last executing test programs: 6.79851833s ago: executing program 4 (id=6225): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000100)="89e7ee2c21fe62a3b47380c988ca4b5ed95f5ee4142df6640b27fb4b33be3344a5f1d3b5810dcdf848ed5e4226c3d30d251a0d83f486ec", 0x37}], 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) close(0x3) 4.107436256s ago: executing program 4 (id=6240): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x90) r1 = socket$kcm(0x10, 0xf, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1842, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, 0x0, 0x32}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcc2}, 0x1c) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0xe0, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_USERDATA={0xc3, 0x6, "f6d41f997d07c00dadceddcee29e6d6f1dd14a72acec75a450f396d2ac2a3a0f4c63d2938a5209e90dd798e9049b8821bb2edffe7cceac57315120f3b3bdcbb7f0d752d6e7ec135985d9d8618e6de93bd50a01d16905a2760c3927d002cef66905496099c17935abf1641834f2d61200e252dc2a97a8f8465da6afe4454f665e5bd7fac1b2c54695fb237e506b726c30b71c127a39953116e56c30fdb02e242e3bf2c4a25bfdadc2f95435b3ea8ced652107f57c7dc14131ab3638c3ff4686"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0xd4, 0x3, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_USERDATA={0xb0, 0xc, "b7e01d7b22e242eadef581cdebd2f38967e7b35cd4a98120862d7abfc61c1e16de6440a1ff0d9f809f79d38254b051a4da33c04948cb49c69060a5440a16d0332ef4d4766929ea5209defbe54d7c7983efc236c7e8179df00008403cd61332e55701c1a74540678718d46a89b26bf82957b330d7e087514a9939cd3c4aa268917d76a69f55b62e846b75c5d784f1215ffd6dac1fe90a4717c1601941dbf660d8bd90df6d449f093e3bb902db"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x1fc}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f72024fc60", 0x14}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r6, r0}) syz_emit_ethernet(0x1de, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) 3.888098918s ago: executing program 4 (id=6244): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x804) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_proto_private(r3, 0x8b15, &(0x7f0000000080)) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40090) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) (async) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x20000000) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) r6 = socket(0x14, 0x2, 0x4) bind$alg(r6, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x14, 0x1, 0x6) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000d00)={0x0, 0x9, 0x7}) 3.741135318s ago: executing program 4 (id=6245): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34ca11b5c7c3830af6b26868600f042ff"}]}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x300}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x4c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, @in={0x2, 0x0, @multicast2}], 0x2c) r4 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001480)={0x0, 0x1c, &(0x7f00000012c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000014c0)=0x10) 3.561642963s ago: executing program 4 (id=6247): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x6, 0x1c10a1, 0x0, 0x30}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xce, &(0x7f0000000100)=""/206, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 3.432936065s ago: executing program 2 (id=6249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a40)=@base={0x1c, 0x4, 0x5, 0x6, 0x0, r0, 0xffffff80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000980)={0x0, 0xfffffffffffffd54, &(0x7f0000000b40)={&(0x7f00000008c0)=@setlink={0x30, 0x13, 0x709, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x80}]}, 0x30}}, 0x0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000008c0)={@tipc=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}, 0x2}}, {&(0x7f0000000780)=""/56, 0x38}, &(0x7f00000007c0), 0x4}, 0xa0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000002c0), &(0x7f0000001840)=@udp6=r2}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fa832134e7e082ffffffa691", @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="1c005a80180001801400030024000700080001000800b40405000f00"], 0x38}}, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000ffff0000f7ffffff1a00000000220000", @ANYRES32=r0, @ANYBLOB="0725d1a8f3205628d200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000040000000a00"/28], 0x50) (async) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x18, &(0x7f0000000380)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa5}, @alu={0x7, 0x0, 0xa, 0x6, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_fd={0x18, 0x8, 0x1, 0x0, r9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}, @generic={0x1, 0x8, 0x5, 0x8cb, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}], &(0x7f0000000080)='GPL\x00', 0x9da5, 0x84, &(0x7f0000000500)=""/132, 0x41000, 0x2, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xcdd, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000600)=[r0, r1, r0, r0, r0, 0x1], &(0x7f0000000640)=[{0x1, 0x2, 0xb, 0xb}, {0x2, 0x5, 0x6, 0x3}, {0x4, 0x1, 0x3, 0x5}, {0x2, 0x1, 0xe, 0x8}, {0x2, 0x1, 0xd, 0x1}, {0x3, 0x1, 0x8, 0x7}, {0x3, 0x1, 0xa, 0x4}], 0x10, 0x81}, 0x94) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'wg1\x00', @remote}) r13 = socket$pppl2tp(0x18, 0x1, 0x1) close(r13) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) connect$pppl2tp(r13, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) write$tun(r5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="016f0800010000000000140000004500003800000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9a00000890780018de43e0b27240fd1b2d1093090300050a0000000000000040000000"], 0x46) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3.343716039s ago: executing program 4 (id=6250): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) unshare(0x4000100) r0 = socket(0x8, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 3.251742754s ago: executing program 2 (id=6251): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_delroute={0x34, 0x19, 0x200, 0x70bd29, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x6, 0x0, 0x1, 0xff, 0x3, 0xc00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8090}, 0x4004040) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000140)={'netpci0\x00', 0x2}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448df, &(0x7f0000000180)="8153b1e06ee25c7830e56ad0d6beb8a21dcd6d8667278afc7e6423f05fa17df50bdec558de74d4d4a100251d29be08c0119df3d6c1fcf66ee11689fe4b039ccfb91179a9146c8ff0c4cd72d65fab7665cfa63cd3cff25534ebc73affd33afaec5abd4601e580d2086c2609c7c38a23435815b816a14dd28a718ddb364870c3c23cc6c00b05a65fd80e9606a86edc3997c5c4c33056b39163eebf3ac4b3eda62e2e45676d0ea8b9dab42441c4f9") ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000240)="bc51d8455fb5db41c7a52f81ea5808341bdf4d9b878099fe37928f072bc5fa4bcf6f69a2ce8dfccfd2de") r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0x1, 0x3}, 0x6) close(r3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @empty, @initdev}, &(0x7f0000000300)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', r5, 0x7, 0x0, 0x7, 0x4, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000440)={0x300, r8, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6897}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74cc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc71}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb9d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3caab99e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3cf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa523}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x407}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r9, 0x89e2) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0), 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x11, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000008c0)='GPL\x00', 0xb2, 0x0, 0x0, 0x100, 0x2, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000980)=[{0x0, 0x2, 0x8, 0x7}, {0x1, 0x82, 0x7, 0x5}], 0x10, 0x1000000}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000a80)={0xffffffffffffffff, r10, 0x0, r11}, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), r7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={0x1, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xd8, r12, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x48}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r0, 0x800, 0xffffff0b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf6}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x7, 0x8]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4008080) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, r0, 0xd10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4094}, 0x40) setsockopt$CAN_RAW_LOOPBACK(r11, 0x65, 0x3, &(0x7f0000001100), 0x4) 2.751700863s ago: executing program 2 (id=6254): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c000280080003"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000140)={0x4c}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@bridge_newneigh={0x2c, 0x1c, 0x401, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x2, 0x2c, 0x1}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r7 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r7, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x16, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000070000000000000055090100000000009500000000000000bf91fa0000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="06000000", @ANYRES16=r8, @ANYBLOB="00022cbd7000fbdbdf251200000008000300", @ANYRES32=r9, @ANYBLOB="0500c200090000000a0006000802110000000000"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40081) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d000100000000000000000004000080450011802fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7aeb"], 0x5c}], 0x1}, 0x0) (async) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000080)=""/9, 0x9}, &(0x7f00000000c0), 0x40}, 0x20) 2.463820629s ago: executing program 3 (id=6255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xb, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xb, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r0, 0x1e, 0x1, 0xfffffe00, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0]}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000280)=0x8, 0x4) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) 2.440639382s ago: executing program 2 (id=6256): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) 2.30395427s ago: executing program 3 (id=6258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000000)=0xf3f, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000000)=0xf3f, 0x4) recvmmsg(r2, &(0x7f0000006e40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x6b}}}}, [@NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0820ea86933afeffaf87bca1ddef2e9e20cb426beca1aeedf537a147759ef080"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="460d4cdb2f2dc68b77b64fd441f7fc8b"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5ae0e43f3a715103ccb6ee132c86a723"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0e3c0c0d7f28e35a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7eeb9261e4ec3fc5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "99119112d36a8eeb"}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x40001) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x6b}}}}, [@NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0820ea86933afeffaf87bca1ddef2e9e20cb426beca1aeedf537a147759ef080"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="460d4cdb2f2dc68b77b64fd441f7fc8b"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5ae0e43f3a715103ccb6ee132c86a723"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0e3c0c0d7f28e35a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7eeb9261e4ec3fc5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "99119112d36a8eeb"}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x40001) listen(r0, 0x0) (async) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) (async) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) sendmmsg$inet6(r0, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000001c0)="a78302c2f3", 0x5}], 0x1}}], 0x1, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000003dc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000ff0000000000000000160000000cba5eb10114000000140a050000000000000000000700000920000000160a01010000000000000000050000090900010073797a30000000002c000000180a01010000000000000000070000020900010073797a31000000000900020073797a2e0000000014000000080a0500000000000000000001000004200000000e0a01020000000000000000010000000900010073797a3100000000140000001100010000000000000000000000000a"], 0xd0}}, 0x0) 2.247827572s ago: executing program 2 (id=6259): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}}, &(0x7f0000000080)=0x80, 0x81000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000100)={r5, 0xffff, 0xb55, 0x38c, 0x0, 0x9, 0x70, 0x88, {0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7, 0x5, 0x5, 0x4, 0x7}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r5, 0x8220}, 0x8) close(r0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r6, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_FAMILY={0x5, 0xd, 0x22}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x64}, 0x1, 0x0, 0x0, 0x48401}, 0x4040000) 2.205673908s ago: executing program 1 (id=6260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000314010000000000000000000000000800410073cc66001400330073797a6b616c6c65723000000000000000000000000051810a0852377c924ea0c6000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000314010000000000000000000000000800410073cc66001400330073797a6b616c6c65723000000000000000000000000051810a0852377c924ea0c6000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 1.960070532s ago: executing program 2 (id=6261): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x7e6, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000002100)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0xa1, 0x0, @void}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x10, 0x7800, 0x8, 0x10001, {{0x21, 0x4, 0x2, 0x6, 0x84, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @local, {[@cipso={0x86, 0x24, 0x3, [{0x6, 0x8, "c26a3545b3bf"}, {0x0, 0x5, "767ef7"}, {0x7, 0xe, "5f2cb5fe2273bf7a452f4068"}, {0x0, 0x3, 'd'}]}, @timestamp_prespec={0x44, 0x1c, 0x8a, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x8068}, {@broadcast, 0xe}, {@rand_addr=0x64010102, 0x3}]}, @end, @ra={0x94, 0x4, 0x1}, @end, @generic={0x89, 0x10, "1f5755b5c9eb0fe16f46c0d07a1c"}, @timestamp={0x44, 0x18, 0x76, 0x0, 0xf, [0x0, 0x1, 0x1, 0x2, 0xfe81]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x10, 0x7800, 0x8, 0x10001, {{0x21, 0x4, 0x2, 0x6, 0x84, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @local, {[@cipso={0x86, 0x24, 0x3, [{0x6, 0x8, "c26a3545b3bf"}, {0x0, 0x5, "767ef7"}, {0x7, 0xe, "5f2cb5fe2273bf7a452f4068"}, {0x0, 0x3, 'd'}]}, @timestamp_prespec={0x44, 0x1c, 0x8a, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x8068}, {@broadcast, 0xe}, {@rand_addr=0x64010102, 0x3}]}, @end, @ra={0x94, 0x4, 0x1}, @end, @generic={0x89, 0x10, "1f5755b5c9eb0fe16f46c0d07a1c"}, @timestamp={0x44, 0x18, 0x76, 0x0, 0xf, [0x0, 0x1, 0x1, 0x2, 0xfe81]}]}}}}}) 1.955704407s ago: executing program 3 (id=6262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xb2, &(0x7f0000000300)=""/178, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{}, &(0x7f0000000280), &(0x7f0000000940)}, 0x20) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500004f3e5b8ea8aa0524fbcdbd4b947068a5912ee086deb634bc7617d4a0c3f8926c1cf03b46710ec62641cf050c4285cde09ccebcecad661d4a679a6f4949aa37b9375c135cf82175ba7c2e93c76e1f6804ff9bbf0d"], 0x3c}}, 0x0) r5 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r6 = accept4(r0, &(0x7f0000000140)=@ethernet={0x0, @local}, &(0x7f0000000000)=0x80, 0x80800) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$phonet(0x23, 0x2, 0x1) r9 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r9, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r10}}}], 0x20, 0x50}, 0x40880) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private2, @in=@rand_addr=0x64010101, 0x4e24, 0x0, 0x4e21, 0x3, 0x2, 0x20, 0x0, 0x33, 0x0, r10}, {0x1000, 0xfffffffffffffff9, 0x2, 0x4, 0xfffffffffffffffc, 0x3, 0xa9, 0x7ff}, {0x0, 0x6, 0x4c0}, 0x1ff, 0x6e6bbf, 0x2, 0x1, 0x3, 0x3}, {{@in=@empty, 0x4d6, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x3501, 0x0, 0x3, 0x3, 0x0, 0x101, 0x8}}, 0xe8) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000001c0)={r11, @in6={{0xa, 0x4e23, 0x9, @empty, 0x8}}, 0x3, 0x8000}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5d, 0xc, 0x4ce098d8, 0xfffffffc, r11}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r12, 0x915}, 0x8) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f00000003c0)={0x1, 0x7, 0x3d}) 1.848384362s ago: executing program 1 (id=6263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r1}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pS \x00'}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ab", 0x1}], 0x1, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x20040001) close(0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180090001006c617374000000001800028008000140000000090c0002400000fbff000000050900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 1.690948042s ago: executing program 1 (id=6264): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3, @ANYRES32=r0], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x25dfdbfc, {}, [@typed={0x32, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) 1.419774193s ago: executing program 1 (id=6265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003bc0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000003cc0)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003d00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250100000006000a114e240000060001004e20000008000800e0000002050003000000000008000600ffff06bf7f56f770c44e9c6fa8229e8e99c78d7a0d8259043faba43c88c625a550832d581d3da39172dc851dac1adef8676eac74fe0488aa6c1fb3ab0ad7dc000b891b7be50fc214a51995e6fa2dc89b0f5a4c0a59a25343e6da431767"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x30, 0x17, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000820}, 0x4004800) recvmmsg(r1, &(0x7f00000039c0)=[{{&(0x7f0000000040)=@alg, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/245, 0xf5}], 0x1, &(0x7f0000000300)=""/51, 0x33}, 0x4}, {{&(0x7f0000000340)=@rc, 0x80, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f0000000540)=""/176, 0xb0}, {&(0x7f0000000600)=""/104, 0x68}, {&(0x7f0000000680)=""/131, 0x83}, {&(0x7f0000000740)=""/148, 0x94}], 0x7}, 0xb902}, {{&(0x7f0000000880)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/216, 0xd8}], 0x1}, 0x40}, {{&(0x7f0000000a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)=""/2, 0x2}, {&(0x7f0000000b00)=""/236, 0xec}, {&(0x7f0000000c00)=""/71, 0x47}, {&(0x7f0000000c80)=""/44, 0x2c}, {&(0x7f0000000cc0)=""/196, 0xc4}], 0x5}, 0x3}, {{&(0x7f0000000ec0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/69, 0x45}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x2, &(0x7f0000002040)=""/3, 0x3}, 0x1}, {{&(0x7f0000002080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002100)=""/57, 0x39}, {&(0x7f0000002140)=""/246, 0xf6}, {&(0x7f0000002240)=""/72, 0x48}, {&(0x7f00000022c0)=""/88, 0x58}, {&(0x7f0000002340)=""/134, 0x86}], 0x5}, 0x3}, {{&(0x7f0000002480)=@tipc=@id, 0x80, &(0x7f0000003840)=[{&(0x7f0000002500)=""/193, 0xc1}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/33, 0x21}, {&(0x7f0000003640)=""/167, 0xa7}, {&(0x7f0000003700)=""/87, 0x57}, {&(0x7f0000003780)=""/135, 0x87}], 0x6, &(0x7f00000038c0)=""/234, 0xea}, 0x4}], 0x7, 0x40002000, &(0x7f0000003b80)={0x77359400}) 1.245593859s ago: executing program 0 (id=6266): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32, @ANYBLOB="06001100259b"], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, r5, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}]}, 0x30}}, 0x2) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ece65fbcee558600000000000000000000bbfe8000000000000000000000000000aa00030e22001690780203000000000000ffb00afe4e70"], 0x0) 1.020021567s ago: executing program 0 (id=6267): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x7d, &(0x7f0000000080), &(0x7f00000000c0)=0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) 963.859576ms ago: executing program 3 (id=6269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x9}, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x5421, 0x110e22ffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) 778.180885ms ago: executing program 0 (id=6270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff96, &(0x7f0000000040)={&(0x7f0000003140)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7}}, 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0x4845) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05fb00ffffffffffffff1f"], 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0xe, 0x3, 0x6, {{0x29, 0x4, 0x2, 0x39, 0xa4, 0x65, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @broadcast, {[@ssrr={0x89, 0x1f, 0x2d, [@empty, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x35}, @loopback, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast]}, @timestamp={0x44, 0x1c, 0x12, 0x0, 0x7, [0x1, 0xffffc0df, 0xffff, 0xfffffff6, 0x4, 0x10000000]}, @end, @lsrr={0x83, 0x13, 0x81, [@broadcast, @remote, @loopback, @multicast2]}, @rr={0x7, 0x13, 0xfe, [@broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x2c, 0xf8, 0x3, 0x5, [{@local, 0x2}, {@local, 0x72c}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xa}, {@rand_addr=0x64010102, 0xfffffffa}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x7800, 0x8000, 0x8, 0xffffffff, {{0xb, 0x4, 0x0, 0x25, 0x2c, 0x64, 0x0, 0xf, 0x4, 0x0, @broadcast, @multicast2, {[@cipso={0x86, 0x18, 0x1, [{0x5, 0x12, "c68132bd03e93b620c3f05d31e44503e"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'sit0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x700, 0x20, 0xfff, 0x1dea, {{0x41, 0x4, 0x2, 0x24, 0x104, 0x68, 0x0, 0x17, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@cipso={0x86, 0x7c, 0x3, [{0x0, 0x11, "2c4b30d22e66bb2b5472d3e0da5a91"}, {0x5, 0x10, "916cd964eb5165a615763d03f3e8"}, {0x5, 0x9, "9b33b27f2d69a1"}, {0x0, 0x7, "297bd90f8e"}, {0x6, 0xa, "cf7f32cdc66f062c"}, {0x5, 0x10, "d36100aecb044fc2c11aef6715dc"}, {0x5, 0x4, "0cd3"}, {0x6, 0x8, "63b6fc6dadca"}, {0x5, 0xf, "67d610f5a8f932ee38a3fbf109"}, {0x1, 0x10, "a6fdabf22f73a083133dab35d5d9"}]}, @timestamp={0x44, 0xc, 0x7d, 0x0, 0x5, [0x1, 0x5]}, @cipso={0x86, 0x64, 0x3, [{0x7, 0x12, "44de2e93308415d1df0c5da9cd349f61"}, {0x5, 0xd, "76128e1bde37964c7fc716"}, {0x6, 0x6, "db30c52d"}, {0x0, 0x12, "e5c2115b44de4af3445289db693a90e5"}, {0x1, 0xf, "41a0bc66e6318c45d226e673e6"}, {0x5, 0x6, "100f3a70"}, {0x1, 0x9, "c1c23cdb3d8f02"}, {0x2, 0x9, "d1203e9cc1715e"}]}, @end]}}}}}) r8 = socket(0x2a, 0x2, 0xfffffffe) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001580)=@newtfilter={0x68, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xa, 0xfff3}, {}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_ACT={0x4}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x652f}, @TCA_FLOW_MASK={0x8, 0x6, 0x7}]}}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0x7, 0x4, {{0x15, 0x4, 0x1, 0x7, 0x54, 0x65, 0x0, 0x4, 0x2107bba7ec4005ae, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x1f, 0xb9, [@local, @loopback, @broadcast, @local, @remote, @private=0xa010100, @local]}, @timestamp_addr={0x44, 0x14, 0xc1, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x9}, {@rand_addr=0x64010100, 0x5}]}, @timestamp_prespec={0x44, 0xc, 0xd4, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0xc}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000640)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x2, 0x2, {{0x9, 0x4, 0x0, 0x3, 0x24, 0x66, 0x0, 0xb6, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x10, "fe45e401e33b6f9108163557f778"}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x80, 0x20, 0x200, 0x1, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x64, 0x0, 0x2, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x14, 0x43, 0x1, 0x7, [{@multicast1, 0x8d0}, {@private=0xa010102, 0xffff}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'ip6gre0\x00', &(0x7f0000000840)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x6, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x47, 0x7f, 0x3}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1c8, r2, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40000}, 0x51) 723.663948ms ago: executing program 3 (id=6271): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x38, &(0x7f0000000000)="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", 0x1000) r1 = socket$inet6(0xa, 0xa, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000001000)=0x2000, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000010c0)=@nat={'nat\x00', 0x1b, 0x5, 0x580, 0x250, 0x0, 0xffffffff, 0x368, 0x368, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, &(0x7f0000001040), {[{{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xffffffff], [0x100000001, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'macvlan1\x00', {}, {}, 0x5c, 0x96, 0x0, 0xe}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x6, 0x1, 0x2, 0x5, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, [0x0, 0xff, 0xffffff00], [0xff, 0xffffffff, 0xffffff00, 0xff], [0xff000080, 0x0, 0xff, 0xff000000], 0x18, 0x100}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x160}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @local, [0xffffffff, 0xffffff00, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0x0, 0xff], 'nr0\x00', 'sit0\x00', {}, {0xff}, 0x2c, 0x8}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@local, @ipv4=@remote, @gre_key=0x8, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0xa1, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@empty, @gre_key=0x4, @port=0x4e20}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0x7, 0x48}}, @common=@eui64={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e20, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f00000016c0)=0xd, &(0x7f0000001700)=0x4) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000001740)='\x00', 0x1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001780)={0x9, 0x6, 0x0, 0xc896, 0x1, 0x0, [{0x0, 0xc, 0x8, '\x00', 0x800}]}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt(r3, 0x8, 0x6, &(0x7f0000001800)="21b76bc86b87a76c88ae02e508c47f70aae05d71ed4ba8fdf65e62c524037aa6532de546934f4a48477241cd2443dbca457b3872dc34d73dcfaee96ce04ee11e2965d61f40fa700379483b77ea0ab53cf4ae8cea08673ec9522701f76a36baa6fbd2c298cf55268c420ddf9edc57443aee2a337729e7c70e2d4189fe088086b29df2080030a811c4782cf95e4eb915c740b8501f6bb7740d693129aa78700f2dad892edbc74768795d9a8af0115deeff5c44ec220e4ce51fedacd7536fb6144e44238ddb1b2c28ced67bdeb858ed18f5", 0xd0) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$MRT6(r1, 0x29, 0xcf, &(0x7f0000001900), &(0x7f0000001940)=0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001980)='geneve1\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000019c0)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000001ac0)=0xe8) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000001b00)={0x11, 0x7, r4, 0x1, 0xb, 0x6, @random="9d53d9baba0b"}, 0x14) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000001b40)={'erspan0\x00', {0x2, 0x4e24, @broadcast}}) r6 = accept4$inet6(r0, &(0x7f0000001b80)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001bc0)=0x1c, 0x800) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000001c00)={0x16, 0x229, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x200, [0x5, 0x7fec, 0x5, 0x5]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x8590, [0x7, 0x8, 0x6a9]}}, @generic={0x2, 0xe2, "45881a88eabede51b6e72a4b2eb6757fc11c0e0fb042e5a1dabaccf3e015fdfb306026b2e65fed0972b07c721ac8c67680452a348cb49694e94fcf76dc95a0aef7be3b17d6736acc75cf533d3edf1a8633d35a0d7953b920864f7d7e93aaec35eb2d96a4ebdaf8b0f0554d81b3cc5f8fcc82ad5baac84aabe25ae0fe40e05c420fc1f7a3ee0b67111472e4807aa5e32d2d563f81692db9b3cf62f1b68e27965c8d4d74f9577a680ee85f3ce54048f4e22670e4b5e2a1f82fe3bed96a6d917dd534b2b38f31ba4dc32a03a1afd6b3c7cad4f2ea0cf712e190fccb5fff4dfc6cb6fd1a"}, @pad1, @enc_lim={0x4, 0x1, 0x2}, @generic={0xff, 0x1000, "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"}]}, 0x1158) getpeername$packet(r5, &(0x7f0000002e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002e40)=0x14) sendto$packet(r5, &(0x7f0000002d80)="58312323574620ae3bb9ba09d56ca4d7cec764dc89c0a9b7f95b45f190f6a15c37156dcdef17ba7da70dffcaca0222e6687150647191903d683fd0d520ad8ce6c3f2d63fbebc4343560313d9dd9b889ccbf6b32f9b80142795e1eb5be557bef3", 0x60, 0x4, &(0x7f0000002e80)={0x11, 0x2, r7, 0x1, 0x9, 0x6, @local}, 0x14) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000003000)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x44, r8, 0x101, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x44}}, 0x8000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r9, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$nl_generic(r9, &(0x7f0000004480)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000004440)={&(0x7f0000003180)={0x12a8, 0x33, 0x200, 0x70bd26, 0x25dfdbfd, {0xa}, [@typed={0x98, 0xc6, 0x0, 0x0, @binary="31076aac5fd6c66e5f52ec1fe7d4cbe84fb2357e30342ea5da691c88d88566a5c00696bac59d7652233e5cbd7c0974370a96cf767df85a57c072f7a1c0f769b1e4a153066dbfc4dd18601b71c0258d0267dc74b3227dbcf1c6c67281476bc46bfd75db5821691ae180498b010cf404e7156f247594c2b72e292af6c149a160090ae8fccb7d53a2f9baaafe7968c1c1e6e118c642"}, @typed={0x7, 0x41, 0x0, 0x0, @str='/,\x00'}, @nested={0x11f4, 0x99, 0x0, 0x1, [@typed={0x5, 0x88, 0x0, 0x0, @str='\x00'}, @generic="bf5ae9572381e0ec6ce3a5874d9e503e31c694a379366a6ae633724d94cdf8dc7ed1769bf9e841eb6cc6f2626485ae7eccf6c2029f7a193b731d1119d5f2289beafbaa765611738bc3cc877ed4f4b7b2c944a9ab139c72f2abb7c249155cd679840563e23bf9abea62a674f4cb305e21f35052bfb95088afb0e6a0479df4f064c6a3e083a2d3e15283d784f9517d351dcaffcd68fb35bfa1a619b2ba77958f7f5b0b6a43f4c7b85fb897345dcefaf1d6e763dafac87d606a437b3a25a64a903f544b07e064cbb5397dd74e9f2fcaa1b0aca4f99cae91e906779625c02093ee1bc3a2f8d4e83e66b2acf4fce218d7084aada1ef5778525848f75beaa0dea9c665d1efe8e7921d6e0f7ecd7080862a4ac2ae5e6620881a6610835610dd861b0aadfb9616a28467b20d267a7ee89ba55daaff0ac1b405b1c085a7cba765511d3a2e700e3ddf1fcc19882d3a98f1c3e9a8ae179d475e90dda2cd6fa1632c73cd34ed50cb61a80010b5b54c3ecee734f20fddedfd18e2b1d601004a34cc916279273537690909e61e84e80486783d6d24040e73b55c26007968135aee84e3cf17eb946fb61eb53dc61e0f53dc98e2efa63a69e9789342c95a6c78664f51f9fa454c1514442057043cb46a0112f1b71e01a251b24cedc8d7ce7c9adbd0debc5ff3a7ba11c815b9c13b9351e3ec4a473edd84b5e135243f3facaa6327884c1e4c33b8899439a3fb4b7d3a6db81cd07f6296d8f090c8b03188f32678f87a99edd42923056cacd7cee14a0048294a998ab11fae817c11d09b471c59db2d6367f347248c00aab09f56c7e0bd74b269c37b13f056acc337e0e3556d1cdc4e6721c10d27b7680900f56be070ca0fb01529b1cac30b65b3e56edadf6b7b9be9be8c62b42dce8dae639911caf3c16ec73d97301610f7f42cfa6ba983ff59f806169f4e2f96bfee091e2cb23874042ce0e26d58d886c9b5d919613152afb8c9c61625ad3ec61fbe6f4c5acf3c7444ce1eda431d2a59673f656703daa88dec6550a1598eac0f6569f593d08f9cb92100715fca2f3a941071b9de3110ef81dc3a6b95a7c2ddcd5cdfc04c791806f70c62fa5be51b183e09a0ec6f346b78ace77ee8f24177c9f3d52d3b97a815fc3e2ca44f461ac8b875dad0a965488660cb5178df4f0bba1d9f3b722475e6b9d9adce06cf29467fcb506e3aa2990818a91f28b5d09c09a225da56289bac1e7200c47c9aaabfe8a8ec58e966c670217e8546814e65c1f2afccd57007fbca87f2429279a11568a7280812d8ce9770189ec38b7868396ea3e94e513f680369da8a759c8887329f086337d844d68c517cbc90da4274cd430fe0260c741a803ac262410765040795fe5aa04ea30dbb882f0ca53e758f03eb6ba696528e9ea96f70eaf82c75f1ecc9dec7b2b11dd91e51bad00804cc7beef5439a4625298028d8946ed70d9030160378966817374657548f4373737072b14c55e06165531ee40dc638a82d16e890d9aa60796c44887a286080e479d808752e0379bb602fec98be1f0ac1f41d34642a974a97a1541da849b425668410f68e1c4892b283d9027446955495e48de0d1a11c6c38fecae6f04cdea766273c741443adbcd10f5e56129e3f03c8858fab98ff4ba4cf7b56ed18cc66ce0f9b6da6057d5cee4c9513837f37c7e07f80ff2ad2fceab7d9a4fd039fe34c30f89179d7ef5460168bef414ed782bc5c2c5be9f38af7f5daa4317127ffee15a1cebda24ec394f8b3886edb5271559af9ff66ac3ccd9b1b82b68e46ba981518f3ea52247c088c180e5d71a027f74a04f2450d30ac5d5c4e1b2110da03998909e61d8fd756473cb1b75d88d6a793b223cbb8b8428e4df5698039c8a5b986e8e76fc59492678aea68566fdfd5391b4ab7fd3a05794a673f5d3d0eccd1e9cbc9cf0e8b9e2e88ca0bec7417f48115692161bb1d72e60b51743861d1bc24c571a8b10d007d6275d31319e65f0d2b057e9962dbe593cb8cbb2e0b6532ace007bc5b249fce19fe6ffba4b969430bed7b62fe85407bdea13cd04bfc273fbacfb51d874f70ffa736cfc7db9f0f912fcc99afbe554df4752b2396d7fc4c6f745507bef80141a3aea94fb47da7c1af14396df286e05733475eb7b66abc00c5603d73c289f35d8577cfe6aa708469d3f6f6492373a08d9072da571b10ef50e7a2482d78730795cd8882fef06c3c7428952a5b3e5cec4bed8394dfeb459751050095922fc2bec9092d474579b89b00d2c7674e28f7d3e09b3b857f3169b11a088cb8f38bd51bc00106816840aadaa463374cfac15f38a61c1bce458b42a2548c4f3ad969f865d52e8ee59857a75499c624db09d238e1593b1766f24f7d739252a496a62ede194654be9b40babfa7c7c5619878c5db65e693eb4e629992ee510a982895c41724ebc48cd4305918deafab18bd44fbb2dce4548d880771e347d70e5b16bde68d65bc7530e93f664393ce5ccdcb68a6fdfbc9c73259424e0021763d0602513a5854f0f3a0ee633413590895d8e3bcab896972de84a1a1e394275e0ed1f9962c70a3981e0a49c9ab7c277b3f28f01fb034cf34f0b67b0cf5e646e0a69abd294953fdba088fd15873e4f91fc0e15307e7c9bcbd2fb66a14e1953b528e1882006341ebbd32c0b88e0b49770f8ca9b3b03e90c861cd32b3dec48ec6fbb53e3be683cb455535f37215823cf9ffdd63f6cd8b8cc41d8d711d328ec1278d626bdd61f2baa7a7eece7ef1ddb7d4e27127deb1f0e5db534bcd08028018fcb693974b634294eaf084c273186e850706458bad91b726d3425eab9726a49179af6bcfde2fecadbfdc62b7025b1b8ac9a7e53961945648684a4f41bca56e72a9c67a3cd587c3ca9dcae3c5a155e6086964812a816550bf98d0ce94ddbeaf313a98c3658e0043fafa691a1454687d82a4b88edb6aa85482bd970d4a2de0a1a8c996ef952faf17b17672e29a0630899da7f6f5df07afaf2aab3102674788c32fe4be80fd551691db274135ff9c148565ff0e488562a57303ce7b300d18d49efb995eb1d4d62c23452695e94f30a44b0003ee90df9979426f1633d8cad35e5b1a8eff0072f525904a56cd4bd5b796eb29c1f955c9ba0658c59a43e3744daf5a8fd2dc6f2a1b6a870ba6dd5acc3548ad5abc60eee0910cc27a3b060c5207ff5b10da94558065168a1cfb02d14443efcdf82a40d347d8b068ce06faf4c8a952d88e1c1c4c7be09073708ebc09ea827764163a6f2812b59a6229b030b631283ae7d55973fdaabf467d75ab5d5ca2c436d78de1e5b181a98ab31fdf4ff6a31cc54cc459b214a4985035b93e32c7f78a942435762564bafdd6ac127a3da53cdc5530ab13e5fdf7314108041a9ed2f0ca7c9b1c387a9764b9009ffb4d05c6d7a07fa9acc40de0411c8e15169ced8579d7c350c676d986a2f38661f379174b655c268a92e1a9884d09e2cd402a1fc3aa224642543a4ee0537addef4c088683b5ea982c267b5012d7c91d474382cd049b0258f9d19e5e8523da59fa4f6c730f0eabf9d77355719e29c715d707d070fa7e688a3c5510b7f74c4df0a34e3a8973ee77d2b0f4868cabb1a8cb6a0f75f4c972b98709ac718e442a2dd0764fc4da8a11ec028f61ccce077376f72f4c1a35f22a4a97c0efdb9effaa3b776c50b80a08f4c969c7513c4cb58fb0963772fc4106f9ff374f166c3eec7639ef999e048d73849df807cefbf1613942c1a04add5e034791c35d9a10950f7f5d8101a0d5e933afae79aed6b5fce02565fdfa9a64681a1a401d024d6552e84be97111d3ada938b35a786b195d666eb6510b38d7665cb15295e6c33289d78990fcb90d78722c860a33e5762613ba4b36690bb8168e3d851fca6ffe2b35c4d6747d3d2116bfb2da1c6fa15393304f325c4ffe9f21e456c340b3f7fada61e65137a20a85ee3ba93acddcc4a4ca54102aed72de3bf91b855e2a8462fb72eedc5665b700900553586816221416db89e0b85f94b4db1c2d1ea7c05a995d4cc1baaf988038726a532687fa29a5a89a83301e65c0c6936753894e4ce39662f29110938e4019643d6df00ab04bd8c56c32b8bacc07ac5f275a0d77f6fc020e413d230416d4a4ea517a938f2c817998b60e0d3fcfc5daf7adfe328cf8e685078fbb677d8aaf181dd9ea5b0b36e08ce25b007af7819c1f2a4f0575a1c2487fade23fc1216c8cfe1db2150b988ea7c691d71786cebad104bd2717441c5187ce02afa1aa1e05360906061c5414259f741cc2391506f2039253bd04452cb1dfc067ca6cb7f225e3b1f1193830bb1f673d89dc84ea335a196f4baf0efe545d141e19de193564a4ca612a437f9f3b48c2b18977c301b32083ff4412d257f46a6e1be5b4390f0492b98f0448903c2d53ba310db3be60e376ae574042db4ea5f08466fab8527b7d6c566415cef1c677c51e948be97f3dc13c59ab28da323763c437558537fa76e3e79c7dfc2302e51f64f88b64db0f44967a0e04f105866dbddac3426873550eb77b46312aafb706265561add643dc71f62e21e78b1a1bf0550b6d2fa24f9aecf1307035be2fdd79fa3ebb4f4da8d4a1fb632d2d48fa1119532a520461a16d27052c3cd3a593114bf3cbcb35a4b8ab82d0840331a36a6f366e5442a1c281142160f063146501673cf8872a4bdac430db6d43301b895875ea8251052b7013b30d7a301327e8bddb940887428a452c99656ccdaf8378b98004bf05b8c0dcbe3c9976305da51503c5ac74640bc2ae16046c6b549059b1e99e537de04ab40b6e991097868133467bec161b81b529304fc87c68ef4a915d31534ff1fc281a077ac5d5a2793de9b07c329b4d86d84e310e17b2d6789c78992942a9a579fe56d82695bfdd16b2806f452c0e68e67f6bddeca474737842da997d3805520aecc3a06853700037478525f90b25a1a1e3339bd50855b8f8ddd05d183d5570f640ca908accd8b7cf07187fc38da045d4a3ebbb6faeadf6ca063380a3c59d43d951d2c4601f290c809c200b8dc67b6c4fe125fdc2fc0ba3fc0f8e646b7609fe4006d72e19865148f9424ece9e640e792a189603889982c74c35d14f0001f8e690554439e7d7b76aa3d7b589940d952a5f79d48315d4428c79c3b0621949f15e5424738c1bcdf6924e058272e91a5a72e51ed4918f58cc6ab1f5cce35479407330a0ce084a852d21335075d4ddd08e98b4adb291ca7b79f5267881fc82d42706bca2be026b1d1c459007a1c129666ffc5faa0b09978679358c6ef3c24a93d1ffed4c7a242f6821e0c9dc57a98a44afcb719f77ac1fa515ac59e2706057306eead9f7686a954ceb3d5575daf35ffd5cba6882a4a5a0cf6352c6d4f91d05304b7a08170c5f107d66293dfc31e237aaecf2a5872815a1d216572d67273a267e1c86d97e847498afed3c1431cdbe42e57147b990538002ba81b475278a49dfb7b739cb2e793870af9fae041fda65604bf5c3b1c6fafce569a73b6dd47b20f8ca7cea6d013c5697373532f08e29b1ca554278889fff37bcf73a3ac3698edae8d49cab78108ee7449cd3fd7ed8de8abee982c7b6bae6fba1aff1fad0b6c82e55e28f9450748971cd64f1aa52cb8e85c22f488b127e50d407d78970d6e9b88a607de44f4713b67aa3a71dffb6bfb56eaf61af52b4167dcaedacd0112b5a3a88fcda35abf48ba6f272f4488fe94393ec92f27df5c227287682482263dace0f033609a3d6b8bf5bca3b5fad790546433e49149831fa74f4f90384f0de6b1896af1b3dfcf7df6927906911d24d9fb38c", @typed={0xc, 0x56, 0x0, 0x0, @u64=0xfb}, @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@mcast2}, @generic="fc8cdcb6eae8e71ea669b5379f7e2afd8fcf14848a5b1c0e7627d88ee008e77436cbcb92fefe52a3db31417ff39528d354837f60ce18be0e3f347c11382d3ff64dc6c30f131781c6641f325027de8bb6d0121dfbf4cdd2581994d286405c3cea0cef0e24f79f450ff06b6e032ea7cfb48d9cb0850b6ca2fd69d876585ba2a4ba", @typed={0x5, 0x6c, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x131, 0x0, 0x0, @ipv6=@mcast2}, @generic="58a61c716debe96f086b4016c0baf93997812a94949e8db36b7b8f396aa5050281c4c8f251b49539e8f8098ed11b13857e759824612565babac3c120f3cb096e96561646357fbd2c301013e451b536f9b4d176b0a6682bbd5bf4d8eee45851bee92d29c1adb02d3826b5acab7e22fb05a3e915fa654d47e466e61ad72816f034573c9a2c2d3266a48f00c9068703fa0f4a4f0797ad3fe0ef630f3e357b991b0e13d2e1d0d340c3b55b075b17e4f63019f53c4784c72075693e0db58829817982d817f8da377a9487694da63926b8d479f04a7a8fd67a41e1fa97b5f9fd112d163cafbdc763dc382c42", @generic="77416568dafd03e9e2a66d91a7d30d61f36bb68b9ad97ebf7742159eba2acf84f9e91fc25ee217ead55f953c3a96f1034508450bb8e856316b1e0e639c2406efb64ef5"]}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x40000}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r10, &(0x7f00000045c0)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004580)={&(0x7f0000004540)={0x3c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 647.610473ms ago: executing program 0 (id=6272): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004042) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 376.044648ms ago: executing program 1 (id=6273): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00'], 0x24}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}}, 0x0, 0x2a}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}}, 0x0, 0x2a}, 