11055) tries to set negative timeout [ 212.896658][T11059] syz_tun: entered allmulticast mode [ 213.063060][T11067] syz_tun: left allmulticast mode [ 213.074715][T11072] netlink: 'syz.2.1344': attribute type 4 has an invalid length. [ 213.101438][T11072] netlink: 'syz.2.1344': attribute type 4 has an invalid length. [ 213.688679][T11112] xt_hashlimit: size too large, truncated to 1048576 [ 213.868281][T11121] netlink: 'syz.2.1354': attribute type 21 has an invalid length. [ 213.920873][T11121] netlink: 'syz.2.1354': attribute type 6 has an invalid length. [ 213.929256][T11113] xt_HMARK: spi-set and port-set can't be combined [ 214.198502][T11132] syzkaller1: entered promiscuous mode [ 214.204708][T11132] syzkaller1: entered allmulticast mode [ 214.422801][T11149] __nla_validate_parse: 16 callbacks suppressed [ 214.422824][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'. [ 214.584214][T11156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1363'. [ 214.699738][T11165] netlink: 'syz.0.1365': attribute type 3 has an invalid length. [ 214.738679][T11165] netlink: 'syz.0.1365': attribute type 3 has an invalid length. [ 214.759268][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1365'. [ 215.059213][T11185] netlink: 'syz.1.1369': attribute type 8 has an invalid length. [ 215.072573][T11169] "syz.3.1366" (11169) uses obsolete ecb(arc4) skcipher [ 215.125675][T11186] netlink: 'syz.1.1369': attribute type 8 has an invalid length. [ 215.168194][T11191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1371'. [ 215.179106][T11181] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 215.190479][T11193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1370'. [ 215.228771][T11181] bond5: option packets_per_slave: allowed values 0 - 65535 [ 215.248329][T11181] bond5 (unregistering): Released all slaves [ 215.338906][T11198] IPVS: Scheduler module ip_vs_sip not found [ 215.400165][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1372'. [ 215.436287][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1372'. [ 215.526953][T11213] netlink: 'syz.2.1375': attribute type 1 has an invalid length. [ 215.655814][T11213] 8021q: adding VLAN 0 to HW filter on device bond7 [ 215.960057][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 216.219072][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'. [ 216.278478][T11259] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1383'. [ 216.322799][T11259] netlink: 'syz.3.1383': attribute type 2 has an invalid length. [ 216.407386][T11271] netlink: 'syz.3.1383': attribute type 3 has an invalid length. [ 216.625213][T11280] Bluetooth: MGMT ver 1.23 [ 217.364264][T11308] nbd0: detected capacity change from 0 to 63 [ 217.364439][T11324] syzkaller1: entered promiscuous mode [ 217.379097][ T5144] block nbd0: Receive control failed (result -32) [ 217.389389][ T5839] block nbd0: Receive control failed (result -32) [ 217.391364][T11324] syzkaller1: entered allmulticast mode [ 217.403039][ T5847] block nbd0: Dead connection, failed to find a fallback [ 217.410716][ T5847] block nbd0: shutting down sockets [ 217.418288][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.428973][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 217.437766][ T5847] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.448235][ T5847] Buffer I/O error on dev nbd0, logical block 1, async page read [ 217.456659][ T5847] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.467161][ T5847] Buffer I/O error on dev nbd0, logical block 2, async page read [ 217.475117][ T5847] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.484900][ T5847] Buffer I/O error on dev nbd0, logical block 3, async page read [ 217.492972][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.503708][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 217.513066][ T5847] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.522804][ T5847] Buffer I/O error on dev nbd0, logical block 1, async page read [ 217.530673][ T5847] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.592077][ T5847] Buffer I/O error on dev nbd0, logical block 2, async page read [ 217.622992][ T5847] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.657061][ T5847] Buffer I/O error on dev nbd0, logical block 3, async page read [ 217.677112][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.696245][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 217.729291][ T5847] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.763875][ T5847] Buffer I/O error on dev nbd0, logical block 1, async page read [ 217.792787][ T5847] ldm_validate_partition_table(): Disk read failed. [ 217.800684][ T5847] Dev nbd0: unable to read RDB block 0 [ 217.836828][ T5847] nbd0: unable to read partition table [ 217.884976][ T5847] ldm_validate_partition_table(): Disk read failed. [ 217.925161][ T5847] Dev nbd0: unable to read RDB block 0 [ 217.931290][ T5847] nbd0: unable to read partition table [ 217.990394][T11347] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.999241][T11347] bridge0: port 1(1¾x9ÿ) entered disabled state [ 218.061399][T11354] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.068788][T11354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.076769][T11354] bridge0: port 1(1¾x9ÿ) entered blocking state [ 218.083301][T11354] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 218.172868][T11354] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.180286][T11354] bridge0: port 1(1¾x9ÿ) entered disabled state [ 218.268686][T11364] ip6t_srh: unknown srh invflags 4000 [ 218.319221][T11364] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 219.211295][T11420] netlink: 'syz.0.1426': attribute type 2 has an invalid length. [ 219.324500][T11426] lo: Caught tx_queue_len zero misconfig [ 219.334570][T11426] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 219.371345][T11429] veth0: entered promiscuous mode [ 219.445779][T11429] veth0: left promiscuous mode [ 219.521251][T11438] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.543091][T11438] netlink: 