last executing test programs: 3.794628914s ago: executing program 3 (id=2576): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x25, 0x3, 0x8) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0xa00000000000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(r1, 0x0, 0xa8fe, 0x40000002, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000890000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 2.540632333s ago: executing program 0 (id=2593): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x4, 0x0, 0x0, 0x1}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0x29, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1d, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x0, 0x8, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @hash={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @log={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_LOG_PREFIX={0x0, 0x2, 0x1, 0x0, '*]&\x00'}, @NFTA_LOG_QTHRESHOLD={0x0, 0x4, 0x1, 0x0, 0x800}, @NFTA_LOG_FLAGS={0x0, 0x6, 0x1, 0x0, 0x4}, @NFTA_LOG_SNAPLEN={0x0, 0x3, 0x1, 0x0, 0x6}, @NFTA_LOG_PREFIX={0x0, 0x2, 0x1, 0x0, '-\x00'}, @NFTA_LOG_PREFIX={0x0, 0x2, 0x1, 0x0, '%..&[/\x00'}, @NFTA_LOG_PREFIX={0x0, 0x2, 0x1, 0x0, '\xa4.##[#$.\x00'}, @NFTA_LOG_LEVEL={0x0, 0x5, 0x1, 0x0, 0x5d09}, @NFTA_LOG_PREFIX={0x0, 0x2, 0x1, 0x0, 'syz0\x00'}]}}}, {0x0, 0x1, 0x0, 0x1, @notrack={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv4={{}, @void}}]}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x0, 0x1, 0x1, 0x0, 0x84}]}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x0, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x88b5}, @NFTA_RULE_COMPAT_FLAGS, @NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x2f}]}]}], {0x14, 0x10}}, 0x74}}, 0x800) sendto$inet6(r0, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0x8, @mcast1, 0x2}]}, &(0x7f0000000380)=0x10) 2.402864078s ago: executing program 2 (id=2596): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x20000400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r1}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xfffffffffffffd1e, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x8c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000680)={{r6}, r9, 0xc, @inherit={0x98, &(0x7f0000000500)={0x0, 0xa, 0x5, 0x6, {0x4, 0x3, 0x8, 0xf2b, 0x123e}, [0x3, 0x8, 0x1, 0x3, 0xb2, 0x9, 0x5, 0x2, 0x7, 0x7fff]}}, @name="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"}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x22020400) r11 = socket(0x28, 0x1, 0x0) getsockname$packet(r11, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendmsg$nl_xfrm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x1, 0x2b}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) 1.819683804s ago: executing program 1 (id=2603): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x8}, 0x200480c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)={0x40, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}]}]}, 0x40}}, 0x20000000) 1.773386954s ago: executing program 4 (id=2604): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002b000701feffffff00000000037c00000c00018008000600ffffffff0c00028008000100", @ANYRES32=0x0, @ANYBLOB="2199b6bc374f1ff8a03dbc7999a6f8ff6a36d0869a02569d798fba13426d56f99ff27c33b7085e74ef5b86a1e51edc372077bd76a03419acd93093c2ea1fc41795e5088ee3932e3a34223de4c29b8c506439a303a5277b0770a22ad251be301391f4014e96c1f9b0ebdb4e79e028f40b80a666393cb66c92f4c26652ed0d331e878a532294c3c3a17b0b45c302c3ad6e7fa1ebed89b4e4b6d8a7af12086ef86839aedb69cf423f2b9f261c6651b58104bbc1d3a630876f4d66dd957a14468fbfd2c43e06b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4048091}, 0x8010) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000001d40)=0x421, 0x4) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.72319137s ago: executing program 2 (id=2605): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x2c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendto(r8, 0x0, 0x0, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601040000000000e31ae28ffb880d3bdd64000000000000000c0007800800114000000000050005000a000000050001000700000005000400000000000900020073797a310000000012000300686173683a6e"], 0x58}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast1, 0x20, 0xba08, 0xfffffc00, 0x1000}}) 1.619319789s ago: executing program 0 (id=2606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}, 0xfffffff8}], 0x1, 0x832b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) 1.531512428s ago: executing program 4 (id=2607): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000400)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x81, &(0x7f0000000340)={0x11, 0x0, r3, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r6, 0x9}, 0x8) sendto$inet6(r4, &(0x7f00000005c0)="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", 0x190, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x3000) sendto$inet6(r4, &(0x7f0000003380)='K', 0xfffffe42, 0x44008011, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) sendto$inet6(r4, &(0x7f0000000580)="b61006f2d8", 0x5, 0x4000810, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000003140)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x27}]}, 0x2c}}, 0x0) accept$alg(r7, 0x0, 0x0) 1.395276678s ago: executing program 1 (id=2608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xf0, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000240)) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) close(0x3) r4 = socket(0x2d, 0x2, 0x0) accept$nfc_llcp(r4, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x2, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x59) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 1.339362794s ago: executing program 2 (id=2609): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendto$inet(r4, &(0x7f00000001c0)="f565076fb83d94b51387a7e17db080e0f7a633124eb434feecde3a0a59928080733609d629157e94d26031e3405d3814558a739e219120a929aa15346235d7785f7e0d089589df7035", 0x49, 0x50, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r6, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000380)=""/185, 0xb9}], 0x1}, 0xb}], 0x1, 0x40012163, 0x0) 1.328963113s ago: executing program 0 (id=2610): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket(0x1d, 0x2, 0x6) bind$can_raw(r1, &(0x7f00000000c0)={0x1d, 0x0, 0x900}, 0x10) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x4080, 0x4) (async) getpeername$l2tp6(r0, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/18, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0], 0x30}}, 0x0) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14, r3, 0x405, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (async) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getaddr={0x28, 0x16, 0x20, 0x70bd2a, 0x25dfdbfc, {0xa, 0x1, 0x21, 0xff, r4}, [@IFA_FLAGS={0x8, 0x8, 0x492}, @IFA_FLAGS={0x8, 0x8, 0x10}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\t\x00\x00\x00\n\x00\x00\x00B\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x2, 0x4) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r7}, 0x38) (async) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001200010a00000008"], 0x14}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r7}, 0x38) (async) socket$netlink(0x10, 0x3, 0x15) 1.279153463s ago: executing program 4 (id=2611): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010400000000000000000800000010001a800900010073797a3100000000"], 0x24}}, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 1.170197956s ago: executing program 1 (id=2612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x11, &(0x7f0000000080)=@raw=[@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, @ldst={0x1, 0x0, 0x0, 0x7, 0x9, 0x8, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000140)='GPL\x00', 0x9, 0x1000, &(0x7f0000000180)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180)={0x5, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000011c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001200)=[{0x2, 0x3, 0x5, 0x2}, {0x4, 0x1}, {0x3, 0x4, 0x3, 0x2}, {0x1, 0x3, 0x10, 0x5}, {0x5, 0x1, 0xa, 0xa}, {0x3, 0x5, 0x1, 0xa}, {0x1, 0x2, 0xa, 0xc}], 0x10, 0x8}, 0x94) ioctl$int_in(r1, 0x5421, &(0x7f0000001340)=0x80000001) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001380)={r1, 0x3, 0x46b1, 0x6}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000013c0)={0x0, 0x2bf, "e5eceb", 0x55, 0x46}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001400)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001400)={'team0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', r3, r2, 0x4, 0x1}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', r3, r2, 0x4, 0x1}, 0x50) pipe(&(0x7f00000014c0)) (async) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001500)={'veth0\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001500)={'veth0\x00', @broadcast}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r4) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r6, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x53}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xce2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r7 = getuid() setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001680)={{{@in=@local, @in=@multicast2, 0x4e23, 0x1, 0x4e21, 0x7, 0xa, 0x20, 0x80, 0x1, r3, r7}, {0x0, 0x5, 0x10, 0x6, 0x2, 0x5, 0x2, 0xce7}, {0x0, 0x5, 0x100000000, 0x4}, 0x69, 0x6e6bbb, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x4d6, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x4, 0x3, 0x4, 0x7fffffff}}, 0xe8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4008001) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000001880)) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000001900), &(0x7f0000001940)=0x4) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, &(0x7f0000001980)=""/40, &(0x7f00000019c0)=0x28) pwrite64(r0, &(0x7f0000001a00)="ee7137e9472afc8454911c81124e3f497be5cf25fdb955b80ff2280aac3fcf6fae64660679c58909a279206bc553b314d7f9c0d5ca5ee33cde71c74ad85dcdc7ee39d276d2d4ae6307d7332439369647b339a27763bda35d4dd214157cf5f6733e416bf38785efee8aba4073d243d4a62a839cb63ef250eca65f593611c04f9a73893349ff61bc9164", 0x89, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001b00)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x58, r6, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20000003) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001cc0)={{r4}, &(0x7f0000001c40), &(0x7f0000001c80)='%pK \x00'}, 0x20) setsockopt(r8, 0x1, 0x100, &(0x7f0000001d00)="c0f3a3d4b0aa6daafeaa8e9623eae117c6fe2fd37f070dd2d5461749af81f89254d06e703d8909f62d320ee0dc8378aff90c9cfd97d118dc57c29381a39690a30b90ef929336e17c8cc22aca6610d7309d76c0fa00167d771b374a94793eda5a87655f3fbcc3e687be17195cde51cf3b444e82b127a32e8b261d538303133dc1aa266022d276cc16d1af812456905a70a02f58ae6f75cd22e1d1325378eaefad5c", 0xa1) (async) setsockopt(r8, 0x1, 0x100, &(0x7f0000001d00)="c0f3a3d4b0aa6daafeaa8e9623eae117c6fe2fd37f070dd2d5461749af81f89254d06e703d8909f62d320ee0dc8378aff90c9cfd97d118dc57c29381a39690a30b90ef929336e17c8cc22aca6610d7309d76c0fa00167d771b374a94793eda5a87655f3fbcc3e687be17195cde51cf3b444e82b127a32e8b261d538303133dc1aa266022d276cc16d1af812456905a70a02f58ae6f75cd22e1d1325378eaefad5c", 0xa1) sendto$l2tp(r5, &(0x7f0000001dc0)="062cb13a46e738dbc748d058e09496ce05fcd9c6f5ed4177ad085639246fd3e3f576e4f2b79050bc08216e818a11654c7fbebc61661fd178d18cf8419442a193c7904b5cf0047cbb572e34ef6f893e5a25e976ced573563332a38e752a826e33136bf163300f27efd279f7d85a8c5f33ac7109f67e0abe8e424534d589aed6e3bcb08704efc5522fc73694926ad704b8dccd077f7c435d3c590bac390ac377554246a80eda3d628d88ada2ef48f7", 0xae, 0x20004085, &(0x7f0000001e80)={0x2, 0x0, @multicast1, 0x2}, 0x10) (async) sendto$l2tp(r5, &(0x7f0000001dc0)="062cb13a46e738dbc748d058e09496ce05fcd9c6f5ed4177ad085639246fd3e3f576e4f2b79050bc08216e818a11654c7fbebc61661fd178d18cf8419442a193c7904b5cf0047cbb572e34ef6f893e5a25e976ced573563332a38e752a826e33136bf163300f27efd279f7d85a8c5f33ac7109f67e0abe8e424534d589aed6e3bcb08704efc5522fc73694926ad704b8dccd077f7c435d3c590bac390ac377554246a80eda3d628d88ada2ef48f7", 0xae, 0x20004085, &(0x7f0000001e80)={0x2, 0x0, @multicast1, 0x2}, 0x10) pwritev(r1, &(0x7f0000003300)=[{&(0x7f0000001ec0)="021df9a4f779a050b388ed74754336bacad64019fe0ae956562ad194100a4e2f4dd558ae4b5626683e08aec9ebedf576657cbfab4c70b43fe2e9e59bb0d44933f7731067b992a11a29f3e2522a6a72b3f6dec0220642844813c311df796902e761585024e17ff0c25d4ab9f85d5a922edcade8330240ea94f22e1cbd523656ebc92806fd9b2da44699dcd65f6138c72beb1d686d7bd7975583dd2edf2f295705e679ff1a5872fdefe577068123ee5324793c3de9cee82ba23d725718d10652658060bf1775a4fab8d828c620207b4df9fd674b06ecb3520c84cbf9b1728fbab64727bbce25d59ad9fd61dbb99f3a6f9a82fc1cdc1fe0faa4", 0xf8}, {&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="0b834e9bc2092fb5d8721ca808d7ac239cb7175fa28abf32fbbc4af5df6964cb731640c373b9c699d975677d0d1f79a82790fef0bf015c7aa535546839657566e90e74b070b23e5eda4cd9ddb48c1a8fff144877c143b28431442d69cc40c73a4015dc60792d61c900e8e974be6d0c8bb770efe27e5d20bec9e791f4abca0a", 0x7f}, {&(0x7f0000003040)="c7a0bb33fa84c680341cb9f38cbcac84dda74460040c4e0e2487ca990a8b7b2f434eb7e2855d8e7e70594f9cb7905b2edfad72ebb63534fb0ebdadcf4eaa0faaf41a4fa92892bbe35aee21ad40aff8aae25de2a3b02cbf274cb78e156fa80c18bfce881dc2c45f18667bf12a85", 0x6d}, {&(0x7f00000030c0)="958f0a932c1f186a32792a400703e4bad1d21e380e70c60ed3adc0713b2ec9fbf781865ffc038fa71e7087770a098e6937f2cf913fbe3d784d75444cc30353d6956861cc8b6ad46c7b30a776c3502bc97c08836d86cfc9e3b82698532f3e1f68819d267f89a46a0763c720a4eab8878429689fe65e3c5ab9fe5c39f37467036167b9afe161cc08bc76a5cf81ec1ad9b49921c70d612db268ecb70db45c41f6441e0a0716164c24eb", 0xa8}, {&(0x7f0000003180)="03149c41f734007a948dbcc6886934025caa4d8d13b00f6c59da1184154832f7e6b0ea05b1e4980211bf88d0d79837f254996bfedfaa2b51820048c350593748b17afe5a077005b575637cb73c046270e63b495a993aea425832c22ae77f4993ed4450b438b0c10f05", 0x69}, {&(0x7f0000003200)="b1643f9640f076b56b809f6d2eef1d479eb8a03a52a9a8b9ceb58d0a7c0cbb62844cfd9fe99767988a5f12", 0x2b}, {&(0x7f0000003240)="307dcb296eb19fc425ec685a8b513d09e7b680b6313ad60e145d0a41b6969b81b643279ed03a11d33bc16d0443a75635611786af6c9fccc7876f9fe3ccf25f1859f8a5afdec69dbee87e4324da72757a3a416f3983c5492913aad7a558232387066306d0251d821b45506bf58fbc4675f199fdc96a26839214b08a6ef6442c19bf01f3f13574c996", 0x88}], 0x8, 0x1ff, 0x6) bpf$ITER_CREATE(0x21, &(0x7f0000003380)={r2}, 0x8) (async) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000003380)={r2}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r11, 0x6, 0x1d, &(0x7f00000033c0)={0x3, 0x400, 0x6, 0x4, 0x8}, 0x14) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r11, 0x6, 0x1d, &(0x7f00000033c0)={0x3, 0x400, 0x6, 0x4, 0x8}, 0x14) ioctl$AUTOFS_IOC_PROTOVER(r11, 0x80049363, &(0x7f0000003400)) (async) ioctl$AUTOFS_IOC_PROTOVER(r11, 0x80049363, &(0x7f0000003400)) 982.769822ms ago: executing program 1 (id=2613): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10}}, 0xa4}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, 0x24) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 879.244294ms ago: executing program 4 (id=2614): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x1, 0x103, 0x1}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x81, 0x6, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x10, 0x7800, 0x3, 0x2}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="e702d3a87000fedbdf36e3733700080034000200000008000600", @ANYRES32=r6, @ANYBLOB="08000600", @ANYRES32=r7, @ANYBLOB="05003700010000000800340008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe8000000000000000000000000000bbc9100000000000000000000000000000000107200000000006000000bb2c0000000000000000000000000000000000000000000000001800000000000000290000000400000000000000000000000801"], 0x180}, 0x0) 772.732096ms ago: executing program 3 (id=2615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000040)=0xc, 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) 658.795514ms ago: executing program 3 (id=2616): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x604ab000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x1, 0x0}, &(0x7f00000002c0)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x1, 0x0}, &(0x7f00000002c0)=0x40) 523.343199ms ago: executing program 3 (id=2617): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x7fffffff, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800005, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 450.87754ms ago: executing program 3 (id=2618): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001400030500008000ffdbdf25020751ff", @ANYRES32=r2, @ANYBLOB="080002007f"], 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r5, 0x3a, 0x0, 0x0, 0x2000005d) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="2a00e74dd59106e1d5a844b631500ae81e1714a5d1e77828fd4910afb3db6c9b0bfa460faad3ac0f7c33cf017957ee00"/62, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000072442756028005001d0000000000050001000400000005001559cb6f779d60c20492ef4a8ed58de0ec1c211043c5f2577a821a9add073201f2f903b615ac675a2baae132d3a93c9e7b0a87defda74862811a9391e563227c6c9b0c96f2519b75cc8036b62c0537e189f3dd7b85ec"], 0x4c}}, 0x0) r7 = socket(0x1f, 0x3, 0x4) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000000340), &(0x7f00000003c0)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xf1d1, 0x7, 0x6, 0x8, 0x1]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008800}, 0x80) poll(0x0, 0x0, 0x7f) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000100000022"], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r11}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r12, &(0x7f00000001c0), &(0x7f0000000600)=@udp6}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xfec7, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2b, 0x0, {0x2, 0x18, 0xd, 0x0, r9}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0xe}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x48}}, 0x0) 404.056007ms ago: executing program 0 (id=2619): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf20}, 0x94) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0xfff9, @remote, 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r1, &(0x7f0000001dc0), 0x213, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0xf, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0x3, 0xb, 0x9}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f0000000280)='GPL\x00', 0x1, 0x4f, &(0x7f00000002c0)=""/79, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xb, 0x3, 0x1000}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000003c0)=[{0x1, 0x1, 0xb, 0x9}, {0x4, 0x1, 0x4, 0x2}, {0x2, 0x3, 0x5, 0x3}, {0x4, 0x5, 0x4, 0x9}], 0x10, 0x1}, 0x94) 319.066578ms ago: executing program 4 (id=2620): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x14, 0x2, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0104000000000000000002000000600004805c0001800b00010065787468647200004c00028008000540000000e1080001400000000f080003400000005b08000440000000b605000200830000000800074000000009080001400000000108000340000000fe08000340000000540900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x4, 0x35, 0x71, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x20, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0xe, 0xc5, 0x4, 0x0, @loopback, @local, 0x80, 0x20, 0x7fff, 0xece}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000090280500140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r7], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x0, 0x7fff, 0x56, @remote, @loopback, 0x7, 0x709, 0x0, 0x9}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="e8020000000000002900000004000000", @ANYBLOB="9b64d9"], 0x2e8}}], 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x20, 0x10, 0xb, 0xe6, {{0x2d, 0x4, 0x1, 0x20, 0xb4, 0x67, 0x7, 0xfa, 0x4, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x1f, 