0x20) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r2}, 0x38) 324.026635ms ago: executing program 0 (id=6274): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e1c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000001000001", @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x40, 0x7ffffff7}}], 0x1, 0x0) 137.102784ms ago: executing program 3 (id=6275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x47, 0x7, 0x1, 0x0, "3c1155f11052f43e25496e535e7d3b88d8b1dbacfbccd908e88afe6a7122a867d18c0b7b9da4720480b7d6237d6b9adf522f52b132f44455c8acc2d93b79ce2b44d248"}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4}]}, @NFT_MSG_NEWRULE={0x166c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x1584, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x14e0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14cc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x188, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2f, 0x1, "ec8c7b7b9830c1bf5b9ada8d8d167d9bf687dcb8c21fb9e42ff86d71e695fa0780e1ce9669d0933b13a356"}, @NFTA_DATA_VALUE={0x2d, 0x1, "21a9d1cb59e6ff1891ae15c7ca38298d64b90f8fcdc526db1e682af51239f60145d268954828caec3c"}, @NFTA_DATA_VALUE={0x75, 0x1, "e2753e787235e3c29033c38752e34d69103ddab328895137bb3b638d9186237de54e29364aa7dd398c529b366276194524878d1bcd68f10065069844656eb715912d2f62fbf9ed1d9dfef99e89b3d61fc01b0357d5d4f154f7750e4ee53edca2e88834e8a6e76a19a90a68e155d6d5cad7"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x88, 0x1, "b2f4f7b91ccb07d796f28de1ff88c76fb85a91ee16c479ea6deef24381e3372026971f5601d443ed3fa0100c2f498026d58bb35cc94d392315c15cdb19f9acbb7ec7fd651f0dfbaa99f41e98c71dba09b5416db05bba013b04b72fbd064852e76400c2c7a17c89703acd2e4af86d5f4f225617f6fde78ab95e00a09fe77833cfd98c4e7f"}]}, @NFTA_IMMEDIATE_DATA={0x10c4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x18, 0x1, "12fd9075a6ccd362220d6e69d070e954ba0332af"}, @NFTA_DATA_VALUE={0x3b, 0x1, "de4bcddb6409140470cc0397ad2ccdc5a153202d796d42a09b2695eb1253800c6cebd3e48591d1453d678ffd8f00a82cac6fbc32b4d766"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xf, 0x1, "eebdce3e8558413efdcd5c"}]}, @NFTA_IMMEDIATE_DATA={0x27c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4e, 0x1, "7556bf17ef14cd6ca8347461a09e7e261950bc3cbf7544c0e5b39727530cbbc775a99790e1a34b5bb519a5d12c6370095408090e194d5423f9382c540d89e1c845619445771c7be780e0"}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "492e4308c744a0ef747c9d612bbcdc9d6348862b9116572af80b561f36b5984c965fe9d08dd3f00717b55f514ac5317404f12f8f73e356df9ea0e16acf38e1c06861d48c7da6db79d86bb670fd49af7b4ce7251735c71e830cd2c9135936c595311e7be5d01355fce559262b979f99740c9fa5d4cc35c6c72115345a78a5"}, @NFTA_DATA_VALUE={0x2b, 0x1, "e731cfed1df507935681b9a290e10e493da453c1aad5893c959f7c6cb9e96239f39646992d0caa"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}}, {0x60, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1b3}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xf0e}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xb4, 0x7, 0x1, 0x0, "c253dec7905b635f9a7f13315871a6e36fd33aa071a9f89119933b27e8f5bd00c3bee681819a608a5ef0d758e337f398a36a4cadf4f396f2fe2ceb9a3f18f0e404aa3262d951b21fdafec854136e1f488262f1d736dce9c228665c1d652bfd8ead72692a9c769a197c6808421d13e3f7efa902475d5caf2f4513a9878102864a08e252a53a4c548e432bd8d7a52974287482fd65e9011466e9bbfb12b8343bb7ef9bbdf19e5c8f5011e724418444305c"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1738}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) 80.397777ms ago: executing program 0 (id=6276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20100}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="ef05b9b215d0"}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80200003e000701feffffff00000000017c0000040042808802018006000600800a00007b02018020ef82972c4a888fa13836e811c4cd03b722b4ceca8be06b765000fcffffffffffff7eb6b5009a881fd61885956a03d9a9dc8452516454a3d167abf84c778c4df8237c0c0860693c5060dfea16df72653289de5ae7f1f3a2746c7e0900000011b9b91ed5687f850c00c8007d25212b2b4a2d000800a500", @ANYRES32=r6, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xc, 0x3, &(0x7f00000000c0)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x82}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 0s ago: executing program 1 (id=6277): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4040844}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0xffffffff}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x2c}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0xffffffff}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x2c}, 0x20) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002100010000000000000000000a00000000000000000000000500150002000000326828bd0d78d0530ce8b7d6a408e48ecd1133fe87b7cd199c08bd64850e5f0712"], 0x24}}, 0x0) kernel console output (not intermixed with test programs): openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 459.438911][T19425] netlink: 'syz.0.3909': attribute type 1 has an invalid length. [ 459.464222][T19425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.705753][T19443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3914'. [ 459.726764][T19446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3915'. [ 460.944468][T19494] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3926'. [ 461.040448][T19496] veth5: entered allmulticast mode [ 461.179325][T19502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3928'. [ 461.211166][T19502] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3928'. [ 462.410810][T19563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3945'. [ 462.510759][T19566] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3948'. [ 462.778099][T19566] bond0 (unregistering): Released all slaves [ 462.814896][T19574] veth1_vlan: entered allmulticast mode [ 463.258507][T19612] netlink: 'syz.3.3962': attribute type 1 has an invalid length. [ 463.288839][T19598] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 463.426476][T19624] netlink: 'syz.4.3964': attribute type 29 has an invalid length. [ 463.702867][T19639] sctp: [Deprecated]: syz.4.3971 (pid 19639) Use of int in maxseg socket option. [ 463.702867][T19639] Use struct sctp_assoc_value instead [ 463.973355][T19653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3975'. [ 463.984206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.157993][T19660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3976'. [ 464.512916][T19673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3980'. [ 464.565172][T19678] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3983'. [ 464.581891][T19680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3982'. [ 464.710879][T19687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3985'. [ 465.562563][ T8701] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.613042][ T8701] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 465.638450][ T8701] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.675169][ T8701] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 465.727934][T19697] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3987'. [ 465.743333][ T8701] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.752404][ T8701] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 465.771868][T19697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3987'. [ 465.795723][T19701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3990'. [ 465.835789][ T8701] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.845599][T19701] netlink: 'syz.1.3990': attribute type 7 has an invalid length. [ 465.863604][T19701] netlink: 'syz.1.3990': attribute type 8 has an invalid length. [ 465.874771][ T8701] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 465.884391][T19701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3990'. [ 465.906847][T19708] openvswitch: netlink: Multiple metadata blocks provided [ 466.708003][T19744] netlink: 'syz.4.4002': attribute type 1 has an invalid length. [ 466.836536][T19749] netlink: 'syz.0.4003': attribute type 1 has an invalid length. [ 466.868415][T19749] netlink: 'syz.0.4003': attribute type 2 has an invalid length. [ 466.940417][T19758] veth1_macvtap: left promiscuous mode [ 466.952508][T19758] macsec0: entered promiscuous mode [ 466.966952][T19758] macsec0: entered allmulticast mode [ 467.092958][T19762] veth1_macvtap: entered promiscuous mode [ 467.117184][T19762] veth1_macvtap: entered allmulticast mode [ 467.155778][T19762] macsec0: left promiscuous mode [ 467.172774][T19762] macsec0: left allmulticast mode [ 467.193836][T19762] veth1_macvtap: left allmulticast mode [ 467.265072][T19768] netlink: 'syz.0.4010': attribute type 1 has an invalid length. [ 467.470691][T19781] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 467.513848][T19781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.635593][T19789] netlink: 'syz.2.4018': attribute type 3 has an invalid length. [ 467.663861][T19790] netlink: 'syz.2.4018': attribute type 3 has an invalid length. [ 467.682318][T19789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.902729][T19805] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 468.463711][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 468.566994][T19856] validate_nla: 3 callbacks suppressed [ 468.567015][T19856] netlink: 'syz.0.4036': attribute type 9 has an invalid length. [ 469.142643][T19884] netlink: 'syz.1.4045': attribute type 4 has an invalid length. [ 469.278055][T19894] __nla_validate_parse: 7 callbacks suppressed [ 469.278073][T19894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4050'. [ 469.334437][T19893] batman_adv: batadv0: Adding interface: dummy0 [ 469.356739][T19893] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.423897][T19893] batman_adv: batadv0: Interface activated: dummy0 [ 469.451338][T19900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'. [ 469.476270][T19900] netlink: 'syz.3.4051': attribute type 12 has an invalid length. [ 469.521507][T19900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4051'. [ 469.534935][T19912] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4055'. [ 469.576525][T19900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'. [ 469.587043][T19912] pim6reg527: entered allmulticast mode [ 469.598124][ T8671] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.613628][ T8671] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.632938][T19900] netlink: 'syz.3.4051': attribute type 12 has an invalid length. [ 469.641956][ T8671] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.661168][ T8671] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.670476][T19900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4051'. [ 469.867492][T19929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.990409][T19933] sctp: [Deprecated]: syz.0.4056 (pid 19933) Use of int in max_burst socket option deprecated. [ 469.990409][T19933] Use struct sctp_assoc_value instead [ 470.211037][T19944] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 470.543260][T19962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4070'. [ 470.645520][T19964] netlink: 141348 bytes leftover after parsing attributes in process `syz.1.4071'. [ 470.658364][T19966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4072'. [ 470.689236][T19968] netlink: 'syz.2.4073': attribute type 3 has an invalid length. [ 470.699268][T19968] sctp: [Deprecated]: syz.2.4073 (pid 19968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.699268][T19968] Use struct sctp_sack_info instead [ 470.834519][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4072'. [ 470.881916][T19966] batadv_slave_1 (unregistering): left promiscuous mode [ 470.941463][T19979] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 470.949507][T19979] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 471.074125][T19985] tipc: Enabling of bearer rejected, failed to enable media [ 471.901491][T20036] : entered promiscuous mode [ 471.913946][T20037] netlink: 'syz.1.4094': attribute type 83 has an invalid length. [ 472.088939][T20043] dummy0: entered promiscuous mode [ 472.096144][T20043] batadv_slave_1: entered promiscuous mode [ 472.121477][T20043] debugfs: 'hsr1' already exists in 'hsr' [ 472.168437][T20043] Cannot create hsr debugfs directory [ 472.672471][T20059] tipc: Enabling of bearer rejected, failed to enable media [ 473.057298][T20079] netlink: 'syz.1.4109': attribute type 29 has an invalid length. [ 473.070769][T20079] netlink: 'syz.1.4109': attribute type 29 has an invalid length. [ 473.348228][T20092] netlink: 'syz.2.4114': attribute type 1 has an invalid length. [ 473.619263][T20111] dvmrp0: entered allmulticast mode [ 473.798056][T20115] netlink: 'syz.3.4122': attribute type 29 has an invalid length. [ 473.832383][T20123] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 473.868614][T20123] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 473.902585][T20115] netlink: 'syz.3.4122': attribute type 29 has an invalid length. [ 473.963789][T20131] team0: No ports can be present during mode change [ 474.138121][T20135] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 474.234611][T20135] rdma_op ffff888031b869f0 conn xmit_rdma 0000000000000000 [ 474.843260][T20177] 8021q: VLANs not supported on sit0 [ 474.866500][T20182] netlink: 'syz.2.4139': attribute type 29 has an invalid length. [ 474.916319][T20186] netlink: 'syz.2.4139': attribute type 29 has an invalid length. [ 475.080604][T20196] netlink: zone id is out of range [ 475.106926][T20196] netlink: zone id is out of range [ 475.112374][T20196] netlink: zone id is out of range [ 475.310604][T20209] __nla_validate_parse: 49 callbacks suppressed [ 475.310628][T20209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4146'. [ 475.430029][T20216] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 475.480594][T20216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4149'. [ 475.659483][T20226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4155'. [ 475.763099][T20231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.907700][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4158'. [ 476.199333][T20228] syz_tun: left promiscuous mode [ 476.210195][T20228] syz_tun: left allmulticast mode [ 476.236490][T20228] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.244415][T20228] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.299382][T20228] batman_adv: batadv0: Interface deactivated: dummy0 [ 476.386371][T20228] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 476.512155][T20243] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4158'. [ 476.703314][T20257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4165'. [ 476.771447][T20257] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4165'. [ 476.791607][T20257] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4165'. [ 476.939161][T20269] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4167'. [ 476.993894][T20272] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4167'. [ 477.023853][T20270] 0{X功: renamed from gretap0 [ 477.042831][T20270] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 477.096071][T20272] 1{X功: renamed from 30{X功 (while UP) [ 477.110144][T20272] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 477.358485][T20288] netlink: 'syz.3.4177': attribute type 1 has an invalid length. [ 477.368107][T20288] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 477.925701][T20320] netlink: 'syz.3.4185': attribute type 33 has an invalid length. [ 478.004070][T20320] batman_adv: batadv0: Removing interface: dummy0 [ 478.028306][T20327] bond0: Error: Cannot enslave bond to itself. [ 478.471420][T20343] team0: Mode changed to "activebackup" [ 478.691324][T20368] hsr_slave_0: left promiscuous mode [ 478.748486][T20368] hsr_slave_1: left promiscuous mode [ 479.276580][T20392] tipc: Enabled bearer , priority 0 [ 479.286490][T20392] syzkaller0: entered promiscuous mode [ 479.292024][T20392] syzkaller0: entered allmulticast mode [ 479.320741][T20392] tipc: Resetting bearer [ 479.521404][T20392] tipc: Resetting bearer [ 479.554499][T20404] tipc: Can't bind to reserved service type 1 [ 479.587315][T20392] tipc: Disabling bearer [ 479.924432][T20426] bond0: (slave ip_vti0): Error: Device can not be enslaved while up [ 479.950990][T20430] netlink: 'syz.2.4218': attribute type 1 has an invalid length. [ 480.136809][T20433] bond3: entered promiscuous mode [ 480.149578][T20433] bond3: entered allmulticast mode [ 480.157576][T20433] 8021q: adding VLAN 0 to HW filter on device bond3 [ 480.271520][T20447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.410043][T20454] __nla_validate_parse: 21 callbacks suppressed [ 480.410080][T20454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4227'. [ 480.525111][T20463] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4226'. [ 480.546347][T20463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4226'. [ 480.571449][T20462] block nbd2: Unsupported socket: shutdown callout must be supported. [ 480.860207][T20467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.872355][ T8669] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 481.091349][T20494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4237'. [ 481.109740][T20503] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 481.129650][T20501] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4238'. [ 481.179850][T20500] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4238'. [ 481.490708][T20523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4248'. [ 481.739965][T20538] netlink: 'syz.0.4251': attribute type 4 has an invalid length. [ 481.820695][T20538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4251'. [ 481.831509][T20542] netlink: 'syz.1.4253': attribute type 3 has an invalid length. [ 481.890997][T20549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4255'. [ 481.899258][T20542] netlink: 'syz.1.4253': attribute type 3 has an invalid length. [ 482.128019][T20549] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 482.583210][T20584] bridge0: port 3(syz_tun) entered blocking state [ 482.590081][T20584] bridge0: port 3(syz_tun) entered disabled state [ 482.597766][T20584] syz_tun: entered allmulticast mode [ 482.605941][T20584] syz_tun: entered promiscuous mode [ 482.848542][T20578] netlink: 'syz.4.4264': attribute type 1 has an invalid length. [ 482.868416][T20578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4264'. [ 483.466115][T20620] netlink: 'syz.2.4278': attribute type 1 has an invalid length. [ 483.539469][T20620] 8021q: adding VLAN 0 to HW filter on device bond4 [ 483.960710][T20657] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 483.996344][T20657] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 484.112867][T20657] syzkaller1: entered allmulticast mode [ 484.269425][T20677] syzkaller1: left allmulticast mode [ 484.295795][T20679] netlink: 'syz.4.4293': attribute type 11 has an invalid length. [ 484.471745][T20686] netlink: 'syz.3.4297': attribute type 21 has an invalid length. [ 484.497096][T20691] netlink: 'syz.3.4297': attribute type 21 has an invalid length. [ 484.843044][T20711] netlink: 'syz.4.4305': attribute type 14 has an invalid length. [ 484.874567][T20711] netlink: 'syz.4.4305': attribute type 14 has an invalid length. [ 485.027707][T20725] hsr_slave_0: left promiscuous mode [ 485.051874][T20725] hsr_slave_1: left promiscuous mode [ 485.411619][T20742] bond0: entered promiscuous mode [ 485.417117][T20742] bond0: entered allmulticast mode [ 485.422914][T20742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.436845][T20754] __nla_validate_parse: 9 callbacks suppressed [ 485.436864][T20754] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4318'. [ 485.468046][T20754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4318'. [ 485.481657][T20754] netlink: 50 bytes leftover after parsing attributes in process `syz.2.4318'. [ 485.494026][T20754] netlink: 50 bytes leftover after parsing