last executing test programs: 3.503992378s ago: executing program 0 (id=2965): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x9}}]}, 0x58}}, 0x110) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @local}, {0x1, @random="54c14790e741"}, 0x0, {0x2, 0x4e23, @remote}, 'pim6reg\x00'}) r8 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x6, 0x9}, &(0x7f00000000c0)=0x18) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x10, 0x1411, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3.304918113s ago: executing program 0 (id=2969): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r1, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r1, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20) (async) 3.170126128s ago: executing program 2 (id=2973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$llc(r2, &(0x7f0000000440)={0x1a, 0x304, 0x9, 0x3, 0x7, 0x7, @local}, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xfffffffffffffec3, 0x0, 0x40f00}, 0x94) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4ddb72ad4c132d6b}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004811}, 0x240008c1) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 3.11993141s ago: executing program 0 (id=2974): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x29, 0x4, 0x23, 0x5, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0x90, 0x3, 0xfffffffc}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d000000001400028008000100030000000800020001000000140003007866726d30"], 0x58}}, 0x0) 2.916663401s ago: executing program 2 (id=2976): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="05002a00000000000500290001000000c2de5011d42fbeebaa057407e14db66dc002b0498ac1705c6dd9720eba343361377ce2cc01128756abc9251ec7d672438a61ff5e8a7a54efef2432e8e8d0f00f4b7c90229fc68b0bb4e6552eee42264bc0c4bd6d0e9878a5741b336bf9e5331f27a967b3d953c15628e3d07efba4673e6f5af9df61b1a26d042e2be37829580000000000"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x34}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) getpeername$inet6(r5, 0x0, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x1ff) r6 = openat$cgroup_freezer_state(r4, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000001c0)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r6, &(0x7f0000000140)='THAWED\x00', 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB=' \x00'], 0x50) 2.715119922s ago: executing program 2 (id=2978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x7c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="87f1ee1930b7"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) 2.713197169s ago: executing program 0 (id=2979): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa3e08004500001c0003000000019078640101000000000000009078fffe0009"], 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x81}, {0xa, 0x4e20, 0xd99, @rand_addr=' \x01\x00', 0x8}, 0x1, {[0xffffffff, 0x0, 0x9, 0x58, 0x7, 0x80, 0x1, 0x4]}}, 0x5c) 2.623378526s ago: executing program 0 (id=2981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bind$alg(r1, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(seqiv(authencesn(wp384-generic,essiv-cbc-aes-sha256-ce)),c'}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x80, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0x5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x5, 0xa411, 0x8, 0x2, 0x3554, 0x80001, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x20007ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x0, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x8, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x3, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x7ffffffc, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x4, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x103, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0xa91, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0xa04, 0xfffffff9, 0x1, 0x3, 0x584, 0x1e0, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x8, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x40, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0x2, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7fd, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x7, 0x7, 0x8, 0x8, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x100002, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x840, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x8, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x400002, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x79d, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x6, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x8001, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0x50001, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x2001, 0x2006, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0xa, 0x8, 0x5, 0x4, 0x9, 0xfffc, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 2.347924857s ago: executing program 2 (id=2982): r0 = socket$inet(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xe}, 0x1c) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}], 0x10) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) 2.103239858s ago: executing program 0 (id=2984): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a00010000000000000000000a00000000e1ff"], 0x18}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x9) r3 = socket$inet6(0xa, 0x3, 0x100) sendmmsg$inet6(r3, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x1, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r2) mmap(&(0x7f00008d4000/0x1000)=nil, 0x1000, 0x1000005, 0x4010, 0xffffffffffffffff, 0x1000) socket$nl_route(0x10, 0x3, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040)=0x13fe4c102fd7fdb3) 1.870678541s ago: executing program 1 (id=2988): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@remote, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00'}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x158}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xe2b7834ccd0b74c6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}}, 0x4001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) recvfrom$inet(r10, &(0x7f0000000940)=""/83, 0x53, 0x20, &(0x7f00000009c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r8, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0xe, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r11, 0x1, 0x4, 0x6, @local}, 0x14) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x35, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbe6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb8}}, @ldst={0x0, 0x1, 0x0, 0x6, 0x4, 0x30, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @exit]}, &(0x7f0000000280)='syzkaller\x00', 0x80000000, 0xe5, &(0x7f0000000300)=""/229, 0x40f00, 0x44, '\x00', r11, 0x25, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 1.869979313s ago: executing program 4 (id=2989): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbff, {}, [@IFLA_MTU={0x8, 0x4, 0x42}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbff, {}, [@IFLA_MTU={0x8, 0x4, 0x42}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfffffffe}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) (async) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0xa4ff) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x14, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r11, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r10, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r11, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r10, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r10, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x17, {0x17, 0x1000, @l2={'ib', 0x3a, 'hsr0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x20000011) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000002c0)="3c75fd4dc586f2ae9206277f0443ec773ee63a8c6df14fe0183749000000000000", 0x21) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000002c0)="3c75fd4dc586f2ae9206277f0443ec773ee63a8c6df14fe0183749000000000000", 0x21) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r12, 0x541b, 0x0) 1.630077893s ago: executing program 4 (id=2991): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x20048884) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x80}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x65}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800d}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x10000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb0, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x7d}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "d1453755cd3db0e0ffdf5b2b5c253245"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d01dce57073b910c3afe2a5d89b1e237"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "798210279623ba3854eca4291cf39126"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f466df2bbe43ed6e5b601abce1369777"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6a648bbb6be848f894d5a5042adf5114"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "e33cd344ab73d737efcc4de6a4fe4dac"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "966f70371c214a34a2873147e4b0c5d8"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440d0}, 0x4000008) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'ip6_vti0\x00', 0x0}) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8c}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@getnetconf={0x14, 0x52, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008851}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000009c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r0) sendmsg$NFC_CMD_GET_SE(r11, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r12, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) r13 = getpid() ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000c00)=r13) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r14, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x4040000) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r15, 0x0, 0x20, &(0x7f0000000d40)={@multicast2, @remote, r8}, 0xc) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x50, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x50}}, 0x880) 1.426356697s ago: executing program 4 (id=2992): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48001) (async) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0) 1.328500322s ago: executing program 2 (id=2993): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140), 0x4) getsockopt$packet_int(r1, 0x107, 0x12, 0x0, &(0x7f0000000240)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0xc4}}, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.202317794s ago: executing program 4 (id=2995): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x2}], 0x1, 0x40004020, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) 1.054030952s ago: executing program 3 (id=2996): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 847.961713ms ago: executing program 3 (id=2997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x3, 0x8000000003c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) 801.698947ms ago: executing program 2 (id=2998): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x80000001, 0x8}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x70, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x1, 0x1, 0x80000000}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}]}}}]}, 0x70}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f000000df00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40002023, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x86, "96525bcf0a6c3531cab56bbf3851510ff13d91291434ed504c441ad332a87ecc0536c58bd0416b43d95af7071a6acf8060db629328a32c1a813eff249d83604dd6c63cdbceb896a01e2dbd709f935247c8600c999b008ad703ad2fcbc2ec886bd0e36e38ef0773d204d4ec6c80688aec44fb4557b74224f26353479110bdcf0b56436957d3b8"}, &(0x7f0000000000)=0x8e) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000100)=r5, 0x4) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000240)=ANY=[@ANYBLOB="150000005500bbca000000000000000007"], 0x18}}, 0x0) getpeername(r0, &(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000380)=0x80) 672.152623ms ago: executing program 3 (id=2999): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r5, 0x310, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x2, 0xf0, 0x6}, 0xfc}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x1d, r3, 0x0, {0x1, 0x1, 0x4}, 0xff}, 0x18, &(0x7f0000000280)={&(0x7f00000001c0)}, 0x1, 0x0, 0x0, 0x4000805}, 0x24004000) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="0005d70000fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @remote, @dev, @remote}}}}, 0x0) 671.813464ms ago: executing program 1 (id=3000): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000010c0)="2ae2", 0x2}], 0x1, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) splice(r0, 0x0, r5, 0x0, 0x10000000000066, 0xa) 518.361774ms ago: executing program 1 (id=3001): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x4c90000) 506.36573ms ago: executing program 3 (id=3002): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) unshare(0x4000400) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'veth0_macvtap\x00', &(0x7f0000000180)=@ethtool_rxfh={0x46, 0x1, 0x408, 0x6, 0x8, "804a91", 0x40000065, [0x58d, 0xaf, 0x5]}}) (async) bind$rds(0xffffffffffffffff, 0x0, 0x32) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="58010000", @ANYRES16=r6, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd000000000031013300000000000802110000010802110000005050"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7}, 0x18) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18) (async) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) connect$can_j1939(r9, &(0x7f00000001c0)={0x1d, r10, 0xffffffffffffffff, {0x0, 0x0, 0x4}, 0x1}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r10, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) (async) r11 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'}) 368.686018ms ago: executing program 1 (id=3003): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000200)=""/64, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24b40, r2}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bind$can_raw(r4, &(0x7f0000000040)={0x1d, r3}, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x10403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 367.298744ms ago: executing program 3 (id=3004): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'dummy0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{}, 0x10000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x64}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540217"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x25}, 0x7f, r2}) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 295.299321ms ago: executing program 1 (id=3005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0x68, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e17bdca148"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x68}}, 0x24008810) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffe96, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r4, 0x70b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24068144}, 0x40000e1) (async, rerun: 32) syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x40, 0x6, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x2b, 0x1, 0x0) listen(r8, 0x0) close(0x4) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r5) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003780), r11) (async) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000003800)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000002c0)={0x34, r12, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0xb0}, 0x4800) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x10) (async) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 204.516585ms ago: executing program 4 (id=3006): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000018}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x5, 0x3, 0x7, 0x9}, {0x7, 0xfd, 0x1, 0x9}, {0x80, 0x3, 0x2, 0x8}, {0xc, 0x5, 0x1}, {0x6, 0xd3, 0x2, 0x8}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x3, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffffffff7f46}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xe}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4040010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_buf(r1, 0x6, 0xc, &(0x7f0000000240)="39066d369b898f81c274d7fa784d60f3bdf2eab06303bd56097634381984330c13db1197c0196a450614cc8e7dd7881eed25039a2e5490ac832782dcb665bd8c1bb6844cb867b671110e649078ce35bfd0c4dc18cfa44b8654fe1deadad5ce22c7971f21149be8d20d1cca7e54b80c84453b14ca2e65f5a6e8b7adc577839cadb1e78f99c41e85a0bc643c0a9cb6512c28e264e291d24c7377379b6694a4bc4d", 0xa0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x88c40, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x200}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000380)={0x1, 0xb2a2}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000003c0)={'dummy0\x00', @multicast}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) sendmsg$netlink(r4, &(0x7f00000018c0)={&(0x7f0000000400)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001880)=[{&(0x7f0000000480)={0x58, 0x2a, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x1e, 0xe0, 0x0, 0x0, @binary="458b60f8af89db91fa3a463c9e6d78fa46f48e3ee12839c89e70"}, @nested={0x18, 0x3c, 0x0, 0x1, [@nested={0x4, 0x13d}, @nested={0x4, 0x1c}, @typed={0xc, 0x93, 0x0, 0x0, @u64}]}, @typed={0x8, 0x53, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x54, 0x0, 0x0, @fd=r0}]}, 0x58}, {&(0x7f0000000540)={0xd8, 0x11, 0x8, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0x4c, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x11d, 0x0, 0x0, @fd=r3}, @typed={0x4, 0xec}, @generic="e5768e83c1b2355e6f9ef592f8d1e9ce550e68de687babc6e82d753c925d9c2fcbf339c4a92735c0ec01c2b5cfc8e51e302e8621dba8846aab14f605e0caaabaee961ea0ff33f0625f62b3b76f2b2552727f939b0aabc47b24c75af9c153506b92054f4367ad30eede4f31c977bbbe7e662473a5a806b75a2a556506055e8bdb545d9f65b9d3a243bd3458fde692c040bb3668ddc78a04f46a3cd032198d6cd4d56fc101414df14976be2850c3d29885fe6341"]}, 