last executing test programs: 1.815153649s ago: executing program 3 (id=2814): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r0) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default}, [@rose, @null, @default, @remote, @null, @rose, @rose, @null]}, &(0x7f0000000140)=0x4b, 0x80800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x4, 0x5, 0x7}, 0x20) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x140f, 0x60ceaae1ef55e4c3}, 0x10}}, 0x0) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) getpeername(r1, &(0x7f0000000340)=@alg, &(0x7f00000003c0)=0x80) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fe}, 0x1c, 0x0}}], 0x1, 0x20048000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f000000cc80)={0xffffffffffffffff}) splice(r8, &(0x7f000000ccc0)=0xffffffff, r7, 0x0, 0x5, 0x1) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000000)="bdb0495a154c4a76d66f48cd69a5e3eae3d694c450f21fd95cdbeda5315ab830a6679b10ce8c990de1dcb2391e5f344bd9b1eb0936ded816c048e12a7b8f2df7de42e7d709000000bc350366499f4a157fe324199a5c2f37a4") bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x3, 0x4}, 0x6) 1.655858423s ago: executing program 3 (id=2817): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x44) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x4000000) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000380)={0x7, {{0x2, 0x4e24, @multicast1}}, 0x1, 0xa, [{{0x2, 0x4e24, @rand_addr=0x64010101}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @multicast2}}]}, 0x590) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 1.255882456s ago: executing program 2 (id=2824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x840) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) (async) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xda8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xfff8, 0x7, 0x8, 0x200}, {0x22, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.255326164s ago: executing program 3 (id=2825): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x101, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}}, 0x4040040) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x10, 0x12, 0x1, 0x2000000}, 0x10}], 0x1}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 1.065389502s ago: executing program 2 (id=2830): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002280)={0x14, 0x5, 0x6, 0x201}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x28, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x4e001) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}]}, 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000190001090000000000000000021800200000ff000000000008000100ac141400"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000190001090000000000000000021800200000ff000000000008000100ac141400"], 0x2c}}, 0x0) 976.841915ms ago: executing program 3 (id=2831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022"], 0x1c}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000280)) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9c050000", @ANYRES16=r3, @ANYBLOB="02032abd70007cdbdf253b0000040800030010f5f9a47f93b900000000225c643b90d8e4600b7da31dc76612d72c0310ebdf55b48fd6826954efbd215bf6f71b8d40f73631cc2d8a36d72372093dbb46358885cab43db811ae241e49f8a7c722d95173c80ad6e0d79a63ef38ff7a3b1c6b02cb695f29c6391ced062d0fa7d2cf19c541885493c350490d98efd4385d2a2183ca365fe3256a14134db1fb172a387f2e2efffe376f592c593625c8443c4f4615756c6adbef948df261889b603cb166bd03220484b59c6a09", @ANYRES32=r4, @ANYBLOB="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"], 0x59c}, 0x1, 0x0, 0x0, 0x1}, 0x40040a0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x7800, 0x7800, 0x3, 0x3, {{0x3b, 0x4, 0x3, 0x7, 0xec, 0x66, 0x0, 0x1, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x2c, 0x76, 0x3, 0x2, [{@private=0xa010100, 0x4}, {@private=0xa010102, 0xaa5}, {@multicast2, 0xe}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}]}, @ssrr={0x89, 0x13, 0xd4, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x23}, @broadcast]}, @generic={0x86, 0x4, "6a02"}, @timestamp_prespec={0x44, 0x4c, 0xf4, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@loopback, 0x3}, {@remote, 0x100000}, {@remote, 0xfffffff6}, {@remote, 0xf}, {@local, 0x3}, {@multicast2, 0x5}, {@empty, 0x1}, {@private=0xa010100, 0x2}]}, @ssrr={0x89, 0xb, 0x5d, [@empty, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x67, 0x3, 0xf, [{@remote, 0xf994}, {@private=0xa010100, 0x3}, {@multicast1, 0x3}, {@loopback, 0x8}, {@local, 0xaab2}, {@empty, 0x5}, {@broadcast, 0x7}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 975.697228ms ago: executing program 0 (id=2832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000840)=@setlink={0x38, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, 0x19a}, [@IFLA_BROADCAST={0xa, 0x2, @random="f66fac3bc98b"}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20008052) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x1c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x20050800) sendmmsg(r1, &(0x7f0000000680)=[{{&(0x7f0000000040)=@llc={0x1a, 0x300, 0xfd, 0x8, 0x4, 0x8, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)="50a3a5133c806b169fc7eae520560e1ae7f87a2dd67b5f24e6012ab8e99bc0def04f9d0a756100577d242e96a55e2db53c428dcc9de20f23afa532fdfb8125d72d4620639074f1809aff154e9b5e6cc2f83365a7cedf77f4f8a989465234ad184dfaca8e044483562e367490eead43d0a33f4c6cd4233fdbcca1a868ee82167129d9b48fd8c81dffbb9c8b65b23fafb32a54622a7e0b36fc5d", 0x99}, {&(0x7f00000001c0)="1ef377ecd102f6f1a18992189eb6c362a4614766c9e949b0abdb8c5f3eace7c0cd5c116ffa2d39f9a0691335d69e311dfebee24b612a6bd3b3e819ee5113917665ef94ac387d4f994e04dae06f767357bc4374e57df7c47dbdc5c535123fd5ffd39f0fb824657a3627", 0x69}, {&(0x7f0000000340)="a186ced56f2c06758cbcf6afee78d247d44fcbcc23af21f186091980057fd73559486eb8c1fe9525352e4e3c456223c17cf1918b681ad89bf21afb328835b7be5d7595dfaa49523b183bb7cc1c76fbc4da7aa0e04384dbcf033d5a60e80877e6ce4c328605220f1e1cb0761d694abf2b2ae14ffd2044", 0x76}, {&(0x7f00000003c0)="031e69bfd30a87be4590c3036a9066ec7ff8f79f814ea4547e2f879d3839081c7685f8e6ebc113db8cd2ea5e39d5461e937875c42abc51a24b5d13768027b0d37fc3c68059d3312717e66258babf31eae9ba281f381ad4e35e1be9b6d6b5d7f0fe06b539ac62face8f65eb18aa9c87f04da03a52891ed42e2c87306efcf52e2baca079ebea28c5bd8b309ede6546c176f0f1690f1d6d9b90c6d648e7cf3344621226b36903a467018c18db6d7ab0329bfb98b1a804b96ab5325a3511fd523aca6a22be7ee1d247f8732aa4ab338ff6732ca2e34fd8adf5f0375174bd1fe2a3dfbd4ef34c878d9a8bc55fc136519ec3c77e6a30", 0xf3}, {&(0x7f0000000240)="5de8f9051c21c600006dbabaeb7e6aa13c4f5977f45c4df9678580d0bc4ccff6ba2df0428c442941beac0ce389", 0x2d}, {&(0x7f00000004c0)="e9a4", 0x2}, {&(0x7f0000000500)="e50afb313b811d53d75de0babc64d3251e0c522240e9217cba4780eb8817db4bc0b950cbf01fec97e9bf34a0d3d080d4e56e2be80a9e7892f13c38d6716fc4ce28668ae02b522984c06fa9bfbd4ef884de90976d8ae63e41c3e4a2bc8af28e2c91b662be18745d4b5478496672a54cfdfaefd541efb0e992d22252443ac2e3d407c91b946ecde6da9b83f2f67b93027dcb0226e9afeb94e6b582e528e12989177986e2d0318fe7df844417e487cd72fe44bbecb35cee63c935564f4e7cbf0cc0a0c3946f60d56d3c6b1fcf", 0xcb}], 0x7, &(0x7f0000000cc0)=[{0x1010, 0x85, 0xe, "e9ec8281b359f2038d5330c2d0ecd6976459f963d8ff006754dd63444a114fc1d9ff6e95e1065c4e44ae06efead9482e2a6ed2b6068bc67972aaccd715fb90ecfd43cf0f89ab6af446f2e56493843f76d417680396181440e18c55a0f66207616ea656b14b0f708182844c903857beb4d6b601025c036b80364407e80505acb866363edb3adda428a9717e5907a4b7b921bf2aa9d908caedf736a355ab9aabbca00b9375821f87fe7dc185e07e1a28678a16365025e770d45713556959f8136eb50e7dd208d3caac0ad470b76b51638a7d63a44d5772e7a3f2e0155208f390d407f7818689d7401087d0ee0232fffd208ade206492a7746a1e32b9008cc2c56df1b6a1517a76e120e92391598490139e2b5d19256503319ff97e8a81378d0bb93a4317485725878e02e0a2c3058062ee84a17dd9c6be4d8aac2ca70c0c0c9f482e98288ca185f568b6c10344cc7249895383c49fcbd57a61af74e327f0d8ad813481244c8d01a8162985f6226cdc6c0293aa277405226d503b3fe920b5566310d6169f237f164aec6cbe5ce333c6bffd8457552b72249dd9c87d41ff2eed13e3a22c5ea33cca4503c368a66724d400359ccc5ebcfa438f30bd3b0f7e655dabbfd514fd7592e9cc1290e205e496ebae762dcd83da1d5c4b14137c79bdb4664139cc6c148ddf299539e82ca2f9270fbdab6976c46760255a33060264f07ffd0223093ac9b54b482a5a93ff5c42170548a73d23458931febaf80571f00457c94c0052874b7cef9a5a81ee763e9742d851a0289a198484c34456f0ec37334676d8a51350827c4a7771ca10528259d427c38c7f5e541f8cee272086e4a1e824dba73375d60478f8bdd908b4df37b414c76f11db2de5fd4c8d69fdf38cca4133bc9d46010240097a6271b1ff422fd4f9fd848d7fa9cca6ae468fbd97399671dec4b2bc415366dfd6dd18e4ccade1d5836d63e8fa0b30f4bb500a279018099cc92b366edcf37da9cc6ac512b50acb47d624118175d7165978fe69035698ca0ae943a415ac6ba8beb7c285f58591d581626c1f62f9f616ed96aa168d708b824d93d2cb5eb7fdeb4787e823d8f48ce3e20ba8658c3a408aef9cbb1c816de969b63b2b73feb6baf54e5cfbaac4cc75285c55bb54c963f6d4a2efd63e4c6103c9468bd3ac5997a921a25bc5d3cb27deee69324396638433b51423bfe290fdca520f1b9994b54220afce956d0f1144183e2679387ad2918efb6a7c2a5dd3873f616e422080aa55f2753c22d31b6bdd9550cfc196aa22e77edc06c7c8ec1ddda74f3be09946b326a7366e2ba4af457f9b7d62e3284d063f06f332b5513fc758b0d5d2ae30ee97691f57bdf6646733ac873a7579362dc919046782cb3abb01529e2b819e3935e89815fa9670c3ead6c2b27bfed1a840286d02971be2559c4d72c790036e754fc28f579952b7dcadd9f616f3a6219408682a15b9e68b1718e113030b4840b6673ba038b51cd869cdad6372cdffa1eaa1a1cb399413aaa80fbd404633ddc397f420367783b4cc850f267803fcf055487f16cf5c1182c7b6f8dacd8bce6e673567a09d4ee8015d4d19758f590d6a146441d2d888a9e1cd50651482351c95f0c538cc5adc0bea05d6ac4b49c5d6a34693c1a8446f77faff662a0b5715c997459a3cbd7369fb267e3993fd7060002462a425c6117ac7c25c52c5352a2183a13e8b5cc3dc447fecf08e5af3a68f64ea991d41c9c54f1ca34b5f615bc076c86e31167c2fcc590ee2e43debba448272247f22c7b49165bba9dc0080810f58245ac28364827bd4e16df8fa3969fb539d1371d25d4acdbf4c55a3c1033ef200b2bcd15703e45ca8be8650502aceebdf4be16d5138dd12b7912d1a426c24452d7db74245ff4d0d73f74cd6309d954f16c89549e3faed164c641a5ee31280b1fb5190c221a63613bba4986aeb8eec66b06ed916ccc1a1e1273d85bd79cf865ff91048958862f78cced606dc77143289ab917250448f9cc22f7ffbc043220d4e120c6176f3ed59526511d3bfd33151e9467efcdadcfdc0f1297e1fe660c990c7c36f1bbdf75968e6c1485d2f6b64094d6848fcdab95eed52d8aefb174e61e13207fda70b1ac797bc3b8b3f7766ca3ff110468905dc3963aea960d6aad15bc96193bd53bec6d6ed5cc7d3e64e8c45ff1c8dbb08830f8aa4896f0696bf37c2911ad1264b445f6ac76a247c42b90bf5b0c52c762cf3fe211ce9c32b8ac00c517c6c1660e91ba23ad1f20c4d02f004182fd7c12b4e5f836d6c50a48ed9a1737d105de019370b99a58945b09f1bf60cbd0896a5a17324ca8ad14bcca12fb083cca2f071f9ae8f7e0761d9964415ef8b2632f82cf8b13237292d3021e281aeec355579bd8855094564c61346e34c80d0699b114b0262aaf609bdb563e7d989b8adffddb8b5e631427d9a0eda2adb6dffd659ead42d8480ffc932f090a215ad9480e73e6afe38c21386b8ca5ec2b3d2c399aaa709ab443bccc20c0634358ba6a1722254baa78c23419aaccda9d0de0f3dcecb2a61b720f7e48ce867238a303913c170209f2ffa93dfd366e9095bf7251a2b69207ebbc06885292f1687c8c8a21b66b5268d9ba7436f2eee75f7a50fc8acc695ffdf3be00ce256cb36aeb62a0271862888fc1bedd2c406e940311287d4dbdd7964faf48a0969e37248910643ddf94aaf09496272ca28afe6790a53f27fda51b8823c536600c85c1a196bc45e575cb06c6076e33af6328536a1276eb9b14c82856b4153d13803337b137861412f93501b9663dbc484512c1c7959fc51c418a514af4b91ccb2f2e35ec24b60e8553c853652fa1dc30ce2f75601c7967f8dc2c70992d0dd4e7c52af49e74a5983f7f4d1e7bcb46b2237282614711807f55ed7f35c69d3b7826820018bd54cc8b63fd9cd968e9a7d7517514d73aab081b99c9e1c0fd9689c09b4f2cd253e9705724586fc5e711e26c6da301de66ba2c6402f6c5b58c66d17a0847cd2dc97d6ce50e123752829bc32faa6e3d0b2930a9504b64870a2b544049ffd5c688f5847c7d1bf966cf74a8a4538ea74304d97c5d3bf4ed2a90fdc7f755571ec4499aaa49513fed157becfe2256e083a994f26666db4636f8b872d8bc443bd649fd5da2f010f2d2f5ce06584795e6bdd8d782bb294574ded9be7c037d6008f0e2378e91a89acd491bb9686a9f9214aba54bdf406604f737c6e7e624aac50fa36102877e448456cc31740c71a25e794e118c38fcb96d9536090e233bf16151840e6dc7859f291ad0bd7d0151eb9e8c5e6bb1066002836b51632b86abb1efe75e1833e034cc62f4e1c855a7ad7a15f1c3aaa9783014bd735df31a3671c6261939c3c241aa02d6ce1a18faf136ef93be21e28a08567b5dd8dafee9f8ae1dd2adf32cb38d61d3ace1778b89142e43f987ed0c35299b33fececeb008d76054aaebe14a347d55f8d76dbb587d09c7827b8c49fdaba9150b45dbfc566569d0ac231505f06d0fddd917026e998138449789607c44edf06ecb7d5ea0aa8c0da590f82c74e50d50931f67151979ca53022aaa1283ff59c833c0d088726493dd2d90ffaeaa6d46d29b965b8ab23e8cef44685a2827f6cb150e59dfa91ef4882811aec5debc75c2b3bf00cc66ca47b26450e849a67455c5f3674aab7aa5320861ba7ea6cdba9447d5bc6e87d723b4c85b3887f2be06c3785059acc54f11526172b57251db1cb8392e1dd8442cc06c7ee58d23f9a8ab9b1ae3d22968b44d5fef883caf1625ce3aafeec4e1ef4b75b457c390757f57c2ca575e958d7d76d348891fadfeef38a4bf602ea9e258573e84971ac9ccc24dfdbfa0ee99ba0bce2360d4e3eb418ab34977b72905fa0958035ed9013d0056914211299da92e148b8968b4d5888e876f37053a627cebe766c5701f24b2091f9f6f79ce79bddf14443fba67924a5781c8d6cd99f4118500cd9dee41820f747183483f6fbd4976dc82837ab165ab9894307225447e151f5cb29eecfae06fa78573b783f88ded0485ab4088b3c5e1c0e14a98abd467abf217f4865e9a62f15c8342630663983bc155cf9e1b9afd05fd87961f194af694ee038180855ed32503fb9fec98f135d78b7d8a35ce9faad6ee858da709529072fb444971ba614163cb3b64817f410fe1484d30be914b0385806ccd6006aa9c2af8725f4f28f02689b3e0a2e35e37a0335755b64a48cb08e0ffd5fc11c0015af1608815e72e620bc38effaca5d3701da453d2e456fd57771f0fbe49be05ae9b71561f9c07128ce3297216746b6c2ec5a66bbab616ce577f795ce500e9a3e72472953cdfacbcc43f14b5d3cbc68276aeff67610d140358223e32998783a54f3d9660794b2c04b2f5fd350910755015b349827e0d5d2aea908167d40a68c4e49bad4419af150adbb5f09bd36549e27408288c7a8a692a2bb7f3f0fb3dbfb9e8ff2e975c17fe2b0aef655025bf9cea3e49407487128608ad7081eae2a815bf5ca046a3f237d1f832f083209509d37cfcb9db2e65e97b7a2c2bb00a88f5f8d944fd6e792f70f586ec739b884e7390d8570448e04783b1a0aba5a8eb9f0d6b1c8c557887841612b93e483cda9871972ca3d3845a24d575d6a69ebad9a4bde745b2450f83af48a8bec0f7fc8e57711415543418eedce2e490223ad208aacb33db8ac8a80ec2e93abde9114c4baad2b08a9280de7e6360407190af809f692d437dbb7ca908cf745bfd04853284c3db98ad42f86bbaec02b3e0ea3b8484943015bfc292af30f9338d7c4f9c99a1074374374e927ab19859598c9d161d7254ba32d3d6959d394a1878babc3b2c6574437d1f7722760b19df82bf80a687f99097d4e1684368ad27260f70f91d28075eaa3c0e3d39b4dc4f32c095be14b1746b2db5a7d4a8bbe322fc4805ed2d78435cfbfc5c6180cec438bd8c9073e261131e5d8cdbceebe24c71c8090083c0b9a48b8ba65c5263d0e611c9d4a2640526c2683f8af9cd26dec8a3a68fd7181a69f63e363d2855a38d4cc46de9e3c25678695bb777bea18f3c8b4e1c1bd4b6bbeeb2bb8e296b7bbe200db50d31f5b6ca011247cc92c1e593e166945a8ea28d642e704c0ef0b39b5fd07bed2671b3741394e0de71e13738b44e7b46f31530c403adaaf90f9c4485690e59e71001d4fbc8f98ea1e0f76b5bc137a79135161dcba1dbe14e1b3ca982d5fd0e366e1bc0dcea6db5fcf7e8bc5d0d82ef4645d435b58deb811a05f7fa94a1d5d6aa8440ea117a74fc01c76f1099da7dce7b644dac5baea084e9a50029b00d25367d9c1673bdd11e73711cb5e55b90181adc36e8977fd94286d2bb47bb251f60796ef7d0a68105bb9c4c913af30c9907d32de3b207a2e725bbcc3bbc77b3985544b21f10bbf2c824f2ec370f7225b42caccdb9e4c6575ddec6dcec9fceb2ea7f740effccb77a6f977dc016aaa5b0f445b413d7c6603df3a49993def946a569fe163c1a213541484dd33e3344b2f89ae38fc485d532ab70a1ec61e287457b41a32b6e2b83376b961c48663cdb170d3d67c14311cdfae63804a461627b99fc3a4f9b17d1a6b6cd4c41351e8198f8262bdecc72925b20560f7f219195a52ba4b8b87ee1fa26ce613a128fb12fc5ba9d33e2df1a37f09086ab2b7c4f85feadb3149c0627d4e0eac26921053f1c88e6cf4d466f4ee646c2aeea4692b6ee3c2d07d19b31fa6ee6694df7d2d32ea79ca00e8dcc87af6e78d9b3a91d1a4688af782cb1654715fe89702c546b90e971e391206f8b7830fa150dd97b0b71eee8937102f"}, {0x20, 0x3a, 0x9, "d1459c86ebaa526e14c18005088340"}, {0x98, 0x118, 0x5e, "a2a7554b60cd91ed8b66d743291bcbbe1494fbb3e7c096b6baa6685e7a7edae69a78923d9fda3d9a128c4a7dcf1378a0049f35a58c7d68f9856d53d3b2cde850784c4f74a4c60f424512ded90e3e5a684342afbcc9d440f45244806a7cbe2f455df33eaf05d9382dcedeff3340f62073afac21ee51b8f4d744b239b9dc9ff2c0cec598039cd5d36f"}, {0xd8, 0x10d, 0x7, "c9e5a6f107bc60bbcbc5b8ccd6aa713bd0ca0339aafaa992a9ac0d177dea49bf72978ece916a22151e454770be0588a4438952ed1a5a94942aa8fe0bb539ad51edcd94535f9ab939e4595f914576dc2dee7ee8c9e94cdef011b1f649c42e1ca420b4f43a86c14ed8e1b1e95e91cce915633d050b434598f961175084b30002d11ab10724895968c5eb2b8e4a0dd67e41164ae2ab318ed916e8332a551d264c0f567eaa6da43a86413342bebf104318ab99ad818ee8135495b1ae15ef494e545787990ee2b5a4ac9c"}, {0xc0, 0x115, 0xba, "098c23dcf2b866c41c826f14fe5d752301ac8482f931ea23af54e9690de674b486a5471889b6cd0ebbd16f3146e249b2fc8c0ed84ae85d40ee1f4bff8ddd368e0b963fc379b78de2f288b0d232c2e31c93fdb4f51e319a2dbae9d15d609a93a1cbed13f6544c37eaf0c70df357fa4e4b4d0535c5deeb0b7b59c3e6d3e4fd21861bed06ae0d4a4d4df5b2a1cbd157aa56adab1d5c0ac5d09c372bc3fb224ee7dfb351c236b4aa2bdf451e6823"}, {0x80, 0x3a, 0x243, "4a03c717d4c09f42c26b6ebda3af9dec5db315f2ce68d034699e085e6e8ad0fac4b2d8966550f0092a263094a2567f40154c9becdbdd18f518e3eeb35626f477ecf6aaa3e8679fcf410a84dfdada088ef602b80bae4d8663c3328c3b6d3740abb6fb02529d38b3be1438ce00"}], 0x12e0}}], 0x1, 0x40) r6 = accept4$unix(0xffffffffffffffff, &(0x7f00000006c0)=@abs, &(0x7f0000000740)=0x6e, 0x800) sendto$unix(r6, &(0x7f0000000780)="3262fabc56b176825ddbbf2ef576bc27507cef81389b1c4961dcb4285e28bba06a96f24bb15387780f9f4caf30eb29aabe8da5f6f3cf21ba62ac2471a1bfbf5a858cafb98aef28437ca9d173c51724f867ed7195d5915451563ec70817dd4d8781ea3693b11c7849d666e07cfb1beae4cdc3abadf922fcc82acff30c0fc13ee91a9cf095ac271f39fbfc4fc81d34f414c98ba294da98521d1259b0ba55b74ffe1669d38d8b9fd6b1", 0xa8, 0x45, 0x0, 0x0) 887.912234ms ago: executing program 2 (id=2834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="3300000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x80}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 835.799866ms ago: executing program 1 (id=2835): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000061121000000000009500000000000000db8f8dd2a964b858d4fdafa285f908905a966388114c2dbbb3888bcc63a3d1ce1928815b4bed61b14ff2f5e66c02329bb38c889a06b064956d614093cef500455757cc17d8f9a1e881da31e798ea202c3a1c83029332db61ef5fb73376cafe2f9df2dc2a9216d49922eb2b4470f369206fb8c5236a478d73a51c12d2be73510f0f53b1058ffa74483ff017a62aae"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8da}]}, 0x54}, 0x1, 0x0, 0x0, 0x40804}, 0x4040000) (async) r2 = socket(0x10, 0x3, 0x6) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xfffffffffffffe5e, 0x2, {{0x2, [0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3dd8, 0x5, 0x8}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x20, 0x20, 0x8, 0x8, {{0x14, 0x4, 0x0, 0x26, 0x50, 0x65, 0x0, 0xa6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast2, {[@timestamp={0x44, 0x10, 0x37, 0x0, 0x4, [0x3a0, 0x871b, 0x2]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf5, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0xad, [@multicast1, @multicast1, @empty]}, @generic={0x89, 0xc, "fcc99ada28faee68baf2"}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001914000000110001"], 0xd8}}, 0x80) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x0, 0x0, r7, 0x80000001, '\x00', r8, r9, 0x0, 0x4, 0x1}, 0x50) 794.614288ms ago: executing program 0 (id=2836): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_create1(0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r3, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xfffffdb6, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 793.232839ms ago: executing program 3 (id=2837): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0xe4, 0x48, 0x10, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x38, 0x0, r1, 0x10001}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x440c0}, 0x800) 758.113097ms ago: executing program 4 (id=2838): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r1}, 0x18) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x88) 662.597181ms ago: executing program 3 (id=2839): r0 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000020020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008"], 0x64}}, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="45000000f62e6ba611685850db870d651a2bec81bd26425127d92cbed335e0c79edce426b2c13c9e2bbb9c5ae2824807bfaf0b761789a7db0e961e87e693f3c795c92db6c3e9c615497e19bb26563e8119a50625056d8cd5053b37518999faba9fc87b9d6ecbd85a886e3fdaafc5a8cb08c073be983ff7c93a02cae7d53bbb3de7b6a5623e1ec052d00968b0a4db1c262567fbc8e5", @ANYRES16=0x0, @ANYBLOB="020026bd7000fddbdf25010000000000000009410000001800180000000569623a76657468315f766c616e000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) 