attributes in process `syz.2.4318'. [ 485.635388][T20760] netlink: 380 bytes leftover after parsing attributes in process `syz.0.4322'. [ 485.669350][T20764] netlink: 'syz.2.4323': attribute type 2 has an invalid length. [ 485.727836][T20770] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4324'. [ 485.793065][T20773] netlink: 'syz.0.4325': attribute type 1 has an invalid length. [ 485.797438][T20769] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4324'. [ 486.032566][T20793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4329'. [ 486.084748][T20796] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4328'. [ 486.135168][T15966] IPVS: starting estimator thread 0... [ 486.233833][T20800] IPVS: using max 29 ests per chain, 69600 per kthread [ 486.526960][T20814] gtp2: entered promiscuous mode [ 486.533338][T20814] gtp2: entered allmulticast mode [ 486.732201][T20834] netlink: 'syz.3.4342': attribute type 58 has an invalid length. [ 486.756570][T20834] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4342'. [ 486.882838][T20842] pimreg: left allmulticast mode [ 487.063357][T20851] bridge0: port 2(veth0_to_bridge) entered blocking state [ 487.070947][T20851] bridge0: port 2(veth0_to_bridge) entered disabled state [ 487.082847][T20851] veth0_to_bridge: entered allmulticast mode [ 487.094870][T20851] veth0_to_bridge: entered promiscuous mode [ 487.101395][T20851] bridge0: port 2(veth0_to_bridge) entered blocking state [ 487.108713][T20851] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 487.330669][T20862] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:18976 [ 488.039667][T20886] netlink: 'syz.4.4363': attribute type 14 has an invalid length. [ 488.073845][T20886] netlink: 'syz.4.4363': attribute type 13 has an invalid length. [ 488.168372][T20898] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 488.483116][T20865] infiniband syz!: set down [ 488.491770][T20865] infiniband syz!: added team_slave_0 [ 488.500868][T20865] syz!: rxe_create_cq: returned err = -12 [ 488.510757][T20865] infiniband syz!: Couldn't create ib_mad CQ [ 488.519717][T20865] infiniband syz!: Couldn't open port 1 [ 488.552446][T20910] netlink: 'syz.4.4368': attribute type 3 has an invalid length. [ 488.588313][T20865] RDS/IB: syz!: added [ 488.592417][T20865] smc: adding ib device syz! with port count 1 [ 488.630325][T20865] smc: ib device syz! port 1 has pnetid [ 488.690816][T20921] netlink: 'syz.3.4371': attribute type 1 has an invalid length. [ 488.854281][T20927] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 488.895320][T20921] netlink: 'syz.3.4371': attribute type 1 has an invalid length. [ 488.916601][T20921] netlink: 'syz.3.4371': attribute type 2 has an invalid length. [ 489.160115][ T8702] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 489.678338][T20969] pim6reg1: entered promiscuous mode [ 489.692786][T20969] pim6reg1: entered allmulticast mode [ 489.869458][T20976] tipc: Enabling of bearer rejected, already enabled [ 489.956049][T20978] lo: entered promiscuous mode [ 489.970509][T20978] tunl0: entered promiscuous mode [ 490.000129][T20978] gre0: entered promiscuous mode [ 490.056989][T20978] gretap0: entered promiscuous mode [ 490.090250][T20989] openvswitch: netlink: Unknown nsh attribute 0 [ 490.109015][T20978] erspan0: entered promiscuous mode [ 490.127608][T20989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.145523][T20978] ip_vti0: entered promiscuous mode [ 490.334098][T20998] : entered promiscuous mode [ 490.574111][T21014] __nla_validate_parse: 16 callbacks suppressed [ 490.574133][T21014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4395'. [ 491.035531][T21030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4400'. [ 491.182960][T21030] macvtap1: entered promiscuous mode [ 491.188794][T21030] vlan0: entered promiscuous mode [ 491.200838][T21030] macvtap1: entered allmulticast mode [ 491.207084][T21030] vlan0: entered allmulticast mode [ 491.212368][T21030] veth0_vlan: entered allmulticast mode [ 491.364973][T21041] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 491.764279][T21046] syzkaller1: entered promiscuous mode [ 491.769907][T21046] syzkaller1: entered allmulticast mode [ 491.908825][T21061] netlink: 'syz.1.4407': attribute type 1 has an invalid length. [ 491.942729][T21061] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4407'. [ 491.958824][T21061] netlink: 'syz.1.4407': attribute type 1 has an invalid length. [ 492.026370][T21061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4407'. [ 492.303147][T21081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4413'. [ 492.347323][T21081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4413'. [ 492.360173][T21081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4413'. [ 492.368444][T21088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4414'. [ 492.371150][T21081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4413'. [ 492.394354][T21088] netlink: 'syz.3.4414': attribute type 22 has an invalid length. [ 492.404382][T21081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4413'. [ 492.546728][T21088] netlink: 'syz.3.4414': attribute type 22 has an invalid length. [ 493.215186][T21129] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 3, id = 0 [ 493.240029][T21127] 8021q: VLANs not supported on vxcan0 [ 493.498142][T21133] tc_dump_action: action bad kind [ 493.552566][T21135] bridge0: port 4(vlan2) entered blocking state [ 493.573116][T21135] bridge0: port 4(vlan2) entered disabled state [ 493.588674][T21135] vlan2: entered allmulticast mode [ 493.601252][T21135] bridge0: entered allmulticast mode [ 493.631338][T21135] vlan2: left allmulticast mode [ 493.645633][T21135] bridge0: left allmulticast mode [ 493.700412][T21143] 8021q: VLANs not supported on sit0 [ 493.842696][T21147] netlink: 'syz.4.4433': attribute type 1 has an invalid length. [ 493.938090][T21147] 8021q: adding VLAN 0 to HW filter on device bond4 [ 493.967902][T21160] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 493.984295][T21163] tipc: Trying to set illegal importance in message [ 494.767070][T21196] bond0: entered promiscuous mode [ 494.782072][T21196] bond0: left promiscuous mode [ 494.889750][T21205] openvswitch: netlink: Message has 5 unknown bytes. [ 495.046345][T21206] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.093165][T21206] bond0: (slave bond3): Enslaving as an active interface with an up link [ 495.867320][T21268] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 496.192330][T21289] tipc: Enabled bearer , priority 0 [ 496.257496][T21289] syzkaller0: entered promiscuous mode [ 496.264328][T21289] syzkaller0: entered allmulticast mode [ 496.279383][T21294] openvswitch: netlink: IP tunnel dst address not specified [ 496.286358][T21291] tipc: Resetting bearer [ 496.299769][T21287] tipc: Resetting bearer [ 497.227604][T21311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.284886][T15966] tipc: Node number set to 1407729467 [ 498.232274][T21287] tipc: Disabling bearer [ 498.560237][T21342] __nla_validate_parse: 99 callbacks suppressed [ 498.560259][T21342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4488'. [ 498.590515][T21342] netlink: 'syz.0.4488': attribute type 5 has an invalid length. [ 498.603209][T21342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4488'. [ 498.670671][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4488'. [ 498.683761][T21354] netlink: 'syz.0.4488': attribute type 5 has an invalid length. [ 498.693204][T21343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.702885][ T8702] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 498.737290][T21354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4488'. [ 498.861364][T21354] geneve2: entered promiscuous mode [ 498.878022][T21354] geneve2: entered allmulticast mode [ 498.924879][ T8669] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 498.935582][ T8669] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 498.950438][T21362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4492'. [ 498.963024][ T8669] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 498.996368][ T8669] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 499.071431][T21371] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4495'. [ 499.299068][T21396] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4501'. [ 499.605898][T21402] netlink: 'syz.1.4503': attribute type 30 has an invalid length. [ 499.617201][T21402] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 499.626928][T21402] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 499.686910][T21404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4504'. [ 499.824934][T21374] netlink: 'syz.2.4493': attribute type 1 has an invalid length. [ 500.011043][T21416] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 500.055234][T21416] ip6erspan0: entered promiscuous mode [ 500.156918][T21419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4510'. [ 500.166118][T21419] openvswitch: netlink: Flow key attr not present in new flow. [ 500.501930][T21452] netlink: 'syz.3.4515': attribute type 39 has an invalid length. [ 500.861102][T21455] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4516'. [ 501.084484][T21464] netlink: 'syz.2.4518': attribute type 4 has an invalid length. [ 501.130327][T21464] `: renamed from bond0 [ 501.367945][T21488] Unsupported ieee802154 address type: 0 [ 501.502440][T21494] openvswitch: netlink: Actions may not be safe on all matching packets [ 501.524125][T21499] netlink: 'syz.3.4527': attribute type 1 has an invalid length. [ 501.595180][T21499] veth1: entered promiscuous mode [ 501.608551][T21499] bond4: (slave veth1): Enslaving as a backup interface with a down link [ 501.692046][T21505] 8021q: VLANs not supported on vxcan0 [ 501.712057][ T8670] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.884606][T21514] sch_tbf: burst 0 is lower than device lo mtu (76) ! [ 502.485858][T21542] hsr_slave_0 (unregistering): left promiscuous mode [ 502.639853][T21553] syzkaller1: entered promiscuous mode [ 502.647949][T21553] syzkaller1: entered allmulticast mode [ 503.231117][T21586] netlink: 'syz.2.4552': attribute type 1 has an invalid length. [ 503.414069][T21586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.470172][T21597] vlan3: entered allmulticast mode [ 503.475449][T21597] geneve1: entered allmulticast mode [ 503.640550][T21602] IPVS: length: 154 != 8 [ 503.823695][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 503.826067][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 503.933724][T21617] netlink: 'syz.2.4561': attribute type 11 has an invalid length. [ 503.962242][T21617] __nla_validate_parse: 5 callbacks suppressed [ 503.962261][T21617] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4561'. [ 504.200525][T21620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4563'. [ 504.415710][T21627] veth0_to_team: entered allmulticast mode [ 505.599603][T21652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.674944][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4577'. [ 505.731717][T21654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4576'. [ 505.848363][T21667] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4580'. [ 506.196962][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4587'. [ 506.363880][T21702] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4590'. [ 506.403799][T21707] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 506.450842][T21713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4591'. [ 506.694509][T21728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4599'. [ 506.748785][T21732] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.4598'. [ 506.777242][T21732] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 506.786522][T21732] openvswitch: netlink: Duplicate key (type 0). [ 506.942725][T21753] netlink: 'syz.4.4604': attribute type 6 has an invalid length. [ 507.224491][T21777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.952050][T21804] pim6reg: entered allmulticast mode [ 508.520115][T21858] IPVS: stopping master sync thread 21129 ... [ 508.804954][T21875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.907705][T21876] netlink: 'syz.1.4635': attribute type 1 has an invalid length. [ 508.916644][T21876] netlink: 'syz.1.4635': attribute type 2 has an invalid length. [ 508.927673][T21876] netlink: 'syz.1.4635': attribute type 1 has an invalid length. [ 508.937109][T15966] IPVS: starting estimator thread 0... [ 509.033531][T21891] IPVS: using max 27 ests per chain, 64800 per kthread [ 509.371513][T21906] __nla_validate_parse: 9 callbacks suppressed [ 509.371537][T21906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4644'. [ 509.414938][T21906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4644'. [ 509.428572][T21916] netlink: 'syz.3.4643': attribute type 4 has an invalid length. [ 509.459296][T21916] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4643'. [ 509.488758][T21920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4647'. [ 509.520436][T21916] : renamed from bond0 [ 509.799563][T21930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.820433][T21948] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4652'. [ 510.144833][T21961] team0: Device wireguard0 is of different type [ 510.380075][T21979] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 510.497319][T21981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4664'. [ 510.511538][T21981] openvswitch: netlink: Flow key attr not present in new flow. [ 510.512634][T21984] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4665'. [ 510.564893][T21984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4665'. [ 510.838378][T22000] tipc: Enabling of bearer rejected, failed to enable media [ 510.929644][T22005] netlink: 'syz.4.4672': attribute type 11 has an invalid length. [ 510.965535][T22005] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4672'. [ 511.527117][T22035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4680'. [ 511.849209][T22052] openvswitch: netlink: Missing key (keys=40, expected=80) [ 512.128034][T22057] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.142110][T22057] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.166494][T22063] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 512.176500][T22063] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 512.186918][T22063] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 512.257118][T22057] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.290826][T22057] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.413752][T22057] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.425178][T22057] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.520082][T22057] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.544615][T22057] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.745913][ T8670] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.770360][ T8670] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.816863][ T8670] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.837479][ T8670] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.909827][T21773] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.949592][T21773] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.995237][T21773] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.010336][T21773] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.082057][T22113] nbd: nbd0 already in use [ 513.784799][T22138] sctp: [Deprecated]: syz.3.4707 (pid 22138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.784799][T22138] Use struct sctp_sack_info instead [ 513.835836][T22142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.957125][T22150] delete_channel: no stack [ 514.111932][T22153] netlink: 'syz.1.4716': attribute type 3 has an invalid length. [ 514.188990][T22160] netlink: 'syz.4.4718': attribute type 11 has an invalid length. [ 514.394410][T22171] netlink: 'syz.3.4722': attribute type 1 has an invalid length. [ 514.402210][T22171] netlink: 'syz.3.4722': attribute type 3 has an invalid length. [ 514.463797][T22171] netlink: 'syz.3.4722': attribute type 235 has an invalid length. [ 514.671954][T22181] __nla_validate_parse: 10 callbacks suppressed [ 514.671974][T22181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4725'. [ 515.295804][T22201] netlink: 'syz.2.4731': attribute type 1 has an invalid length. [ 515.319016][T22207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4733'. [ 515.350507][T22201] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4731'. [ 515.353297][T22210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4731'. [ 515.392136][T22208] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4733'. [ 516.250327][T22245] openvswitch: netlink: Key type 11279 is out of range max 32 [ 516.383147][T22248] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 516.394492][T22248] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 516.598699][T22257] netlink: 'syz.4.4746': attribute type 25 has an invalid length. [ 517.112248][T22279] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 517.222916][T22286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4756'. [ 517.687359][T22307] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4761'. [ 517.756585][T22306] vxcan1: tx address claim with dest, not broadcast [ 517.801522][T22306] netlink: 'syz.4.4760': attribute type 8 has an invalid length. [ 518.072566][T22330] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4767'. [ 518.110881][T22333] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4767'. [ 518.239871][T22336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4769'. [ 518.790328][T22371] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 518.812718][T22371] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 518.855620][T22371] macsec2: entered promiscuous mode [ 518.872006][T22371] veth0_to_bond: entered promiscuous mode [ 518.897742][T22371] macsec2: entered allmulticast mode [ 518.923167][T22371] veth0_to_bond: entered allmulticast mode [ 518.968240][T22371] veth0_to_bond: left allmulticast mode [ 518.993524][T22371] veth0_to_bond: left promiscuous mode [ 519.032827][T22378] C: renamed from team_slave_0 (while UP) [ 519.043867][T22378] netlink: 'syz.3.4782': attribute type 1 has an invalid length. [ 519.052117][T22378] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 519.070042][T22336] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 519.219531][T22348] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 519.506700][T22405] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 519.536802][T22402] openvswitch: netlink: Actions may not be safe on all matching packets [ 519.549074][T22407] netlink: 'syz.1.4794': attribute type 1 has an invalid length. [ 519.566576][T22407] netlink: 'syz.1.4794': attribute type 10 has an invalid length. [ 519.858465][ T8692] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 519.877743][T22433] syzkaller1: entered promiscuous mode [ 519.883662][T22433] syzkaller1: entered allmulticast mode [ 519.921830][T22435] __nla_validate_parse: 6 callbacks suppressed [ 519.921852][T22435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4798'. [ 519.965995][T22438] netlink: 'syz.1.4799': attribute type 1 has an invalid length. [ 520.012954][T22438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 520.104111][T22443] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 520.384410][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 520.759426][T22457] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.4803'. [ 520.997158][T22474] netlink: 'syz.3.4807': attribute type 1 has an invalid length. [ 521.005995][T22474] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4807'. [ 521.159989][T22482] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4809'. [ 521.582455][T22491] 8021q: adding VLAN 0 to HW filter on device ` [ 