'syz.1.1429': attribute type 1 has an invalid length. [ 219.963853][T11461] __nla_validate_parse: 18 callbacks suppressed [ 219.963872][T11461] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1436'. [ 220.211315][T11476] ipt_ECN: cannot use operation on non-tcp rule [ 220.220065][T11475] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20003 [ 220.580027][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 220.597315][T11498] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 220.889018][T11522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1455'. [ 220.924455][T11525] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1454'. [ 221.045118][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 221.055108][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 221.066166][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 221.076334][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 221.158644][T11537] netlink: 'syz.4.1460': attribute type 1 has an invalid length. [ 221.216637][T11537] 8021q: adding VLAN 0 to HW filter on device bond7 [ 221.227808][T11543] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1461'. [ 221.285458][T11546] bond7: (slave veth5): Enslaving as an active interface with a down link [ 221.311097][T11549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1462'. [ 221.324221][T11549] syz.2.1462 uses old SIOCAX25GETINFO [ 221.327450][T11537] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 221.338508][T11537] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 221.351219][T11549] netlink: 'syz.2.1462': attribute type 2 has an invalid length. [ 221.369586][T11549] netlink: 'syz.2.1462': attribute type 11 has an invalid length. [ 221.574423][T11556] netlink: 'syz.3.1463': attribute type 1 has an invalid length. [ 221.595693][T11559] gretap1: entered promiscuous mode [ 221.601069][T11559] gretap1: entered allmulticast mode [ 221.788032][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.795924][T11573] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.838697][T11566] pim6reg1: entered promiscuous mode [ 221.858354][T11566] pim6reg1: entered allmulticast mode [ 221.875350][T11566] netlink: 'syz.1.1467': attribute type 4 has an invalid length. [ 222.022149][T11540] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 222.029987][T11589] netlink: 'syz.4.1475': attribute type 21 has an invalid length. [ 222.097350][T11591] ip6t_srh: unknown srh invflags 4000 [ 222.172775][T11593] 8021q: VLANs not supported on gre0 [ 222.290710][T11606] syzkaller1: entered promiscuous mode [ 222.342041][T11606] syzkaller1: entered allmulticast mode [ 222.358851][T11612] ipt_REJECT: TCP_RESET invalid for non-tcp [ 222.394787][T11615] netlink: 'syz.1.1481': attribute type 1 has an invalid length. [ 222.469738][T11607] team1: entered promiscuous mode [ 222.520539][T11607] team1: entered allmulticast mode [ 222.693837][T11628] mac80211_hwsim hwsim10 wlan0: Caught tx_queue_len zero misconfig [ 223.022135][T11650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.169460][T11657] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.240426][T11666] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 223.250033][T11666] bridge0: port 3(syz_tun) entered blocking state [ 223.270954][T11666] bridge0: port 3(syz_tun) entered disabled state [ 223.293582][T11666] syz_tun: entered allmulticast mode [ 223.346914][T11666] syz_tun: entered promiscuous mode [ 223.412167][T11676] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 223.434968][T11672] veth0: entered promiscuous mode [ 223.440525][T11672] veth0: left promiscuous mode [ 223.867608][T11706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.177044][T11722] veth0_macvtap: left promiscuous mode [ 224.541345][T11735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.733660][T11751] nbd: device at index 64 is going down [ 224.972270][T11765] __nla_validate_parse: 22 callbacks suppressed [ 224.972293][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 224.993121][ T5846] udevd[5846]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 225.030272][ T5847] udevd[5847]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 225.081761][T11775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1527'. [ 225.363130][ T168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.372803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.495123][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.667149][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'. [ 225.726833][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'. [ 225.886971][T11822] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1540'. [ 225.897782][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 225.908431][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 226.274560][T11834] tipc: Enabled bearer , priority 0 [ 226.291360][T11834] syzkaller0: entered promiscuous mode [ 226.325519][T11834] syzkaller0: entered allmulticast mode [ 226.413244][T11834] tipc: Resetting bearer [ 226.442330][T11829] tipc: Resetting bearer [ 226.526201][T11829] tipc: Disabling bearer [ 226.579399][T11848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1544'. [ 226.673218][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.694459][T11857] syzkaller0: entered promiscuous mode [ 226.699992][T11857] syzkaller0: entered allmulticast mode [ 226.717189][T11860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1545'. [ 226.867240][T11866] tunl0: Caught tx_queue_len zero misconfig [ 226.886909][T11870] netlink: 'syz.0.1549': attribute type 83 has an invalid length. [ 227.132391][T11878] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 227.158528][T11878] bond8: (slave lo): Enslaving as an active interface with an up link [ 227.223344][T11878] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 227.527181][T11905] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1556'. [ 227.694109][T11917] xfrm1: entered allmulticast mode [ 227.832487][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.326471][ T7175] IPVS: starting estimator