0xd8}, {&(0x7f00000006c0)={0x11ac, 0x28, 0x1, 0x70bd25, 0x25dfdbfb, "", [@nested={0xe3, 0xc7, 0x0, 0x1, [@nested={0x4, 0x132}, @nested={0x4, 0x67}, @nested={0x4, 0x4f}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r7}, @generic="6fe096ec10686a3613d3a5e798f30dba7923592120b0913ded5397b9ce783e941fa84451edb2e96f24f0786eff12e6f05925c67cc831e47ad07f5fe98346ee1b3571b77c578825a2dc293dffe00323852290c0cf45ae62b03f3dccf6a44f64cc60576428ecdb9e40a4b1b16c7ea821fde58a4d1490e0f085159b993dd231cee8374c733a261f5b5eb1686052e81b2ec4685d996c0642ba97509f37352bc2f5a4f0b0b4219a6a3f44ab43188bf19b5e421846ba869469ccb19cd537623a6ef65ab69887304c2d31c95b640c"]}, @typed={0x1004, 0x14f, 0x0, 0x0, @binary="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"}, @nested={0x1c, 0xe5, 0x0, 0x1, [@typed={0x8, 0x12e, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x14f, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x12b}, @nested={0x4, 0x29}]}, @generic="25689cad7ba67eda07b24c2744d97edf8b071065d536edfd5315bcff1714b2ea7c1f53e9c7648002fb3ce6e3898e762fbf99951f23c43c9044fa4f837dd4892bb94ee81d6b6a8acd2d4f7f97bf54c3caa72cb791e4b9472adbbbf991be02e3233bae375f38f082b42cfe2639b1e1546a94342e723e0955d03106c2d79e264cd3d617863daa735eb51086fae866", @typed={0x8, 0x51, 0x0, 0x0, @uid=0xee01}]}, 0x11ac}], 0x3}, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001940)={0x0}, &(0x7f0000001980)=0xc) sendmsg$nl_generic(r2, &(0x7f0000001d80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d40)={&(0x7f00000019c0)={0x374, 0x24, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1a}, [@generic="a4645b17dffcbc1ca00068c29ba5d2e77ed2f1c96397d3d0beedfd8c08d2cbdd72ff3145bbe644ad1cf07c75e0a905e9679862775897677253f8f169956a7d932eaa79fdc95890889534c1ed9e4d90954b1bbe6fe2f1b0368cf74f00ac746d718a0ce9e43a2f4bec1e368d00c54851075e45031709c1622157292f9212b27dad80bfe43e910bad944046cea275808256beaa2c7fbc13b8f84c0166b344c37bcaeea4084fed1d8df3522b390939a0f1ae27ddc958b562ccd0776b52b197ecc677dd25ab0d04332a3bdc6178256bccb9b6242da5ee7d0fab3291102df65a327e8e65f1586393437a32d1c83662627c68a93a81f4fefa", @generic="8da645599571fa65be26d2767bc18bf49168cbdea248bcdd19b1c6f1176cda82ce31d1f60a634a3b7194b8ba13ae2ebd92b4ce62c6ec07d5da51b63cf2f61d54", @generic, @nested={0x117, 0x99, 0x0, 0x1, [@generic="411d8583fd2d6817c4161f7728924b9a3577e7c3ffeb7ed8d9ee", @generic="453ffd007f892588c6664fa5990f4dd6dcc7939d1095b2126f95e1dd", @typed={0x14, 0xad, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0xa0, 0x0, 0x0, @u32=0x4}, @generic="8891aaae9447f99f78cfc19ed63bf95eddf96659b838b002eaa770846df4b089bf962e6c917e8479c149e6bb3b92622c5f15a42492056a9878973922ac81ea3be7e05ffc1d091cb4b1c52f7a1a8024a6307e47e95d64ce0152edeff47823c960888d4d4ed386d1c0018c810414d3b6750003e72de6672777eb03ee5aa715ba0bd0abb1f0a2b7d69afae12dd70d43d5d58504f0fba9117c0db16e33b0c52d910384fb4ec4a7083190705692f2b8028300017d868647f3d1cd72dbf51b33", @nested={0x4, 0x16}]}, @nested={0x76, 0x78, 0x0, 0x1, [@generic="6681ea55f69184f9b70f13f03eb8fbd72e43547d26868c792f49aebbed2562e03f3b3173b9ee6d8ba8bbaee6176ef1af27a3a4bdddc988bf", @typed={0x8, 0xca, 0x0, 0x0, @pid=r8}, @generic="e78f4bdab951a8e0ea3eff445dffdbf268d0d2a9fb028b25a6e9c315c4f8544ddba5ceeba19a252378e7f8c1bd01b24c080e"]}, @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}, @typed={0xc, 0x72, 0x0, 0x0, @u64=0x5}, @typed={0x4, 0x11a}, @generic="71513f159e0ce8676d63534bfd02af697f8b05ba3749de90bfbe0dc75863e6d1537ead93ebccdf1fcf42250c839464f362f6b613641cf80277d8d159ff0984b600ccbf7fb8fb5e537463c740891cbddd4b14e636d6d86fe672c49a1a84967c6a0bf20da6bb4cce32b91a8e79a4555ba89c4c3907c0"]}, 0x374}, 0x1, 0x0, 0x0, 0x8800}, 0x20004841) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x9c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x100}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40014}, 0x8008) pipe(&(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_GET(r11, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x58, 0x1401, 0x8, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x800) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendfile(r10, r12, &(0x7f00000020c0)=0x8d, 0x6) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000002140), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x3c, r14, 0xd405543ba67188a7, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0x14, 0x9, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004100}, 0x40000) ioctl$AUTOFS_IOC_PROTOVER(r11, 0x80049363, &(0x7f0000002240)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f0000002940)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002900)={&(0x7f00000027c0)={0x140, 0x0, 0x388, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5f364d00c644e74e}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe1b2a916084714c5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x20008001) 147.826886ms ago: executing program 3 (id=3007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r1, 0x891c, &(0x7f0000000080)={'ip6tnl0\x00', @ifru_addrs=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) 108.019356ms ago: executing program 1 (id=3008): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r1, &(0x7f0000000000)={{0x3, @bcast}, [@default, @null, @rose, @remote, @rose, @bcast, @netrom, @rose]}, &(0x7f0000000080)=0x48) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x1, @default, @bpq0, 0x6, 'syz0\x00', @default, 0x3, 0x8, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 0s ago: executing program 4 (id=3009): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) bind$alg(0xffffffffffffffff, 0x0, 0x0) close(0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x9, @mcast1, 0x7}, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x1}, @in6={0xa, 0x4e24, 0x80b6, @private0, 0x200}], 0x54) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xfff2, 0xf}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6, @ANYBLOB="72b6713c1710d3be1c91470c778bd1b82370cac458c37f9e73017d1a9abb0ec57d6c2ef43133b8628786592653e7ab66b9431ff95901ff177dccc0a1e5e48cd0b9a8292ad2d16c46d8d9540bf47f1aa14a7b4b04d9c60a772167f1733d9a64769eb7d7dc4a51fd9421341d0963c481f787b9f6089d86dd67967c03234c6efd37ec9a045ab9911245d7cae7236b98bf1409889686abc4405a6fed41648d5c24b746a7d031e985582b6d5d8b24a14700a21c2fa647577af78c65b2ffec57f2b9cd5624a3ee81cf6b72c3b9ff797500ce3cee9b18c77286d2e4c72bd43d94f21d68f59e"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="08030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r12, @ANYBLOB="02000000", @ANYRES32=r12, @ANYBLOB], 0x4c}}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r13, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): ss `syz.0.734'. [ 194.743562][ T8706] netlink: 'syz.2.740': attribute type 1 has an invalid length. [ 194.765643][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'. [ 194.770282][ T8706] netlink: 228 bytes leftover after parsing attributes in process `syz.2.740'. [ 194.795226][ T8706] tipc: Enabled bearer , priority 10 [ 195.216736][ T8737] vcan0: entered allmulticast mode [ 195.456653][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 195.504566][ T8751] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.567889][ T8751] geneve2: entered promiscuous mode [ 195.655024][ T8757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.753'. [ 195.771327][ T8761] openvswitch: netlink: Duplicate key (type 1). [ 195.792131][ T8760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.811021][ T8730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.914821][ T5951] tipc: Node number set to 940889076 [ 196.186027][ T8778] tipc: Cannot configure node identity twice [ 196.256770][ T8784] netlink: 'syz.0.759': attribute type 30 has an invalid length. [ 196.356208][ T8784] bond2: option arp_missed_max: invalid value (0) [ 196.364726][ T8784] bond2: option arp_missed_max: allowed values 1 - 255 [ 196.409116][ T8784] bond2 (unregistering): Released all slaves [ 196.447170][ T8798] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.774561][ T8812] sock: sock_timestamping_bind_phc: sock not bind to device [ 196.823938][ T8818] syzkaller1: entered promiscuous mode [ 196.830089][ T8818] syzkaller1: entered allmulticast mode [ 197.042967][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 197.106517][ T8826] netlink: 'syz.4.769': attribute type 13 has an invalid length. [ 197.432773][ T8840] netlink: 27 bytes leftover after parsing attributes in process `syz.0.770'. [ 197.478575][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 197.701896][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 197.726448][ T8861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.776'. [ 197.758951][ T8861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.776'. [ 197.798802][ T8861] erspan0: entered promiscuous mode [ 197.807572][ T8861] batadv_slave_1: entered promiscuous mode [ 197.813807][ T8861] batadv_slave_1: left promiscuous mode [ 197.822369][ T8861] erspan0: left promiscuous mode [ 198.027041][ T8875] xt_policy: output policy not valid in PREROUTING and INPUT [ 198.260601][ T8889] netlink: 44 bytes leftover after parsing attributes in process `syz.1.783'. [ 198.315659][ T8889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.323201][ T8889] IPv6: NLM_F_CREATE should be set when creating new route [ 198.584546][ T8896] batman_adv: batadv0: Adding interface: dummy0 [ 198.594515][ T8902] netlink: 'syz.1.787': attribute type 1 has an invalid length. [ 198.607639][ T8896] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.634284][ T8896] batman_adv: batadv0: Interface activated: dummy0 [ 198.681732][ T8902] bond1: entered promiscuous mode [ 198.687483][ T8902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.697027][ T8896] netlink: 208 bytes leftover after parsing attributes in process `syz.4.786'. [ 198.716501][ T8901] batadv0: mtu less than device minimum [ 198.723389][ T8901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.735376][ T8901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.747287][ T8901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.759161][ T8901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.770985][ T8901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.782893][ T8901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.794726][ T8901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.806655][ T8901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.818505][ T8901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.902110][ T8902] bond1: (slave bridge3): making interface the new active one [ 198.943430][ T8902] bridge3: entered promiscuous mode [ 198.950277][ T8902] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 199.086397][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.792'. [ 199.095750][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.792'. [ 199.849312][ T8971] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 200.628598][ T9024] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 200.659385][ T9031] Cannot find set identified by id 0 to match [ 200.843657][ T9044] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 200.945273][ T9045] veth5: entered promiscuous mode [ 200.980862][ T9044] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 201.156263][ T9059] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 201.343335][ T9062] wg1 speed is unknown, defaulting to 1000 [ 201.620335][ T9084] pim6reg1: entered promiscuous mode [ 201.651055][ T9084] pim6reg1: entered allmulticast mode [ 202.105219][ T9111] __nla_validate_parse: 14 callbacks suppressed [ 202.105237][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 202.147037][ T9112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.847'. [ 202.191619][ T9112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.847'. [ 202.385739][ T9126] net veth1_virt_wifi .: renamed from virt_wifi0 [ 202.428487][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 202.491972][ T9131] netlink: 'syz.4.853': attribute type 2 has an invalid length. [ 202.586992][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.856'. [ 202.659135][ T9146] netlink: 'syz.4.857': attribute type 1 has an invalid length. [ 202.830413][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 202.850469][ T9146] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.222734][ T9171] netlink: 'syz.3.864': attribute type 21 has an invalid length. [ 203.244010][ T9171] netlink: 'syz.3.864': attribute type 6 has an invalid length. [ 203.279203][ T9171] netlink: 132 bytes leftover after parsing attributes in process `syz.3.864'. [ 203.515318][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 203.559953][ T9187] tipc: Enabling of bearer rejected, failed to enable media [ 203.683186][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 203.890233][ T9202] netlink: 'syz.0.875': attribute type 2 has an invalid length. [ 203.908743][ T9195] sctp: [Deprecated]: syz.1.872 (pid 9195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.908743][ T9195] Use struct sctp_sack_info instead [ 203.995665][ T9206] netlink: 'syz.2.876': attribute type 3 has an invalid length. [ 204.029453][ T5838] Bluetooth: hci2: link tx timeout [ 204.035825][ T5838] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.133780][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 204.165279][ T9220] net_ratelimit: 13 callbacks suppressed [ 204.165298][ T9220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.200958][ T9222] Bluetooth: MGMT ver 1.23 [ 204.628664][ T9251] netlink: 'syz.1.886': attribute type 21 has an invalid length. [ 204.648650][ T9251] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.848377][ T9262] delete_channel: no stack [ 204.885933][ T9268] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 204.902990][ T9268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.121766][ T9276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.041745][ T9333] netlink: 'syz.4.915': attribute type 11 has an invalid length. [ 206.069979][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 206.370381][ T9357] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 206.411367][ T9357] bond2 (unregistering): Released all slaves [ 207.046428][ T9374] syzkaller1: entered promiscuous mode [ 207.051963][ T9374] syzkaller1: entered allmulticast mode [ 207.312996][ T9352] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 207.331877][ T9352] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 207.419779][ T9401] __nla_validate_parse: 44 callbacks suppressed [ 207.419799][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.933'. [ 207.505485][ T9401] openvswitch: netlink: Flow key attr not present in new flow. [ 207.757705][ T9409] tap0: tun_chr_ioctl cmd 1074025672 [ 207.763506][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.939'. [ 207.785160][ T9417] nbd: must specify a size in bytes for the device [ 207.793426][ T9409] tap0: ignored: set checksum disabled [ 207.817895][ T9409] xt_TCPMSS: Only works on TCP SYN packets [ 207.948741][ T9417] xt_CT: No such helper "pptp" [ 208.315432][ T9445] syzkaller0: entered promiscuous mode [ 208.333001][ T9445] syzkaller0: entered allmulticast mode [ 208.383118][ T9443] tipc: Enabled bearer , priority 0 [ 208.551541][ T9443] tipc: Resetting bearer [ 208.558637][ T9454] netlink: 56 bytes leftover after parsing attributes in process `syz.3.950'. [ 208.597392][ T9443] tipc: Disabling bearer [ 208.652325][ T9454] bond3 (unregistering): Released all slaves [ 209.005953][ T9475] netlink: 'syz.2.955': attribute type 1 has an invalid length. [ 209.188861][ T9493] netlink: 64 bytes leftover after parsing attributes in process `syz.2.960'. [ 209.209239][ T9492] netlink: 'syz.1.961': attribute type 1 has an invalid length. [ 209.209964][ T9498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.959'. [ 209.329861][ T9492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.473190][ T7258] udevd[7258]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 209.632426][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 209.662810][ T9519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.964'. [ 209.716194][ T9522] netlink: 'syz.1.965': attribute type 11 has an invalid length. [ 209.790728][ T9524] netlink: 'syz.2.966': attribute type 1 has an invalid length. [ 209.813156][ T9524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.001943][ T9530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.969'. [ 210.042053][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 210.098748][ T9533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.970'. [ 210.348417][ T9542] vlan1: entered allmulticast mode [ 210.358399][ T9542] veth0_vlan: entered allmulticast mode [ 210.397338][ T9545] ip6t_REJECT: ECHOREPLY is not supported [ 210.538454][ T9561] netlink: 'syz.4.976': attribute type 29 has an invalid length. [ 210.905875][ T9581] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 212.048455][ T9644] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.066324][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 212.258952][ T9644] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.443858][ T9644] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.491883][ T9679] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 212.527226][ T9672] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 212.671044][ T9644] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.920616][ T80] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.977319][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.047639][ T9714] __nla_validate_parse: 4 callbacks suppressed [ 213.047659][ T9714] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1015'. [ 213.079880][ T1112] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.122686][ T1112] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.370626][ T9722] tipc: Enabled bearer , priority 0 [ 213.380403][ T9722] syzkaller0: entered promiscuous mode [ 213.389675][ T9722] syzkaller0: entered allmulticast mode [ 213.426175][ T9722] gre0: mtu less than device minimum [ 213.446261][ T9721] tipc: Resetting bearer [ 213.581852][ T9721] tipc: Disabling bearer [ 213.679675][ T9736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1023'. [ 213.847034][ T9751] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1025'. [ 213.867729][ T9751] : renamed from hsr0 (while UP) [ 213.918390][ T9751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.317375][ T9780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1033'. [ 214.353514][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1033'. [ 214.406709][ T9775] syz.3.1032 (9775) used greatest stack depth: 15744 bytes left [ 214.720173][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 214.802665][ T9800] : entered promiscuous mode [ 214.909364][ T9810] nbd: must specify at least one socket [ 215.076071][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 215.161166][ T9825] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1050'. [ 215.255912][ T9830] netlink: 'syz.0.1052': attribute type 3 has an invalid length. [ 215.266571][ T9830] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1052'. [ 215.274667][ T9829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1051'. [ 215.348340][ T9830] bond2 (unregistering): Released all slaves [ 215.604350][ T9846] netlink: 'syz.3.1057': attribute type 2 has an invalid length. [ 215.626261][ T9846] netlink: 'syz.3.1057': attribute type 11 has an invalid length. [ 215.846327][ T9860] netlink: 'syz.1.1063': attribute type 2 has an invalid length. [ 216.488530][ T9894] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 216.789997][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 216.800169][ T9908] Bluetooth: hci1: command 0x0406 tx timeout [ 216.802189][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 216.807878][ T9908] Bluetooth: hci3: command 0x0406 tx timeout [ 217.161618][ T9926] netlink: 'syz.2.1085': attribute type 13 has an invalid length. [ 217.375072][ T9926] veth0_to_team: left promiscuous mode [ 217.437666][ T9926] wireguard0: left allmulticast mode [ 217.444462][ T9926] vlan0: left allmulticast mode [ 217.452186][ T9926] geneve1: left allmulticast mode [ 217.460155][ T9926] bond1: left promiscuous mode [ 217.469827][ T9926] bridge2: left promiscuous mode [ 217.480144][ T9926] bond1: left allmulticast mode [ 217.489410][ T9926] bridge2: left allmulticast mode [ 217.519835][ T938] wg1 speed is unknown, defaulting to 1000 [ 217.690122][ T9957] sit1: entered promiscuous mode [ 217.706544][ T9957] sit1: entered allmulticast mode [ 217.848165][ T9968] netlink: 'syz.0.1097': attribute type 5 has an invalid length. [ 218.047502][ T9980] vlan1: entered allmulticast mode [ 218.052818][ T9980] veth0_vlan: entered allmulticast mode [ 218.133495][ T9984] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 218.256206][ T9984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.497924][T10005] __nla_validate_parse: 12 callbacks suppressed [ 218.497947][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 218.625785][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 218.626456][T10008] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1108'. [ 218.646345][T10008] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1108'. [ 218.677816][T10011] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 218.893126][T10026] macvlan3: entered promiscuous mode [ 218.905028][T10031] xt_hashlimit: size too large, truncated to 1048576 [ 218.960632][T10032] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1114'. [ 219.088638][T10035] syzkaller0: entered promiscuous mode [ 219.113841][T10035] syzkaller0: entered allmulticast mode [ 219.387009][T10054] netlink: 'syz.1.1118': attribute type 8 has an invalid length. [ 219.395981][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1118'. [ 219.430635][T10056] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1119'. [ 219.655433][T10067] syzkaller0: entered promiscuous mode [ 219.660965][T10067] syzkaller0: entered allmulticast mode [ 219.914720][T10081] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1125'. [ 220.066658][ T6148] tipc: Subscription rejected, illegal request [ 220.319733][T10103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1129'. [ 221.147607][T10110] netlink: 'syz.4.1131': attribute type 9 has an invalid length. [ 221.490093][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 222.150738][T10162] ipvlan3: entered promiscuous mode [ 222.968568][T10201] netlink: 'syz.2.1157': attribute type 1 has an invalid length. [ 223.075392][T10208] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 223.161474][T10214] netlink: 'syz.4.1160': attribute type 29 has an invalid length. [ 223.188534][T10214] netlink: 'syz.4.1160': attribute type 29 has an invalid length. [ 223.211770][T10214] unsupported nlmsg_type 40 [ 223.225360][T10221] netlink: 'syz.3.1162': attribute type 5 has an invalid length. [ 223.643784][T10243] __nla_validate_parse: 11 callbacks suppressed [ 223.643804][T10243] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1169'. [ 223.664704][T10246] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1170'. [ 223.724714][T10248] netlink: 'syz.3.1171': attribute type 4 has an invalid length. [ 223.802533][T10237] macvtap1: entered allmulticast mode [ 223.826810][T10237] veth0_macvtap: entered allmulticast mode [ 223.850456][T10253] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1172'. [ 223.862565][T10253] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1172'. [ 223.871874][T10253] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1172'. [ 224.215177][T10273] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 224.313037][T10279] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 224.371561][T10284] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 224.420602][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1181'. [ 224.429774][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 224.513421][T10282] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 225.014428][T10319] netlink: 'syz.1.1191': attribute type 10 has an invalid length. [ 225.037981][T10320] netlink: 'syz.1.1191': attribute type 10 has an invalid length. [ 225.073799][T10319] team0: Port device dummy0 added [ 225.085908][T10320] team0: Port device dummy0 removed [ 225.150293][T10320] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 225.309804][T10294] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 225.489316][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 225.565619][T10341] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 225.633930][T10341] bond3: (slave lo): Enslaving as a backup interface with an up link [ 225.648319][T10341] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 225.770884][T10358] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1202'. [ 225.837220][T10362] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1204'. [ 226.012282][T10362] syzkaller0: entered promiscuous mode [ 226.064215][T10362] syzkaller0: entered allmulticast mode [ 226.077445][T10369] tipc: Enabled bearer , priority 0 [ 226.158635][T10377] validate_nla: 4 callbacks suppressed [ 226.158654][T10377] netlink: 'syz.4.1209': attribute type 7 has an invalid length. [ 226.180492][T10377] netlink: 'syz.4.1209': attribute type 8 has an invalid length. [ 226.847274][T10384] netlink: 'syz.0.1211': attribute type 2 has an invalid length. [ 227.208440][T10380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.224220][T10379] syzkaller0: entered promiscuous mode [ 227.229936][T10379] syzkaller0: entered allmulticast mode [ 227.238284][T10382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.267254][T10369] tipc: Resetting bearer [ 227.317639][T10363] tipc: Resetting bearer [ 227.373786][T10363] tipc: Disabling bearer [ 227.417447][T10384] : entered promiscuous mode [ 227.425002][ T5850] tipc: Node number set to 2388717129 [ 227.659124][T10393] syzkaller0: entered promiscuous mode [ 227.667462][T10393] syzkaller0: entered allmulticast mode [ 227.921224][T10415] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 228.987820][T10408] syzkaller1: entered promiscuous mode [ 228.993677][T10408] syzkaller1: entered allmulticast mode [ 229.010318][T10418] dvmrp0: entered allmulticast mode [ 229.175703][T10436] __nla_validate_parse: 5 callbacks suppressed [ 229.175723][T10436] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1223'. [ 229.180996][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 229.228133][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1222'. [ 229.237879][T10435] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 229.257094][T10435] bond4 (unregistering): Released all slaves [ 229.301315][T10441] tipc: Enabled bearer , priority 0 [ 229.340938][T10444] syzkaller0: entered promiscuous mode [ 229.349299][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1226'. [ 229.353086][T10444] syzkaller0: entered allmulticast mode [ 229.393639][T10446] vlan0: entered promiscuous mode [ 229.413112][T10446] bridge0: entered promiscuous mode [ 229.460232][T10452] pim6reg: entered allmulticast mode [ 229.466681][T10447] tipc: Resetting bearer [ 229.486070][T10447] tipc: Disabling bearer [ 229.512017][T10453] macsec1: entered promiscuous mode [ 229.518658][T10453] macsec1: entered allmulticast mode [ 229.531645][T10453] bond4: (slave macsec1): Error -34 calling dev_set_mtu [ 229.774992][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1232'. [ 229.815856][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1233'. [ 229.900832][T10484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1231'. [ 229.955212][T10478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1231'. [ 230.057257][T10489] pimreg: entered allmulticast mode [ 230.076637][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1231'. [ 230.344056][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 230.490164][T10517] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 231.271871][T10566] Cannot find add_set index 65532 as target [ 232.457076][T10632] x_tables: duplicate underflow at hook 1 [ 232.924264][T10665] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 232.929785][T10664] netlink: 'syz.0.1281': attribute type 63 has an invalid length. [ 233.767788][T10727] veth1_to_bond: entered allmulticast mode [ 233.910444][T10726] bond0: (slave bond_slave_1): Releasing backup interface [ 234.001834][T10726] veth1_to_bond (unregistering): left allmulticast mode [ 234.124782][T10742] nbd: device at index 64 is going down [ 234.332023][T10760] __nla_validate_parse: 14 callbacks suppressed [ 234.332041][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 234.378697][ T7258] udevd[7258]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 234.421262][ T7258] udevd[7258]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 234.451630][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1301'. [ 234.504662][T10761] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1302'. [ 234.619558][T10773] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1303'. [ 234.770425][T10780] netlink: 'syz.3.1305': attribute type 4 has an invalid length. [ 235.007178][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1307'. [ 235.266284][T10808] IPv6: addrconf: prefix option has invalid lifetime [ 235.318791][T10804] netlink: 'syz.4.1313': attribute type 10 has an invalid length. [ 235.537483][T10822] syzkaller0: entered promiscuous mode [ 235.553784][T10822] syzkaller0: entered allmulticast mode [ 235.615079][T10822] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1316'. [ 235.632302][T10822] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 235.698803][T10833] netlink: 'syz.4.1320': attribute type 4 has an invalid length. [ 235.709775][T10833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1320'. [ 235.726035][T10828] syzkaller0: entered promiscuous mode [ 235.731868][T10828] syzkaller0: entered allmulticast mode [ 236.062018][T10846] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1321'. [ 236.107734][T10850] netlink: 'syz.0.1323': attribute type 2 has an invalid length. [ 236.138358][T10851] team0: Device gtp0 is up. Set it down before adding it as a team port [ 236.366361][T10857] syzkaller1: entered promiscuous mode [ 236.371978][T10857] syzkaller1: entered allmulticast mode [ 236.393008][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 237.603029][T10869] tipc: Enabled bearer , priority 0 [ 237.709938][T10869] tipc: Disabling bearer [ 237.782278][T10883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1327'. [ 238.045605][T10903] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 238.187990][T10910] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1336'. [ 238.206308][T10912] x_tables: duplicate underflow at hook 2 [ 238.650549][T10932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.718961][T10941] wg1 speed is unknown, defaulting to 1000 [ 239.188569][T10967] veth0: entered promiscuous mode [ 239.250955][T10972] netlink: 'syz.2.1348': attribute type 4 has an invalid length. [ 239.321664][T10966] veth0: left promiscuous mode [ 239.475795][T10985] IPv6: sit2: Disabled Multicast RS [ 239.526713][T10985] sit2: entered allmulticast mode [ 239.633904][T10991] openvswitch: netlink: Multiple metadata blocks provided [ 239.674347][T10993] xt_TCPMSS: Only works on TCP SYN packets [ 239.817073][T11008] __nla_validate_parse: 5 callbacks suppressed [ 239.817093][T11008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1356'. [ 239.923020][T11017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 239.947780][T11017] syzkaller0: entered promiscuous mode [ 239.953597][T11017] syzkaller0: entered allmulticast mode [ 240.727086][T11051] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.734509][T11051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.742115][T11051] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.749380][T11051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.804377][T11051] bridge0: entered allmulticast mode [ 241.234877][T11078] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1372'. [ 241.251606][T11077] netlink: 'syz.4.1371': attribute type 16 has an invalid length. [ 241.289670][T11077] netlink: 'syz.4.1371': attribute type 17 has an invalid length. [ 241.384681][T11077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.591214][T11094] x_tables: duplicate underflow at hook 1 [ 241.615923][T11097] vlan1: left allmulticast mode [ 241.649554][T11097] veth0_vlan: left allmulticast mode [ 241.716241][T11097] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 241.732575][T11097] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 241.785577][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'. [ 241.800178][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'. [ 242.155864][T11125] bond0: (slave rose0): Error: Device can not be enslaved while up [ 242.192654][T11127] tipc: Enabling of bearer rejected, failed to enable media [ 242.247323][T11130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1391'. [ 242.400474][T11133] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.407946][T11133] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.523556][T11133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.543177][T11133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.775876][ T3957] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.787058][ T3957] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.798218][ T3957] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.808312][ T3957] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.825877][ T3957] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.841301][ T3957] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.878894][ T3957] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.899410][ T3957] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.074222][T11162] netlink: 'syz.1.1400': attribute type 1 has an invalid length. [ 243.101975][T11159] syzkaller0: entered promiscuous mode [ 243.108403][T11159] syzkaller0: entered allmulticast mode [ 243.268147][T11172] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1401'. [ 243.326472][T11172] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1401'. [ 243.341046][T11172] netlink: 'syz.2.1401': attribute type 6 has an invalid length. [ 243.349834][T11172] netlink: 'syz.2.1401': attribute type 5 has an invalid length. [ 243.358084][T11172] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1401'. [ 243.462768][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 243.478311][T11173] netlink: 'syz.1.1400': attribute type 6 has an invalid length. [ 243.486720][T11184] netlink: 'syz.0.1403': attribute type 1 has an invalid length. [ 243.503087][T11173] netlink: 'syz.1.1400': attribute type 6 has an invalid length. [ 243.527513][T11182] syzkaller0: entered promiscuous mode [ 243.537160][T11182] syzkaller0: entered allmulticast mode [ 243.547142][T11182] tipc: Enabled bearer , priority 0 [ 243.614237][T11181] tipc: Resetting bearer [ 243.657502][T11181] tipc: Disabling bearer [ 243.685435][T11194] gtp0: entered promiscuous mode [ 243.718730][T11194] xt_TCPMSS: Only works on TCP SYN packets [ 244.126472][T11228] xt_cgroup: xt_cgroup: no path or classid specified [ 244.158974][T11228] xt_cgroup: xt_cgroup: no path or classid specified [ 244.921541][T11277] __nla_validate_parse: 9 callbacks suppressed [ 244.921561][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1428'. [ 245.019220][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 245.028488][T11280] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1429'. [ 245.046751][T11280] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1429'. [ 245.066456][T11280] netlink: 'syz.3.1429': attribute type 5 has an invalid length. [ 245.099367][T11280] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1429'. [ 245.207365][ T1092] tipc: Subscription rejected, illegal request [ 245.375232][T11293] syzkaller1: entered promiscuous mode [ 245.384705][T11293] syzkaller1: entered allmulticast mode [ 245.579150][T11306] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1437'. [ 245.736751][T11314] netlink: 'syz.3.1438': attribute type 23 has an invalid length. [ 245.877679][T11320] syzkaller1: entered promiscuous mode [ 245.904396][T11320] syzkaller1: entered allmulticast mode [ 245.992040][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'. [ 