662.02174ms ago: executing program 0 (id=2840): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0xf, 0x2) 575.94384ms ago: executing program 4 (id=2841): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000)=0x9, 0x4) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="00000000060005"], 0x24}}, 0x0) 575.623763ms ago: executing program 1 (id=2842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f0000000d40)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000000)=0x1e2600, 0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="f7ff04c403ffff6d4b4e258df100000000f1ce9e25a1ef3f45f49fa0210507da2fd1aebbbb8f3133cd0b672d8ade36a375c50cde1f542c5fd1b00fa7a5b9313b606e22a2a751ccffedd3f9017325e2f5262c02235debfbf7b295000cd62167ca5db9f5f6efa5edfa50bcb6a12f6a57858b96cee299c017f5df3dc844ead6eaf4e1f82958a2a4ff"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 518.812747ms ago: executing program 0 (id=2843): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x13, 0x10, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044000}, 0x4c090) 459.312586ms ago: executing program 4 (id=2844): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0xffffffff) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x15, 0xa, 0x801, 0x0, 0x0, {0x8, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x12, 0x8, "13ab40f6647a85bc6ff8eda68e44"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 411.84635ms ago: executing program 1 (id=2845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100"], 0xec}, 0x1, 0x0, 0x0, 0x40055}, 0x4000) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x1, 0x7, 0x100, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xdcbd8c0bd024abae) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100"], 0xec}, 0x1, 0x0, 0x0, 0x40055}, 0x4000) (async) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x1, 0x7, 0x100, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xdcbd8c0bd024abae) (async) 407.493509ms ago: executing program 2 (id=2846): socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) syz_emit_ethernet(0x15, &(0x7f0000000540)=ANY=[@ANYBLOB="0a57e700cd3700"], 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000180), &(0x7f0000000300)=0x8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r11 = socket(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x1}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x50}}, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r14, 0x80001000) 362.53332ms ago: executing program 1 (id=2847): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x50}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x34, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff3b}, 0x90) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) 360.614417ms ago: executing program 4 (id=2848): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000840000090000000002"], 0x48) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80000}, 0x80) 243.232096ms ago: executing program 1 (id=2849): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x2, &(0x7f0000000680)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x94) 191.731171ms ago: executing program 2 (id=2850): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x200000000000011, 0x3, 0x0) (async) unshare(0x600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611210000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket(0x1e, 0x805, 0x0) connect$tipc(r6, 0x0, 0x0) unshare(0x10000100) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r8, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="030202"], 0xc) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7], 0x38}}, 0x0) 190.475285ms ago: executing program 0 (id=2851): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_create1(0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r3, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xfffffdb6, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 160.002413ms ago: executing program 1 (id=2852): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x8a, @mcast2, 0x596}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000f80)="849d721861bd2dcc5e7064345f024a7a72ba717362c0cfc49199dd238b3ec15e", 0x20}], 0x1, 0x0, 0x0, 0x11000000}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x9, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x29c, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x61}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd04d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf9}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x459f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0x29, 0x3, "1fe7b3d8d57f2e03325bea01c0d3b46516f9698125e779dfaf59ad16142fd6634207bf81f5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x14, 0x3, "8f088acd208a15d172f285480a7a9be0"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "ad7e53284055833f1a32cfe64ad703b3393be99fba23057151cb87"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x89a4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd7c}]}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = socket(0x1, 0x803, 0x0) r7 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r7, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x16, 0x8}}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a84350014060100000000000000000000000000000000fe8000000000000000000000000000aa00004e227475f000430883d25e"], 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r9], 0x50}}, 0x0) sendto$l2tp6(r10, &(0x7f00000000c0)="ccde38dbfde1dff988b99697c55c41c81713095eda23da8be803d95631a1413c69d9784c98b3a74322170998b6b64011f58a2651ccf83872cb00d5a8991d3075d7b13a39fd26794bf6042c5c829515bea3595cd7c412d6959850c56b2ac9b2d8b2a89bc8e4b968f93a77556a28e65b9c4cf035dfc50624d7e78c9ed6d24032a9039dbb1807da0649b4146be7ddf6e22705e1509d4fcdfa74df751d4c4d7e5dcfb6229fcdcd5052abdd1796d43a22ee30681a47b2f8731a98da3d81162aa75438afc2bfaa76268d052458acc20dea81916b69d93124401aca7afc4605dafb8373efb4db", 0xe3, 0x20000011, &(0x7f0000000240)={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x25}, 0x9000000, 0x4}, 0x20) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$unix(r4, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r12, 0x8914, &(0x7f0000000000)) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x8, &(0x7f0000001e40)=0xffff, 0x4) ioctl$sock_netrom_SIOCADDRT(r11, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r11, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @bcast, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 145.699573ms ago: executing program 4 (id=2853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x20, 0x17, [0xcc, 0x5, 0x0, 0x5, 0x6, 0x2, 0x7fffffff]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=@newqdisc={0x288, 0x24, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x6, 0x4}, {0x5, 0xffe0}, {0xd, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x5}}, @TCA_RATE={0x6, 0x5, {0xad, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}, @TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x6, 0x0, 0x9418, 0x2, 0x5, 0x80, 0x4}}, {0xc, 0x2, [0x401, 0x0, 0x5dc, 0xec]}}, {{0x1c, 0x1, {0x9, 0x6, 0x2, 0x800, 0x2, 0xf, 0x1000, 0x2}}, {0x8, 0x2, [0x7, 0x52]}}, {{0x1c, 0x1, {0xf, 0x5, 0x3, 0x6, 0x1, 0x3, 0x6, 0x2}}, {0x8, 0x2, [0xfff9, 0x6]}}, {{0x1c, 0x1, {0x0, 0x1, 0x2, 0x0, 0x2, 0x101, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x3, 0x550e, 0xfffffff7, 0x2, 0xffff, 0x6f, 0x5}}, {0xe, 0x2, [0x200, 0xb62, 0x8, 0xa0f, 0x5]}}]}, @TCA_STAB={0x18c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x80, 0xfff, 0x7ff, 0x1, 0xdd8, 0x6, 0x3}}, {0xa, 0x2, [0x4, 0x5, 0x38]}}, {{0x1c, 0x1, {0x6, 0x3, 0x8, 0xf93, 0x1, 0xfffff800, 0xc, 0x1}}, {0x6, 0x2, [0x80]}}, {{0x1c, 0x1, {0x40, 0x8, 0x3, 0xb, 0x3, 0x5, 0xffffffff, 0xa}}, {0x18, 0x2, [0x0, 0xff7f, 0x1d30, 0x8001, 0x4, 0x9, 0x7, 0x40, 0x3, 0xfffd]}}, {{0x1c, 0x1, {0x5, 0x45, 0xe0, 0x6, 0x2, 0x6, 0x5, 0xa}}, {0x18, 0x2, [0x8, 0x2, 0x4, 0x0, 0x800, 0x1, 0x5, 0x3, 0x9b68, 0x9]}}, {{0x1c, 0x1, {0x4, 0x1f, 0x3, 0x40, 0x0, 0x3, 0x0, 0x7}}, {0x12, 0x2, [0x2, 0x1, 0x5, 0x101, 0x1, 0x1, 0xe6]}}, {{0x1c, 0x1, {0x2, 0xc4, 0x400, 0x8, 0x1, 0x1000, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x2, 0x346a, 0x10000, 0x0, 0x5, 0x3, 0x3}}, {0xa, 0x2, [0x0, 0x1, 0x8]}}, {{0x1c, 0x1, {0x80, 0x3, 0xfbff, 0x6, 0x1, 0x4, 0x3, 0x8}}, {0x14, 0x2, [0x1, 0x200, 0x3a00, 0x2, 0x8, 0x1, 0x8, 0xf0]}}, {{0x1c, 0x1, {0x81, 0xf, 0x1, 0x8, 0x2, 0x3, 0x0, 0x6}}, {0x10, 0x2, [0x7, 0x2d87, 0x9, 0x8, 0x2, 0x2]}}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r3 = accept(r1, &(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000580)=0x80) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000005c0)=[{0x1, 0x3, {0x0, 0xff, 0x4}, {0xbdbeed2198606920, 0x0, 0x3}, 0x0, 0xfe}, {0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1}, 0x2}, {0x1, 0x0, {0x1, 0xf0, 0x1}, {0x1, 0xf0, 0x1}, 0x1, 0xff}, {0x3, 0x2, {0x1, 0xf0}, {0x0, 0xf0, 0x1}, 0xff, 0x1}, {0x0, 0x1, {0x0, 0xf0, 0x1}, {0x1, 0xff, 0x3}, 0x2}], 0xa0) r5 = socket$isdn(0x22, 0x3, 0x25) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x1, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40020}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0xb1, &(0x7f0000000780)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @local, @val={@void, {0x8100, 0x3}}, {@mpls_mc={0x8848, {[{0x8}], @ipv4=@udp={{0x6, 0x4, 0x2, 0x7, 0x9b, 0x66, 0x0, 0x5e, 0x11, 0x0, @rand_addr=0x64010102, @loopback, {[@ra={0x94, 0x4, 0x1}]}}, {0x4e21, 0x4e21, 0x83, 0x0, @opaque="b2671c9e499ae031f81305d2bba1fecde357d671ebef95ea69f1c43b045607946da9937392dd9dc57a31361feef438a4caf5e0925eb40f3668a27da768502588ec03e6399b0af209aa2434f82d756117074a4effa185b1c58caafc563850fb680213116091694dea540284f6f3553a765f8b6ae18708e374e3a492"}}}}}}, &(0x7f0000000840)={0x1, 0x4, [0x4ef, 0xb14, 0x872, 0x95]}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000880)={r3, 0x1, 0x100000001, 0x7}) sendmsg$NFT_BATCH(r6, &(0x7f0000000d00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x188, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x73, 0x6, "634b513031c599a44ba99e4247be6679df734db613eaedfa1dafa6e1d43bb1dbc713121cd0756fc2a10da5479aae30b4d721eee32fdad3b7a34e1206332547348b8dfee17c97b833c97d03d818170495ed9a2358864bc9223c0fa6e916b0b48d757f4534376c942ff9bc8cded53cca"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x12, 0x6, "b3dee1ef629b91f5e9d4f446cf6b"}, @NFTA_TABLE_USERDATA={0xd4, 0x6, "21ac2067ef1e4946f50824a24f19d900f82bb03f657638b4fb4ca0509ee5ba92106534ed386bae84b1f19966147474962cd833b0163591e31db77b1282791efc63e13f765ad08aceb9248e6a346c25bf1db12d994296fa83d0dc6c5f7004468826c4ef676108ad732d620c97ca995337d64d69974d5db57f66ada9189ae2d615e9b47c853c15141c6c3206bd78f182b289a9e94c256ff57320f902cbcffd710120dc42e0a673444ce0e98bfbb9207b22e94a6e5bf43820859745c1aa7828ca38e8d2b781e91130474ab40c9047eb2a8e"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELOBJ={0x124, 0x14, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xf7, 0x8, "f72f46c59a06e482da573df88f7e00257937543f03663ce2055fc09ddf9559fac942d1ce731206c315c85fc1c2e42a012feffc1f9e5fd325164a4b0308f78db92985b27d39301d09f0eacbea689bb2d93987b137db4064e258cc304db5479b49e0078494d6277664c5b24c352c541af77245d2f5187ef1d35737139ad483d45d465c462a39695cb498e2e2055e25c479333458f876b25beda74f4697a82ba0ac04b45f0471ac53aee413a79dd662cd55ac3a89ec75814cd3bfb29f98b7111c8666e7585afe475ff00c9c8a493d917cc4fc8dfa25e4ca3bc11ec5f7cdb83285a43a7d0b9b89fdb3578ec459ee3bdacd5eb7193f"}]}, @NFT_MSG_NEWCHAIN={0x94, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x7d, 0xc, "6beedf8cb7520b60a33af00309530e2d5f7b7c323462cdd93a4d4cd0fe04117a7c8f059aada723c1300ea4fcace9bda6912e60ecf176b33186bf0cf38d05689449fe00b15b799f8b7e325ccd495661039f63e7532ad86c6bc9eba699d09038ded2663835b0f47cf92b02ffa914dbe8de19490c9509f4bef1f1"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x390}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000d40)={@loopback, @empty, 0x1, "f30bd68dad43ce4eb33c48f9bd4532705d1d3d0f766e471d60025f36c958fcc7", 0x0, 0x8001, 0x200, 0x10}, 0x3c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f00)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x6, &(0x7f0000000d80)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @map_val={0x18, 0x7, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xfffffff9}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}], &(0x7f0000000dc0)='syzkaller\x00', 0x4e4, 0xb0, &(0x7f0000000e00)=""/176, 0x41000, 0x4, '\x00', r2, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0)={0x1, 0x9, 0x101, 0x800}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[r6, r6, r7, r6], 0x0, 0x10, 0x2}, 0x94) r8 = socket$nl_crypto(0x10, 0x3, 0x15) bind$netlink(r8, &(0x7f0000001040)={0x10, 0x0, 0x25dfdbfe, 0x4000000}, 0xc) r9 = accept4$llc(r3, &(0x7f0000001080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000010c0)=0x10, 0x80800) ioctl$FIBMAP(r9, 0x1, &(0x7f0000001100)=0x100) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000011c0)={'ip6tnl0\x00', &(0x7f0000001140)={'syztnl2\x00', r2, 0x29, 0x2, 0x4, 0x2e5, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x7800, 0x10, 0x3, 0x8}}) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000001300)={@xdp={0x2c, 0x6, r10, 0x40}, {&(0x7f0000001200)=""/186, 0xba}, &(0x7f00000012c0), 0x20}, 0xa0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004880}, 0x8004) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r6}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001500)={r3, 0xfd, 0x8, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x10, 0x11, &(0x7f0000001540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x898}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xda8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xa, 0x6, 0x0, 0x10, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000001600)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x3d, '\x00', r10, @fallback=0x2a, r6, 0x8, &(0x7f0000001640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001680)={0x5, 0x3, 0xc7, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000016c0)=[r9, r6, r7, r6, r6, r7], 0x0, 0x10, 0x2}, 0x94) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(r12) r13 = getpid() sendmsg$nl_netfilter(r6, &(0x7f0000001d80)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001800)={0x52c, 0x14, 0xa, 0x3, 0x70bd2a, 0x25dfdbff, {0xfc87526ff502836, 0x0, 0x7}, [@generic="133de05a8bd0c6bc46d2358c23b2f4d7c4def12d90aadb2493f179ab0b5c1a6155710f1373db58c0459dc18c77ba6ceb95390a031971ec3761fc9b326bca8d98504cd1e714d87c8141c09b18b89c450e9f37db3912820842dc29272ca0939cf19a650b3a90e2a5dd426c1b0788b4d8cf78d17101d64a890413533b1ea94096b370b0c547c09ed976496d331c40a9bb2be460339dd48a8671097e52e68299e282eb370f501ae41ef095171e7cef60efff5167dc57f66cae8a7d26f4deae8031863df527379f16fb5bcd767f8bce74ce41c08bc9d689d5f58e2fe2feeca86e", @typed={0xc, 0x6b, 0x0, 0x0, @str='ip6tnl0\x00'}, @generic="8796694827294185e6ee0880ce1137c790051ec8bc826471cd3c0328e0608ecff057dbd3d6860c3b33b2428a71ca5b6a0a1ab42c96e5951899eed7c849a77971bbbf1a9382fccb09ef3fb463b483891feb625884de47799c9e50f290039fba29a661d32a01e4fae95a4d984af2fe3fa60443991182644e361de98776135611a6c83a246db019c7bc0c8a139a93a146ba0e91e129ab94632c8a068b073d5be485728cfdc380e77d97fe6c55b9d92c9efff13f9918ee0e61588a38b272cb34e1bad5d09f27a4f8", @typed={0x14, 0xd0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x18, 0xe7, 0x0, 0x1, [@typed={0xc, 0x73, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x81, 0x0, 0x0, @pid=r13}]}, @typed={0x8, 0xdf, 0x0, 0x0, @u32=0xf}, @nested={0x1ff, 0xd9, 0x0, 0x1, [@generic="851ebfc02f323837cd879522aaccf97317db50ce7967757570b1a9b48f304236ba4dcc3c6d46b368ec2766af4e93b86b82018408c96b3fe1415c8775fed38733b3f3fdfd050e6ea9d4c6f32a472c6d07b99eb3858cb5c0a5a01fcdd616b0347dc8228a3e120e295ab1db01221eb22c081eab348023f4207c5127d4270b5cb3a5a3cbeb2dc4064f64ec032739a825721ec3d9cfaa95c0f9193f2df1d291c8e40d9177745100906a9b6661d99e6bc77eab7035aa6135dbf8a9f84b16e011cf3e62d772a79544f86c447ffb7e1ecd162ec12542aa4d4ec19f9fa5f3", @generic="1277f389e03cfb63211e13919f75de106502a23a89ae5749611d328dfe8d5c92af47134e2676f303c3d21d4899ba6923a1f860187a45f760452e9304430621f01f9a3a33a2a527584f5d04a553b0965cfdf57a6694f557281409017acf88cff4151b4fd4cb28ad4a4e522de9c12a98adc6638d517cb0806176dcaaacfda654b9161dc4e28c753a92c8e873e82b909832", @typed={0xc, 0xd3, 0x0, 0x0, @u64=0x1}, @typed={0x63, 0x146, 0x0, 0x0, @binary="30b4db57b12a4715fe28a932a660a59f567d06c6f3d1ccd3f2eedab3a57e1a47b1891fef1138cc27a7a3f9d9a037ae5423dd7530b01290b8d0dde6c429f1e783bd93dfb726cbddcf43011d3bf8718373d08638da035389babfe9c291cbe6c0"}, @typed={0x8, 0xa2, 0x0, 0x0, @str='[k)\x00'}, @generic="17fd2d6787a9c1250ee849e39524d7432f7b6149bd", @nested={0x4, 0x95}]}, @nested={0x133, 0x102, 0x0, 0x1, [@nested={0x4, 0x74}, @nested={0x4, 0xa8}, @generic="5a72d6270811dae971d880d2de19c4f274364a5f87a1e9ab113ddfb399aea931421f5120b38a34a0335befa1083d582591df20c874b8769cfe3125b5879395409829733c54fbf0eda7baf79c8b0e25bbb72ada2b385dfb09fb25ae41140979664aa74ef361d98571a57467686623bb66", @typed={0x8, 0x30, 0x0, 0x0, @u32=0xb22}, @generic="63055e0ab8496e38aa91baea13da71819a2f2ee14248d56f77f7bfe10075714c948e935852c5ffff39e6315e44069e962e01f4d0dbc75712b99fa1d7723d77ab08edc36383a3bf0f4843479978ff87e65af078d91d4387ae76e0678ba72ef37ccdee6d582a5d2947a7feee238255ab4dfb808d945dde0f671e9d7af2e3b81f86d1c8c30cd2759c9aeffeb605866f1c60015f65dc43a5fb615dacdd5aec57e7b964f1099d24e12cb2ec38641071bbee"]}]}, 0x52c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) 73.436958ms ago: executing program 2 (id=2854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x6a, 0x1, 0x0, &(0x7f0000000640)) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'macvlan1\x00', {0x2, 0x0, @local}}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000100000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40ffffff080000000000000000636f6e6e6c696d69740000000c00028008000140fffff274140000001100012b7d171c88849411ff2913071219de429ec7e6b9383b69cabb6e04e0a03c196803f577a661d70d97ff8a3823aeb589ddea1385e19adedf8b74594eeb52cbc422396d55450f6f1a666c4edae5eac6a794964109e7643126deebe0a0aa383864d42c2a59c3614c9093cb402e569a277ce8b03aba6d2dea2102dbb9259ee84026260b79cc722a0196651156b18eaace7e73a6bd0e18c183950c5965ec8f29e17a4deb508f99d0b8d2ff8acee963c40500e8a65dd9eae41009000000ccc96b5499ea3c2f0aa41d3a5657ecfe7247df4ed50a0183255f071d20a4fbc5c6a75044b8f4cc3b53f7e8e46d48f374796c"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 72.394508ms ago: executing program 0 (id=2855): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000740)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x7fffffff, 0x2, {{0x26, 0x4, 0x3, 0x7, 0x98, 0x66, 0x0, 0x5d, 0x29, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x9, 0x0, [{0x1, 0x3, "e6"}]}, @ssrr={0x89, 0x27, 0xa5, [@local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x7}, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xef, 0x1, 0xd, [{@rand_addr=0x64010100, 0x80000000}, {@remote}, {@multicast1, 0x4}, {@loopback, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0x5e, 0x1, 0x0, [{@multicast2, 0x8}, {@local, 0x9}, {@rand_addr=0x64010102, 0x100}, {@local, 0x2}, {@loopback, 0x81}]}]}}}}}) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000dc0)=""/94, 0x5e}], 0x1) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0xa2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f0000000640)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xdc, 0x0, r7, 0x1, '\x00', r6, r2, 0x0, 0x1, 0x1}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x5, [@fwd={0x9}, @struct={0x3, 0x7, 0x0, 0x4, 0x0, 0x4, [{0x7, 0x1}, {0x0, 0x4, 0x8}, {0x7, 0x0, 0x400}, {0x4, 0x1, 0x3}, {0x8, 0x1, 0x2}, {0xc, 0x4, 0xfffffffa}, {0x10, 0x4, 0x4}]}, @volatile={0x5, 0x0, 0x0, 0x9, 0x3}, @restrict={0xc, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x61, 0x61, 0x5f]}}, &(0x7f0000000b00)=""/223, 0xa1, 0xdf, 0x0, 0x8, 0x10000, @value=r2}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x12, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='GPL\x00', 0x3, 0xea, &(0x7f0000000940)=""/234, 0x0, 0x6, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x4, 0x5, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c80)=[r2], &(0x7f0000000cc0)=[{0x5, 0x5, 0xd, 0x8}, {0x2, 0x4, 