521.596301][T22491] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.622091][T22491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.801923][T22509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4815'. [ 521.817176][T22509] netlink: 'syz.3.4815': attribute type 9 has an invalid length. [ 521.997388][T22519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.021742][T22525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.275840][T22529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4825'. [ 522.342028][T22545] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 522.465084][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 522.495336][T22555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4829'. [ 522.519637][T22549] syzkaller0: entered promiscuous mode [ 522.526755][T22549] syzkaller0: entered allmulticast mode [ 522.539029][T22553] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4831'. [ 522.770501][T22571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.784997][T22571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.361464][T22577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4835'. [ 523.371270][T22577] netlink: 'syz.3.4835': attribute type 1 has an invalid length. [ 523.379615][T22577] netlink: 'syz.3.4835': attribute type 1 has an invalid length. [ 523.387967][T22577] netlink: 'syz.3.4835': attribute type 2 has an invalid length. [ 523.397683][T22577] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4835'. [ 524.304268][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 524.375956][T22575] sch_tbf: peakrate 3 is lower than or equals to rate 8446433602254541964 ! [ 524.402610][T22576] netlink: 'syz.3.4835': attribute type 5 has an invalid length. [ 525.052230][T22612] __nla_validate_parse: 1 callbacks suppressed [ 525.052252][T22612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4847'. [ 525.234916][T22626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4853'. [ 525.246355][T22626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4853'. [ 525.506072][T22640] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 525.508499][T22638] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4856'. [ 525.530742][T22638] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4856'. [ 525.552717][T22638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4856'. [ 525.872250][T22664] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 526.561857][T22705] netlink: 'syz.0.4875': attribute type 1 has an invalid length. [ 526.640997][T22705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.680163][T22714] bond2: (slave ip6erspan0): making interface the new active one [ 526.708001][T22714] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 526.770909][T22721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.239716][T22740] netlink: 'syz.2.4886': attribute type 21 has an invalid length. [ 527.668384][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4893'. [ 527.683166][T22760] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4893'. [ 527.812412][T22770] netlink: 'syz.2.4895': attribute type 13 has an invalid length. [ 527.831350][T22770] netlink: 'syz.2.4895': attribute type 17 has an invalid length. [ 527.931355][T22770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.140863][T22788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4903'. [ 528.151552][T22788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4903'. [ 528.565049][T22765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.721620][T22808] netlink: 'syz.1.4911': attribute type 4 has an invalid length. [ 528.780087][T22811] netlink: 'syz.1.4912': attribute type 1 has an invalid length. [ 528.789795][T22811] netlink: 'syz.1.4912': attribute type 1 has an invalid length. [ 528.862613][T22813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.189288][T22827] netlink: 'syz.1.4919': attribute type 4 has an invalid length. [ 529.472439][T22840] netlink: 'syz.1.4923': attribute type 2 has an invalid length. [ 529.638405][T22844] netlink: 'syz.3.4924': attribute type 11 has an invalid length. [ 529.777965][T22862] openvswitch: netlink: Missing key (keys=40, expected=100) [ 529.824020][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 529.962297][T22871] netlink: 'syz.3.4933': attribute type 10 has an invalid length. [ 529.988241][T22871] batman_adv: batadv0: Adding interface: team0 [ 530.001645][T22871] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.052278][T22871] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 530.110270][T22887] __nla_validate_parse: 11 callbacks suppressed [ 530.110291][T22887] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4936'. [ 530.480121][T22895] veth0_virt_wifi: renamed from veth0_vlan [ 530.541938][T22913] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4945'. [ 530.645289][T22915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4947'. [ 530.751526][T22921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4946'. [ 530.759716][T22926] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4948'. [ 530.790578][T22921] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4946'. [ 530.817686][T22923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4948'. [ 531.362350][T22957] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4958'. [ 531.395638][T22959] openvswitch: netlink: Flow key attribute not present in set flow. [ 531.404281][T22957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4958'. [ 531.445500][T22959] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4959'. [ 532.761297][T23017] geneve4: entered promiscuous mode [ 532.783916][T23017] geneve4: entered allmulticast mode [ 532.810036][ T8670] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 532.827084][ T8670] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 532.856496][ T8670] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 532.890172][ T8670] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 533.383288][T23041] validate_nla: 2 callbacks suppressed [ 533.383310][T23041] netlink: 'syz.2.4983': attribute type 5 has an invalid length. [ 534.269392][T23056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.423282][T23072] openvswitch: netlink: Tunnel attr 16383 out of range max 16 [ 534.956329][T23110] netlink: 'syz.2.5006': attribute type 4 has an invalid length. [ 534.984688][T23116] pim6reg527: entered allmulticast mode [ 535.151904][T23125] __nla_validate_parse: 9 callbacks suppressed [ 535.151974][T23125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5008'. [ 535.173711][T23125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5008'. [ 535.201654][T23125] erspan0: entered promiscuous mode [ 535.229372][T23125] gretap0: entered promiscuous mode [ 535.256325][T23125] debugfs: 'hsr0' already exists in 'hsr' [ 535.270587][T23125] Cannot create hsr debugfs directory [ 535.277119][T23125] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 535.288040][T23125] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 535.308742][T23134] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 535.346314][T23134] nbd: socks must be embedded in a SOCK_ITEM attr [ 535.388071][T23141] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 535.634418][T23160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5020'. [ 535.650771][T23162] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5019'. [ 535.676370][T23160] netlink: 'syz.4.5020': attribute type 3 has an invalid length. [ 536.095531][T23186] netlink: 'syz.0.5027': attribute type 1 has an invalid length. [ 536.118307][T23186] netlink: 'syz.0.5027': attribute type 1 has an invalid length. [ 536.162864][T23194] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5030'. [ 536.184802][T23195] netlink: 'syz.1.5031': attribute type 10 has an invalid length. [ 536.192936][T23194] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5030'. [ 536.337130][T23201] syzkaller1: entered allmulticast mode [ 536.374441][T23204] syzkaller1: left allmulticast mode [ 536.410396][T23207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5033'. [ 536.534903][T23210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5034'. [ 536.780456][T23229] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5039'. [ 537.587393][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 537.595364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.636151][T23230] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5038'. [ 538.645874][T23230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.189847][T23276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.205263][T23277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.376026][T23282] netlink: 'syz.2.5054': attribute type 1 has an invalid length. [ 539.384136][T23283] netlink: 'syz.2.5054': attribute type 1 has an invalid length. [ 539.600360][T23278] netlink: 'syz.4.5052': attribute type 10 has an invalid length. [ 539.901735][T23309] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:65532 [ 540.320822][T23329] __nla_validate_parse: 3 callbacks suppressed [ 540.320843][T23329] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5063'. [ 540.536618][T23336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5066'. [ 540.589060][T23340] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 540.619570][T23341] lo speed is unknown, defaulting to 1000 [ 540.639822][T23342] netlink: 'syz.3.5067': attribute type 1 has an invalid length. [ 540.651536][T23341] lo speed is unknown, defaulting to 1000 [ 540.660683][T23342] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5067'. [ 540.669245][T23341] lo speed is unknown, defaulting to 1000 [ 540.679837][T23348] lo: left promiscuous mode [ 540.707514][T23348] tunl0: left promiscuous mode [ 540.747100][T23348] gre0: left promiscuous mode [ 540.780650][T23350] netlink: 'syz.4.5069': attribute type 10 has an invalid length. [ 540.847713][T23348] gretap0: left promiscuous mode [ 540.880742][T23348] erspan0: left promiscuous mode [ 540.920146][T23348] ip_vti0: left promiscuous mode [ 540.986009][T23348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.066015][T23352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5071'. [ 541.139990][T23370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5076'. [ 541.175264][T23371] tipc: Enabled bearer , priority 0 [ 541.196021][T23371] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5074'. [ 541.206163][T23371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5074'. [ 541.360721][T23362] tipc: Disabling bearer [ 541.459507][T23341] infiniband syz0: set active [ 541.465615][T10303] lo speed is unknown, defaulting to 1000 [ 541.474414][T10303] syz0: Port: 1 Link ACTIVE [ 541.488042][T23341] infiniband syz0: added lo [ 541.499585][T23341] syz0: rxe_create_cq: returned err = -12 [ 541.517248][T23341] infiniband syz0: Couldn't create ib_mad CQ [ 541.536468][T23341] infiniband syz0: Couldn't open port 1 [ 541.608555][T23341] RDS/IB: syz0: added [ 541.625808][T23341] smc: adding ib device syz0 with port count 1 [ 541.640013][T23341] smc: ib device syz0 port 1 has pnetid [ 541.650219][T10303] lo speed is unknown, defaulting to 1000 [ 541.661442][T23341] lo speed is unknown, defaulting to 1000 [ 541.918135][T23400] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 542.041883][T23409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5087'. [ 542.241552][T23417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5090'. [ 542.307105][T23427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5091'. [ 542.333437][T23419] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 542.352118][T23429] netlink: 'syz.2.5090': attribute type 10 has an invalid length. [ 542.417361][T23429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.443168][T23429] `: (slave batadv0): Enslaving as an active interface with an up link [ 542.492370][T23341] lo speed is unknown, defaulting to 1000 [ 543.110656][T23341] lo speed is unknown, defaulting to 1000 [ 543.506471][T23480] netlink: 'syz.0.5109': attribute type 3 has an invalid length. [ 543.742803][T23492] netlink: 'syz.0.5113': attribute type 21 has an invalid length. [ 543.846158][T23341] lo speed is unknown, defaulting to 1000 [ 544.251788][T23513] openvswitch: netlink: Missing key (keys=40, expected=100) [ 544.312778][T23516] netlink: 'syz.1.5123': attribute type 2 has an invalid length. [ 544.341155][T23516] netlink: 'syz.1.5123': attribute type 8 has an invalid length. [ 544.361570][T23341] lo speed is unknown, defaulting to 1000 [ 544.768000][T23341] lo speed is unknown, defaulting to 1000 [ 545.191814][T23545] warn_alloc: 1 callbacks suppressed [ 545.191836][T23545] syz.3.5134: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 545.219217][T23545] CPU: 1 UID: 0 PID: 23545 Comm: syz.3.5134 Not tainted 6.16.0-syzkaller-06620-gae633388cae3 #0 PREEMPT(full) [ 545.219244][T23545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 545.219257][T23545] Call Trace: [ 545.219265][T23545] [ 545.219274][T23545] dump_stack_lvl+0x189/0x250 [ 545.219305][T23545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.219326][T23545] ? __pfx__printk+0x10/0x10 [ 545.219352][T23545] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 545.219375][T23545] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 545.219400][T23545] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 545.219425][T23545] warn_alloc+0x214/0x310 [ 545.219445][T23545] ? stack_depot_save_flags+0x40/0x900 [ 545.219469][T23545] ? __pfx_warn_alloc+0x10/0x10 [ 545.219492][T23545] ? kasan_save_track+0x4f/0x80 [ 545.219521][T23545] ? xskq_create+0x56/0x170 [ 545.219546][T23545] ? xsk_init_queue+0xb0/0x110 [ 545.219568][T23545] ? xsk_setsockopt+0x4dc/0x8d0 [ 545.219590][T23545] ? do_sock_setsockopt+0x17c/0x1b0 [ 545.219607][T23545] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 545.219625][T23545] ? do_syscall_64+0xfa/0x3b0 [ 545.219651][T23545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.219679][T23545] __vmalloc_node_range_noprof+0x125/0x12f0 [ 545.219731][T23545] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 545.219758][T23545] ? __kasan_kmalloc+0x93/0xb0 [ 545.219830][T23545] vmalloc_user_noprof+0xad/0xf0 [ 545.219849][T23545] ? xskq_create+0xbf/0x170 [ 545.219877][T23545] xskq_create+0xbf/0x170 [ 545.219907][T23545] xsk_init_queue+0xb0/0x110 [ 545.219935][T23545] xsk_setsockopt+0x4dc/0x8d0 [ 545.219963][T23545] ? __pfx_xsk_setsockopt+0x10/0x10 [ 545.219987][T23545] ? __pfx_aa_sk_perm+0x10/0x10 [ 545.220018][T23545] ? aa_sock_opt_perm+0x74/0x110 [ 545.220045][T23545] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 545.220068][T23545] ? __pfx_xsk_setsockopt+0x10/0x10 [ 545.220095][T23545] do_sock_setsockopt+0x17c/0x1b0 [ 545.220119][T23545] __x64_sys_setsockopt+0x13f/0x1b0 [ 545.220145][T23545] do_syscall_64+0xfa/0x3b0 [ 545.220172][T23545] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.220199][T23545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.220218][T23545] ? clear_bhb_loop+0x60/0xb0 [ 545.220242][T23545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.220261][T23545] RIP: 0033:0x7f1da358ebe9 [ 545.220279][T23545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.220296][T23545] RSP: 002b:00007f1da448c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 545.220318][T23545] RAX: ffffffffffffffda RBX: 00007f1da37b5fa0 RCX: 00007f1da358ebe9 [ 545.220333][T23545] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 545.220344][T23545] RBP: 00007f1da3611e19 R08: 0000000000000004 R09: 0000000000000000 [ 545.220356][T23545] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.220368][T23545] R13: 00007f1da37b6038 R14: 00007f1da37b5fa0 R15: 00007ffff054bc58 [ 545.220401][T23545] [ 545.220420][T23545] Mem-Info: [ 545.308752][T23341] lo speed is unknown, defaulting to 1000 [ 545.325741][T23549] sctp: [Deprecated]: syz.0.5135 (pid 23549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 545.325741][T23549] Use struct sctp_sack_info instead [ 545.373755][T23545] active_anon:4436 inactive_anon:0 isolated_anon:0 [ 545.373755][T23545] active_file:1470 inactive_file:40012 isolated_file:0 [ 545.373755][T23545] unevictable:768 dirty:70 writeback:0 [ 545.373755][T23545] slab_reclaimable:12709 slab_unreclaimable:145740 [ 545.373755][T23545] mapped:29096 shmem:1365 pagetables:1663 [ 545.373755][T23545] sec_pagetables:0 bounce:0 [ 545.373755][T23545] kernel_misc_reclaimable:0 [ 545.373755][T23545] free:1273089 free_pcp:14281 free_cma:0 [ 545.393949][T23546] __nla_validate_parse: 22 callbacks suppressed [ 545.393971][T23546] netlink: 10316 bytes leftover after parsing attributes in process `syz.3.5134'. [ 545.412719][T23545] Node 0 active_anon:17844kB inactive_anon:0kB active_file:5880kB inactive_file:159844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116384kB dirty:276kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15260kB pagetables:6396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 545.733950][T23545] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 545.843913][T23545] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 545.864740][T23568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5140'. [ 545.933669][T23545] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 545.939526][T23545] Node 0 DMA32 free:1177296kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17900kB inactive_anon:0kB active_file:5880kB inactive_file:158020kB unevictable:1536kB writepending:276kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:40152kB local_pcp:18296kB free_cma:0kB [ 546.032594][T23545] lowmem_reserve[]: 0 0 1 1 1 [ 546.042718][T23545] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 546.102911][T23341] lo speed is unknown, defaulting to 1000 [ 546.113906][T23545] lowmem_reserve[]: 0 0 0 0 0 [ 546.132419][T23545] Node 1 Normal free:3898780kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16992kB local_pcp:11648kB free_cma:0kB [ 546.222135][T23545] lowmem_reserve[]: 0 0 0 0 0 [ 546.232793][T23545] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 546.254843][T23545] Node 0 DMA32: 822*4kB (UM) 466*8kB (UME) 418*16kB (UM) 208*32kB (UME) 1209*64kB (UM) 1214*128kB (UM) 890*256kB (UME) 494*512kB (UM) 207*1024kB (UM) 33*2048kB (UM) 40*4096kB (UM) = 1177288kB [ 546.294158][T23582] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5145'. [ 546.329813][T23545] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 546.367621][T23545] Node 1 Normal: 219*4kB (UME) 60*8kB (UME) 35*16kB (UME) 207*32kB (UME) 57*64kB (UME) 16*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (UM) = 3898780kB [ 546.441833][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5147'. [ 546.457449][T23545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 546.469814][T23545] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 546.493708][T23545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 546.523635][T23545] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 546.543035][T23602] openvswitch: netlink: Message has -1 unknown bytes. [ 546.583537][T23545] 42860 total pagecache pages [ 546.588293][T23545] 0 pages in swap cache [ 546.592468][T23545] Free swap = 124996kB [ 546.639306][T23545] Total swap = 124996kB [ 546.660562][T23545] 2097051 pages RAM [ 546.682565][T23545] 0 pages HighMem/MovableOnly [ 546.699798][T23545] 424872 pages reserved [ 546.711378][T23545] 0 pages cma reserved [ 546.813979][T23612] netlink: 81 bytes leftover after parsing attributes in process `syz.4.5151'. [ 546.920718][T23620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5155'. [ 546.981542][T23623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5156'. [ 547.035281][ T30] audit: type=1107 audit(1754652164.513:4): pid=23622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='u廍銉T橙WSQb$鵣撱俀JG愽@' [ 547.169320][T23636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5159'. [ 547.439142][T23648] 8021q: VLANs not supported on vxcan0 [ 