246.228293][T11340] openvswitch: netlink: Flow actions attr not present in new flow. [ 246.243729][T11338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'. [ 246.264320][T11338] netlink: 'syz.2.1444': attribute type 20 has an invalid length. [ 246.276353][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'. [ 246.288625][ T1092] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.288762][T11338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'. [ 246.317401][ T1092] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.347776][T11338] netlink: 'syz.2.1444': attribute type 20 has an invalid length. [ 246.358504][ T1092] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.388498][ T1092] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.915047][T11438] netlink: 'syz.0.1473': attribute type 13 has an invalid length. [ 248.060416][T11442] bond3: option mode: invalid value (133) [ 248.068248][T11442] bond3 (unregistering): Released all slaves [ 248.097261][T11448] netlink: 'syz.1.1475': attribute type 1 has an invalid length. [ 248.365419][T11459] bond5: entered promiscuous mode [ 248.370519][T11459] bond5: entered allmulticast mode [ 248.376382][T11459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.017094][T11502] syzkaller0: entered promiscuous mode [ 249.022635][T11502] syzkaller0: entered allmulticast mode [ 249.050381][T11506] xt_l2tp: invalid flags combination: 8 [ 249.364737][T11524] batadv_slave_1: entered promiscuous mode [ 249.390159][T11518] wg1 speed is unknown, defaulting to 1000 [ 249.544376][T11526] C: renamed from lo (while UP) [ 249.552581][T11526] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 249.728923][T11516] batadv_slave_1: left promiscuous mode [ 250.361312][T11560] __nla_validate_parse: 16 callbacks suppressed [ 250.361333][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1511'. [ 250.972491][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 251.064815][T11603] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 251.087354][T11603] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 251.470343][T11623] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1532'. [ 251.543794][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'. [ 251.568369][T11638] tipc: Enabling of bearer rejected, failed to enable media [ 251.594493][T11631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1533'. [ 251.616082][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'. [ 251.633967][T11631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1533'. [ 251.729920][T11644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1536'. [ 251.918013][T11649] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.926015][T11649] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.008870][T11660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1541'. [ 252.020622][T11660] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 252.193798][T11673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1544'. [ 252.391943][T11684] xt_l2tp: wrong L2TP version: 0 [ 252.398646][T11684] xt_l2tp: wrong L2TP version: 0 [ 252.422790][T11684] xt_l2tp: wrong L2TP version: 0 [ 252.433171][T11684] xt_l2tp: wrong L2TP version: 0 [ 252.469802][T11684] xt_l2tp: wrong L2TP version: 0 [ 252.500155][T11684] xt_l2tp: wrong L2TP version: 0 [ 252.520369][T11684] xt_l2tp: wrong L2TP version: 0 [ 252.542055][T11684] xt_l2tp: wrong L2TP version: 0 [ 252.561309][T11684] xt_l2tp: wrong L2TP version: 0 [ 252.575412][T11684] xt_l2tp: wrong L2TP version: 0 [ 252.638575][T11692] netlink: 'syz.1.1551': attribute type 2 has an invalid length. [ 252.699338][T11694] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.792552][T11696] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.318281][T11729] netlink: 'syz.2.1564': attribute type 12 has an invalid length. [ 253.461863][T11726] "syz.4.1562" (11726) uses obsolete ecb(arc4) skcipher [ 253.555706][T11749] netlink: 'syz.3.1566': attribute type 11 has an invalid length. [ 253.620021][T11735] syzkaller0: entered promiscuous mode [ 253.626360][T11735] syzkaller0: entered allmulticast mode [ 253.671643][T11752] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 253.706290][T11752] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 253.749653][T11752] gretap1: entered promiscuous mode [ 253.793013][T11752] gretap1: entered allmulticast mode [ 254.375356][T11787] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 255.584553][T11801] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1580'. [ 255.615934][T11807] netlink: 'syz.1.1581': attribute type 3 has an invalid length. [ 255.666440][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.704015][T11807] veth0: entered promiscuous mode [ 255.723605][T11806] veth0: left promiscuous mode [ 255.947264][T11816] syzkaller0: entered promiscuous mode [ 255.953133][T11816] syzkaller0: entered allmulticast mode [ 257.464730][T11861] netlink: 'syz.3.1597': attribute type 11 has an invalid length. [ 257.475106][T11856] xt_addrtype: ipv6 does not support BROADCAST matching [ 257.484948][T11861] netlink: 'syz.3.1597': attribute type 11 has an invalid length. [ 257.505787][T11861] netlink: 'syz.3.1597': attribute type 11 has an invalid length. [ 257.506127][T11862] veth0: entered promiscuous mode [ 257.519069][T11861] netlink: 'syz.3.1597': attribute type 11 has an invalid length. [ 257.527618][T11861] netlink: 'syz.3.1597': attribute type 11 has an invalid length. [ 257.548358][T11862] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 257.573303][T11861] netlink: 'syz.3.1597': attribute type 11 has an invalid length. [ 257.581466][T11862] sctp: [Deprecated]: syz.2.1598 (pid 11862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.581466][T11862] Use struct sctp_sack_info instead [ 257.704320][T11871] delete_channel: no stack [ 257.766233][T11873] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 257.786429][T11873] bond4 (unregistering): Released all slaves [ 257.812306][T11876] IPv6: sit1: Disabled Multicast RS [ 257.818608][T11876] sit1: entered allmulticast mode [ 257.960750][T11883] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1605'. [ 257.982129][T11885] pim6reg1: entered promiscuous mode [ 257.989316][T11885] pim6reg1: entered allmulticast mode [ 258.000853][T11890] netlink: 'syz.3.1606': attribute type 1 has an invalid length. [ 258.180025][T11900] netlink: 'syz.4.1607': attribute type 29 has an invalid length. [ 258.190362][T11899] netlink: 'syz.4.1607': attribute type 29 has an invalid length. [ 258.299621][T11858] veth0: left promiscuous mode [ 258.394622][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'. [ 258.518388][T11911] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1611'. [ 258.546681][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1613'. [ 258.601461][ T5852] block nbd2: Receive control failed (result -1) [ 258.710294][T11933] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 258.723226][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1617'. [ 258.927706][T11938] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 258.993776][T11943] nbd3: detected capacity change from 0 to 63 [ 259.042482][T11951] block nbd3: NBD_DISCONNECT [ 259.048098][T11946] can: request_module (can-proto-3) failed. [ 259.094977][T11951] block nbd3: Disconnected due to user request. [ 259.111641][T11951] block nbd3: shutting down sockets [ 259.165408][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.174783][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 259.182981][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.192051][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 259.199912][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.209030][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 259.216878][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.225992][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 259.256653][ T7258] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.311735][ T7258] Buffer I/O error on dev nbd3, logical block 0, async page read [ 259.334597][ T7258] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.343963][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1628'. [ 259.363865][ T7258] Buffer I/O error on dev nbd3, logical block 1, async page read [ 259.371898][ T7258] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.411931][ T7258] Buffer I/O error on dev nbd3, logical block 2, async page read [ 259.420442][ T7258] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.432617][ T7258] Buffer I/O error on dev nbd3, logical block 3, async page read [ 259.442197][ T7258] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.453253][ T7258] Buffer I/O error on dev nbd3, logical block 0, async page read [ 259.469449][ T7258] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.471489][T11969] netlink: 'syz.3.1629': attribute type 2 has an invalid length. [ 259.479865][ T7258] Buffer I/O error on dev nbd3, logical block 1, async page read [ 259.499128][ T7258] ldm_validate_partition_table(): Disk read failed. [ 259.508977][ T7258] Dev nbd3: unable to read RDB block 0 [ 259.518121][ T7258] nbd3: unable to read partition table [ 259.521066][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'. [ 259.552731][ T7258] ldm_validate_partition_table(): Disk read failed. [ 259.561290][T11974] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 259.568954][T11969] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1629'. [ 259.572026][ T7258] Dev nbd3: unable to read RDB block 0 [ 259.586434][ T7258] nbd3: unable to read partition table [ 259.672714][T11970] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.695843][T11970] bond6: (slave bond7): Enslaving as an active interface with an up link [ 259.834124][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'. [ 259.902260][T11977] team0 (unregistering): Port device team_slave_0 removed [ 259.915490][T11977] team0 (unregistering): Port device team_slave_1 removed [ 259.948224][T11975] bond6 (unregistering): (slave bond7): Releasing backup interface [ 259.972716][T11975] bond6 (unregistering): Released all slaves [ 260.130302][T11987] netlink: 'syz.4.1632': attribute type 1 has an invalid length. [ 260.305303][T11997] bond4: (slave gretap1): making interface the new active one [ 260.352093][T11997] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 260.615998][T12017] __nla_validate_parse: 1 callbacks suppressed [ 260.616019][T12017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1644'. [ 260.624218][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 260.815257][T12027] netlink: 'syz.0.1649': attribute type 28 has an invalid length. [ 260.840195][T12027] netlink: 'syz.0.1649': attribute type 3 has an invalid length. [ 260.880806][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1651'. [ 260.890742][T12027] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1649'. [ 260.908012][T12029] bridge_slave_0: left allmulticast mode [ 260.914554][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1651'. [ 260.928048][T12029] bridge_slave_0: left promiscuous mode [ 260.956941][T12029] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.000323][T12029] bridge_slave_1: left allmulticast mode [ 261.009711][T12029] bridge_slave_1: left promiscuous mode [ 261.017948][T12029] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.032483][T12029] bond0: (slave bond_slave_0): Releasing backup interface [ 261.059903][T12029] bond0: (slave bond_slave_1): Releasing backup interface [ 261.084759][T12044] netlink: 'syz.1.1654': attribute type 1 has an invalid length. [ 261.096395][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1654'. [ 261.098779][T12029] team0: Port device team_slave_0 removed [ 261.110452][T12046] netlink: 'syz.1.1654': attribute type 1 has an invalid length. [ 261.120559][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1654'. [ 261.175369][T12029] team0: Port device team_slave_1 removed [ 261.182657][T12029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.210425][T12029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.224688][T12029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.232255][T12029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.242014][T12029] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 261.278235][T12033] bridge0: port 3(vlan2) entered blocking state [ 261.286742][T12033] bridge0: port 3(vlan2) entered disabled state [ 261.313720][T12033] vlan2: entered allmulticast mode [ 261.319045][T12033] bridge0: entered allmulticast mode [ 261.330664][T12033] vlan2: left allmulticast mode [ 261.340087][T12033] bridge0: left allmulticast mode [ 261.384537][T12043] syzkaller1: entered promiscuous mode [ 261.390246][T12043] syzkaller1: entered allmulticast mode [ 261.552681][T12063] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1658'. [ 261.606885][ T30] audit: type=1107 audit(1765267227.087:2): pid=12060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 261.735547][T12066] syzkaller0: entered promiscuous mode [ 261.876873][T12066] syzkaller0: entered allmulticast mode [ 261.961748][T12069] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1659'. [ 262.127396][T12084] º: renamed from veth1_vlan [ 262.164979][T12087] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1665'. [ 262.215160][T12089] bond3: option mode: unable to set because the bond device has slaves [ 262.341265][T12091] xt_CT: No such helper "pptp" [ 263.875938][T12132] netlink: 'syz.1.1676': attribute type 1 has an invalid length. [ 263.892999][T12132] netlink: 'syz.1.1676': attribute type 1 has an invalid length. [ 264.007653][T12142] netlink: 'syz.1.1678': attribute type 1 has an invalid length. [ 264.034414][T12145] netlink: 'syz.1.1678': attribute type 1 has an invalid length. [ 265.267019][T12215] bond6: option min_links: invalid value (18446744073709551614) [ 265.281632][T12215] bond6: option min_links: allowed values 0 - 2147483647 [ 265.296454][T12215] bond6 (unregistering): Released all slaves [ 265.446057][T12229] vlan1: entered promiscuous mode [ 265.480567][T12229] bridge0: entered promiscuous mode [ 265.579400][T12234] delete_channel: no stack [ 265.603052][ T5951] IPVS: starting estimator thread 0... [ 265.702083][T12239] netlink: 'syz.3.1706': attribute type 1 has an invalid length. [ 265.713058][T12239] __nla_validate_parse: 6 callbacks suppressed [ 265.713075][T12239] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1706'. [ 265.739464][T12247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 265.749900][T12237] IPVS: using max 25 ests per chain, 60000 per kthread [ 265.763763][T12247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1707'. [ 265.975525][T12259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1711'. [ 266.178565][T12266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1714'. [ 266.202303][T12266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1714'. [ 266.227980][T12271] xfrm0: entered allmulticast mode [ 266.300940][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'. [ 266.317382][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1718'. [ 266.356770][T12283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1720'. [ 266.570509][T12297] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1724'. [ 267.215013][T12335] nbd: must specify at least one socket [ 267.266033][T12337] pimreg: entered allmulticast mode [ 267.298062][T12337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.409905][T12343] netlink: 'syz.4.1741': attribute type 3 has an invalid length. [ 267.981197][T12378] can: request_module (can-proto-0) failed. [ 268.692791][T12431] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 268.735182][T12432] syzkaller0: refused to change device tx_queue_len [ 269.056489][T12450] sctp: [Deprecated]: syz.1.1769 (pid 12450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.056489][T12450] Use struct sctp_sack_info instead [ 269.195350][T12458] sctp: [Deprecated]: syz.1.1769 (pid 12458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.195350][T12458] Use struct sctp_sack_info instead [ 269.482153][T12485] netlink: 'syz.4.1776': attribute type 2 has an invalid length. [ 271.663335][T12543] syzkaller0: create flow: hash 1755017788 index 1 [ 271.890557][T12560] veth0: entered promiscuous mode [ 271.911196][T12538] syzkaller0: delete flow: hash 1755017788 index 1 [ 272.034459][T12568] __nla_validate_parse: 7 callbacks suppressed [ 272.034477][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 272.084064][T12568] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1802'. [ 272.095612][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 273.311146][T12560] veth0: left promiscuous mode [ 273.440526][T12569] syzkaller0: entered promiscuous mode [ 273.467032][T12569] syzkaller0: entered allmulticast mode [ 273.481650][T12593] openvswitch: netlink: Message has 8 unknown bytes. [ 273.489665][T12593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.499651][T12593] netlink: 'syz.1.1804': attribute type 1 has an invalid length. [ 274.730328][T12605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1807'. [ 274.750612][T12605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1807'. [ 274.965938][T12609] tipc: Started in network mode [ 274.970886][T12609] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 274.991199][T12619] sctp: [Deprecated]: syz.3.1813 (pid 12619) Use of int in maxseg socket option. [ 274.991199][T12619] Use struct sctp_assoc_value instead [ 274.994499][T12612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1811'. [ 275.018605][T12609] tipc: Enabled bearer , priority 10 [ 275.030850][T12625] netlink: 'syz.0.1809': attribute type 63 has an invalid length. [ 275.048112][T12612] netlink: 'syz.2.1811': attribute type 7 has an invalid length. [ 275.057080][T12620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1810'. [ 275.066186][T12612] netlink: 'syz.2.1811': attribute type 8 has an invalid length. [ 275.072582][T12609] netlink: 'syz.0.1809': attribute type 63 has an invalid length. [ 275.074784][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1811'. [ 275.314480][T12631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1814'. [ 