0x61, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @broadcast, @broadcast, @private=0xa010100]}, @ssrr={0x89, 0x13, 0x54, [@private=0xa010102, @local, @private=0xa010101, @private=0xa010101]}, @noop, @timestamp={0x44, 0x1c, 0xab, 0x0, 0x9, [0x4, 0x0, 0x9, 0x8, 0x2bb7, 0x3]}, @end, @timestamp_prespec={0x44, 0x2c, 0xc7, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfab}, {@multicast2, 0x1}, {@remote, 0x10001}, {@local}, {@broadcast}]}, @timestamp_addr={0x44, 0x24, 0xd7, 0x1, 0x3, [{@local, 0x4}, {@multicast1, 0x5}, {@multicast1, 0x1}, {@broadcast, 0x6}]}]}}}}}) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=r11, @ANYBLOB="0008000007500500de9b3b08006e0294f6041044460e7e6bb10dec1c0012800b00010062726964676500000c00028005002d0000000000d30ae38f73cce7e448490f9168f1271af74373f4560c962bcd92d9ab527e4e016a37dbc94ff9acb0a25a575ea18dabd6d8d67d0961eaa4e427c1183c084c8ab22f5451a1db8c8fa507423ed2b44f118a7f5aeb000428539b536169ca2fe7a44dc0ae3e"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) r17 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r19, {0x0, 0xfff8}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c044}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fedbdf250b00000050000180080003000200000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000000000020000900000030b22b1993866514adaba15843ac767430350d75d85ec61c406b96425d00f1cf83cde56a9c73b45d04ede0f4de31a4487f95bf3ac5b8bdb831f53e083f3e8344acf85d08461cb30d1e031ca4d9fd1133fe4eadf60a027489a32d15dba42345f61fd20c0b8612ad4e52167fbe25f379e0d2cf006034543dd05b32e81e053d456798bae8a022359b4fc7f203b862481384026a6837e8d91d5e213d4c7789ee4788444b63cd4f44", @ANYRES32=r4, @ANYBLOB="140002006e657464657673696d3000000000000008000100", @ANYRES32=r7, @ANYBLOB="080003000100000018000180140002007866726d3000000000000000000000001c00018008000300030000000000020076657468305f6d6163767461700000000800030000000000440001801400020076657468315f746f5f7465616d0000001400020077673100000000000000000000000000080003000200000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="38000180000003000200000008000100", @ANYRES32=r13, @ANYBLOB="080003000300000008000100", @ANYRES32=r14, @ANYBLOB="140002006272696467653000000000000000000064000180080003000100000008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="140002007465616d5f736c6176655f31000000008dfe0300030000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000200001801400020070696d7265670000000000000000000008000100", @ANYRES32=r20, @ANYBLOB="2800018014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000"], 0x1c0}, 0x1, 0x0, 0x0, 0x20048005}, 0x40000) 318.627352ms ago: executing program 2 (id=2621): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10003, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x1406, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@newqdisc={0x154, 0x24, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x1, 0x2}, {0x1, 0x3}, {0x10, 0xffff}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xeb89}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x81}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x40}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x33}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x295e}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x154}}, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000580)=r3) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000005c0)={0x0, @broadcast, @remote}, &(0x7f0000000600)=0xc) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'gretap0\x00'}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000006c0), 0x10) connect$netlink(r2, &(0x7f0000000700)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000740)={0x50786158, 0xfffff68a, 0x0, 0x80000001, 0x5}) recvmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f0000000780)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000800)=""/224, 0xe0}, {&(0x7f0000000900)=""/24, 0x18}], 0x2, &(0x7f0000000980)=""/176, 0xb0}, 0x9}], 0x1, 0x10001, &(0x7f0000000a80)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x29, 0x4, 0x70bd2d, 0x25dfdbfb, {0x3}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r6 = socket$netlink(0x10, 0x3, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xe4, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xae6b}, @CTA_LABELS_MASK={0xc, 0x17, [0x4, 0x7ff]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc08}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x600}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x44000}, 0x90) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000d80)=0x8, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), r4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) accept(r0, &(0x7f0000000e00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000e80)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) bind$packet(r7, &(0x7f0000000f00)={0x11, 0xf7, r8, 0x1, 0x3, 0x6, @random="3cbc315efda7"}, 0x14) r9 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r9, &(0x7f0000000f40)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) 296.393179ms ago: executing program 1 (id=2622): syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@srh={0x2c, 0x0, 0x4, 0x0, 0x3, 0x0, 0x365}]}}}}}}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000), 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120005001600010000000800150000c422"], 0x48}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@srh={0x2c, 0x0, 0x4, 0x0, 0x3, 0x0, 0x365}]}}}}}}}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) (async) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000), 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120005001600010000000800150000c422"], 0x48}}, 0x0) (async) 229.964271ms ago: executing program 2 (id=2623): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) nanosleep(0x0, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x1, @bcast, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1ff, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x1}, 0xff}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 183.203138ms ago: executing program 0 (id=2624): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001a80)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000001ac0)='devices.allow\x00', 0x2, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044010}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f00000019c0)={&(0x7f0000001080)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001900)=[{&(0x7f00000011c0)="cd57e8cd8b798786dce5b053beca24d78638f97afc3f41789cd14b84565d3a83861d215ea813b98b1a575bdba8de48159e03f17a64e56f89d536e0a4d4f6f2af783e4e9b4f84209fa6ce0cf44178427403c19c314eca22193d97c1c3985fdb6fad016d20ae29b5807a611b2e8339b3611384391a7c0d15b3b7d2f17fe8c8bab6c53f9660be696a3d93bf630d6a02bdb4cfff3a7c6ad071af7f4ae75ba526f296fa532971e2e6df795ef6bd31d557bfb5343b92e40a4b8e93d82651f1a520876466012b1f139add99cbac6477e75eab8ecd6aba417739490106e5cbb1", 0xdc}, {&(0x7f00000010c0)="e951b9c1f1344a8fb82376290dcef3294b2fd78147f8c0cff9b97903ed38ab172ca946e6e26df955ec1d417c5f587b474788f0e05dd9807073594fdc7448cd62cdd7e4b749c926b6479b7bca79017543a1", 0x51}, {&(0x7f00000012c0)="63da211b1dfbedc2a0379b5b0a1069b22db714b235f767fb4b034953232f4d5331d67d0ecc15a2d4a76fbba27fad8d2d7e80c972aaaca77ea98e3a285b3a63a005a45901157cee4fba0e6b36237397d981e1c1bdc74ffd8cd0e465fe6d8458b15117e931a441bdcbc0ebf1a8fc64b0e0556fd2adbfd3df4a1aa078b1af141b793e6de2ebbf02f59c46c396d2ea102ea7db5e064325aa21841755344df778e4b07db6be16f6020e7375a70208d8e62497de811d0314b4c3a83ed42dd10d61075e389708a7688a2e06c1b33a9f8edbb95ca08d4439e01383969b89f884da87dc92144290c3396b7e7d940837eaba16c36350b61352e147272a7f", 0xf9}, {&(0x7f0000001400)="5bab7e4606822f0a3e9e0e28e0837d560c085dfccbadf6f046ffe245b4269fc8eceb582e17f31a6d3beb4542719e9826207a181bdfab5e04ebb1c6f69272949328b7a60829bec2420e7bf82bd4", 0x4d}, {&(0x7f0000001480)="af795bc249195de51c6dd7caf8985781d52764123d66504b92fe2fa161c7d71577acd2f401d53888d8724eb20c392d65abbd00e12f1f91ebeb5694a2e27a7be75fb0823c2867226366201d23207f77f8e66f494823e973b9fbf89ba06ddf0fea12370e456fe621fba9b6661bdd7765b7d7d821a102aff2cd825f9b1e4d65c7c4cc618a78401f7682055f475fdc1972efd4ca6d9e66eb1bd7110765743cbc105ceadbb2fba6af20298fe6d0f565f3b4c5b724d105da89ff1559c613d8f2", 0xbd}, {&(0x7f0000001540)="9e156d6f7a5012e72eb5c81bf7d4adc885e489a4f58b7df0a9bf03d07d5f3dcb7233d13a9b1049068b7d67a49bece6e0ae115b76f55f1cd15e3a8e3a3e60d4616b0d6f", 0x43}, {&(0x7f0000001600)="740add8946712d4a4a6a602072bf9d6a347ae0092f770193f361913fd992c951198642fafa7ba5aa1afa45c40004ca7fe4049e7a47f521c8dbad1239ea7f62f8913c9792d43d301da2d722c25088e0", 0x4f}, {&(0x7f0000001680)="df5470d8318bb69b6c7d48cb29e5a63b08f9846c85d3de7d6e6be8605d5818c53d67812707ce20611b88b97710d45cb1a061aab6bec51676", 0x38}, {&(0x7f0000001740)="c9e5220b3584fbfc8e2373eb5d00027249fc6c2f4182338c7cc9700907d4cf8b30b264c6162c9d59459d68fb8dacdcbbb086f88c14c91c6f52ad1f6984a4a573a50683f77a715cbc89cf31743ba33e40293139c55e032d569f5975e417524ec6e67d2cd3827209fbfcadd2d7a0f77274ab2c09b2fd1985650d6098ad2f0de9537572005ab3a8ecb227f5aaa05772bd1d3e6d935a7a7ac34ee49ea05ce04ce96df086e3bf5571883c6b193ed03b755de0e0af2883cfb66470da68b55b0464b941133d253ba0b78fbda944f9db51517e8599a13e6785a5b71e6870", 0xda}, {&(0x7f0000001840)="c2d18f86327a31393a389be5335de9552a415fe93695e0f0388b198d603434cc1f1c6ae896a2c0470834048d303aad75275b24033008867155a21e1c0e9b6cd2cc4a4b963270262a391dd3fa5cd95b1b3fe314fa17d3606fcc92b936bc021fd366ce7dbd5f79c50f74653bbdb774e435e52f1eb3c57c05fddab9bc99a34121490511dda6154d11d66569a1", 0x8b}], 0xa}, 0x1) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a00)=ANY=[@ANYBLOB="140000001600010000000000000000001a0000006842ff60ef62988fc5c8784f352b1e0bc42c5d57a5d6db4c447a59cec684e888687108a9fca272253cfc6112caff0000007d93cc44dc6cce131e240900cfea4bd2d92cd858001e7f4dd1d3d53fcbfae10a449faf3b3c17c712d4aa1263b12f"], 0x14}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000e000000000000240012800b0001006d616373656300001400028005000c000100010005000b"], 0x44}}, 0x0) 101.422473ms ago: executing program 4 (id=2625): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x2}, &(0x7f0000000140)=0x28) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001800)=ANY=[@ANYBLOB="30000000121401000000000000000000080003000000000008004f0000000000080001000000000008004b001300000055b2fc01ffe9676a341813e089dcb709ec493371a7acf52319cc314cd3b06b10690a2c4b557d88706982caafc7af690c5a2f4d11864ac07f4c1d871fec04bec0aec3bdd54ee2eecae9d360a1a61bb66466ad0cfbb034e46bd3f6326b256e847c36f49d7247098cddcfc2118908690b3aa223f117b2e3dd216a5b1faecde4ff9a8b60123f409ccc8b1dc449ff5f1b5240"], 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, 0x0, 0x0) r9 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r9, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000010000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xfffffdba, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) socket$kcm(0x29, 0xa, 0x0) r10 = socket(0x1d, 0x2, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x2, 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="85000000eb6300009500b3fb6e074ea25e58b957c0000000004c9f010000000000000099817a32fde900697956ffe09356839abc2bee9baf", @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYRESOCT=r10, @ANYRESOCT=r4, @ANYBLOB="571ca7bd3df959eb04a77eaa35dd06ff34f629794c663d1874f7d6338f51fa1dc192541bf31d71d84bfac627b477a1576f03da8e3085ade873294c5c070913181ca1aa366823e1e262d6e3fdd222db91bd750cbff98c56e352093595d9621dc51809b6c7538ecde88f1e195da7e1751bc84b0a863534087206135e189beb7466dfcdc25b135bada79241f0b6d236e4eece37d5375d741ac9a459146d3cde2a3e16b6ab160773c72f7f922779f463414c5d83291278a125c44a27fcf4cb0bb3efe385ea2c6a6e8c303c83184820fb3142ba", @ANYRES32], &(0x7f0000000840)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x2a}, 0x94) sendmmsg$inet6(r9, &(0x7f0000001680)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0xd6, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="b67b618f99aa05a346105fa2915b5f4c31250880b3c51aa625c416d5fe9ed5fd2bf5", 0x22}, {&(0x7f0000000380)="27f5a7803687237e4dbcf1a14cebc2170baf25af4cc2fa3b67be52601dd554af5d217bab1f790a82e577d742de4c2a2394abc5c5f0082ca7431c5e86", 0x3c}, {&(0x7f00000003c0)="555ec9e80143795995b7763d4dbdf9aa68984d66617a86ee9a618425efe97688e9", 0x21}, {&(0x7f0000000400)="a829d7961fb65c68cf74f256f2a90c7bd148c859cfd7502975f5b5a61114d8ae3b81bf3d7ad266ebc823c68bac6c306f1c65ff103ee12aad3fd8bd98b06fdf782beb999ca9dc4c6050b132cc02cafe", 0x4f}, {&(0x7f0000000480)="f0aa392d5e363cf7b59dc3e7652d5b463adc2058d0a96e9a9c8a49e1b2875afcc817e5c6ed38e3df73fe5b762396f3c5d894482d71280a1f3d5dcdb4a5c84c11e060eeef1828a810780475c4a485302525f080e1b4bf64fafd9942c864bfd961422b1443933cb78b924ef6c6f66b00d77ec505f170b0d262a43542d1c318c505972ff25c7b63febe6b538c6ece027fa1e933e01118c8", 0x96}], 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x188}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)="44852f74b7f0ab0ae014ba959a5231d916eac6ec8bb3529bc643c77477f462dc24fdb42584d6ad9fc32f78288d89e36f92d3ed7fcc9dc0cf064a137e37162c1bf0f6c0fbaa09b6744e15ab2b7bdcf400785696a986", 0x55}, {&(0x7f0000000880)="fc2f865e9fde8f4173c528a6c48753f259fab08211b9dedb09e6c3ae4d2865a758c23a65a975f3388b353f105915664428b714b125cfb07390e33487f040c875ca8d40ee9b2f988261c6940d72cc02ad9c", 0x51}], 0x2}}, {{&(0x7f0000000900)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x474}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000940)="1e466991bff3850fc11c09859618a27a51be010bb5e4be2b4419ec86f7c98775733ebc723534275790b14e0a34ad927ae2066b744dcd4e1ecbf62850251e97fe28cd40ce71adf61f515eed73778bef1aee6a7534a028649dd2d3c349cbd805542b35c961e4d6434d4c5dc7d67eee001011428f0f311c97ea5209615263f18a4a619bfbdc2f232d6de0a7c87f36d964d69e9f0b4f03379764eab31f21c5eb7529b2a3c312dd92bf3889325fe2d2c107a651d702e93ad30406c5c42e272e3c7f33b827d119e801ea9b8d53dad183e0f75971", 0xd1}, {&(0x7f0000000b00)="2675d4dd80ad3a621a0d924b8651ea14546f425be41f3035243098415f71b1b17e5ea672643780f197030672a57f25b5e505a733e5689cabc1d5f099c8095950b8474462aff91664179fa4218f413b0942b721fa522f8da1281b5e9a758508bebc083925b2ed5468c0061f4dc500b3d537aaa98ebceaced4e6ce32be2a5cbf7faeb9220048760716fec9349ca3f6aa954d463d5964684aab1b82e64813042935257b8c925a2c7d30d5bb", 0xaa}, {&(0x7f0000000bc0)="38999766e4e7b594de288e79b148f5e6fbcbd70f37af86c3242cf7f3edc910e07fb3c5e59e89c93e009de60e519ec8c478e68a8754872114ae3013085698b44614067a11c75ce87658971ba7fad94003be71e4981f1817b67e4a9acc2eeaaecdc03ba8d5a251c8ddf803d00ba010139d83817172f44ed29c57e458dce9b7eb34b86b61348f17854e6e1d449fe52c6b19fe41601b8e7a9a6b719ddbbb1beb57ddf0c06d01dd17f4d63fdc4beb08df6d9659ce7bf8dde7b97db4f622af9be8604811231da2b9639a20d663dd49631075e8841cbbb51e9d7994339eeeaeee9f500493ed7f7334c9e31c52", 0xe9}, {&(0x7f0000000cc0)="a044855aa50160790c72817250ee4274a2f75a87cf775e694dd31c43a937b1dd6736fd8255ace665b402b2abbd2f", 0x2e}, {&(0x7f0000000d00)="b070c226ca3c85055600e5b098a483e208", 0x11}, {&(0x7f0000000d40)="b354ee4a3b5c9c014969be13a5c9fe8edacb61caa2d47fdc84ae020867a9f6d5233896a8b2aff1d8aafb0d31453bdbff9aa108c58df8be7ffd80733104894dd80f3ee06d073b7bfc1ac9bc81cac2b760965e04322dd8", 0x56}, {&(0x7f0000000dc0)="b71ae38f09c336a2a6343996dc497d964c801f19e492eb182a62052a08ed454321bcb3755d7cdb9be7e3d6ba97a211a1f6597d5466bf816d23", 0x39}, {&(0x7f0000000e00)="cbd9adea1a5247dd47d2fac3a17b492cc8d1a0c7fbe14fd5b6f40d3902c15c5183e130de60c49f87675a5de4a6c6b79779dd33b6133dd3c1d3", 0x39}], 0x8, &(0x7f0000000ec0)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x21, 0x3, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @generic={0x1, 0xa, "9712f8b7fdb4fbfd362a"}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x33, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}}}], 0x98}}, {{&(0x7f0000000f80)={0xa, 0x4e20, 0x0, @remote, 0x71a}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000fc0)="272b36a7d6aad8b74b501deb76f06d3d42e508019ef5dd6a36453c19e2281a5b4a8f3b9deb1db28c5342863510410eb297d51dc9b0b36d90210d34e1993e4659601ca304cfb04a7a1ce08637e0104fa761421db783", 0x55}, {&(0x7f0000001040)="9e988fa5e1ad976a91f1ea40f3e018390dd623be06c6030a3311003e5bf83193ce7a37efe567e00dbaefb5366e54913cf6bcf57f", 0x34}], 0x2}}, {{&(0x7f00000010c0)={0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x5}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000001100)="a0b24533867e03ad30edcb3d935c6d755b5cc8739c7f1af2e0022e88d7f23c694004", 0x22}, {&(0x7f0000001140)="6fbb0119adc08b23f2728af537b23dda51b086650c0dac16efb3292208e3ffe38845852c4c1a0ba0a539aeeac0a01906a68e76d23e1f300a03bd6813365dc6e95201e45bb02fb73000b590fad375f5be3bbb558c4018c6d2478583a03cc024481d15694ce85460d21e0ae4124a765c8eab4101475b1f4013e5dfdca6708b943c1b3ea6d775d773db5f83b754415430af1b2df664de90701a94a96f9d2f622d4951809ff812461112d25c7621aa9313f647a2e48f31c87017f7ce3b6587f9f14ddacd61d059bb44e40238a0c84df00e7340f402ae", 0xd4}, {&(0x7f0000001240)="4e7f5ab0d9206f8400da9abafce15acb2e3263c275e88f8d068042a4297919940f34236956aa327f67aab91db33c54b26a07d09c2ddf8c248a325361c7d144396857a985c7c8f8850470fff39e0013d25e17e1ca86f54650df741679edd0bf9f1538b73166e8759c173dd17307e181dece8495d3", 0x74}, {&(0x7f00000012c0)="38936bf87a", 0x5}], 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="3000f2ffffff000029000000370000002f02000000000000010a000000000000000000000502b679000100000000000038000000000000002900000036000000080300000000000004010507100000000302ff05000300000000000000c204000000120000000000"], 0x68}}, {{&(0x7f00000013c0)={0xa, 0x4e22, 0x3, @mcast1, 0x9}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001400)="3477d289f879f168e73d9e518466899847e39e84d3426931c0f756512053d5a4f8910c82bee7169551aa7dab4b769ccb1ce348ef6fae332b2bc4648be35bd604f460074843b1606e41ce7ad236ee30eeec392ac6801ca08e44db3ad5bc4893cbff198b49636521349e190daeef3310a8e9146a18ded6f27da5fd39e5a47eb2f222d74ba1e50951b19b81a6159e54984c053a817dcc29cdcfe2214766b80d53fc83ad138d2f5b121c312fb176", 0xac}, {&(0x7f00000014c0)="d10aedd6d84122daa84f6c12279a8edac1a0a7bc83b1ef2d72546b8cc9fd64faa73ee216f452447d0138f50d61ca46e6f79b7d1625ef49d56dcd94eb0a3ef6c46a8c965f3ae7c28109ccc74d98ae47f2284757d1479b8742", 0x58}, {&(0x7f0000001540)="4663ec94e71d", 0x6}, {&(0x7f0000001580)="0f491dc10e7d508a86a6e538a7a22bf5e8fb30d01473c2", 0x17}], 0x4, &(0x7f0000001600)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r5}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2f, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xac}]}}}], 0x60}}], 0x6, 0x40800) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r11, &(0x7f0000000040)={0x1d, r12}, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r14, {0x1}, {0x9, 0x1b}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 92.669199ms ago: executing program 0 (id=2626): unshare(0x2c060000) (async, rerun: 32) unshare(0x24020400) (rerun: 32) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x88}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}]}, 0x70}}, 0x801) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000151) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) (async) sendfile(r3, r3, 0x0, 0x4) r5 = socket(0x1e, 0x4, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ppoll(&(0x7f0000000240)=[{r5, 0x8}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) (async) r6 = socket(0x18, 0x0, 0x2) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async, rerun: 64) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece0195b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x4080) (async) bind$netlink(r6, 0x0, 0x0) 35.170283ms ago: executing program 2 (id=2627): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x17, &(0x7f0000000140)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @map_idx={0x18, 0xd, 0x5, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2b}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 33.825322ms ago: executing program 1 (id=2628): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x8}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000fb0f00000800d0597d960d2c1500"/27, @ANYRES32=r5, @ANYBLOB="00000000000000003c0012800e00010069703665727370616e0000002800028008000c000600000006000e00010000000400120006000e00020000000600100010000000"], 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1, 0x0, 0x5, 0x5, 0x5}, 0x14) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYBLOB="e721dad6", @ANYRES16=r8, @ANYBLOB="010003000000000000000100000004000780"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) listen(r6, 0x8) r9 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r9, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r9, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x5}, 0x7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r11, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x20000041) shutdown(r11, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r11, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x23}, 0x8) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000140)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1, [@multicast2]}, 0x14) 0s ago: executing program 3 (id=2629): bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x1b}, 0x94) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') r2 = socket$kcm(0x10, 0x2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x10}}, 0x94}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x70, 0x13, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x9000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x10, 0xf}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r12}]}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r13, 0xffffffffffffffff, 0x4, r0}, 0x10) kernel console output (not intermixed with test programs): 1: renamed from eth1 [ 75.981972][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.993613][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.000896][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.014145][ T5869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.025781][ T5869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.057990][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.065186][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.075602][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.082734][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.097958][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.120790][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.127930][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.202326][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.243390][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.250566][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.312000][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.319156][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.480224][ T5872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.492689][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.533044][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.639010][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.688992][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.696188][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.712952][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.746482][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.753681][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.862094][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.881723][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.902389][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.909623][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.962623][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.969839][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.036475][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.059404][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.194291][ T5861] veth0_vlan: entered promiscuous mode [ 77.278990][ T5872] veth0_vlan: entered promiscuous mode [ 77.309686][ T5861] veth1_vlan: entered promiscuous mode [ 77.330035][ T5865] veth0_vlan: entered promiscuous mode [ 77.360478][ T5872] veth1_vlan: entered promiscuous mode [ 77.403520][ T5865] veth1_vlan: entered promiscuous mode [ 77.454451][ T5861] veth0_macvtap: entered promiscuous mode [ 77.494357][ T5861] veth1_macvtap: entered promiscuous mode [ 77.510707][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.544624][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.561506][ T5865] veth0_macvtap: entered promiscuous mode [ 77.572967][ T5865] veth1_macvtap: entered promiscuous mode [ 77.583934][ T5872] veth0_macvtap: entered promiscuous mode [ 77.600065][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.609200][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.641783][ T5872] veth1_macvtap: entered promiscuous mode [ 77.653894][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.665292][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.700146][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.713089][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.752280][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.784759][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.825518][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.859603][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.873403][ T51] Bluetooth: hci0: command tx timeout [ 77.922964][ T4972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.933276][ T4972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.947135][ T51] Bluetooth: hci4: command tx timeout [ 77.952580][ T51] Bluetooth: hci1: command tx timeout [ 77.958178][ T5877] Bluetooth: hci3: command tx timeout [ 77.983106][ T5866] veth0_vlan: entered promiscuous mode [ 77.996305][ T4972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.006066][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.037990][ T51] Bluetooth: hci2: command tx timeout [ 78.053535][ T5866] veth1_vlan: entered promiscuous mode [ 78.061252][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.073862][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.094145][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.104443][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.115112][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.131488][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.204430][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.213942][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.295521][ T5866] veth0_macvtap: entered promiscuous mode [ 78.328832][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.329952][ T4972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.357501][ T5866] veth1_macvtap: entered promiscuous mode [ 78.367346][ T4972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.392200][ T5869] veth0_vlan: entered promiscuous mode [ 78.414702][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.437483][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.480272][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.512300][ T5869] veth1_vlan: entered promiscuous mode [ 78.551259][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.600377][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.628313][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.655121][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.675227][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.714015][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.724472][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.768933][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.806034][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.050082][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.077196][ T5869] veth0_macvtap: entered promiscuous mode [ 79.099123][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.102484][ T5869] veth1_macvtap: entered promiscuous mode [ 79.302019][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.343823][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.355348][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.373343][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.444394][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.723236][ T6015] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12'. [ 79.777261][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.841299][ T6014] bridge_slave_0: left allmulticast mode [ 79.925592][ T6014] bridge_slave_0: left promiscuous mode [ 79.943849][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.951296][ T6017] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 79.956461][ T51] Bluetooth: hci0: command tx timeout [ 79.977314][ T6027] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 79.985463][ T6014] bridge_slave_1: left allmulticast mode [ 79.995209][ T6014] bridge_slave_1: left promiscuous mode [ 80.005488][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.022549][ T6026] Zero length message leads to an empty skb [ 80.028621][ T51] Bluetooth: hci4: command tx timeout [ 80.038552][ T51] Bluetooth: hci1: command tx timeout [ 80.042545][ T6014] bond0: (slave bond_slave_0): Releasing backup interface [ 80.044011][ T5877] Bluetooth: hci3: command tx timeout [ 80.070614][ T6031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15'. [ 80.081842][ T6031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15'. [ 80.110031][ T6014] bond0: (slave bond_slave_1): Releasing backup interface [ 80.117038][ T5877] Bluetooth: hci2: command tx timeout [ 80.132689][ T6014] team0: Port device team_slave_0 removed [ 80.143393][ T6014] team0: Port device team_slave_1 removed [ 80.150678][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.158260][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.167022][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.174435][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.190550][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.201152][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.229831][ T6020] team0: Mode changed to "activebackup" [ 80.243222][ T6017] vlan0: entered promiscuous mode [ 80.303391][ T6017] team0: Port device vlan0 added [ 80.448817][ T6039] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.481768][ T6034] veth3: entered allmulticast mode [ 80.522579][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 80.527947][ T6034] netlink: 'syz.0.16': attribute type 1 has an invalid length. [ 80.551737][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18'. [ 80.558029][ T6034] netlink: 140 bytes leftover after parsing attributes in process `syz.0.16'. [ 80.576140][ T6034] netlink: 'syz.0.16': attribute type 1 has an invalid length. [ 80.847008][ T4972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.878556][ T4972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.959019][ T6051] netlink: 96 bytes leftover after parsing attributes in process `syz.0.22'. [ 80.983242][ T6053] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 81.032461][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23'. [ 81.047537][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 81.058120][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.065973][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.163058][ T6063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25'. [ 81.844109][ T6090] macvlan2: entered promiscuous mode [ 81.851954][ T6090] macvlan2: entered allmulticast mode [ 81.862549][ T6090] veth1_to_bond: entered promiscuous mode [ 81.871348][ T6090] veth1_to_bond: entered allmulticast mode [ 81.905276][ T6090] team0: Port device macvlan2 added [ 81.970196][ T6093] team_slave_0: entered promiscuous mode [ 81.976073][ T6093] team_slave_1: entered promiscuous mode [ 82.023417][ T6093] macsec1: entered promiscuous mode [ 82.066877][ T6093] team0: entered promiscuous mode [ 82.072505][ T6093] macsec1: entered allmulticast mode [ 82.156955][ T6093] team0: entered allmulticast mode [ 82.191937][ T6093] team_slave_0: entered allmulticast mode [ 82.201444][ T6093] team_slave_1: entered allmulticast mode [ 82.245191][ T6093] team0: Device macsec1 is already an upper device of the team interface [ 82.307114][ T6093] team0: left allmulticast mode [ 82.355012][ T6093] team_slave_0: left allmulticast mode [ 82.387912][ T6093] team_slave_1: left allmulticast mode [ 82.393429][ T6093] team0: left promiscuous mode [ 82.452087][ T6093] team_slave_0: left promiscuous mode [ 82.457634][ T6093] team_slave_1: left promiscuous mode [ 82.631333][ T6127] warning: `syz.1.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.988696][ T6142] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.203591][ T6157] netlink: 'syz.3.48': attribute type 7 has an invalid length. [ 83.240266][ T6142] erspan0: entered promiscuous mode [ 83.256230][ T6142] vlan2: entered promiscuous mode [ 83.259160][ T6158] sctp: [Deprecated]: syz.0.50 (pid 6158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.259160][ T6158] Use struct sctp_sack_info instead [ 83.360575][ T6157] : entered promiscuous mode [ 83.369970][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.973503][ T6197] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 84.156980][ T6213] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 84.232757][ T6217] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 84.319612][ T6216] Bluetooth: MGMT ver 1.23 [ 84.514464][ T6229] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 84.819421][ T6247] tipc: Started in network mode [ 84.834906][ T6247] tipc: Node identity 3e7002e1cccb, cluster identity 4711 [ 84.845670][ T6247] tipc: Enabled bearer , priority 0 [ 84.969148][ T6243] syzkaller0: entered promiscuous mode [ 84.979007][ T6243] syzkaller0: entered allmulticast mode [ 85.010843][ T6243] tipc: Resetting bearer [ 85.084319][ T6241] tipc: Resetting bearer [ 85.129888][ T6256] __nla_validate_parse: 12 callbacks suppressed [ 85.129908][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.77'. [ 85.410477][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.79'. [ 85.969521][ T5878] tipc: Node number set to 4072342241 [ 86.266830][ T6241] tipc: Disabling bearer [ 86.448336][ T6276] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 86.854417][ T9] cfg80211: failed to load regulatory.db [ 86.908979][ T6295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.90'. [ 86.931499][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 87.397996][ T6319] : renamed from hsr0 (while UP) [ 87.921069][ T6343] sctp: [Deprecated]: syz.2.105 (pid 6343) Use of int in maxseg socket option. [ 87.921069][ T6343] Use struct sctp_assoc_value instead [ 87.931639][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.948294][ T6346] netlink: 71 bytes leftover after parsing attributes in process `syz.1.103'. [ 87.960331][ T6345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.005132][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.029620][ T6345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.092275][ T6340] tipc: Started in network mode [ 88.101835][ T6340] tipc: Node identity , cluster identity 4711 [ 88.120506][ T6340] tipc: Failed to obtain node identity [ 88.126036][ T6340] tipc: Enabling of bearer rejected, failed to enable media [ 88.143730][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 88.153434][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 88.240942][ T6353] unsupported nlmsg_type 40 [ 88.249142][ T6350] netlink: 72 bytes leftover after parsing attributes in process `syz.0.107'. [ 88.699840][ T6380] netlink: 172 bytes leftover after parsing attributes in process `syz.4.116'. [ 88.771732][ T6379] netlink: 'syz.2.115': attribute type 11 has an invalid length. [ 88.796390][ T6379] netlink: 332 bytes leftover after parsing attributes in process `syz.2.115'. [ 89.156006][ T6397] xfrm1: entered allmulticast mode [ 89.655468][ T6430] batadv0: entered allmulticast mode [ 89.909251][ T6426] syz.1.129 (6426) used greatest stack depth: 16168 bytes left [ 90.252843][ T6465] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 90.821777][ T6489] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 90.982856][ T6499] __nla_validate_parse: 7 callbacks suppressed [ 90.982873][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'. [ 91.501660][ T6530] geneve2: entered promiscuous mode [ 91.929862][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'. [ 92.154656][ T6559] netlink: 48 bytes leftover after parsing attributes in process `syz.1.162'. [ 92.217384][ T6559] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (65547) [ 92.287834][ T6559] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 92.354281][ T6569] netlink: 48 bytes leftover after parsing attributes in process `syz.4.165'. [ 92.414056][ T6577] lo: entered allmulticast mode [ 92.583448][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 92.596335][ T6589] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.751966][ T6593] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 92.777103][ T6596] sctp: [Deprecated]: syz.3.173 (pid 6596) Use of int in max_burst socket option. [ 92.777103][ T6596] Use struct sctp_assoc_value instead [ 92.848875][ T6602] netlink: 'syz.4.175': attribute type 29 has an invalid length. [ 92.858478][ T6602] netlink: 'syz.4.175': attribute type 29 has an invalid length. [ 92.909439][ T6594] sctp: [Deprecated]: syz.3.173 (pid 6594) Use of int in max_burst socket option. [ 92.909439][ T6594] Use struct sctp_assoc_value instead [ 93.001286][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.176'. [ 93.073689][ T5877] Bluetooth: hci4: command tx timeout [ 93.220670][ T6615] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 93.244824][ T6617] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 93.627043][ T6642] veth0: entered promiscuous mode [ 93.682457][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 94.108409][ T6660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.187'. [ 94.162450][ T6660] netlink: 84 bytes leftover after parsing attributes in process `syz.1.187'. [ 94.215631][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 94.870850][ T6692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.878381][ T6692] IPv6: NLM_F_CREATE should be set when creating new route [ 95.423856][ T6729] netlink: 'syz.4.211': attribute type 2 has an invalid length. [ 95.458873][ T6729] netlink: 'syz.4.211': attribute type 1 has an invalid length. [ 95.465011][ T6733] netlink: 'syz.1.209': attribute type 10 has an invalid length. [ 95.605720][ T6733] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 96.094280][ T6762] __nla_validate_parse: 10 callbacks suppressed [ 96.094309][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'. [ 96.114022][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'. [ 96.123278][ T6762] netlink: 50 bytes leftover after parsing attributes in process `syz.1.220'. [ 96.324092][ T6769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.407856][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.224'. [ 96.408369][ T6777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.226'. [ 96.646895][ T6784] erspan0: entered promiscuous mode [ 96.652243][ T6784] vlan2: entered promiscuous mode [ 97.107830][ T6812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.142984][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 98.070723][ T6863] netlink: 'syz.3.249': attribute type 1 has an invalid length. [ 98.229402][ T6855] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 98.396097][ T6865] bond1 (unregistering): Released all slaves [ 98.521601][ T6872] ip6tnl1: entered promiscuous mode [ 98.529076][ T6872] ip6tnl1: entered allmulticast mode [ 98.539343][ T6870] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 98.550678][ T6875] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 98.571786][ T6886] netlink: 36 bytes leftover after parsing attributes in process `syz.4.257'. [ 98.761527][ T6896] netlink: 'syz.1.261': attribute type 29 has an invalid length. [ 98.848223][ T6891] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 98.897061][ T6891] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 99.174353][ T6914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.246250][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d4a400: rx timeout, send abort [ 99.255940][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055f6e400: rx timeout, send abort [ 99.264542][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055d4a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.280037][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055f6e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.481416][ T6932] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 99.526906][ T6932] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 99.689941][ T6944] netlink: 'syz.0.274': attribute type 10 has an invalid length. [ 99.719896][ T6947] netlink: 'syz.3.278': attribute type 17 has an invalid length. [ 99.720145][ T6935] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 99.733016][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 99.771941][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.278'. [ 99.798758][ T6944] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 99.855709][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.279'. [ 99.870142][ T6951] bridge_slave_0: left allmulticast mode [ 99.893540][ T6951] bridge_slave_0: left promiscuous mode [ 99.903970][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.972612][ T6951] bridge_slave_1: left allmulticast mode [ 99.981148][ T6951] bridge_slave_1: left promiscuous mode [ 100.020860][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.045755][ T6951] bond0: (slave bond_slave_0): Releasing backup interface [ 100.066379][ T6951] bond0: (slave bond_slave_1): Releasing backup interface [ 100.085822][ T6951] team0: Port device team_slave_0 removed [ 100.101818][ T6951] team0: Port device team_slave_1 removed [ 100.111806][ T6951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.119816][ T6951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.129199][ T6951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.136965][ T6951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.482633][ T6974] netlink: 'syz.0.284': attribute type 5 has an invalid length. [ 100.499994][ T6974] geneve2: entered promiscuous mode [ 100.505256][ T6974] geneve2: entered allmulticast mode [ 100.532720][ T49] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 100.580308][ T49] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 100.679065][ T6993] trusted_key: syz.1.288 sent an empty control message without MSG_MORE. [ 100.714544][ T49] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 100.733433][ T49] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 100.831293][ T7000] team_slave_0: entered allmulticast mode [ 101.049056][ T7013] netlink: 'syz.2.293': attribute type 1 has an invalid length. [ 101.259970][ T7023] netlink: 'syz.4.297': attribute type 1 has an invalid length. [ 101.405549][ T7023] bond1: entered promiscuous mode [ 101.439178][ T7023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.662134][ T7035] bridge_slave_0: left allmulticast mode [ 101.678455][ T7035] bridge_slave_0: left promiscuous mode [ 101.702693][ T7035] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.728747][ T7043] TCP: TCP_TX_DELAY enabled [ 101.735823][ T7044] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 101.751619][ T7035] bridge_slave_1: left allmulticast mode [ 101.796274][ T7035] bridge_slave_1: left promiscuous mode [ 101.824657][ T7035] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.851873][ T7035] bond0: (slave bond_slave_0): Releasing backup interface [ 101.901940][ T7035] bond0: (slave bond_slave_1): Releasing backup interface [ 101.959421][ T7035] team0: Port device team_slave_0 removed [ 101.990020][ T7035] team0: Port device team_slave_1 removed [ 102.078783][ T7052] vlan0: entered promiscuous mode [ 102.113739][ T7063] __nla_validate_parse: 8 callbacks suppressed [ 102.113756][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 102.131625][ T7052] team0: Port device vlan0 added [ 102.163563][ T7055] sch_fq: defrate 0 ignored. [ 102.170081][ T7059] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 102.206014][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 102.242322][ T7071] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 102.264865][ T7074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.307'. [ 102.274092][ T7071] netlink: 208 bytes leftover after parsing attributes in process `syz.4.306'. [ 102.286417][ T7071] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 102.295611][ T7071] netlink: 'syz.4.306': attribute type 2 has an invalid length. [ 102.311025][ T7059] bond2: entered promiscuous mode [ 102.316198][ T7059] bond2: entered allmulticast mode [ 102.322670][ T7059] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.836780][ T7098] netlink: 20 bytes leftover after parsing attributes in process `syz.3.315'. [ 102.863246][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 103.074146][ T7112] netlink: 72 bytes leftover after parsing attributes in process `syz.4.318'. [ 103.194594][ T7120] sctp: [Deprecated]: syz.4.319 (pid 7120) Use of int in max_burst socket option. [ 103.194594][ T7120] Use struct sctp_assoc_value instead [ 103.285624][ T7124] validate_nla: 1 callbacks suppressed [ 103.285643][ T7124] netlink: 'syz.3.320': attribute type 1 has an invalid length. [ 103.538210][ T7136] netlink: 'syz.4.325': attribute type 8 has an invalid length. [ 103.754889][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 103.978135][ T7159] netlink: 'syz.2.333': attribute type 10 has an invalid length. [ 104.016668][ T7159] netlink: 40 bytes leftover after parsing attributes in process `syz.2.333'. [ 104.089495][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 104.117030][ T7159] team0: Port device geneve0 added [ 104.331418][ T7178] netlink: 'syz.2.339': attribute type 10 has an invalid length. [ 104.448262][ T7178] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 104.652749][ T7195] netlink: 'syz.2.346': attribute type 10 has an invalid length. [ 104.738702][ T7195] syz_tun: entered promiscuous mode [ 104.804403][ T7195] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 105.044811][ T7222] ip6erspan0: entered promiscuous mode [ 105.419997][ T7239] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 105.772044][ T7249] veth5: entered promiscuous mode [ 105.861602][ T7272] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 106.342630][ T7294] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 106.620462][ T7316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.177744][ T7354] __nla_validate_parse: 14 callbacks suppressed [ 107.177762][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 107.239910][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 107.440650][ T7370] veth0_to_bridge: entered promiscuous mode [ 107.562666][ T7386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.389'. [ 107.715289][ T7369] veth0_to_bridge: left promiscuous mode [ 107.981085][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'. [ 108.129922][ T7415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.397'. [ 108.244678][ T7415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.397'. [ 108.375658][ T7427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.399'. [ 108.654622][ T7441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.403'. [ 108.740790][ T7444] netlink: 'syz.3.404': attribute type 2 has an invalid length. [ 108.816658][ T7448] netlink: 'syz.2.406': attribute type 10 has an invalid length. [ 108.833518][ T7447] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 108.856743][ T7448] bridge_slave_1: left allmulticast mode [ 108.863031][ T7448] bridge_slave_1: left promiscuous mode [ 108.870834][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.890257][ T7447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.405'. [ 108.911251][ T7448] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 108.931452][ T7454] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 108.938240][ T7454] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 109.261624][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 109.301844][ T7463] syzkaller0: entered promiscuous mode [ 109.330215][ T7472] netlink: 'syz.1.415': attribute type 5 has an invalid length. [ 109.338898][ T7463] syzkaller0: entered allmulticast mode [ 111.635161][ T7562] netlink: 'syz.0.435': attribute type 1 has an invalid length. [ 111.800246][ T7573] openvswitch: netlink: Message has 4 unknown bytes. [ 111.840152][ T7573] netlink: 'syz.2.438': attribute type 4 has an invalid length. [ 111.865556][ T7575] netlink: 'syz.3.439': attribute type 5 has an invalid length. [ 112.012415][ T7582] netlink: 'syz.1.441': attribute type 4 has an invalid length. [ 112.299778][ T7607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.338034][ T7608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.404867][ T7610] __nla_validate_parse: 11 callbacks suppressed [ 112.404885][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.449'. [ 112.623677][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 112.685492][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 113.053632][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 113.081255][ T7642] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.457'. [ 113.510646][ T7649] netlink: 'syz.4.460': attribute type 17 has an invalid length. [ 113.526619][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 113.535517][ T7649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.460'. [ 113.929326][ T7666] tipc: Enabling of bearer rejected, failed to enable media [ 113.957146][ T7667] tipc: Enabling of bearer rejected, failed to enable media [ 113.985872][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 114.254828][ T7682] netlink: 'syz.0.469': attribute type 32 has an invalid length. [ 114.283021][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 114.308698][ T7682] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 114.792676][ T7708] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 114.866805][ T7714] netlink: 40 bytes leftover after parsing attributes in process `syz.3.477'. [ 115.053855][ T7721] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 115.104318][ T7718] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.232657][ T7726] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 115.278861][ T7728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.346735][ T7728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.386706][ T7736] openvswitch: netlink: Message has 19 unknown bytes. [ 115.600532][ T7745] tipc: Enabled bearer , priority 0 [ 115.631155][ T7745] syzkaller0: entered promiscuous mode [ 115.636830][ T7745] syzkaller0: entered allmulticast mode [ 115.679570][ T7745] tipc: Resetting bearer [ 115.701724][ T7754] tipc: Enabling of bearer rejected, already enabled [ 115.746028][ T7754] tipc: Resetting bearer [ 115.809448][ T7754] tipc: Disabling bearer [ 116.089611][ T7776] delete_channel: no stack [ 116.142964][ T7772] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 117.026272][ T7817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.124775][ T7817] sctp: [Deprecated]: syz.3.509 (pid 7817) Use of int in max_burst socket option deprecated. [ 117.124775][ T7817] Use struct sctp_assoc_value instead [ 117.330763][ T7825] netlink: 'syz.4.511': attribute type 1 has an invalid length. [ 117.342156][ T7825] netlink: 'syz.4.511': attribute type 10 has an invalid length. [ 117.356683][ T7825] netlink: 'syz.4.511': attribute type 4 has an invalid length. [ 117.411366][ T7825] macvlan0: entered allmulticast mode [ 117.436659][ T7825] veth1_vlan: entered allmulticast mode [ 117.601259][ T7832] __nla_validate_parse: 7 callbacks suppressed [ 117.601276][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 117.652336][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 117.728863][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 117.861231][ T7839] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.888072][ T7844] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.895255][ T7844] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 117.908449][ T7844] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 117.975376][ T7853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.518'. [ 118.315550][ T7867] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 118.327621][ T7867] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 118.335873][ T7867] gretap1: entered promiscuous mode [ 118.341615][ T7867] gretap1: entered allmulticast mode [ 118.505304][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 118.520323][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 118.749503][ T7887] netlink: 'syz.1.532': attribute type 19 has an invalid length. [ 118.898726][ T7900] netlink: 'syz.2.535': attribute type 10 has an invalid length. [ 118.930966][ T7907] netlink: 'syz.3.536': attribute type 2 has an invalid length. [ 118.949208][ T7907] netlink: 84 bytes leftover after parsing attributes in process `syz.3.536'. [ 118.974031][ T7913] netlink: 'syz.2.535': attribute type 10 has an invalid length. [ 119.243399][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 119.699871][ T7953] netlink: 68 bytes leftover after parsing attributes in process `syz.0.547'. [ 119.733044][ T7956] netlink: 'syz.1.548': attribute type 1 has an invalid length. [ 119.759926][ T7956] netlink: 224 bytes leftover after parsing attributes in process `syz.1.548'. [ 119.801144][ T7956] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 119.986104][ T7965] syz.2.551 uses old SIOCAX25GETINFO [ 120.281154][ T7977] tipc: Enabled bearer , priority 0 [ 120.313676][ T7979] syzkaller0: entered promiscuous mode [ 120.336605][ T7979] syzkaller0: entered allmulticast mode [ 120.358675][ T7978] tipc: Started in network mode [ 120.377115][ T7978] tipc: Node identity 1eee72019a0f, cluster identity 4711 [ 120.398002][ T7978] tipc: Enabled bearer , priority 0 [ 120.420452][ T7985] syzkaller0: entered promiscuous mode [ 120.429032][ T7985] syzkaller0: entered allmulticast mode [ 120.436803][ T7979] tipc: Resetting bearer [ 120.471752][ T7979] tipc: Disabling bearer [ 120.610022][ T7978] tipc: Resetting bearer [ 120.655586][ T7976] tipc: Resetting bearer [ 120.733025][ T7976] tipc: Disabling bearer [ 120.833513][ T8019] delete_channel: no stack [ 120.845584][ T7905] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 121.041781][ T8022] netlink: 'syz.3.567': attribute type 3 has an invalid length. [ 121.094968][ T8028] openvswitch: netlink: IP tunnel dst address not specified [ 121.096847][ T8022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.302609][ T7915] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.317063][ T7915] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.326861][ T5946] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.392278][ T8036] vlan2: entered allmulticast mode [ 121.407886][ T8036] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 121.487609][ T5949] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.527190][ T8048] tipc: Started in network mode [ 121.546180][ T8048] tipc: Node identity 160f03ac7ccf, cluster identity 4711 [ 121.607663][ T8048] tipc: Enabled bearer , priority 0 [ 121.644468][ T8049] syzkaller0: entered promiscuous mode [ 121.683061][ T8049] syzkaller0: entered allmulticast mode [ 121.745438][ T8048] tipc: Resetting bearer [ 121.813621][ T8047] tipc: Resetting bearer [ 121.877271][ T8047] tipc: Disabling bearer [ 121.927384][ T5946] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.225100][ T8083] team0: Port device vlan0 removed [ 122.630888][ T8098] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.744237][ T8104] netlink: 'syz.2.591': attribute type 6 has an invalid length. [ 122.746482][ T8098] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 123.043980][ T8115] __nla_validate_parse: 9 callbacks suppressed [ 123.043998][ T8115] netlink: 92 bytes leftover after parsing attributes in process `syz.3.592'. [ 123.071777][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 123.081302][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 123.657601][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 123.671976][ T8141] netlink: 'syz.2.598': attribute type 3 has an invalid length. [ 123.698914][ T8141] netlink: 240 bytes leftover after parsing attributes in process `syz.2.598'. [ 123.701936][ T8140] netlink: 'syz.3.600': attribute type 32 has an invalid length. [ 123.716163][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 123.852695][ T8140] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 123.865755][ T8141] netlink: 268 bytes leftover after parsing attributes in process `syz.2.598'. [ 123.909174][ T8146] pim6reg: entered allmulticast mode [ 123.933331][ T8148] wg1: entered promiscuous mode [ 123.944786][ T8148] wg1: entered allmulticast mode [ 124.401119][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 124.581378][ T8169] netlink: 'syz.4.608': attribute type 21 has an invalid length. [ 124.631666][ T8175] netlink: 'syz.4.608': attribute type 21 has an invalid length. [ 124.633570][ T8169] netlink: 128 bytes leftover after parsing attributes in process `syz.4.608'. [ 124.640664][ T8180] netlink: 'syz.2.611': attribute type 1 has an invalid length. [ 124.680278][ T8175] netlink: 128 bytes leftover after parsing attributes in process `syz.4.608'. [ 124.689665][ T8169] netlink: 'syz.4.608': attribute type 4 has an invalid length. [ 124.736853][ T8169] netlink: 'syz.4.608': attribute type 5 has an invalid length. [ 124.891839][ T8175] netlink: 'syz.4.608': attribute type 4 has an invalid length. [ 124.912980][ T8175] netlink: 'syz.4.608': attribute type 5 has an invalid length. [ 124.957773][ T4972] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.984990][ T4972] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.004594][ T4972] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.044747][ T4972] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.226678][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.241404][ T8203] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000 [ 125.393917][ T8203] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 125.414890][ T8210] delete_channel: no stack [ 125.486677][ T8195] eql: entered promiscuous mode [ 125.491663][ T8195] eql: entered allmulticast mode [ 126.203872][ T8247] IPVS: set_ctl: invalid protocol: 108 172.30.0.3:20004 [ 127.210690][ T8302] netlink: 'syz.3.649': attribute type 83 has an invalid length. [ 128.018241][ T8335] netlink: 'syz.4.659': attribute type 5 has an invalid length. [ 128.196822][ T8342] __nla_validate_parse: 17 callbacks suppressed [ 128.196841][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 128.807746][ T8333] veth1_vlan: left allmulticast mode [ 129.163913][ T4972] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.227528][ T4972] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.247438][ T4972] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.256376][ T4972] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.343208][ T8352] xt_socket: unknown flags 0x50 [ 129.908655][ T8375] netlink: 'syz.4.672': attribute type 1 has an invalid length. [ 130.602344][ T8403] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.676'. [ 130.657873][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 130.667246][ T8403] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 130.674749][ T8403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.809382][ T8409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.679'. [ 130.826791][ T8409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.679'. [ 130.849101][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.681'. [ 130.878896][ T8413] netlink: 576 bytes leftover after parsing attributes in process `syz.1.681'. [ 131.341204][ T8433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.463393][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'. [ 131.589185][ T8449] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.641446][ T8453] vlan2: entered allmulticast mode [ 131.646764][ T8453] bond3: entered allmulticast mode [ 131.689927][ T8459] netlink: 248 bytes leftover after parsing attributes in process `syz.1.693'. [ 131.795206][ T8462] netlink: 88 bytes leftover after parsing attributes in process `syz.4.694'. [ 132.275926][ T1089] nci: nci_rx_work: unknown MT 0x6 [ 132.333951][ T8483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.606108][ T8514] team0: Device vti0 is up. Set it down before adding it as a team port [ 132.639533][ T8517] netlink: 'syz.4.709': attribute type 25 has an invalid length. [ 132.689919][ T8520] pim6reg: entered allmulticast mode [ 132.748387][ T8526] pim6reg: left allmulticast mode [ 132.861939][ T8531] netlink: 'syz.0.712': attribute type 4 has an invalid length. [ 132.910948][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.509301][ T8561] __nla_validate_parse: 5 callbacks suppressed [ 133.509321][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'. [ 133.618857][ T8561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.711156][ T8568] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 133.781808][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 133.870882][ T8568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.926676][ T8568] bond0: (slave rose0): Enslaving as an active interface with an up link [ 134.000119][ T8580] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 134.059174][ T8580] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 134.067270][ T8585] netlink: 'syz.3.727': attribute type 1 has an invalid length. [ 134.109301][ T8580] gretap2: entered promiscuous mode [ 134.121817][ T8580] gretap2: entered allmulticast mode [ 134.334842][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 134.362883][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 134.373222][ T8600] netlink: 'syz.1.732': attribute type 11 has an invalid length. [ 134.380148][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 134.815158][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 134.986032][ T8621] bond0: (slave bond_slave_1): Releasing backup interface [ 135.073615][ T8621] team0: Port device macvlan2 removed [ 135.102610][ T8621] veth1_to_bond (unregistering): left allmulticast mode [ 135.136038][ T8631] hsr0 speed is unknown, defaulting to 1000 [ 135.143138][ T8642] netlink: 32 bytes leftover after parsing attributes in process `syz.0.743'. [ 135.187219][ T8631] hsr0 speed is unknown, defaulting to 1000 [ 135.231941][ T8631] hsr0 speed is unknown, defaulting to 1000 [ 135.260558][ T8631] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.279236][ T8631] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 135.328638][ T8631] hsr0 speed is unknown, defaulting to 1000 [ 135.337236][ T8631] hsr0 speed is unknown, defaulting to 1000 [ 135.345335][ T8631] hsr0 speed is unknown, defaulting to 1000 [ 135.369845][ T8631] hsr0 speed is unknown, defaulting to 1000 [ 135.387255][ T8631] hsr0 speed is unknown, defaulting to 1000 [ 136.036899][ T8686] ipvlan0: entered promiscuous mode [ 136.051773][ T8686] ipvlan0: entered allmulticast mode [ 136.073910][ T8686] veth0_vlan: entered allmulticast mode [ 136.265189][ T8695] netlink: 256 bytes leftover after parsing attributes in process `syz.0.758'. [ 136.442181][ T8705] netlink: 44 bytes leftover after parsing attributes in process `syz.2.760'. [ 136.452105][ T8705] netlink: 43 bytes leftover after parsing attributes in process `syz.2.760'. [ 136.470234][ T8705] netlink: 'syz.2.760': attribute type 6 has an invalid length. [ 136.482975][ T8705] netlink: 'syz.2.760': attribute type 5 has an invalid length. [ 136.684119][ T8720] netlink: 'syz.0.763': attribute type 1 has an invalid length. [ 136.886230][ T8728] netlink: 'syz.2.766': attribute type 1 has an invalid length. [ 136.926696][ T8728] netlink: 'syz.2.766': attribute type 1 has an invalid length. [ 137.307112][ T8753] netlink: 'syz.1.773': attribute type 6 has an invalid length. [ 137.356607][ T8753] netlink: 'syz.1.773': attribute type 5 has an invalid length. [ 137.688888][ T8777] tipc: Enabling of bearer rejected, failed to enable media [ 139.173490][ T8856] netlink: 'syz.1.799': attribute type 2 has an invalid length. [ 139.206126][ T8856] netlink: 'syz.1.799': attribute type 8 has an invalid length. [ 139.234889][ T8856] __nla_validate_parse: 9 callbacks suppressed [ 139.234904][ T8856] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.799'. [ 139.257228][ T5949] IPVS: starting estimator thread 0... [ 139.274554][ T8860] IPVS: ip_vs_edit_dest(): server weight less than zero [ 139.358242][ T8861] IPVS: using max 29 ests per chain, 69600 per kthread [ 139.379741][ T8866] openvswitch: netlink: Message has 4 unknown bytes. [ 139.451351][ T8870] pim6reg527: entered allmulticast mode [ 140.004450][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'. [ 140.174194][ T8904] tipc: Enabling of bearer rejected, media not registered [ 140.188458][ T8904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.813'. [ 140.361173][ T8916] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 140.369984][ T5949] IPVS: starting estimator thread 0... [ 140.403529][ T8915] hsr0 speed is unknown, defaulting to 1000 [ 140.456746][ T8917] IPVS: using max 30 ests per chain, 72000 per kthread [ 140.563338][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.819'. [ 140.680922][ T8934] netlink: 'syz.1.823': attribute type 3 has an invalid length. [ 140.755397][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 140.964710][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 140.989560][ T8948] netlink: 44 bytes leftover after parsing attributes in process `syz.3.825'. [ 141.061047][ T8955] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 141.103131][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 141.546115][ T8973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.832'. [ 141.563601][ T7906] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 141.636038][ T6040] IPVS: starting estimator thread 0... [ 141.645902][ T8986] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 141.662057][ T8990] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 141.746611][ T8987] IPVS: using max 31 ests per chain, 74400 per kthread [ 142.573796][ T9031] netlink: 'syz.4.849': attribute type 5 has an invalid length. [ 142.690606][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 142.972427][ T9059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.998554][ T9059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.061681][ T9113] openvswitch: netlink: EtherType 257 is less than min 600 [ 144.111930][ T9110] hsr0 speed is unknown, defaulting to 1000 [ 144.709122][ T9138] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 144.736792][ T9138] netlink: 'syz.3.878': attribute type 2 has an invalid length. [ 144.774403][ T9140] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 144.930165][ T9146] __nla_validate_parse: 5 callbacks suppressed [ 144.930185][ T9146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.879'. [ 144.964206][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 144.988583][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.880'. [ 145.027848][ T9148] openvswitch: netlink: Flow actions attr not present in new flow. [ 145.241910][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'. [ 145.255197][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.884'. [ 145.480872][ T9175] netlink: 76 bytes leftover after parsing attributes in process `syz.3.888'. [ 145.543147][ T9181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.048704][ T9201] netlink: 160 bytes leftover after parsing attributes in process `syz.2.894'. [ 146.375085][ T9236] vlan2: entered allmulticast mode [ 146.381471][ T9236] bond0: entered allmulticast mode [ 146.447550][ T7906] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 146.467087][ T7906] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.485781][ T7906] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.505006][ T7906] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.081295][ T9267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.125065][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.907'. [ 147.208134][ T9274] hsr0 speed is unknown, defaulting to 1000 [ 147.495256][ T9292] netlink: 'syz.4.913': attribute type 11 has an invalid length. [ 147.693270][ T9295] C: renamed from lo [ 148.018495][ T9322] netlink: 'syz.3.925': attribute type 62 has an invalid length. [ 148.042584][ T9322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.925'. [ 148.178875][ T9328] pim6reg: entered allmulticast mode [ 148.187006][ T9329] pim6reg: left allmulticast mode [ 148.266857][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.489339][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'. [ 148.934047][ T9374] netdevsim netdevsim4 : renamed from netdevsim0 [ 149.121906][ T9388] delete_channel: no stack [ 149.143199][ T9387] dvmrp1: entered allmulticast mode [ 149.186011][ T9387] dvmrp1: left allmulticast mode [ 149.212484][ T9392] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 149.717607][ T9428] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 150.013811][ T9447] netlink: 'syz.3.963': attribute type 1 has an invalid length. [ 150.036691][ T9447] __nla_validate_parse: 7 callbacks suppressed [ 150.036709][ T9447] netlink: 136 bytes leftover after parsing attributes in process `syz.3.963'. [ 150.080526][ T9447] netlink: 'syz.3.963': attribute type 2 has an invalid length. [ 150.092171][ T9447] netlink: 'syz.3.963': attribute type 1 has an invalid length. [ 150.101064][ T9453] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 150.137055][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 150.264170][ T9453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.965'. [ 150.533082][ T5941] IPVS: starting estimator thread 0... [ 150.639965][ T9480] IPVS: using max 30 ests per chain, 72000 per kthread [ 150.645938][ T9486] netlink: 'syz.4.973': attribute type 1 has an invalid length. [ 150.656113][ T9471] hsr0 speed is unknown, defaulting to 1000 [ 150.801502][ T9493] team0: Device gtp0 is of different type [ 151.081681][ T9510] netlink: 'syz.3.980': attribute type 1 has an invalid length. [ 151.082521][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 151.090013][ T9510] netlink: 224 bytes leftover after parsing attributes in process `syz.3.980'. [ 151.212031][ T9515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.293127][ T9524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.985'. [ 151.340867][ T9524] netlink: 'syz.4.985': attribute type 7 has an invalid length. [ 151.371469][ T9524] netlink: 'syz.4.985': attribute type 8 has an invalid length. [ 151.386159][ T9524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'. [ 151.402015][ T9530] netlink: 68 bytes leftover after parsing attributes in process `syz.2.986'. [ 151.412432][ T9532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.987'. [ 151.466059][ T9524] gretap0: entered promiscuous mode [ 151.488169][ T9524] batadv_slave_1: entered promiscuous mode [ 151.524431][ T9524] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 151.536305][ T9524] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.553126][ T9524] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 151.722552][ T9547] netlink: 28 bytes leftover after parsing attributes in process `syz.3.990'. [ 151.791195][ T9553] netlink: 'syz.4.993': attribute type 1 has an invalid length. [ 152.752204][ T30] audit: type=1800 audit(1754773779.322:2): pid=9585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.999" name="memory.events" dev="tmpfs" ino=1026 res=0 errno=0 [ 153.207541][ T9637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.326011][ T9643] bond2: (slave veth5): Enslaving as an active interface with an up link [ 153.350510][ T9637] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 153.364322][ T9637] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 153.670569][ T9667] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 154.178749][ T9699] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 155.419699][ T9758] validate_nla: 1 callbacks suppressed [ 155.419715][ T9758] netlink: 'syz.1.1049': attribute type 1 has an invalid length. [ 155.537319][ T9764] __nla_validate_parse: 14 callbacks suppressed [ 155.537337][ T9764] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.1050'. [ 155.579441][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 156.036936][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 156.040512][ T9793] team0: Device gtp0 is up. Set it down before adding it as a team port [ 156.066394][ T9789] netlink: 'syz.4.1061': attribute type 30 has an invalid length. [ 156.181672][ T9800] veth0: entered promiscuous mode [ 156.191955][ T9806] veth0: left promiscuous mode [ 156.230914][ T7908] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 156.289305][ T7908] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.366885][ T7908] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.427319][ T7908] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.681455][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 156.712558][ T9834] netlink: 'syz.0.1073': attribute type 30 has an invalid length. [ 156.793837][ T9837] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 156.997128][ T9853] openvswitch: netlink: IP tunnel TTL not specified. [ 157.232972][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 157.245046][ T9865] netlink: 'syz.1.1080': attribute type 3 has an invalid length. [ 157.299995][ T9870] veth0_to_bridge: entered promiscuous mode [ 157.351933][ T9874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1083'. [ 157.398364][ T9868] veth0_to_bridge: left promiscuous mode [ 157.590503][ T9888] Driver unsupported XDP return value 0 on prog (id 285) dev N/A, expect packet loss! [ 157.810635][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1091'. [ 157.928269][ T9911] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1095'. [ 157.964973][ T9911] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1095'. [ 157.977003][ T9911] netlink: 'syz.2.1095': attribute type 5 has an invalid length. [ 157.984851][ T9911] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1095'. [ 158.066991][ T9916] netlink: 'syz.2.1095': attribute type 5 has an invalid length. [ 158.487435][ T9949] tipc: Started in network mode [ 158.512247][ T9949] tipc: Node identity fedeeecf09d9, cluster identity 4711 [ 158.537573][ T9949] tipc: Enabled bearer , priority 0 [ 158.563396][ T9948] tipc: Disabling bearer [ 158.778519][ T9964] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 158.900713][ T9974] netlink: 'syz.4.1115': attribute type 7 has an invalid length. [ 158.904637][ T9966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.912878][ T9974] netlink: 'syz.4.1115': attribute type 8 has an invalid length. [ 158.940850][ T9972] vlan2: entered allmulticast mode [ 158.946131][ T9972] bond2: entered allmulticast mode [ 158.982901][ T9975] netlink: 'syz.1.1114': attribute type 11 has an invalid length. [ 159.170938][ T9982] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3944. macoff=96 [ 159.278308][ T9982] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 159.288048][ T9982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.658984][T10070] netlink: 'syz.4.1142': attribute type 4 has an invalid length. [ 160.932638][T10089] netlink: 'syz.1.1149': attribute type 24 has an invalid length. [ 160.974626][T10091] __nla_validate_parse: 18 callbacks suppressed [ 160.974644][T10091] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1150'. [ 161.014732][T10093] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 161.031814][T10098] netlink: 'syz.1.1149': attribute type 33 has an invalid length. [ 161.040183][T10098] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1149'. [ 161.069963][T10099] netlink: 'syz.4.1150': attribute type 6 has an invalid length. [ 161.159623][T10105] pim6reg: entered allmulticast mode [ 161.285893][T10118] lo: entered promiscuous mode [ 162.366763][T10164] netlink: 'syz.3.1167': attribute type 1 has an invalid length. [ 162.511930][T10168] veth7: entered promiscuous mode [ 162.524079][T10168] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 162.533755][T10169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1169'. [ 162.679271][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 162.719990][T10183] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1174'. [ 162.732821][T10183] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1174'. [ 162.866280][T10198] netlink: 'syz.3.1178': attribute type 7 has an invalid length. [ 162.882080][T10199] netlink: 'syz.3.1178': attribute type 8 has an invalid length. [ 162.904797][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1177'. [ 163.736384][T10236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.777020][T10239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.010016][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'. [ 164.021295][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1193'. [ 164.204751][T10261] bond0: entered promiscuous mode [ 164.242148][T10261] bond0: left promiscuous mode [ 164.481060][T10281] bridge2: entered promiscuous mode [ 164.486311][T10281] bridge2: entered allmulticast mode [ 164.775461][T10303] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1203'. [ 164.859277][T10308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.170939][T10328] syz_tun: tun_net_xmit 42 [ 165.175976][T10328] syz_tun: tun_net_xmit 42 [ 165.207160][T10328] syz_tun: tun_net_xmit 42 [ 165.220151][T10328] syz_tun: tun_net_xmit 42 [ 165.232161][T10328] syz_tun: tun_net_xmit 42 [ 165.239034][T10328] syz_tun: tun_net_xmit 42 [ 165.243726][T10328] syz_tun: tun_net_xmit 42 [ 165.250384][T10328] syz_tun: tun_net_xmit 42 [ 165.256239][T10328] syz_tun: tun_net_xmit 42 [ 165.261379][T10328] syz_tun: tun_net_xmit 42 [ 165.272921][ T1210] IPVS: starting estimator thread 0... [ 165.280589][T10328] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 165.406575][T10331] IPVS: using max 29 ests per chain, 69600 per kthread [ 165.430327][T10345] netlink: 'syz.2.1216': attribute type 1 has an invalid length. [ 165.832928][T10368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.149511][T10393] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 166.165573][T10388] __nla_validate_parse: 1 callbacks suppressed [ 166.165592][T10388] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1230'. [ 166.188741][T10393] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1232'. [ 167.325775][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 167.339278][T10463] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1250'. [ 167.355657][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'. [ 167.423977][T10471] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 