0x5, 0x7}, {0x1, 0x5, 0xd, 0x3}, {0x1, 0x2, 0x4, 0xc}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pi6 \x00'}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r13, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r13, 0x84, 0x7a, &(0x7f0000000340)={r14, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r14, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r11, &(0x7f00000000c0), &(0x7f0000000140)=""/116}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x19, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7d}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @alu={0x4, 0x0, 0x0, 0xa, 0x2, 0x10, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x958b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xd7, &(0x7f0000000180)=""/215, 0x40f00, 0x41, '\x00', r3, 0x0, r4, 0x8, &(0x7f00000003c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r5, 0x1, r7, r10, r11], &(0x7f0000000500)=[{0x3, 0x2, 0x0, 0xb}, {0x2, 0x4, 0x8, 0x8}, {0x4, 0x5, 0x5, 0x8}, {0x3, 0x1, 0xf, 0x2}, {0x8, 0x5, 0xe, 0xc}], 0x10, 0x80000000}, 0x94) connect$rxrpc(r2, &(0x7f0000000ec0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffff0bf}}, 0x24) 0s ago: executing program 4 (id=2856): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x1c, 0x1a, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x300}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000100013"], 0x138}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000006c0)={0x0, 0x0, 0x6, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000f00)={{r1}, r3, 0x16, @inherit={0x50, &(0x7f0000000200)={0x1, 0x1, 0x0, 0x5, {0x33, 0x6, 0x5, 0x3, 0x39a7}, [0x19a4]}}, @devid=r4}) kernel console output (not intermixed with test programs): 9] terminated by signal 33 (Unknown signal 33) [ 94.312421][ T6556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.404205][ T6570] validate_nla: 4 callbacks suppressed [ 94.404221][ T6570] netlink: 'syz.1.199': attribute type 21 has an invalid length. [ 94.447365][ T6570] netlink: 'syz.1.199': attribute type 5 has an invalid length. [ 94.497309][ T6574] syzkaller1: entered promiscuous mode [ 94.502899][ T6574] syzkaller1: entered allmulticast mode [ 94.767553][ T6588] syzkaller0: entered promiscuous mode [ 94.784485][ T6588] syzkaller0: entered allmulticast mode [ 95.042437][ T6589] team0 (unregistering): Port device team_slave_0 removed [ 95.054764][ T6589] team0 (unregistering): Port device team_slave_1 removed [ 95.130528][ T6600] __nla_validate_parse: 14 callbacks suppressed [ 95.130546][ T6600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.209'. [ 95.157564][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 95.194187][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.209'. [ 95.207519][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 95.217436][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.209'. [ 95.371048][ T6610] tipc: Started in network mode [ 95.375962][ T6610] tipc: Node identity 92356715f3a9, cluster identity 4711 [ 95.392302][ T6610] tipc: Enabled bearer , priority 0 [ 95.472142][ T6620] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 95.484661][ T6610] syzkaller0: entered promiscuous mode [ 95.491526][ T6610] syzkaller0: entered allmulticast mode [ 95.494597][ T6620] netlink: 228 bytes leftover after parsing attributes in process `syz.2.216'. [ 95.504836][ T6610] tipc: Resetting bearer [ 95.598603][ T6607] tipc: Resetting bearer [ 97.465406][ T6607] tipc: Disabling bearer [ 97.487957][ T6640] warning: `syz.4.222' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.507818][ T5909] tipc: Node number set to 1637639957 [ 97.638617][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 97.652308][ T6663] netlink: 44 bytes leftover after parsing attributes in process `syz.0.225'. [ 97.799967][ T6670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.228'. [ 97.833898][ T6675] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 97.859233][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 98.276481][ T6698] IPv6: sit1: Disabled Multicast RS [ 98.307562][ T6698] sit1: entered allmulticast mode [ 98.445291][ T6709] vlan2: entered allmulticast mode [ 98.551020][ T6724] netlink: 'syz.4.246': attribute type 5 has an invalid length. [ 98.575977][ T6724] netlink: 'syz.4.246': attribute type 6 has an invalid length. [ 98.641740][ T6732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.687391][ T6732] bond0: (slave rose0): Enslaving as an active interface with an up link [ 98.757083][ T6739] tipc: Started in network mode [ 98.765025][ T6739] tipc: Node identity 26ce7a3d70f, cluster identity 4711 [ 98.773912][ T6739] tipc: Enabled bearer , priority 0 [ 98.912188][ T6755] netlink: 'syz.1.251': attribute type 1 has an invalid length. [ 98.935520][ T6738] tipc: Disabling bearer [ 99.096503][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.122282][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.138914][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.156027][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.405431][ T6779] netlink: 'syz.0.257': attribute type 1 has an invalid length. [ 99.666506][ T6795] Bluetooth: MGMT ver 1.23 [ 99.896786][ T6811] netlink: 'syz.3.264': attribute type 1 has an invalid length. [ 99.904795][ T6816] netlink: 'syz.3.264': attribute type 1 has an invalid length. [ 100.043679][ T6828] syzkaller0: entered promiscuous mode [ 100.063174][ T6828] syzkaller0: entered allmulticast mode [ 100.267276][ T6845] __nla_validate_parse: 17 callbacks suppressed [ 100.267293][ T6845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.271'. [ 100.400447][ T6852] syzkaller0: entered promiscuous mode [ 100.406055][ T6852] syzkaller0: entered allmulticast mode [ 100.466004][ T6858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.475780][ T5930] hid-generic 0005:0B57:0002.0002: item fetching failed at offset 0/1 [ 100.499426][ T5930] hid-generic 0005:0B57:0002.0002: probe with driver hid-generic failed with error -22 [ 100.653623][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 100.748599][ T6877] netlink: 'syz.0.277': attribute type 2 has an invalid length. [ 100.757276][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 100.925473][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 101.133975][ T6903] syzkaller0: entered promiscuous mode [ 101.165294][ T6903] syzkaller0: entered allmulticast mode [ 101.340820][ T6911] netlink: 'syz.4.286': attribute type 4 has an invalid length. [ 101.353325][ T6915] netlink: 'syz.3.287': attribute type 4 has an invalid length. [ 101.376432][ T6912] netlink: 'syz.4.286': attribute type 11 has an invalid length. [ 101.384932][ T6912] netlink: 224 bytes leftover after parsing attributes in process `syz.4.286'. [ 101.398850][ T6911] netlink: 'syz.4.286': attribute type 11 has an invalid length. [ 101.406603][ T6911] netlink: 224 bytes leftover after parsing attributes in process `syz.4.286'. [ 101.467313][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.288'. [ 101.584202][ T6919] syzkaller0: entered promiscuous mode [ 101.593387][ T6919] syzkaller0: entered allmulticast mode [ 101.602400][ T6930] netlink: 'syz.0.291': attribute type 2 has an invalid length. [ 101.637949][ T6930] netlink: 'syz.0.291': attribute type 1 has an invalid length. [ 101.647190][ T6930] netlink: 'syz.0.291': attribute type 2 has an invalid length. [ 102.003727][ T6947] bond1: option resend_igmp: invalid value (32767) [ 102.010458][ T6947] bond1: option resend_igmp: allowed values 0 - 255 [ 102.052206][ T6947] bond1 (unregistering): Released all slaves [ 102.133528][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 102.232289][ T6967] x_tables: unsorted entry at hook 3 [ 102.238355][ T6956] netlink: 'syz.3.297': attribute type 29 has an invalid length. [ 102.246565][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 102.248786][ T6967] netlink: 14 bytes leftover after parsing attributes in process `syz.4.303'. [ 102.339477][ T6974] openvswitch: netlink: Flow key attr not present in new flow. [ 102.450100][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.469220][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.500784][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.515692][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.040913][ T7012] team0: Device gtp0 is of different type [ 103.162669][ T7016] syz_tun: entered allmulticast mode [ 103.170024][ T7016] syz_tun: left allmulticast mode [ 103.214780][ T6994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.344502][ T7024] netlink: 'syz.4.321': attribute type 12 has an invalid length. [ 103.504281][ T7032] vlan2: entered promiscuous mode [ 103.515722][ T7032] hsr_slave_1: entered promiscuous mode [ 103.525622][ T7032] vlan2: entered allmulticast mode [ 103.543998][ T7032] hsr_slave_1: entered allmulticast mode [ 104.418821][ T7100] tipc: Started in network mode [ 104.423830][ T7100] tipc: Node identity 7efcaf7964a2, cluster identity 4711 [ 104.448696][ T7100] tipc: Enabled bearer , priority 0 [ 104.462798][ T7100] syzkaller0: entered promiscuous mode [ 104.474382][ T7100] syzkaller0: entered allmulticast mode [ 104.524740][ T1163] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.576203][ T1163] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.587229][ T7112] trusted_key: syz.2.348 sent an empty control message without MSG_MORE. [ 104.595235][ T1163] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.615852][ T7100] tipc: Resetting bearer [ 104.633110][ T4210] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.672905][ T7099] tipc: Resetting bearer [ 104.709308][ T7099] tipc: Disabling bearer [ 105.154100][ T7143] openvswitch: netlink: EtherType 50a is less than min 600 [ 105.215933][ T7146] macvtap1: entered promiscuous mode [ 105.233231][ T7146] vlan0: entered promiscuous mode [ 105.242760][ T7146] macvtap1: entered allmulticast mode [ 105.248712][ T7146] vlan0: entered allmulticast mode [ 105.253962][ T7146] veth0_vlan: entered allmulticast mode [ 105.300918][ T7151] bond1: (slave ip6_vti0): Device is not bonding slave [ 105.313465][ T7151] bond1: option active_slave: invalid value (ip6_vti0) [ 105.324763][ T7151] bond1 (unregistering): Released all slaves [ 105.382240][ T7154] macvtap2: entered promiscuous mode [ 105.390190][ T7163] __nla_validate_parse: 26 callbacks suppressed [ 105.390206][ T7163] netlink: 52 bytes leftover after parsing attributes in process `syz.1.362'. [ 105.410563][ T7154] macvtap2: entered allmulticast mode [ 107.150975][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'. [ 107.247224][ T7191] netlink: 179596 bytes leftover after parsing attributes in process `syz.2.368'. [ 107.368809][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057d27800: rx timeout, send abort [ 107.596034][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 107.687385][ T7226] netlink: 72 bytes leftover after parsing attributes in process `syz.0.380'. [ 107.740159][ T7217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.841240][ T7226] bond3 (unregistering): Released all slaves [ 107.869555][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ce78000: rx timeout, send abort [ 107.879391][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057d27800: abort rx timeout. Force session deactivation [ 108.182742][ T7251] syzkaller0: entered promiscuous mode [ 108.192534][ T7251] syzkaller0: entered allmulticast mode [ 108.220246][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 108.316527][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 108.378187][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ce78000: abort rx timeout. Force session deactivation [ 108.581744][ T7287] openvswitch: netlink: Unknown nsh attribute 0 [ 108.590495][ T7287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.736514][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 109.922975][ T7296] netlink: 32 bytes leftover after parsing attributes in process `syz.4.391'. [ 110.060580][ T7301] validate_nla: 5 callbacks suppressed [ 110.060598][ T7301] netlink: 'syz.0.392': attribute type 13 has an invalid length. [ 110.410698][ T7315] macvtap1: entered allmulticast mode [ 110.417834][ T7315] veth0_macvtap: entered allmulticast mode [ 110.432420][ T7329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.400'. [ 110.566878][ T7343] bond2: entered allmulticast mode [ 110.574833][ T7343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.907265][ T7374] syzkaller0: entered promiscuous mode [ 110.913064][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 110.922671][ T7374] syzkaller0: entered allmulticast mode [ 110.941240][ T7375] vlan2: entered allmulticast mode [ 110.946469][ T7375] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 111.519820][ T7394] raw_sendmsg: syz.4.414 forgot to set AF_INET. Fix it! [ 111.679951][ T7407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.736155][ T7407] nftables ruleset with unbound set [ 111.784502][ T7407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.901012][ T7415] xt_hashlimit: size too large, truncated to 1048576 [ 112.272097][ T7440] netlink: 'syz.1.426': attribute type 12 has an invalid length. [ 112.323735][ T7440] bond1: option primary_reselect: invalid value (255) [ 112.338753][ T7440] bond1 (unregistering): Released all slaves [ 112.393842][ T7447] netlink: 256 bytes leftover after parsing attributes in process `syz.0.427'. [ 112.433026][ T7447] unsupported nlmsg_type 40 [ 112.469996][ T7450] netlink: 64 bytes leftover after parsing attributes in process `syz.3.428'. [ 112.648650][ T7462] netlink: 'syz.3.431': attribute type 2 has an invalid length. [ 112.816716][ T7481] !: renamed from bond_slave_0 (while UP) [ 113.007359][ T7491] openvswitch: netlink: Duplicate key (type 1). [ 113.035995][ T7493] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 113.059716][ T7493] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.068621][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.289418][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 113.307947][ T7513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'. [ 113.454346][ T7532] syzkaller0: entered promiscuous mode [ 113.464830][ T7532] syzkaller0: entered allmulticast mode [ 113.577273][ T7532] openvswitch: netlink: Message has 4 unknown bytes. [ 113.630114][ T7542] netlink: 96 bytes leftover after parsing attributes in process `syz.3.456'. [ 113.653166][ T7547] netlink: 6 bytes leftover after parsing attributes in process `syz.1.457'. [ 113.777307][ T7556] syzkaller0: entered promiscuous mode [ 113.787762][ T7556] syzkaller0: entered allmulticast mode [ 113.860439][ T7556] tipc: Started in network mode [ 113.865344][ T7556] tipc: Node identity f6f1b5639c48, cluster identity 4711 [ 113.877486][ T7556] tipc: Enabled bearer , priority 0 [ 113.926299][ T7555] tipc: Resetting bearer [ 114.019171][ T7555] tipc: Disabling bearer [ 114.964774][ T7585] netlink: 'syz.2.469': attribute type 4 has an invalid length. [ 114.974399][ T7585] netlink: 164 bytes leftover after parsing attributes in process `syz.2.469'. [ 114.986254][ T7585] netlink: 'syz.2.469': attribute type 8 has an invalid length. [ 115.060605][ T7591] syzkaller0: entered promiscuous mode [ 115.066561][ T7591] syzkaller0: entered allmulticast mode [ 115.297328][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 115.464765][ T7629] netlink: 'syz.0.481': attribute type 23 has an invalid length. [ 115.594528][ T7641] netlink: 'syz.4.484': attribute type 10 has an invalid length. [ 115.638397][ T7642] __nla_validate_parse: 1 callbacks suppressed [ 115.638416][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 115.653584][ T7642] netlink: 'syz.0.481': attribute type 30 has an invalid length. [ 115.663595][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 115.668430][ T7643] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 115.688745][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 115.701193][ T7641] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 115.810532][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 115.965504][ T7659] netlink: 52 bytes leftover after parsing attributes in process `syz.4.490'. [ 116.071341][ T7668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.493'. [ 116.623482][ T7715] geneve2: entered promiscuous mode [ 116.637828][ T7715] geneve2: entered allmulticast mode [ 116.652019][ T7353] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 116.679213][ T7353] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 116.894299][ T7353] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 116.904126][ T7353] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 117.199631][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 117.294757][ T7762] netlink: 'syz.4.514': attribute type 9 has an invalid length. [ 117.312591][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 117.332767][ T7766] ip6tnl0: Caught tx_queue_len zero misconfig [ 117.376740][ T7766] netlink: 60 bytes leftover after parsing attributes in process `syz.0.516'. [ 117.378930][ T7769] netlink: 76 bytes leftover after parsing attributes in process `syz.3.515'. [ 117.396320][ T7771] netlink: 'syz.2.518': attribute type 1 has an invalid length. [ 117.495800][ T7771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.575706][ T7777] bond1: (slave veth3): Enslaving as an active interface with a down link [ 117.636335][ T7779] bond1: (slave veth0_to_bond): making interface the new active one [ 117.652553][ T7779] veth0_to_bond: entered promiscuous mode [ 117.663249][ T7779] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 117.824162][ T7771] bond1: (slave veth5): Enslaving as an active interface with a down link [ 118.345884][ T7820] v: renamed from vlan0 (while UP) [ 118.469788][ T7828] netlink: 'syz.0.533': attribute type 4 has an invalid length. [ 118.479598][ T7828] netlink: 'syz.0.533': attribute type 1 has an invalid length. [ 118.490809][ T7828] netlink: 'syz.0.533': attribute type 1 has an invalid length. [ 118.530969][ T7832] netlink: 'syz.1.531': attribute type 1 has an invalid length. [ 118.562549][ T7828] bond3: entered promiscuous mode [ 118.571524][ T7828] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.584903][ T7830] ip6gre1: entered promiscuous mode [ 118.591549][ T7830] ip6gre1: entered allmulticast mode [ 118.677235][ T7837] bond1: (slave gretap1): making interface the new active one [ 118.686142][ T7837] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 118.793997][ T7851] netlink: 'syz.0.538': attribute type 4 has an invalid length. [ 118.964981][ T5887] IPVS: starting estimator thread 0... [ 119.058042][ T7863] IPVS: using max 33 ests per chain, 79200 per kthread [ 119.184854][ T7881] bridge0: port 3(batadv1) entered blocking state [ 119.194016][ T7881] bridge0: port 3(batadv1) entered disabled state [ 119.200797][ T7881] batadv1: entered allmulticast mode [ 119.208577][ T7881] batadv1: entered promiscuous mode [ 119.403077][ T7893] xt_hashlimit: size too large, truncated to 1048576 [ 119.538614][ T7900] batadv_slave_0: entered promiscuous mode [ 119.600619][ T7905] tipc: Enabling of bearer rejected, failed to enable media [ 119.650010][ T7898] batadv_slave_0: left promiscuous mode [ 119.678520][ T7347] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 119.688171][ T7347] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 120.137423][ T7940] bridge_slave_0: left allmulticast mode [ 120.146174][ T7940] bridge_slave_0: left promiscuous mode [ 120.155998][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.192612][ T7940] bridge_slave_1: left allmulticast mode [ 120.234691][ T7940] bridge_slave_1: left promiscuous mode [ 120.250874][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.312539][ T7940] bond0: (slave 1!): Releasing backup interface [ 120.390517][ T7940] bond0: (slave bond_slave_1): Releasing backup interface [ 120.422470][ T7940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.430560][ T7940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.445254][ T7940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.453481][ T7940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.463376][ T7940] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.515317][ T7964] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 120.807511][ T7994] __nla_validate_parse: 11 callbacks suppressed [ 120.807529][ T7994] netlink: 36 bytes leftover after parsing attributes in process `syz.2.579'. [ 120.934303][ T8003] netlink: 44 bytes leftover after parsing attributes in process `syz.0.581'. [ 120.996934][ T8006] validate_nla: 4 callbacks suppressed [ 120.996951][ T8006] netlink: 'syz.1.582': attribute type 4 has an invalid length. [ 121.142491][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 121.191446][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 121.217513][ T8022] gtp0: entered promiscuous mode [ 121.244180][ T8022] gtp0: entered allmulticast mode [ 121.259680][ T8027] xt_CT: No such helper "syz1" [ 121.390993][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.589'. [ 121.520595][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.592'. [ 121.743332][ T8060] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 121.783001][ T8060] ip6tnl1: entered allmulticast mode [ 121.917053][ T8067] tipc: Enabled bearer , priority 0 [ 121.934747][ T8067] tipc: Resetting bearer [ 121.959035][ T8073] bond0: entered promiscuous mode [ 121.964418][ T8073] bond_slave_0: entered promiscuous mode [ 121.974728][ T8073] bond_slave_1: entered promiscuous mode [ 121.993074][ T8073] batadv0: entered promiscuous mode [ 121.999865][ T8073] debugfs: 'hsr0' already exists in 'hsr' [ 122.005902][ T8073] Cannot create hsr debugfs directory [ 122.012445][ T8073] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 122.027413][ T8066] tipc: Disabling bearer [ 122.064939][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 122.082555][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 122.100131][ T8082] syzkaller1: entered promiscuous mode [ 122.105735][ T8082] syzkaller1: entered allmulticast mode [ 122.125797][ T8085] Illegal XDP return value 4156195640 on prog (id 217) dev N/A, expect packet loss! [ 122.395235][ T8088] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 122.685267][ T8115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.615'. [ 122.711606][ T8121] netlink: 256 bytes leftover after parsing attributes in process `syz.3.618'. [ 122.862048][ T8126] netlink: 'syz.3.619': attribute type 39 has an invalid length. [ 122.978730][ T8132] set match dimension is over the limit! [ 122.981933][ T8135] netlink: 'syz.4.622': attribute type 1 has an invalid length. [ 123.080412][ T8135] bond3: entered promiscuous mode [ 123.085926][ T8135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.182834][ T8146] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 123.341307][ T8159] openvswitch: netlink: Message has 4 unknown bytes. [ 123.427561][ T8163] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 123.513263][ T8165] macvtap1: entered promiscuous mode [ 123.519617][ T8165] vlan0: entered promiscuous mode [ 123.525197][ T8165] macvtap1: entered allmulticast mode [ 123.532247][ T8165] vlan0: entered allmulticast mode [ 123.537384][ T8165] veth0_vlan: entered allmulticast mode [ 123.708400][ T8185] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 123.716108][ T8185] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 123.875309][ T8205] erspan0: entered allmulticast mode [ 123.967177][ T8216] syzkaller0: entered promiscuous mode [ 123.972983][ T8216] syzkaller0: entered allmulticast mode [ 124.349044][ T8219] netlink: del zone limit has 4 unknown bytes [ 124.512079][ T8235] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.519953][ T8235] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.714147][ T8243] tipc: Enabled bearer , priority 0 [ 124.721743][ T8243] syzkaller0: entered promiscuous mode [ 124.727427][ T8243] syzkaller0: entered allmulticast mode [ 124.804125][ T8243] tipc: Resetting bearer [ 124.827538][ T8243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.835973][ T8243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.875507][ T8242] tipc: Resetting bearer [ 124.909514][ T8242] tipc: Disabling bearer [ 125.444507][ T8303] C: renamed from lo (while UP) [ 125.454295][ T30] audit: type=1800 audit(1763045660.073:2): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.662" name="memory.events" dev="tmpfs" ino=663 res=0 errno=0 [ 125.840732][ T8326] __nla_validate_parse: 13 callbacks suppressed [ 125.840748][ T8326] netlink: 56 bytes leftover after parsing attributes in process `syz.2.672'. [ 125.920905][ T8329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.673'. [ 126.231229][ T8337] netlink: 'syz.0.676': attribute type 1 has an invalid length. [ 127.244719][ T8337] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 127.299341][ T8362] netlink: 'syz.4.681': attribute type 1 has an invalid length. [ 127.379036][ T8362] 8021q: adding VLAN 0 to HW filter on device bond4 [ 127.416472][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.682'. [ 127.465563][ T8367] bond4: (slave geneve2): making interface the new active one [ 127.502149][ T8367] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 127.575448][ T8377] netlink: 'syz.2.682': attribute type 13 has an invalid length. [ 127.604187][ T8377] netlink: 'syz.2.682': attribute type 27 has an invalid length. [ 128.146834][ T8430] netlink: 'syz.0.700': attribute type 1 has an invalid length. [ 128.306577][ T8430] gretap0: entered promiscuous mode [ 128.339394][ T8430] bond4: (slave gretap0): making interface the new active one [ 128.358215][ T8430] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 128.397874][ T8436] macvlan2: entered promiscuous mode [ 128.401184][ T8442] can: request_module (can-proto-0) failed. [ 128.412098][ T8436] macvlan2: entered allmulticast mode [ 128.423730][ T8449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.706'. [ 128.428961][ T8436] bond4: entered promiscuous mode [ 128.444233][ T8436] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.455158][ T8436] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 128.458102][ T8446] netlink: 'syz.3.705': attribute type 16 has an invalid length. [ 128.472631][ T8436] bond4: left promiscuous mode [ 128.492456][ T8446] netlink: 'syz.3.705': attribute type 17 has an invalid length. [ 128.584988][ T8446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.671700][ T8461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.707358][ T8465] netlink: 'syz.0.712': attribute type 1 has an invalid length. [ 128.729722][ T8465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.817454][ T8476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.715'. [ 128.879479][ T7353] veth0_to_bond: left promiscuous mode [ 128.895121][ T8484] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.718'. [ 128.967630][ T8486] openvswitch: netlink: Message has 4 unknown bytes. [ 129.103049][ T8498] netlink: 92 bytes leftover after parsing attributes in process `syz.3.722'. [ 129.421380][ T8522] netlink: zone id is out of range [ 129.427252][ T8522] netlink: zone id is out of range [ 129.434576][ T8522] netlink: zone id is out of range [ 129.440220][ T8522] netlink: get zone limit has 4 unknown bytes [ 129.450459][ T8522] netlink: 'syz.4.731': attribute type 1 has an invalid length. [ 129.514920][ T8530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.734'. [ 129.534129][ T8527] netlink: 36 bytes leftover after parsing attributes in process `syz.3.733'. [ 129.694194][ T8545] netlink: 'syz.2.740': attribute type 3 has an invalid length. [ 129.874079][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'. [ 130.682412][ T8601] syzkaller0: entered promiscuous mode [ 130.690962][ T8601] syzkaller0: entered allmulticast mode [ 130.950265][ T8615] __nla_validate_parse: 11 callbacks suppressed [ 130.950284][ T8615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.764'. [ 130.952359][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.764'. [ 131.946926][ T8623] tipc: Enabled bearer , priority 0 [ 131.965205][ T8624] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 131.972888][ T8624] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 132.147428][ T30] audit: type=1107 audit(1763045666.763:3): pid=8632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 132.334756][ T8649] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.429938][ T8660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.779'. [ 132.459885][ T8663] validate_nla: 1 callbacks suppressed [ 132.459902][ T8663] netlink: 'syz.0.781': attribute type 58 has an invalid length. [ 132.460035][ T8664] netlink: 40 bytes leftover after parsing attributes in process `syz.3.778'. [ 132.465402][ T8663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.781'. [ 132.509956][ T8664] syzkaller0: entered promiscuous mode [ 132.515512][ T8664] syzkaller0: entered allmulticast mode [ 132.733039][ T8684] netlink: 'syz.3.786': attribute type 1 has an invalid length. [ 132.806683][ T8684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.830411][ T8687] bond1: (slave geneve2): making interface the new active one [ 132.840456][ T8687] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 132.856590][ T8694] SET target dimension over the limit! [ 132.864697][ T8687] syz.3.786 (8687) used greatest stack depth: 17720 bytes left [ 132.881596][ T8692] SET target dimension over the limit! [ 132.889537][ T8692] netlink: 27 bytes leftover after parsing attributes in process `syz.4.788'. [ 132.916072][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.923412][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.938075][ T6684] tipc: Node number set to 1790555491 [ 133.077990][ T8706] batadv_slave_1: entered promiscuous mode [ 133.092397][ T8705] syzkaller0: tun_chr_ioctl cmd 1077974060 [ 133.099799][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'. [ 133.136371][ T8706] batadv_slave_1: left promiscuous mode [ 133.233521][ T8713] syzkaller0: create flow: hash 738415404 index 2 [ 133.404067][ T7345] syzkaller0: tun_net_xmit 76 [ 133.410081][ T7345] syzkaller0: tun_net_xmit 48 [ 133.415612][ T8705] syzkaller0: delete flow: hash 738415404 index 2 [ 133.430676][ T6686] syzkaller0: tun_net_xmit 76 [ 134.666484][ T8749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.802'. [ 134.801568][ T8765] netlink: 13 bytes leftover after parsing attributes in process `syz.0.804'. [ 134.885804][ T8769] vlan3: entered allmulticast mode [ 134.944140][ T8762] syzkaller1: entered allmulticast mode [ 134.956928][ T8762] netlink: 208 bytes leftover after parsing attributes in process `syz.1.806'. [ 134.972365][ T8771] xt_hashlimit: overflow, rate too high: 0 [ 135.727280][ T8783] xt_ecn: cannot match TCP bits for non-tcp packets [ 135.784779][ T8781] pim6reg1: entered promiscuous mode [ 135.794258][ T8781] pim6reg1: entered allmulticast mode [ 136.152419][ T8820] netlink: 'syz.1.821': attribute type 3 has an invalid length. [ 136.297164][ T8826] lo: Caught tx_queue_len zero misconfig [ 136.469426][ T8836] netlink: 'syz.3.827': attribute type 26 has an invalid length. [ 137.271144][ T8855] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 137.590738][ T8864] __nla_validate_parse: 1 callbacks suppressed [ 137.590758][ T8864] netlink: 596 bytes leftover after parsing attributes in process `syz.1.833'. [ 137.750602][ T8862] netlink: 'syz.1.833': attribute type 29 has an invalid length. [ 137.784169][ T8863] netlink: 'syz.1.833': attribute type 29 has an invalid length. [ 138.073533][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.837'. [ 138.113610][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 138.147952][ T8898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.840'. [ 138.341702][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 138.343648][ T8907] netlink: 'syz.2.845': attribute type 17 has an invalid length. [ 138.400577][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.845'. [ 138.421435][ T8907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.845'. [ 138.483787][ T8919] netlink: 'syz.4.849': attribute type 31 has an invalid length. [ 138.492238][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.849'. [ 138.672864][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.852'. [ 138.788532][ T8936] netlink: 56 bytes leftover after parsing attributes in process `syz.1.855'. [ 139.205750][ T8961] netlink: 'syz.4.859': attribute type 13 has an invalid length. [ 139.778295][ T9001] openvswitch: netlink: Key 17 has unexpected len 0 expected 4 [ 139.813130][ T9006] openvswitch: netlink: Key 17 has unexpected len 0 expected 4 [ 140.664907][ T9063] netlink: 'syz.2.893': attribute type 1 has an invalid length. [ 140.907558][ T9092] syzkaller1: entered promiscuous mode [ 140.928026][ T9092] syzkaller1: entered allmulticast mode [ 141.001146][ T9092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.028920][ T9097] netlink: 'syz.4.903': attribute type 1 has an invalid length. [ 141.258042][ T9109] netlink: 'syz.4.908': attribute type 1 has an invalid length. [ 141.299670][ T9116] netlink: 'syz.2.906': attribute type 10 has an invalid length. [ 141.422469][ T9116] team0: Port device geneve0 added [ 141.622167][ T9136] netlink: 'syz.3.913': attribute type 4 has an invalid length. [ 141.721341][ T43] IPVS: starting estimator thread 0... [ 141.819588][ T9147] IPVS: using max 30 ests per chain, 72000 per kthread [ 142.333185][ T9187] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 142.347350][ T9187] syzkaller1: Refused to change device type [ 142.588582][ T9204] sit1: entered promiscuous mode [ 142.593641][ T9204] sit1: entered allmulticast mode [ 142.609141][ T9206] __nla_validate_parse: 25 callbacks suppressed [ 142.609168][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 143.010001][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.944'. [ 143.030300][ T9221] syzkaller0: entered promiscuous mode [ 143.043164][ T9221] syzkaller0: entered allmulticast mode [ 143.061721][ T9221] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 143.111324][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.944'. [ 143.122691][ T9242] validate_nla: 3 callbacks suppressed [ 143.122706][ T9242] netlink: 'syz.1.947': attribute type 1 has an invalid length. [ 143.137153][ T9242] openvswitch: netlink: Unknown key attributes 2 [ 143.145391][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.946'. [ 143.188758][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.946'. [ 143.362144][ T9255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.949'. [ 143.387308][ T9255] bond0: entered promiscuous mode [ 143.394615][ T9255] gretap0: entered promiscuous mode [ 143.401723][ T9255] hsr1: entered promiscuous mode [ 143.526437][ T9260] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.952'. [ 143.616710][ T9263] tipc: Enabling of bearer rejected, failed to enable media [ 143.818515][ T9274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.926824][ T9280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.957'. [ 143.937444][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 143.953749][ T9280] netlink: 44 bytes leftover after parsing attributes in process `syz.0.957'. [ 144.077393][ T9247] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.276613][ T7348] tipc: Subscription rejected, illegal request [ 144.915586][ T9348] syzkaller0: entered promiscuous mode [ 144.922234][ T9348] syzkaller0: entered allmulticast mode [ 145.207288][ T9363] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 146.268017][ T9378] x_tables: duplicate underflow at hook 2 [ 146.323104][ T9378] syzkaller1: entered promiscuous mode [ 146.329615][ T9378] syzkaller1: entered allmulticast mode [ 146.392744][ T9382] bond2: option resend_igmp: invalid value (32767) [ 146.400472][ T9378] delete_channel: no stack [ 146.405658][ T9382] bond2: option resend_igmp: allowed values 0 - 255 [ 146.415023][ T9382] bond2 (unregistering): Released all slaves [ 146.620456][ T9404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.774453][ T9412] tc_dump_action: action bad kind [ 146.797543][ T9408] netlink: 'syz.1.1001': attribute type 63 has an invalid length. [ 146.809690][ T9416] netlink: 'syz.1.1001': attribute type 63 has an invalid length. [ 146.848446][ T9410] netlink: 'syz.1.1001': attribute type 63 has an invalid length. [ 147.195331][ T9423] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.198263][ T9436] ip6t_srh: unknown srh match flags 4000 [ 147.203223][ T9423] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.362793][ T9423] bridge_slave_0: left promiscuous mode [ 147.369035][ T9423] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.397464][ T9423] bridge_slave_1: left allmulticast mode [ 147.404069][ T9423] bridge_slave_1: left promiscuous mode [ 147.410375][ T9423] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.432699][ T9423] bond0: (slave bond_slave_0): Releasing backup interface [ 147.464417][ T9423] bond0: (slave bond_slave_1): Releasing backup interface [ 147.494576][ T9423] team0: Port device team_slave_0 removed [ 147.518510][ T9423] team0: Port device team_slave_1 removed [ 147.535102][ T9423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.559763][ T9423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.582832][ T9423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.595589][ T9423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.620893][ T9423] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.849262][ T9457] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.913213][ T9459] team0: Device wireguard0 is of different type [ 147.994043][ T9467] sctp: [Deprecated]: syz.0.1016 (pid 9467) Use of int in max_burst socket option deprecated. [ 147.994043][ T9467] Use struct sctp_assoc_value instead [ 148.164024][ T9473] __nla_validate_parse: 19 callbacks suppressed [ 148.164042][ T9473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1017'. [ 148.456825][ T9490] lo speed is unknown, defaulting to 1000 [ 148.465993][ T9490] lo speed is unknown, defaulting to 1000 [ 148.468123][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 148.484620][ T9490] lo speed is unknown, defaulting to 1000 [ 148.496353][ T9490] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.516988][ T9490] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.554820][ T9490] lo speed is unknown, defaulting to 1000 [ 148.565378][ T9490] lo speed is unknown, defaulting to 1000 [ 148.579223][ T9490] lo speed is unknown, defaulting to 1000 [ 148.590433][ T9490] lo speed is unknown, defaulting to 1000 [ 148.607688][ T9490] lo speed is unknown, defaulting to 1000 [ 149.394674][ T9531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.538982][ T9540] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 149.562945][ T9545] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1039'. [ 149.840498][ T9574] veth1_macvtap: left promiscuous mode [ 150.046757][ T9585] lo: Caught tx_queue_len zero misconfig [ 150.160542][ T9594] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.1053'. [ 150.623863][ T9621] x_tables: duplicate underflow at hook 2 [ 150.789786][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 151.003278][ T9650] C: entered allmulticast mode [ 151.011220][ T9650] C: left allmulticast mode [ 151.033922][ T9650] vlan1: entered allmulticast mode [ 151.051165][ T9650] veth0_vlan: entered allmulticast mode [ 151.184700][ T9659] nbd: must specify a size in bytes for the device [ 151.453585][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 151.456534][ T9671] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1077'. [ 151.463973][ T9668] batadv1: left allmulticast mode [ 151.482418][ T9668] batadv1: left promiscuous mode [ 151.488158][ T9668] bridge0: port 3(batadv1) entered disabled state [ 151.602922][ T9681] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1079'. [ 151.639551][ T9681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1079'. [ 151.739879][ T9687] netlink: 18 bytes leftover after parsing attributes in process `syz.2.1080'. [ 152.034432][ T9707] netlink: 'syz.4.1087': attribute type 7 has an invalid length. [ 152.042648][ T9707] netlink: 'syz.4.1087': attribute type 8 has an invalid length. [ 152.073285][ T9711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.196301][ T9730] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 152.276746][ T9732] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 152.292101][ T9732] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 152.531764][ T9747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.659500][ T9747] vlan0: entered allmulticast mode [ 152.682930][ T9747] bond2: entered allmulticast mode [ 152.776490][ T9767] syzkaller0: entered promiscuous mode [ 152.793842][ T9767] syzkaller0: entered allmulticast mode [ 152.881051][ T9770] netlink: 'syz.0.1105': attribute type 17 has an invalid length. [ 153.042174][ T9788] Unsupported ieee802154 address type: 0 [ 153.050621][ T9788] netlink: 'syz.3.1111': attribute type 1 has an invalid length. [ 153.210877][ T9801] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 153.255262][ T9800] netlink: 'syz.4.1115': attribute type 1 has an invalid length. [ 153.285399][ T9800] netlink: 'syz.4.1115': attribute type 3 has an invalid length. [ 153.298157][ T9800] __nla_validate_parse: 13 callbacks suppressed [ 153.298175][ T9800] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1115'. [ 153.319285][ T9800] NCSI netlink: No device for ifindex 813332851 [ 153.422069][ T9814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1119'. [ 153.771958][ T9837] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1125'. [ 153.880799][ T9837] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1125'. [ 153.900360][ T9845] netlink: 'syz.1.1126': attribute type 1 has an invalid length. [ 153.925486][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 153.948676][ T9837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1125'. [ 153.968910][ T9851] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1129'. [ 154.038546][ T9854] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 154.100949][ T9854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1126'. [ 154.148068][ T9867] vxcan1: tx address claim with different name [ 154.186271][ T9845] veth3: entered promiscuous mode [ 154.217162][ T9845] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 154.254820][ T7345] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 154.290889][ T9854] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.419632][ T7346] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 154.432581][ T9878] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1133'. [ 154.545099][ T9887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1134'. [ 154.889632][ T9907] geneve2: entered promiscuous mode [ 154.894890][ T9907] geneve2: entered allmulticast mode [ 154.986520][ T50] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 154.996741][ T50] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 155.041743][ T50] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 155.094190][ T50] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 155.128328][ T9926] rdma_op ffff888027dac1f0 conn xmit_rdma 0000000000000000 [ 155.221433][ T9928] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 155.256314][ T9934] dvmrp0: entered allmulticast mode [ 156.271325][T10008] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 156.422786][ T7345] nci: nci_rsp_packet: unsupported rsp opcode 0xf02 [ 157.377480][T10063] : renamed from wg2 (while UP) [ 157.604942][T10077] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 157.708903][T10075] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 157.882024][T10094] macvtap2: entered promiscuous mode [ 157.898496][T10094] vlan0: entered promiscuous mode [ 157.908237][T10094] macvtap2: entered allmulticast mode [ 157.925629][T10094] vlan0: entered allmulticast mode [ 158.666616][T10155] __nla_validate_parse: 14 callbacks suppressed [ 158.666632][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 158.703193][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 158.722879][T10157] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1198'. [ 158.813045][T10161] validate_nla: 1 callbacks suppressed [ 158.813062][T10161] netlink: 'syz.4.1197': attribute type 16 has an invalid length. [ 158.851643][T10161] netlink: 'syz.4.1197': attribute type 17 has an invalid length. [ 158.981494][T10161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.150455][T10183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1204'. [ 159.159631][T10170] bond4: option lp_interval: invalid value (0) [ 159.165982][T10170] bond4: option lp_interval: allowed values 1 - 2147483647 [ 159.173817][T10183] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1204'. [ 159.184889][T10170] bond4 (unregistering): Released all slaves [ 159.192204][T10183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1204'. [ 159.201434][T10183] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1204'. [ 159.213073][T10183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1204'. [ 159.232607][T10183] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1204'. [ 159.242095][T10183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1204'. [ 159.279511][T10185] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 159.466393][T10204] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 159.515316][T10206] openvswitch: netlink: Message has 6 unknown bytes. [ 159.616155][T10217] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 159.626840][T10217] netlink: 'syz.4.1211': attribute type 7 has an invalid length. [ 159.653303][T10217] netlink: 'syz.4.1211': attribute type 2 has an invalid length. [ 160.171162][T10242] tipc: Enabling of bearer rejected, failed to enable media [ 160.332022][T10247] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 160.346961][T10247] bond3 (unregistering): Released all slaves [ 160.374845][T10252] netlink: 'syz.2.1221': attribute type 10 has an invalid length. [ 160.411355][T10258] openvswitch: netlink: Flow actions attr not present in new flow. [ 160.423284][T10252] bridge_slave_1: left allmulticast mode [ 160.467784][T10252] bridge_slave_1: left promiscuous mode [ 160.473850][T10252] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.510224][T10255] x_tables: duplicate underflow at hook 2 [ 160.520626][T10252] bridge_slave_1: entered promiscuous mode [ 160.541149][T10252] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 160.792941][T10280] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 161.778357][T10273] lo: entered allmulticast mode [ 161.830967][T10283] macvtap1: entered promiscuous mode [ 161.838655][T10283] vlan0: entered promiscuous mode [ 161.844047][T10283] macvtap1: entered allmulticast mode [ 161.851086][T10283] vlan0: entered allmulticast mode [ 161.856222][T10283] veth0_vlan: entered allmulticast mode [ 161.900283][T10284] macvtap2: entered promiscuous mode [ 161.906053][T10284] macvtap2: entered allmulticast mode [ 161.941877][T10273] lo: left allmulticast mode [ 162.017639][T10288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.656399][T10319] x_tables: duplicate underflow at hook 2 [ 162.740336][T10333] IPVS: length: 239 != 24 [ 163.073935][T10356] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.215527][T10361] netlink: 'syz.1.1255': attribute type 1 has an invalid length. [ 163.215527][T10360] netlink: 'syz.1.1255': attribute type 1 has an invalid length. [ 163.313467][T10360] bond4 (unregistering): Released all slaves [ 163.731167][T10408] netlink: 'syz.0.1271': attribute type 12 has an invalid length. [ 163.894673][T10429] netlink: 'syz.4.1276': attribute type 4 has an invalid length. [ 163.922149][T10433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.042183][T10442] __nla_validate_parse: 76 callbacks suppressed [ 164.042198][T10442] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1281'. [ 164.064000][T10442] netlink: 'syz.2.1281': attribute type 178 has an invalid length. [ 164.201122][T10454] ip6t_srh: unknown srh invflags 4000 [ 164.208656][T10456] netlink: 'syz.1.1286': attribute type 1 has an invalid length. [ 164.236083][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 164.241336][T10456] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.268770][T10456] bond4: (slave geneve2): making interface the new active one [ 164.278949][T10456] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 164.392604][T10461] tipc: Started in network mode [ 164.397916][T10461] tipc: Node identity , cluster identity 4711 [ 164.404369][T10461] tipc: Failed to obtain node identity [ 164.411940][T10461] tipc: Enabling of bearer rejected, failed to enable media [ 164.429032][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 164.448737][T10466] gtp1: entered promiscuous mode [ 164.453725][T10466] gtp1: entered allmulticast mode [ 164.484018][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 164.876806][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 165.023203][T10504] netlink: 'syz.1.1302': attribute type 1 has an invalid length. [ 165.049382][T10509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1301'. [ 165.188324][T10517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1307'. [ 165.202772][T10519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1304'. [ 165.220863][T10520] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 165.249749][T10521] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 165.456201][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1309'. [ 165.474857][T10535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.586023][T10534] hsr_slave_0 (unregistering): left promiscuous mode [ 165.593505][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 165.613730][T10546] pim6reg: entered allmulticast mode [ 165.634483][T10545] netlink: 'syz.2.1312': attribute type 1 has an invalid length. [ 165.665972][T10545] netlink: 'syz.2.1312': attribute type 2 has an invalid length. [ 166.799915][T10619] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.820274][T10631] netlink: 'syz.4.1340': attribute type 3 has an invalid length. [ 166.837610][T10619] pimreg: entered allmulticast mode [ 166.940524][T10639] tipc: Enabling of bearer rejected, already enabled [ 167.024984][T10616] pimreg: left allmulticast mode [ 167.092665][T10655] netlink: 'syz.1.1347': attribute type 1 has an invalid length. [ 167.197342][T10663] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 167.261960][T10665] netlink: 'syz.2.1350': attribute type 4 has an invalid length. [ 167.311482][T10671] bond2: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 167.363771][T10669] bond6: Unable to set up delay as MII monitoring is disabled [ 167.384469][T10669] bond6 (unregistering): Released all slaves [ 167.765454][T10693] tipc: Enabled bearer , priority 0 [ 167.796919][T10688] tipc: Resetting bearer [ 169.066214][T10688] tipc: Disabling bearer [ 169.240361][T10739] netlink: 'syz.0.1370': attribute type 83 has an invalid length. [ 169.320386][T10749] netlink: 'syz.0.1372': attribute type 11 has an invalid length. [ 169.525031][T10769] syzkaller0: entered promiscuous mode [ 169.531095][T10769] syzkaller0: entered allmulticast mode [ 169.951328][T10785] __nla_validate_parse: 6 callbacks suppressed [ 169.951344][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 169.953254][T10786] tc_dump_action: action bad kind [ 169.981938][T10785] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 169.992719][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 170.257114][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 170.296692][T10807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1395'. [ 170.641616][T10824] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1400'. [ 170.670227][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'. [ 170.690071][T10827] bridge_slave_0: left allmulticast mode [ 170.697362][T10827] bridge_slave_0: left promiscuous mode [ 170.713682][T10827] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.038260][T10850] nbd: couldn't find device at index 61440 [ 171.095281][T10850] nbd: couldn't find device at index 61440 [ 171.190641][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1410'. [ 171.264302][T10867] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1415'. [ 171.290962][T10871] bond0: Caught tx_queue_len zero misconfig [ 171.517172][T10876] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1419'. [ 171.528372][T10881] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1422'. [ 171.695430][T10896] netlink: 'syz.1.1425': attribute type 12 has an invalid length. [ 171.782905][T10896] bond6: option primary_reselect: invalid value (255) [ 171.792370][T10896] bond6 (unregistering): Released all slaves [ 171.862571][T10907] syzkaller0: entered promiscuous mode [ 171.868528][T10907] syzkaller0: entered allmulticast mode [ 171.992856][T10913] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.680173][T10950] netlink: 'syz.0.1441': attribute type 24 has an invalid length. [ 172.847354][T10961] netlink: 'syz.0.1446': attribute type 1 has an invalid length. [ 173.072270][T10978] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.452367][T11004] bond3 (unregistering): Released all slaves [ 173.518657][T11007] bond3 (unregistering): Released all slaves [ 173.708276][T11026] bond0: hsr_addr_subst_dest: Unknown node [ 173.714689][T11026] batadv0: hsr_addr_subst_dest: Unknown node [ 173.872589][T11034] netlink: 'syz.4.1466': attribute type 39 has an invalid length. [ 173.913420][T11037] netlink: 'syz.0.1469': attribute type 10 has an invalid length. [ 173.943347][T11042] netlink: 'syz.3.1470': attribute type 6 has an invalid length. [ 173.956143][T11037] team0: Port device geneve0 added [ 173.963928][T11039] netlink: 'syz.1.1468': attribute type 10 has an invalid length. [ 173.974939][T11038] netlink: 'syz.1.1468': attribute type 10 has an invalid length. [ 174.209274][T11056] sctp: [Deprecated]: syz.2.1474 (pid 11056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.209274][T11056] Use struct sctp_sack_info instead [ 174.305330][T11066] netlink: 'syz.4.1475': attribute type 10 has an invalid length. [ 174.318741][T11066] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.326052][T11066] bridge_slave_1: left allmulticast mode [ 174.356714][T11066] bridge_slave_1: left promiscuous mode [ 174.366652][T11066] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.404399][T11066] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 175.405227][T11062] vlan0: left allmulticast mode [ 175.410615][T11062] veth0_vlan: left allmulticast mode [ 175.416427][T11062] vlan0: left promiscuous mode [ 175.456837][T11075] netlink: 'syz.2.1479': attribute type 4 has an invalid length. [ 175.502375][ T50] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.534087][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.553794][ T50] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.586607][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.616030][T11101] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20000 [ 175.616207][ T50] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.634017][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.669358][T11097] __nla_validate_parse: 18 callbacks suppressed [ 175.669374][T11097] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1486'. [ 175.689860][T11101] bond0: entered promiscuous mode [ 175.695259][T11100] netlink: 'syz.2.1484': attribute type 12 has an invalid length. [ 175.732709][ T50] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.742692][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.752966][T11108] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 175.781134][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'. [ 175.799681][T11110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.000643][T11122] vlan0: Caught tx_queue_len zero misconfig [ 176.020443][T11124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1492'. [ 176.119216][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'. [ 176.123135][T11130] netlink: 'syz.4.1493': attribute type 1 has an invalid length. [ 176.207539][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'. [ 176.318858][T11144] sctp: [Deprecated]: syz.3.1496 (pid 11144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.318858][T11144] Use struct sctp_sack_info instead [ 176.336073][T11130] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 176.348163][T11145] sctp: [Deprecated]: syz.3.1496 (pid 11145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.348163][T11145] Use struct sctp_sack_info instead [ 176.367026][T11130] bond7 (unregistering): Released all slaves [ 176.396252][T11144] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1496'. [ 176.438977][T11150] veth1_to_bond: entered allmulticast mode [ 176.485921][T11150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1498'. [ 176.551586][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1501'. [ 176.578705][T11150] bond0: (slave bond_slave_1): Releasing backup interface [ 176.604534][T11150] bond_slave_1 (unregistering): left promiscuous mode [ 176.649693][T11150] veth1_to_bond (unregistering): left allmulticast mode [ 176.678870][T11173] netlink: 'syz.4.1503': attribute type 1 has an invalid length. [ 176.744846][T11173] 8021q: adding VLAN 0 to HW filter on device bond7 [ 176.979546][T11190] lo speed is unknown, defaulting to 1000 [ 176.988309][T11188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1509'. [ 177.060192][T11192] delete_channel: no stack [ 177.164724][T11201] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1511'. [ 177.860001][T11212] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 177.870529][T11212] netlink: 'syz.0.1515': attribute type 3 has an invalid length. [ 177.883271][T11212] NCSI netlink: No device for ifindex 813332851 [ 177.913504][T11212] tipc: Enabling of bearer rejected, media not registered [ 178.277447][T11235] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 178.540501][T11244] bridge: RTM_NEWNEIGH with invalid ether address [ 178.783189][T11250] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 182.047778][T11270] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 182.145029][T11277] netlink: 'syz.1.1539': attribute type 9 has an invalid length. [ 182.160383][T11277] __nla_validate_parse: 3 callbacks suppressed [ 182.160401][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'. [ 182.227976][ T7278] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.263255][ T7278] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.309729][ T7278] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.336637][ T7278] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.538223][T11307] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1546'. [ 182.690301][T11322] netlink: 'syz.2.1549': attribute type 5 has an invalid length. [ 182.712332][T11324] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 182.841979][T11338] veth0_to_team: entered promiscuous mode [ 183.275648][T11363] openvswitch: netlink: Unknown key attributes 2 [ 183.312237][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 183.341808][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 183.384868][T11373] syzkaller1: entered promiscuous mode [ 183.385661][T11370] netlink: 'syz.0.1563': attribute type 21 has an invalid length. [ 183.390859][T11373] syzkaller1: entered allmulticast mode [ 183.412077][T11370] netlink: 'syz.0.1563': attribute type 6 has an invalid length. [ 183.427919][T11370] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1563'. [ 183.740707][T11394] netlink: 'syz.4.1571': attribute type 1 has an invalid length. [ 183.792474][T11394] netlink: 'syz.4.1571': attribute type 12 has an invalid length. [ 183.818096][T11394] netlink: 'syz.4.1571': attribute type 29 has an invalid length. [ 183.842586][T11394] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1571'. [ 183.865001][T11404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1571'. [ 183.877873][T11394] netlink: 'syz.4.1571': attribute type 2 has an invalid length. [ 183.885631][T11394] netlink: 23 bytes leftover after parsing attributes in process `syz.4.1571'. [ 183.990925][T11407] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1574'. [ 183.992574][T11404] macvlan2: entered promiscuous mode [ 184.006096][T11404] macvlan2: entered allmulticast mode [ 