thread 0... [ 228.403223][T11941] IPVS: sh: FWM 3 0x00000003 - no destination available [ 228.442013][T11939] IPVS: using max 27 ests per chain, 64800 per kthread [ 228.619760][T11953] netlink: 'syz.3.1568': attribute type 1 has an invalid length. [ 228.637536][T11955] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 228.746479][T11953] bond6: entered promiscuous mode [ 228.751741][T11953] bond6: entered allmulticast mode [ 228.757774][T11953] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.820937][T11958] macvlan2: entered promiscuous mode [ 228.832060][T11958] macvlan2: entered allmulticast mode [ 228.839671][T11958] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 228.880750][T11970] netlink: 'syz.4.1572': attribute type 1 has an invalid length. [ 228.942193][ T168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.236330][T11994] syzkaller0: entered promiscuous mode [ 229.253064][T11994] syzkaller0: entered allmulticast mode [ 229.396838][T12006] netlink: 'syz.2.1583': attribute type 9 has an invalid length. [ 229.571994][T12012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.637023][T12012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.750472][T12024] syzkaller0: entered promiscuous mode [ 229.762408][T12024] syzkaller0: entered allmulticast mode [ 230.046599][ T9755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.231522][T12055] __nla_validate_parse: 6 callbacks suppressed [ 230.231543][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'. [ 230.308986][T12055] 8021q: adding VLAN 0 to HW filter on device bond7 [ 230.398108][T12060] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1596'. [ 230.482488][ T9755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.112685][ T9754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.121227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.174862][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.477130][T12133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1605'. [ 231.961375][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'. [ 232.145287][T12163] bond8: option xmit_hash_policy: invalid value (64) [ 232.199362][T12163] bond8 (unregistering): Released all slaves [ 232.356148][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.438883][T12187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.482169][T12186] veth0: entered promiscuous mode [ 232.520427][T12187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.552913][T12187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.665447][T12198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1623'. [ 232.805038][T12188] veth0: left promiscuous mode [ 232.903146][T12213] netlink: 'syz.3.1625': attribute type 83 has an invalid length. [ 233.271529][T12247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1632'. [ 233.632887][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1634'. [ 233.671960][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1634'. [ 233.977713][T12288] H: renamed from dummy0 (while UP) [ 234.125569][T12298] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1642'. [ 234.150053][T12288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1640'. [ 234.205625][T12293] tipc: Enabling of bearer rejected, failed to enable media [ 234.271692][T12305] netlink: 'syz.0.1643': attribute type 1 has an invalid length. [ 234.458742][T12312] syzkaller0: entered promiscuous mode [ 234.467484][T12312] syzkaller0: entered allmulticast mode [ 234.490163][T12312] tc action pedit offset must be on 32 bit boundaries [ 234.497681][T12312] tc action pedit offset must be on 32 bit boundaries [ 234.504536][T12312] tc action pedit offset must be on 32 bit boundaries [ 234.511385][T12312] tc action pedit offset must be on 32 bit boundaries [ 234.518299][T12312] tc action pedit offset must be on 32 bit boundaries [ 234.525290][T12312] tc action pedit offset must be on 32 bit boundaries [ 234.532164][T12312] tc action pedit offset must be on 32 bit boundaries [ 234.539064][T12312] tc action pedit offset must be on 32 bit boundaries [ 234.546266][T12312] tc action pedit offset must be on 32 bit boundaries [ 234.553198][T12312] tc action pedit offset must be on 32 bit boundaries [ 234.560024][T12312] net_ratelimit: 7 callbacks suppressed [ 234.560041][T12312] 0: reclassify loop, rule prio 0, protocol 800 [ 234.597170][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.023679][T12353] netlink: 'syz.1.1653': attribute type 4 has an invalid length. [ 235.467102][T12386] __nla_validate_parse: 6 callbacks suppressed [ 235.467121][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1659'. [ 235.732247][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.796502][T12407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1665'. [ 235.805772][T12407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1665'. [ 235.828475][T12407] syz_tun: entered promiscuous mode [ 235.858735][T12407] gretap0: entered promiscuous mode [ 235.887605][T12407] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 235.916027][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1666'. [ 235.932531][T12407] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 235.968312][T12414] xt_ecn: cannot match TCP bits for non-tcp packets [ 236.233151][ T9756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.496899][T12413] veth0_macvtap: left promiscuous mode [ 236.852282][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.882744][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.891234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.275155][T12469] : renamed from hsr0 [ 237.625563][T12479] netlink: 'syz.4.1680': attribute type 29 has an invalid length. [ 237.657807][T12479] netlink: 'syz.4.1680': attribute type 29 has an invalid length. [ 237.801265][T12490] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1683'. [ 237.992378][ T9756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.017791][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 238.037303][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 