547.528359][T23653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5166'. [ 547.738988][T23657] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 547.923248][T23679] tipc: Enabled bearer , priority 0 [ 547.942647][T23679] syzkaller0: entered promiscuous mode [ 547.948349][T23679] syzkaller0: entered allmulticast mode [ 547.966548][T23679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5174'. [ 547.985422][T23679] syzkaller0: mtu less than device minimum [ 548.006384][T23675] tipc: Resetting bearer [ 548.070306][T23675] tipc: Disabling bearer [ 548.784319][T23736] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 548.844321][T23739] tipc: Enabled bearer , priority 0 [ 548.853185][T23739] syzkaller0: entered promiscuous mode [ 548.859884][T23739] syzkaller0: entered allmulticast mode [ 548.886882][T23739] tipc: Resetting bearer [ 548.911398][T23735] tipc: Resetting bearer [ 548.940221][T23735] tipc: Disabling bearer [ 549.043300][T15966] IPVS: starting estimator thread 0... [ 549.164570][T23748] IPVS: using max 38 ests per chain, 91200 per kthread [ 549.785045][T23780] netlink: 'syz.4.5203': attribute type 21 has an invalid length. [ 549.814591][ T30] audit: type=1804 audit(1754652167.293:5): pid=23778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5202" name="/newroot/410/cgroup.controllers" dev="tmpfs" ino=2117 res=1 errno=0 [ 549.846863][T23786] netlink: 'syz.2.5204': attribute type 39 has an invalid length. [ 549.891475][ T30] audit: type=1800 audit(1754652167.293:6): pid=23778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5202" name="cgroup.controllers" dev="tmpfs" ino=2117 res=0 errno=0 [ 549.961505][T23780] netlink: 'syz.4.5203': attribute type 1 has an invalid length. [ 550.508030][T23829] __nla_validate_parse: 6 callbacks suppressed [ 550.508052][T23829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5215'. [ 550.813481][T23846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5221'. [ 550.954778][T23855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5221'. [ 551.239028][T23870] tc_dump_action: action bad kind [ 551.280349][T23816] lo speed is unknown, defaulting to 1000 [ 551.298849][T23872] vxcan1: tx address claim with different name [ 551.577993][T23889] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5231'. [ 551.602559][T23892] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5233'. [ 551.617341][T23890] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5231'. [ 551.881228][T23904] tipc: Enabled bearer , priority 10 [ 551.949810][T23904] netlink: ct family unspecified [ 551.965877][T23904] openvswitch: netlink: Actions may not be safe on all matching packets [ 552.205722][T23915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5240'. [ 552.497962][T23934] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5246'. [ 552.541205][T23933] netlink: 'syz.2.5246': attribute type 1 has an invalid length. [ 552.573942][T23933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.612328][T23933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5246'. [ 552.642182][T23934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5246'. [ 553.018755][T23954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.025854][T23960] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 553.060184][T23960] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 553.286260][T23973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.321982][T23973] hsr0: entered promiscuous mode [ 553.334230][T23973] hsr0: entered allmulticast mode [ 553.339332][T23973] hsr_slave_1: entered allmulticast mode [ 553.791498][T24002] netlink: 'syz.3.5270': attribute type 23 has an invalid length. [ 554.145466][T21764] wlan1: Trigger new scan to find an IBSS to join [ 554.301614][T24033] tipc: Enabling of bearer rejected, failed to enable media [ 554.346331][T24035] tipc: Enabling of bearer rejected, failed to enable media [ 554.969430][T24069] block nbd2: Unsupported socket: shutdown callout must be supported. [ 555.538927][T24103] __nla_validate_parse: 11 callbacks suppressed [ 555.538948][T24103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5299'. [ 555.593898][T24103] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5299'. [ 555.651629][T24110] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5303'. [ 556.302842][T24150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5318'. [ 556.371413][T24150] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5318'. [ 556.488712][T24154] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 556.496581][T24155] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 556.704072][T24168] netlink: 'syz.1.5321': attribute type 1 has an invalid length. [ 556.713636][T24168] netlink: 'syz.1.5321': attribute type 2 has an invalid length. [ 557.042149][T24188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5332'. [ 557.187212][T21770] wlan1: Trigger new scan to find an IBSS to join [ 557.218384][T24203] netlink: 348 bytes leftover after parsing attributes in process `syz.3.5338'. [ 557.393896][T24210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5340'. [ 557.422489][T24210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5340'. [ 557.495216][T24216] netlink: 'syz.2.5342': attribute type 1 has an invalid length. [ 557.591467][T24216] 8021q: adding VLAN 0 to HW filter on device bond7 [ 557.610311][T24216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5342'. [ 557.638152][T24216] netlink: 'syz.2.5342': attribute type 1 has an invalid length. [ 557.746192][T24235] dvmrp0: entered allmulticast mode [ 558.039201][T24250] netlink: 'syz.4.5352': attribute type 1 has an invalid length. [ 558.108673][T24250] bond5: entered promiscuous mode [ 558.114790][T24250] 8021q: adding VLAN 0 to HW filter on device bond5 [ 558.268930][T24257] IPVS: set_ctl: invalid protocol: 44 172.20.20.27:20002 [ 558.281049][T24257] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20000 [ 558.419446][T24260] gtp1: entered promiscuous mode [ 558.424724][T24260] gtp1: entered allmulticast mode [ 558.537100][T24266] tipc: Enabled bearer , priority 0 [ 558.719929][T24266] tipc: Disabling bearer [ 558.772355][T24275] tipc: Enabled bearer , priority 10 [ 558.888333][T24281] tipc: Enabled bearer , priority 0 [ 558.938036][T24274] syzkaller0: entered promiscuous mode [ 558.976438][T24274] syzkaller0: entered allmulticast mode [ 559.085473][T24297] netlink: 'syz.2.5367': attribute type 11 has an invalid length. [ 559.109936][T24274] tipc: Resetting bearer [ 559.170148][T24271] tipc: Resetting bearer [ 559.219821][T24302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.235246][T24271] tipc: Disabling bearer [ 559.850524][T24339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.005238][T24346] netlink: 'syz.4.5383': attribute type 1 has an invalid length. [ 560.024306][T24346] nbd: illegal input index 1048576 [ 560.116393][T24350] tipc: Enabling of bearer rejected, already enabled [ 560.130508][T24350] tipc: Enabling of bearer rejected, already enabled [ 560.144369][T21766] wlan1: Trigger new scan to find an IBSS to join [ 560.157911][T24350] tipc: Enabling of bearer rejected, already enabled [ 560.731618][T24380] __nla_validate_parse: 12 callbacks suppressed [ 560.731639][T24380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5396'. [ 561.010145][T24390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.155705][T21752] wlan1: Creating new IBSS network, BSSID 3a:80:c4:d4:d6:ac [ 561.232780][T24397] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5403'. [ 561.411584][T24408] netlink: 'syz.4.5405': attribute type 49 has an invalid length. [ 561.422081][T24410] netlink: 'syz.2.5407': attribute type 4 has an invalid length. [ 561.433636][T24410] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5407'. [ 561.442739][T24410] : renamed from ` (while UP) [ 561.702694][T24416] ip6gre1: entered allmulticast mode [ 561.731066][T24416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5410'. [ 561.774051][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5410'. [ 561.894812][T24424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5414'. [ 562.200345][T24434] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 562.527165][T24457] syzkaller1: entered promiscuous mode [ 562.548787][T24457] syzkaller1: entered allmulticast mode [ 562.725991][T24469] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20000 [ 562.810921][T24469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5419'. [ 562.877219][T24469] sit0: entered allmulticast mode [ 563.029778][T24475] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 563.103596][T24479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5422'. [ 563.115369][T24478] team_slave_0: entered allmulticast mode [ 563.182965][T24479] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 563.227957][T24479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.277161][T24484] netlink: 'syz.1.5424': attribute type 19 has an invalid length. [ 563.330437][T24467] lo speed is unknown, defaulting to 1000 [ 563.506947][T24490] netlink: 'syz.4.5425': attribute type 1 has an invalid length. [ 563.517180][T24490] nbd: error processing sock list [ 563.522783][T24490] block nbd2: shutting down sockets [ 563.761848][T24511] netlink: 'syz.2.5432': attribute type 1 has an invalid length. [ 563.777915][T24511] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5432'. [ 564.092850][T24521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5436'. [ 564.927210][T24553] netlink: 'syz.2.5448': attribute type 6 has an invalid length. [ 565.175325][T24560] netlink: 'syz.1.5451': attribute type 83 has an invalid length. [ 565.194663][T24559] netlink: 'syz.1.5451': attribute type 83 has an invalid length. [ 565.394562][T24578] netlink: 'syz.4.5456': attribute type 1 has an invalid length. [ 565.507659][T24575] sock: sock_timestamping_bind_phc: sock not bind to device [ 565.537245][T24578] 8021q: adding VLAN 0 to HW filter on device bond6 [ 565.585633][T24582] 8021q: adding VLAN 0 to HW filter on device bond6 [ 565.593032][T24582] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 565.605567][T24582] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 565.651415][T24581] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 565.719318][T24589] netlink: 'syz.2.5459': attribute type 2 has an invalid length. [ 565.874476][T24601] netlink: 'syz.4.5463': attribute type 1 has an invalid length. [ 566.267079][T24630] __nla_validate_parse: 7 callbacks suppressed [ 566.267100][T24630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5471'. [ 566.603092][T24655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5478'. [ 566.611923][T24652] geneve2: entered promiscuous mode [ 566.624829][T24652] geneve2: entered allmulticast mode [ 566.632371][T21764] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 566.715669][T24653] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 566.731508][T24660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5479'. [ 566.778204][T24652] bond7: entered promiscuous mode [ 566.804918][T24664] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5480'. [ 566.813193][T24652] bond7: entered allmulticast mode [ 566.822337][T24665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5481'. [ 566.833830][T24652] 8021q: adding VLAN 0 to HW filter on device bond7 [ 567.032362][T24652] bond7 (unregistering): Released all slaves [ 567.073282][T21764] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 567.101174][T21764] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 567.315874][T24678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5483'. [ 567.336491][T24678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5483'. [ 567.500764][T24693] netlink: 'syz.3.5486': attribute type 1 has an invalid length. [ 567.522293][T24693] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5486'. [ 567.649174][T24700] tipc: Enabling of bearer rejected, already enabled [ 567.862695][T24711] netlink: 516 bytes leftover after parsing attributes in process `syz.2.5495'. [ 568.406281][T24737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5503'. [ 568.570090][T24752] netlink: 'syz.1.5507': attribute type 10 has an invalid length. [ 568.599503][T24754] netlink: 'syz.2.5509': attribute type 21 has an invalid length. [ 569.521495][T24807] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 569.658847][T24818] tipc: Invalid UDP bearer configuration [ 569.658907][T24818] tipc: Enabling of bearer rejected, failed to enable media [ 569.672028][T24820] netlink: 'syz.0.5531': attribute type 1 has an invalid length. [ 569.716687][T24820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 569.727620][T24818] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 569.737971][T24818] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 569.789370][T24820] bond3: (slave veth7): Enslaving as an active interface with a down link [ 569.823784][T24824] tun0: tun_chr_ioctl cmd 1074025675 [ 569.829590][T24824] tun0: persist disabled [ 569.888528][T24823] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 569.926307][T24827] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 569.928332][T24833] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 569.945059][T24827] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 570.191980][T24844] 8021q: adding VLAN 0 to HW filter on device bond5 [ 570.219873][T24846] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 570.795684][T24884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.987228][T24893] netlink: 'syz.4.5553': attribute type 237 has an invalid length. [ 571.231521][T24904] netlink: 'syz.4.5557': attribute type 83 has an invalid length. [ 571.402096][T24913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.650549][T24930] __nla_validate_parse: 15 callbacks suppressed [ 571.650570][T24930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5564'. [ 571.746482][T24936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5566'. [ 571.793655][T24938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5567'. [ 571.862479][T24942] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5568'. [ 571.930848][T24942] vlan4: entered allmulticast mode [ 571.953600][T24942] gretap0: entered allmulticast mode [ 572.102259][T24951] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 572.132099][T24954] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5573'. [ 572.266610][T24962] veth0: entered promiscuous mode [ 572.302081][T24962] veth0: left promiscuous mode [ 572.422339][T24967] sit0: left promiscuous mode [ 572.444226][T24971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5577'. [ 572.484531][T24972] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5575'. [ 572.507589][T24973] nbd: must specify an index to disconnect [ 572.541920][T24977] netlink: 'syz.3.5578': attribute type 1 has an invalid length. [ 572.548498][T24967] 8021q: adding VLAN 0 to HW filter on device  [ 572.569569][T24967] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.581857][T24967] tipc: Resetting bearer [ 572.590670][T24967] dummy0: left promiscuous mode [ 572.612198][T24967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.640027][T24972] hsr_slave_1: left promiscuous mode [ 572.714308][T24985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5579'. [ 573.383009][T25029] netlink: 'syz.1.5593': attribute type 1 has an invalid length. [ 573.643949][T25041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5603'. [ 573.696504][T25041] syz_tun (unregistering): left allmulticast mode [ 573.707773][T25041] syz_tun (unregistering): left promiscuous mode [ 573.722088][T25041] bridge0: port 3(syz_tun) entered disabled state [ 573.815225][T25047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5604'. [ 574.078624][T25067] bridge0: port 3(batadv1) entered blocking state [ 574.085982][T25067] bridge0: port 3(batadv1) entered disabled state [ 574.092786][T25067] batadv1: entered allmulticast mode [ 574.102339][T25067] batadv1: entered promiscuous mode [ 574.280549][T25079] block nbd2: Unsupported socket: shutdown callout must be supported. [ 574.380158][T25085] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 574.391513][T25085] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 574.512338][T25091] netlink: 'syz.2.5617': attribute type 1 has an invalid length. [ 574.537564][T25091] netlink: 'syz.2.5617': attribute type 4 has an invalid length. [ 574.575786][T21770] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 574.586468][T21770] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 574.832312][T21752] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.888628][T21752] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.909624][T21752] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.012796][T21752] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.282502][T25132] Set syz1 is full, maxelem 65536 reached [ 576.088074][T25179] syzkaller1: entered promiscuous mode [ 576.100678][T25179] syzkaller1: entered allmulticast mode [ 576.541385][T25195] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 577.190555][T25222] dvmrp0: entered allmulticast mode [ 577.440649][T25245] tipc: Resetting bearer [ 577.450386][T25245] batman_adv: batadv0: Interface deactivated: dummy0 [ 577.457893][T25245] batman_adv: batadv0: Removing interface: dummy0 [ 577.478988][T25245] bond3: (slave veth0_to_bond): Releasing active interface [ 577.542392][T25245] bond2: (slave ip6erspan0): Releasing active interface [ 577.578451][T25245] bond3: (slave veth7): Releasing active interface [ 577.930085][T25264] __nla_validate_parse: 11 callbacks suppressed [ 577.930105][T25264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5666'. [ 577.964943][T25264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5666'. [ 577.986661][T25264] netlink: 'syz.4.5666': attribute type 1 has an invalid length. [ 577.994861][T25264] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5666'. [ 578.721970][T25306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5681'. [ 578.776133][T25308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5682'. [ 579.013776][T25316] : entered promiscuous mode [ 579.248612][T25336] netlink: 'syz.1.5689': attribute type 10 has an invalid length. [ 579.249153][T25333] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 579.301426][T25337] netlink: 'syz.1.5689': attribute type 10 has an invalid length. [ 579.347767][T25336] bridge0: port 1(dummy0) entered disabled state [ 579.386363][T25336] dummy0: left allmulticast mode [ 579.401651][T25336] dummy0: left promiscuous mode [ 579.422188][T25336] bridge0: port 1(dummy0) entered disabled state [ 579.492178][T25336] team0: Port device dummy0 added [ 579.580224][T25337] team0: Port device dummy0 removed [ 579.674657][T25351] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5692'. [ 580.157913][T25379] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5701'. [ 580.271112][T25382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5702'. [ 580.291968][T25386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5703'. [ 580.310178][T25386] bridge0: port 2(veth0_to_bridge) entered disabled state [ 580.368345][T25382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.395779][T25394] netlink: 'syz.1.5703': attribute type 21 has an invalid length. [ 580.428379][T25394] IPv6: NLM_F_CREATE should be specified when creating new route [ 580.471314][T25394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 580.478652][T25394] IPv6: NLM_F_CREATE should be set when creating new route [ 580.485980][T25394] IPv6: NLM_F_CREATE should be set when creating new route [ 580.493300][T25394] IPv6: NLM_F_CREATE should be set when creating new route [ 580.767581][T25408] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg1, syncid = 1, id = 0 [ 580.778229][T25406] IPVS: set_ctl: invalid protocol: 197 10.1.1.2:20003 [ 580.799653][T25409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5707'. [ 