last executing test programs: 2.094803252s ago: executing program 0 (id=5591): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x2}}, 0xb8}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0xd6, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) 1.963229093s ago: executing program 0 (id=5594): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f00000001c0)=""/17, 0x31}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x2}], 0x24, 0x2000, &(0x7f0000000300)={0x77359400}) socket$kcm(0x29, 0x7, 0x0) 1.803246064s ago: executing program 0 (id=5598): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_address={0x0, 0x5, 0x32, 0x20, 0x0, @in6={0xa, 0x4e23, 0xa, @remote, 0x2901559c}}, @sadb_sa={0x0, 0x1, 0x4d6, 0x4, 0x9, 0x51, 0x0, 0x40000001}, @sadb_ident={0x0, 0xb, 0x75c, 0x0, 0x7}]}, 0x11}}, 0x20000084) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) pipe(&(0x7f00000001c0)) r2 = socket(0x14, 0x3, 0x2000004) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2004c8a1}, 0x8000) 1.618593654s ago: executing program 1 (id=5600): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x111, 0x4, 0x3a0, 0x0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg1\x00', 'lo\x00', {}, {}, 0x0, 0x158}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x0, 0x400}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x5c, 0x0, 0x4, 0x0, 0x2, 0x58, 0x7}}}}}]}, 0x44}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000000)=0x40, &(0x7f0000000040)=0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xf, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f00000001c0)=0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4014) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="ffff7fffffaaaaaaaaaabb88ff"], 0x12) accept$netrom(r3, 0x0, &(0x7f0000000080)) 1.430258405s ago: executing program 4 (id=5602): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x200, 0x70bd26, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x7}, 0x1, 0x0, 0x0, 0x800}, 0x20890) 1.353027233s ago: executing program 1 (id=5605): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) (async) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000000)="b892d60d79265b0555f218d2", 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.265562693s ago: executing program 4 (id=5606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x1086, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff}) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002bbd7000fcdbdf25010000000000000008410000001400180034cc408a5653e9b0f3580a6bea60ec0000037564703a73797a3200000000eb186600000000000000f88b80eeb07a7f36530efffc4143380fd9fd5240db7e901ae6de17d708a92ef47c749357a20a84"], 0x30}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0xfff1}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x9, 0x21, 0x5, 0x8, 0x1, 0x5, 0x1, 0x0, [{0x8, 0x1, 0x5, 0xa}, {0x8, 0x7, 0x1, 0x3}, {0x4, 0x9105, 0x1, 0x7fffffff}, {0xffff, 0x8, 0x80000001, 0x6}, {0x0, 0x6838, 0x3ff, 0x9}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008044) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x1, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40888d0}, 0x40a4) 1.260393463s ago: executing program 1 (id=5607): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket(0xf, 0x3, 0x2) (async) r2 = socket(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="020b000400f3ffffff00000000bcc6000000"], 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt(r0, 0x3, 0xfffffff9, &(0x7f0000000680)=""/134, &(0x7f0000000740)=0x86) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd70000400000005000000080009000200000008000c00a50a000008000b00000000000600010007dc"], 0x40}}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000090000003c000380080001"], 0x50}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}}, 0x800, 0x1000, 0x7, 0x6, 0xc6, 0x200, 0x2}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}}, 0x800, 0x1000, 0x7, 0x6, 0xc6, 0x200, 0x2}, 0x9c) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000080)={'ip6gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffff824}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="34001f9ab4e6315c85238e5a6397b600000007010800000000000000000200000008000540000000020c00f5c5cb6e0000000000081600034000000e3f3777fbad74852615597c810fc245f19e25877053098587132a2c23"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000000000700000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000000000700000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.058404473s ago: executing program 4 (id=5611): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 1.005938473s ago: executing program 1 (id=5612): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004f00010000000000000000080001"], 0x1c}}, 0x0) (async) r2 = socket(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, 0x0, &(0x7f0000000280)) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (rerun: 32) 999.856766ms ago: executing program 3 (id=5613): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000680)={{0x0, 0x6, 0x9, 0x3ff, 0x4ec3, 0x7, 0xffffffffffffff7f, 0xc, 0x6, 0x2, 0x10000, 0x2, 0x6de, 0x6, 0x80}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001680)={r1, 0xffffffffffff20ed}) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) (async) r2 = socket$nl_generic(0x11, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000000b0102000000000000000003000001080002400000000208000340000001000f0001007368"], 0x34}, 0x1, 0x0, 0x0, 0x14001}, 0x41840) (async) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) r4 = socket(0x11, 0xa, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x8400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 859.214788ms ago: executing program 2 (id=5615): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x80000000, r0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 781.828395ms ago: executing program 3 (id=5616): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e30000000080001"], 0x40}}, 0x8084) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'pim6reg\x00', {0x2, 0x4e22, @private=0xa010102}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0xc7, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) 781.165614ms ago: executing program 4 (id=5617): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='(*}#\x9f*:\\\x00', 0x400800, &(0x7f00000000c0)={@_ha_fsid={[0x7, 0x7]}, {0x45cd, 0x2, 0x7fff, 0x9}}, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x5}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r3, 0x9, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008800}, 0x4004) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0xfffffe01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c000100000000000000000014000300208673eb37cbf1fc71479ac99be4ba2b43ea81f9a6989822a41c03a2372fbcca430395ef6adf130e2a81de860bd965bd8b88fbbec6930d337c4627b994f6c8435142135bccf198b7001e391422c68497ee61601f7fd98632f16dd6f19e524d0329b5ceaa1e277030f2b2a69a903f82ad1641"], 0x114}], 0x1}, 0x800) 771.528053ms ago: executing program 1 (id=5618): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x100, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 714.552275ms ago: executing program 4 (id=5619): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x140b, 0x10, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = socket(0x26, 0x5, 0x80000000) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000001c0)=0x2, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000890}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xeadbf1dc02527f54}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r3, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x58}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x200000, {0x7373, 0x5, 0x5, 0x2}}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x44044) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000004c0)={0x0, 0xd78}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000540)={r5, 0x10}, 0x8) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000580)={0x3, 0x0, 0x9}) r6 = accept4(r2, &(0x7f00000005c0)=@isdn, &(0x7f0000000640)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000680), &(0x7f00000006c0)=0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r6) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendfile(r0, r7, 0x0, 0x98) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000740)={r5, 0x7, 0x0, 0xb2d6, 0x5}, &(0x7f0000000780)=0x18) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000007c0)={r9, 0x6, 0x1, [0x3]}, 0xa) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'gretap0\x00', 0x0, 0x1, 0x1, 0x1, 0xbad, {{0x14, 0x4, 0x1, 0x3d, 0x50, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x14, 0x61, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0xc53a}, {@private=0xa010101, 0x4}]}, @generic={0x89, 0x6, "2c744fd2"}, @timestamp={0x44, 0x18, 0xdf, 0x0, 0xe, [0x2, 0x3, 0x0, 0x0, 0x4]}, @generic={0x89, 0x9, "5deb822e236c75"}]}}}}}) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r11, 0x84, 0x1b, &(0x7f00000008c0)={r5, 0xab, "e185b9abddf9f4ce2e85f3047111297769d47a41afb25cdbc27e059ded04a264fe8cd96b7674abc9d11ec8b38789289a01b175cf04eb174c3e6bb1303d3e9a96a59538d9eb9284c8e4bb9f69b9290bf42b667c813a6a9a07a8b69c7f4fb2f160af80cd58969a04489b593fa5e3d48776d33cd43aa9f2a559f889153242d07817ca52195f1459e4abbb9962e1c93ac2363496d096f006e0475b861af1d30b4c8f462f5ee32e243ec3509d7c"}, &(0x7f0000000980)=0xb3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@fallback=r7, 0x26, 0x1, 0xc, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$SIOCGSKNS(r12, 0x894c, &(0x7f0000000b00)={'rose0\x00', 0x400}) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000e00)={&(0x7f0000000b40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x1c8, r13, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x95b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6609}]}, @TIPC_NLA_BEARER={0x188, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @private2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4008000}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r12, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xb0, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x81}, 0x4000) 605.085062ms ago: executing program 3 (id=5620): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000b40)={'filter\x00', 0x0, [0x0, 0x5, 0x4, 0xe, 0x4]}, &(0x7f0000000bc0)=0x54) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="1e000000000000001f0000000000000005100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000008000"/28], 0x48) sendfile(r5, r5, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000008c0)={'lo\x00', &(0x7f0000000840)=@ethtool_coalesce={0xe, 0x200, 0xd98, 0x2, 0x6b, 0x8, 0x7, 0x9, 0xfffffff7, 0x27b, 0x6, 0x4, 0x10000, 0xa8, 0x6, 0x0, 0x0, 0x25c541ab, 0xfffffff2, 0x4, 0x7, 0x25c4, 0xfffffc00}}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x5cf9eb400b93fc4a}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x74e}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x400, 0xe9, &(0x7f0000000100)=""/233, 0x40f00, 0x16, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xa, 0x8, 0x6}, 0x10, 0x2a517, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x2, 0x3, 0x10, 0x1}, {0x4, 0x5, 0x10, 0xa}, {0x3, 0x4, 0xc, 0x9}, {0x1, 0x4, 0xd, 0xc}, {0x5, 0x4, 0xc, 0x7}, {0x5, 0x5, 0x1, 0xa}, {0x1, 0x1, 0x6}, {0x1, 0x3, 0x6, 0x3}], 0x10, 0xfffff800}, 0x94) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x1d0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x104, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x386}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x366}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4106a03}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x171}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x81}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xbdc}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}]]}, 0x104}}, 0x80) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 604.612295ms ago: executing program 1 (id=5621): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "1eedc78106a0e743", "eba9f36855546014e24d7e30b50b3fde57008c99592d00", "8e8ec580", "3c3c23fff2050cf6"}, 0x38) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x8, 0x12, &(0x7f00000002c0)="ab36b219359e303d", &(0x7f0000000440)=""/18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000040)) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8cf89, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x84, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000000114000425bd7001fddbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x0) recvmsg(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003a40)=@newtaction={0x14, 0x30, 0x300, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x81) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000400)=0x10001, 0x4) recvmmsg$unix(r8, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4086, 0xff6}], 0x1}}], 0x1, 0x10000, 0x0) accept$nfc_llcp(r8, &(0x7f0000000200), &(0x7f00000003c0)=0x60) 602.885433ms ago: executing program 0 (id=5622): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0207000004002000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) r4 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x0, 0x3}, {0xfff1, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}, {0x9, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) clock_gettime(0xffefff1f, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000000)='\x00', 0x80, &(0x7f0000000040)={@align=0x10001, {0x9fab, 0x2, 0xb5, 0x400}}, 0x1, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x9}) (async, rerun: 32) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) (rerun: 32) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000004c0)={{r0, &(0x7f0000000200)='\xeb\x00', 0x200040, &(0x7f0000000240)={@align=0x5, {0x5, 0x7, 0x5, 0xe031}}, 0x0, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x7fffffff}, {[0xfffffffc, 0x8, 0x800, 0x1]}, 0x1, 0xea, &(0x7f00000003c0)=""/234}) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0], 0x0, 0x75, &(0x7f00000009c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x1e5, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000001200)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x198, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbb77}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf887}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfee}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x93}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc74b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb084}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2c, r10, 0x1, 0x70bc2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x51}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x806) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r13, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e40)={{r8, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000540)='%pI4 \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f80)={r14, &(0x7f0000000e80)="d39aff17b0805fd47e32d168643a4e2212ff4e7b0c4a67f380f3345eeaf3426526e031a08ff34d0635a85da39520834a9582378ca777431058569be1b73dd2c6bdb744d508d5829e26edbc49dfad9b279c0efd7b2fd8958ea1e02a6aeb31c031d9a358cabf3756522cdb6a81e475dd194725ab954ab64e2b65da21de27cc730c31dc42b871de2601f098a2065563541fcd5001e6cd07bc996ad295449f1c9f825e084f0812912b00ecd254f1fd67dfb305", &(0x7f0000000f40)=""/6, 0x4}, 0x20) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1e00000003000000000000004289000000000400", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000010000000800"/28], 0x50) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={r0}, 0x4) 562.388795ms ago: executing program 4 (id=5623): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000001e00)={{r2}, "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"}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000240)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 524.977237ms ago: executing program 2 (id=5624): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a3200000000140004800800024000000000080001"], 0x110}}, 0x40040) syz_emit_ethernet(0x9e, &(0x7f0000000380)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x1d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0xffff, @multicast2, @empty, {[@generic={0x89, 0x4, "e2d9"}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev, 0x1}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x40, 0x0}}, {@dev}]}, @timestamp={0x44, 0x14, 0x53, 0x0, 0x0, [0xc, 0x6, 0x3, 0x8]}, @generic={0x86, 0x9, "657f154cda4588"}]}}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 345.138718ms ago: executing program 2 (id=5625): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x3, 0x1, 0x0, 0x5, 0x1, 0x98, [{0x5, 0x3}]}]}, {0x0, [0x30, 0x30, 0x61, 0x30, 0x2e]}}, 0x0, 0x37, 0x0, 0x8, 0xbf81}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000080)=r0}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3991}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r10, 0x4) close(r10) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}], 0x2}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d00)="dfbbc728e801c3cc0a54630dbe1c8a0904960f98e68961cb6b9a3c32d4d2d7c476819f9b9b815eba43e318e6fa807ad1a3f048a7239c74e33cd51492f1290fefa777dfbebb9b26869ad32f104fc4b857ed0607a28b6672c259d39ca73d5b8c419244182b4322f786812dd2d73c48b2b6a0faa0b5f477c9f6b31ca470b16273d1b54357635bd527c7c8b4577d330a1b2e4d55749e1ff2f97636231f038eb88fc3de9648d5fb8a9b98cd46aeb44740f65e408a7d23f36f2e7ddd1d22f4f77defbff9ac6690d5bb19154f2eae60dcf3fa023284a5271014edf23bc02d0315f4bc372ed26345ad432f4365", 0xe9}, {&(0x7f0000000280)="39d8cd36ba397f9731acb2f36b8f29", 0xf}, {&(0x7f0000000e00)="5a4ce644230e1c53939feb4bd877536a852a278f35c5724cfb6752df1b96d04654f267dc103459187c8a0bd6f6226020d75760558d290c4336ddeae48fee6cb6e6d3f33aac887bf581eaf6ecc026240f512a5cd8eb7e04a6d02b080b88064aaac4e562bf670731d60806c3ddb013cbb84795760e36eabd57e5c4379933ba34d67bf7900a0c9fd444a6ff0402837fa0f885a66f38a236119ac1c1c6df", 0x9c}, {&(0x7f0000000840)="05ce83d64cf8bec0aed03484cd410c5fae8dcc8a7366681fdd56", 