167.438849][T10472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1251'. [ 167.547177][T10475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1251'. [ 167.699613][T10487] netlink: 'syz.2.1256': attribute type 33 has an invalid length. [ 167.757636][T10487] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1256'. [ 167.768318][T10487] netlink: 'syz.2.1256': attribute type 33 has an invalid length. [ 167.776257][T10487] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1256'. [ 167.810385][T10490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1256'. [ 167.985677][T10499] syzkaller1: entered promiscuous mode [ 168.015732][T10499] syzkaller1: entered allmulticast mode [ 168.051212][T10507] syzkaller1: entered promiscuous mode [ 168.059136][T10505] netlink: 'syz.1.1263': attribute type 27 has an invalid length. [ 168.078387][T10507] syzkaller1: entered allmulticast mode [ 168.093124][T10505] tc_dump_action: action bad kind [ 168.527927][T10529] bridge0: port 1(batadv3) entered blocking state [ 168.554846][T10529] bridge0: port 1(batadv3) entered disabled state [ 168.562912][T10529] batadv3: entered allmulticast mode [ 168.572958][T10529] batadv3: entered promiscuous mode [ 168.801422][T10537] geneve3: entered promiscuous mode [ 168.808660][T10537] geneve3: entered allmulticast mode [ 169.029729][ T7915] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 169.039527][ T7915] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 169.848329][T10611] netlink: 'syz.4.1294': attribute type 1 has an invalid length. [ 169.878854][T10611] netlink: 'syz.4.1294': attribute type 4 has an invalid length. [ 170.059450][T10627] IPVS: set_ctl: invalid protocol: 41 10.1.1.2:20001 [ 170.088707][T10627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.229767][T10641] netlink: 'syz.2.1301': attribute type 12 has an invalid length. [ 170.259017][T10641] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 170.333498][T10647] netlink: 'syz.3.1302': attribute type 6 has an invalid length. [ 170.457242][T10647] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 171.448828][T10714] __nla_validate_parse: 11 callbacks suppressed [ 171.448845][T10714] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1324'. [ 171.475955][T10714] netlink: 'syz.1.1324': attribute type 10 has an invalid length. [ 171.495969][T10714] team0: Device veth1_macvtap failed to register rx_handler [ 171.518891][T10714] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1324'. [ 171.834551][T10738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.052451][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'. [ 172.169294][T10759] lo: left promiscuous mode [ 172.181172][T10759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.282885][T10764] netlink: 'syz.4.1338': attribute type 39 has an invalid length. [ 172.606850][T10781] nbd4: detected capacity change from 0 to 63 [ 172.631033][ T5877] block nbd4: Receive control failed (result -32) [ 172.631609][ T5914] block nbd4: Send control failed (result -32) [ 172.704382][ T5914] block nbd4: Request send failed, requeueing [ 172.742473][ T55] block nbd4: Dead connection, failed to find a fallback [ 172.753033][ T55] block nbd4: shutting down sockets [ 172.759330][ T55] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.776746][ T55] Buffer I/O error on dev nbd4, logical block 0, async page read [ 172.796677][ T5914] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.806432][ T5914] Buffer I/O error on dev nbd4, logical block 1, async page read [ 172.815399][ T5914] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.826099][ T5914] Buffer I/O error on dev nbd4, logical block 2, async page read [ 172.836986][ T5914] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.846043][ T5914] Buffer I/O error on dev nbd4, logical block 3, async page read [ 172.855040][ T5914] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.865044][ T5914] Buffer I/O error on dev nbd4, logical block 0, async page read [ 172.873514][ T5914] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.883136][ T5914] Buffer I/O error on dev nbd4, logical block 1, async page read [ 172.891469][ T5914] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.905297][ T5914] Buffer I/O error on dev nbd4, logical block 2, async page read [ 172.914388][ T5914] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.928601][ T5914] Buffer I/O error on dev nbd4, logical block 3, async page read [ 172.942049][ T5914] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.958844][ T5914] Buffer I/O error on dev nbd4, logical block 0, async page read [ 172.977037][ T5914] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.997015][ T5914] Buffer I/O error on dev nbd4, logical block 1, async page read [ 173.011040][T10795] team0: Device wireguard0 is of different type [ 173.020005][ T5914] ldm_validate_partition_table(): Disk read failed. [ 173.030891][ T5914] Dev nbd4: unable to read RDB block 0 [ 173.039952][ T5914] nbd4: unable to read partition table [ 173.071515][ T5914] ldm_validate_partition_table(): Disk read failed. [ 173.080782][ T5914] Dev nbd4: unable to read RDB block 0 [ 173.090553][ T5914] nbd4: unable to read partition table [ 173.130950][T10806] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1350'. [ 173.148452][T10805] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1350'. [ 173.186095][T10809] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 173.306394][T10818] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 173.419388][T10830] openvswitch: netlink: IP tunnel TTL not specified. [ 173.444444][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1355'. [ 173.886052][T10852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.931992][T10852] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 174.196433][T10872] veth0: entered promiscuous mode [ 174.218878][T10876] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.1367'. [ 174.294873][T10870] veth0: left promiscuous mode [ 174.885639][T10914] netlink: 'syz.0.1376': attribute type 10 has an invalid length. [ 174.902034][T10914] syz_tun: entered promiscuous mode [ 174.934860][T10914] syz_tun: entered allmulticast mode [ 174.958754][T10914] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 175.083960][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1380'. [ 175.135876][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1380'. [ 175.151940][T10924] netlink: 'syz.1.1381': attribute type 3 has an invalid length. [ 175.174259][T10924] netlink: 'syz.1.1381': attribute type 1 has an invalid length. [ 175.357859][T10931] : entered promiscuous mode [ 175.404391][T10938] syzkaller1: entered promiscuous mode [ 175.416345][T10938] syzkaller1: entered allmulticast mode [ 175.472103][T10945] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 175.486399][T10940] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1388'. [ 175.497110][T10940] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 175.601388][T10950] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 175.672213][T10958] netlink: 'syz.2.1394': attribute type 4 has an invalid length. [ 175.698272][T10956] netlink: 'syz.2.1394': attribute type 4 has an invalid length. [ 175.762710][T10958] netlink: 'syz.2.1394': attribute type 4 has an invalid length. [ 175.843432][T10956] netlink: 'syz.2.1394': attribute type 4 has an invalid length. [ 175.885393][T10971] nbd: illegal input index -8454144 [ 175.887788][T10958] netlink: 'syz.2.1394': attribute type 4 has an invalid length. [ 175.946329][T10956] netlink: 'syz.2.1394': attribute type 4 has an invalid length. [ 175.990356][T10973] netlink: 'syz.4.1397': attribute type 11 has an invalid length. [ 176.288000][T10990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.462420][T11001] __nla_validate_parse: 8 callbacks suppressed [ 176.462436][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 176.500438][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1408'. [ 176.522278][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 176.831695][T11015] "syz.1.1410" (11015) uses obsolete ecb(arc4) skcipher [ 176.911164][T11024] tipc: Enabled bearer , priority 0 [ 176.952709][T11024] syzkaller0: entered promiscuous mode [ 176.978272][T11024] syzkaller0: entered allmulticast mode [ 177.028273][T11024] tipc: Resetting bearer [ 177.131738][T11022] tipc: Resetting bearer [ 177.230536][T11022] tipc: Disabling bearer [ 177.237916][T11044] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1418'. [ 177.259234][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'. [ 177.828215][T11076] IPv6: NLM_F_REPLACE set, but no existing node found! [ 178.015911][T11086] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1430'. [ 178.038770][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1429'. [ 178.080532][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 178.195524][T11092] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1431'. [ 178.292306][T11101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1432'. [ 178.815891][T11134] Bluetooth: MGMT ver 1.23 [ 179.035396][T11149] ip6_vti0: entered promiscuous mode [ 179.411360][T11169] bond0: entered promiscuous mode [ 179.434313][T11169] bond0: left promiscuous mode [ 179.626750][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.787284][T11190] hsr_slave_0: left promiscuous mode [ 179.807175][T11190] hsr_slave_1: left promiscuous mode [ 180.067155][T11202] delete_channel: no stack [ 180.420284][T11241] validate_nla: 70 callbacks suppressed [ 180.420303][T11241] netlink: 'syz.0.1475': attribute type 32 has an invalid length. [ 180.600420][T11241] (unnamed net_device) (uninitialized): option coupled_control: invalid value (132) [ 181.150918][T11277] netlink: 'syz.3.1483': attribute type 33 has an invalid length. [ 181.373027][T11292] netlink: 'syz.1.1487': attribute type 33 has an invalid length. [ 181.452103][T11292] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20003 [ 181.513759][T11292] bond0: entered promiscuous mode [ 181.525283][T11292] bond_slave_0: entered promiscuous mode [ 181.555457][T11292] bond_slave_1: entered promiscuous mode [ 181.575954][T11292] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 181.807323][T11317] __nla_validate_parse: 22 callbacks suppressed [ 181.807341][T11317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1492'. [ 181.845600][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1492'. [ 181.959719][T11327] netlink: 'syz.3.1496': attribute type 11 has an invalid length. [ 181.977335][T11327] netlink: 'syz.3.1496': attribute type 4 has an invalid length. [ 181.997830][T11327] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1496'. [ 182.255018][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1501'. [ 182.343430][T11350] gretap0: entered promiscuous mode [ 182.359459][T11350] macsec1: entered promiscuous mode [ 182.365461][T11350] macsec1: entered allmulticast mode [ 182.376783][T11350] gretap0: entered allmulticast mode [ 182.387784][T11350] gretap0: left allmulticast mode [ 182.393150][T11350] gretap0: left promiscuous mode [ 182.435649][T11366] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1506'. [ 182.610679][T11373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1507'. [ 182.641519][T11373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1507'. [ 182.681660][T11382] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1507'. [ 182.890341][T11394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1514'. [ 182.925212][T11402] netlink: 'syz.1.1517': attribute type 30 has an invalid length. [ 183.051308][ T7915] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 183.070535][T11411] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1518'. [ 183.373551][T11421] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 184.219505][T11440] hsr0 speed is unknown, defaulting to 1000 [ 184.255954][T11441] hsr0 speed is unknown, defaulting to 1000 [ 184.606052][T11472] geneve2: entered promiscuous mode [ 184.623929][T11472] geneve2: entered allmulticast mode [ 184.716800][ T7915] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 184.740944][ T7915] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 184.819893][ T7915] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 184.860044][ T7915] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 184.884332][T11497] netlink: 'syz.1.1540': attribute type 1 has an invalid length. [ 185.210271][T11503] pim6reg1: entered promiscuous mode [ 185.224616][T11503] pim6reg1: entered allmulticast mode [ 185.422147][T11522] netlink: 'syz.0.1545': attribute type 4 has an invalid length. [ 185.439822][T11522] netlink: 'syz.0.1545': attribute type 4 has an invalid length. [ 185.711847][T11534] netlink: 'syz.3.1550': attribute type 1 has an invalid length. [ 185.908955][T11547] netlink: 'syz.2.1554': attribute type 13 has an invalid length. [ 185.946140][T11547] netlink: 'syz.2.1554': attribute type 17 has an invalid length. [ 185.979397][T11547] syz_tun: left promiscuous mode [ 186.028796][ T5949] syz_tun: tun_net_xmit 110 [ 186.175786][T11547] geneve2: left promiscuous mode [ 186.186308][T11547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.233368][T11547] bond2: left promiscuous mode [ 186.253569][T11547] bond2: left allmulticast mode [ 186.307485][ T5949] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.317696][T11547] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 186.440624][ T7916] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.494966][ T7916] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.515612][T11561] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 186.540155][ T979] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.577884][ T7916] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.601585][ T7916] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.614524][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 186.678528][T11545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.828539][ T979] syz_tun: tun_net_xmit 110 [ 187.064828][T11604] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 187.149196][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.181688][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.182250][T11610] __nla_validate_parse: 8 callbacks suppressed [ 187.182263][T11610] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1571'. [ 187.384899][T11619] netlink: 'syz.2.1573': attribute type 1 has an invalid length. [ 187.438041][T11619] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1573'. [ 187.449481][T11619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1573'. [ 187.524013][T11619] 8021q: adding VLAN 0 to HW filter on device bond5 [ 187.545942][T11627] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 187.555403][T11627] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 187.774180][T11638] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1576'. [ 188.027948][ T1210] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.183643][T11660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1583'. [ 188.210856][T11666] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1586'. [ 188.447716][T11663] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.794463][T11663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.907712][ T7908] wlan1: Trigger new scan to find an IBSS to join [ 189.383988][ T7908] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.450137][ T7908] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.482863][ T7908] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.493786][ T7908] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.503132][ T7908] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.533226][ T7908] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.573560][ T7908] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.607991][ T7908] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.635948][T11717] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 189.644300][T11718] netlink: 'syz.1.1595': attribute type 8 has an invalid length. [ 189.667378][ T7908] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.683615][ T7908] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.703323][ T7908] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.724591][ T7908] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.838504][T11723] v: renamed from dummy0 (while UP) [ 189.952806][T11741] netlink: 'syz.3.1599': attribute type 1 has an invalid length. [ 190.005982][T11733] tipc: Enabled bearer , priority 0 [ 190.125888][T11751] netlink: 'syz.2.1601': attribute type 33 has an invalid length. [ 190.174329][T11742] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 190.219798][T11733] tipc: Disabling bearer [ 190.362297][T11760] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.407095][T11760] bridge_slave_1: left allmulticast mode [ 190.423177][T11760] bridge_slave_1: left promiscuous mode [ 190.452599][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 190.474926][T11760] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.550491][T11760] bridge_slave_1: entered promiscuous mode [ 190.557193][T11760] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 190.892750][T11789] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1613'. [ 191.423393][T11815] C: renamed from lo (while UP) [ 191.631758][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1620'. [ 191.647440][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'. [ 191.889721][T11835] validate_nla: 1 callbacks suppressed [ 191.889741][T11835] netlink: 'syz.3.1625': attribute type 2 has an invalid length. [ 192.026360][T11845] netlink: 'syz.1.1627': attribute type 4 has an invalid length. [ 192.043446][T11845] netlink: 'syz.1.1627': attribute type 12 has an invalid length. [ 192.052073][T11845] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 192.252084][T11860] bridge5: entered allmulticast mode [ 192.434762][T11869] __nla_validate_parse: 1 callbacks suppressed [ 192.434781][T11869] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1634'. [ 192.651192][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1636'. [ 192.715602][T11884] netlink: 'syz.1.1637': attribute type 3 has an invalid length. [ 192.737911][T11884] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1637'. [ 192.923796][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'. [ 192.964994][T11896] netlink: 'syz.4.1640': attribute type 1 has an invalid length. [ 193.014663][T11896] netlink: 'syz.4.1640': attribute type 3 has an invalid length. [ 193.015852][T11902] netlink: ct family unspecified [ 193.056653][T11902] openvswitch: netlink: Actions may not be safe on all matching packets [ 193.084678][T11896] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1640'. [ 193.123922][T11900] netlink: 'syz.4.1640': attribute type 1 has an invalid length. [ 193.154887][T11908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1643'. [ 193.164127][T11900] netlink: 'syz.4.1640': attribute type 3 has an invalid length. [ 193.187573][T11900] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1640'. [ 193.338025][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 193.486883][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 193.897332][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1654'. [ 194.105247][T11951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.192478][T11941] netlink: 'syz.3.1654': attribute type 1 has an invalid length. [ 194.283271][T11951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.459485][T11951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.473617][T11979] netlink: 'syz.0.1663': attribute type 1 has an invalid length. [ 194.617638][T11951] netdevsim