580.810010][T25405] IPVS: set_ctl: invalid protocol: 197 10.1.1.2:20003 [ 581.529175][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 581.539706][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 581.550322][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 581.570049][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 581.584579][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 581.774938][T25450] openvswitch: netlink: Missing valid actions attribute. [ 581.787887][T25450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.846641][T21771] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.006845][T21771] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.191751][T21771] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.215008][T25459] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 582.408875][T21771] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.538117][T25439] lo speed is unknown, defaulting to 1000 [ 582.633870][T25479] netlink: 'syz.4.5728': attribute type 4 has an invalid length. [ 582.709191][T25479] : renamed from bond0 (while UP) [ 582.901074][T21771] veth0_to_bridge: left allmulticast mode [ 582.924726][T21771] veth0_to_bridge: left promiscuous mode [ 582.930700][T21771] bridge0: port 2(veth0_to_bridge) entered disabled state [ 583.012668][T25495] __nla_validate_parse: 3 callbacks suppressed [ 583.012689][T25495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5733'. [ 583.037171][T25495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5733'. [ 583.071503][T25495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5733'. [ 583.112123][T25495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5733'. [ 583.122819][T25495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5733'. [ 583.139367][T25495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5733'. [ 583.151018][T25495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5733'. [ 583.172631][T25495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5733'. [ 583.183129][T25495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5733'. [ 583.201572][T25495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5733'. [ 583.529180][T21771] dvmrp0 (unregistering): left allmulticast mode [ 583.674621][ T51] Bluetooth: hci2: command tx timeout [ 583.893885][T21771] bond1 (unregistering): Released all slaves [ 583.920625][T21771] bond0 (unregistering): Released all slaves [ 584.045279][T21771] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 584.057422][T21771] bond2 (unregistering): Released all slaves [ 584.288708][T21771] tipc: Left network mode [ 584.325822][T25518] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 584.379379][T21771] IPVS: stopping master sync thread 20503 ... [ 584.436693][T25525] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 584.444671][T25525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.546065][T25525] wg1: entered promiscuous mode [ 584.802289][T25439] chnl_net:caif_netlink_parms(): no params data found [ 584.953076][T25545] openvswitch: netlink: IPv6 tunnel dst address is zero [ 585.351567][T25439] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.363908][T25562] netlink: 'syz.4.5751': attribute type 1 has an invalid length. [ 585.383742][T25439] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.411680][T25439] bridge_slave_0: entered allmulticast mode [ 585.448601][T25439] bridge_slave_0: entered promiscuous mode [ 585.476222][T25439] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.520757][T25439] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.533775][T25439] bridge_slave_1: entered allmulticast mode [ 585.593521][T25571] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 585.623989][T25439] bridge_slave_1: entered promiscuous mode [ 585.745038][ T51] Bluetooth: hci2: command tx timeout [ 585.889402][T25579] openvswitch: netlink: IPv6 tunnel dst address is zero [ 586.019384][T25439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.062028][T21771] hsr_slave_1: left promiscuous mode [ 586.128647][T21771] vlan0: left allmulticast mode [ 586.134242][T21771] veth0_vlan: left allmulticast mode [ 586.139715][T21771] vlan0: left promiscuous mode [ 586.146983][T21771] veth1_macvtap: left promiscuous mode [ 586.153115][T21771] veth0_macvtap: left promiscuous mode [ 586.162568][T21771] veth1_vlan: left promiscuous mode [ 586.170867][T21771] veth0_vlan: left promiscuous mode [ 586.705422][T21771] pim6reg527 (unregistering): left allmulticast mode [ 586.769633][T21771] pim6reg (unregistering): left allmulticast mode [ 587.712627][T25439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.742901][T25545] lo speed is unknown, defaulting to 1000 [ 587.824624][ T51] Bluetooth: hci2: command tx timeout [ 587.886569][T25439] team0: Port device team_slave_0 added [ 588.011211][T25439] team0: Port device team_slave_1 added [ 588.205070][T25439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.212266][T25439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.246650][T25439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.269925][T25439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.283594][T25626] __nla_validate_parse: 63 callbacks suppressed [ 588.283616][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5774'. [ 588.308839][T25439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.378968][T25439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.461197][T21771] IPVS: stop unused estimator thread 0... [ 588.623540][T25639] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5778'. [ 588.646892][T25439] hsr_slave_0: entered promiscuous mode [ 588.660624][T25439] hsr_slave_1: entered promiscuous mode [ 588.670763][T25439] debugfs: 'hsr0' already exists in 'hsr' [ 588.680549][T25439] Cannot create hsr debugfs directory [ 588.919233][T25647] vlan1: entered allmulticast mode [ 588.930946][T25647] bond0: entered allmulticast mode [ 589.185650][T25656] netlink: 'syz.4.5782': attribute type 1 has an invalid length. [ 589.330148][T25656] bond0: entered promiscuous mode [ 589.364150][T25656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.383433][T25659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5781'. [ 589.494440][T25661] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 589.495882][T25662] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 589.897243][T25675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.906567][ T51] Bluetooth: hci2: command tx timeout [ 590.347641][T25692] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5793'. [ 590.357175][T25689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5794'. [ 590.475903][T25439] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 590.497572][T25439] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 590.516288][T25439] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 590.531778][T25439] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 590.689276][T25439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.787778][T25716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5800'. [ 590.829107][T25439] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.883405][T21764] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.890594][T21764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.942724][T21764] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.950092][T21764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.985782][T25724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5803'. [ 591.214791][T25732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5804'. [ 591.249173][T21764] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 591.410100][T25746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5807'. [ 591.578681][T25439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.702963][T25439] veth0_vlan: entered promiscuous mode [ 591.720732][T25439] veth1_vlan: entered promiscuous mode [ 591.787803][T25439] veth0_macvtap: entered promiscuous mode [ 591.808034][T25439] veth1_macvtap: entered promiscuous mode [ 591.858112][T25439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.890083][T25439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.931716][T21744] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.948116][T21744] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.968833][T21744] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.023112][T21744] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.336224][T25779] gtp0: entered promiscuous mode [ 592.414953][T21752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.422916][T21752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.509029][T25790] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 592.530162][T25792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5821'. [ 592.645349][T21744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.669856][T21744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.896252][T25815] netlink: 'syz.3.5828': attribute type 8 has an invalid length. [ 593.074608][T25829] 8021q: VLANs not supported on gre0 [ 593.111057][T25829] netlink: 'syz.1.5709': attribute type 10 has an invalid length. [ 593.299248][T25829] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 593.606827][T25859] __nla_validate_parse: 1 callbacks suppressed [ 593.606850][T25859] netlink: 212404 bytes leftover after parsing attributes in process `syz.0.5839'. [ 593.858051][T25874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5846'. [ 594.092541][T25889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5849'. [ 594.100260][T25885] veth0_vlan: tun_chr_ioctl cmd 2148553947 [ 594.150971][T25895] netlink: 'syz.3.5850': attribute type 1 has an invalid length. [ 594.210630][T25897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5850'. [ 594.236391][T25897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5850'. [ 594.250231][T15967] IPVS: starting estimator thread 0... [ 594.275070][T25894] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 594.343474][T25901] IPVS: using max 26 ests per chain, 62400 per kthread [ 594.354915][T25895] 8021q: adding VLAN 0 to HW filter on device bond6 [ 594.734510][T25925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5860'. [ 594.768514][T25932] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 594.900334][T25940] netlink: 'syz.4.5864': attribute type 1 has an invalid length. [ 594.908714][T25940] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5864'. [ 594.928179][T25940] veth0: entered promiscuous mode [ 594.957554][T15967] lo speed is unknown, defaulting to 1000 [ 594.984876][T25939] veth0: left promiscuous mode [ 595.062551][T25949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5867'. [ 595.382318][T25962] can: request_module (can-proto-0) failed. [ 595.411054][T25968] syzkaller0: entered promiscuous mode [ 595.424631][T25968] syzkaller0: entered allmulticast mode [ 595.598652][T25980] netlink: 'syz.1.5877': attribute type 4 has an invalid length. [ 595.610674][T25980] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5877'. [ 595.805100][T25989] netlink: 'syz.3.5882': attribute type 5 has an invalid length. [ 595.829967][T25994] netlink: 'syz.3.5882': attribute type 5 has an invalid length. [ 595.906174][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805888a800: rx timeout, send abort [ 595.915717][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805888a800: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 596.066768][T26004] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5886'. [ 596.741339][T26044] tipc: Started in network mode [ 596.748592][T26044] tipc: Node identity 6e32dbdbde27, cluster identity 4711 [ 596.767441][T26044] tipc: Enabled bearer , priority 0 [ 596.794261][T26044] syzkaller0: entered promiscuous mode [ 596.799876][T26044] syzkaller0: entered allmulticast mode [ 596.862872][T26049] netlink: 'syz.2.5902': attribute type 12 has an invalid length. [ 596.880903][T26049] netlink: 'syz.2.5902': attribute type 11 has an invalid length. [ 596.903029][T26050] tipc: Resetting bearer [ 596.922968][T26043] tipc: Resetting bearer [ 596.960081][T26043] tipc: Disabling bearer [ 597.175153][T26047] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.182389][T26047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.222546][T26047] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.231057][T26047] batman_adv: batadv0: Interface activated: team0 [ 597.241438][T26047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 597.571185][T26081] netlink: 'syz.3.5912': attribute type 1 has an invalid length. [ 597.837130][T26072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.918277][T26100] netlink: 'syz.4.5917': attribute type 29 has an invalid length. [ 597.945020][T26101] netlink: 'syz.4.5917': attribute type 29 has an invalid length. [ 598.099542][T26110] gretap0: entered promiscuous mode [ 598.234435][T26094] lo speed is unknown, defaulting to 1000 [ 598.680953][T26133] netlink: 'syz.4.5927': attribute type 1 has an invalid length. [ 599.481428][T26169] __nla_validate_parse: 13 callbacks suppressed [ 599.481450][T26169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5933'. [ 599.700689][T26180] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5937'. [ 599.760182][T26181] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.5935'. [ 599.777462][T26182] tipc: Enabled bearer , priority 0 [ 599.814462][T26178] syzkaller0: entered promiscuous mode [ 599.827896][T26178] syzkaller0: entered allmulticast mode [ 599.923212][T26178] tipc: Resetting bearer [ 599.931323][T26185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5938'. [ 599.931621][T26177] tipc: Resetting bearer [ 599.973520][T26177] tipc: Disabling bearer [ 600.315791][T26203] syzkaller0: entered promiscuous mode [ 600.333791][T26203] syzkaller0: entered allmulticast mode [ 600.369744][T26202] tipc: Enabled bearer , priority 0 [ 600.458464][T26202] tipc: Resetting bearer [ 600.524903][T26208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5945'. [ 600.545411][T26202] tipc: Disabling bearer [ 600.639065][T26220] openvswitch: netlink: IPv6 tunnel dst address is zero [ 600.684236][T26226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5950'. [ 600.805535][T26231] validate_nla: 3 callbacks suppressed [ 600.805554][T26231] netlink: 'syz.3.5952': attribute type 1 has an invalid length. [ 600.835969][T26233] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 600.928267][T26239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5954'. [ 601.156653][T26271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5960'. [ 601.171266][T26271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5960'. [ 601.206048][T26281] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 601.620228][T26360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5969'. [ 602.090444][T26385] netlink: 'syz.3.5973': attribute type 14 has an invalid length. [ 602.370374][T26396] bridge12: entered promiscuous mode [ 602.378548][T26396] bridge12: entered allmulticast mode [ 602.695912][T26416] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 602.955212][T26425] netlink: 'syz.4.5984': attribute type 39 has an invalid length. [ 603.110065][T26433] netlink: 'syz.1.5990': attribute type 3 has an invalid length. [ 603.538095][T26454] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 604.332287][T21773] bridge_slave_1: left allmulticast mode [ 604.339911][T21773] bridge_slave_1: left promiscuous mode [ 604.369290][T21773] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.440507][T21773] bridge_slave_0: left allmulticast mode [ 604.449025][T21773] bridge_slave_0: left promiscuous mode [ 604.472190][T21773] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.491164][T26503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.744779][T21773] tipc: Resetting bearer [ 604.878885][T26528] __nla_validate_parse: 10 callbacks suppressed [ 604.878904][T26528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6016'. [ 605.127456][T26535] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6018'. [ 605.277668][T26542] netlink: 'syz.3.6018': attribute type 1 has an invalid length. [ 605.521992][T26547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6021'. [ 605.550868][T21773] tipc: Disabling bearer [ 605.610727][T21773] dvmrp0 (unregistering): left allmulticast mode [ 605.731808][T21773] bond3 (unregistering): (slave bridge1): Releasing active interface [ 606.322705][T21773]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.333874][T21773]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.342864][T21773]  (unregistering): Released all slaves [ 606.360207][T21773] bond1 (unregistering): Released all slaves [ 606.470631][T21773] bond2 (unregistering): Released all slaves [ 606.485816][T21773] bond3 (unregistering): Released all slaves [ 606.500634][T21773] bond4 (unregistering): Released all slaves [ 606.611759][T21773] bond5 (unregistering): Released all slaves [ 606.644942][T26517] IPv6: sit1: Disabled Multicast RS [ 606.651441][T26517] sit1: entered allmulticast mode [ 606.771641][T26554] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6022'. [ 606.863867][T21773] tipc: Disabling bearer [ 606.922333][T26558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6024'. [ 606.956936][T21773] tipc: Left network mode [ 607.034124][T26562] syzkaller0: entered promiscuous mode [ 607.039669][T26562] syzkaller0: entered allmulticast mode [ 607.077978][T26562] RDS: rds_bind could not find a transport for ::ffff:10.1.0.254, load rds_tcp or rds_rdma? [ 607.088953][T26566] IPVS: Unknown mcast interface: nicvf0 [ 607.158490][T26569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6025'. [ 607.217792][T21773] batman_adv: batadv0: Removing interface: wlan1 [ 607.504239][T26589] netlink: 512 bytes leftover after parsing attributes in process `syz.1.6032'. [ 607.569914][T26589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6032'. [ 607.654688][T26587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6032'. [ 608.264071][T26615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6037'. [ 608.282651][T26615] netlink: 'syz.2.6037': attribute type 20 has an invalid length. [ 608.428221][T26623] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 608.468599][T26622] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 608.799858][T26634] netlink: 'syz.1.6046': attribute type 29 has an invalid length. [ 608.910719][T26637] netlink: 'syz.1.6046': attribute type 29 has an invalid length. [ 609.042655][T21773] hsr_slave_0: left promiscuous mode [ 609.051487][T21773] hsr_slave_1: left promiscuous mode [ 609.074709][T21773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.090273][T21773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.123835][T21773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.143264][T21773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.192777][T21773] veth1_macvtap: left promiscuous mode [ 609.200321][T21773] veth0_vlan: left promiscuous mode [ 610.449384][T26675] tipc: Enabled bearer , priority 10 [ 610.722179][T26697] __nla_validate_parse: 4 callbacks suppressed [ 610.722202][T26697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6063'. [ 610.767091][T26697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6063'. [ 610.942395][T21773] IPVS: stop unused estimator thread 0... [ 610.970966][T26712] netlink: 'syz.3.6068': attribute type 4 has an invalid length. [ 611.456692][T26739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6076'. [ 611.565064][T15967] tipc: Node number set to 3326717903 [ 612.167274][T26739] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.237260][T26739] batman_adv: batadv0: Interface deactivated: team0 [ 