0x1a}, {&(0x7f0000000ec0)="4e044cf84412afd3f21fe2687827fc567e4759045b717532d8f7a4608a08e2d16a20dc03aee67db2380c870f2cdf9e6058fad01540ef02463f6ed77a5d45b37b15dfd9965ee88ca8e2d6d47758ba0463357a5d562258db1c529c06b21cff8c8a19ffa1029f94fea4e0d628073c435df4b21a6394551dcac3007945c91bcf300b08dcdd430320d25e1ec7f88a4f71ec7c15f83c6e66e12ce8e84568a6ac468d6403aa8910f830e62400d37fc872da806b194723d5b4c87b72574e9092a174a0000f85e6a27dbe1616aad16b", 0xcb}, {&(0x7f0000000fc0)="a84f802e3baea81fe8d8b22f3c4828e3d4199474a8b0e72c1e4ff65dd137215b95f6f002da", 0x25}, {&(0x7f0000002d00)="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", 0xd63}], 0x7}, 0x0) 325.454342ms ago: executing program 3 (id=5626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2e4, &(0x7f0000001e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0e653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, [{0x4, 0x20, "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"}]}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) listen(r2, 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x20}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000c00}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x14, r8, 0x603}, 0x14}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{r0, &(0x7f0000000080)='wlan1\x00', 0x240200, &(0x7f0000000100)={@align=0x5, {0x8, 0x6, 0xa62a, 0xfff}}, 0x0, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4}, {[0xc0000, 0x3]}, 0x1, 0x9, &(0x7f00000001c0)=""/9}) 258.90001ms ago: executing program 2 (id=5627): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0xa, [@const={0x2, 0x0, 0x0, 0xa, 0x4}, @struct={0x3, 0x4, 0x0, 0x4, 0x0, 0x57e4, [{0x3, 0x3, 0x4}, {0xc, 0x1, 0x7fffffff}, {0x9, 0x3, 0x9}, {0x3, 0x1}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @restrict={0x6, 0x0, 0x0, 0xb, 0x4}, @struct={0x9, 0x4, 0x0, 0x4, 0x1, 0x9, [{0xa, 0x0, 0xfffffff7}, {0x8, 0x5, 0x5}, {0x7, 0x1}, {0xa, 0x2, 0x9}]}]}, {0x0, [0x6f, 0x2e, 0x4f, 0x30, 0x61, 0x61, 0x61, 0x0]}}, &(0x7f00000001c0)=""/62, 0xbe, 0x3e, 0x1, 0xe133, 0x10000}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0xa, [@const={0x2, 0x0, 0x0, 0xa, 0x4}, @struct={0x3, 0x4, 0x0, 0x4, 0x0, 0x57e4, [{0x3, 0x3, 0x4}, {0xc, 0x1, 0x7fffffff}, {0x9, 0x3, 0x9}, {0x3, 0x1}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @restrict={0x6, 0x0, 0x0, 0xb, 0x4}, @struct={0x9, 0x4, 0x0, 0x4, 0x1, 0x9, [{0xa, 0x0, 0xfffffff7}, {0x8, 0x5, 0x5}, {0x7, 0x1}, {0xa, 0x2, 0x9}]}]}, {0x0, [0x6f, 0x2e, 0x4f, 0x30, 0x61, 0x61, 0x61, 0x0]}}, &(0x7f00000001c0)=""/62, 0xbe, 0x3e, 0x1, 0xe133, 0x10000}, 0x28) 209.835618ms ago: executing program 0 (id=5628): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {0x0, 0x0, 0x0, 0xd}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x140}}, 0x0) 200.704108ms ago: executing program 3 (id=5629): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0xf}, @typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$sock(r0, &(0x7f0000000840)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x80, &(0x7f0000000780)=[{&(0x7f00000000c0)="4372cf30d8a3cb4f790239367cd3f7f45d1d21e6fb4013f42ef2b00e2ecda876031bff8fcf6e73dee057160873720ab058c07333a8e27183bbd79626b4b80fee0a8febaa7ba69c1b623a7ea25e2f290d0f566056b56265927a50d42614957c2e12d4204a38547cb33fec88ff37a291d69b9cef7721153b1ca33fd5827eabcd1d19defe650607d39177ee10442a97f13ce982219cc76037a54403867783c2dd752f89a020efa7c529e5dc8c9da134761db2632d917e3bc2d6afc057f6c0e49c848c89dcc1178899a18ea40963e9e991f560a43a3e425058b34584b425f44aa4c75f17deb7cdb0f242", 0xe8}, {&(0x7f0000000200)}, {&(0x7f0000000380)="9c96327ce8a1a145d92bc8f68e3c9d22ca8defdacd65e182bf1f560d136ed2fbad56494c0ed0f3d145b18d83d8a967c83a3d44bf8b032f6fb8e28f27d50cc0ed4f82415625a30050fa3683f396cf84f70c619278e31cf4aa9a84c564addfe60934f3ca091712c5267c9d980053c64689ce5f15c11f96e2738c78963f600a6fd5d6c148d0b86200072c16209e1ba6779919edd08be0808da317b96e38c9bb921da41f815b48bb46ed6eebf14760cd9db769d9bd5e68541b0b257385de0a1d7db9f9e604bea790f7ae846523e35f5421d0608c069956a1f5efc3e4eb5b84f3913843e126ca390b", 0xe6}, {&(0x7f0000000480)="2ff2e2483facf4e0", 0x8}, {&(0x7f00000004c0)="300cd54effa2f1d5d1be17b708b79cb89d26f7e9c2dea351c4139189e99c8f7a47d9c5733acd6f8d0e56efbe30ccd805f52d46a805ab6a526ce9d4522b86a0ebc99cbfc0a428c6", 0x47}, {&(0x7f0000000540)="c71b1e4f79a039f730c4563c5c5256fbb7558b4911ad01d1718fa529e9c033133751f505663b3bfd87529eaad0ae629f8dc2f277669a39efb59176f6a0d236d09a3d7d2c7d37a71ad7f568bb6a474e8ed8174bdadd476088d174e50c6d36a68e18824971ad44bf8862ff27d390045f7d74a20caeaf6c06c461e209d12570eabefdc7c4782f1eb51eb7819da0c35a051fb3f9e80bbb2509e0e47362c351abe397f7b2a6fb28f51177b6300b6724c1de029f5e555dbf25304012ab497f1e032672d79e30ca7632e3f76c0df343a5774d5481f42d37403cd98ccdbd13a8ba2fef664708a69bffbd0cc614874aea8d", 0xed}, {&(0x7f0000000640)="3b8c43bc55b4c70cb6e049944f73b655d265488b2adb2a0cec1774e9ac7ad07d386be27e66575806a72306fdbf6f6ec9e253ecbdc6fa4fa2164bbb6e1f77fdd13602dee4e033a01c7f4772f5b7e31d359a3b183bc4756a2dc1fa420479787b9e99d57bc2eb093ad68a8fd7f7e240530e7c279a8d3103eb60d9cbaa690004062b8625e4dcea9161b433fc84ec383ee44587a895d7b8c67ecbeade7fa2d179363048cc27da394fb4979244f933df246474f48abb30dc74880ae7118a82626c515a30109f778709759f1bceea7aa0ed", 0xce}, {&(0x7f0000000740)="437ed6b808e0762e80963bc77fd1c4294077ed29df86ff0292807821b095ca0d", 0x20}], 0x8, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}, 0x4004010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf25030000000800010000000000400007800c0001"], 0x5c}, 0x1, 0x0, 0x0, 0x4050}, 0x100) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) (async) r12 = socket(0xa, 0x1, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2b, 0x2ddfdbfb, {0x2, 0x0, 0x0, r14, 0x40, 0x20, 0xa}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000a40)={@remote, @rand_addr, 0x0}, &(0x7f0000000a80)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000b40)={'gretap0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x80, 0x33, {{0xd, 0x4, 0x3, 0x38, 0x34, 0x64, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@cipso={0x86, 0x17, 0x1, [{0x7, 0x3, "04"}, {0x5, 0xe, "b70f839c9960d29829a1207d"}]}, @rr={0x7, 0x7, 0xab, [@private=0xa010102]}, @noop]}}}}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000bc0)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000e80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="68010000", @ANYRES16=r8, @ANYBLOB="000127bd7000fbdbdf25090000003000018008000100", @ANYRES32=r11, @ANYBLOB="1400020070696d726567000000000000000000000800030003000000080003000300000074000180140002006e72300000000000000000000000000014000200626f6e6430000000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="080003000100000008000300020000001400020070696d72656730000000000000000000080003000300000014000200766972745f7769666930000000000000180001801400020076657468305f746f5f7465616d0000001400018008000100", @ANYRES32=r15, @ANYBLOB="0d110500", @ANYRES32=r16, @ANYBLOB="54000180080003000100000008000300010000001400020070696d367265673000000000000000001400020073797a6b616c6c6572300000000000000800030002000000080003000000000008000100", @ANYRES32=r17, @ANYBLOB="300001800800030001000000080003000200000008000300000000001400020069703665727370616e30000000000000"], 0x168}}, 0x20000090) (async) r18 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c00)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r18, @ANYBLOB="01002dbd7000fddbdf251800000024003080200001800800010000000000140003800600010002000000080002000200000008000300", @ANYRES32=r19, @ANYBLOB="23867f56cf2d7fe6029fad0d73c40e1bfa76acb8c839600101fe16f4985a06a500cbdbb522648ee4"], 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000940)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40800004}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040026bd7000fbdbdf25160000000c00060000000000000000000c000600020000000200000008000300", @ANYRES32=r4, @ANYBLOB="02000300", @ANYRES32=r5, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=r19, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40080) 168.400252ms ago: executing program 2 (id=5630): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0xb99e618519615ef, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x88) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="3cffffffffffffffff01080000000000"], 0x10) (async, rerun: 64) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2) (async, rerun: 64) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0xea60}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 118.90599ms ago: executing program 0 (id=5631): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001000000005f5d000000000000000000"], 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33, 0xee, 0x9, 0xac5b, 0x80000001, 0xa5ca, 0xdb3, 0x3, 0x7}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x4, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x4, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r8, @ANYBLOB="18001d801400008005000a00010000000600050059000000"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r11, 0x0) r12 = socket$netlink(0x10, 0x3, 0x8000000004) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r13, 0x0) (async) listen(r13, 0x0) connect$phonet_pipe(r13, &(0x7f00000000c0)={0x23, 0x6, 0x2d, 0xff}, 0x10) writev(r12, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0xfffffffffffffe19}], 0x1) write$cgroup_subtree(r10, 0x0, 0xfe33) (async) write$cgroup_subtree(r10, 0x0, 0xfe33) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r12, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r14, 0x800, 0x5, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfffff4a9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x5ef44fc4910cd250}, 0x800) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r12, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r14, 0x800, 0x5, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfffff4a9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x5ef44fc4910cd250}, 0x800) 33.699635ms ago: executing program 3 (id=5632): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5c}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = accept(r0, &(0x7f0000000480)=@sco={0x1f, @fixed}, &(0x7f0000000500)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="010000000200000008200010067b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)=ANY=[@ANYBLOB="00eaff00", @ANYRES16=r6, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r1, 0x331, 0x1d, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRES16], 0x20}}, 0x24040001) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r9, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073017f000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet6(r9, &(0x7f0000000580)="22df7da1e4e269e283e821cd23bc139c77e3e72fddc47b7db7ac04351e0d3953b2c172dc00272cfb2be16f5d718312f7687ac452f6d4a75f09e55b0356008f9509a20eecfad8d4158c7f49310cbf7c568b6328db0e184bf32929d7d2411a67c56b2d0df0c836b487749ba9d78c9da195fb2871330bbaa2f0f5586c5dc11fc8388446e034cc46c2cc4d33ac2d2310f807664997bcdfeb7264b1d577", 0x9b, 0x84, &(0x7f0000000780)={0xa, 0x4e23, 0x80, @private0, 0x6}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b80)={0x4c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000840)=""/8, &(0x7f0000000880)=0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'macvtap0\x00', 0x0}) r11 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r11, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) unshare(0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r11, 0x29, 0x2a, &(0x7f0000000040)={0x5, {{0xa, 0x4e21, 0x4042, @mcast1, 0x6}}}, 0x88) setsockopt$inet6_group_source_req(r11, 0x29, 0x2c, &(0x7f0000000c00)={0x1, {{0xa, 0x4e20, 0x3, @mcast1, 0x80}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x127) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r10], 0x68}}, 0x0) 0s ago: executing program 2 (id=5633): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0xfffffffe}}, 0x10) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x450, 0x450, 0x0, 0x290, 0x360, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) (async) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x6}, {0x5, 0x3}}}, 0x24}, 0x1, 0x40030000000000}, 0x4000810) r5 = accept(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000100)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x1c}, @dev={0xfe, 0x80, '\x00', 0x2b}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x7, 0x7, 0x200, 0x8f7, 0x9000c, r6}) kernel console output (not intermixed with test programs): 99][T18246] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.546541][T18246] bond0: (slave bond_slave_0): Releasing backup interface [ 388.572538][T18246] bond0: (slave bond_slave_1): Releasing backup interface [ 388.603498][T18246] team0: Port device team_slave_0 removed [ 388.636854][T18246] team0: Port device team_slave_1 removed [ 388.651169][T18246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.661260][T18246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.671668][T18246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.680123][T18246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.002700][T18267] syzkaller0: entered allmulticast mode [ 389.030169][T18267] syzkaller0 (unregistering): left allmulticast mode [ 389.085220][T18275] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 389.109687][T18278] validate_nla: 42 callbacks suppressed [ 389.109706][T18278] netlink: 'syz.3.3354': attribute type 7 has an invalid length. [ 389.241377][T18285] netlink: 'syz.3.3357': attribute type 2 has an invalid length. [ 389.325860][T18289] netlink: 'syz.4.3359': attribute type 1 has an invalid length. [ 389.334027][T18289] __nla_validate_parse: 14 callbacks suppressed [ 389.334045][T18289] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3359'. [ 389.479184][T18295] lo speed is unknown, defaulting to 1000 [ 389.487281][T18290] netlink: 'syz.2.3358': attribute type 1 has an invalid length. [ 389.696285][T18307] netlink: 'syz.3.3363': attribute type 62 has an invalid length. [ 389.873682][T18315] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3365'. [ 389.944326][T18317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3366'. [ 390.121510][T18328] wg1: entered promiscuous mode [ 390.127698][T18328] wg1: entered allmulticast mode [ 390.435619][T18350] netlink: 'syz.0.3377': attribute type 10 has an invalid length. [ 390.505550][T18354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3377'. [ 390.585295][T18331] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 390.594077][T18331] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 390.685518][T18350] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 390.713248][T18365] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3380'. [ 390.772282][T16504] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.793651][T16504] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.817893][T18369] netlink: 'syz.0.3381': attribute type 21 has an invalid length. [ 390.868625][T18369] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3381'. [ 390.922530][T18369] netlink: 'syz.0.3381': attribute type 21 has an invalid length. [ 390.930533][T18369] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3381'. [ 390.988126][T16504] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.997190][T16504] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.006457][T16504] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.063181][T16504] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.078039][T16504] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.108501][T16504] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.194222][T18379] netlink: 'syz.1.3384': attribute type 10 has an invalid length. [ 391.253655][T18383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3386'. [ 391.296465][T18383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3386'. [ 391.351231][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3388'. [ 391.592801][T18409] syzkaller0: Caught tx_queue_len zero misconfig [ 391.687588][T18418] gtp0: entered promiscuous mode [ 391.697360][T18418] gtp0: entered allmulticast mode [ 391.936214][T18434] Bluetooth: MGMT ver 1.23 [ 391.966665][T18441] netlink: 'syz.1.3401': attribute type 1 has an invalid length. [ 392.035136][T18441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.108916][T18448] bond1: (slave ip6erspan0): making interface the new active one [ 392.118638][T18448] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 392.398907][T18464] xt_hashlimit: invalid interval [ 392.448081][ T1320] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.457166][ T1320] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.470237][ T1320] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.537351][ T1320] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.577402][T18472] syzkaller1: entered promiscuous mode [ 392.598187][T18472] syzkaller1: entered allmulticast mode [ 392.920054][T18496] syz.4.3417 (18496) used obsolete PPPIOCDETACH ioctl [ 393.474166][T18527] lo: entered promiscuous mode [ 393.479202][T18527] net_ratelimit: 39 callbacks suppressed [ 393.479220][T18527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.856830][T18541] syzkaller0: entered promiscuous mode [ 393.865472][T18541] syzkaller0: entered allmulticast mode [ 394.214355][T18567] bond0: entered promiscuous mode [ 394.219587][T18567] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 394.229353][T18567] gretap0: entered promiscuous mode [ 394.238971][T18567] debugfs: 'hsr1' already exists in 'hsr' [ 394.253777][T18567] Cannot create hsr debugfs directory [ 394.263139][T18572] No such timeout policy "syz0" [ 394.276614][T18567] hsr1: entered promiscuous mode [ 394.650967][T18597] __nla_validate_parse: 12 callbacks suppressed [ 394.650989][T18597] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3448'. [ 394.679257][T18596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3449'. [ 394.776294][T18590] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.418572][T18637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3461'. [ 395.581180][T18644] lo speed is unknown, defaulting to 1000 [ 395.868390][T18661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3469'. [ 396.190862][T18675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3474'. [ 396.222703][T18679] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 