275.338327][ T5850] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x1 [ 275.352890][ T5850] hid-generic 0005:0C45:1010.0002: ignoring exceeding usage max [ 275.365621][ T5850] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x4 [ 275.374152][ T5850] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x5 [ 275.385521][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1817'. [ 275.391099][ T5850] hid-generic 0005:0C45:1010.0002: hidraw0: BLUETOOTH HID v0.c3 Device [syz0] on aa:aa:aa:aa:aa:aa [ 275.557585][T12637] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 275.566300][T12637] bond5: option packets_per_slave: allowed values 0 - 65535 [ 275.604207][T12637] bond5 (unregistering): Released all slaves [ 275.653057][T12653] nbd: must specify at least one socket [ 275.698052][T12661] netlink: 'syz.0.1823': attribute type 2 has an invalid length. [ 275.962410][T12674] vxcan0: entered allmulticast mode [ 276.245527][ T5850] tipc: Node number set to 4269801492 [ 276.283442][T12698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.495883][T12683] bond5 (unregistering): Released all slaves [ 276.609122][T12690] bond5 (unregistering): Released all slaves [ 276.735659][T12706] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 276.763846][T12706] team0: Device macvtap2 is already an upper device of the team interface [ 276.979391][T12723] wg1 speed is unknown, defaulting to 1000 [ 277.305503][T12733] netlink: 'syz.4.1839': attribute type 12 has an invalid length. [ 277.314441][T12733] __nla_validate_parse: 11 callbacks suppressed [ 277.314459][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 277.332871][T12738] netlink: 'syz.2.1841': attribute type 4 has an invalid length. [ 277.385799][T12733] netlink: 'syz.4.1839': attribute type 12 has an invalid length. [ 277.385904][T12740] netlink: 'syz.2.1841': attribute type 4 has an invalid length. [ 277.407063][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 277.527567][T12742] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1842'. [ 277.764649][T12746] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 277.770823][T12746] syzkaller0: linktype set to 786 [ 277.832416][T12746] syzkaller0: create flow: hash 1755017788 index 1 [ 278.081126][T12753] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1845'. [ 278.121496][T12747] syzkaller0: delete flow: hash 1755017788 index 1 [ 278.375712][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1848'. [ 279.607956][T12776] C: renamed from team_slave_0 [ 279.656721][T12776] netlink: 'syz.2.1853': attribute type 1 has an invalid length. [ 279.687774][T12776] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 279.766294][T12779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1852'. [ 280.071285][T12804] netlink: 'syz.2.1857': attribute type 1 has an invalid length. [ 280.087824][T12805] x_tables: duplicate underflow at hook 1 [ 280.115105][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1857'. [ 280.254025][T12812] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 280.324118][T12818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.353630][T12818] sctp: [Deprecated]: syz.1.1862 (pid 12818) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.353630][T12818] Use struct sctp_sack_info instead [ 280.400979][T12818] sctp: [Deprecated]: syz.1.1862 (pid 12818) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.400979][T12818] Use struct sctp_sack_info instead [ 280.481128][T12824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1865'. [ 280.504644][T12827] netlink: 'syz.3.1866': attribute type 1 has an invalid length. [ 280.551406][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1864'. [ 280.594717][T12827] bond4: entered promiscuous mode [ 280.609731][T12827] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.824510][T12848] tipc: Enabling of bearer rejected, failed to enable media [ 280.856015][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1870'. [ 281.400220][T12885] tipc: Resetting bearer [ 281.408991][T12884] netlink: 'syz.0.1882': attribute type 11 has an invalid length. [ 281.437294][T12885] tipc: Resetting bearer [ 281.454089][T12886] netlink: 'syz.0.1882': attribute type 12 has an invalid length. [ 281.541170][T12885] netlink: 'syz.2.1881': attribute type 16 has an invalid length. [ 281.556216][T12891] netlink: 'syz.1.1884': attribute type 1 has an invalid length. [ 281.561282][T12885] netlink: 'syz.2.1881': attribute type 17 has an invalid length. [ 281.614179][T12891] netlink: 'syz.1.1884': attribute type 10 has an invalid length. [ 281.646049][T12885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.684812][ T5852] block nbd3: Receive control failed (result -32) [ 281.891377][T12907] C: Caught tx_queue_len zero misconfig [ 281.893364][T12911] netlink: 'syz.1.1892': attribute type 10 has an invalid length. [ 281.950150][T12911] bridge_slave_1: left allmulticast mode [ 281.963010][T12911] bridge_slave_1: left promiscuous mode [ 281.979150][T12911] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.994651][T12916] netlink: 'syz.1.1892': attribute type 1 has an invalid length. [ 282.050177][T12911] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 282.220158][T12931] openvswitch: netlink: Duplicate key (type 1). [ 282.450025][T12944] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 282.897794][T12962] __nla_validate_parse: 6 callbacks suppressed [ 282.897813][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1904'. [ 282.996768][T12974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1903'. [ 283.076248][T12962] hsr_slave_1 (unregistering): left promiscuous mode [ 283.562029][T13000] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 283.697635][T13007] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1915'. [ 283.709179][T13007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1915'. [ 283.786505][T13011] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1916'. [ 283.794982][T13009] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1917'. [ 283.862545][T13014] tipc: New replicast peer: 255.255.255.255 [ 283.885419][T13014] tipc: Enabled bearer , priority 10 [ 283.892289][T13014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'. [ 284.026918][T13023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.186405][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'. [ 284.261727][T13034] pim6reg1: entered promiscuous mode [ 284.267328][T13034] pim6reg1: entered allmulticast mode [ 284.429286][T13039] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1927'. [ 284.450956][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1929'. [ 284.463295][T13039] bridge_slave_1: left allmulticast mode [ 284.486484][T13039] bridge_slave_1: left promiscuous mode [ 284.503525][T13039] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.541534][T13039] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 284.713522][T13062] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 284.827277][T13067] xt_connbytes: Forcing CT accounting to be enabled [ 284.893518][T13069] pim6reg1: entered promiscuous mode [ 284.933030][T13069] pim6reg1: entered allmulticast mode [ 285.014156][ T5940] tipc: Node number set to 1054992513 [ 285.056140][T13077] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 285.264960][T13090] vlan1: entered allmulticast mode [ 285.287065][T13090] bridge_slave_0: entered allmulticast mode [ 285.322606][T13088] validate_nla: 4 callbacks suppressed [ 285.322625][T13088] netlink: 'syz.1.1942': attribute type 10 has an invalid length. [ 285.366795][T13098] nbd: couldn't find a device at index 0 [ 285.798652][T13120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.901378][T13124] syzkaller0: entered promiscuous mode [ 285.931946][T13124] syzkaller0: entered allmulticast mode [ 286.674511][T13175] syzkaller0: entered promiscuous mode [ 286.680050][T13175] syzkaller0: entered allmulticast mode [ 287.021213][T13189] netlink: 'syz.2.1973': attribute type 2 has an invalid length. [ 287.044408][T13189] netlink: 'syz.2.1973': attribute type 1 has an invalid length. [ 287.067151][T13192] netlink: 'syz.1.1975': attribute type 2 has an invalid length. [ 287.236697][T13196] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 287.249967][T13199] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 287.255484][T13203] netlink: 'syz.2.1979': attribute type 83 has an invalid length. [ 287.277474][T13203] netlink: 'syz.2.1979': attribute type 1 has an invalid length. [ 287.507597][T13217] netlink: 'syz.1.1984': attribute type 1 has an invalid length. [ 287.645558][T13224] bond5: (slave bridge10): making interface the new active one [ 287.654960][T13224] bond5: (slave bridge10): Enslaving as an active interface with an up link [ 287.736179][T13217] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 287.749291][T13225] tipc: Enabled bearer , priority 0 [ 287.774046][T13225] syzkaller0: entered promiscuous mode [ 287.783222][T13225] syzkaller0: entered allmulticast mode [ 287.820449][T13223] tipc: Resetting bearer [ 287.856264][T13223] tipc: Disabling bearer [ 287.916735][T13239] vlan2: entered promiscuous mode [ 287.932170][T13239] vlan2: entered allmulticast mode [ 287.938142][T13239] hsr_slave_1: entered allmulticast mode [ 287.949763][T13242] __nla_validate_parse: 20 callbacks suppressed [ 287.949783][T13242] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1990'. [ 288.107919][T13248] sctp: [Deprecated]: syz.0.1992 (pid 13248) Use of struct sctp_assoc_value in delayed_ack socket option. [ 288.107919][T13248] Use struct sctp_sack_info instead [ 288.194883][T13248] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1992'. [ 288.204577][T13248] nbd: couldn't find a device at index 0 [ 288.421628][T13260] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1996'. [ 288.554125][T13264] netlink: 'syz.2.1997': attribute type 1 has an invalid length. [ 288.796723][T13287] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20001 [ 289.668105][T13318] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2008'. [ 289.688030][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2009'. [ 290.016595][T13332] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2015'. [ 290.064415][T13332] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.105381][T13332] bridge_slave_1: left promiscuous mode [ 290.147020][T13332] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.245795][T13332] bridge_slave_1: entered promiscuous mode [ 290.252296][T13332] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 290.334381][T13305] x_tables: duplicate entry at hook 1 [ 290.524954][T13360] tipc: Enabling of bearer rejected, failed to enable media [ 290.893225][T13375] validate_nla: 3 callbacks suppressed [ 290.893244][T13375] netlink: 'syz.3.2026': attribute type 1 has an invalid length. [ 290.945276][T13375] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2026'. [ 291.128779][T13390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2032'. [ 291.139207][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2030'. [ 291.300230][T13398] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2034'. [ 291.367843][T13398] bond5: option mode: invalid value (133) [ 291.387948][T13398] bond5 (unregistering): Released all slaves [ 291.559256][T13413] ip6tnl0: Caught tx_queue_len zero misconfig [ 291.819014][T13426] netlink: 'syz.1.2041': attribute type 12 has an invalid length. [ 291.829692][T13426] netlink: 'syz.1.2041': attribute type 29 has an invalid length. [ 291.853104][T13426] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 292.136536][T13439] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.149177][T13439] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.269370][T13439] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.290586][T13439] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.421090][T13439] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.467186][T13439] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.574683][T13439] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.601269][T13439] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.669243][T13467] wg1 speed is unknown, defaulting to 1000 [ 292.712700][T13470] netlink: 'syz.0.2055': attribute type 10 has an invalid length. [ 292.802151][ T6148] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.823631][ T6148] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.862042][ T6148] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.883903][ T6148] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.937049][ T6148] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.945711][ T6148] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.973857][T13483] __nla_validate_parse: 8 callbacks suppressed [ 292.973879][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2060'. [ 292.982755][ T6148] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.999643][T13483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2060'. [ 293.009077][ T6148] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.264082][T13492] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2062'. [ 293.455997][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2065'. [ 293.503724][T13507] Unsupported xt match [ 293.503744][T13507] unable to load match [ 293.542737][T13507] netlink: 'syz.3.2065': attribute type 29 has an invalid length. [ 293.555854][T13507] netlink: 'syz.3.2065': attribute type 29 has an invalid length. [ 293.602471][T13514] veth0: entered promiscuous mode [ 293.953812][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 293.963205][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 293.972122][T13538] netlink: 'syz.0.2075': attribute type 5 has an invalid length. [ 293.992334][T13540] netlink: 'syz.0.2075': attribute type 5 has an invalid length. [ 293.993615][T13538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2075'. [ 294.016903][T13543] netlink: 'syz.3.2077': attribute type 1 has an invalid length. [ 294.020227][T13540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2075'. [ 294.038754][T13546] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 294.051125][T13538] geneve3: entered promiscuous mode [ 294.056857][T13538] geneve3: entered allmulticast mode [ 294.113974][T13545] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 294.129240][T13545] bond6 (unregistering): Released all slaves [ 294.164788][T13553] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.171436][ T6625] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 294.198795][ T6625] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 294.225144][ T1112] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 294.245819][ T1112] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 294.393522][T13512] veth0: left promiscuous mode [ 294.494109][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2085'. [ 294.516775][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2085'. [ 294.945672][T13594] sctp: [Deprecated]: syz.3.2093 (pid 13594) Use of int in maxseg socket option. [ 294.945672][T13594] Use struct sctp_assoc_value instead [ 294.965968][T13597] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 295.123914][T13605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.212589][T13605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.495308][T13627] raw_sendmsg: syz.1.2103 forgot to set AF_INET. Fix it! [ 296.285957][T13675] netlink: 'syz.0.2118': attribute type 1 has an invalid length. [ 296.336180][T13675] bond6: entered promiscuous mode [ 296.341800][T13675] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.380445][T13679] bond6: entered allmulticast mode [ 296.451401][T13683] netlink: 'syz.1.2121': attribute type 83 has an invalid length. [ 296.515215][T13686] bond0: (slave rose0): Error: Device can not be enslaved while up [ 296.594646][T13689] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 296.756086][T13703] netlink: 'syz.2.2128': attribute type 10 has an invalid length. [ 296.852470][T13707] dvmrp0: entered allmulticast mode [ 297.670029][T13744] syzkaller0: entered promiscuous mode [ 297.679185][T13744] syzkaller0: entered allmulticast mode [ 297.693476][T13749] netlink: 'syz.4.2144': attribute type 10 has an invalid length. [ 297.884234][T13749] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 297.927591][T13749] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 297.945355][T13749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.966697][T13749] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 298.012524][T13769] __nla_validate_parse: 14 callbacks suppressed [ 298.012539][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 298.028701][T13769] netlink: 'syz.3.2147': attribute type 5 has an invalid length. [ 298.036561][T13769] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2147'. [ 299.235958][T13767] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.282681][T13769] geneve3: entered promiscuous mode [ 299.292370][T13769] geneve3: entered allmulticast mode [ 299.350699][ T1083] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 39826 - 0 [ 299.381232][T13767] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.468989][T13784] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2152'. [ 299.480628][ T1083] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 39826 - 0 [ 299.485821][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2152'. [ 299.531331][T13784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2152'. [ 299.645322][T13791] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 299.659776][T13791] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2155'. [ 299.789631][T13799] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2157'. [ 299.802407][T13799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2157'. [ 300.109048][T13816] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2162'. [ 300.293806][T13839] netlink: 'syz.4.2166': attribute type 10 has an invalid length. [ 300.312606][T13839] batman_adv: batadv0: Interface deactivated: dummy0 [ 300.352741][T13839] batman_adv: batadv0: Removing interface: dummy0 [ 300.414208][T13839] dummy0: entered promiscuous mode [ 300.427099][T13839] team0: Port device dummy0 added [ 300.497203][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2168'. [ 300.497283][T13845] openvswitch: netlink: Flow actions attr not present in new flow. [ 300.533370][T13846] openvswitch: netlink: Flow actions attr not present in new flow. [ 300.634572][T13826] infiniband !yz!: set active [ 300.639513][T13826] infiniband !yz!: added team_slave_0 [ 300.750867][T13826] RDS/IB: !yz!: added [ 300.759662][T13826] smc: adding ib device !yz! with port count 1 [ 300.773273][T13826] smc: ib device !yz! port 1 has no pnetid [ 300.985583][T13767] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.022428][T13767] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 39826 - 0 [ 301.095718][T13767] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.106703][T13767] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 39826 - 0 [ 301.308268][ T6148] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 39826 - 0 [ 301.318945][ T6148] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 301.357121][ T6148] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 39826 - 0 [ 301.375463][ T6148] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 301.428821][ T6148] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 39826 - 0 [ 301.453135][ T6148] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 301.483125][ T6148] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 39826 - 0 [ 301.491452][ T6148] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.106768][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.289691][T13915] __nla_validate_parse: 5 callbacks suppressed [ 323.289714][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2189'. [ 323.323210][T13915] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2189'. [ 323.553788][T13928] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 323.577313][T13929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2195'. [ 323.605858][T13929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2195'. [ 323.738730][T13939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2198'. [ 323.760184][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2198'. [ 323.772001][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2198'. [ 323.827950][ T6148] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.828033][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2198'. [ 323.938005][ T6148] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.949911][ T6148] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.969561][ T6148] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.151908][T13960] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2204'. [ 324.196888][T13960] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2204'. [ 324.290511][T13968] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 324.974450][T13995] netlink: 'syz.2.2213': attribute type 4 has an invalid length. [ 325.073457][T13995] `: renamed from bond0 (while UP) [ 325.095046][T14004] xt_TPROXY: Can be used only with -p tcp or -p udp [ 325.586148][T14035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.636619][T14040] netlink: 'syz.3.2228': attribute type 13 has an invalid length. [ 325.670815][T14040] netlink: 'syz.3.2228': attribute type 13 has an invalid length. [ 325.763325][T14048] bridge0: Caught tx_queue_len zero misconfig [ 325.794085][T14048] netlink: 'syz.0.2229': attribute type 4 has an invalid length. [ 326.163723][T14072] atomic_op ffff88807e654198 conn xmit_atomic 0000000000000000 [ 326.374660][T14085] netlink: 'syz.4.2243': attribute type 1 has an invalid length. [ 326.600279][T14096] syzkaller0: entered promiscuous mode [ 326.618299][T14096] syzkaller0: entered allmulticast mode [ 326.952193][T14117] pim6reg527: entered allmulticast mode [ 327.179858][T14129] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 328.275433][T14158] netlink: 'syz.4.2265': attribute type 1 has an invalid length. [ 328.586144][T14165] __nla_validate_parse: 50 callbacks suppressed [ 328.586165][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2266'. [ 328.621916][T14167] netlink: 'syz.4.2267': attribute type 2 has an invalid length. [ 328.866516][T14176] x_tables: unsorted underflow at hook 3 [ 328.877530][T14176] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2270'. [ 328.885215][T14178] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2271'. [ 328.887410][T14176] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2270'. [ 328.896836][T14178] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2271'. [ 328.904940][T14176] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2270'. [ 329.041794][T14176] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2270'. [ 329.073160][T14176] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2270'. [ 329.092902][T14176] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2270'. [ 329.367429][T14176] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2270'. [ 329.466856][T14201] netlink: 'syz.0.2277': attribute type 8 has an invalid length. [ 329.626900][T14202] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.653984][T14202] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 329.753310][T14206] siw: device registration error -23 [ 329.855765][T14202] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.878151][T14202] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 329.953235][T14236] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 330.022521][T14202] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.062940][T14202] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 330.150839][T14202] bond0: (slave netdevsim0): Releasing backup interface [ 330.174258][T14202] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.193562][T14202] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 330.319172][T14248] netlink: 'syz.4.2288': attribute type 21 has an invalid length. [ 330.356548][T14248] xt_l2tp: v2 sid > 0xffff: 1114112 [ 330.363321][ T6625] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 330.371465][ T6625] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 330.403902][ T6625] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 330.413343][ T6625] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 330.466320][ T1092] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 330.491132][ T1092] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 330.526999][T14255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.549024][ T1112] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 330.565846][ T1112] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 330.596336][T14261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.998904][T14297] xt_hashlimit: invalid interval [ 331.240915][T14310] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.248235][T14310] bridge0: port 1(bridge_slave_0) entered listening state [ 331.462633][T14325] veth0: Caught tx_queue_len zero misconfig [ 331.483018][T14325] netlink: 'syz.0.2308': attribute type 3 has an invalid length. [ 332.259143][T14375] bond0: Caught tx_queue_len zero misconfig [ 333.154751][T14414] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 333.180102][T14418] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 333.499448][T14440] netlink: 'syz.2.2342': attribute type 17 has an invalid length. [ 333.547324][T14440] gretap0: entered promiscuous mode [ 333.565071][T14440] gretap0: left promiscuous mode [ 333.720112][T14453] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.782043][T14464] __nla_validate_parse: 14 callbacks suppressed [ 333.782063][T14464] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2350'. [ 333.934122][T14469] netlink: 'syz.4.2353': attribute type 1 has an invalid length. [ 333.942150][T14469] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2353'. [ 333.953977][T14453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.085730][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2356'. [ 334.111339][T14453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.250063][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2358'. [ 334.273122][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 334.286206][T14453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.293720][T14489] netlink: 'syz.4.2359': attribute type 10 has an invalid length. [ 334.307561][T14489] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2359'. [ 334.387635][T14495] xt_hashlimit: max too large, truncated to 1048576 [ 334.432000][T14498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2363'. [ 334.460116][T14487] bond6 (unregistering): Released all slaves [ 334.507307][T14489] geneve0: entered promiscuous mode [ 334.529454][T14489] team0: Port device geneve0 added [ 334.849086][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.857731][ T1112] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.866612][ T1112] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.879925][ T1112] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.905333][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'. [ 334.917301][T14513] netlink: 'syz.2.2367': attribute type 1 has an invalid length. [ 334.964706][T14513] bond0: entered promiscuous mode [ 334.970566][T14513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.175788][T14522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2369'. [ 335.180783][T14520] bond0: (slave bridge6): making interface the new active one [ 335.192470][T14520] bridge6: entered promiscuous mode [ 335.203412][T14520] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 335.317225][T14526] netlink: 'syz.1.2370': attribute type 4 has an invalid length. [ 335.600479][T14533] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2374'. [ 335.697718][T14541] tipc: Invalid UDP bearer configuration [ 335.697778][T14541] tipc: Enabling of bearer rejected, failed to enable media [ 335.871502][T14539] netlink: 'syz.0.2375': attribute type 1 has an invalid length. [ 336.364623][T14576] bond0: option ad_select: unable to set because the bond device is up [ 336.628106][T14594] netlink: 'syz.1.2394': attribute type 1 has an invalid length. [ 336.728419][T14594] veth0_to_bridge: entered promiscuous mode [ 336.735882][T14601] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 336.778954][T14592] veth0_to_bridge: left promiscuous mode [ 336.995982][T14617] netlink: 'syz.2.2399': attribute type 6 has an invalid length. [ 337.134808][T14617] netlink: 'syz.2.2399': attribute type 6 has an invalid length. [ 337.251050][T14628] syzkaller0: entered promiscuous mode [ 337.266962][T14628] syzkaller0: entered allmulticast mode [ 337.477880][T14643] nbd: couldn't find a device at index 0 [ 337.595911][T14649] netlink: 'syz.1.2409': attribute type 10 has an invalid length. [ 337.633378][T14649] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 337.670533][ T5852] Bluetooth: hci2: link tx timeout [ 337.679806][ T5852] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 337.821039][T14666] netlink: 'syz.0.2416': attribute type 83 has an invalid length. [ 337.935381][T14672] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 338.266155][T14688] wg1 speed is unknown, defaulting to 1000 [ 338.836513][T14713] __nla_validate_parse: 16 callbacks suppressed [ 338.836530][T14713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2433'. [ 338.899726][T14715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2434'. [ 338.949192][T14717] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2433'. [ 339.119848][T14726] netlink: 'syz.2.2436': attribute type 3 has an invalid length. [ 339.407546][T14738] netlink: 'syz.2.2440': attribute type 9 has an invalid length. [ 339.743859][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 339.858473][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2447'. [ 340.566750][T14806] netlink: 'syz.3.2456': attribute type 33 has an invalid length. [ 340.607110][T14808] netlink: 'syz.2.2457': attribute type 1 has an invalid length. [ 340.628895][T14814] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2458'. [ 340.734620][T14822] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2460'. [ 340.755213][T14808] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.806980][T14821] bond3: entered allmulticast mode [ 340.815965][T14827] openvswitch: netlink: Tunnel attr 148 out of range max 16 [ 340.853485][T14808] bond3: (slave ip6gretap1): making interface the new active one [ 340.861484][T14808] ip6gretap1: entered allmulticast mode [ 340.871875][T14808] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 341.170196][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2466'. [ 342.248130][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2495'. [ 342.599659][T14933] netlink: 'syz.2.2497': attribute type 3 has an invalid length. [ 342.626966][T14933] netlink: 'syz.2.2497': attribute type 3 has an invalid length. [ 342.875020][T14950] dvmrp0: left allmulticast mode [ 342.880412][T14950] vlan1: left allmulticast mode [ 342.890840][T14950] veth0_vlan: left allmulticast mode [ 342.898103][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2502'. [ 342.902430][T14950] pimreg: left allmulticast mode [ 342.959928][T14953] netlink: 'syz.1.2503': attribute type 39 has an invalid length. [ 343.356993][T14977] netlink: 'syz.2.2509': attribute type 3 has an invalid length. [ 343.395932][T14977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 343.414400][T14979] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 343.422682][T14977] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 343.478219][T14985] xt_l2tp: invalid flags combination: 0 [ 343.554070][T14986] bond6 (unregistering): Released all slaves [ 343.934257][T15016] __nla_validate_parse: 2 callbacks suppressed [ 343.934280][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2517'. [ 344.150650][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2517'. [ 344.637098][ T6148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.645630][ T1083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.083935][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2528'. [ 345.747611][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.140762][T15077] syzkaller0: entered promiscuous mode [ 346.158326][T15077] syzkaller0: entered allmulticast mode [ 346.226424][T15082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.289865][T15089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2535'. [ 346.536993][T15102] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 346.560636][T15102] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 346.828311][T15127] netlink: 'syz.1.2542': attribute type 28 has an invalid length. [ 346.848274][T15124] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2544'. [ 346.872866][T15127] netlink: 'syz.1.2542': attribute type 3 has an invalid length. [ 346.880715][T15127] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2542'. [ 347.055975][T15130] wg1 speed is unknown, defaulting to 1000 [ 347.220487][T15148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2550'. [ 347.323339][T15151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2550'. [ 347.591172][T14172] udevd[14172]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 347.635701][T14172] udevd[14172]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 347.832621][ T6148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.894586][T15175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2557'. [ 347.904199][T15175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2557'. [ 348.211590][T15186] syzkaller0: entered promiscuous mode [ 348.245356][T15186] syzkaller0: entered allmulticast mode [ 348.277691][T15186] tipc: Enabled bearer , priority 0 [ 348.302012][T15185] tipc: Resetting bearer [ 348.352096][T15185] tipc: Disabling bearer [ 348.474941][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.856491][T15219] pim6reg1: entered allmulticast mode [ 348.919434][T15225] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 349.100956][T15236] __nla_validate_parse: 6 callbacks suppressed [ 349.101033][T15236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2572'. [ 349.143417][T15236] netlink: 'syz.2.2572': attribute type 7 has an invalid length. [ 349.153589][T15242] bond7: entered promiscuous mode [ 349.159723][T15236] netlink: 'syz.2.2572': attribute type 8 has an invalid length. [ 349.164113][T15242] bond7: entered allmulticast mode [ 349.170085][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'. [ 349.176883][T15247] openvswitch: netlink: EtherType 50a is less than min 600 [ 349.183463][T15242] 8021q: adding VLAN 0 to HW filter on device bond7 [ 349.614435][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2581'. [ 349.673879][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.684278][T15265] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2581'. [ 350.328548][T15300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2594'. [ 350.360034][T15304] tls_set_device_offload_rx: netdev not found [ 350.396582][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.471058][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2595'. [ 350.653810][T15312] netlink: 'syz.4.2596': attribute type 1 has an invalid length. [ 350.691177][T15312] bond7: (slave gretap3): making interface the new active one [ 350.699425][T15312] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 350.789772][T15315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2597'. [ 350.865375][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.151365][T15335] tipc: Enabled bearer , priority 0 [ 351.153814][T15329] netlink: 'syz.2.2602': attribute type 16 has an invalid length. [ 351.162215][T15336] tipc: Resetting bearer [ 351.186143][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2602'. [ 351.241522][T15332] tipc: Disabling bearer [ 351.451420][T15355] netlink: 'syz.1.2612': attribute type 1 has an invalid length. [ 351.542991][T15355] netlink: 'syz.1.2612': attribute type 9 has an invalid length. [ 351.559412][T15355] netlink: 'syz.1.2612': attribute type 11 has an invalid length. [ 351.581049][T15355] netlink: 'syz.1.2612': attribute type 12 