238.086666][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1688'. [ 238.289234][T12512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1690'. [ 238.304536][T12510] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 238.312767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.345674][T12517] xt_l2tp: invalid flags combination: 8 [ 238.480392][T12524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1694'. [ 238.562065][T12530] batadv_slave_0: entered promiscuous mode [ 238.678927][T12541] vlan0: Caught tx_queue_len zero misconfig [ 238.741925][T12525] batadv_slave_0: left promiscuous mode [ 239.023890][T12560] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.118561][ T9755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.203446][T12568] netlink: 'syz.1.1705': attribute type 12 has an invalid length. [ 239.434797][T12583] bond5: option miimon: invalid value (18446744073709551588) [ 239.462426][T12583] bond5: option miimon: allowed values 0 - 2147483647 [ 239.471554][T12583] bond5 (unregistering): Released all slaves [ 239.540677][T12598] netlink: 'syz.3.1713': attribute type 3 has an invalid length. [ 239.789906][T12613] openvswitch: netlink: Message has 8 unknown bytes. [ 239.802012][T12613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.154639][T12629] netlink: 'syz.4.1724': attribute type 1 has an invalid length. [ 240.232596][ T9755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.517265][T12638] __nla_validate_parse: 4 callbacks suppressed [ 240.517290][T12638] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1728'. [ 240.542644][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1727'. [ 240.719685][T12640] x_tables: duplicate underflow at hook 1 [ 240.872304][T12647] netlink: 'syz.0.1731': attribute type 2 has an invalid length. [ 241.008948][T12660] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 241.048303][T12660] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1735'. [ 241.066275][T12660] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1735'. [ 241.082022][T12660] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1735'. [ 241.171202][T12665] netlink: 'syz.1.1734': attribute type 11 has an invalid length. [ 241.179255][T12665] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1734'. [ 241.354442][ T168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.391810][T12678] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 241.426478][T12684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1741'. [ 241.441489][T12680] : entered promiscuous mode [ 241.485149][T12691] vcan0: entered promiscuous mode [ 241.497344][T12691] vcan0: entered allmulticast mode [ 241.584940][T12696] bond6: (slave lo): Releasing backup interface [ 241.593109][T12696] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 241.611344][T12696] ¾x9ÿ: left allmulticast mode [ 241.616524][T12696] ¾x9ÿ: left promiscuous mode [ 241.632905][T12696] bridge0: port 1(1¾x9ÿ) entered disabled state [ 241.651432][T12696] bridge_slave_1: left allmulticast mode [ 241.657960][T12696] bridge_slave_1: left promiscuous mode [ 241.664703][T12696] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.681132][T12696] bond0: (slave bond_slave_0): Releasing backup interface [ 241.695400][T12696] bond_slave_0: left promiscuous mode [ 241.721147][T12696] bond0: (slave bond_slave_1): Releasing backup interface [ 241.730160][T12696] bond_slave_1: left promiscuous mode [ 241.746948][T12696] team0: Port device team_slave_0 removed [ 241.754860][T12703] vcan0: tx address claim with dlc 0 [ 241.764202][T12696] team0: Port device team_slave_1 removed [ 241.771115][T12696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.780421][T12696] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 241.840424][T12696] netlink: 30 bytes leftover after parsing attributes in process `syz.2.1743'. [ 241.992636][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.066295][T12721] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1750'. [ 242.405064][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1757'. [ 242.433027][T12742] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 242.503487][ T168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.632723][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.652865][T12741] team0: Caught tx_queue_len zero misconfig [ 243.210105][T12766] batadv_slave_0: Caught tx_queue_len zero misconfig [ 243.435941][T12777] xt_TCPMSS: Only works on TCP SYN packets [ 243.558324][T12788] SET target dimension over the limit! [ 243.595336][T12787] netlink: 'syz.4.1769': attribute type 10 has an invalid length. [ 243.606399][T12787] bond0: (slave ÿ): Opening slave failed [ 243.712939][T12800] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 244.056726][T12821] netlink: 'syz.0.1778': attribute type 58 has an invalid length. [ 244.296743][T12840] netlink: 'syz.2.1787': attribute type 1 has an invalid length. [ 245.192196][ T5909] net_ratelimit: 9 callbacks suppressed [ 245.192216][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.207492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.263269][T12897] openvswitch: netlink: Message has 8 unknown bytes. [ 245.270237][T12897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.294800][T12900] netlink: 'syz.0.1802': attribute type 11 has an invalid length. [ 245.311636][T12897] xt_TPROXY: Can be used only with -p tcp or -p udp [ 245.340059][T12903] netlink: 'syz.0.1802': attribute type 11 has an invalid length. [ 245.432683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.562680][ T168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.572558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.623453][T12916] netlink: 'syz.0.1808': attribute type 83 has an invalid length. [ 245.842820][T12927] __nla_validate_parse: 16 callbacks suppressed [ 245.842841][T12927] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1813'. [ 245.970251][T12934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1815'. [ 246.006716][T12937] netlink: 'syz.4.1816': attribute type 