397.084381][T18715] validate_nla: 5 callbacks suppressed [ 397.084398][T18715] netlink: 'syz.1.3485': attribute type 1 has an invalid length. [ 397.117875][T18715] 8021q: adding VLAN 0 to HW filter on device bond2 [ 397.130666][T18715] netlink: 'syz.1.3485': attribute type 1 has an invalid length. [ 399.392961][T18688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.583443][T18723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.598584][T18725] x_tables: unsorted entry at hook 2 [ 399.627169][T18725] dvmrp1: entered allmulticast mode [ 399.644167][T18732] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 399.784627][T18737] ip_vti0: entered promiscuous mode [ 399.796322][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3491'. [ 399.879630][T18749] syzkaller0: entered promiscuous mode [ 399.885965][T18749] syzkaller0: entered allmulticast mode [ 399.894944][T18742] netlink: 'syz.0.3493': attribute type 1 has an invalid length. [ 399.922561][T18749] netlink: 'syz.0.3493': attribute type 1 has an invalid length. [ 400.067385][T18755] atomic_op ffff88806ca56198 conn xmit_atomic 0000000000000000 [ 400.253474][T18767] netlink: 'syz.1.3497': attribute type 29 has an invalid length. [ 400.348810][T18769] netlink: 'syz.1.3497': attribute type 29 has an invalid length. [ 400.372498][T18769] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3497'. [ 400.394856][T18777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3501'. [ 400.409829][T18777] 8021q: VLANs not supported on gre0 [ 400.495282][T18773] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 400.675592][T18792] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3505'. [ 400.695549][T18783] syzkaller0: entered promiscuous mode [ 401.043229][T18802] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 401.051053][T18802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.180206][T18802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3508'. [ 402.859953][T18836] netlink: 'syz.0.3516': attribute type 3 has an invalid length. [ 402.903327][T18839] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3514'. [ 403.049459][T18850] xt_hashlimit: size too large, truncated to 1048576 [ 403.320157][T18862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3524'. [ 403.353255][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3524'. [ 403.397817][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3524'. [ 403.478837][T18867] netlink: 'syz.0.3523': attribute type 39 has an invalid length. [ 403.532002][T18876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3526'. [ 403.671183][T18883] x_tables: unsorted entry at hook 3 [ 403.720651][T18883] lo speed is unknown, defaulting to 1000 [ 403.776507][T18890] netlink: 'syz.2.3530': attribute type 30 has an invalid length. [ 403.837953][T16514] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.854092][T16514] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.888701][T16514] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.903086][T16514] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.251150][T18907] netlink: 'syz.0.3534': attribute type 6 has an invalid length. [ 404.355482][T18907] netlink: 'syz.0.3534': attribute type 6 has an invalid length. [ 404.368008][T18914] xt_l2tp: wrong L2TP version: 0 [ 404.580656][T18927] openvswitch: netlink: Unknown nsh attribute 0 [ 405.091397][T18948] syzkaller1: entered promiscuous mode [ 405.129600][T18948] syzkaller1: entered allmulticast mode [ 405.385289][T18972] __nla_validate_parse: 7 callbacks suppressed [ 405.385308][T18972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3555'. [ 405.466248][T18987] ieee802154 phy1 wpan1: encryption failed: -22 [ 405.605250][T18994] netlink: 'syz.0.3561': attribute type 10 has an invalid length. [ 405.703356][T18992] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3560'. [ 405.737311][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3562'. [ 405.765848][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3562'. [ 405.810993][T18999] syzkaller1: entered promiscuous mode [ 405.823872][T19002] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3563'. [ 405.837645][T18999] syzkaller1: entered allmulticast mode [ 405.851988][T18999] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3562'. [ 405.946538][T19010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3567'. [ 405.969879][T19010] netlink: 'syz.0.3567': attribute type 1 has an invalid length. [ 405.978328][T19010] netlink: 2096 bytes leftover after parsing attributes in process `syz.0.3567'. [ 405.988064][T19010] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3567'. [ 406.043906][T19002] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 406.057847][T19002] bond1 (unregistering): Released all slaves [ 406.160336][T19022] pim6reg527: entered allmulticast mode [ 406.225201][T19029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3571'. [ 406.256792][T19029] netlink: 'syz.0.3571': attribute type 3 has an invalid length. [ 406.568451][T19038] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 406.588170][T19038] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 406.705464][T19055] xt_nfacct: accounting object `syz1' does not exist [ 406.982461][T19066] virt_wifi0: entered allmulticast mode [ 407.163195][T19079] geneve2: entered promiscuous mode [ 407.168495][T19079] geneve2: entered allmulticast mode [ 407.200337][ T1320] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 407.219852][ T1320] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 407.265949][ T1320] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 407.305244][T16514] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 408.037465][T19133] netlink: 'syz.3.3601': attribute type 3 has an invalid length. [ 408.135148][T19148] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.594909][T19160] syzkaller0: entered promiscuous mode [ 408.606823][T19174] netlink: 'syz.1.3612': attribute type 21 has an invalid length. [ 408.632654][T19174] netlink: 'syz.1.3612': attribute type 1 has an invalid length. [ 408.930395][T19189] netlink: 'syz.3.3617': attribute type 7 has an invalid length. [ 409.051065][T19194] netlink: 'syz.0.3618': attribute type 9 has an invalid length. [ 409.059452][T19194] netlink: 'syz.0.3618': attribute type 11 has an invalid length. [ 409.069758][T19196] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 409.077759][T19194] netlink: 'syz.0.3618': attribute type 12 has an invalid length. [ 409.172010][T19203] netlink: 'syz.0.3621': attribute type 5 has an invalid length. [ 409.182941][T19204] netlink: 'syz.0.3621': attribute type 5 has an invalid length. [ 409.246370][T19206] IPVS: length: 239 != 24 [ 410.843754][T19228] __nla_validate_parse: 14 callbacks suppressed [ 410.843775][T19228] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3628'. [ 411.030580][T19240] netlink: 512 bytes leftover after parsing attributes in process `syz.2.3631'. [ 411.140487][T19246] xt_connbytes: Forcing CT accounting to be enabled [ 411.176609][T19250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3634'. [ 411.185927][T19246] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 411.253862][T19251] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3632'. [ 411.345888][T19254] bond1: entered promiscuous mode [ 411.503547][T19266] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 411.791315][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3647'. [ 411.817218][T19284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.091335][T19305] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 412.183559][T19317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3657'. [ 412.423238][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3662'. [ 412.468641][T19344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3665'. [ 412.709247][T19355] IPVS: set_ctl: invalid protocol: 22 172.30.0.4:20000 [ 412.747061][T19357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3669'. [ 412.971677][T19370] sctp: [Deprecated]: syz.3.3674 (pid 19370) Use of int in max_burst socket option deprecated. [ 412.971677][T19370] Use struct sctp_assoc_value instead [ 413.064980][T19376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3677'. [ 413.221512][T19391] netlink: 'syz.4.3681': attribute type 1 has an invalid length. [ 413.332771][T19393] sctp: [Deprecated]: syz.4.3681 (pid 19393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.332771][T19393] Use struct sctp_sack_info instead [ 415.507424][T19447] macvtap1: entered promiscuous mode [ 415.515787][T19447] macvtap1: entered allmulticast mode [ 415.521235][T19447] veth1_vlan: entered allmulticast mode [ 415.544127][T19454] macvtap2: entered promiscuous mode [ 415.551322][T19454] macvtap2: entered allmulticast mode [ 415.616925][T19460] syzkaller0: entered promiscuous mode [ 415.622743][T19460] syzkaller0: entered allmulticast mode [ 415.655113][T19460] tc action pedit offset must be on 32 bit boundaries [ 415.888004][ T51] block nbd1: Receive control failed (result -32) [ 415.916393][T19478] netlink: 'syz.0.3702': attribute type 1 has an invalid length. [ 415.948396][T19478] 8021q: adding VLAN 0 to HW filter on device bond3 [ 416.016012][T19478] bond3: (slave geneve2): making interface the new active one [ 416.053745][T19478] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 416.159271][T19495] netlink: 'syz.3.3707': attribute type 2 has an invalid length. [ 416.194929][T19495] __nla_validate_parse: 4 callbacks suppressed [ 416.194947][T19495] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3707'. [ 416.343247][T19502] netlink: 'syz.3.3710': attribute type 23 has an invalid length. [ 416.704989][T19524] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.3719'. [ 416.716315][T19524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3719'. [ 416.790645][T19526] sctp: [Deprecated]: syz.3.3720 (pid 19526) Use of int in maxseg socket option. [ 416.790645][T19526] Use struct sctp_assoc_value instead [ 416.807806][T19526] ipt_ECN: cannot use operation on non-tcp rule [ 416.920737][T19533] sctp: [Deprecated]: syz.3.3722 (pid 19533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.920737][T19533] Use struct sctp_sack_info instead [ 416.967290][T19536] netlink: 'syz.2.3723': attribute type 83 has an invalid length. [ 416.996135][T19537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3722'. [ 417.178724][T19546] x_tables: unsorted underflow at hook 2 [ 417.190696][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3728'. [ 417.274996][T19554] x_tables: duplicate underflow at hook 3 [ 417.304483][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3729'. [ 417.327494][T19554] syzkaller1: entered promiscuous mode [ 417.336925][T19554] syzkaller1: entered allmulticast mode [ 417.568874][T19568] netlink: 'syz.2.3734': attribute type 2 has an invalid length. [ 417.584528][T19568] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3734'. [ 417.893704][T19595] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3742'. [ 417.922426][T19595] netlink: 'syz.3.3742': attribute type 2 has an invalid length. [ 417.989577][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3743'. [ 418.003174][T19603] netlink: 'syz.0.3745': attribute type 1 has an invalid length. [ 418.070348][T19609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3747'. [ 418.317644][T19625] macvtap1: entered promiscuous mode [ 418.324787][T19625] macvtap1: entered allmulticast mode [ 418.330441][T19625] veth1_vlan: entered allmulticast mode [ 418.348549][T19628] xfrm1: entered promiscuous mode [ 418.394571][T19628] xfrm1: entered allmulticast mode [ 418.585752][T19631] syzkaller0: entered promiscuous mode [ 418.591403][T19631] syzkaller0: entered allmulticast mode [ 420.241903][T19654] ip6gre1: entered promiscuous mode [ 420.247423][T19654] ip6gre1: entered allmulticast mode [ 420.255908][T16504] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 420.264857][T16504] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 420.282487][T13641] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 420.609928][T19683] syzkaller0: entered promiscuous mode [ 420.617298][T19683] syzkaller0: entered allmulticast mode [ 420.682949][ T5902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 421.216280][T13641] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 421.635332][T19744] __nla_validate_parse: 8 callbacks suppressed [ 421.635354][T19744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3785'. [ 421.655578][T19744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3785'. [ 421.693892][T19752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3787'. [ 421.706794][T19752] netlink: 'syz.2.3787': attribute type 7 has an invalid length. [ 421.734442][T19753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3786'. [ 421.792037][T19745] netlink: 'syz.1.3786': attribute type 5 has an invalid length. [ 422.061948][T19775] syzkaller0: left promiscuous mode [ 422.068416][T19775] syzkaller0: left allmulticast mode [ 422.567820][T19791] syzkaller1: entered promiscuous mode [ 422.573888][T19791] syzkaller1: entered allmulticast mode [ 424.332317][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.936573][T19763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.601213][T19832] netlink: 'syz.4.3812': attribute type 10 has an invalid length. [ 425.763262][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3814'. [ 425.779965][T19840] netlink: 'syz.1.3813': attribute type 10 has an invalid length. [ 425.789715][T19840] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3813'. [ 425.848336][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3814'. [ 425.877279][T19849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3815'. [ 425.896230][T19841] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3814'. [ 426.134461][T19861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3818'. [ 426.237744][T19873] team_slave_1: entered promiscuous mode [ 426.378335][T19875] team_slave_1: left promiscuous mode [ 426.451856][T19884] lo: left promiscuous mode [ 426.868347][T19908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3825'. [ 427.531401][T19884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.554094][T19884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.941104][T19884] syzkaller0: left promiscuous mode [ 427.952296][T19884] syzkaller0: left allmulticast mode [ 428.049148][T16511] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.069753][T16511] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.090790][T16511] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.112734][T16511] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.285290][T19938] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3830'. [ 428.347085][T19939] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3830'. [ 428.372707][T19941] wg1: entered promiscuous mode [ 428.377749][T19941] wg1: entered allmulticast mode [ 428.386827][T19941] netlink: 'syz.2.3832': attribute type 23 has an invalid length. [ 428.398942][T19949] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3833'. [ 428.446278][T19948] syzkaller0: entered promiscuous mode [ 428.451823][T19948] syzkaller0: entered allmulticast mode [ 428.669148][T19965] vcan0: tx address claim with dlc 0 [ 428.677146][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3839'. [ 428.703694][T19965] vlan4: entered allmulticast mode [ 428.724544][T19965] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 428.736029][T19971] netlink: 'syz.0.3841': attribute type 10 has an invalid length. [ 428.778721][T19971] team0: Port device dummy0 added [ 428.798611][T19976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3843'. [ 428.840952][T19976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3843'. [ 429.093364][T19993] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3849'. [ 429.138068][T19998] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3850'. [ 429.168125][T19998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3850'. [ 429.224229][T20003] lo: Caught tx_queue_len zero misconfig [ 429.447179][T20018] netlink: 'syz.3.3856': attribute type 1 has an invalid length. [ 429.519799][T20018] bond7: entered promiscuous mode [ 429.525497][T20018] 8021q: adding VLAN 0 to HW filter on device bond7 [ 429.538089][T20028] netlink: 'syz.1.3858': attribute type 21 has an invalid length. [ 429.594800][T20030] 8021q: adding VLAN 0 to HW filter on device bond7 [ 429.612928][T20030] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 429.652168][T20030] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 429.690338][T20030] bond7: (slave vti0): making interface the new active one [ 429.720842][T20030] vti0: entered promiscuous mode [ 429.733102][T20030] bond7: (slave vti0): Enslaving as an active interface with an up link [ 429.750354][T20036] lo: left promiscuous mode [ 429.758008][T20036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.783961][T20028] x_tables: duplicate underflow at hook 3 [ 429.913048][T20050] macvtap0: entered promiscuous mode [ 429.935054][T20050] veth0_macvtap: left promiscuous mode [ 430.057076][T16511] dummy0: left allmulticast mode [ 430.068908][T16511] dummy0: left promiscuous mode [ 430.081251][T16511] bridge1: port 1(dummy0) entered disabled state [ 430.805651][T16511] bond4 (unregistering): (slave geneve3): Releasing active interface [ 430.940603][T16511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.952985][T16511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.964383][T16511] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 430.980909][T16511] bond0 (unregistering): Released all slaves [ 430.994274][T16511] bond1 (unregistering): (slave lo): Releasing backup interface [ 431.003070][T16511] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 431.019207][T16511] bond1 (unregistering): Released all slaves [ 431.036555][T16511] bond2 (unregistering): Released all slaves [ 431.052514][T16511] bond3 (unregistering): Released all slaves [ 431.068505][T16511] bond4 (unregistering): Released all slaves [ 431.087469][T16511] bond5 (unregistering): Released all slaves [ 431.106605][T16511] bond6 (unregistering): Released all slaves [ 