184.014614][T11404] bond8: (slave macvlan2): Opening slave failed [ 184.032524][T11416] syzkaller0: entered promiscuous mode [ 184.038211][T11416] syzkaller0: entered allmulticast mode [ 184.591954][T11405] netlink: 'syz.1.1574': attribute type 1 has an invalid length. [ 184.600538][T11405] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1574'. [ 184.766927][T11420] macsec2: entered promiscuous mode [ 184.925109][T11433] xt_hashlimit: size too large, truncated to 1048576 [ 185.010533][T11439] Bluetooth: MGMT ver 1.23 [ 185.015135][T11439] Bluetooth: hci1: too big key_count value 32778 [ 185.051554][T11437] lo: entered allmulticast mode [ 185.056850][T11437] lo: left allmulticast mode [ 185.071847][T11439] netlink: 'syz.4.1584': attribute type 12 has an invalid length. [ 185.697387][T11490] Unknown options in mask b7f2 [ 185.895050][T11504] C: renamed from team_slave_0 (while UP) [ 185.905105][T11504] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 185.924638][T11504] vxcan0: tx drop: invalid da for name 0x0000000001000000 [ 185.983622][T11492] lo speed is unknown, defaulting to 1000 [ 186.088801][T11507] team_slave_1: Caught tx_queue_len zero misconfig [ 186.727124][T11548] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.944141][T11563] syzkaller0: entered promiscuous mode [ 186.952150][T11566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.961439][T11563] syzkaller0: entered allmulticast mode [ 187.169496][T11587] __nla_validate_parse: 13 callbacks suppressed [ 187.169513][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 187.172258][T11586] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1623'. [ 188.218000][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1620'. [ 188.447791][T11606] No such timeout policy "syz0" [ 188.530776][T11614] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1629'. [ 188.820544][T11636] validate_nla: 6 callbacks suppressed [ 188.820560][T11636] netlink: 'syz.4.1633': attribute type 13 has an invalid length. [ 188.955200][T11636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.984531][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1637'. [ 189.169020][T11662] bond6 (unregistering): Released all slaves [ 189.500883][T11628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.368331][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.377627][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.384054][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.470066][T11682] dvmrp0: left allmulticast mode [ 195.536630][T11691] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1648'. [ 195.558811][T11691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1648'. [ 195.601007][T11698] batman_adv: batadv0: Adding interface: dummy0 [ 195.631352][T11698] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.657025][T11698] batman_adv: batadv0: Interface activated: dummy0 [ 195.682639][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1648'. [ 195.694336][T11692] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1648'. [ 196.228735][T11734] veth0: entered promiscuous mode [ 196.237360][T11734] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1661'. [ 196.383822][T11732] veth0: left promiscuous mode [ 196.428961][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 196.435120][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 196.441648][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 196.517045][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1665'. [ 196.517426][T11755] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1667'. [ 196.540319][T11751] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1665'. [ 197.040393][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1677'. [ 197.090359][T11798] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1681'. [ 197.108313][T11798] ksmbd: Unknown IPC event: 3, ignore. [ 197.172887][T11807] lo speed is unknown, defaulting to 1000 [ 197.181565][T11807] lo speed is unknown, defaulting to 1000 [ 197.189342][T11807] lo speed is unknown, defaulting to 1000 [ 197.282096][T11811] netlink: 'syz.4.1686': attribute type 2 has an invalid length. [ 197.574218][ T6685] lo speed is unknown, defaulting to 1000 [ 197.581022][T11807] infiniband sz1: set down [ 197.585911][T11807] infiniband sz1: added lo [ 197.640291][T11807] RDS/IB: sz1: added [ 197.645950][T11807] smc: adding ib device sz1 with port count 1 [ 197.652749][T11807] smc: ib device sz1 port 1 has no pnetid [ 197.661247][ T6685] lo speed is unknown, defaulting to 1000 [ 197.674211][T11807] lo speed is unknown, defaulting to 1000 [ 198.019600][T11838] vlan4: entered promiscuous mode [ 198.033009][T11838] geneve1: entered promiscuous mode [ 198.046943][T11838] vlan4: entered allmulticast mode [ 198.064048][T11838] geneve1: entered allmulticast mode [ 198.097523][T11807] lo speed is unknown, defaulting to 1000 [ 198.488672][T11807] lo speed is unknown, defaulting to 1000 [ 198.759950][T11807] lo speed is unknown, defaulting to 1000 [ 199.004800][T11807] lo speed is unknown, defaulting to 1000 [ 200.712856][ C0] Unknown status report in ack skb [ 201.036676][T11882] openvswitch: netlink: IP tunnel dst address not specified [ 201.062381][T11884] __nla_validate_parse: 2 callbacks suppressed [ 201.062399][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 201.085091][T11882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1709'. [ 201.103959][T11888] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1712'. [ 201.120204][T11888] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 201.159139][T11892] netlink: 'syz.3.1713': attribute type 1 has an invalid length. [ 201.166962][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1713'. [ 201.464281][T11911] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 201.692561][T11922] netlink: 'syz.4.1723': attribute type 1 has an invalid length. [ 201.734915][T11922] bond9: entered promiscuous mode [ 201.740481][T11922] bond9: entered allmulticast mode [ 201.746112][T11922] 8021q: adding VLAN 0 to HW filter on device bond9 [ 202.026423][T11943] delete_channel: no stack [ 202.035591][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1729'. [ 202.231809][T11964] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 202.429493][T11985] tipc: Enabled bearer , priority 0 [ 202.437260][T11985] syzkaller0: entered promiscuous mode [ 202.442991][T11985] syzkaller0: entered allmulticast mode [ 202.474530][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'. [ 202.502812][T11985] tipc: Resetting bearer [ 202.512165][T11984] tipc: Resetting bearer [ 202.521659][T11983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1740'. [ 202.533228][T11990] IPv6: NLM_F_CREATE should be specified when creating new route [ 202.552931][T11984] tipc: Disabling bearer [ 202.986506][T12024] netlink: 528 bytes leftover after parsing attributes in process `syz.2.1749'. [ 202.997768][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 203.180499][T12016] can: request_module (can-proto-0) failed. [ 203.221507][T12035] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1753'. [ 203.280505][T12037] tap0: tun_chr_ioctl cmd 1074025677 [ 203.302176][T12037] tap0: linktype set to 65534 [ 203.323265][T12037] tap0: tun_chr_ioctl cmd 21731 [ 203.491758][T12055] netlink: 'syz.0.1759': attribute type 12 has an invalid length. [ 203.519239][T12054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.176611][T12093] bond5: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 204.208961][T12099] netlink: 'syz.0.1770': attribute type 62 has an invalid length. [ 204.306337][T12107] delete_channel: no stack [ 204.314556][T12105] tipc: Started in network mode [ 204.320398][T12105] tipc: Node identity d64f639d4d78, cluster identity 4711 [ 204.333850][T12105] tipc: Enabled bearer , priority 0 [ 204.369063][T12105] syzkaller0: entered promiscuous mode [ 204.384867][T12105] syzkaller0: entered allmulticast mode [ 204.466222][T12105] tipc: Resetting bearer [ 204.474726][T12104] tipc: Resetting bearer [ 204.497074][T12104] tipc: Disabling bearer [ 204.752573][T12138] bond6: option min_links: invalid value (18446744073709551614) [ 204.760436][T12138] bond6: option min_links: allowed values 0 - 2147483647 [ 204.803661][T12138] bond6 (unregistering): Released all slaves [ 204.878193][T12141] tipc: Enabling of bearer rejected, failed to enable media [ 204.904211][ T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.933974][ T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.967258][ T50] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.999689][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.530477][T12179] vlan0: entered promiscuous mode [ 205.545902][T12179] bridge0: entered promiscuous mode [ 205.699641][T12194] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 205.739460][T12196] pim6reg527: entered allmulticast mode [ 205.990792][T12222] xt_nat: multiple ranges no longer supported [ 206.079058][T12228] __nla_validate_parse: 46 callbacks suppressed [ 206.079075][T12228] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1811'. [ 206.099768][T12224] netlink: 'syz.1.1809': attribute type 1 has an invalid length. [ 206.158646][T12228] veth3: entered allmulticast mode [ 206.254023][T12238] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1814'. [ 206.344512][T12248] SET target dimension over the limit! [ 206.355273][T12247] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1816'. [ 206.369288][T12251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1817'. [ 206.382441][T12247] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1816'. [ 206.420293][T12253] netlink: 'syz.1.1819': attribute type 10 has an invalid length. [ 206.437613][T12248] tipc: Enabled bearer , priority 0 [ 206.457062][T12253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1819'. [ 206.497175][T12246] tipc: Disabling bearer [ 206.538897][T12253] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 206.642433][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1820'. [ 206.825686][T12272] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 206.844894][T12272] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 207.044475][T12294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1834'. [ 207.056129][T12294] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1834'. [ 207.086204][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'. [ 207.142839][T12300] veth1_to_bond: entered allmulticast mode [ 207.197220][T12300] veth1_to_bond: left allmulticast mode [ 207.355567][T12319] tipc: Enabling of bearer rejected, already enabled [ 207.806094][T12349] syzkaller0: entered promiscuous mode [ 207.830278][T12349] syzkaller0: entered allmulticast mode [ 208.035282][T12368] nbd: must specify a size in bytes for the device [ 209.186831][T12374] vlan3: entered allmulticast mode [ 209.217957][T12374] macvlan0: entered allmulticast mode [ 209.223382][T12374] veth1_vlan: entered allmulticast mode [ 209.436163][T12394] smc: net device vcan0 applied user defined pnetid SYZ1 [ 209.632271][T12410] IPVS: sh: FWM 3 0x00000003 - no destination available [ 209.941541][T12429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.158508][T12449] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 210.371061][T12462] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 210.383355][T12464] netlink: 'syz.1.1884': attribute type 11 has an invalid length. [ 210.428384][T12469] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 210.608632][T12489] netlink: 'syz.3.1892': attribute type 1 has an invalid length. [ 210.653616][T12489] bond3 (unregistering): Released all slaves [ 210.684347][T12496] netlink: 'syz.3.1892': attribute type 1 has an invalid length. [ 211.692611][T12545] syzkaller0: entered promiscuous mode [ 211.714601][T12545] syzkaller0: entered allmulticast mode [ 211.959892][T12554] __nla_validate_parse: 19 callbacks suppressed [ 211.959908][T12554] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1912'. [ 211.990197][T12554] netlink: 'syz.3.1912': attribute type 2 has an invalid length. [ 212.006980][T12554] geneve3: entered promiscuous mode [ 212.012718][T12554] geneve3: entered allmulticast mode [ 212.019637][ T7346] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 212.036891][ T7346] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 212.113682][T12554] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.126761][T12554] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.149876][ T7346] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 212.178208][T12555] pim6reg527: entered allmulticast mode [ 212.241666][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'. [ 212.259958][T12562] vlan3: entered allmulticast mode [ 212.265351][T12562] bridge_slave_0: entered allmulticast mode [ 212.332460][T12565] mac80211_hwsim hwsim9 wlan0: Caught tx_queue_len zero misconfig [ 212.577898][T12576] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 212.730685][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'. [ 212.752945][T12587] xt_policy: too many policy elements [ 212.781793][T12591] xt_policy: too many policy elements [ 212.820686][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'. [ 212.841974][T12594] netlink: 'syz.2.1923': attribute type 10 has an invalid length. [ 212.913674][T12594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.154882][T12617] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1929'. [ 213.170802][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'. [ 213.197324][T12621] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1929'. [ 213.367296][T12631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.392146][T12631] syzkaller1: entered promiscuous mode [ 213.397908][T12631] syzkaller1: entered allmulticast mode [ 213.503503][T12639] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1937'. [ 213.531790][T12639] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1937'. [ 213.582768][T12639] netlink: 'syz.2.1937': attribute type 21 has an invalid length. [ 213.673909][T12648] netlink: zone id is out of range [ 213.679298][T12648] netlink: zone id is out of range [ 213.685044][T12648] netlink: zone id is out of range [ 213.693393][T12648] netlink: zone id is out of range [ 213.699510][T12648] netlink: zone id is out of range [ 213.703174][T12554] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.705464][T12648] netlink: zone id is out of range [ 213.729489][T12648] netlink: zone id is out of range [ 213.735652][T12554] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.741334][T12648] netlink: zone id is out of range [ 213.747983][T12554] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 213.769576][T12651] netlink: 'syz.4.1939': attribute type 13 has an invalid length. [ 213.901703][T12554] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.922406][T12554] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.933415][T12554] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 213.961719][T12664] tunl0: Caught tx_queue_len zero misconfig [ 214.048419][T12554] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.062574][T12554] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.073072][T12554] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 214.318489][T12689] netlink: 'syz.2.1951': attribute type 1 has an invalid length. [ 214.433991][ T7350] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.450286][ T7350] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 214.468612][ T7350] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 214.539696][ T7350] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.554114][ T7350] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 214.564640][ T7350] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 214.589430][ T7353] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.598062][ T7353] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 214.606470][ T7353] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 214.652443][T12710] netlink: 'syz.4.1957': attribute type 21 has an invalid length. [ 214.717964][T12710] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 214.759090][T12710] bond10 (unregistering): Released all slaves [ 214.807197][T12717] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1958'. [ 214.825117][ T7353] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.842756][ T7353] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 214.852340][ T7353] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 214.920185][T12723] batadv2: entered allmulticast mode [ 214.934262][T12718] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 214.940826][T12713] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 214.961051][T12730] netlink: 'syz.4.1964': attribute type 10 has an invalid length. [ 215.005623][T12730] team0: Port device geneve0 added [ 215.139098][T12744] batadv_slave_0: entered promiscuous mode [ 215.150400][T12744] batman_adv: batadv0: Adding interface: macsec1 [ 215.157018][T12744] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.182994][T12744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.194919][T12744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.205464][T12744] batman_adv: batadv0: Interface activated: macsec1 [ 215.472130][T12767] netlink: 'syz.4.1976': attribute type 10 has an invalid length. [ 215.480155][T12767] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 215.491401][T12767] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 215.703371][T12787] xfrm1: entered allmulticast mode [ 215.817369][ T7353] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.834504][ T7353] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.860736][ T7353] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.887585][ T7353] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.015963][T12812] sctp: [Deprecated]: syz.1.1987 (pid 12812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.015963][T12812] Use struct sctp_sack_info instead [ 217.063708][T12863] __nla_validate_parse: 6 callbacks suppressed [ 217.063726][T12863] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2000'. [ 217.323948][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 217.395271][T12884] tipc: Enabling of bearer rejected, already enabled [ 217.410565][T12883] ipt_REJECT: TCP_RESET invalid for non-tcp [ 217.464132][T12875] x_tables: ip_tables: bpf.0 match: invalid size 528 (kernel) != (user) 544 [ 217.483280][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2009'. [ 217.497457][T12875] tipc: Resetting bearer [ 217.540116][T12892] netlink: 'syz.4.2012': attribute type 1 has an invalid length. [ 217.557366][T12886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2009'. [ 217.650472][T12896] x_tables: duplicate underflow at hook 3 [ 217.859242][ T7346] tipc: Resetting bearer [ 217.881572][T12918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2021'. [ 218.110762][T12933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2026'. [ 218.138036][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2026'. [ 218.446390][T12956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2033'. [ 218.457605][T12959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2035'. [ 218.620445][T12967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2036'. [ 218.791323][T12985] netlink: 'syz.3.2041': attribute type 1 has an invalid length. [ 218.804373][T12985] netlink: 'syz.3.2041': attribute type 1 has an invalid length. [ 219.353829][T13020] sock: sock_timestamping_bind_phc: sock not bind to device [ 220.071322][T13031] v: left allmulticast mode [ 220.076167][T13031] veth0_vlan: left allmulticast mode [ 220.083721][T13031] v: left promiscuous mode [ 220.248906][ T7353] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.257300][ T7353] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 220.270504][ T7353] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 220.316887][ T7353] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.328850][ T7353] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 220.337442][ T7353] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 220.359470][ T7351] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.368997][ T7351] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 220.377541][ T7351] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 220.389302][ T7351] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.397902][ T7351] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 220.406344][ T7351] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 220.804264][T13092] net_ratelimit: 23 callbacks suppressed [ 220.804285][T13092] netlink: ct family unspecified [ 220.821162][T13095] xt_TCPMSS: Only works on TCP SYN packets [ 220.832218][T13092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.861056][T13102] netlink: ct family unspecified [ 220.874978][T13102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.079545][T13109] netlink: 'syz.2.2073': attribute type 16 has an invalid length. [ 221.112377][T13109] netlink: 'syz.2.2073': attribute type 17 has an invalid length. [ 221.681062][T13109] batman_adv: batadv0: Interface deactivated: dummy0 [ 222.023345][T13109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.060911][T13109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.295239][T13109] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 222.359926][T13109] vlan2: left promiscuous mode [ 222.364910][T13109] hsr_slave_1: left promiscuous mode [ 222.372054][T13109] vlan2: left allmulticast mode [ 222.376933][T13109] hsr_slave_1: left allmulticast mode [ 222.425950][T13109] vlan0: left allmulticast mode [ 222.434138][T13109] veth0_vlan: left allmulticast mode [ 222.442175][T13109] vlan0: left promiscuous mode [ 222.447949][T13109] macvtap1: left promiscuous mode [ 222.453270][T13109] macvtap1: left allmulticast mode [ 222.467206][T13109] geneve2: left promiscuous mode [ 222.472504][T13109] geneve2: left allmulticast mode [ 222.498244][T13109] vlan4: left promiscuous mode [ 222.503148][T13109] geneve1: left promiscuous mode [ 222.512522][T13109] vlan4: left allmulticast mode [ 222.517567][T13109] geneve1: left allmulticast mode [ 222.583925][T13109] batman_adv: batadv0: Interface deactivated: macsec1 [ 222.706554][T13133] dvmrp0: entered allmulticast mode [ 222.756939][ T7346] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.778942][ T7346] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.793766][ T7346] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 222.824707][ T7346] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.834434][ T7346] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.845279][ T7346] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 222.885848][ T7346] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.901090][ T7346] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.926407][ T7346] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 222.946770][ T7346] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.964097][ T7346] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.975074][ T7346] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 222.986623][T13186] __nla_validate_parse: 13 callbacks suppressed [ 222.986640][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2093'. [ 223.008898][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2093'. [ 223.034504][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2093'. [ 223.181225][T13175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2089'. [ 223.261986][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'. [ 223.273337][T13216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2100'. [ 223.299475][ T7350] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.309301][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'. [ 223.318502][ T7350] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.327373][T13216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2100'. [ 223.340890][T13221] ip6t_rpfilter: unknown options [ 223.346232][ T7350] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.358551][ T7350] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.372121][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2101'. [ 223.381387][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2101'. [ 223.466748][T13230] netlink: 'syz.4.2103': attribute type 10 has an invalid length. [ 223.568549][T13234] netlink: 'syz.2.2104': attribute type 1 has an invalid length. [ 223.570408][T13238] netlink: 'syz.2.2104': attribute type 1 has an invalid length. [ 223.610663][T13234] 8021q: adding VLAN 0 to HW filter on device bond8 [ 223.619583][T13234] bond7: (slave bond8): making interface the new active one [ 223.628583][T13234] bond7: (slave bond8): Enslaving as an active interface with an up link [ 223.640377][T13234] 8021q: adding VLAN 0 to HW filter on device bond7 [ 223.861611][T13247] netlink: 'syz.4.2108': attribute type 30 has an invalid length. [ 223.920854][T13249] bond5: entered promiscuous mode [ 223.926320][T13249] bond5: entered allmulticast mode [ 223.933638][T13249] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.466297][T13293] sctp: [Deprecated]: syz.0.2121 (pid 13293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.466297][T13293] Use struct sctp_sack_info instead [ 224.537413][T13297] netlink: 'syz.4.2123': attribute type 5 has an invalid length. [ 224.776394][T13321] netlink: 'syz.0.2126': attribute type 48 has an invalid length. [ 224.870763][T13335] wg2: entered promiscuous mode [ 224.875755][T13335] wg2: entered allmulticast mode [ 224.983758][T13340] tipc: Enabling of bearer rejected, already enabled [ 224.995480][T13340] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 225.077839][T13340] tipc: Resetting bearer [ 225.185063][T13349] xt_hashlimit: size too large, truncated to 1048576 [ 225.254846][T13350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.292132][T13354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.751076][T13378] delete_channel: no stack [ 225.980019][T13387] netlink: 'syz.1.2149': attribute type 11 has an invalid length. [ 226.095216][T13401] syzkaller1: entered promiscuous mode [ 226.100995][T13401] syzkaller1: entered allmulticast mode [ 226.266895][T13406] 0: reclassify loop, rule prio 0, protocol 800 [ 226.810568][T13432] "syz.2.2159" (13432) uses obsolete ecb(arc4) skcipher [ 226.820565][T13444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.995663][T13495] netlink: 'syz.4.2173': attribute type 1 has an invalid length. [ 228.003682][T13495] __nla_validate_parse: 14 callbacks suppressed [ 228.003697][T13495] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2173'. [ 228.012680][T13500] netlink: 'syz.2.2172': attribute type 1 has an invalid length. [ 228.028225][T13496] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2175'. [ 228.037273][T13496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2175'. [ 228.049039][T13496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2175'. [ 228.058483][T13496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2175'. [ 228.117058][T13500] bond9: entered promiscuous mode [ 228.124939][T13500] 8021q: adding VLAN 0 to HW filter on device bond9 [ 228.182386][T13512] netem: change failed [ 228.200653][T13497] delete_channel: no stack [ 228.237007][T13508] tipc: Enabled bearer , priority 0 [ 228.262164][T13503] tipc: Enabled bearer , priority 0 [ 228.281115][T13503] syzkaller0: entered promiscuous mode [ 228.290693][T13503] syzkaller0: entered allmulticast mode [ 228.308270][T13503] tipc: Resetting bearer [ 228.318281][T13517] syzkaller0: entered promiscuous mode [ 228.323805][T13517] syzkaller0: entered allmulticast mode [ 228.366463][T13508] tipc: Resetting bearer [ 228.382869][T13507] tipc: Resetting bearer [ 228.405484][T13507] tipc: Disabling bearer [ 228.569827][T13529] pimreg: entered allmulticast mode [ 228.762935][T13546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2189'. [ 228.776627][T13546] tipc: Trying to set illegal importance in message [ 228.793886][T13548] veth0: entered promiscuous mode [ 228.799779][T13548] veth0: left promiscuous mode [ 228.913118][T13502] tipc: Resetting bearer [ 228.957355][T13502] tipc: Disabling bearer [ 229.008048][T13564] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2197'. [ 229.021379][T13563] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 229.048484][T13564] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2197'. [ 229.070636][T13563] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2197'. [ 229.190646][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'. [ 229.634256][T13597] vlan3: entered promiscuous mode [ 229.682800][T13597] bridge0: entered promiscuous mode [ 230.051787][T13630] xt_hashlimit: size too large, truncated to 1048576 [ 230.098444][T13637] netlink: 'syz.4.2217': attribute type 4 has an invalid length. [ 230.107534][T13638] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 230.123916][T13635] netlink: 'syz.4.2217': attribute type 4 has an invalid length. [ 230.134044][T13635] netlink: 'syz.4.2217': attribute type 4 has an invalid length. [ 230.142113][T13635] netlink: 'syz.4.2217': attribute type 4 has an invalid length. [ 230.151734][T13635] netlink: 'syz.4.2217': attribute type 4 has an invalid length. [ 230.159999][T13635] netlink: 'syz.4.2217': attribute type 4 has an invalid length. [ 230.168186][T13635] netlink: 'syz.4.2217': attribute type 4 has an invalid length. [ 230.176179][T13635] netlink: 'syz.4.2217': attribute type 4 has an invalid length. [ 230.184315][T13635] netlink: 'syz.4.2217': attribute type 4 has an invalid length. [ 230.193222][T13635] netlink: 'syz.4.2217': attribute type 4 has an invalid length. [ 230.458083][T13651] veth1_to_batadv: mtu greater than device maximum [ 230.538168][T13654] openvswitch: netlink: IP tunnel dst address not specified [ 230.608287][T13654] team0: Port device team_slave_0 removed [ 230.945542][T13677] 8021q: adding VLAN 0 to HW filter on device bond5 [ 230.954444][T13677] bond4: (slave bond5): making interface the new active one [ 230.963455][T13677] bond4: (slave bond5): Enslaving as an active interface with an up link [ 230.978217][T13677] 8021q: adding VLAN 0 to HW filter on device bond4 [ 230.981926][T13683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.962146][T13762] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 231.985850][T13762] team0: Device macvtap2 is already an upper device of the team interface [ 232.042704][T13774] openvswitch: netlink: Flow actions attr not present in new flow. [ 232.485463][T13800] xt_hashlimit: size too large, truncated to 1048576 [ 233.196285][T13832] __nla_validate_parse: 11 callbacks suppressed [ 233.196302][T13832] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2271'. [ 233.215416][T13819] lo speed is unknown, defaulting to 1000 [ 233.268220][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2272'. [ 233.271746][T13819] lo speed is unknown, defaulting to 1000 [ 233.309955][T13835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2272'. [ 234.033225][T13886] sctp: [Deprecated]: syz.0.2288 (pid 13886) Use of int in max_burst socket option. [ 234.033225][T13886] Use struct sctp_assoc_value instead [ 234.177011][T13896] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2290'. [ 234.488195][T13914] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 234.602754][T13918] vlan4: entered allmulticast mode [ 234.608518][T13918] hsr0: entered allmulticast mode [ 234.614116][T13918] hsr_slave_0: entered allmulticast mode [ 234.620262][T13918] hsr_slave_1: entered allmulticast mode [ 234.752312][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2299'. [ 234.771842][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2299'. [ 234.903155][T13965] tipc: Resetting bearer [ 235.003205][T13968] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.2305'. [ 235.072261][T13980] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.2305'. [ 235.324303][T13998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2313'. [ 235.393430][T14002] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 235.635548][T14015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2316'. [ 235.725046][T14019] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 235.915704][T14024] bond0: entered promiscuous mode [ 235.925822][T14024] bond_slave_0: entered promiscuous mode [ 235.952350][T14024] bond_slave_1: entered promiscuous mode [ 235.967941][T14024] geneve1: entered promiscuous mode [ 235.981998][T14024] bridge_slave_1: entered promiscuous mode [ 236.009913][T14024] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 236.100430][T14030] bond6: entered allmulticast mode [ 236.106033][T14030] 8021q: adding VLAN 0 to HW filter on device bond6 [ 236.113497][T14030] bridge0: port 1(bond6) entered blocking state [ 236.129330][T14030] bridge0: port 1(bond6) entered disabled state [ 236.158382][T14030] bond6: entered promiscuous mode [ 236.331904][T14048] ip6gre0: Caught tx_queue_len zero misconfig [ 236.356732][T14050] Z7nz>RA: renamed from lo [ 236.508897][ T5837] Bluetooth: hci0: command tx timeout [ 237.074154][T14114] Z7nz>RA speed is unknown, defaulting to 1000 [ 237.090126][T14114] lo speed is unknown, defaulting to 1000 [ 237.454923][T14128] syzkaller0: entered promiscuous mode [ 237.473616][T14128] syzkaller0: entered allmulticast mode [ 237.584957][T14115] validate_nla: 30 callbacks suppressed [ 237.584973][T14115] netlink: 'syz.0.2349': attribute type 10 has an invalid length. [ 238.221300][T14163] __nla_validate_parse: 19 callbacks suppressed [ 238.221320][T14163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2358'. [ 238.239382][T14163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2358'. [ 238.472565][T14181] Cannot find add_set index 2 as target [ 238.562569][T14185] netlink: 'syz.0.2367': attribute type 1 has an invalid length. [ 238.576061][T14185] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2367'. [ 238.589588][T14186] netlink: 'syz.4.2366': attribute type 1 has an invalid length. [ 238.607031][T14186] netlink: 'syz.4.2366': attribute type 1 has an invalid length. [ 238.609318][T14188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2368'. [ 238.621777][T14192] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2369'. [ 238.640789][T14185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2367'. [ 238.667517][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2369'. [ 238.849066][T14207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.037605][T14213] syzkaller1: entered promiscuous mode [ 239.044169][T14213] syzkaller1: entered allmulticast mode [ 239.440789][T14244] netlink: 'syz.3.2381': attribute type 1 has an invalid length. [ 239.494819][T14244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.518138][T14246] $H: renamed from bond0 [ 239.567279][T14249] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2383'. [ 239.630532][T14256] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 239.650461][T14258] netlink: 'syz.4.2386': attribute type 2 has an invalid length. [ 239.668478][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'. [ 239.729546][T14256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.822376][T14258] 9: entered promiscuous mode [ 239.943519][T14278] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2390'. [ 240.177218][T14292] xt_TCPMSS: Only works on TCP SYN packets [ 240.942722][T14348] netlink: 'syz.0.2407': attribute type 21 has an invalid length. [ 240.983076][T14348] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 241.002668][T14348] bond7 (unregistering): Released all slaves [ 241.035010][T14359] netlink: zone id is out of range [ 241.035010][T14354] netlink: zone id is out of range [ 241.035026][T14354] netlink: zone id is out of range [ 241.035034][T14354] netlink: zone id is out of range [ 241.074993][T14359] netlink: zone id is out of range [ 241.080314][T14354] netlink: zone id is out of range [ 241.087850][T14354] netlink: zone id is out of range [ 241.093574][T14359] netlink: zone id is out of range [ 241.513069][T14379] netlink: 'syz.2.2414': attribute type 2 has an invalid length. [ 241.521150][T14379] netlink: 'syz.2.2414': attribute type 11 has an invalid length. [ 242.227901][T14422] netlink: 'syz.3.2426': attribute type 6 has an invalid length. [ 242.347996][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 242.660123][T14455] netlink: 'syz.4.2434': attribute type 1 has an invalid length. [ 242.722215][T14455] 8021q: adding VLAN 0 to HW filter on device bond10 [ 243.272133][T14503] __nla_validate_parse: 84 callbacks suppressed [ 243.272150][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 243.309181][T14506] netdevsim netdevsim0: Direct firmware load for /. failed with error -2 [ 243.324231][T14506] netdevsim netdevsim0: Falling back to sysfs fallback for: /. [ 243.435179][T14516] netlink: 202640 bytes leftover after parsing attributes in process `syz.3.2456'. [ 243.472337][T14518] netlink: 'syz.1.2457': attribute type 62 has an invalid length. [ 243.509504][T14516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2456'. [ 243.640643][T14536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2462'. [ 243.685584][T14536] netlink: 'syz.3.2462': attribute type 7 has an invalid length. [ 243.706803][T14536] netlink: 'syz.3.2462': attribute type 8 has an invalid length. [ 243.744900][T14536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2462'. [ 243.781341][T14537] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2462'. [ 243.865261][T14547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2465'. [ 243.865787][T14552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2467'. [ 243.887077][T14552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2467'. [ 243.899945][T14549] bond7: option mode: invalid value (133) [ 243.911938][T14549] bond7 (unregistering): Released all slaves [ 244.156412][T14576] netlink: 'syz.3.2474': attribute type 1 has an invalid length. [ 244.220530][T14576] bond0: (slave gretap2): making interface the new active one [ 244.222106][T14578] sctp: [Deprecated]: syz.4.2472 (pid 14578) Use of int in max_burst socket option deprecated. [ 244.222106][T14578] Use struct sctp_assoc_value instead [ 244.252005][T14576] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 244.288808][T14576] netlink: 'syz.3.2474': attribute type 21 has an invalid length. [ 244.302496][T14566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.307040][T14576] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2474'. [ 244.462750][T14599] netlink: 'syz.2.2481': attribute type 10 has an invalid length. [ 244.512275][T14599] netlink: 'syz.2.2481': attribute type 10 has an invalid length. [ 244.727449][T14620] delete_channel: no stack [ 244.745884][T14625] netlink: 'syz.1.2488': attribute type 7 has an invalid length. [ 244.786319][T14625] netlink: 'syz.1.2488': attribute type 8 has an invalid length. [ 245.052203][T14639] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 245.283799][T14652] team0: Device ipvlan1 failed to register rx_handler [ 245.556194][T14665] vlan2: entered promiscuous mode [ 245.561567][T14665] bridge0: entered promiscuous mode [ 245.793004][T14686] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 245.968007][T14696] net_ratelimit: 6 callbacks suppressed [ 245.968025][T14696] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 246.058351][T14703] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 246.295412][T14714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.393260][T14717] syzkaller1: entered promiscuous mode [ 246.418875][T14717] syzkaller1: entered allmulticast mode [ 246.523401][T14727] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 246.581742][T14729] atomic_op ffff88802982f198 conn xmit_atomic 0000000000000000 [ 247.783745][T14788] tipc: Resetting bearer [ 247.791969][T14787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.841946][T14787] macsec3: entered promiscuous mode [ 248.391982][T14822] validate_nla: 4 callbacks suppressed [ 248.392000][T14822] netlink: 'syz.4.2547': attribute type 12 has an invalid length. [ 248.440266][T14822] __nla_validate_parse: 12 callbacks suppressed [ 248.440285][T14822] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2547'. [ 248.634558][T14835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2553'. [ 