1 has an invalid length. [ 246.023345][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1815'. [ 246.106437][T12937] bond10: (slave gretap2): making interface the new active one [ 246.115041][T12937] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 246.241907][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.250853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.358672][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'. [ 246.369185][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'. [ 246.472845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.489229][T12959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1822'. [ 246.501447][T12959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1822'. [ 246.573005][T12959] netlink: 'syz.3.1822': attribute type 10 has an invalid length. [ 246.633071][T12966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1823'. [ 246.666789][T12959] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1822'. [ 247.394692][T12993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1830'. [ 247.745726][T13021] netlink: 'syz.4.1839': attribute type 1 has an invalid length. [ 248.195572][T13040] vlan2: entered allmulticast mode [ 248.637194][T13057] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 249.045768][T13090] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 249.083728][T13090] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 249.093033][T13090] gretap3: entered promiscuous mode [ 249.098529][T13090] gretap3: entered allmulticast mode [ 249.397987][T13113] ip6tnl0: Caught tx_queue_len zero misconfig [ 249.428788][T13113] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 249.495357][T13118] netlink: 'syz.2.1865': attribute type 10 has an invalid length. [ 249.517441][T13118] bridge_slave_1: entered promiscuous mode [ 249.524859][T13118] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 249.670703][T13127] netlink: 'syz.1.1869': attribute type 23 has an invalid length. [ 249.939702][T13147] Cannot find del_set index 4 as target [ 250.104132][T13152] bond11 (unregistering): Released all slaves [ 250.392395][ T5909] net_ratelimit: 28 callbacks suppressed [ 250.392415][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.407098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.459953][T13179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.590351][T13188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.600253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.631241][T13193] x_tables: duplicate underflow at hook 1 [ 250.639223][T13188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.652130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.664616][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.677521][T13188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.942303][T13212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.182816][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.401102][T13242] __nla_validate_parse: 4 callbacks suppressed [ 251.401123][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1902'. [ 251.422928][T13240] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1901'. [ 251.452484][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1901'. [ 251.686869][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'. [ 251.712915][T13263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1908'. [ 251.835679][T13263] erspan0: entered promiscuous mode [ 252.042767][T13285] syzkaller0: entered promiscuous mode [ 252.048483][T13285] syzkaller0: entered allmulticast mode [ 252.421088][T13305] ip6tnl0: Caught tx_queue_len zero misconfig [ 252.439738][T13305] netlink: 'syz.4.1923': attribute type 64 has an invalid length. [ 252.448734][T13306] netlink: 'syz.4.1923': attribute type 64 has an invalid length. [ 252.656224][T13319] netlink: 'syz.0.1926': attribute type 9 has an invalid length. [ 252.932692][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1933'. [ 253.009639][T13347] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1935'. [ 253.187454][T13355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 253.402595][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1938'. [ 253.715085][T13389] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 253.855726][T13394] veth9: entered allmulticast mode [ 254.026097][T13403] netlink: 'syz.3.1953': attribute type 3 has an invalid length. [ 254.054413][T13406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1954'. [ 254.248801][T13412] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 254.375286][T13423] x_tables: duplicate entry at hook 3 [ 254.397457][T13423] netlink: 'syz.3.1962': attribute type 10 has an invalid length. [ 254.409935][T13424] netlink: 'syz.4.1961': attribute type 39 has an invalid length. [ 254.428811][T13423] team0: Device ipvlan1 failed to register rx_handler [ 254.575590][T13427] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 254.736608][T13427] bond8: (slave lo): Enslaving as an active interface with an up link [ 254.840260][T13447] bond5: (slave vlan0): Enslaving as a backup interface with an up link [ 255.106815][T13463] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 255.268118][T13474] netlink: 'syz.0.1977': attribute type 4 has an invalid length. [ 255.593182][ T5909] net_ratelimit: 24 callbacks suppressed [ 255.593205][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.607949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.623016][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.631562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.677011][ T7200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.774529][T13503] nbd: must specify at least one socket [ 256.056682][T13521] 8021q: adding VLAN 0 to HW filter on device bond11 [ 256.293610][T13540] syzkaller0: entered promiscuous mode [ 256.299158][T13540] syzkaller0: entered allmulticast mode [ 256.350974][T13547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.360624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.390098][T13546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.399758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.425387][ T5839] block nbd1: Receive control failed (result -107) [ 256.464667][T13548] nbd1: detected capacity change from 0 to 127 [ 256.474781][ T5847] block nbd1: Dead connection, failed to find a fallback [ 256.482334][ T5847] block nbd1: shutting down sockets [ 256.487694][ T5847] blk_print_req_error: 138 callbacks suppressed [ 256.487713][ T5847] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.510647][ T5847] buffer_io_error: 138 callbacks suppressed [ 256.510666][ T5847] Buffer I/O error on dev nbd1, logical block 0, async page read [ 256.525320][ T5847] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.535262][ T5847] Buffer I/O error on dev nbd1, logical block 1, async page read [ 256.543879][ T5847] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.553459][ T5847] Buffer I/O error on dev nbd1, logical block 2, async page read [ 256.561461][ T5847] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.571367][ T5847] Buffer I/O error on dev nbd1, logical block 3, async page read [ 256.579376][ T5847] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.612993][ T5847] Buffer I/O error on dev nbd1, logical block 0, async page read [ 256.633665][ T799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.664616][ T5847] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.688039][ T5847] Buffer I/O error on dev nbd1, logical block 1, async page read [ 256.702822][ T5847] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.716937][T13553] netlink: 'syz.3.2005': attribute type 1 has an invalid length. [ 256.723864][ T5847] Buffer I/O error on dev nbd1, logical block 2, async page read [ 256.739949][ T5847] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.750534][ T5847] Buffer I/O error on dev nbd1, logical block 3, async page read [ 256.770894][ T5847] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.791511][ T5847] Buffer I/O error on dev nbd1, logical block 0, async page read [ 256.803100][ T5847] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.820736][T13553] 8021q: adding VLAN 0 to HW filter on device bond8 [ 256.822056][ T5847] Buffer I/O error on dev nbd1, logical block 1, async page read [ 256.839078][T13553] __nla_validate_parse: 8 callbacks suppressed [ 256.839097][T13553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2005'. [ 256.873293][T13561] netlink: 'syz.0.2007': attribute type 1 has an invalid length. [ 256.877932][ T5847] ldm_validate_partition_table(): Disk read failed. [ 256.896049][ T5847] Dev nbd1: unable to read RDB block 0 [ 256.903451][T13557] bond8: (slave veth5): Enslaving as an active interface with a down link [ 256.914809][ T5847] nbd1: unable to read partition table [ 256.927790][ T5847] ldm_validate_partition_table(): Disk read failed. [ 256.935713][ T5847] Dev nbd1: unable to read RDB block 0 [ 256.945439][ T5847] nbd1: unable to read partition table [ 256.987192][T13561] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.023268][T13562] bond6: (slave veth3): Enslaving as an active interface with a down link [ 257.318909][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2012'. [ 257.565568][T13594] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 257.806637][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2022'. [ 258.034634][T13624] ipt_REJECT: ECHOREPLY no longer supported. [ 258.111648][T13632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2029'. [ 258.361401][T13649] netlink: 'syz.4.2031': attribute type 1 has an invalid length. [ 258.467988][T13649] 8021q: adding VLAN 0 to HW filter on device bond12 [ 258.506549][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 258.529095][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 258.593043][T13659] [ 258.595445][T13659] ====================================================== [ 258.602493][T13659] WARNING: possible circular locking dependency detected [ 258.609566][T13659] syzkaller #0 Not tainted [ 258.614013][T13659] ------------------------------------------------------ [ 258.621058][T13659] syz.2.2034/13659 is trying to acquire lock: [ 258.627165][T13659] ffff888031173560 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_pm_mp_prio_send_ack+0xaf8/0xba0 [ 258.637519][T13659] [ 258.637519][T13659] but task is already holding lock: [ 258.644921][T13659] ffff88807e300ea0 (sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_pm_nl_set_flags+0x795/0xc90 [ 258.654900][T13659] [ 258.654900][T13659] which lock already depends on the new lock. [ 258.654900][T13659] [ 258.665380][T13659] [ 258.665380][T13659] the existing dependency chain (in reverse order) is: [ 258.674432][T13659] [ 258.674432][T13659] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 258.682484][T13659] lock_sock_nested+0x48/0x100 [ 258.687835][T13659] inet_shutdown+0x6a/0x390 [ 258.692895][T13659] nbd_mark_nsock_dead+0x2e9/0x560 [ 258.698654][T13659] recv_work+0x1c7f/0x1d90 [ 258.703620][T13659] process_scheduled_works+0xb6e/0x18c0 [ 258.709712][T13659] worker_thread+0xa53/0xfc0 [ 258.714852][T13659] kthread+0x388/0x470 [ 258.719465][T13659] ret_from_fork+0x51e/0xb90 [ 258.724612][T13659] ret_from_fork_asm+0x1a/0x30 [ 258.729940][T13659] [ 258.729940][T13659] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 258.737635][T13659] __mutex_lock+0x19f/0x1300 [ 258.742796][T13659] nbd_queue_rq+0x37b/0x1100 [ 258.747948][T13659] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 258.754156][T13659] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 258.761044][T13659] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 258.767581][T13659] blk_mq_run_hw_queue+0x348/0x4f0 [ 258.773398][T13659] blk_mq_dispatch_list+0xd16/0xe10 [ 258.779139][T13659] blk_mq_flush_plug_list+0x48d/0x570 [ 258.785054][T13659] __blk_flush_plug+0x3ed/0x4d0 [ 258.790458][T13659] __submit_bio+0x28d/0x580 [ 258.795604][T13659] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 258.801789][T13659] block_read_full_folio+0x599/0x830 [ 258.807620][T13659] filemap_read_folio+0x137/0x3b0 [ 258.813217][T13659] do_read_cache_folio+0x358/0x590 [ 258.818982][T13659] read_part_sector+0xb6/0x2b0 [ 258.824380][T13659] adfspart_check_ICS+0xa5/0xa40 [ 258.829865][T13659] bdev_disk_changed+0x7ba/0x1550 [ 258.835442][T13659] blkdev_get_whole+0x380/0x510 [ 258.840932][T13659] bdev_open+0x31e/0xd30 [ 258.845821][T13659] blkdev_open+0x470/0x610 [ 258.850844][T13659] do_dentry_open+0x785/0x14e0 [ 258.856439][T13659] vfs_open+0x3b/0x340 [ 258.861149][T13659] path_openat+0x2e08/0x3860 [ 258.866296][T13659] do_file_open+0x23e/0x4a0 [ 258.871368][T13659] do_sys_openat2+0x113/0x200 [ 258.876600][T13659] __x64_sys_openat+0x138/0x170 [ 258.882013][T13659] do_syscall_64+0x14d/0xf80 [ 258.887209][T13659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.893842][T13659] [ 258.893842][T13659] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 258.901269][T13659] __mutex_lock+0x19f/0x1300 [ 258.906965][T13659] nbd_queue_rq+0xc6/0x1100 [ 258.912404][T13659] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 258.918533][T13659] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 258.925536][T13659] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 258.932379][T13659] blk_mq_run_hw_queue+0x348/0x4f0 [ 258.938312][T13659] blk_mq_dispatch_list+0xd16/0xe10 [ 258.944492][T13659] blk_mq_flush_plug_list+0x48d/0x570 [ 258.950409][T13659] __blk_flush_plug+0x3ed/0x4d0 [ 258.955816][T13659] __submit_bio+0x28d/0x580 [ 258.960978][T13659] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 258.967263][T13659] block_read_full_folio+0x599/0x830 [ 258.973543][T13659] filemap_read_folio+0x137/0x3b0 [ 258.979218][T13659] do_read_cache_folio+0x358/0x590 [ 258.985326][T13659] read_part_sector+0xb6/0x2b0 [ 258.990664][T13659] adfspart_check_ICS+0xa5/0xa40 [ 258.996183][T13659] bdev_disk_changed+0x7ba/0x1550 [ 259.002026][T13659] blkdev_get_whole+0x380/0x510 [ 259.007420][T13659] bdev_open+0x31e/0xd30 [ 259.012217][T13659] blkdev_open+0x470/0x610 [ 259.017216][T13659] do_dentry_open+0x785/0x14e0 [ 259.022628][T13659] vfs_open+0x3b/0x340 [ 259.027249][T13659] path_openat+0x2e08/0x3860 [ 259.032400][T13659] do_file_open+0x23e/0x4a0 [ 259.037452][T13659] do_sys_openat2+0x113/0x200 [ 259.042676][T13659] __x64_sys_openat+0x138/0x170 [ 259.048075][T13659] do_syscall_64+0x14d/0xf80 [ 259.053210][T13659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.059643][T13659] [ 259.059643][T13659] -> #4 (set->srcu){.+.+}-{0:0}: [ 259.066802][T13659] __synchronize_srcu+0xca/0x300 [ 259.072286][T13659] elevator_switch+0x1e8/0x7a0 [ 259.077598][T13659] elevator_change+0x2cc/0x450 [ 259.082995][T13659] elevator_set_default+0x36c/0x430 [ 259.088742][T13659] blk_register_queue+0x366/0x430 [ 259.094324][T13659] __add_disk+0x677/0xd50 [ 259.099241][T13659] add_disk_fwnode+0xfb/0x480 [ 259.104482][T13659] nbd_dev_add+0x72c/0xb50 [ 259.109458][T13659] nbd_init+0x168/0x1f0 [ 259.114161][T13659] do_one_initcall+0x250/0x8d0 [ 259.119664][T13659] do_initcall_level+0x104/0x190 [ 259.125190][T13659] do_initcalls+0x59/0xa0 [ 259.130201][T13659] kernel_init_freeable+0x2a6/0x3e0 [ 259.135954][T13659] kernel_init+0x1d/0x1d0 [ 259.140853][T13659] ret_from_fork+0x51e/0xb90 [ 259.146084][T13659] ret_from_fork_asm+0x1a/0x30 [ 259.151570][T13659] [ 259.151570][T13659] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 259.159429][T13659] __mutex_lock+0x19f/0x1300 [ 259.164586][T13659] elevator_change+0x1b3/0x450 [ 259.169920][T13659] elevator_set_none+0xb5/0x140 [ 259.175504][T13659] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 259.181881][T13659] nbd_start_device+0x17f/0xb10 [ 259.187310][T13659] nbd_genl_connect+0x165b/0x1cf0 [ 259.192972][T13659] genl_family_rcv_msg_doit+0x22a/0x330 [ 259.199068][T13659] genl_rcv_msg+0x61c/0x7a0 [ 259.204115][T13659] netlink_rcv_skb+0x232/0x4b0 [ 259.209417][T13659] genl_rcv+0x28/0x40 [ 259.213950][T13659] netlink_unicast+0x80f/0x9b0 [ 259.219269][T13659] netlink_sendmsg+0x813/0xb40 [ 259.224586][T13659] ____sys_sendmsg+0x972/0x9f0 [ 259.229908][T13659] ___sys_sendmsg+0x2a5/0x360 [ 259.235138][T13659] __x64_sys_sendmsg+0x1bd/0x2a0 [ 259.241074][T13659] do_syscall_64+0x14d/0xf80 [ 259.246236][T13659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.252705][T13659] [ 259.252705][T13659] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 259.261342][T13659] blk_alloc_queue+0x546/0x680 [ 259.266670][T13659] __blk_mq_alloc_disk+0x197/0x390 [ 259.272700][T13659] nbd_dev_add+0x499/0xb50 [ 259.277666][T13659] nbd_init+0x168/0x1f0 [ 259.282358][T13659] do_one_initcall+0x250/0x8d0 [ 259.287846][T13659] do_initcall_level+0x104/0x190 [ 259.293425][T13659] do_initcalls+0x59/0xa0 [ 259.298304][T13659] kernel_init_freeable+0x2a6/0x3e0 [ 259.304052][T13659] kernel_init+0x1d/0x1d0 [ 259.308922][T13659] ret_from_fork+0x51e/0xb90 [ 259.314058][T13659] ret_from_fork_asm+0x1a/0x30 [ 259.319376][T13659] [ 259.319376][T13659] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 259.326612][T13659] fs_reclaim_acquire+0x71/0x100 [ 259.332362][T13659] __kmalloc_node_track_caller_noprof+0x9d/0x7b0 [ 259.339249][T13659] xfrm_user_policy+0x1c4/0x960 [ 259.344653][T13659] do_ip_setsockopt+0x1aab/0x2ea0 [ 259.350255][T13659] ip_setsockopt+0x66/0x110 [ 259.355392][T13659] smc_setsockopt+0x249/0xac0 [ 259.360702][T13659] do_sock_setsockopt+0x17c/0x1b0 [ 259.366360][T13659] __x64_sys_setsockopt+0x13d/0x1b0 [ 259.372279][T13659] do_syscall_64+0x14d/0xf80 [ 259.377439][T13659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.383992][T13659] [ 259.383992][T13659] -> #0 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 259.392060][T13659] __lock_acquire+0x15a5/0x2cf0 [ 259.397462][T13659] lock_acquire+0xf0/0x2e0 [ 259.402436][T13659] __mptcp_pm_send_ack+0x76/0x200 [ 259.408010][T13659] mptcp_pm_mp_prio_send_ack+0xaf8/0xba0 [ 259.414248][T13659] mptcp_pm_nl_set_flags+0x893/0xc90 [ 259.420095][T13659] mptcp_pm_nl_set_flags_doit+0x364/0x450 [ 259.426409][T13659] genl_family_rcv_msg_doit+0x22a/0x330 [ 259.432516][T13659] genl_rcv_msg+0x61c/0x7a0 [ 259.437562][T13659] netlink_rcv_skb+0x232/0x4b0 [ 259.442880][T13659] genl_rcv+0x28/0x40 [ 259.447410][T13659] netlink_unicast+0x80f/0x9b0 [ 259.452720][T13659] netlink_sendmsg+0x813/0xb40 [ 259.458032][T13659] ____sys_sendmsg+0x972/0x9f0 [ 259.463344][T13659] ___sys_sendmsg+0x2a5/0x360 [ 259.468574][T13659] __x64_sys_sendmsg+0x1bd/0x2a0 [ 259.474089][T13659] do_syscall_64+0x14d/0xf80 [ 259.479423][T13659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.485859][T13659] [ 259.485859][T13659] other info that might help us debug this: [ 259.485859][T13659] [ 259.496103][T13659] Chain exists of: [ 259.496103][T13659] k-sk_lock-AF_INET --> &nsock->tx_lock --> sk_lock-AF_INET [ 259.496103][T13659] [ 259.509351][T13659] Possible unsafe locking scenario: [ 259.509351][T13659] [ 259.516820][T13659] CPU0 CPU1 [ 259.522295][T13659] ---- ---- [ 259.527682][T13659] lock(sk_lock-AF_INET); [ 259.532233][T13659] lock(&nsock->tx_lock); [ 259.539290][T13659] lock(sk_lock-AF_INET); [ 259.546335][T13659] lock(k-sk_lock-AF_INET); [ 259.550958][T13659] [ 259.550958][T13659] *** DEADLOCK *** [ 259.550958][T13659] [ 259.559213][T13659] 3 locks held by syz.2.2034/13659: [ 259.564438][T13659] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 259.572752][T13659] #1: ffffffff8fc3dc88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 259.581765][T13659] #2: ffff88807e300ea0 (sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_pm_nl_set_flags+0x795/0xc90 [ 259.592361][T13659] [ 259.592361][T13659] stack backtrace: [ 259.598489][T13659] CPU: 1 UID: 0 PID: 13659 Comm: syz.2.2034 Not tainted syzkaller #0 PREEMPT(full) [ 259.598522][T13659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 259.598541][T13659] Call Trace: [ 259.598550][T13659] [ 259.598558][T13659] dump_stack_lvl+0xe8/0x150 [ 259.598588][T13659] print_circular_bug+0x2e1/0x300 [ 259.598617][T13659] check_noncircular+0x12e/0x150 [ 259.598646][T13659] __lock_acquire+0x15a5/0x2cf0 [ 259.598669][T13659] ? check_path+0x21/0x40 [ 259.598692][T13659] ? check_noncircular+0xda/0x150 [ 259.598720][T13659] ? lockdep_unlock+0x5d/0xd0 [ 259.598738][T13659] ? __lock_acquire+0x146e/0x2cf0 [ 259.598762][T13659] lock_acquire+0xf0/0x2e0 [ 259.598782][T13659] ? mptcp_pm_mp_prio_send_ack+0xaf8/0xba0 [ 259.598810][T13659] ? mptcp_pm_mp_prio_send_ack+0xaf8/0xba0 [ 259.598832][T13659] __mptcp_pm_send_ack+0x76/0x200 [ 259.598853][T13659] ? mptcp_pm_mp_prio_send_ack+0xaf8/0xba0 [ 259.598877][T13659] mptcp_pm_mp_prio_send_ack+0xaf8/0xba0 [ 259.598907][T13659] mptcp_pm_nl_set_flags+0x893/0xc90 [ 259.598928][T13659] ? __nla_parse+0x40/0x60 [ 259.598950][T13659] ? __pfx_mptcp_pm_nl_set_flags+0x10/0x10 [ 259.598972][T13659] ? __pfx_mptcp_pm_parse_pm_addr_attr+0x10/0x10 [ 259.599004][T13659] mptcp_pm_nl_set_flags_doit+0x364/0x450 [ 259.599032][T13659] ? __pfx_mptcp_pm_nl_set_flags_doit+0x10/0x10 [ 259.599066][T13659] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 259.599094][T13659] genl_family_rcv_msg_doit+0x22a/0x330 [ 259.599116][T13659] ? __asan_memcpy+0x40/0x70 [ 259.599135][T13659] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 259.599161][T13659] ? bpf_lsm_capable+0x9/0x20 [ 259.599186][T13659] ? security_capable+0x7e/0x2c0 [ 259.599213][T13659] genl_rcv_msg+0x61c/0x7a0 [ 259.599238][T13659] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.599261][T13659] ? __pfx_mptcp_pm_nl_set_flags_doit+0x10/0x10 [ 259.599288][T13659] ? __lock_acquire+0x6b5/0x2cf0 [ 259.599314][T13659] netlink_rcv_skb+0x232/0x4b0 [ 259.599331][T13659] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.599353][T13659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.599377][T13659] ? down_read+0x272/0x2e0 [ 259.599400][T13659] ? genl_rcv+0xd/0x40 [ 259.599420][T13659] genl_rcv+0x28/0x40 [ 259.599440][T13659] netlink_unicast+0x80f/0x9b0 [ 259.599468][T13659] ? __pfx_netlink_unicast+0x10/0x10 [ 259.599494][T13659] ? netlink_sendmsg+0x650/0xb40 [ 259.599517][T13659] ? skb_put+0x11b/0x210 [ 259.599537][T13659] netlink_sendmsg+0x813/0xb40 [ 259.599558][T13659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.599577][T13659] ? aa_sock_msg_perm+0xf1/0x1b0 [ 259.599603][T13659] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.599624][T13659] ____sys_sendmsg+0x972/0x9f0 [ 259.599649][T13659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.599674][T13659] ? import_iovec+0x73/0xa0 [ 259.599694][T13659] ___sys_sendmsg+0x2a5/0x360 [ 259.599718][T13659] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.599742][T13659] ? futex_wake+0x4ac/0x580 [ 259.599777][T13659] ? __fget_files+0x2a/0x420 [ 259.599791][T13659] ? __fget_files+0x3a0/0x420 [ 259.599809][T13659] __x64_sys_sendmsg+0x1bd/0x2a0 [ 259.599832][T13659] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.599857][T13659] ? rcu_is_watching+0x15/0xb0 [ 259.599886][T13659] do_syscall_64+0x14d/0xf80 [ 259.599908][T13659] ? trace_irq_disable+0x3b/0x150 [ 259.599923][T13659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.599939][T13659] ? clear_bhb_loop+0x40/0x90 [ 259.599958][T13659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.599976][T13659] RIP: 0033:0x7fb82ef9c819 [ 259.600000][T13659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.600016][T13659] RSP: 002b:00007fb82fe60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.600035][T13659] RAX: ffffffffffffffda RBX: 00007fb82f216090 RCX: 00007fb82ef9c819 [ 259.600047][T13659] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000009 [ 259.600058][T13659] RBP: 00007fb82f032c91 R08: 0000000000000000 R09: 0000000000000000 [ 259.600068][T13659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.600079][T13659] R13: 00007fb82f216128 R14: 00007fb82f216090 R15: 00007ffcfa510d88 [ 259.600098][T13659] [ 260.062865][T13665] syzkaller0: entered promiscuous mode [ 260.068551][T13665] syzkaller0: entered allmulticast mode [ 260.111464][T13666] netlink: 'syz.3.2036': attribute type 1 has an invalid length. [ 260.126585][T13665] tipc: Enabled bearer , priority 0 [ 260.135936][T13664] tipc: Resetting bearer [ 260.177506][T13664] tipc: Disabling bearer