431.127746][T16511] bond7 (unregistering): Released all slaves [ 431.145893][T16511] bond8 (unregistering): Released all slaves [ 431.219083][T20072] tipc: Enabling of bearer rejected, failed to enable media [ 431.281850][T13641] lo speed is unknown, defaulting to 1000 [ 431.305163][T13641] syz2: Port: 1 Link DOWN [ 431.342591][T13641] lo speed is unknown, defaulting to 1000 [ 431.689627][T20121] netlink: 'syz.3.3881': attribute type 58 has an invalid length. [ 431.823087][T20124] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 431.946996][T20137] __nla_validate_parse: 6 callbacks suppressed [ 431.947017][T20137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3889'. [ 432.039707][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3888'. [ 432.059574][T20140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3888'. [ 432.259529][T20155] tipc: Enabled bearer , priority 0 [ 432.503649][T20177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3898'. [ 432.572295][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.572931][T20185] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3902'. [ 432.602552][T20176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3900'. [ 432.611581][T20185] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3902'. [ 432.688896][T20182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3900'. [ 432.737726][T20186] tipc: Enabling of bearer rejected, failed to enable media [ 432.765129][T20187] tipc: Enabling of bearer rejected, failed to enable media [ 432.772859][T20198] netlink: 'syz.2.3905': attribute type 64 has an invalid length. [ 432.955124][T20203] lo: entered allmulticast mode [ 432.961889][T20203] tunl0: entered allmulticast mode [ 432.986403][T20203] gre0: entered allmulticast mode [ 433.026278][T20203] gretap0: entered allmulticast mode [ 433.046324][T20206] netlink: 'syz.3.3906': attribute type 1 has an invalid length. [ 433.160100][T20220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3910'. [ 433.172614][T20203] erspan0: entered allmulticast mode [ 433.187157][T20203] ip_vti0: entered allmulticast mode [ 433.203388][T20220] netlink: 'syz.1.3910': attribute type 5 has an invalid length. [ 433.219883][T20203] ip6_vti0: entered allmulticast mode [ 433.232240][T20220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3910'. [ 433.324624][T20203] sit0: entered allmulticast mode [ 433.367137][T20203] ip6tnl0: entered allmulticast mode [ 433.391741][T20227] openvswitch: netlink: Flow key attr not present in new flow. [ 433.404568][T20203] ip6gre0: entered allmulticast mode [ 433.426007][T20203] syz_tun: entered allmulticast mode [ 433.501910][T20203] ip6gretap0: entered allmulticast mode [ 433.530392][T20203] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.537997][T20203] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.562882][T20203] bridge0: entered allmulticast mode [ 433.582399][T20203] vcan0: entered allmulticast mode [ 433.607868][T20203] bond0: entered allmulticast mode [ 433.620186][T20203] bond_slave_0: entered allmulticast mode [ 433.629212][T20203] bond_slave_1: entered allmulticast mode [ 433.646069][T20203] team0: entered allmulticast mode [ 433.659549][T20203] team_slave_0: entered allmulticast mode [ 433.676298][T20203] team_slave_1: entered allmulticast mode [ 433.696541][T20203] dummy0: entered allmulticast mode [ 433.720901][T20203] nlmon0: entered allmulticast mode [ 433.742507][T20203] caif0: entered allmulticast mode [ 433.748386][T20203] batadv0: entered allmulticast mode [ 433.760011][T20203] vxcan0: entered allmulticast mode [ 433.782425][T20203] vxcan1: entered allmulticast mode [ 433.793026][T20203] veth0: entered allmulticast mode [ 433.802370][T20203] veth1: entered allmulticast mode [ 433.817633][T20203] wg0: entered allmulticast mode [ 433.833660][T20203] wg1: left promiscuous mode [ 433.866575][T20203] wg2: entered allmulticast mode [ 433.880940][T20203] veth0_to_bridge: entered allmulticast mode [ 433.895821][T20203] veth1_to_bridge: entered allmulticast mode [ 433.912006][T20203] veth0_to_bond: entered allmulticast mode [ 433.927296][T20203] veth1_to_bond: entered allmulticast mode [ 433.938913][T20203] veth0_to_team: entered allmulticast mode [ 433.950213][T20203] veth1_to_team: entered allmulticast mode [ 433.963571][T20203] veth0_to_batadv: entered allmulticast mode [ 433.973588][T20203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.981256][T20203] batadv_slave_0: entered allmulticast mode [ 433.994159][T20203] veth1_to_batadv: entered allmulticast mode [ 434.004270][T20203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.011864][T20203] batadv_slave_1: entered allmulticast mode [ 434.024142][T20203] tipc: Resetting bearer [ 434.029946][T20203] xfrm0: entered allmulticast mode [ 434.045490][T20203] veth0_to_hsr: entered allmulticast mode [ 434.054825][T20203] hsr_slave_0: entered allmulticast mode [ 434.063591][T20203] veth1_to_hsr: entered allmulticast mode [ 434.077363][T20203] hsr0: entered allmulticast mode [ 434.087602][T20203] veth1_virt_wifi: entered allmulticast mode [ 434.099020][T20203] veth0_virt_wifi: entered allmulticast mode [ 434.108132][T20203] virt_wifi0: entered allmulticast mode [ 434.118261][T20203] veth0_vlan: entered allmulticast mode [ 434.135296][T20203] vlan0: entered allmulticast mode [ 434.140806][T20203] vlan1: entered allmulticast mode [ 434.148431][T20203] macvlan0: entered allmulticast mode [ 434.159576][T20203] macvlan1: entered allmulticast mode [ 434.169735][T20203] ipvlan0: entered allmulticast mode [ 434.175871][T20203] ipvlan1: entered allmulticast mode [ 434.181950][T20203] veth1_macvtap: entered allmulticast mode [ 434.195463][T20203] veth0_macvtap: entered allmulticast mode [ 434.210096][T20203] macvtap0: entered allmulticast mode [ 434.224920][T20203] macsec0: entered allmulticast mode [ 434.236182][T20203] geneve0: entered allmulticast mode [ 434.252759][T20203] geneve1: entered allmulticast mode [ 434.263946][T20203] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 434.274903][T20203] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 434.293172][T20203] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 434.313754][T20203] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 434.362969][T20203] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode [ 434.373323][T20203] bond1: entered allmulticast mode [ 434.378772][T20203] bridge1: entered allmulticast mode [ 434.389230][T20203] vlan2: left promiscuous mode [ 434.395946][T20203] vlan3: entered allmulticast mode [ 434.402534][T20203] bridge2: entered allmulticast mode [ 434.413694][T20203] vxlan0: entered allmulticast mode [ 434.444674][T20203] geneve2: left promiscuous mode [ 434.455026][T20203] sit1: entered allmulticast mode [ 434.479711][T20203] macvtap1: left promiscuous mode [ 434.534372][T20220] geneve2: entered promiscuous mode [ 434.539657][T20220] geneve2: entered allmulticast mode [ 434.570201][T20225] netlink: 'syz.1.3910': attribute type 1 has an invalid length. [ 434.589035][T13648] tipc: Node number set to 543510335 [ 434.632744][T16507] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.641692][T16507] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.719212][T16507] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 434.762213][T16507] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.771162][T16507] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.802809][T16507] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 434.841834][T16507] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.858457][T16507] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.900239][T16507] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 434.934905][T20200] lo speed is unknown, defaulting to 1000 [ 434.940745][T16504] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.964787][T16504] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.004994][T16504] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 435.033852][T16504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 435.074343][T16504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 435.102155][T16504] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 435.111869][T16504] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 435.168095][T20271] batman_adv: batadv0: Adding interface: dummy0 [ 435.176689][T20271] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.212609][T20268] netlink: 'syz.0.3921': attribute type 7 has an invalid length. [ 435.232313][T20271] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 435.434037][T20279] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.091344][T20314] syzkaller0: entered promiscuous mode [ 436.135087][T20314] syzkaller0: entered allmulticast mode [ 436.178745][T20314] netlink: 'syz.4.3936': attribute type 15 has an invalid length. [ 436.309441][T20325] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.326168][T20324] netlink: 'syz.1.3939': attribute type 2 has an invalid length. [ 436.335175][T20325] team0: Cannot enslave team device to itself [ 436.360302][T20325] team0: Cannot enslave team device to itself [ 436.941909][T20377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.994924][T20379] macvlan0: left allmulticast mode [ 437.007726][T20379] netlink: 'syz.2.3951': attribute type 2 has an invalid length. [ 437.046998][T20383] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip_vti0, syncid = 0, id = 0 [ 437.212450][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 437.259614][T20403] __nla_validate_parse: 28 callbacks suppressed [ 437.259636][T20403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3960'. [ 437.335058][T20407] xt_socket: unknown flags 0x50 [ 437.340756][T20407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3961'. [ 437.371697][T20409] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3959'. [ 437.447855][T20409] syzkaller0: entered promiscuous mode [ 437.456893][T20409] syzkaller0: entered allmulticast mode [ 437.469903][T20409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3959'. [ 437.521265][T20418] netlink: 'syz.0.3965': attribute type 9 has an invalid length. [ 437.529903][T20418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3965'. [ 437.610003][T20420] veth0: entered promiscuous mode [ 437.615976][T20420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3964'. [ 437.662040][T20420] veth0 (unregistering): left promiscuous mode [ 437.770231][T20431] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3970'. [ 437.819741][T20431] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3970'. [ 437.849362][T20442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3970'. [ 437.871331][T20442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3970'. [ 437.958847][T20450] sctp: [Deprecated]: syz.2.3973 (pid 20450) Use of int in max_burst socket option deprecated. [ 437.958847][T20450] Use struct sctp_assoc_value instead [ 437.992749][T20449] netlink: 'syz.1.3974': attribute type 11 has an invalid length. [ 438.111998][T20458] netlink: 'syz.1.3978': attribute type 4 has an invalid length. [ 438.143748][T20458] netlink: 'syz.1.3978': attribute type 4 has an invalid length. [ 438.343189][T20468] syzkaller0: entered promiscuous mode [ 438.350321][T20468] syzkaller0: entered allmulticast mode [ 438.843981][T20485] IPv6: sit1: Disabled Multicast RS [ 438.853720][T20485] sit1: entered allmulticast mode [ 439.114206][T20506] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20001 [ 439.140418][T20506] sctp: [Deprecated]: syz.0.3989 (pid 20506) Use of int in max_burst socket option. [ 439.140418][T20506] Use struct sctp_assoc_value instead [ 439.177504][T20510] netlink: 'syz.4.3990': attribute type 1 has an invalid length. [ 439.328219][T20512] lo speed is unknown, defaulting to 1000 [ 439.735234][T20525] tipc: New replicast peer: 172.20.20.187 [ 439.760211][T20525] tipc: Enabled bearer , priority 10 [ 439.840925][T20533] netdevsim netdevsim1: Direct firmware load for .. @ failed with error -2 [ 439.857689][T20533] netdevsim netdevsim1: Falling back to sysfs fallback for: .. @ [ 439.952766][T20542] xt_socket: unknown flags 0x50 [ 440.261058][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.550505][T20577] sctp: [Deprecated]: syz.3.4011 (pid 20577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 440.550505][T20577] Use struct sctp_sack_info instead [ 441.539689][T20628] IPVS: Error connecting to the multicast addr [ 442.334078][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 442.423018][T20681] __nla_validate_parse: 10 callbacks suppressed [ 442.423035][T20681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4040'. [ 442.450314][T20682] xt_hashlimit: size too large, truncated to 1048576 [ 442.467946][T20681] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 442.480703][T20681] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 442.490645][T20681] team0: Failed to send options change via netlink (err -105) [ 442.499034][T20681] team0: Port device batadv1 added [ 442.898339][T20712] xt_TCPMSS: Only works on TCP SYN packets [ 442.905178][T20712] delete_channel: no stack [ 442.941485][T20717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4047'. [ 443.084479][T20724] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4051'. [ 443.102372][T20726] SET target dimension over the limit! [ 443.110094][T20727] netlink: 'syz.2.4053': attribute type 3 has an invalid length. [ 443.153987][T20724] netlink: 'syz.1.4051': attribute type 2 has an invalid length. [ 443.291763][T20741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4057'. [ 443.304536][T20741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4057'. [ 443.444038][T20749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4059'. [ 443.551262][T20758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 443.564621][T20759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 443.683763][T20764] openvswitch: netlink: IPv4 tun info is not correct [ 443.704184][ T51] Bluetooth: hci0: link tx timeout [ 443.710291][ T51] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 443.728018][T20764] syzkaller0: entered promiscuous mode [ 443.734716][T20764] syzkaller0: entered allmulticast mode [ 443.745818][T20764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4064'. [ 443.775551][T20764] netlink: 'syz.2.4064': attribute type 5 has an invalid length. [ 443.783939][T20764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4064'. [ 443.827395][T20764] geneve3: entered promiscuous mode [ 443.836624][T20764] geneve3: entered allmulticast mode [ 443.863033][T16509] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 443.879433][T16509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 443.927990][T16509] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 443.939356][T16509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 444.439327][T20816] netlink: 'syz.2.4080': attribute type 1 has an invalid length. [ 444.449343][T20816] netlink: 'syz.2.4080': attribute type 1 has an invalid length. [ 444.464499][T20816] netlink: 'syz.2.4080': attribute type 1 has an invalid length. [ 444.483724][T20816] netlink: 'syz.2.4080': attribute type 1 has an invalid length. [ 444.646462][T20828] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 444.766845][T20838] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 445.019471][T20858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 445.174826][T20868] netlink: 'syz.4.4097': attribute type 1 has an invalid length. [ 445.183380][T20868] netlink: 'syz.4.4097': attribute type 1 has an invalid length. [ 445.207578][T20870] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 445.279492][T20870] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 445.507546][T20886] syzkaller0: entered promiscuous mode [ 445.527980][T20886] syzkaller0: entered allmulticast mode [ 445.621985][T20895] netlink: 'syz.1.4106': attribute type 1 has an invalid length. [ 445.659037][T20895] : entered promiscuous mode [ 445.741583][T20895] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 445.759673][T20895] bond3 (unregistering): Released all slaves [ 445.773378][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 445.879166][T20915] pim6reg: entered allmulticast mode [ 445.944213][T20915] pim6reg: left allmulticast mode [ 446.248205][T20938] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 446.393764][T20942]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.408644][T20942]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.423835][T20942]  (unregistering): (slave wlan1): Releasing backup interface [ 446.443523][T20942]  (unregistering): Released all slaves [ 446.653335][T20944] syzkaller0: entered promiscuous mode [ 446.659006][T20944] syzkaller0: entered allmulticast mode [ 448.573080][T20967] vlan5: entered promiscuous mode [ 448.578432][T20967] geneve1: entered promiscuous mode [ 448.584732][T20967] vlan5: entered allmulticast mode [ 448.591048][T20974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.608659][T20991] __nla_validate_parse: 18 callbacks suppressed [ 448.608677][T20991] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4131'. [ 449.005712][T21008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4137'. [ 449.060391][T21008] team0: entered promiscuous mode [ 449.066807][T21008] team0: entered allmulticast mode [ 449.212363][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 449.243607][T21038] validate_nla: 3 callbacks suppressed [ 449.243626][T21038] netlink: 'syz.4.4146': attribute type 10 has an invalid length. [ 449.271432][T21037] netlink: 'syz.3.4147': attribute type 1 has an invalid length. [ 449.279794][T21037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4147'. [ 449.288606][T21035] sock: sock_timestamping_bind_phc: sock not bind to device [ 449.310419][T21038] bridge0: entered promiscuous mode [ 449.318716][T21038] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 449.718273][T21062] netlink: 'syz.0.4154': attribute type 1 has an invalid length. [ 449.727275][T21062] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4154'. [ 449.737958][T21062] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4154'. [ 449.809255][T21064] ksmbd: Unknown IPC