248.647253][T14835] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2553'. [ 248.666742][T14836] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 248.681000][T14837] syzkaller0: entered promiscuous mode [ 248.687091][T14837] syzkaller0: entered allmulticast mode [ 248.802330][T14846] bridge_slave_0: left promiscuous mode [ 248.808971][T14846] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.821635][T14846] bond0: (slave bridge_slave_1): Releasing backup interface [ 248.830030][T14846] bridge_slave_1: left promiscuous mode [ 248.837499][T14846] bond0: (slave bond_slave_0): Releasing backup interface [ 248.845733][T14846] bond_slave_0: left promiscuous mode [ 248.862303][T14846] bond0: (slave bond_slave_1): Releasing backup interface [ 248.870461][T14846] bond_slave_1: left promiscuous mode [ 248.891426][T14846] team0: Port device team_slave_1 removed [ 248.900712][T14846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.908632][T14846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.918789][T14846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.926376][T14846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.936200][T14846] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 249.200481][T14854] tipc: Enabled bearer , priority 0 [ 249.209058][T14854] syzkaller0: entered promiscuous mode [ 249.214719][T14854] syzkaller0: entered allmulticast mode [ 249.243363][T14853] tipc: Resetting bearer [ 249.273406][T14853] tipc: Disabling bearer [ 249.538510][T14856] bond11 (unregistering): Released all slaves [ 249.588338][T14862] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2560'. [ 249.719777][T14867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2563'. [ 249.999642][T14887] syzkaller0: entered promiscuous mode [ 250.005172][T14887] syzkaller0: entered allmulticast mode [ 250.111232][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2566'. [ 250.314217][T14902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2569'. [ 250.371468][T14905] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2571'. [ 250.426816][T14909] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2572'. [ 250.548297][T14910] netlink: 'syz.3.2573': attribute type 39 has an invalid length. [ 250.604075][T14919] syzkaller0: entered promiscuous mode [ 250.616800][T14919] syzkaller0: entered allmulticast mode [ 250.849324][T14923] netlink: 'syz.0.2577': attribute type 4 has an invalid length. [ 251.015017][T14933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2580'. [ 251.187888][T14936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.240573][T14936] netlink: 'syz.0.2581': attribute type 29 has an invalid length. [ 251.258476][T14936] netlink: 'syz.0.2581': attribute type 29 has an invalid length. [ 251.410034][T14948] syzkaller1: entered promiscuous mode [ 251.422329][T14948] syzkaller1: entered allmulticast mode [ 251.686084][ T5837] Bluetooth: hci4: link tx timeout [ 251.686468][T14971] netlink: 'syz.4.2591': attribute type 1 has an invalid length. [ 251.692226][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 251.795089][T14976] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 251.833090][T14976] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 251.870103][T14976] tipc: Resetting bearer [ 252.107099][T14983] 8021q: adding VLAN 0 to HW filter on device bond10 [ 252.471778][T14995] netlink: 'syz.2.2599': attribute type 9 has an invalid length. [ 252.750411][T15002] syzkaller0: entered promiscuous mode [ 252.765616][T15002] syzkaller0: entered allmulticast mode [ 252.892892][T15019] netlink: 'syz.1.2606': attribute type 1 has an invalid length. [ 253.308656][T15037] netlink: 'syz.3.2612': attribute type 1 has an invalid length. [ 253.706592][T15058] __nla_validate_parse: 14 callbacks suppressed [ 253.706612][T15058] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2620'. [ 253.779166][T15062] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2620'. [ 253.788676][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 253.991016][T15068] only policy match revision 0 supported [ 253.991035][T15068] unable to load match [ 254.046789][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2623'. [ 254.110942][T15069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'. [ 254.486329][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2627'. [ 254.514570][T15092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2627'. [ 254.525295][T15093] netlink: 'syz.3.2629': attribute type 4 has an invalid length. [ 254.562849][T15093] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2629'. [ 254.608873][T15095] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 254.662133][T15095] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2631'. [ 255.224616][T15132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2639'. [ 255.482807][T15143] sctp: [Deprecated]: syz.2.2643 (pid 15143) Use of int in max_burst socket option deprecated. [ 255.482807][T15143] Use struct sctp_assoc_value instead [ 255.793267][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.802478][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.809002][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.867088][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2649'. [ 256.643550][T15210] x_tables: duplicate underflow at hook 1 [ 256.718828][T15216] xt_hashlimit: invalid interval [ 257.414077][T15268] sctp: [Deprecated]: syz.2.2674 (pid 15268) Use of int in max_burst socket option. [ 257.414077][T15268] Use struct sctp_assoc_value instead [ 257.516829][T15272] netlink: 'syz.1.2675': attribute type 11 has an invalid length. [ 257.584794][T15276] netlink: 'syz.2.2677': attribute type 1 has an invalid length. [ 257.605693][T15276] bond1: (slave veth0_to_bond): Releasing active interface [ 257.873655][T15297] openvswitch: netlink: IP tunnel dst address not specified [ 257.959646][T15297] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 257.997134][T15305] netlink: 'syz.2.2685': attribute type 2 has an invalid length. [ 258.039913][T15305] netlink: 'syz.2.2685': attribute type 11 has an invalid length. [ 258.063231][T15309] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 258.218037][T15323] tipc: Enabled bearer , priority 0 [ 258.314522][T15323] tipc: Disabling bearer [ 258.515610][T15346] geneve0: entered promiscuous mode [ 258.534956][T15346] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 258.544645][T15346] team0: Device macvtap3 is already an upper device of the team interface [ 258.555320][T15346] geneve0: left promiscuous mode [ 258.640074][T15353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.779437][T15371] __nla_validate_parse: 8 callbacks suppressed [ 258.779454][T15371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2703'. [ 258.839995][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2705'. [ 258.872919][T15365] netlink: 816 bytes leftover after parsing attributes in process `syz.3.2703'. [ 259.074262][T15390] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 259.093694][T15390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.269613][T15404] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 259.309455][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2716'. [ 259.475392][T15413] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 259.483058][T15413] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 259.496891][T15421] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2721'. [ 259.641105][T15433] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2725'. [ 259.673476][T15433] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2725'. [ 259.921561][T15454] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2732'. [ 259.962317][T15450] sctp: [Deprecated]: syz.2.2731 (pid 15450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.962317][T15450] Use struct sctp_sack_info instead [ 260.015495][T15454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2732'. [ 260.255688][T15475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2737'. [ 260.329444][T15476] bond7: entered promiscuous mode [ 260.334764][T15476] bond7: entered allmulticast mode [ 260.341106][T15476] 8021q: adding VLAN 0 to HW filter on device bond7 [ 260.451649][T15482] netlink: 'syz.0.2739': attribute type 3 has an invalid length. [ 260.629797][T15490] vxcan1: entered allmulticast mode [ 260.783682][T15475] tipc: Enabled bearer , priority 10 [ 260.843852][T15504] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20001 [ 261.379231][T15542] tunl0: entered promiscuous mode [ 261.384861][T15542] tunl0: entered allmulticast mode [ 261.407924][T15542] hsr_slave_0: left promiscuous mode [ 261.415742][T15542] hsr_slave_1: left promiscuous mode [ 261.475350][T15551] tipc: Enabled bearer , priority 0 [ 261.494203][T15551] syzkaller0: entered promiscuous mode [ 261.501066][T15551] syzkaller0: entered allmulticast mode [ 261.518763][T15544] Z7nz>RA speed is unknown, defaulting to 1000 [ 261.535136][T15544] lo speed is unknown, defaulting to 1000 [ 261.560646][T15551] tipc: Resetting bearer [ 261.644870][T15550] tipc: Resetting bearer [ 261.680614][T15550] tipc: Disabling bearer [ 261.898229][T13946] tipc: Node number set to 2604098461 [ 261.962947][T15581] netlink: zone id is out of range [ 261.970870][T15581] netlink: zone id is out of range [ 261.976488][T15581] netlink: zone id is out of range [ 261.991928][T15581] netlink: zone id is out of range [ 262.002028][T15581] netlink: zone id is out of range [ 262.007168][T15581] netlink: zone id is out of range [ 262.048478][T15581] netlink: zone id is out of range [ 262.325982][T15590] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.448000][T15615] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.469889][T15623] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.632282][T15628] xt_policy: output policy not valid in PREROUTING and INPUT [ 262.776136][T15636] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.040082][T15649] net_ratelimit: 18 callbacks suppressed [ 263.040102][T15649] openvswitch: netlink: Message has -2 unknown bytes. [ 263.195969][T15669] netlink: 'syz.0.2793': attribute type 1 has an invalid length. [ 263.243087][T15665] vlan5: entered allmulticast mode [ 263.293629][T15669] 8021q: adding VLAN 0 to HW filter on device bond8 [ 263.323292][T15675] veth7: entered promiscuous mode [ 263.342454][T15675] bond8: (slave veth7): Enslaving as an active interface with a down link [ 263.425769][T15669] veth9: entered promiscuous mode [ 263.449137][T15669] bond8: (slave veth9): Enslaving as an active interface with a down link [ 263.472806][T15675] bond8: entered allmulticast mode [ 263.496054][T15694] bridge0: port 1(veth0_to_bridge) entered blocking state [ 263.513178][T15694] bridge0: port 1(veth0_to_bridge) entered disabled state [ 263.521026][T15694] veth0_to_bridge: entered allmulticast mode [ 263.530453][T15694] veth0_to_bridge: entered promiscuous mode [ 263.744838][T15714] netlink: 'syz.4.2807': attribute type 30 has an invalid length. [ 264.346149][T15751] __nla_validate_parse: 16 callbacks suppressed [ 264.346168][T15751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2818'. [ 264.370860][T15752] syzkaller1: entered promiscuous mode [ 264.386755][T15752] syzkaller1: entered allmulticast mode [ 264.420463][T15755] dvmrp0: entered allmulticast mode [ 264.441100][T15755] dvmrp0: left allmulticast mode [ 264.451188][ T7350] tipc: Subscription rejected, illegal request [ 264.633871][T15766] tipc: Enabled bearer , priority 0 [ 264.655830][T15770] netlink: 'syz.3.2825': attribute type 29 has an invalid length. [ 264.666365][T15767] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 264.674948][T15767] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 264.686850][T15767] tipc: Resetting bearer [ 264.693167][T15770] netlink: 'syz.3.2825': attribute type 29 has an invalid length. [ 264.712255][T15778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2828'. [ 264.713056][T15770] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2825'. [ 264.771361][T15778] 8021q: adding VLAN 0 to HW filter on device bond9 [ 264.821163][ T7350] tipc: Resetting bearer [ 264.839894][T15783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2830'. [ 264.863483][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2829'. [ 264.873927][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2830'. [ 264.894552][T15788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2829'. [ 264.925500][T15791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2832'. [ 265.081921][T15796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2834'. [ 265.147311][T15807] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2838'. [ 265.206038][T15796] vlan5: entered allmulticast mode [ 265.248458][T15796] bridge_slave_0: entered allmulticast mode [ 265.323100][T15823] openvswitch: netlink: Message has 4 unknown bytes. [ 265.342427][T15822] tunl0: left promiscuous mode [ 265.347247][T15822] tunl0: left allmulticast mode [ 265.352626][T15822] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 265.442211][T15825] team0: Device wireguard0 is of different type [ 265.754127][T15855] tipc: Enabling of bearer rejected, failed to enable media [ 265.778659][T15855] xt_hashlimit: size too large, truncated to 1048576 [ 265.895128][T15862] [ 265.897498][T15862] ====================================================== [ 265.904515][T15862] WARNING: possible circular locking dependency detected [ 265.911544][T15862] syzkaller #0 Not tainted [ 265.915959][T15862] ------------------------------------------------------ [ 265.922979][T15862] syz.1.2852/15862 is trying to acquire lock: [ 265.929039][T15862] ffffffff8f426358 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 265.938824][T15862] [ 265.938824][T15862] but task is already holding lock: [ 265.946188][T15862] ffff88814d5bbc70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 265.955504][T15862] [ 265.955504][T15862] which lock already depends on the new lock. [ 265.955504][T15862] [ 265.965891][T15862] [ 265.965891][T15862] the existing dependency chain (in reverse order) is: [ 265.974882][T15862] [ 265.974882][T15862] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 265.982860][T15862] lock_acquire+0x120/0x360 [ 265.987867][T15862] _raw_spin_lock_bh+0x36/0x50 [ 265.993225][T15862] nr_rt_device_down+0x12a/0x720 [ 265.998677][T15862] nr_device_event+0x137/0x150 [ 266.003935][T15862] notifier_call_chain+0x1b6/0x3e0 [ 266.009545][T15862] __dev_notify_flags+0x18d/0x2e0 [ 266.015065][T15862] netif_change_flags+0xe8/0x1a0 [ 266.020506][T15862] dev_change_flags+0x130/0x260 [ 266.025855][T15862] dev_ioctl+0x7b4/0x1150 [ 266.030684][T15862] sock_do_ioctl+0x22c/0x300 [ 266.035775][T15862] sock_ioctl+0x576/0x790 [ 266.040778][T15862] __se_sys_ioctl+0xfc/0x170 [ 266.045866][T15862] do_syscall_64+0xfa/0xfa0 [ 266.050867][T15862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.057255][T15862] [ 266.057255][T15862] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 266.065074][T15862] lock_acquire+0x120/0x360 [ 266.070075][T15862] _raw_spin_lock_bh+0x36/0x50 [ 266.075339][T15862] nr_rt_device_down+0xa9/0x720 [ 266.080684][T15862] nr_device_event+0x137/0x150 [ 266.085941][T15862] notifier_call_chain+0x1b6/0x3e0 [ 266.091553][T15862] __dev_notify_flags+0x18d/0x2e0 [ 266.097072][T15862] netif_change_flags+0xe8/0x1a0 [ 266.102531][T15862] dev_change_flags+0x130/0x260 [ 266.107883][T15862] dev_ioctl+0x7b4/0x1150 [ 266.112732][T15862] sock_do_ioctl+0x22c/0x300 [ 266.117828][T15862] sock_ioctl+0x576/0x790 [ 266.122675][T15862] __se_sys_ioctl+0xfc/0x170 [ 266.127788][T15862] do_syscall_64+0xfa/0xfa0 [ 266.132808][T15862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.139198][T15862] [ 266.139198][T15862] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 266.147160][T15862] validate_chain+0xb9b/0x2140 [ 266.152423][T15862] __lock_acquire+0xab9/0xd20 [ 266.157595][T15862] lock_acquire+0x120/0x360 [ 266.162599][T15862] _raw_spin_lock_bh+0x36/0x50 [ 266.167866][T15862] nr_remove_neigh+0x25/0xe0 [ 266.172962][T15862] nr_add_node+0x1d9f/0x2570 [ 266.178049][T15862] nr_rt_ioctl+0xc12/0xd50 [ 266.182968][T15862] sock_do_ioctl+0xdc/0x300 [ 266.187979][T15862] sock_ioctl+0x576/0x790 [ 266.192914][T15862] __se_sys_ioctl+0xfc/0x170 [ 266.198030][T15862] do_syscall_64+0xfa/0xfa0 [ 266.203061][T15862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.209493][T15862] [ 266.209493][T15862] other info that might help us debug this: [ 266.209493][T15862] [ 266.219703][T15862] Chain exists of: [ 266.219703][T15862] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 266.219703][T15862] [ 266.233499][T15862] Possible unsafe locking scenario: [ 266.233499][T15862] [ 266.240935][T15862] CPU0 CPU1 [ 266.246276][T15862] ---- ---- [ 266.251619][T15862] lock(&nr_node->node_lock); [ 266.256378][T15862] lock(nr_node_list_lock); [ 266.263472][T15862] lock(&nr_node->node_lock); [ 266.270746][T15862] lock(nr_neigh_list_lock); [ 266.275404][T15862] [ 266.275404][T15862] *** DEADLOCK *** [ 266.275404][T15862] [ 266.283521][T15862] 1 lock held by syz.1.2852/15862: [ 266.288607][T15862] #0: ffff88814d5bbc70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 266.298327][T15862] [ 266.298327][T15862] stack backtrace: [ 266.304398][T15862] CPU: 0 UID: 0 PID: 15862 Comm: syz.1.2852 Not tainted syzkaller #0 PREEMPT(full) [ 266.304414][T15862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.304426][T15862] Call Trace: [ 266.304434][T15862] [ 266.304440][T15862] dump_stack_lvl+0x189/0x250 [ 266.304458][T15862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.304470][T15862] ? __pfx__printk+0x10/0x10 [ 266.304479][T15862] ? stack_trace_save+0x9c/0xe0 [ 266.304494][T15862] print_circular_bug+0x2ee/0x310 [ 266.304508][T15862] check_noncircular+0x134/0x160 [ 266.304520][T15862] validate_chain+0xb9b/0x2140 [ 266.304537][T15862] __lock_acquire+0xab9/0xd20 [ 266.304547][T15862] ? nr_remove_neigh+0x25/0xe0 [ 266.304562][T15862] lock_acquire+0x120/0x360 [ 266.304570][T15862] ? nr_remove_neigh+0x25/0xe0 [ 266.304584][T15862] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 266.304596][T15862] ? nr_remove_neigh+0x25/0xe0 [ 266.304607][T15862] _raw_spin_lock_bh+0x36/0x50 [ 266.304620][T15862] ? nr_remove_neigh+0x25/0xe0 [ 266.304631][T15862] nr_remove_neigh+0x25/0xe0 [ 266.304644][T15862] nr_add_node+0x1d9f/0x2570 [ 266.304656][T15862] ? __asan_memcpy+0x40/0x70 [ 266.304669][T15862] ? nr_call_to_digi+0x126/0x1b0 [ 266.304681][T15862] nr_rt_ioctl+0xc12/0xd50 [ 266.304695][T15862] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 266.304705][T15862] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.304720][T15862] ? apparmor_capable+0x137/0x1b0 [ 266.304733][T15862] ? capable+0x89/0xe0 [ 266.304743][T15862] ? nr_ioctl+0x1b1/0x3b0 [ 266.304753][T15862] sock_do_ioctl+0xdc/0x300 [ 266.304767][T15862] ? __pfx_sock_do_ioctl+0x10/0x10 [ 266.304782][T15862] sock_ioctl+0x576/0x790 [ 266.304794][T15862] ? __pfx_sock_ioctl+0x10/0x10 [ 266.304806][T15862] ? __fget_files+0x3a0/0x420 [ 266.304815][T15862] ? __fget_files+0x2a/0x420 [ 266.304824][T15862] ? bpf_lsm_file_ioctl+0x9/0x20 [ 266.304835][T15862] ? __pfx_sock_ioctl+0x10/0x10 [ 266.304846][T15862] __se_sys_ioctl+0xfc/0x170 [ 266.304859][T15862] do_syscall_64+0xfa/0xfa0 [ 266.304872][T15862] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.304884][T15862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.304894][T15862] ? clear_bhb_loop+0x60/0xb0 [ 266.304904][T15862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.304914][T15862] RIP: 0033:0x7fc22418f6c9 [ 266.304931][T15862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.304940][T15862] RSP: 002b:00007fc224fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.304951][T15862] RAX: ffffffffffffffda RBX: 00007fc2243e6090 RCX: 00007fc22418f6c9 [ 266.304959][T15862] RDX: 00002000000001c0 RSI: 000000000000890b RDI: 000000000000000d [ 266.304965][T15862] RBP: 00007fc224211f91 R08: 0000000000000000 R09: 0000000000000000 [ 266.304971][T15862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.304977][T15862] R13: 00007fc2243e6128 R14: 00007fc2243e6090 R15: 00007ffd8b4ea188 [ 266.304988][T15862]