netdevsim4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.101226][T12010] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 195.140353][ T7915] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.142273][T12010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.213814][ T7916] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.292000][ T7906] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.304206][ T7906] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.939324][T12055] geneve4: entered promiscuous mode [ 195.965756][T12055] geneve4: entered allmulticast mode [ 196.005306][ T7906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 196.150843][T12058] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 196.290598][ T7906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 196.364990][T12065] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 196.404868][ T7903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 196.426676][ T5864] Bluetooth: hci3: command 0x0406 tx timeout [ 196.427413][ T5873] Bluetooth: hci2: command 0x0406 tx timeout [ 196.434789][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 196.672081][T12075] batadv3: left allmulticast mode [ 196.680005][T12075] batadv3: left promiscuous mode [ 196.687183][T12075] bridge0: port 1(batadv3) entered disabled state [ 197.511717][T12097] validate_nla: 2 callbacks suppressed [ 197.511756][T12097] netlink: 'syz.3.1695': attribute type 4 has an invalid length. [ 197.570811][T12099] netlink: 'syz.3.1695': attribute type 4 has an invalid length. [ 197.793073][T12108] __nla_validate_parse: 12 callbacks suppressed [ 197.793093][T12108] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1696'. [ 197.817547][T12108] netlink: 'syz.0.1696': attribute type 4 has an invalid length. [ 197.864053][T12108] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1696'. [ 197.916887][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 197.966445][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 198.005018][T12058] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 198.055619][T12058] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 198.151690][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1699'. [ 198.254204][T12058] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 198.265481][T12117] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1702'. [ 198.265507][T12117] NCSI netlink: No device for ifindex 0 [ 198.341772][T12058] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 198.569421][T12058] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 198.593236][T12058] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 198.642929][T12136] tipc: Enabled bearer , priority 0 [ 198.662236][T12127] tipc: Enabling of bearer rejected, already enabled [ 198.694742][T12130] syzkaller0: entered promiscuous mode [ 198.701129][T12130] syzkaller0: entered allmulticast mode [ 198.760523][T12127] tipc: Resetting bearer [ 198.778554][T12126] tipc: Resetting bearer [ 198.805415][T12141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1708'. [ 198.821772][T12126] tipc: Disabling bearer [ 198.875658][T12145] openvswitch: netlink: Key type 16144 is out of range max 32 [ 198.905413][ T7906] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 198.925062][ T7906] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 199.002583][ T7903] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 199.011874][ T7903] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 199.082999][ T7915] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 199.104288][ T7915] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 199.165396][ T7906] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 199.186647][ T7906] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 199.345604][T12163] netlink: 'syz.4.1716': attribute type 8 has an invalid length. [ 199.623396][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1718'. [ 199.669831][T12185] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 199.688876][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1719'. [ 199.880513][T12197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1721'. [ 200.919822][T12257] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 201.154635][T12268] IPVS: Unknown mcast interface: nicvf0 [ 201.249028][T12274] tipc: Started in network mode [ 201.253949][T12274] tipc: Node identity 080211000001, cluster identity 3 [ 201.328634][T12274] tipc: Enabled bearer , priority 0 [ 201.375362][T12288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.611950][T12298] netlink: 'syz.1.1752': attribute type 26 has an invalid length. [ 201.735283][T12301] veth9: entered allmulticast mode [ 201.989106][T12332] netlink: 'syz.3.1758': attribute type 9 has an invalid length. [ 202.197876][T12334] netlink: 'syz.2.1759': attribute type 1 has an invalid length. [ 202.446720][ T5878] tipc: Node number set to 134418688 [ 202.535363][T12355] hsr0 speed is unknown, defaulting to 1000 [ 203.139990][T12373] __nla_validate_parse: 8 callbacks suppressed [ 203.140009][T12373] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1768'. [ 203.140191][T12365] netlink: 'syz.4.1766': attribute type 1 has an invalid length. [ 203.488146][T12365] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.570483][T12399] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1773'. [ 203.599571][T12379] bond3: (slave veth7): Enslaving as an active interface with a down link [ 203.625948][T12385] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 203.656079][T12395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.664048][T12395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.676816][T12395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.704453][T12395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.038672][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'. [ 204.395382][T12440] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1786'. [ 204.425597][T12440] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1786'. [ 204.454437][T12440] tipc: Cannot configure node identity twice [ 204.670013][T12454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1790'. [ 205.176818][T12479] wg2: entered promiscuous mode [ 205.315027][T12486] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1801'. [ 205.398655][T12490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.409354][T12490] IPVS: Unknown mcast interface: nicvf0 [ 205.418862][T12490] netlink: 'syz.4.1803': attribute type 3 has an invalid length. [ 206.431950][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1814'. [ 206.460873][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1813'. [ 206.497956][T12539] vlan2: entered promiscuous mode [ 206.503045][T12539] bridge0: entered promiscuous mode [ 206.547811][T12546] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1813'. [ 206.801591][T12560] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 207.031671][T12574] sctp: [Deprecated]: syz.1.1823 (pid 12574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.031671][T12574] Use struct sctp_sack_info instead [ 207.131202][T12582] netlink: 'syz.4.1824': attribute type 1 has an invalid length. [ 207.768726][T12617] team1: entered promiscuous mode [ 207.782270][T12617] team1: entered allmulticast mode [ 207.861181][T12620] netlink: 'syz.3.1840': attribute type 1 has an invalid length. [ 207.969780][T12628] bond6: (slave bridge5): making interface the new active one [ 207.980717][T12628] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 208.015513][T12621] bond6: (slave bridge6): Enslaving as an active interface with a down link [ 208.184276][T12637] netlink: 'syz.3.1845': attribute type 10 has an invalid length. [ 208.195878][T12637] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 208.216198][T12637] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 208.274348][T12642] __nla_validate_parse: 38 callbacks suppressed [ 208.274365][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'. [ 208.334058][ T5946] hsr0 speed is unknown, defaulting to 1000 [ 208.616058][T12649] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 208.907869][T12651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1850'. [ 208.957921][T12651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1850'. [ 208.980166][T12665] netlink: 'syz.0.1853': attribute type 21 has an invalid length. [ 209.021161][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1853'. [ 209.098255][T12665] netlink: 'syz.0.1853': attribute type 21 has an invalid length. [ 209.134942][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1853'. [ 209.381132][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1857'. [ 209.617951][T12691] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1861'. [ 209.667181][T12691] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1861'. [ 209.692806][T12691] netlink: 'syz.3.1861': attribute type 6 has an invalid length. [ 209.749151][T12691] netlink: 'syz.3.1861': attribute type 5 has an invalid length. [ 209.766705][T12691] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1861'. [ 210.452508][T12730] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1870'. [ 211.465451][T12763] netlink: 'syz.3.1879': attribute type 1 has an invalid length. [ 211.474181][T12763] netlink: 'syz.3.1879': attribute type 3 has an invalid length. [ 211.482098][T12763] NCSI netlink: No device for ifindex 813332851 [ 211.488853][T12765] netlink: 'syz.3.1879': attribute type 1 has an invalid length. [ 211.498155][T12765] netlink: 'syz.3.1879': attribute type 3 has an invalid length. [ 211.505982][T12765] NCSI netlink: No device for ifindex 813332851 [ 211.821239][T12794] netlink: 'syz.4.1888': attribute type 10 has an invalid length. [ 211.850102][T12794] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 211.944592][T12804] syzkaller1: entered promiscuous mode [ 211.970529][T12804] syzkaller1: entered allmulticast mode [ 212.550627][T12834] bridge0: entered promiscuous mode [ 212.574526][T12834] bridge0: entered allmulticast mode [ 212.585116][T12836] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 212.794695][T12845] vxcan1: entered allmulticast mode [ 213.334954][T12883] __nla_validate_parse: 15 callbacks suppressed [ 213.334972][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1913'. [ 213.363991][T12876] : entered promiscuous mode [ 213.432128][T12890] pim6reg1: entered promiscuous mode [ 213.494658][T12890] pim6reg1: entered allmulticast mode [ 213.574610][T12897] validate_nla: 2 callbacks suppressed [ 213.574629][T12897] netlink: 'syz.0.1919': attribute type 4 has an invalid length. [ 213.595822][T12897] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1919'. [ 213.628113][T12898] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1920'. [ 213.660697][T12897] `: renamed from bond0 (while UP) [ 213.764635][T12906] netlink: 'syz.3.1923': attribute type 11 has an invalid length. [ 213.935337][T12920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1926'. [ 214.020934][T12925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1927'. [ 214.031932][T12925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1927'. [ 214.203730][T12936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1929'. [ 214.310523][T12941] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !忿$ULDDw}zR3p(@ [ 214.375200][T12944] tap0: tun_chr_ioctl cmd 1074025678 [ 214.394635][T12944] tap0: group set to 0 [ 214.493979][T12946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1932'. [ 214.620525][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1933'. [ 214.650555][T12951] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1934'. [ 214.894240][T12964] netlink: 'syz.3.1939': attribute type 1 has an invalid length. [ 215.124917][T12977] netlink: 'syz.3.1944': attribute type 4 has an invalid length. [ 215.139759][T12979] netlink: zone id is out of range [ 215.171505][T12979] netlink: del zone limit has 4 unknown bytes [ 215.252411][T12978] netlink: 'syz.0.1943': attribute type 1 has an invalid length. [ 215.584766][T13009] openvswitch: netlink: Key type 16144 is out of range max 32 [ 215.844757][T13021] tipc: Enabled bearer , priority 0 [ 215.857631][T13021] syzkaller0: entered promiscuous mode [ 215.865645][T13021] syzkaller0: entered allmulticast mode [ 215.943238][T13021] tipc: Resetting bearer [ 215.961613][T13019] tipc: Resetting bearer [ 216.011889][T13019] tipc: Disabling bearer [ 217.314150][T13091] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 217.875038][T13118] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 217.935743][T13118] netlink: 'syz.1.1984': attribute type 6 has an invalid length. [ 218.284720][T13146] gretap0: entered promiscuous mode [ 218.345961][T13151] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 218.400380][T13153] tipc: Enabled bearer , priority 0 [ 218.418137][T13153] syzkaller0: entered promiscuous mode [ 218.425571][T13153] syzkaller0: entered allmulticast mode [ 218.442855][T13142] __nla_validate_parse: 17 callbacks suppressed [ 218.442872][T13142] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1991'. [ 218.467436][T13142] 0{X: renamed from gretap0 [ 218.483899][T13142] 0{X: left promiscuous mode [ 218.491707][T13142] 0{X: entered allmulticast mode [ 218.505191][T13142] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 218.565266][T13157] vlan0: entered promiscuous mode [ 218.589708][T13153] tipc: Resetting bearer [ 218.615801][T13152] tipc: Resetting bearer [ 218.690593][T13152] tipc: Disabling bearer [ 218.698461][T13163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1999'. [ 218.700585][T13164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1999'. [ 218.734009][T13160] tipc: Enabling of bearer rejected, already enabled [ 219.135840][T13178] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2004'. [ 219.246065][T13181] veth15: entered allmulticast mode [ 219.418485][T13199] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 219.780333][T13211] pim6reg1: entered promiscuous mode [ 219.801756][T13211] pim6reg1: entered allmulticast mode [ 220.124324][T13232] netlink: 'syz.1.2018': attribute type 1 has an invalid length. [ 220.139308][T13233] netlink: 'syz.2.2017': attribute type 3 has an invalid length. [ 220.199164][T13232] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.294874][T13240] bond4: (slave ip6erspan0): making interface the new active one [ 220.333384][T13240] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 220.754453][T13274] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2028'. [ 221.100128][T13287] hsr0 speed is unknown, defaulting to 1000 [ 221.122234][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2035'. [ 221.194359][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.243043][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.288182][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.356773][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.433672][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2039'. [ 221.442739][T13307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2039'. [ 221.585358][T13314] veth0: entered promiscuous mode [ 221.647270][T13313] veth0: left promiscuous mode [ 221.673041][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2044'. [ 221.704936][T13322] netlink: 'syz.4.2044': attribute type 5 has an invalid length. [ 221.732082][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2044'. [ 221.772210][T13326] 8021q: VLANs not supported on wg1 [ 222.745856][T13387] batadv_slave_1: entered promiscuous mode [ 222.770191][T13386] batadv_slave_1: left promiscuous mode [ 223.525261][T13447] __nla_validate_parse: 4 callbacks suppressed [ 223.525281][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'. [ 223.720527][T13457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2081'. [ 223.883743][T13465] wg2: entered allmulticast mode [ 224.064829][T13481] wireguard: wg1: Could not create IPv4 socket [ 224.100774][ T51] Bluetooth: hci4: link tx timeout [ 224.106355][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 224.117690][ T5877] Bluetooth: hci4: link tx timeout [ 224.122840][ T5877] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 224.134642][ T5877] Bluetooth: hci4: link tx timeout [ 224.142892][ T5877] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 224.153412][ T5877] Bluetooth: hci4: link tx timeout [ 224.159411][ T5877] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 224.171204][T13502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2089'. [ 224.180463][ T5877] Bluetooth: hci4: link tx timeout [ 224.186004][ T5877] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 224.195309][ T5877] Bluetooth: hci4: link tx timeout [ 224.200555][ T5877] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 224.406747][T13518] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2091'. [ 224.701406][T13527] pim6reg: entered allmulticast mode [ 224.781726][T13529] dvmrp1: entered allmulticast mode [ 224.812955][T13529] dvmrp1: left allmulticast mode [ 224.890900][T13540] netlink: 'syz.2.2097': attribute type 6 has an invalid length. [ 225.112494][T13548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2099'. [ 225.305372][T13564] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2105'. [ 225.455431][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2106'. [ 225.540727][T13573] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2109'. [ 225.621640][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'. [ 225.754746][T13590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2114'. [ 226.001857][T13602] netem: change failed [ 226.197242][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 226.562995][T13642] netlink: 'syz.0.2126': attribute type 28 has an invalid length. [ 226.602271][T13642] netlink: 'syz.0.2126': attribute type 3 has an invalid length. [ 226.693515][T13644] openvswitch: netlink: IPv4 tun info is not correct [ 227.297247][T13684] sctp: [Deprecated]: syz.4.2141 (pid 13684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.297247][T13684] Use struct sctp_sack_info instead [ 227.529389][T13690] netlink: 'syz.3.2143': attribute type 23 has an invalid length. [ 227.698345][T13705] netlink: 'syz.0.2147': attribute type 14 has an invalid length. [ 227.713647][T13690] netlink: 'syz.3.2143': attribute type 1 has an invalid length. [ 227.747277][T13690] netlink: 'syz.3.2143': attribute type 11 has an invalid length. [ 227.785891][T13690] netlink: 'syz.3.2143': attribute type 7 has an invalid length. [ 228.024149][T13717] `: (slave syz_tun): Releasing backup interface [ 228.069451][T13717] syz_tun: left allmulticast mode [ 228.127126][T13717] bond3: (slave bridge2): Releasing backup interface [ 228.173857][T13717] bond4: (slave bridge3): Releasing backup interface [ 228.296302][T13736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 228.297925][T13739] netlink: 'syz.0.2158': attribute type 6 has an invalid length. [ 228.304333][T13736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 228.304473][T13736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 228.329086][T13736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 228.337051][T13736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 228.345152][T13736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 228.353248][T13736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 228.361262][T13736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 228.369230][T13736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 229.495983][T13807] __nla_validate_parse: 14 callbacks suppressed [ 229.496003][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2175'. [ 229.857779][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2181'. [ 230.609273][T13866] netlink: 'syz.1.2194': attribute type 