event: 8, ignore. [ 449.943689][T21070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4157'. [ 449.957232][T21074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4159'. [ 449.992800][T21074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4159'. [ 450.180767][T21086] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4163'. [ 450.210149][T21086] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4163'. [ 450.916663][T21130] tipc: Started in network mode [ 450.926870][T21130] tipc: Node identity 8622cfb90033, cluster identity 4711 [ 450.947691][T21130] tipc: Enabled bearer , priority 0 [ 451.103021][T21136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.110422][T21136] IPv6: NLM_F_CREATE should be set when creating new route [ 451.117807][T21136] IPv6: NLM_F_CREATE should be set when creating new route [ 451.408442][T21161] xt_hashlimit: size too large, truncated to 1048576 [ 451.430161][T21161] netlink: 'syz.2.4180': attribute type 18 has an invalid length. [ 451.464634][T16507] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.473754][T16507] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.485497][T16507] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.518434][T16507] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.942190][T11250] tipc: Node number set to 2249314233 [ 452.498004][T21195] xt_CT: No such helper "pptp" [ 452.659165][T21213] netlink: 'syz.3.4192': attribute type 1 has an invalid length. [ 452.673097][T21216] netlink: 'syz.3.4192': attribute type 1 has an invalid length. [ 452.748533][T21217] bond4: invalid ARP target 0.0.0.0 specified for addition [ 452.768850][T21217] bond4: option arp_ip_target: invalid value (0) [ 452.786563][T21223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.815888][T21217] bond4 (unregistering): Released all slaves [ 453.005963][T21238] netlink: 'syz.1.4198': attribute type 2 has an invalid length. [ 453.047626][T21239] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 453.063335][T21239] bond2: option packets_per_slave: allowed values 0 - 65535 [ 453.084881][T21239] bond2 (unregistering): Released all slaves [ 453.206472][T21245] netlink: 'syz.0.4200': attribute type 3 has an invalid length. [ 453.214596][T21245] netlink: 'syz.0.4200': attribute type 1 has an invalid length. [ 453.241214][T21245] syzkaller0: entered promiscuous mode [ 453.272286][T21245] syzkaller0: entered allmulticast mode [ 453.616910][T21262] netlink: 'syz.1.4204': attribute type 12 has an invalid length. [ 453.788007][T21271] __nla_validate_parse: 13 callbacks suppressed [ 453.788027][T21271] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4208'. [ 454.301392][T21292] sctp: [Deprecated]: syz.1.4215 (pid 21292) Use of int in max_burst socket option. [ 454.301392][T21292] Use struct sctp_assoc_value instead [ 454.418456][T21292] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 454.443475][T21292] bond3 (unregistering): Released all slaves [ 454.478165][ T797] hid (null): unknown global tag 0xd [ 454.484952][ T797] hid (null): global environment stack underflow [ 454.491592][ T797] hid (null): unknown global tag 0x67 [ 454.497519][ T797] hid (null): unknown global tag 0xd [ 454.503614][ T797] hid (null): unknown global tag 0xc [ 454.509224][ T797] hid (null): report_id 5826657 is invalid [ 454.515394][ T797] hid (null): global environment stack underflow [ 454.534263][ T797] hid (null): unknown global tag 0xe [ 454.545314][ T797] hid (null): global environment stack underflow [ 454.559626][ T797] hid (null): unknown global tag 0x48 [ 454.585496][ T797] hid (null): invalid report_count 1057779136 [ 454.591977][ T797] hid (null): unknown global tag 0xc [ 454.602941][ T797] hid (null): global environment stack underflow [ 454.609581][ T797] hid (null): report_id 150396611 is invalid [ 454.615729][ T797] hid (null): unknown global tag 0xc [ 454.621266][ T797] hid (null): unknown global tag 0xc [ 454.627723][ T797] hid (null): report_id 1830 is invalid [ 454.635323][ T797] hid (null): unknown global tag 0xe [ 454.640752][ T797] hid (null): invalid report_count 34875 [ 454.650065][ T797] hid (null): global environment stack underflow [ 454.676992][ T797] hid (null): report_id 3857782328 is invalid [ 454.686346][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'. [ 454.695843][ T797] hid (null): global environment stack underflow [ 454.718056][ T797] hid (null): unknown global tag 0xca [ 454.739935][T21306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4219'. [ 454.752209][ T797] hid (null): invalid report_count 1396931935 [ 454.758399][ T797] hid (null): bogus close delimiter [ 454.780974][ T797] hid (null): unknown global tag 0xc [ 454.794598][T21306] validate_nla: 1 callbacks suppressed [ 454.794616][T21306] netlink: 'syz.0.4219': attribute type 12 has an invalid length. [ 454.812783][ T797] hid (null): unknown global tag 0xd [ 454.831033][T21323] netlink: 'syz.3.4221': attribute type 4 has an invalid length. [ 454.839388][ T797] hid (null): unknown global tag 0xc [ 454.840445][T21306] netlink: 'syz.0.4219': attribute type 11 has an invalid length. [ 454.854285][ T797] hid (null): global environment stack underflow [ 454.872223][ T797] hid (null): unknown global tag 0xc [ 454.877790][ T797] hid (null): bogus close delimiter [ 454.887303][ T797] hid (null): unknown global tag 0xd [ 454.893772][T21324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4223'. [ 454.917363][ T797] hid (null): global environment stack underflow [ 454.924263][ T797] hid (null): global environment stack underflow [ 454.931249][ T797] hid (null): invalid report_size 607633893 [ 454.948345][T21313] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.956525][T21313] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.957858][ T797] hid (null): unknown global tag 0xc9 [ 454.979559][ T797] hid (null): global environment stack underflow [ 454.986439][ T797] hid (null): invalid report_size -1205922352 [ 454.993629][ T797] hid (null): global environment stack underflow [ 455.000278][ T797] hid (null): unknown global tag 0x30 [ 455.006276][ T797] hid (null): global environment stack underflow [ 455.013915][ T797] hid (null): unknown global tag 0xe [ 455.019438][ T797] hid (null): unknown global tag 0x22 [ 455.045844][ T797] hid-generic 0005:09EA:25AB.0001: unknown main item tag 0x0 [ 455.054232][ T797] hid-generic 0005:09EA:25AB.0001: unknown global tag 0xd [ 455.061436][ T797] hid-generic 0005:09EA:25AB.0001: item 0 2 1 13 parsing failed [ 455.069931][ T797] hid-generic 0005:09EA:25AB.0001: probe with driver hid-generic failed with error -22 [ 455.107508][T21313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.119964][T21313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.278175][T16513] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.292293][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 455.306959][T16513] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.327438][T16513] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.352255][T16513] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.373517][T16502] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.408023][T16502] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.452146][T16502] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.472193][T16502] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.508794][T21335] netlink: 'syz.1.4226': attribute type 83 has an invalid length. [ 455.520584][T21340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4227'. [ 455.603703][T21346] netlink: 'syz.0.4229': attribute type 25 has an invalid length. [ 455.770588][T21355] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 455.791656][T21355] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4232'. [ 455.928145][T21357] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4235'. [ 455.970472][T21366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4236'. [ 455.998628][T21369] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4239'. [ 456.035991][T21372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4236'. [ 456.081363][T21366] netlink: 'syz.1.4236': attribute type 2 has an invalid length. [ 456.089993][T21366] netlink: 'syz.1.4236': attribute type 11 has an invalid length. [ 456.353385][T21391] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 456.603156][T21406] xt_addrtype: ipv6 does not support BROADCAST matching [ 456.631128][T21396] netlink: 'syz.4.4245': attribute type 11 has an invalid length. [ 456.674622][T21408] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 456.846635][T21417] tipc: Started in network mode [ 456.856660][T21417] tipc: Node identity 84e, cluster identity 4711 [ 456.866984][T21417] tipc: Node number set to 2126 [ 457.040082][T21425] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 457.183642][T21439] netlink: 'syz.2.4263': attribute type 1 has an invalid length. [ 457.264424][T21439] 8021q: adding VLAN 0 to HW filter on device bond2 [ 457.372782][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 457.380244][T21446] bond2: (slave veth1): Enslaving as an active interface with a down link [ 457.585614][T21463] syzkaller1: entered promiscuous mode [ 457.591229][T21463] syzkaller1: entered allmulticast mode [ 457.693763][ T5840] Bluetooth: hci3: command 0x0405 tx timeout [ 457.845835][T21484] tipc: Started in network mode [ 457.850920][T21484] tipc: Node identity 22997cf56c5d, cluster identity 4711 [ 457.887758][T21484] tipc: Enabled bearer , priority 0 [ 457.945884][T21480] syzkaller0: entered promiscuous mode [ 457.982331][T21480] syzkaller0: entered allmulticast mode [ 457.988693][T21480] tipc: Resetting bearer [ 458.091371][T21474] tipc: Resetting bearer [ 458.168017][T21474] tipc: Disabling bearer [ 458.223256][T21498] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.243376][T21506] bond3: entered promiscuous mode [ 458.260639][T21506] bond3: entered allmulticast mode [ 458.276055][T21506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.301616][T21506] team0: Port device bond3 added [ 458.415151][T21498] vxcan3: entered promiscuous mode [ 458.429762][T21498] bond3: (slave vxcan3): refused to change device type [ 458.728016][T21540] netlink: 'syz.3.4292': attribute type 1 has an invalid length. [ 458.829157][T21550] __nla_validate_parse: 10 callbacks suppressed [ 458.829180][T21550] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4292'. [ 458.885239][T21540] 8021q: adding VLAN 0 to HW filter on device bond8 [ 458.953663][T21559] macvlan2: entered promiscuous mode [ 458.978606][T21559] macvlan2: entered allmulticast mode [ 459.008472][T21543] xt_socket: unknown flags 0xe4 [ 459.015736][T21559] bond8: entered promiscuous mode [ 459.041951][T21559] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 459.078212][T21559] bond8: left promiscuous mode [ 459.965259][T21638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4309'. [ 460.214931][T21591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.514545][T21660] tunl0: entered promiscuous mode [ 460.519928][T21660] validate_nla: 1 callbacks suppressed [ 460.519946][T21660] netlink: 'syz.4.4315': attribute type 3 has an invalid length. [ 460.556166][T21667] netlink: 'syz.0.4316': attribute type 17 has an invalid length. [ 460.573763][T21667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4316'. [ 460.592329][T21660] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4315'. [ 460.601978][T21667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4316'. [ 460.663175][T21667] gretap0: entered promiscuous mode [ 460.696652][T21667] gretap0: left promiscuous mode [ 460.803690][T21681] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4318'. [ 460.811495][T21671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4316'. [ 460.848586][T21671] bond0: entered promiscuous mode [ 460.882900][T21671] gretap0: entered promiscuous mode [ 460.905198][T21671] debugfs: 'hsr1' already exists in 'hsr' [ 460.911642][T21671] Cannot create hsr debugfs directory [ 460.926808][T21671] hsr1: entered promiscuous mode [ 461.183169][T21694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.218947][T21697] netlink: zone id is out of range [ 461.226751][T21697] netlink: zone id is out of range [ 461.240933][T21697] netlink: zone id is out of range [ 461.255684][T21697] netlink: zone id is out of range [ 461.276437][T21702] netlink: 'syz.2.4325': attribute type 1 has an invalid length. [ 461.293086][T21697] netlink: zone id is out of range [ 461.298273][T21697] netlink: zone id is out of range [ 461.313535][T21694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4325'. [ 461.326812][T21697] netlink: zone id is out of range [ 461.341144][T21694] veth0_to_bond: left allmulticast mode [ 461.356296][T21697] netlink: zone id is out of range [ 461.361493][T21697] netlink: zone id is out of range [ 461.393974][T21697] netlink: zone id is out of range [ 461.511577][T21713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4327'. [ 461.669769][T21721] netlink: 'syz.1.4329': attribute type 1 has an invalid length. [ 461.811293][T21733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4335'. [ 462.897318][T21767] netlink: 'syz.4.4345': attribute type 1 has an invalid length. [ 462.977287][T21767] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 463.089966][T21767] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 463.101848][T21767] bond3 (unregistering): Released all slaves [ 463.853075][T21833] __nla_validate_parse: 15 callbacks suppressed [ 463.853098][T21833] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4359'. [ 464.079188][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4366'. [ 464.098500][T21841] block nbd0: Unsupported socket: should be TCP or UNIX. [ 464.134188][T21845] netlink: 4556 bytes leftover after parsing attributes in process `syz.0.4366'. [ 464.435777][T21851] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4367'. [ 464.578884][T21871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4374'. [ 464.625154][T21871] syz_tun: entered allmulticast mode [ 464.636167][T21871] lo: entered allmulticast mode [ 464.657686][T21870] syz_tun: left allmulticast mode [ 464.815910][T21886] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 464.863694][T21886] bond0: (slave lo): Error: Device type is different from other slaves [ 465.158851][T21897] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4381'. [ 465.243501][T21897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4381'. [ 465.568661][T21919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4389'. [ 465.700409][T21924] lo speed is unknown, defaulting to 1000 [ 465.723001][T21935] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4390'. [ 465.831816][T21943] netlink: 'syz.1.4395': attribute type 1 has an invalid length. [ 465.846145][T21943] netlink: 'syz.1.4395': attribute type 6 has an invalid length. [ 466.062644][T21952] block nbd2: server does not support multiple connections per device. [ 466.071517][T21952] block nbd2: shutting down sockets [ 466.340403][T21963] syzkaller0: entered promiscuous mode [ 466.348571][T21963] syzkaller0: entered allmulticast mode [ 466.354990][T21966] netlink: 'syz.2.4401': attribute type 1 has an invalid length. [ 466.477654][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4404'. [ 466.491721][T21969] block nbd0: Unsupported socket: should be TCP or UNIX. [ 468.771101][T22018] bond3: option xmit_hash_policy: invalid value (64) [ 468.790038][T22018] bond3 (unregistering): Released all slaves [ 468.986536][T22030] __nla_validate_parse: 3 callbacks suppressed [ 468.986555][T22030] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.4416'. [ 469.399362][T22058] netlink: 'syz.1.4425': attribute type 1 has an invalid length. [ 469.427924][T22058] bond3: entered promiscuous mode [ 469.433555][T22058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 469.458294][T22058] bond3: (slave bridge5): making interface the new active one [ 469.466297][T22058] bridge5: entered promiscuous mode [ 469.475052][T22058] bridge5: left promiscuous mode [ 471.499945][T22007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.738644][T22087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4429'. [ 471.758908][T22091] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4432'. [ 471.959442][T22102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4438'. [ 472.027718][T22108] tipc: Enabling of bearer rejected, failed to enable media [ 472.056560][T22108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4439'. [ 472.178472][T22116] netlink: 67 bytes leftover after parsing attributes in process `syz.2.4441'. [ 472.188014][T22112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4439'. [ 472.492216][T22134] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4447'. [ 472.861526][T22160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4456'. [ 472.885111][T22160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4456'. [ 473.052263][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 473.359173][T22178] sit1: entered promiscuous mode [ 473.367591][T22178] sit1: entered allmulticast mode [ 473.559113][T22184] tc_dump_action: action bad kind [ 473.936170][T22193] ksmbd: Unknown IPC event: 3, ignore. [ 474.364546][T22212] __nla_validate_parse: 4 callbacks suppressed [ 474.364566][T22212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4472'. [ 474.366804][T22213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4472'. [ 474.443666][T22217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4473'. [ 474.494222][T22221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4475'. [ 474.620796][T22226] net_ratelimit: 6 callbacks suppressed [ 474.620819][T22226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.828828][T22245] netlink: 'syz.1.4481': attribute type 2 has an invalid length. [ 474.877977][T22247] netlink: 'syz.0.4483': attribute type 11 has an invalid length. [ 474.887550][T22247] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.4483'. [ 475.071767][T22254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4486'. [ 475.260261][T22266] netlink: 'syz.0.4489': attribute type 1 has an invalid length. [ 475.564964][T22260] vcan0: entered promiscuous