has an invalid length. [ 351.613520][T15355] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2612'. [ 351.627447][T15363] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 351.982479][T15379] wg1 speed is unknown, defaulting to 1000 [ 352.298737][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2625'. [ 352.969171][ T3826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.992133][T15381] netlink: 'syz.1.2620': attribute type 4 has an invalid length. [ 353.051957][T15440] netlink: 'syz.4.2635': attribute type 6 has an invalid length. [ 353.373387][T15449] delete_channel: no stack [ 353.602093][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.111974][T15499] vxcan0: entered allmulticast mode [ 354.227118][T15502] __nla_validate_parse: 11 callbacks suppressed [ 354.227137][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2656'. [ 354.522185][T15521] pim6reg1: entered promiscuous mode [ 354.546364][T15521] pim6reg1: entered allmulticast mode [ 354.656736][T15523] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2659'. [ 354.857303][T15534] validate_nla: 3 callbacks suppressed [ 354.857324][T15534] netlink: 'syz.2.2662': attribute type 21 has an invalid length. [ 354.888930][T15534] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2662'. [ 355.511784][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.522391][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.995731][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.386888][T15537] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2663'. [ 356.609084][T15572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2673'. [ 356.709611][T15572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2673'. [ 356.873530][T15582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2677'. [ 356.889982][T15586] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2678'. [ 356.890519][T15582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2677'. [ 356.912034][T15586] netlink: 'syz.4.2678': attribute type 7 has an invalid length. [ 356.929748][T15586] netlink: 'syz.4.2678': attribute type 7 has an invalid length. [ 356.977436][T15590] netlink: 'syz.0.2680': attribute type 29 has an invalid length. [ 356.991394][T15590] netlink: 'syz.0.2680': attribute type 29 has an invalid length. [ 357.000875][T15590] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2680'. [ 357.188782][T15604] tipc: Enabled bearer , priority 0 [ 357.246003][T15608] openvswitch: netlink: Missing valid actions attribute. [ 357.264917][T15609] syzkaller0: entered promiscuous mode [ 357.271311][T15608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.288104][T15609] syzkaller0: entered allmulticast mode [ 357.353035][T15604] syzkaller0: mtu less than device minimum [ 357.366273][T15603] tipc: Resetting bearer [ 357.477281][T15603] tipc: Disabling bearer [ 357.640041][T15628] netlink: 'syz.4.2691': attribute type 4 has an invalid length. [ 358.061279][T15662] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20000 [ 358.078686][ T3826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.427959][T15690] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.441734][T15690] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.498788][T15690] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.518121][T15690] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.594713][T15690] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.606702][T15690] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.625059][ T3826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.636117][T15704] syzkaller0: entered promiscuous mode [ 358.641634][T15704] syzkaller0: entered allmulticast mode [ 358.707531][T15690] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.717986][T15690] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.847478][ T3957] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.870481][ T3957] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.928219][ T3826] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.940318][ T3826] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.963441][T15716] netlink: 'syz.2.2716': attribute type 1 has an invalid length. [ 359.043816][ T3957] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.052091][ T3957] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.080879][ T3957] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.089723][ T3957] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.106125][T15719] bridge_slave_1: left allmulticast mode [ 359.119866][T15719] bridge_slave_1: left promiscuous mode [ 359.133477][T15719] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.545837][T15752] netlink: 'syz.1.2728': attribute type 1 has an invalid length. [ 359.649360][T15757] __nla_validate_parse: 8 callbacks suppressed [ 359.649383][T15757] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2729'. [ 359.806986][T15764] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2732'. [ 359.885136][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'. [ 359.926857][T15771] netlink: 'syz.3.2734': attribute type 1 has an invalid length. [ 359.946533][T15773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2732'. [ 360.139138][T15783] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2737'. [ 360.231862][T15783] bond5 (unregistering): Released all slaves [ 360.630572][T15838] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 360.649075][T15838] bond8 (unregistering): Released all slaves [ 360.765619][T15855] ipt_REJECT: TCP_RESET invalid for non-tcp [ 360.849267][T15861] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2752'. [ 361.103662][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.191840][T15877] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2756'. [ 361.264583][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 361.274549][ T6148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.282714][ T3826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.443961][T15891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2762'. [ 361.472289][T15882] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2759'. [ 361.482440][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'. [ 361.552474][T15897] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 361.591718][T15897] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 361.634662][T15897] gretap3: entered promiscuous mode [ 361.644642][T15897] gretap3: entered allmulticast mode [ 361.674081][T15897] openvswitch: netlink: IP tunnel dst address not specified [ 361.765785][T15917] openvswitch: netlink: Flow key attr not present in new flow. [ 361.807923][T15908] bond5: ARP target 1.0.0.0 is already present [ 361.815483][T15908] bond5: option arp_ip_target: invalid value (1) [ 361.830296][T15908] bond5 (unregistering): Released all slaves [ 362.055365][T15932] netlink: 'syz.2.2771': attribute type 16 has an invalid length. [ 362.087877][T15932] netlink: 'syz.2.2771': attribute type 17 has an invalid length. [ 362.103970][T15932] 8021q: adding VLAN 0 to HW filter on device ` [ 362.241272][T15946] netlink: 'syz.0.2776': attribute type 3 has an invalid length. [ 362.241906][T15932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.263135][T15944] netlink: 'syz.1.2775': attribute type 13 has an invalid length. [ 362.271647][T15944] netlink: 'syz.1.2775': attribute type 58 has an invalid length. [ 362.315560][T15932] bond0: left promiscuous mode [ 362.320401][T15932] bridge6: left promiscuous mode [ 362.328928][T15932] bridge6: entered promiscuous mode [ 362.336634][T15932] bond3: left allmulticast mode [ 362.341520][T15932] ip6gretap1: left allmulticast mode [ 362.355408][T15932] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.378929][T15932] 8021q: adding VLAN 0 to HW filter on device bond4 [ 362.459722][ T6587] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 362.506005][T15948] SET target dimension over the limit! [ 362.520125][ T5905] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 362.529898][ T6587] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 362.585154][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 363.043088][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 363.066682][T15984] bond8: entered allmulticast mode [ 363.072193][T15984] 8021q: adding VLAN 0 to HW filter on device bond8 [ 363.158520][T15994] syzkaller1: entered promiscuous mode [ 363.165726][T15994] syzkaller1: entered allmulticast mode [ 363.190289][ T6148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.405524][T16005] netlink: 'syz.4.2795': attribute type 1 has an invalid length. [ 363.487672][T16007] bond9 (unregistering): Released all slaves [ 363.519558][T16005] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 363.802720][T16025] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 363.823498][T16025] bond9 (unregistering): Released all slaves [ 364.117674][T16042] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 364.228157][T16051] netlink: zone id is out of range [ 364.246836][T16051] netlink: zone id is out of range [ 364.257716][T16051] netlink: zone id is out of range [ 364.272886][T16051] netlink: get zone limit has 4 unknown bytes [ 364.464302][ T6148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.527562][T16071] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 364.598820][T16074] netlink: 'syz.4.2816': attribute type 9 has an invalid length. [ 364.701320][T16081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.776183][T16088] __nla_validate_parse: 19 callbacks suppressed [ 364.776204][T16088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2821'. [ 364.810907][T16093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.144710][T16107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2826'. [ 365.516157][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2836'. [ 365.678352][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2839'. [ 365.684717][T16151] wg1: entered promiscuous mode [ 365.698137][T16151] wg1: entered allmulticast mode [ 365.720743][T16158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2839'. [ 365.742011][T16155] tipc: Enabling of bearer rejected, failed to enable media [ 365.788481][T16160] netlink: 'syz.1.2842': attribute type 1 has an invalid length. [ 365.846937][T16160] bond9: entered promiscuous mode [ 365.855175][T16160] 8021q: adding VLAN 0 to HW filter on device bond9 [ 365.876677][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2842'. [ 365.886156][T16163] bond9: entered allmulticast mode [ 365.898430][T16168] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 365.908582][ T30] audit: type=1804 audit(1765267331.377:3): pid=16166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2843" name="/newroot/586/cgroup.controllers" dev="tmpfs" ino=2998 res=1 errno=0 [ 365.931455][T16168] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 365.943825][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2842'. [ 365.960362][ T30] audit: type=1800 audit(1765267331.377:4): pid=16166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2843" name="cgroup.controllers" dev="tmpfs" ino=2998 res=0 errno=0 [ 366.003988][T16174] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 366.044273][ T30] audit: type=1800 audit(1765267331.397:5): pid=16171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2843" name="cgroup.controllers" dev="tmpfs" ino=2998 res=0 errno=0 [ 366.080444][T16168] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 366.103283][T16168] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 366.172714][T16183] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2848'. [ 366.186047][T16183] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2848'. [ 366.197813][T16188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2850'. [ 366.216912][T16168] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 366.227780][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.236997][T16168] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 366.308931][T16168] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 366.335545][T16168] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 366.383276][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 366.383636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.402696][ T3826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.464604][T16195] netlink: 'syz.2.2853': attribute type 21 has an invalid length. [ 366.550420][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 366.570655][ T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 366.666350][ T3826] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 366.686258][ T3826] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 366.806141][ T3826] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 366.827159][ T3826] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 366.955437][T16168] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 366.987073][T16168] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 367.071728][T16168] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 367.118749][T16168] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 367.219930][T16168] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 367.243887][T16168] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 367.533585][T16254] netlink: 'syz.1.2867': attribute type 4 has an invalid length. [ 367.848082][ T5841] block nbd4: Receive control failed (result -32) [ 368.036539][T16282] netlink: 'syz.1.2876': attribute type 10 has an invalid length. [ 368.048950][T16282] dummy0: entered promiscuous mode [ 368.059118][T16284] netlink: 'syz.2.2875': attribute type 1 has an invalid length. [ 368.071724][T16282] bond0: (slave dummy0): Releasing backup interface [ 368.087215][T16282] bridge0: port 2(dummy0) entered blocking state [ 368.094517][T16279] nbd5: detected capacity change from 0 to 127 [ 368.123224][T16282] bridge0: port 2(dummy0) entered disabled state [ 368.129937][T16282] dummy0: entered allmulticast mode [ 368.179559][T16284] bond5: entered promiscuous mode [ 368.185270][T16284] 8021q: adding VLAN 0 to HW filter on device bond5 [ 368.209100][T16279] bond5: (slave bridge10): making interface the new active one [ 368.223185][T16279] bridge10: entered promiscuous mode [ 368.244876][T16279] bond5: (slave bridge10): Enslaving as an active interface with an up link [ 368.288870][ T5841] block nbd5: Receive control failed (result -104) [ 368.588453][T16313] netlink: 'syz.3.2882': attribute type 12 has an invalid length. [ 368.616806][T16313] netlink: 'syz.3.2882': attribute type 29 has an invalid length. [ 368.632924][T16313] netlink: 'syz.3.2882': attribute type 1 has an invalid length. [ 368.674010][T16317] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 369.017343][T16343] netlink: 'syz.2.2891': attribute type 1 has an invalid length. [ 369.312199][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.322900][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.334279][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.347317][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.357942][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.500316][T16354] wg1 speed is unknown, defaulting to 1000 [ 369.928939][T16384] net_ratelimit: 2 callbacks suppressed [ 369.928966][T16384] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 370.172248][T16354] chnl_net:caif_netlink_parms(): no params data found [ 370.187195][T16393] wg1 speed is unknown, defaulting to 1000 [ 370.207720][T16400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.232530][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.313980][T16401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.483786][T16400] __nla_validate_parse: 8 callbacks suppressed [ 370.483805][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'. [ 370.656052][T16412] netlink: 'syz.4.2908': attribute type 3 has an invalid length. [ 370.791022][T16354] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.808638][T16354] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.824048][T16354] bridge_slave_0: entered allmulticast mode [ 370.847098][T16354] bridge_slave_0: entered promiscuous mode [ 370.847394][T16427] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 370.871435][T16354] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.889770][T16354] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.898597][T16354] bridge_slave_1: entered allmulticast mode [ 370.912129][T16354] bridge_slave_1: entered promiscuous mode [ 371.070127][T16354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.107208][T16354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.260418][T16354] team0: Port device team_slave_0 added [ 371.289660][T16354] team0: Port device team_slave_1 added [ 371.428508][T16354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.434310][ T5852] Bluetooth: hci5: command tx timeout [ 371.436018][T16354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.467632][T16354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.482282][T16451] tipc: Enabling of bearer rejected, failed to enable media [ 371.484042][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2917'. [ 371.505126][T16452] tipc: Enabling of bearer rejected, failed to enable media [ 371.505206][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.543576][T16453] syz_tun: left allmulticast mode [ 371.548762][T16453] syz_tun: left promiscuous mode [ 371.554779][T16453] bridge0: port 3(syz_tun) entered disabled state [ 371.564400][T16453] bridge_slave_0: left allmulticast mode [ 371.570214][T16453] bridge_slave_0: left promiscuous mode [ 371.576689][T16453] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.644953][T16460] sctp: [Deprecated]: syz.4.2920 (pid 16460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.644953][T16460] Use struct sctp_sack_info instead [ 371.730956][T16354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.738552][T16354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.765672][T16354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.780032][T16457] validate_nla: 45 callbacks suppressed [ 371.780051][T16457] netlink: 'syz.3.2919': attribute type 