1 has an invalid length. [ 230.620912][T13866] netlink: 'syz.1.2194': attribute type 1 has an invalid length. [ 230.890452][T13888] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2201'. [ 230.971190][T13893] netlink: 'syz.0.2200': attribute type 11 has an invalid length. [ 230.996344][T13890] can: request_module (can-proto-0) failed. [ 231.189359][T13905] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2206'. [ 231.222179][T13906] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 231.893256][T13947] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 231.926688][T13947] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 231.948491][T13944] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 231.999244][T13944] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 232.194565][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2226'. [ 232.293397][T13973] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2228'. [ 232.341303][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2230'. [ 232.642240][T13992] validate_nla: 3 callbacks suppressed [ 232.642258][T13992] netlink: 'syz.3.2234': attribute type 8 has an invalid length. [ 232.661903][T13973] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2228'. [ 232.675832][T13986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2234'. [ 232.808451][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2235'. [ 232.859333][T13999] netlink: 'syz.1.2235': attribute type 5 has an invalid length. [ 232.903450][T13999] geneve3: entered promiscuous mode [ 232.926766][T13999] geneve3: entered allmulticast mode [ 232.942975][T13492] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 232.971303][T13492] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 233.010311][T13492] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 233.046229][ T30] audit: type=1107 audit(1754773859.612:3): pid=14008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 233.056345][T13492] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 233.413351][T14020] block nbd4: NBD_DISCONNECT [ 233.418152][T14020] block nbd4: Send disconnect failed -32 [ 233.525945][T14023] netlink: 'syz.2.2243': attribute type 2 has an invalid length. [ 233.734556][T14039] netlink: 'syz.4.2249': attribute type 1 has an invalid length. [ 234.148018][T14066] netlink: 'syz.2.2257': attribute type 2 has an invalid length. [ 234.324884][T14078] geneve4: entered promiscuous mode [ 234.332277][T14078] geneve4: entered allmulticast mode [ 234.907109][T14112] __nla_validate_parse: 9 callbacks suppressed [ 234.907129][T14112] netlink: 564 bytes leftover after parsing attributes in process `syz.2.2269'. [ 234.924300][T14115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2268'. [ 234.943444][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 235.031932][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2268'. [ 235.336663][T14130] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2275'. [ 235.438272][T14143] net_ratelimit: 46 callbacks suppressed [ 235.438292][T14143] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 235.675039][T14153] delete_channel: no stack [ 235.771007][T14162] netlink: 'syz.3.2283': attribute type 1 has an invalid length. [ 235.888815][T14170] netlink: 'syz.3.2283': attribute type 5 has an invalid length. [ 235.959530][T14162] 8021q: adding VLAN 0 to HW filter on device bond7 [ 236.242464][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'. [ 236.307175][T14189] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2291'. [ 236.426113][T14206] netlink: 'syz.0.2287': attribute type 39 has an invalid length. [ 236.645534][T14216] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2297'. [ 236.659271][T14216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2297'. [ 236.898170][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'. [ 237.086208][T14247] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 237.164337][T14251] netlink: 'syz.4.2304': attribute type 1 has an invalid length. [ 237.255370][T14251] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.300994][T14251] vlan2: entered allmulticast mode [ 237.345219][T14251] veth1: entered allmulticast mode [ 237.382132][T14251] bond5: (slave vlan2): Opening slave failed [ 237.463199][T14269] netlink: 'syz.1.2311': attribute type 9 has an invalid length. [ 238.079634][T14269] Set syz1 is full, maxelem 6117 reached [ 238.093090][T14301] validate_nla: 2 callbacks suppressed [ 238.093108][T14301] netlink: 'syz.3.2316': attribute type 4 has an invalid length. [ 238.202832][T14304] netlink: 'syz.1.2319': attribute type 12 has an invalid length. [ 238.601305][T14327] IPVS: set_ctl: invalid protocol: 46 172.30.1.3:20002 [ 238.795778][T14346] netlink: 'syz.4.2329': attribute type 1 has an invalid length. [ 240.173212][T14408] __nla_validate_parse: 15 callbacks suppressed [ 240.173230][T14408] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2347'. [ 240.249157][T14408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2347'. [ 240.371771][T14431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2353'. [ 240.542142][T14438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2354'. [ 240.551758][T14438] netlink: 'syz.3.2354': attribute type 1 has an invalid length. [ 240.566596][T14438] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2354'. [ 240.799048][T14449] tipc: Enabled bearer , priority 12 [ 240.824943][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2359'. [ 240.850843][T14452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2359'. [ 240.863397][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2357'. [ 241.195303][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2364'. [ 241.293336][T14476] lo: entered promiscuous mode [ 241.304398][T14476] netlink: 'syz.3.2364': attribute type 2 has an invalid length. [ 241.340863][T14476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.550317][T14500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2370'. [ 241.581948][T14494] hsr0 speed is unknown, defaulting to 1000 [ 241.718405][T14500] veth7: entered allmulticast mode [ 241.916603][T11689] tipc: Node number set to 2229367297 [ 242.623851][T14533] netlink: 'syz.4.2379': attribute type 21 has an invalid length. [ 243.269084][T14566] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 243.698433][T14588] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 243.709796][T14588] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 244.483788][T14633] tipc: Enabling of bearer rejected, already enabled [ 246.165788][T14719] IPVS: Error connecting to the multicast addr [ 246.188830][T14721] __nla_validate_parse: 18 callbacks suppressed [ 246.188848][T14721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2436'. [ 246.484712][T14739] bridge0: port 2(veth0_to_bridge) entered blocking state [ 246.500790][T14739] bridge0: port 2(veth0_to_bridge) entered disabled state [ 246.510370][T14739] veth0_to_bridge: entered allmulticast mode [ 246.519602][T14739] veth0_to_bridge: entered promiscuous mode [ 246.526168][T14739] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.541347][T14739] bridge0: port 2(veth0_to_bridge) entered blocking state [ 246.548959][T14739] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 246.696354][T14743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2441'. [ 246.741251][T14743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2441'. [ 246.788650][T14743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2441'. [ 247.189371][T14761] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2446'. [ 247.202404][T14761] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2446'. [ 247.389205][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2449'. [ 247.861717][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2454'. [ 247.876187][T14793] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 0, id = 0 [ 247.878520][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2454'. [ 247.930312][T14795] netlink: 'syz.3.2456': attribute type 1 has an invalid length. [ 248.015458][T14799] bond0: entered allmulticast mode [ 248.022118][T14799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.033858][T14799] bridge0: port 1(bond0) entered blocking state [ 248.041733][T14799] bridge0: port 1(bond0) entered disabled state [ 248.051078][T14799] bond0: entered promiscuous mode [ 248.204915][T14808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2461'. [ 248.364482][T14823] dvmrp1: entered allmulticast mode [ 248.804656][T14850] netlink: 'syz.1.2472': attribute type 7 has an invalid length. [ 248.832195][T14851] netlink: 'syz.0.2473': attribute type 2 has an invalid length. [ 249.342138][T14882] netlink: 'syz.3.2482': attribute type 1 has an invalid length. [ 249.758363][T14888] hsr0 speed is unknown, defaulting to 1000 [ 249.905345][T14911] vlan5: entered allmulticast mode [ 249.915346][T14911] veth1: entered allmulticast mode [ 250.147791][T14929] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 250.167765][T14930] syzkaller0: entered promiscuous mode [ 250.173360][T14930] syzkaller0: entered allmulticast mode [ 250.771512][T14946] netlink: 'syz.1.2501': attribute type 1 has an invalid length. [ 250.789529][T14946] netlink: 'syz.1.2501': attribute type 2 has an invalid length. [ 250.799014][T14946] netlink: 'syz.1.2501': attribute type 1 has an invalid length. [ 250.910147][T14953] openvswitch: netlink: Flow key attr not present in new flow. [ 251.265238][T14973] vlan5: entered promiscuous mode [ 251.273492][T14973] bridge0: entered promiscuous mode [ 251.536897][T14991] netlink: 'syz.3.2514': attribute type 1 has an invalid length. [ 251.544664][T14991] netlink: 'syz.3.2514': attribute type 3 has an invalid length. [ 251.589259][T14991] __nla_validate_parse: 19 callbacks suppressed [ 251.589276][T14991] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2514'. [ 251.609796][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'. [ 251.623635][T14991] NCSI netlink: No device for ifindex 131080 [ 251.809051][T15002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2518'. [ 251.844057][T15010] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2518'. [ 251.890124][T15010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2518'. [ 251.957097][T15016] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 251.985691][T15016] syzkaller1: entered promiscuous mode [ 252.001778][T15016] syzkaller1: entered allmulticast mode [ 252.199478][T15035] netlink: 'syz.0.2529': attribute type 1 has an invalid length. [ 252.214699][T15036] syzkaller1: entered promiscuous mode [ 252.222313][T15036] syzkaller1: entered allmulticast mode [ 252.647421][T15056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 252.688542][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2538'. [ 252.832124][T15056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 252.869962][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2538'. [ 253.539578][T15112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2551'. [ 253.809571][T15128] netlink: 'syz.2.2556': attribute type 1 has an invalid length. [ 253.926001][T15135] bond8: (slave gretap1): making interface the new active one [ 253.940595][T15135] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 254.058972][T15142] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 254.442605][T15169] netlink: 'syz.1.2567': attribute type 2 has an invalid length. [ 254.745611][T15185] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 254.888567][T15181] hsr0 speed is unknown, defaulting to 1000 [ 255.013005][T15193] batadv0: entered allmulticast mode [ 255.023513][T15193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.165916][T15204] netlink: 'syz.4.2577': attribute type 1 has an invalid length. [ 255.242270][T15201] C: entered allmulticast mode [ 255.250227][T15201] C: left allmulticast mode [ 255.331650][T15206] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 257.104591][T15299] netlink: 'syz.4.2604': attribute type 1 has an invalid length. [ 257.139486][T15301] __nla_validate_parse: 12 callbacks suppressed [ 257.139506][T15301] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2603'. [ 257.149567][T15299] netlink: 'syz.4.2604': attribute type 1 has an invalid length. [ 257.353951][T15312] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2606'. [ 257.607515][T15328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2610'. [ 257.936746][T15345] hsr0 speed is unknown, defaulting to 1000 [ 258.023262][T15349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2614'. [ 258.514495][T15364] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2618'. [ 258.614540][T15371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2622'. [ 258.638409][T15367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2620'. [ 258.824378][T15382] [ 258.826763][T15382] ====================================================== [ 258.833910][T15382] WARNING: possible circular locking dependency detected [ 258.840947][T15382] 6.16.0-syzkaller-12084-g33caa208dba6 #0 Not tainted [ 258.847716][T15382] ------------------------------------------------------ [ 258.854745][T15382] syz.4.2625/15382 is trying to acquire lock: [ 258.860804][T15382] ffffffff8f689ed8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 258.870134][T15382] [ 258.870134][T15382] but task is already holding lock: [ 258.877507][T15382] ffff888145385e70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 258.886820][T15382] [ 258.886820][T15382] which lock already depends on the new lock. [ 258.886820][T15382] [ 258.897207][T15382] [ 258.897207][T15382] the existing dependency chain (in reverse order) is: [ 258.906205][T15382] [ 258.906205][T15382] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 258.914189][T15382] lock_acquire+0x120/0x360 [ 258.919210][T15382] _raw_spin_lock_bh+0x36/0x50 [ 258.924483][T15382] nr_rt_ioctl+0x193/0xd50 [ 258.929407][T15382] sock_do_ioctl+0xd9/0x300 [ 258.934420][T15382] sock_ioctl+0x576/0x790 [ 258.939256][T15382] __se_sys_ioctl+0xfc/0x170 [ 258.944355][T15382] do_syscall_64+0xfa/0x3b0 [ 258.949363][T15382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.955762][T15382] [ 258.955762][T15382] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 258.963565][T15382] lock_acquire+0x120/0x360 [ 258.968579][T15382] _raw_spin_lock_bh+0x36/0x50 [ 258.973853][T15382] nr_rt_device_down+0xa9/0x720 [ 258.979207][T15382] nr_device_event+0x137/0x150 [ 258.984490][T15382] notifier_call_chain+0x1b6/0x3e0 [ 258.990106][T15382] __dev_notify_flags+0x18d/0x2e0 [ 258.995670][T15382] netif_change_flags+0xe8/0x1a0 [ 259.001115][T15382] dev_change_flags+0x130/0x260 [ 259.006475][T15382] dev_ioctl+0x7b4/0x1150 [ 259.011310][T15382] sock_do_ioctl+0x22c/0x300 [ 259.016404][T15382] sock_ioctl+0x576/0x790 [ 259.021237][T15382] __se_sys_ioctl+0xfc/0x170 [ 259.026336][T15382] do_syscall_64+0xfa/0x3b0 [ 259.031346][T15382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.037761][T15382] [ 259.037761][T15382] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 259.045655][T15382] validate_chain+0xb9b/0x2140 [ 259.050937][T15382] __lock_acquire+0xab9/0xd20 [ 259.056124][T15382] lock_acquire+0x120/0x360 [ 259.061140][T15382] _raw_spin_lock_bh+0x36/0x50 [ 259.066409][T15382] nr_remove_neigh+0x25/0xe0 [ 259.071505][T15382] nr_add_node+0x1d9f/0x2570 [ 259.076598][T15382] nr_rt_ioctl+0xc12/0xd50 [ 259.081517][T15382] sock_do_ioctl+0xd9/0x300 [ 259.086525][T15382] sock_ioctl+0x576/0x790 [ 259.091359][T15382] __se_sys_ioctl+0xfc/0x170 [ 259.096458][T15382] do_syscall_64+0xfa/0x3b0 [ 259.101478][T15382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.107876][T15382] [ 259.107876][T15382] other info that might help us debug this: [ 259.107876][T15382] [ 259.118086][T15382] Chain exists of: [ 259.118086][T15382] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 259.118086][T15382] [ 259.131888][T15382] Possible unsafe locking scenario: [ 259.131888][T15382] [ 259.139361][T15382] CPU0 CPU1 [ 259.144706][T15382] ---- ---- [ 259.150058][T15382] lock(&nr_node->node_lock); [ 259.154808][T15382] lock(nr_node_list_lock); [ 259.161902][T15382] lock(&nr_node->node_lock); [ 259.169168][T15382] lock(nr_neigh_list_lock); [ 259.173915][T15382] [ 259.173915][T15382] *** DEADLOCK *** [ 259.173915][T15382] [ 259.182036][T15382] 1 lock held by syz.4.2625/15382: [ 259.187122][T15382] #0: ffff888145385e70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 259.196857][T15382] [ 259.196857][T15382] stack backtrace: [ 259.202758][T15382] CPU: 0 UID: 0 PID: 15382 Comm: syz.4.2625 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 259.202790][T15382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.202811][T15382] Call Trace: [ 259.202819][T15382] [ 259.202827][T15382] dump_stack_lvl+0x189/0x250 [ 259.202850][T15382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.202866][T15382] ? __pfx__printk+0x10/0x10 [ 259.202883][T15382] ? stack_trace_save+0x9c/0xe0 [ 259.202904][T15382] print_circular_bug+0x2ee/0x310 [ 259.202922][T15382] check_noncircular+0x134/0x160 [ 259.202940][T15382] validate_chain+0xb9b/0x2140 [ 259.202954][T15382] ? do_syscall_64+0xfa/0x3b0 [ 259.202980][T15382] __lock_acquire+0xab9/0xd20 [ 259.203002][T15382] ? nr_remove_neigh+0x25/0xe0 [ 259.203017][T15382] lock_acquire+0x120/0x360 [ 259.203036][T15382] ? nr_remove_neigh+0x25/0xe0 [ 259.203053][T15382] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 259.203071][T15382] ? nr_remove_neigh+0x25/0xe0 [ 259.203085][T15382] _raw_spin_lock_bh+0x36/0x50 [ 259.203101][T15382] ? nr_remove_neigh+0x25/0xe0 [ 259.203116][T15382] nr_remove_neigh+0x25/0xe0 [ 259.203133][T15382] nr_add_node+0x1d9f/0x2570 [ 259.203149][T15382] ? dev_get_by_name+0x21/0x200 [ 259.203164][T15382] ? dev_get_by_name+0x21/0x200 [ 259.203177][T15382] ? dev_get_by_name+0x21/0x200 [ 259.203190][T15382] ? nr_call_to_digi+0x136/0x1b0 [ 259.203205][T15382] nr_rt_ioctl+0xc12/0xd50 [ 259.203222][T15382] ? kasan_quarantine_put+0xdd/0x220 [ 259.203240][T15382] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 259.203258][T15382] ? apparmor_capable+0x137/0x1b0 [ 259.203275][T15382] ? capable+0x89/0xe0 [ 259.203289][T15382] ? nr_ioctl+0x1b1/0x3b0 [ 259.203309][T15382] sock_do_ioctl+0xd9/0x300 [ 259.203325][T15382] ? __pfx_sock_do_ioctl+0x10/0x10 [ 259.203339][T15382] ? __lock_acquire+0xab9/0xd20 [ 259.203364][T15382] sock_ioctl+0x576/0x790 [ 259.203378][T15382] ? __pfx_sock_ioctl+0x10/0x10 [ 259.203392][T15382] ? __fget_files+0x2a/0x420 [ 259.203412][T15382] ? __fget_files+0x3a0/0x420 [ 259.203431][T15382] ? __fget_files+0x2a/0x420 [ 259.203452][T15382] ? bpf_lsm_file_ioctl+0x9/0x20 [ 259.203469][T15382] ? __pfx_sock_ioctl+0x10/0x10 [ 259.203483][T15382] __se_sys_ioctl+0xfc/0x170 [ 259.203501][T15382] do_syscall_64+0xfa/0x3b0 [ 259.203518][T15382] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.203534][T15382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.203549][T15382] ? clear_bhb_loop+0x60/0xb0 [ 259.203565][T15382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.203580][T15382] RIP: 0033:0x7fca1938ebe9 [ 259.203594][T15382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.203608][T15382] RSP: 002b:00007fca1a28b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.203622][T15382] RAX: ffffffffffffffda RBX: 00007fca195b5fa0 RCX: 00007fca1938ebe9 [ 259.203633][T15382] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000005 [ 259.203643][T15382] RBP: 00007fca19411e19 R08: 0000000000000000 R09: 0000000000000000 [ 259.203652][T15382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.203660][T15382] R13: 00007fca195b6038 R14: 00007fca195b5fa0 R15: 00007ffce9c71278 [ 259.203676][T15382] [ 259.644387][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2625'.