mode [ 475.570161][T22260] vcan0: entered allmulticast mode [ 497.305313][T22280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4493'. [ 497.331977][T22283] netlink: 'syz.0.4495': attribute type 2 has an invalid length. [ 497.342897][T22277] netlink: 'syz.2.4492': attribute type 10 has an invalid length. [ 497.351054][T22283] netlink: 'syz.0.4495': attribute type 2 has an invalid length. [ 497.362624][T22279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4494'. [ 497.401885][T22277] bridge0: left allmulticast mode [ 497.419493][T22277] bridge0: entered allmulticast mode [ 497.431450][T22277] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 497.492443][T22279] hsr_slave_0 (unregistering): left promiscuous mode [ 497.585843][T22291] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4498'. [ 497.941651][T22315] netlink: 'syz.1.4505': attribute type 1 has an invalid length. [ 497.972276][T22317] netlink: 'syz.1.4505': attribute type 1 has an invalid length. [ 498.024239][T22319] syzkaller0: entered promiscuous mode [ 498.029783][T22319] syzkaller0: entered allmulticast mode [ 498.085685][T22325] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4508'. [ 498.141647][T22328] netlink: 'syz.0.4511': attribute type 1 has an invalid length. [ 498.253809][T22328] 8021q: adding VLAN 0 to HW filter on device bond4 [ 498.274661][T22336] bond4: entered allmulticast mode [ 498.328585][T22328] bond4: (slave ip6gretap2): making interface the new active one [ 498.352993][T22349] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4514'. [ 498.362939][T22328] ip6gretap2: entered allmulticast mode [ 498.394573][T22328] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 498.702310][T22365] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 498.881534][T22369] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4520'. [ 498.966319][T22376] netlink: 'syz.3.4523': attribute type 21 has an invalid length. [ 499.096636][T22379] syzkaller0: entered promiscuous mode [ 499.102350][T22379] syzkaller0: entered allmulticast mode [ 499.111502][T22379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4524'. [ 499.166187][T22386] netlink: 'syz.3.4525': attribute type 83 has an invalid length. [ 499.175645][T22386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4525'. [ 499.189372][T22383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4527'. [ 499.405446][T22402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4531'. [ 499.757319][T22426] pimreg3: entered allmulticast mode [ 500.300858][T22431] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 500.317864][T22431] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 500.333975][T22462] netlink: 'syz.1.4548': attribute type 1 has an invalid length. [ 500.425138][T22431] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 500.431123][T22431] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 500.480357][T22431] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 500.490009][T22431] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 500.521949][T22467] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 500.553814][T22431] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 500.564978][T22431] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 500.594264][T22467] netlink: 'syz.2.4551': attribute type 64 has an invalid length. [ 501.698206][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.318856][T22534] __nla_validate_parse: 9 callbacks suppressed [ 502.318879][T22534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4566'. [ 502.517867][T15983] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 502.568265][T15983] CPU: 1 UID: 0 PID: 15983 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 502.568296][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 502.568314][T15983] Call Trace: [ 502.568322][T15983] [ 502.568332][T15983] dump_stack_lvl+0xe8/0x150 [ 502.568381][T15983] dump_header+0xd3/0x4c0 [ 502.568411][T15983] oom_kill_process+0x3ab/0x970 [ 502.568440][T15983] out_of_memory+0x106c/0x1410 [ 502.568463][T15983] ? percpu_ref_put+0x19/0x180 [ 502.568491][T15983] ? __pfx___mutex_lock+0x10/0x10 [ 502.568529][T15983] ? __pfx_out_of_memory+0x10/0x10 [ 502.568549][T15983] ? do_raw_spin_unlock+0xf5/0x210 [ 502.568583][T15983] try_charge_memcg+0xc53/0x1560 [ 502.568629][T15983] ? __pfx_try_charge_memcg+0x10/0x10 [ 502.568662][T15983] ? get_mem_cgroup_from_mm+0x38/0x290 [ 502.568700][T15983] ? get_mem_cgroup_from_mm+0x38/0x290 [ 502.568730][T15983] ? get_mem_cgroup_from_mm+0x38/0x290 [ 502.568762][T15983] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 502.568795][T15983] __mem_cgroup_charge+0xab/0x1e0 [ 502.568823][T15983] filemap_add_folio+0x152/0x530 [ 502.568853][T15983] __filemap_get_folio_mpol+0x500/0xb00 [ 502.568890][T15983] filemap_fault+0x9ac/0x1320 [ 502.568933][T15983] ? __pfx_filemap_fault+0x10/0x10 [ 502.568962][T15983] ? __pfx_filemap_map_pages+0x10/0x10 [ 502.569002][T15983] __do_fault+0x138/0x390 [ 502.569031][T15983] do_pte_missing+0x228f/0x3490 [ 502.569055][T15983] ? do_pte_missing+0x130a/0x3490 [ 502.569090][T15983] ? handle_mm_fault+0xee/0x3310 [ 502.569127][T15983] handle_mm_fault+0x1bec/0x3310 [ 502.569176][T15983] ? handle_mm_fault+0xee/0x3310 [ 502.569217][T15983] ? __pfx_handle_mm_fault+0x10/0x10 [ 502.569247][T15983] ? lock_vma_under_rcu+0x45a/0x500 [ 502.569305][T15983] do_user_addr_fault+0xa73/0x1340 [ 502.569342][T15983] ? rcu_is_watching+0x15/0xb0 [ 502.569372][T15983] ? trace_page_fault_user+0x84/0x210 [ 502.569403][T15983] exc_page_fault+0x6a/0xc0 [ 502.569432][T15983] asm_exc_page_fault+0x26/0x30 [ 502.569459][T15983] RIP: 0033:0x7f631806a834 [ 502.569479][T15983] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 80 af ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 79 ae ed 00 48 01 d1 [ 502.569498][T15983] RSP: 002b:00007fff27f22770 EFLAGS: 00010206 [ 502.569517][T15983] RAX: 0000001b32f24000 RBX: 000000000000040b RCX: 000000000007a8f0 [ 502.569531][T15983] RDX: 000000000484a12b RSI: 00007fff27f22800 RDI: 00000000113c3112 [ 502.569545][T15983] RBP: 00007fff27f227ac R08: 7fffffffffffffff R09: 3fffffffffffffff [ 502.569560][T15983] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 502.569574][T15983] R13: 00000000000927c0 R14: 000000000007a606 R15: 00007fff27f22800 [ 502.569608][T15983] [ 502.925878][T15983] memory: usage 307200kB, limit 307200kB, failcnt 538 [ 502.997532][T15983] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 503.109004][T15983] kmem: usage 298940kB, limit 9007199254740988kB, failcnt 0 [ 503.202187][T15983] Memory cgroup stats for /syz3: [ 503.202485][T15983] cache 0 [ 503.282204][T15983] rss 0 [ 503.285050][T15983] rss_huge 0 [ 503.288280][T15983] shmem 0 [ 503.291358][T15983] mapped_file 0 [ 503.312213][T15983] dirty 0 [ 503.315238][T15983] writeback 0 [ 503.318840][T15983] workingset_refault_anon 0 [ 503.406665][T15983] workingset_refault_file 0 [ 503.411243][T15983] swap 229376 [ 503.472182][T15983] swapcached 229376 [ 503.476069][T15983] pgpgin 69562 [ 503.582656][T15983] pgpgout 69562 [ 503.609192][T15983] pgfault 170275 [ 503.625005][T22567] validate_nla: 3 callbacks suppressed [ 503.625028][T22567] netlink: 'syz.0.4576': attribute type 29 has an invalid length. [ 503.656232][T15983] pgmajfault 4 [ 503.659677][T15983] inactive_anon 0 [ 503.717360][T15983] active_anon 0 [ 503.718951][T22567] netlink: 'syz.0.4576': attribute type 29 has an invalid length. [ 503.720897][T15983] inactive_file 0 [ 503.773575][T15983] active_file 0 [ 503.781599][T15983] unevictable 0 [ 503.790283][T15983] hierarchical_memory_limit 314572800 [ 503.801595][T15983] hierarchical_memsw_limit 9223372036854771712 [ 503.822978][T22570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4577'. [ 503.854048][T15983] total_cache 0 [ 503.857578][T15983] total_rss 0 [ 503.902137][T15983] total_rss_huge 0 [ 503.915771][T15983] total_shmem 0 [ 503.942131][T15983] total_mapped_file 0 [ 503.946185][T15983] total_dirty 0 [ 503.949674][T15983] total_writeback 0 [ 503.992297][T15983] total_workingset_refault_anon 0 [ 503.997488][T15983] total_workingset_refault_file 0 [ 504.025359][T15983] total_swap 229376 [ 504.055726][T15983] total_swapcached 229376 [ 504.060213][T15983] total_pgpgin 69562 [ 504.076035][T22584] netlink: 'syz.0.4582': attribute type 1 has an invalid length. [ 504.086955][T15983] total_pgpgout 69562 [ 504.091089][T15983] total_pgfault 170278 [ 504.112275][T15983] total_pgmajfault 4 [ 504.122421][T15983] total_inactive_anon 0 [ 504.126671][T15983] total_active_anon 0 [ 504.128743][T22584] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4582'. [ 504.151146][T15983] total_inactive_file 0 [ 504.166514][T15983] total_active_file 0 [ 504.185709][T15983] total_unevictable 0 [ 504.196451][T15983] anon_cost 0 [ 504.206795][T15983] file_cost 0 [ 504.217911][T15983] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4552,pid=22468,uid=0 [ 504.312233][T15983] Memory cgroup out of memory: OOM victim 22468 (syz.3.4552) is already exiting. Skip killing the task [ 504.650711][T22605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4589'. [ 504.746384][T22617] IPVS: set_ctl: invalid protocol: 41 172.20.20.41:20000 [ 505.758797][T22658] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4599'. [ 505.856367][T22658] netlink: 'syz.3.4599': attribute type 10 has an invalid length. [ 505.927109][T22664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4601'. [ 506.096027][T22670] SET target dimension over the limit! [ 506.275463][T22678] netlink: 'syz.2.4606': attribute type 17 has an invalid length. [ 506.288091][T22678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4606'. [ 506.613508][T22694] netlink: zone id is out of range [ 506.619159][T22694] netlink: zone id is out of range [ 506.663295][T22694] netlink: zone id is out of range [ 506.675080][T22694] netlink: zone id is out of range [ 506.701329][T22694] netlink: zone id is out of range [ 506.783858][T22694] netlink: zone id is out of range [ 506.815016][T22694] netlink: zone id is out of range [ 506.822940][T22694] netlink: zone id is out of range [ 506.828123][T22694] netlink: zone id is out of range [ 506.877043][T22694] netlink: zone id is out of range [ 507.023056][T22721] sctp: [Deprecated]: syz.1.4617 (pid 22721) Use of int in maxseg socket option. [ 507.023056][T22721] Use struct sctp_assoc_value instead [ 507.104206][T22726] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4618'. [ 508.277512][T22765] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4627'. [ 508.305662][T22765] netlink: 'syz.4.4627': attribute type 21 has an invalid length. [ 508.314235][T22765] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4627'. [ 508.369918][T22765] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4627'. [ 508.552999][T22785] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4633'. [ 508.654453][T22788] gre1: entered promiscuous mode [ 508.662786][T22788] gre1: entered allmulticast mode [ 508.947255][T22808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4639'. [ 509.508492][T22834] netlink: 'syz.3.4645': attribute type 15 has an invalid length. [ 509.764237][T22847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4649'. [ 509.822537][T22847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4649'. [ 509.922620][T22852] netlink: 'syz.0.4651': attribute type 13 has an invalid length. [ 509.940806][T22852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4651'. [ 509.954138][T22854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4653'. [ 509.993226][T22856] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4652'. [ 510.639980][T22893] netlink: 'syz.1.4659': attribute type 1 has an invalid length. [ 511.396339][T13653] IPVS: starting estimator thread 0... [ 511.483893][T22931] IPVS: using max 33 ests per chain, 79200 per kthread [ 511.893930][T22957] xt_TPROXY: Can be used only with -p tcp or -p udp [ 512.081106][T22972] wg1: entered promiscuous mode [ 512.092391][T22972] wg1: entered allmulticast mode [ 512.201359][T22981] netlink: 'syz.1.4679': attribute type 11 has an invalid length. [ 512.535345][T22991] syzkaller0: entered promiscuous mode [ 512.541414][T22991] syzkaller0: entered allmulticast mode [ 512.684918][T22996] IPv6: NLM_F_CREATE should be specified when creating new route [ 513.415746][T23032] __nla_validate_parse: 37 callbacks suppressed [ 513.415767][T23032] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4692'. [ 513.481550][T23035] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4693'. [ 513.612955][T23045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4695'. [ 514.046457][T23065] Cannot find set identified by id 65534 to match [ 514.184832][T23071] netlink: 'syz.1.4704': attribute type 1 has an invalid length. [ 514.207271][T23071] netlink: 544 bytes leftover after parsing attributes in process `syz.1.4704'. [ 514.215844][T23069] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4703'. [ 514.237820][T23069] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4703'. [ 514.380793][T23075] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4706'. [ 514.424436][T23075] veth0: entered promiscuous mode [ 514.431502][T23075] veth0: left promiscuous mode [ 514.512972][T23081] netlink: 'syz.2.4707': attribute type 3 has an invalid length. [ 514.655737][T23094] netlink: 'syz.2.4711': attribute type 1 has an invalid length. [ 514.675673][T23094] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4711'. [ 514.725867][T23094] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4711'. [ 514.789124][T23094] netlink: 658 bytes leftover after parsing attributes in process `syz.2.4711'. [ 514.997801][T23112] netlink: 'syz.1.4717': attribute type 1 has an invalid length. [ 515.019257][T23112] netlink: 'syz.1.4717': attribute type 1 has an invalid length. [ 515.067964][T23116] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 515.375989][T23143] netlink: 'syz.4.4725': attribute type 178 has an invalid length. [ 515.500438][T23153] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 515.516709][T23153] xt_TPROXY: Can be used only with -p tcp or -p udp [ 515.555871][T23157] netlink: 'syz.4.4730': attribute type 1 has an invalid length. [ 515.923797][T23183] netlink: 'syz.4.4737': attribute type 4 has an invalid length. [ 516.225049][T23145] lec:lec_atm_close: lec0: Shut down! [ 516.400339][ T797] IPVS: starting estimator thread 0... [ 516.502233][T23216] IPVS: using max 30 ests per chain, 72000 per kthread [ 516.631369][T23228] bond0: entered promiscuous mode [ 516.702136][T23228] bond_slave_0: entered promiscuous mode [ 516.708187][T23228] bond_slave_1: entered promiscuous mode [ 516.759088][T23228] bridge0: entered promiscuous mode [ 516.786663][T23228] gretap0: entered promiscuous mode [ 516.825835][T23228] debugfs: 'hsr1' already exists in 'hsr' [ 516.835041][T23228] Cannot create hsr debugfs directory [ 516.840824][T23228] hsr1: entered promiscuous mode [ 517.050567][T23256] vlan2: entered promiscuous mode [ 517.077613][T23256] geneve1: entered promiscuous mode [ 517.108388][T23256] vlan2: entered allmulticast mode [ 517.118061][T23261] netlink: 'syz.2.4757': attribute type 8 has an invalid length. [ 517.142201][T23256] geneve1: entered allmulticast mode [ 517.191258][T23262] net_ratelimit: 137 callbacks suppressed [ 517.191280][T23262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.280267][T23266] netlink: 'syz.0.4758': attribute type 10 has an invalid length. [ 517.462503][T23279] netlink: 'syz.4.4761': attribute type 1 has an invalid length. [ 517.739147][T23279] 8021q: adding VLAN 0 to HW filter on device bond3 [ 518.071177][T23279] macvlan2: entered promiscuous mode [ 518.087426][T23279] macvlan2: entered allmulticast mode [ 518.095591][T23279] bond3: entered promiscuous mode [ 518.101650][T23279] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 518.114492][T23279] bond3: left promiscuous mode [ 518.347052][T13653] lec:lec_start_xmit: lec0:No lecd attached [ 518.416556][T23327] syzkaller0: entered promiscuous mode [ 518.432346][T23327] syzkaller0: entered allmulticast mode [ 518.487010][T23327] __nla_validate_parse: 18 callbacks suppressed [ 518.487031][T23327] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4771'. [ 518.986337][T23356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4779'. [ 519.525127][T23399] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4793'. [ 519.534222][T23400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4793'. [ 519.544379][T23396] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 519.564749][T23400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4793'. [ 519.577857][T23401] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4793'. [ 519.649458][T23399] delete_channel: no stack [ 519.828446][T23397] delete_channel: no stack [ 520.173843][T23434] validate_nla: 1 callbacks suppressed [ 520.173865][T23434] netlink: 'syz.2.4802': attribute type 13 has an invalid length. [ 520.203017][T23434] macvtap0: refused to change device tx_queue_len [ 520.315696][T23443] netlink: 'syz.0.4805': attribute type 10 has an invalid length. [ 520.336109][T23440] netlink: 'syz.4.4804': attribute type 21 has an invalid length. [ 520.350541][T23443] bridge_slave_1: entered promiscuous mode [ 520.363838][T23443] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 520.700097][T23467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4813'. [ 520.791909][T13638] IPVS: starting estimator thread 0... [ 520.857435][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4816'. [ 520.884786][T23486] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4817'. [ 520.894270][T23480] IPVS: using max 34 ests per chain, 81600 per kthread [ 520.923356][T23490] netlink: 'syz.4.4819': attribute type 1 has an invalid length. [ 520.968940][T23479] veth1_to_bond: entered allmulticast mode [ 521.090478][T23494] bond4: (slave gretap1): making interface the new active one [ 521.100308][T23494] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 521.283256][T23509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4821'. [ 521.292517][T23508] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20003 [ 521.381245][T23511] netlink: 