11 has an invalid length. [ 371.795879][T16462] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2920'. [ 371.806923][T16462] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2920'. [ 371.839903][T16460] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2920'. [ 371.849152][T16460] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2920'. [ 371.981355][T16354] hsr_slave_0: entered promiscuous mode [ 371.988507][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.009602][T16354] hsr_slave_1: entered promiscuous mode [ 372.024432][T16354] debugfs: 'hsr0' already exists in 'hsr' [ 372.036065][T16354] Cannot create hsr debugfs directory [ 372.063385][ T3957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.191038][T16483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2925'. [ 372.224119][T16483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2925'. [ 372.293110][T16490] netlink: 'syz.2.2927': attribute type 21 has an invalid length. [ 372.347287][T16490] netlink: 'syz.2.2927': attribute type 6 has an invalid length. [ 372.376565][T16490] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2927'. [ 372.405205][T16493] team0: Caught tx_queue_len zero misconfig [ 372.413217][T16497] bond3: option mode: unable to set because the bond device has slaves [ 372.504983][T16354] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.641842][T16354] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.831506][T16354] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.890182][T16528] IPv6: sit1: Disabled Multicast RS [ 372.899490][T16528] sit1: entered allmulticast mode [ 372.965218][T16354] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.077639][T16532] bond6: option all_slaves_active: invalid value (222) [ 373.087581][T16532] bond6 (unregistering): Released all slaves [ 373.456000][T16561] syzkaller1: entered promiscuous mode [ 373.461652][T16561] syzkaller1: entered allmulticast mode [ 373.507509][T16562] syzkaller0: entered promiscuous mode [ 373.513218][T16562] syzkaller0: entered allmulticast mode [ 373.513824][ T5852] Bluetooth: hci5: command tx timeout [ 373.521653][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2944'. [ 373.994421][ T3957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.008124][T16354] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.057722][T16354] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.111712][T16354] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.125877][T16580] netlink: 'syz.0.2950': attribute type 10 has an invalid length. [ 374.161891][T16354] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.177695][T16582] IPVS: rr: FWM 3 0x00000003 - no destination available [ 374.459921][T16354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.510383][T16607] macsec2: entered promiscuous mode [ 374.524313][T16607] macsec2: entered allmulticast mode [ 374.544184][T16607] bridge0: entered allmulticast mode [ 374.566685][T16607] bridge0: port 2(macsec2) entered blocking state [ 374.588749][T16607] bridge0: port 2(macsec2) entered disabled state [ 374.625765][T16607] bridge0: left allmulticast mode [ 374.687150][T16615] veth1_to_bond: entered allmulticast mode [ 374.703080][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 374.793861][T16621] veth1_to_bond (unregistering): left allmulticast mode [ 374.847317][T16354] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.882500][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.889739][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.929685][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.936960][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.346374][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.528802][T16354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.588342][ T5852] Bluetooth: hci5: command tx timeout [ 375.645930][T16354] veth0_vlan: entered promiscuous mode [ 375.744233][ T5940] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 375.770140][T16354] veth1_vlan: entered promiscuous mode [ 375.836499][T16354] veth0_macvtap: entered promiscuous mode [ 375.878615][T16354] veth1_macvtap: entered promiscuous mode [ 375.918711][T16680] netlink: 'syz.4.2975': attribute type 1 has an invalid length. [ 375.933578][T16354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.998213][T16354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.038051][ T1092] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.055665][ T1092] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.081867][ T1092] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.099208][ T1092] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.123618][ T5940] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 376.157160][T16690] __nla_validate_parse: 6 callbacks suppressed [ 376.157179][T16690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2980'. [ 376.244558][T16695] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 376.319370][T16694] syzkaller0: entered promiscuous mode [ 376.335835][T16694] syzkaller0: entered allmulticast mode [ 376.370203][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.399919][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.592333][T16702] netlink: 'syz.2.2982': attribute type 29 has an invalid length. [ 376.610670][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2982'. [ 376.637351][ T6148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.657068][ T6148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.977393][T16716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2989'. [ 377.029236][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.263864][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.272991][ T6148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.467074][T16731] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2992'. [ 377.493438][T16731] netlink: 'syz.4.2992': attribute type 9 has an invalid length. [ 377.507642][T16733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2993'. [ 377.664618][ T5852] Bluetooth: hci5: command tx timeout [ 377.743388][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.759438][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.763945][T16742] nbd: nbd3 already in use [ 377.775316][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.794517][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.802239][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.862414][T16738] wg1 speed is unknown, defaulting to 1000 [ 378.483735][T16771] openvswitch: netlink: Message has 536 unknown bytes. [ 378.490942][T16771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.748363][T16738] chnl_net:caif_netlink_parms(): no params data found [ 378.778806][T16786] [ 378.781294][T16786] ====================================================== [ 378.788331][T16786] WARNING: possible circular locking dependency detected [ 378.795385][T16786] syzkaller #0 Not tainted [ 378.799823][T16786] ------------------------------------------------------ [ 378.806862][T16786] syz.1.3008/16786 is trying to acquire lock: [ 378.812945][T16786] ffffffff8f4576f8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x517/0x8d0 [ 378.822142][T16786] [ 378.822142][T16786] but task is already holding lock: [ 378.829513][T16786] ffff88802a2c8a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x152/0x8d0 [ 378.838761][T16786] [ 378.838761][T16786] which lock already depends on the new lock. [ 378.838761][T16786] [ 378.849256][T16786] [ 378.849256][T16786] the existing dependency chain (in reverse order) is: [ 378.858273][T16786] [ 378.858273][T16786] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 378.866280][T16786] _raw_spin_lock_bh+0x36/0x50 [ 378.871583][T16786] nr_rt_device_down+0x12a/0x720 [ 378.877053][T16786] nr_device_event+0x137/0x150 [ 378.882349][T16786] notifier_call_chain+0x19d/0x3a0 [ 378.887990][T16786] __dev_notify_flags+0x18d/0x2e0 [ 378.893604][T16786] netif_change_flags+0xe8/0x1a0 [ 378.899083][T16786] dev_change_flags+0x130/0x260 [ 378.904499][T16786] dev_ioctl+0x7b4/0x1150 [ 378.909442][T16786] sock_do_ioctl+0x22c/0x300 [ 378.914556][T16786] sock_ioctl+0x576/0x790 [ 378.919405][T16786] __se_sys_ioctl+0xfc/0x170 [ 378.924519][T16786] do_syscall_64+0xfa/0xf80 [ 378.929548][T16786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.935960][T16786] [ 378.935960][T16786] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 378.943891][T16786] _raw_spin_lock_bh+0x36/0x50 [ 378.949185][T16786] nr_rt_device_down+0xa9/0x720 [ 378.954559][T16786] nr_device_event+0x137/0x150 [ 378.959938][T16786] notifier_call_chain+0x19d/0x3a0 [ 378.965581][T16786] __dev_notify_flags+0x18d/0x2e0 [ 378.971152][T16786] netif_change_flags+0xe8/0x1a0 [ 378.976622][T16786] dev_change_flags+0x130/0x260 [ 378.982016][T16786] dev_ioctl+0x7b4/0x1150 [ 378.986882][T16786] sock_do_ioctl+0x22c/0x300 [ 378.992003][T16786] sock_ioctl+0x576/0x790 [ 378.996857][T16786] __se_sys_ioctl+0xfc/0x170 [ 379.001976][T16786] do_syscall_64+0xfa/0xf80 [ 379.007009][T16786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.013432][T16786] [ 379.013432][T16786] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 379.021347][T16786] __lock_acquire+0x15a6/0x2cf0 [ 379.026722][T16786] lock_acquire+0x117/0x340 [ 379.031758][T16786] _raw_spin_lock_bh+0x36/0x50 [ 379.037044][T16786] nr_del_node+0x517/0x8d0 [ 379.042003][T16786] nr_rt_ioctl+0x989/0xd50 [ 379.046968][T16786] sock_do_ioctl+0xdc/0x300 [ 379.052013][T16786] sock_ioctl+0x576/0x790 [ 379.056873][T16786] __se_sys_ioctl+0xfc/0x170 [ 379.061995][T16786] do_syscall_64+0xfa/0xf80 [ 379.067025][T16786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.073443][T16786] [ 379.073443][T16786] other info that might help us debug this: [ 379.073443][T16786] [ 379.083666][T16786] Chain exists of: [ 379.083666][T16786] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 379.083666][T16786] [ 379.097487][T16786] Possible unsafe locking scenario: [ 379.097487][T16786] [ 379.104960][T16786] CPU0 CPU1 [ 379.110326][T16786] ---- ---- [ 379.115689][T16786] lock(&nr_node->node_lock); [ 379.120463][T16786] lock(nr_node_list_lock); [ 379.127586][T16786] lock(&nr_node->node_lock); [ 379.134880][T16786] lock(nr_neigh_list_lock); [ 379.139564][T16786] [ 379.139564][T16786] *** DEADLOCK *** [ 379.139564][T16786] [ 379.147730][T16786] 2 locks held by syz.1.3008/16786: [ 379.152935][T16786] #0: ffffffff8f457758 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0xfc/0x8d0 [ 379.162356][T16786] #1: ffff88802a2c8a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x152/0x8d0 [ 379.172137][T16786] [ 379.172137][T16786] stack backtrace: [ 379.178042][T16786] CPU: 0 UID: 0 PID: 16786 Comm: syz.1.3008 Not tainted syzkaller #0 PREEMPT(full) [ 379.178063][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 379.178081][T16786] Call Trace: [ 379.178092][T16786] [ 379.178100][T16786] dump_stack_lvl+0x189/0x250 [ 379.178122][T16786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.178140][T16786] ? __pfx__printk+0x10/0x10 [ 379.178164][T16786] ? print_lock_name+0xde/0x100 [ 379.178188][T16786] print_circular_bug+0x2e2/0x300 [ 379.178210][T16786] check_noncircular+0x12e/0x150 [ 379.178231][T16786] __lock_acquire+0x15a6/0x2cf0 [ 379.178248][T16786] ? __lock_acquire+0x6b6/0x2cf0 [ 379.178270][T16786] ? nr_del_node+0x517/0x8d0 [ 379.178291][T16786] lock_acquire+0x117/0x340 [ 379.178304][T16786] ? nr_del_node+0x517/0x8d0 [ 379.178326][T16786] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 379.178345][T16786] ? do_raw_spin_unlock+0x122/0x240 [ 379.178365][T16786] ? nr_neigh_get_dev+0xbd/0x140 [ 379.178389][T16786] ? nr_del_node+0x517/0x8d0 [ 379.178409][T16786] _raw_spin_lock_bh+0x36/0x50 [ 379.178427][T16786] ? nr_del_node+0x517/0x8d0 [ 379.178448][T16786] nr_del_node+0x517/0x8d0 [ 379.178471][T16786] nr_rt_ioctl+0x989/0xd50 [ 379.178498][T16786] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 379.178524][T16786] ? apparmor_capable+0x137/0x1a0 [ 379.178547][T16786] ? capable+0x89/0xe0 [ 379.178560][T16786] ? nr_ioctl+0x1b1/0x3b0 [ 379.178579][T16786] sock_do_ioctl+0xdc/0x300 [ 379.178597][T16786] ? __pfx_sock_do_ioctl+0x10/0x10 [ 379.178617][T16786] ? do_futex+0x333/0x420 [ 379.178636][T16786] sock_ioctl+0x576/0x790 [ 379.178654][T16786] ? __pfx_sock_ioctl+0x10/0x10 [ 379.178672][T16786] ? __fget_files+0x3a0/0x420 [ 379.178685][T16786] ? __fget_files+0x2a/0x420 [ 379.178701][T16786] ? bpf_lsm_file_ioctl+0x9/0x20 [ 379.178715][T16786] ? __pfx_sock_ioctl+0x10/0x10 [ 379.178731][T16786] __se_sys_ioctl+0xfc/0x170 [ 379.178750][T16786] do_syscall_64+0xfa/0xf80 [ 379.178771][T16786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.178786][T16786] ? clear_bhb_loop+0x60/0xb0 [ 379.178803][T16786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.178821][T16786] RIP: 0033:0x7f24d598f749 [ 379.178837][T16786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.178851][T16786] RSP: 002b:00007f24d686f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.178868][T16786] RAX: ffffffffffffffda RBX: 00007f24d5be5fa0 RCX: 00007f24d598f749 [ 379.178880][T16786] RDX: 00002000000000c0 RSI: 000000000000890c RDI: 0000000000000005 [ 379.178890][T16786] RBP: 00007f24d5a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 379.178900][T16786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.178910][T16786] R13: 00007f24d5be6038 R14: 00007f24d5be5fa0 R15: 00007ffd7546f2e8 [ 379.178937][T16786] [ 379.481132][T16790] netlink: 'syz.4.3009': attribute type 1 has an invalid length. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 379.508392][T16789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3010'. [ 379.539206][T16790] 8021q: adding VLAN 0 to HW filter on device bond9 [ 379.586953][T16738] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 379.669176][T16792] 8021q: adding VLAN 0 to HW filter on device bond9 [ 379.713010][T16792] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 379.795277][T16792] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 379.823921][ T5841] Bluetooth: hci0: command tx timeout [ 380.063660][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.157058][ T3957] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 39826 - 0 [ 380.169030][ T3957] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 380.263487][ T3957] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 39826 - 0 [ 380.283095][ T3957] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 380.346399][ T3957] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 39826 - 0 [ 380.356755][ T3957] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 380.416680][ T3957] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 39826 - 0 [ 380.426800][ T3957] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 380.509153][ T3957] bridge_slave_0: left allmulticast mode [ 380.515993][ T3957] bridge_slave_0: left promiscuous mode [ 380.521740][ T3957] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.078426][ T3957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.087372][ T3957] bond_slave_0: left promiscuous mode [ 381.094425][ T3957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.103933][ T3957] bond_slave_1: left promiscuous mode [ 381.110654][ T3957] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 381.119954][ T3957] bridge_slave_1: left promiscuous mode [ 381.126976][ T3957] bond0 (unregistering): Released all slaves [ 381.137162][ T3957] bond1 (unregistering): Released all slaves [ 381.147071][ T3957] bond2 (unregistering): Released all slaves [ 381.156671][ T3957] bond3 (unregistering): Released all slaves [ 381.240459][ T3957] bond4 (unregistering): Released all slaves [ 381.311563][ T3957] tipc: Disabling bearer [ 381.317411][ T3957] tipc: Left network mode [ 381.654370][ T3957] hsr_slave_0: left promiscuous mode [ 381.662081][ T3957] hsr_slave_1: left promiscuous mode [ 381.668990][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.689358][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.704811][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.712241][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.724128][ T3957] veth1_macvtap: left promiscuous mode [ 381.729679][ T3957] veth0_macvtap: left promiscuous mode [ 381.899487][ T3957] team0 (unregistering): Port device team_slave_1 removed [ 381.941244][ T3957] team0 (unregistering): Port device team_slave_0 removed [ 382.003070][ T3957] bridge_slave_1 (unregistering): left allmulticast mode [ 382.267584][ T3957] IPVS: stop unused estimator thread 0... [ 382.321583][ T3957] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.371932][ T3957] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.424359][ T3957] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.482478][ T3957] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.585050][ T3957] bridge_slave_1: left allmulticast mode [ 382.590823][ T3957] bridge_slave_1: left promiscuous mode [ 382.600613][ T3957] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.616497][ T3957] bridge_slave_0: left allmulticast mode [ 382.622210][ T3957] bridge_slave_0: left promiscuous mode [ 382.634241][ T3957] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.768619][ T3957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.780091][ T3957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.790475][ T3957] bond0 (unregistering): Released all slaves [ 382.869327][ T3957] bond0 (unregistering): Released all slaves [ 383.245497][ T3957] hsr_slave_0: left promiscuous mode [ 383.251499][ T3957] hsr_slave_1: left promiscuous mode [ 383.258375][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.272566][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.280759][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.288282][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.298676][ T3957] veth1_macvtap: left promiscuous mode [ 383.304727][ T3957] veth0_macvtap: left promiscuous mode [ 383.310350][ T3957] veth1_vlan: left promiscuous mode [ 383.315758][ T3957] veth0_vlan: left promiscuous mode [ 383.467465][ T3957] team0 (unregistering): Port device team_slave_1 removed [ 383.494672][ T3957] team0 (unregistering): Port device team_slave_0 removed