612.415131][T26739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.438661][T26739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.670624][T21764] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.715244][T21764] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.745462][T21764] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.790707][T21764] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.840072][T21764] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.873193][T21764] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.931239][T21764] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.964399][T21764] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.972834][T21764] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 613.039195][T21764] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.049529][T26777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6088'. [ 613.089047][T21764] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.141267][T21764] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 613.879662][T26838] netlink: 'syz.2.6102': attribute type 4 has an invalid length. [ 613.897010][T26838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6102'. [ 613.943780][T26837] netlink: 'syz.2.6102': attribute type 4 has an invalid length. [ 613.951581][T26837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6102'. [ 614.007898][T26844] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6104'. [ 614.150442][T26848] tipc: Enabled bearer , priority 0 [ 614.181924][T26851] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6107'. [ 614.206938][T26841] tipc: Disabling bearer [ 614.388478][T26859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6110'. [ 614.467762][T26859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6110'. [ 614.853096][T26882] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 615.279696][T26909] tipc: Enabled bearer , priority 0 [ 615.287369][T26909] syzkaller0: entered promiscuous mode [ 615.316729][T26909] syzkaller0: entered allmulticast mode [ 615.357111][T26909] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 615.434423][T26909] tipc: Resetting bearer [ 615.455777][T26918] netlink: 'syz.2.6129': attribute type 1 has an invalid length. [ 615.470424][T26908] tipc: Resetting bearer [ 615.528897][T26908] tipc: Disabling bearer [ 615.936361][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 615.947500][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 615.957429][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 615.967550][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 615.981688][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 616.294627][T26944] __nla_validate_parse: 3 callbacks suppressed [ 616.294647][T26944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6137'. [ 616.404170][T26951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6139'. [ 616.432820][T26948] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6138'. [ 616.459607][T21752] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.484153][T21752] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 616.540373][T26933] lo speed is unknown, defaulting to 1000 [ 616.542369][T26953] netlink: 'syz.2.6141': attribute type 39 has an invalid length. [ 616.578743][T26960] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6142'. [ 616.681141][T26962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6143'. [ 616.691973][T26963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6143'. [ 616.704861][T21752] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.714889][T21752] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 616.766939][T26966] netlink: 'syz.4.6144': attribute type 10 has an invalid length. [ 616.789457][T21752] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.801260][T21752] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 616.835876][T26962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6143'. [ 616.910731][T21752] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.930242][T21752] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 617.257584][T26987] sit0: entered promiscuous mode [ 617.270248][T26987] netlink: 'syz.1.6150': attribute type 1 has an invalid length. [ 617.278883][T26987] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6150'. [ 617.584723][T27010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6156'. [ 617.908167][T21752] erspan0 (unregistering): left promiscuous mode [ 617.943802][T21752] 1{X功 (unregistering): left promiscuous mode [ 618.033227][T21752] dvmrp0 (unregistering): left allmulticast mode [ 618.069986][ T5849] Bluetooth: hci5: command tx timeout [ 618.149126][T27020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6159'. [ 618.914246][T21752]  (unregistering): Released all slaves [ 618.934935][T21752] bond0 (unregistering): Released all slaves [ 618.949753][T21752] bond1 (unregistering): Released all slaves [ 619.067726][T21752] bond2 (unregistering): Released all slaves [ 619.179771][T21752] bond3 (unregistering): Released all slaves [ 619.308303][T27030] kthread_run failed with err -4 [ 619.420879][T27037] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 619.461039][T21752] : left promiscuous mode [ 619.492339][T27051] netlink: 'syz.4.6167': attribute type 21 has an invalid length. [ 619.528562][T27051] netlink: 'syz.4.6167': attribute type 22 has an invalid length. [ 619.536959][T27051] netlink: 'syz.4.6167': attribute type 23 has an invalid length. [ 619.570758][T27051] netlink: 'syz.4.6167': attribute type 25 has an invalid length. [ 619.602806][T27051] netlink: 'syz.4.6167': attribute type 26 has an invalid length. [ 619.727177][T21752] : left promiscuous mode [ 619.740836][T27061] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 619.770215][T27060] netlink: 'syz.4.6171': attribute type 29 has an invalid length. [ 619.829252][T27064] netlink: 'syz.4.6171': attribute type 29 has an invalid length. [ 619.863496][T21752] tipc: Disabling bearer [ 619.898452][T21752] tipc: Disabling bearer [ 619.917660][T21752] tipc: Disabling bearer [ 619.933277][T27063] tipc: Enabling of bearer rejected, failed to enable media [ 619.943943][T21752] tipc: Left network mode [ 619.966022][T27060] netlink: 'syz.4.6171': attribute type 29 has an invalid length. [ 620.008804][T27060] netlink: 'syz.4.6171': attribute type 29 has an invalid length. [ 620.102326][T26933] chnl_net:caif_netlink_parms(): no params data found [ 620.144552][ T51] Bluetooth: hci5: command tx timeout [ 620.227610][T27087] netlink: 'syz.1.6178': attribute type 14 has an invalid length. [ 620.468336][T27095] veth0: entered promiscuous mode [ 620.487531][T27094] veth0: left promiscuous mode [ 620.611625][T27116] net veth1_virt_wifi .: renamed from virt_wifi0 [ 620.689963][T27112] 8021q: adding VLAN 0 to HW filter on device bond7 [ 620.809877][T27128] Unsupported ieee802154 address type: 0 [ 620.840452][T27121] 8021q: adding VLAN 0 to HW filter on device bond7 [ 620.848842][T27121] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 620.860868][T27121] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 620.894703][T27112] gretap1: entered promiscuous mode [ 620.903133][T27112] bond7: (slave gretap1): making interface the new active one [ 620.914007][T27112] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 620.968052][T26933] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.986810][T26933] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.996279][T26933] bridge_slave_0: entered allmulticast mode [ 621.004912][T26933] bridge_slave_0: entered promiscuous mode [ 621.257703][T26933] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.272901][T26933] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.281439][T26933] bridge_slave_1: entered allmulticast mode [ 621.294412][T26933] bridge_slave_1: entered promiscuous mode [ 621.332776][T27143] bond10: (slave gretap3): making interface the new active one [ 621.342074][T27143] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 621.478071][T27149] bridge_slave_1: left allmulticast mode [ 621.500021][T27149] bridge_slave_1: left promiscuous mode [ 621.512806][T27149] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.529407][T27149] bridge_slave_0: left allmulticast mode [ 621.535271][T27149] bridge_slave_0: left promiscuous mode [ 621.541180][T27149] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.575598][T27164] __nla_validate_parse: 11 callbacks suppressed [ 621.575618][T27164] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6196'. [ 621.762417][T27168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6198'. [ 621.858670][T27169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6198'. [ 621.900129][T26933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.011884][T27176] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6199'. [ 622.229535][ T51] Bluetooth: hci5: command 0x040f tx timeout [ 622.401141][T27183] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6202'. [ 622.421620][T27183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6202'. [ 622.429108][T27185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6202'. [ 622.543050][T26933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.636942][T21752] veth1_macvtap: left promiscuous mode [ 622.665242][T21752] veth0_macvtap: left promiscuous mode [ 622.962081][T21752] pim6reg527 (unregistering): left allmulticast mode [ 623.850865][T27185] macvlan3: entered allmulticast mode [ 623.925530][T26933] team0: Port device team_slave_0 added [ 623.935346][T26933] team0: Port device team_slave_1 added [ 624.016476][T27206] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6208'. [ 624.146563][T27208] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6209'. [ 624.223534][T26933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.231040][T26933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.267147][T26933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.279403][T27217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.299247][T26933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.306594][ T5849] Bluetooth: hci5: command 0x040f tx timeout [ 624.316769][T26933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.346746][T26933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.358275][T27212] netem: incorrect gi model size [ 624.412507][T27219] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6212'. [ 624.540576][T27219] gretap0: entered promiscuous mode [ 624.576120][T27227] 0{X功: renamed from gretap0 [ 624.584957][T27227] 0{X功: left promiscuous mode [ 624.590126][T27227] 0{X功: entered allmulticast mode [ 624.607061][T27227] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 624.657082][T26933] hsr_slave_0: entered promiscuous mode [ 624.681730][T26933] hsr_slave_1: entered promiscuous mode [ 624.693120][T26933] debugfs: 'hsr0' already exists in 'hsr' [ 624.719019][T26933] Cannot create hsr debugfs directory [ 624.779820][T21752] IPVS: stop unused estimator thread 0... [ 624.895422][T27236] validate_nla: 6 callbacks suppressed [ 624.895441][T27236] netlink: 'syz.2.6217': attribute type 10 has an invalid length. [ 624.929709][T27236] wlan1: mtu less than device minimum [ 624.935941][T27236] : (slave wlan1): Error -22 calling dev_set_mtu [ 624.992876][T27236] pimreg3: entered allmulticast mode [ 625.645252][T27267] tipc: Enabled bearer , priority 0 [ 625.791387][T27267] syzkaller0: entered promiscuous mode [ 625.812126][T27267] syzkaller0: entered allmulticast mode [ 625.829275][T27267] tipc: Resetting bearer [ 625.919079][T27266] tipc: Resetting bearer [ 626.000035][T27294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.091516][T27301] openvswitch: netlink: Flow actions attr not present in new flow. [ 626.394404][ T5849] Bluetooth: hci5: command 0x040f tx timeout [ 626.653783][T15967] tipc: Node number set to 1721079329 [ 626.715047][T27310] __nla_validate_parse: 8 callbacks suppressed [ 626.715064][T27310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6236'. [ 628.029173][T27266] tipc: Disabling bearer [ 628.062667][T26933] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 628.100339][T26933] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 628.136988][T26933] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 628.179384][T26933] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 628.274203][T27330] IPv6: Can't replace route, no match found [ 628.410204][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6242'. [ 628.419491][T26933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.472075][T27339] netlink: 'syz.3.6243': attribute type 2 has an invalid length. [ 628.484058][T27340] netlink: 'syz.3.6243': attribute type 2 has an invalid length. [ 628.484202][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6242'. [ 628.507816][T26933] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.669013][T21752] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.676266][T21752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.710926][T21744] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.718138][T21744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.850396][T27350] netlink: 'syz.3.6248': attribute type 6 has an invalid length. [ 629.489255][T27382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.529929][T27382] bond0: (slave rose0): Enslaving as an active interface with an up link [ 629.584677][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6254'. [ 629.637188][T27387] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 629.695748][T27387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.778410][T26933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.984271][T26933] veth0_vlan: entered promiscuous mode [ 630.021734][T26933] veth1_vlan: entered promiscuous mode [ 630.086041][T27407] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6258'. [ 630.095433][T27410] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6258'. [ 630.131428][T26933] veth0_macvtap: entered promiscuous mode [ 630.171636][T27413] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6260'. [ 630.184189][T26933] veth1_macvtap: entered promiscuous mode [ 630.194251][T27368] lo speed is unknown, defaulting to 1000 [ 630.219748][T27416] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6260'. [ 630.247818][T26933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.308232][T26933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.348726][T21752] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.378245][T21752] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.413203][T21752] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.439930][T21752] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.453050][T27426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6262'. [ 630.662340][T21752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.696555][T21752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.817479][T21769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.837682][T21769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.992041][T27470] batadv_slave_1: entered promiscuous mode [ 632.050643][T27470] batadv_slave_1: left promiscuous mode [ 632.356726][T23075] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 632.368784][T23075] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 632.377238][T23075] CPU: 0 UID: 0 PID: 23075 Comm: kbnepd bnep0 Not tainted 6.16.0-syzkaller-06620-gae633388cae3 #0 PREEMPT(full) [ 632.389155][T23075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 632.399245][T23075] RIP: 0010:klist_del+0x49/0x110 [ 632.404223][T23075] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 29 dd bc f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 0b dd bc f6 4d 8b 7e 58 4c 89 f7 e8 bf 65 [ 632.423854][T23075] RSP: 0018:ffffc9000d73f768 EFLAGS: 00010202 [ 632.429937][T23075] RAX: 000000000000000b RBX: ffff8880a9d30c60 RCX: ffff888023e43c00 [ 632.437917][T23075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 632.445892][T23075] RBP: ffffc9000d73f890 R08: ffff88805a1e5d23 R09: 1ffff1100b43cba4 [ 632.453865][T23075] R10: dffffc0000000000 R11: ffffed100b43cba5 R12: dffffc0000000000 [ 632.461841][T23075] R13: 1ffff110153a618c R14: 0000000000000000 R15: ffff88804d544750 [ 632.469828][T23075] FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 632.478764][T23075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 632.485351][T23075] CR2: 000000110c2627e5 CR3: 0000000097d42000 CR4: 00000000003526f0 [ 632.493331][T23075] Call Trace: [ 632.496610][T23075] [ 632.499544][T23075] device_del+0x280/0x8e0 [ 632.503890][T23075] ? _raw_spin_unlock_irq+0x2e/0x50 [ 632.509099][T23075] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 632.515195][T23075] ? __pfx_device_del+0x10/0x10 [ 632.520054][T23075] ? netdev_unregister_kobject+0x344/0x450 [ 632.525873][T23075] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 632.532300][T23075] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 632.539088][T23075] ? rtnl_net_dev_lock+0x257/0x2f0 [ 632.544220][T23075] unregister_netdevice_queue+0x33c/0x380 [ 632.549957][T23075] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 632.556207][T23075] ? rtnl_net_dev_lock+0x36/0x2f0 [ 632.561246][T23075] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 632.566377][T23075] unregister_netdev+0x1f/0x60 [ 632.571155][T23075] bnep_session+0x294d/0x2b40 [ 632.575846][T23075] ? __schedule+0x1755/0x4d30 [ 632.580534][T23075] ? __lock_acquire+0xab9/0xd20 [ 632.585405][T23075] ? __pfx_bnep_session+0x10/0x10 [ 632.590517][T23075] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 632.596595][T23075] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 632.602935][T23075] ? __pfx_woken_wake_function+0x10/0x10 [ 632.608584][T23075] ? __kthread_parkme+0x7b/0x200 [ 632.613526][T23075] ? __kthread_parkme+0x1a1/0x200 [ 632.618564][T23075] kthread+0x70e/0x8a0 [ 632.622649][T23075] ? __pfx_bnep_session+0x10/0x10 [ 632.627680][T23075] ? __pfx_kthread+0x10/0x10 [ 632.632288][T23075] ? _raw_spin_unlock_irq+0x23/0x50 [ 632.637497][T23075] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.642709][T23075] ? __pfx_kthread+0x10/0x10 [ 632.647308][T23075] ret_from_fork+0x3fc/0x770 [ 632.651921][T23075] ? __pfx_ret_from_fork+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 632.657054][T23075] ? __switch_to_asm+0x39/0x70 [ 632.661831][T23075] ? __switch_to_asm+0x33/0x70 [ 632.666603][T23075] ? __pfx_kthread+0x10/0x10 [ 632.671207][T23075] ret_from_fork_asm+0x1a/0x30 [ 632.675989][T23075] [ 632.679057][T23075] Modules linked in: [ 632.684253][T23075] ---[ end trace 0000000000000000 ]--- [ 632.699309][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 632.712051][T23075] RIP: 0010:klist_del+0x49/0x110 [ 632.717900][T23075] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 29 dd bc f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 0b dd bc f6 4d 8b 7e 58 4c 89 f7 e8 bf 65 [ 632.737908][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 632.749579][T23075] RSP: 0018:ffffc9000d73f768 EFLAGS: 00010202 [ 632.756001][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.757194][T27489] openvswitch: netlink: Unknown key attributes 2 [ 632.781132][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.781231][T23075] RAX: 000000000000000b RBX: ffff8880a9d30c60 RCX: ffff888023e43c00 [ 632.799571][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.803783][T23075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 632.823498][T23075] RBP: ffffc9000d73f890 R08: ffff88805a1e5d23 R09: 1ffff1100b43cba4 [ 632.831979][T23075] R10: dffffc0000000000 R11: ffffed100b43cba5 R12: dffffc0000000000 [ 632.842123][T23075] R13: 1ffff110153a618c R14: 0000000000000000 R15: ffff88804d544750 [ 632.852802][T23075] FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 632.862557][T23075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 632.869403][T23075] CR2: 00007f1ebddda450 CR3: 000000002ee06000 CR4: 00000000003526f0 [ 632.877694][T23075] Kernel panic - not syncing: Fatal exception [ 632.884146][T23075] Kernel Offset: disabled [ 632.888475][T23075] Rebooting in 86400 seconds..