'syz.4.4825': attribute type 1 has an invalid length. [ 521.416700][T23511] bond5: entered promiscuous mode [ 521.422479][T23511] 8021q: adding VLAN 0 to HW filter on device bond5 [ 521.433174][T23511] bridge0: Device is already in use. [ 522.185680][T23573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.219556][T23574] xt_TCPMSS: Only works on TCP SYN packets [ 522.326621][T23581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.764708][T23609] netlink: 'syz.0.4855': attribute type 13 has an invalid length. [ 522.817492][T23609] gretap0: refused to change device tx_queue_len [ 522.829306][T23609] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 522.883955][T23616] ip6gre2: entered allmulticast mode [ 522.884416][T23618] netlink: 'syz.4.4859': attribute type 2 has an invalid length. [ 522.933970][T23618] !: entered promiscuous mode [ 523.166358][T23627] xt_limit: Overflow, try lower: 271964/0 [ 523.187921][T23631] netlink: 'syz.3.4864': attribute type 10 has an invalid length. [ 523.397271][T23638] netlink: 'syz.3.4866': attribute type 1 has an invalid length. [ 523.465508][T23638] 8021q: adding VLAN 0 to HW filter on device bond11 [ 523.504168][T23639] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 523.536308][T23638] bond11: entered promiscuous mode [ 523.551280][T23638] bond11: entered allmulticast mode [ 523.639754][T23643] netlink: 'syz.3.4867': attribute type 2 has an invalid length. [ 523.672156][T23643] __nla_validate_parse: 74 callbacks suppressed [ 523.672179][T23643] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4867'. [ 523.731440][T23646] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.4868'. [ 523.751381][T23647] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.4868'. [ 523.870983][T23651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.092757][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 524.101534][ C1] lec:lec_tx_timeout: lec0 [ 524.106659][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 524.169867][T23672] xt_addrtype: ipv6 does not support BROADCAST matching [ 524.185314][T23673] xt_addrtype: ipv6 does not support BROADCAST matching [ 524.220035][T23672] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4876'. [ 525.250091][T23722] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 525.492458][T23727] 8021q: VLANs not supported on tunl0 [ 525.958308][T23747] pimreg: entered allmulticast mode [ 525.968575][T23749] validate_nla: 4 callbacks suppressed [ 525.968593][T23749] netlink: 'syz.4.4902': attribute type 3 has an invalid length. [ 526.034212][T23749] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4902'. [ 526.089053][T23756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4905'. [ 526.402698][T23781] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4910'. [ 526.437440][T23785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4912'. [ 526.482949][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4912'. [ 526.499016][T23785] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4912'. [ 526.805568][T23810] syzkaller1: entered promiscuous mode [ 526.818181][T23810] syzkaller1: entered allmulticast mode [ 526.928936][T23819] tipc: New replicast peer: 255.255.255.255 [ 526.936475][T23819] tipc: Enabled bearer , priority 10 [ 526.977438][T23821] netlink: 'syz.2.4922': attribute type 10 has an invalid length. [ 527.240350][T23840] block nbd0: Unsupported socket: should be TCP or UNIX. [ 527.262581][T23840] netlink: 'syz.1.4928': attribute type 2 has an invalid length. [ 527.378162][T23851] delete_channel: no stack [ 527.966888][T23877] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 528.052212][ T797] tipc: Node number set to 1321499893 [ 528.498666][T23903] bond12: Unable to set peer notification delay as MII monitoring is disabled [ 528.510746][T23903] bond12 (unregistering): Released all slaves [ 528.543225][T23906] netlink: 'syz.1.4945': attribute type 1 has an invalid length. [ 528.555269][T23906] netlink: 'syz.1.4945': attribute type 6 has an invalid length. [ 528.663824][T23912] syzkaller1: entered promiscuous mode [ 528.669656][T23912] syzkaller1: entered allmulticast mode [ 528.684455][T23912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.790157][T23918] __nla_validate_parse: 12 callbacks suppressed [ 528.790179][T23918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4950'. [ 528.990894][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4953'. [ 529.022150][T23932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4953'. [ 529.050930][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4953'. [ 529.068112][T23932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4953'. [ 529.122143][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 529.130361][ C1] lec:lec_tx_timeout: lec0 [ 529.137161][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 529.279099][T23955] netlink: 'syz.0.4960': attribute type 21 has an invalid length. [ 529.308437][T23955] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4960'. [ 529.492287][T23972] netlink: 'syz.0.4966': attribute type 2 has an invalid length. [ 529.543459][T23974] xt_hashlimit: size too large, truncated to 1048576 [ 529.709134][T23987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4972'. [ 529.749499][T23987] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4972'. [ 529.773873][T23987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4972'. [ 529.822746][T23996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4973'. [ 529.895365][T23987] IPVS: sh: FWM 3 0x00000003 - no destination available [ 529.931413][T23996] netlink: 'syz.2.4973': attribute type 1 has an invalid length. [ 530.108884][T23998] bond5: (slave gretap2): making interface the new active one [ 530.148043][T23998] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 530.361909][T24017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 530.440263][T24019] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 530.740315][T24028] Cannot find del_set index 49151 as target [ 532.888575][T24162] H: renamed from dummy0 [ 533.240626][T24181] netlink: 'syz.3.5032': attribute type 1 has an invalid length. [ 533.254482][T24182] netlink: 'syz.2.5030': attribute type 2 has an invalid length. [ 533.304554][T24181] bond12: entered promiscuous mode [ 533.310830][T24181] 8021q: adding VLAN 0 to HW filter on device bond12 [ 533.404122][T24181] bond12: (slave bridge7): making interface the new active one [ 533.411847][T24181] bridge7: entered promiscuous mode [ 533.428255][T24181] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 533.495364][T24190] netlink: 'syz.2.5035': attribute type 9 has an invalid length. [ 533.743686][T24201] openvswitch: netlink: Flow key attr not present in new flow. [ 533.797711][T24212] netlink: 'syz.2.5040': attribute type 1 has an invalid length. [ 533.848301][T24213] __nla_validate_parse: 15 callbacks suppressed [ 533.848324][T24213] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5040'. [ 533.882378][T24218] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5040'. [ 534.077841][T24228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5045'. [ 534.125214][T24237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5048'. [ 534.135106][T24237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5048'. [ 534.148178][T24237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5048'. [ 534.152298][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 534.159253][T24237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5048'. [ 534.165442][ C1] lec:lec_tx_timeout: lec0 [ 534.166149][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 534.189284][T24239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5047'. [ 534.215780][T24232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5044'. [ 534.258676][T24237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5048'. [ 534.514597][T24253] xt_TCPMSS: Only works on TCP SYN packets [ 534.620304][T24263] netlink: 'syz.3.5055': attribute type 12 has an invalid length. [ 534.628570][T24263] netlink: 'syz.3.5055': attribute type 29 has an invalid length. [ 534.646318][T24263] netlink: 'syz.3.5055': attribute type 2 has an invalid length. [ 535.153380][T24292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.250503][T24299] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20000 [ 535.259200][T24296] lo speed is unknown, defaulting to 1000 [ 535.357536][T24303] netlink: 'syz.0.5067': attribute type 2 has an invalid length. [ 536.091052][T24330] openvswitch: netlink: Duplicate or invalid key (type 0). [ 536.128888][T24330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.639817][T24357] tipc: Enabling of bearer rejected, failed to enable media [ 537.069793][T24382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.293565][T24388] tipc: Enabled bearer , priority 0 [ 537.425319][T24403] netlink: 'syz.3.5092': attribute type 23 has an invalid length. [ 537.464662][T24388] syzkaller0: entered promiscuous mode [ 537.470384][T24388] syzkaller0: entered allmulticast mode [ 537.499602][T24388] tipc: Resetting bearer [ 537.548188][T24407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.595275][T24387] tipc: Resetting bearer [ 539.192172][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 539.200349][ C1] lec:lec_tx_timeout: lec0 [ 539.205214][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 539.379142][T24387] tipc: Disabling bearer [ 539.392585][T24368] __nla_validate_parse: 8 callbacks suppressed [ 539.392611][T24368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5083'. [ 539.443118][T24368] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 539.514780][T24430] netlink: 'syz.1.5096': attribute type 1 has an invalid length. [ 539.653608][T24436] netlink: 'syz.0.5097': attribute type 2 has an invalid length. [ 539.712571][T24436] !: entered promiscuous mode [ 539.807392][T24452] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 539.829241][T24452] bond7 (unregistering): Released all slaves [ 540.338852][T24485] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 540.452670][T24492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5111'. [ 540.463400][T24492] syzkaller0: entered promiscuous mode [ 540.469635][T24492] syzkaller0: entered allmulticast mode [ 540.526824][T24496] netlink: 'syz.2.5113': attribute type 27 has an invalid length. [ 540.535824][T24496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5113'. [ 540.599238][T24496] netlink: 'syz.2.5113': attribute type 1 has an invalid length. [ 540.850143][T24515] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5120'. [ 540.860212][T24515] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5120'. [ 540.869757][T24515] netlink: 'syz.1.5120': attribute type 5 has an invalid length. [ 540.878067][T24515] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5120'. [ 541.000935][T24519] openvswitch: netlink: Duplicate or invalid key (type 0). [ 541.026926][T24519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.039280][T24513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5119'. [ 541.048833][T24513] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5119'. [ 541.060783][T24513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5119'. [ 541.077146][T24522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5120'. [ 541.218655][T24519] lo speed is unknown, defaulting to 1000 [ 541.277275][T24523] syzkaller0: entered promiscuous mode [ 541.283118][T24523] syzkaller0: entered allmulticast mode [ 541.423155][T24530] hsr_slave_0 (unregistering): left promiscuous mode [ 541.475249][T24535] ip6t_REJECT: ECHOREPLY is not supported [ 541.481571][T24535] netlink: 'syz.3.5124': attribute type 1 has an invalid length. [ 541.490251][T24535] netlink: 'syz.3.5124': attribute type 2 has an invalid length. [ 543.112467][T24611] netlink: 'syz.1.5148': attribute type 4 has an invalid length. [ 543.523595][T24646] syz.1.5158: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 543.565699][T24646] CPU: 1 UID: 0 PID: 24646 Comm: syz.1.5158 Not tainted syzkaller #0 PREEMPT(full) [ 543.565736][T24646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 543.565753][T24646] Call Trace: [ 543.565763][T24646] [ 543.565773][T24646] dump_stack_lvl+0xe8/0x150 [ 543.565816][T24646] warn_alloc+0x249/0x340 [ 543.565845][T24646] ? stack_trace_save+0xa9/0x100 [ 543.565874][T24646] ? __pfx_warn_alloc+0x10/0x10 [ 543.565908][T24646] ? kasan_save_track+0x4f/0x80 [ 543.565930][T24646] ? kasan_save_track+0x3e/0x80 [ 543.565953][T24646] ? __kasan_kmalloc+0x93/0xb0 [ 543.565978][T24646] ? __kmalloc_cache_noprof+0x31c/0x660 [ 543.566004][T24646] ? xskq_create+0x56/0x170 [ 543.566030][T24646] ? xsk_setsockopt+0x54c/0x990 [ 543.566053][T24646] ? do_sock_setsockopt+0x17c/0x1b0 [ 543.566096][T24646] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 543.566122][T24646] ? do_syscall_64+0x14d/0xf80 [ 543.566340][T24646] __vmalloc_node_range_noprof+0x132/0x1730 [ 543.566403][T24646] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 543.566435][T24646] ? __kasan_kmalloc+0x93/0xb0 [ 543.566468][T24646] vmalloc_user_noprof+0xad/0xe0 [ 543.566494][T24646] ? xskq_create+0xbf/0x170 [ 543.566520][T24646] xskq_create+0xbf/0x170 [ 543.566552][T24646] xsk_init_queue+0x8a/0xe0 [ 543.566580][T24646] xsk_setsockopt+0x54c/0x990 [ 543.566605][T24646] ? __pfx_xsk_setsockopt+0x10/0x10 [ 543.566635][T24646] ? __pfx_aa_sk_perm+0x10/0x10 [ 543.566672][T24646] ? aa_sock_opt_perm+0xff/0x1a0 [ 543.566709][T24646] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 543.566735][T24646] ? __pfx_xsk_setsockopt+0x10/0x10 [ 543.566759][T24646] do_sock_setsockopt+0x17c/0x1b0 [ 543.566790][T24646] __x64_sys_setsockopt+0x13d/0x1b0 [ 543.566822][T24646] do_syscall_64+0x14d/0xf80 [ 543.566847][T24646] ? trace_irq_disable+0x3b/0x150 [ 543.566864][T24646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.566885][T24646] ? clear_bhb_loop+0x40/0x90 [ 543.566972][T24646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.566996][T24646] RIP: 0033:0x7f88e4b9c819 [ 543.567015][T24646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.567033][T24646] RSP: 002b:00007f88e5a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 543.567054][T24646] RAX: ffffffffffffffda RBX: 00007f88e4e15fa0 RCX: 00007f88e4b9c819 [ 543.567069][T24646] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 543.567081][T24646] RBP: 00007f88e4c32c91 R08: 0000000000000004 R09: 0000000000000000 [ 543.567094][T24646] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.567107][T24646] R13: 00007f88e4e16038 R14: 00007f88e4e15fa0 R15: 00007ffea9b88628 [ 543.567139][T24646] [ 543.571769][T24646] Mem-Info: [ 543.880462][T24646] active_anon:7237 inactive_anon:0 isolated_anon:0 [ 543.880462][T24646] active_file:3209 inactive_file:40110 isolated_file:0 [ 543.880462][T24646] unevictable:768 dirty:58 writeback:0 [ 543.880462][T24646] slab_reclaimable:13482 slab_unreclaimable:125174 [ 543.880462][T24646] mapped:30549 shmem:2581 pagetables:1423 [ 543.880462][T24646] sec_pagetables:0 bounce:0 [ 543.880462][T24646] kernel_misc_reclaimable:0 [ 543.880462][T24646] free:1296610 free_pcp:9912 free_cma:0 [ 543.972114][T24646] Node 0 active_anon:31548kB inactive_anon:0kB active_file:12836kB inactive_file:160236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124696kB dirty:228kB writeback:0kB shmem:11288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16132kB pagetables:5564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 544.017401][T24646] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 544.072412][T24646] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.171926][T24646] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 544.178629][T24646] Node 0 DMA32 free:1228972kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34960kB inactive_anon:0kB active_file:12836kB inactive_file:160236kB unevictable:1536kB writepending:228kB zspages:0kB present:3129332kB managed:2552620kB mlocked:0kB bounce:0kB free_pcp:33760kB local_pcp:13628kB free_cma:0kB [ 544.212637][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 544.212673][ C1] lec:lec_tx_timeout: lec0 [ 544.225617][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 544.235477][T24646] lowmem_reserve[]: 0 0 0 0 0 [ 544.240386][T24646] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 544.312319][T24646] lowmem_reserve[]: 0 0 0 0 0 [ 544.320081][T24646] Node 1 Normal free:3942188kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.401932][T24646] lowmem_reserve[]: 0 0 0 0 0 [ 544.407498][T24646] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 544.451611][T24646] Node 0 DMA32: 10214*4kB (UM) 5596*8kB (UME) 2763*16kB (UME) 568*32kB (UM) 393*64kB (UM) 281*128kB (UME) 402*256kB (UM) 376*512kB (UME) 291*1024kB (UME) 121*2048kB (UM) 44*4096kB (UM) = 1230568kB [ 544.519211][T24667] __nla_validate_parse: 7 callbacks suppressed [ 544.519233][T24667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5166'. [ 544.542467][T24646] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 544.564531][T24646] Node 1 Normal: 1*4kB (U) 1*8kB (M) 10*16kB (UM) 4*32kB (UM) 8*64kB (UM) 6*128kB (UM) 5*256kB (UM) 6*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3942188kB [ 544.627378][T24646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.698309][T24646] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 544.709079][T24646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.723822][T24646] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 544.752815][T24646] 44705 total pagecache pages [ 544.757588][T24646] 0 pages in swap cache [ 544.762376][T24646] Free swap = 124996kB [ 544.767468][T24646] Total swap = 124996kB [ 544.771792][T24646] 2097051 pages RAM [ 544.828548][T24646] 0 pages HighMem/MovableOnly [ 544.833474][T24646] 427062 pages reserved [ 544.837861][T24646] 0 pages cma reserved [ 544.989175][T24688] netlink: 'syz.0.5172': attribute type 1 has an invalid length. [ 545.040037][T24689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5175'. [ 545.050435][T24689] block nbd0: reconnected socket [ 545.059152][T24689] netlink: 'syz.1.5175': attribute type 1 has an invalid length. [ 545.072198][ T5840] block nbd0: Receive control failed (result -32) [ 545.240450][T24699] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5178'. [ 545.279069][T24701] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5177'. [ 545.326099][T24701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5177'. [ 545.384815][T24707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5180'. [ 545.587297][T24720] netlink: 'syz.1.5185': attribute type 12 has an invalid length. [ 545.600236][T24720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5185'. [ 545.697710][T24726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5188'. [ 545.747402][T24712] lec:lec_atm_close: lec0: Shut down! [ 545.828190][T24729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5187'. [ 545.922867][T24732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 545.930199][T24732] IPv6: NLM_F_CREATE should be set when creating new route [ 545.937754][T24732] IPv6: NLM_F_CREATE should be set when creating new route [ 545.945100][T24732] IPv6: NLM_F_CREATE should be set when creating new route [ 545.972843][T24732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 546.188333][T24738] netlink: 'syz.1.5191': attribute type 10 has an invalid length. [ 546.198527][T24748] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5194'. [ 546.458205][T24762] netlink: 'syz.3.5199': attribute type 64 has an invalid length. [ 546.752455][T24780] netlink: 'syz.0.5204': attribute type 4 has an invalid length. [ 547.359573][T24805] netlink: 'syz.4.5212': attribute type 7 has an invalid length. [ 547.372917][T24805] netlink: 'syz.4.5212': attribute type 7 has an invalid length. [ 547.540586][T24819] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 547.677334][T24832] netlink: 'syz.4.5220': attribute type 1 has an invalid length. [ 547.714860][T24832] 8021q: adding VLAN 0 to HW filter on device bond6 [ 547.760146][T24832] bond6: (slave geneve2): making interface the new active one [ 547.770391][T24832] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 547.792753][ T82] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.820528][ T82] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.881482][ T82] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.907168][ T82] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.030450][T24846] syzkaller1: entered promiscuous mode [ 548.278083][T24854] team0: Port device dummy0 removed [ 548.508901][T24882] syzkaller0: entered promiscuous mode [ 548.515113][T24882] syzkaller0: entered allmulticast mode [ 549.207377][T24915] netlink: 'syz.0.5245': attribute type 3 has an invalid length. [ 549.305423][T24919] 8021q: adding VLAN 0 to HW filter on device bond7 [ 549.626571][T24951] __nla_validate_parse: 37 callbacks suppressed [ 549.626591][T24951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5254'. [ 549.792698][T24961] netlink: 396 bytes leftover after parsing attributes in process `syz.3.5257'. [ 549.897343][T24966] x_tables: duplicate underflow at hook 1 [ 550.055548][T24978] vxcan1: entered promiscuous mode [ 550.210764][T24987] bond7: entered promiscuous mode [ 550.219954][T24987] 8021q: adding VLAN 0 to HW filter on device bond7 [ 550.252972][T24986] ip6erspan0: entered promiscuous mode [ 550.262933][T24986] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 550.328623][T24997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5267'. [ 550.487240][T25009] validate_nla: 2 callbacks suppressed [ 550.487262][T25009] netlink: 'syz.0.5268': attribute type 13 has an invalid length. [ 550.518499][T25009] netlink: 'syz.0.5268': attribute type 10 has an invalid length. [ 550.683643][T25015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5272'. [ 550.711726][T25012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5271'. [ 550.728378][T25015] bond5: entered promiscuous mode [ 550.734561][T25015] 8021q: adding VLAN 0 to HW filter on device bond5 [ 550.745056][T25017] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20001 [ 550.752910][T25015] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5272'. [ 550.830578][T25012] vlan6: entered allmulticast mode [ 550.863331][T25012] bridge9: entered allmulticast mode [ 550.888062][T25026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5274'. [ 551.052302][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5310 ms [ 551.060461][ C1] lec:lec_tx_timeout: lec0 [ 551.065405][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 551.141173][T25035] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.256245][T25035] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.368323][T25035] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.504092][T25060] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5286'. [ 551.546097][T25035] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.591950][T25062] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5287'. [ 551.666450][T25065] Bluetooth: MGMT ver 1.23 [ 551.729034][T10801] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.769762][T10801] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.779255][T25072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5291'. [ 551.814530][T10801] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.863452][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.928281][T25083] netlink: 'syz.1.5293': attribute type 1 has an invalid length. [ 551.990508][T25083] 8021q: adding VLAN 0 to HW filter on device bond5 [ 552.017050][T25083] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 552.390181][T25114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.606180][T25129] netlink: 'syz.1.5311': attribute type 1 has an invalid length. [ 552.663027][T25129] 8021q: adding VLAN 0 to HW filter on device bond6 [ 552.705178][T25133] netlink: 'syz.0.5312': attribute type 15 has an invalid length. [ 553.137291][T25125] netlink: 'syz.4.5309': attribute type 1 has an invalid length. [ 553.550264][T25176] tc_dump_action: action bad kind [ 553.556395][T25180] netlink: 'syz.2.5328': attribute type 1 has an invalid length. [ 553.577145][T25180] netlink: 'syz.2.5328': attribute type 1 has an invalid length. [ 553.602368][T25180] netlink: 'syz.2.5328': attribute type 8 has an invalid length. [ 553.676012][ T5840] block nbd3: Receive control failed (result -1) [ 553.696937][T25191] Bluetooth: hci2: Opcode 0x0c1a failed: -22 [ 554.425161][T25233] 8021q: VLANs not supported on ip6_vti0 [ 554.451813][T25235] sctp: [Deprecated]: syz.1.5347 (pid 25235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.451813][T25235] Use struct sctp_sack_info instead [ 554.675597][T25244] lo speed is unknown, defaulting to 1000 [ 554.703684][T25252] __nla_validate_parse: 18 callbacks suppressed [ 554.703704][T25252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5353'. [ 554.757740][T25255] tipc: Enabling of bearer rejected, failed to enable media [ 554.769408][T25256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5353'. [ 554.848663][T25256] team0: Port device team_slave_0 removed [ 554.909018][T25261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.957557][T25261] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5356'. [ 556.029464][T25308] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5369'. [ 556.092291][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 556.100356][ C1] lec:lec_tx_timeout: lec0 [ 556.112165][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 556.206312][T25320] netlink: 300 bytes leftover after parsing attributes in process `syz.1.5373'. [ 556.290003][T25323] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 556.440883][T25333] netlink: 'syz.2.5376': attribute type 4 has an invalid length. [ 556.691143][T25350] veth0_virt_wifi: mtu less than device minimum [ 556.999807][T25369] syzkaller0: entered promiscuous mode [ 557.083351][T25381] netlink: 'syz.0.5386': attribute type 1 has an invalid length. [ 557.106584][T25381] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5386'. [ 557.120335][T25381] netlink: 'syz.0.5386': attribute type 1 has an invalid length. [ 557.157373][T25381] netlink: 'syz.0.5386': attribute type 8 has an invalid length. [ 557.223386][T25381] netlink: 582 bytes leftover after parsing attributes in process `syz.0.5386'. [ 557.239491][T25390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.273953][T25390] syzkaller1: entered promiscuous mode [ 557.293115][T25390] syzkaller1: entered allmulticast mode [ 557.434023][T25393] syzkaller1: entered promiscuous mode [ 557.560153][T25409] xt_CONNSECMARK: invalid mode: 0 [ 557.863280][T25417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5397'. [ 557.980322][T25424] netlink: 'syz.0.5398': attribute type 29 has an invalid length. [ 558.019141][T25424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5398'. [ 558.037900][T25424] netlink: 'syz.0.5398': attribute type 29 has an invalid length. [ 558.369455][T25439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5401'. [ 558.665704][T25454] netlink: 'syz.3.5407': attribute type 1 has an invalid length. [ 558.680447][T25454] netlink: 'syz.3.5407': attribute type 2 has an invalid length. [ 558.919836][T25467] netlink: 'syz.3.5410': attribute type 11 has an invalid length. [ 559.007525][T25472] sit0: entered promiscuous mode [ 559.015570][T25472] sit0: left allmulticast mode [ 559.026941][T25472] netlink: 'syz.2.5412': attribute type 1 has an invalid length. [ 559.109361][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.128684][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.189862][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.209307][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.257665][T25491] ipvlan2: entered allmulticast mode [ 559.265322][T25491] batman_adv: batadv0: Adding interface: ipvlan2 [ 559.271710][T25491] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.304831][T25491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.318343][T25491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.354399][T25491] batman_adv: batadv0: Interface activated: ipvlan2 [ 559.529174][T25511] openvswitch: netlink: Duplicate key (type 2). [ 559.830621][T25528] __nla_validate_parse: 10 callbacks suppressed [ 559.830641][T25528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5427'. [ 559.896868][T25529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.116591][T25546] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5432'. [ 560.135761][T25542] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 560.195116][T25540] bond7: entered promiscuous mode [ 560.200779][T25540] 8021q: adding VLAN 0 to HW filter on device bond7 [ 560.621863][T25576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5439'. [ 560.718378][T25576] tipc: Resetting bearer [ 560.810744][T25585] xt_limit: Overflow, try lower: 271964/0 [ 560.820775][T25585] x_tables: duplicate entry at hook 3 [ 560.886827][T25578] netem: change failed [ 560.891596][ T1331] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 560.913946][ T1331] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 560.932497][ T1331] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 560.941509][ T1331] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 561.011752][T25588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5444'. [ 561.122106][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 561.130315][ C1] lec:lec_tx_timeout: lec0 [ 561.135179][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 561.234450][T25602] syzkaller0: entered promiscuous mode [ 561.240124][T25602] syzkaller0: entered allmulticast mode [ 561.361846][T25612] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5454'. [ 561.383455][T25612] netlink: 21 bytes leftover after parsing attributes in process `syz.0.5454'. [ 561.399540][T25612] netlink: 21 bytes leftover after parsing attributes in process `syz.0.5454'. [ 561.439554][T25615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5453'. [ 561.450273][T25609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5452'. [ 561.473667][T25618] validate_nla: 5 callbacks suppressed [ 561.473693][T25618] netlink: 'syz.4.5455': attribute type 61 has an invalid length. [ 561.491048][T25618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5455'. [ 561.668761][T25630] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 562.016762][T25658] netlink: 'syz.2.5468': attribute type 1 has an invalid length. [ 562.086646][T25659] bond9: Unable to set up delay as MII monitoring is disabled [ 562.102887][T25659] bond9 (unregistering): Released all slaves [ 562.131187][T25658] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 563.106504][T25727] netlink: 'syz.2.5489': attribute type 83 has an invalid length. [ 563.155347][T25725] syzkaller1: entered promiscuous mode [ 563.161113][T25725] syzkaller1: entered allmulticast mode [ 563.357188][T25745] netlink: 'syz.4.5493': attribute type 1 has an invalid length. [ 563.636993][T25756] sctp: [Deprecated]: syz.4.5496 (pid 25756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 563.636993][T25756] Use struct sctp_sack_info instead [ 563.656004][T25755] tunl0: Caught tx_queue_len zero misconfig [ 564.134649][T25786] netlink: 'syz.1.5504': attribute type 1 has an invalid length. [ 564.159610][T25786] tipc: Resetting bearer [ 564.275135][T25792] sock: sock_timestamping_bind_phc: sock not bind to device [ 564.697481][T25809] syzkaller0: entered promiscuous mode [ 564.728732][T25809] syzkaller0: entered allmulticast mode [ 565.296192][T25838] x_tables: duplicate underflow at hook 1 [ 565.501420][T25839] tipc: New replicast peer: 255.255.255.255 [ 565.508218][T25839] tipc: Enabled bearer , priority 10 [ 565.608149][T25824] __nla_validate_parse: 14 callbacks suppressed [ 565.608173][T25824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5511'. [ 565.671284][T25859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5521'. [ 565.948556][T25870] netlink: 'syz.1.5526': attribute type 21 has an invalid length. [ 565.995635][T25868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5525'. [ 566.105829][T25878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5529'. [ 566.115876][T25878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5529'. [ 566.142080][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 566.150226][ C1] lec:lec_tx_timeout: lec0 [ 566.155359][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 566.194742][T25882] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5530'. [ 566.247365][T25887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5532'. [ 566.414466][T25898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5535'. [ 566.423554][T25897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5534'. [ 566.440006][T25897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5534'. [ 566.464491][T25901] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 566.707629][T25920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.744802][T25916] netlink: 'syz.1.5541': attribute type 5 has an invalid length. [ 567.204014][T25957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.403966][T25969] netlink: zone id is out of range [ 567.414132][T25969] netlink: del zone limit has 4 unknown bytes [ 567.553426][T25973] netlink: 'syz.4.5560': attribute type 21 has an invalid length. [ 567.574412][T25973] IPv6: NLM_F_CREATE should be specified when creating new route [ 567.587214][T25973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 567.594561][T25973] IPv6: NLM_F_CREATE should be set when creating new route [ 567.601867][T25973] IPv6: NLM_F_CREATE should be set when creating new route [ 567.609301][T25973] IPv6: NLM_F_CREATE should be set when creating new route [ 567.732742][T25984] netlink: 'syz.2.5564': attribute type 10 has an invalid length. [ 567.763252][T25984] H: left allmulticast mode [ 567.768576][T25984] batman_adv: batadv0: Removing interface: H [ 567.798574][T25984] H: entered allmulticast mode [ 567.805930][T25984] team0: Port device H added [ 567.815777][T25984] netlink: 'syz.2.5564': attribute type 10 has an invalid length. [ 567.879266][T25984] netlink: 'syz.2.5564': attribute type 10 has an invalid length. [ 567.934144][T25984] netlink: 'syz.2.5564': attribute type 10 has an invalid length. [ 567.982543][T25984] netlink: 'syz.2.5564': attribute type 10 has an invalid length. [ 568.018028][T25984] netlink: 'syz.2.5564': attribute type 10 has an invalid length. [ 568.053964][T25984] netlink: 'syz.2.5564': attribute type 10 has an invalid length. [ 568.101620][T25984] netlink: 'syz.2.5564': attribute type 10 has an invalid length. [ 568.161271][T26010] sit1: entered promiscuous mode [ 568.220977][T26010] sit1: entered allmulticast mode [ 568.386050][T26026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 569.754976][T26113] x_tables: unsorted underflow at hook 4 [ 569.967848][T26125] lo: entered allmulticast mode [ 570.155073][T26141] SET target dimension over the limit! [ 570.171259][T26141] IPVS: set_ctl: invalid protocol: 41 172.30.0.4:20004 [ 570.327845][T26102] lec:lec_atm_close: lec0: Shut down! [ 570.784357][T26188] __nla_validate_parse: 16 callbacks suppressed [ 570.784378][T26188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5620'. [ 570.862438][T26192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5620'. [ 571.066388][T26204] nbd: error processing sock list [ 571.291822][T26225] sctp: [Deprecated]: syz.3.5632 (pid 26225) Use of int in maxseg socket option. [ 571.291822][T26225] Use struct sctp_assoc_value instead [ 571.325975][T26227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5633'. [ 571.335476][T26227] hsr_slave_0: left promiscuous mode [ 571.341921][T26227] hsr_slave_1: left promiscuous mode [ 571.352927][T16511] unregister_netdevice: waiting for bond1 to become free. Usage count = 2 [ 571.635337][T26189] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 571.645179][T26189] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 576.092415][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 576.100649][ C1] lec:lec_tx_timeout: lec0 [ 576.105435][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 581.112174][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 581.120332][ C1] lec:lec_tx_timeout: lec0 [ 581.125232][ C1] lec:lec_start_xmit: lec0:No lecd attached