last executing test programs: 18m12.443888669s ago: executing program 4 (id=1193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES8=r0], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 18m12.223778321s ago: executing program 4 (id=1197): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="18005e800800060000000000040009"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x3, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f0000000700), 0x0}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) 18m11.978516072s ago: executing program 4 (id=1201): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x8}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18m11.80803068s ago: executing program 4 (id=1203): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000100000000000000400000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000140035006d6163736563300000"], 0x40}}, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x40010, r1, 0xc36e2000) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r4, 0x29, 0x3, 0x0, &(0x7f0000000040)=0xfdf4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) epoll_create1(0x0) 18m11.663829689s ago: executing program 4 (id=1207): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x18, 0x0, 0x1) getsockopt$nfc_llcp(r1, 0x111, 0x0, 0x0, 0x90aa62107f0000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) r2 = accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x80000) sendto$inet6(r2, &(0x7f0000000500)="92", 0x1, 0xcc40, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote, 0x5}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 18m11.549911004s ago: executing program 4 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) getsockopt$inet6_mreq(r1, 0x29, 0x1, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0x14) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x288, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x288}}, 0x0) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x3, {0x1, 0x1, 0x3}, {0x0, 0xff}, 0x0, 0x2}], 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0xb, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 17m56.434115335s ago: executing program 32 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) getsockopt$inet6_mreq(r1, 0x29, 0x1, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0x14) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x288, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x288}}, 0x0) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x3, {0x1, 0x1, 0x3}, {0x0, 0xff}, 0x0, 0x2}], 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0xb, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 4.314328496s ago: executing program 5 (id=11295): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0xfffffeff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x1000000) close(0x3) 2.129151599s ago: executing program 5 (id=11303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4(r1, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002380)="fb904d54fe74bf8e9f31558a1c60c12f", 0x10}], 0x1}}], 0x1, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r3, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x1, 0x3, 0x2, {0xa, 0x4e24, 0x16, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) read$alg(r2, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r2, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)='J', 0x1}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 1.960515177s ago: executing program 0 (id=11306): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) (async) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x8000) connect$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0x9}, 0x14) 1.89699559s ago: executing program 5 (id=11307): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r8, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r11, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) (async) connect$rxrpc(r11, &(0x7f00000002c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010029bd7000fedbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="79b5464393916e3c3073c31fa9428c85ab6de768f0e3903c810eddbee9f49604d945d3c95dd64c409ba0fb39247cf6cb09790166020f60af33606c55156e46222120be1d049b849e1d44d49b636c773f7fabb8e0b2589e68be9f6d4fe4afad99661d504791654e5eb434b7fbeb053cab1cea553825538261ea8a5eea1e575465ba5ab062c792c729b5652e1f2a4cbf49ab"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r13, 0x400, 0xfffffffa, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40850}, 0x20000000) (async, rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) (async, rerun: 32) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r16, &(0x7f0000000100)=ANY=[], 0x32600) 1.663790365s ago: executing program 0 (id=11310): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRESOCT, @ANYRES8=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xcb) (async) socket$kcm(0x11, 0x200000000000003, 0x300) r1 = socket$inet6(0xa, 0x80000, 0xffffff82) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x20000061, &(0x7f00000005c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff030768040400000014fd88a8", 0x0, 0x7fc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x50) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x200000aa, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x23, 0x0, &(0x7f0000000400)) pselect6(0x40, &(0x7f0000000180), 0x0, 0xfffffffffffffffc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e}, 0x94) (async) r4 = socket(0x10, 0x1, 0xc) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$nl_route(r4, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c0000005e0010002dbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000feb339ecd98df34307d08103a950c50072989a8993cb590e2ca77c55341143163f7fada4cf8dc6413c51b4c80fda19c8e99651befe931fde51849bd3b99b5d5d49ee611e82a045ecb07a1425e106384544bfd54f228e68eb46a9aa4de7538ddef3628a39683e30620b193b8f1e6a696b87eb415ab0eceb"], 0x1c}, 0x1, 0x0, 0x0, 0x400c014}, 0x0) 1.522242406s ago: executing program 0 (id=11313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r4, 0x9, 0x6, 0x4}) write$cgroup_int(r6, &(0x7f0000000300)=0x4, 0x12) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r5, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x23}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x8041) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0xc1b, @private2}, @in={0x2, 0x4e20, @multicast2}], 0x2c) 1.456879244s ago: executing program 5 (id=11315): socket$nl_netfilter(0x10, 0x3, 0xc) 1.334365174s ago: executing program 1 (id=11316): syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @random="863f187dc8f8", @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x8, 0x3c, 0x1, @private1, @mcast2, {[@hopopts={0x2f}]}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x24048442}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x3) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)="80fdc7000040", 0x6}], 0x1, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 1.328893817s ago: executing program 3 (id=11317): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000000)=@id, 0x10) sendmmsg$alg(r3, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c2695bc0e89c0327703a69664bbfbb1feb982218d29dbe8159754bd71290edc85860395f17b1871494ced6245ddd9f35de52ca0e51bba3da3c6b061a43cb99789626420a37cf701b39e7c041fcb54da4c226f2d2e0d4b2c749f01c36030dee03f2da207f4fa7895afd6d2e3a682c36a58667a16bfc748650e496686aa23c1060bf0198df9c2e04a4fa3dca7d4e362e4bbb066c615b12e40e0c6fec63f4969a0f8b32dcd95c3a356ef7c765", 0xab}, {&(0x7f0000000480)="21a9aefc11e540ccf9d86733b3facadc78948344466f2013301dca703a98560d55cc6fe0ac943f2f87179d148e08836732141f254550cefdb2cb07301d7c65edb940c3c0f5e4f6f58f85db5dd26f0c77064030a2dcfcebef7ff510dabd3b2e1ac625db4ff1a561fd2dd0157c379731bc8c764592e4635bb72336bf28a2c09730c6", 0x81}, {&(0x7f0000000540)="d2b5c0b8d19d94e47d16425f4558b4b1fdfb80f6ed6e6812f8974d6eab49aa014cd6d994942c04d428899cd26fd0a9f5df41242d803a2464c303bd0dd38118fe66ab2c22c095d0d6e09e2f52a9da008b37d82e9cb459bd63f6834b9d66d9f952adcaa7c302efd3b49342a742003c5a7625dccca571eb360b0d94a9b34342d16fa2a3854eb38f67834481935e540557a3dfd95c76c95a246d7e94db9d78cfd8cd159fba135055cf4dc80fcda7361f90efd03b85b3abfbd54a19e60cc0aa07662ee5ffdf66502d5fe1d7e8be3277584c7f3a6f", 0xd2}], 0x3, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30, 0x40000}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)="b49b8c37dfe742bdfd4816d3236861fd04ca56604a83e34c8b22f5106edbea4f36df60591b1158f8cae58ba076b499900c63594ad20772ebfaf23f1e6510753f4091196db206c23572dcbb04666d3b744857f15b69cc0db1dfe2aedaaf6f3cd593aad52be1515d7e5db4365464a6fb3e7cce88872cca998994d276f0c5c47e394ee416fd003c5ce59918df3bd793f590f8f5", 0x92}, {&(0x7f0000000700)="4d4906b07e6cbadc524211a197b6361cf2eef24a0fa8b0fd96beadaeca03da6cf80edc4ee2c7adf08dd820d0ebfd38d070adb1cebfb74a939aca1745fcf3f125fd512c4e69c2b76ac2ad0e7ca7d0353a4207413914d548f5c478ec69dfdc26555d65", 0x62}, {&(0x7f0000000780)="bce27f2ec35a76548561f350621b15977403bb064070a00967fc178b7c81ec8460b3e8b171e46437df758690d3b2493eedfd418b57503df020231910f64fed596a67fe4924a50713a38aedae045eda79e850f9224ca45a07b6f4bda4ab24329facd0809e056c31d4ce37ed4d2f696902196e025230d3065a1958fdb4071e362e52cb39e1bd3d9ec1273c3929c5197f8141de03be5ccba7f92ec0fe4d1336792d44e310001d916268c690b8428f6d3331b9911f9f56ff1e7519ce34839d1b140ba47887de34eeff57a40466a4d13d78023c8511e61023be37c5f78a7e3b5575d0ae", 0xe1}, {&(0x7f0000000280)="dd725946384e674ad91dd1bf54f9c3785757c1c0e9a2a4dde68d90eda43dcb3a460b4bbde433c9", 0x27}, {&(0x7f0000000880)="f2063be04ffdc39ef7ee245d2e08ef1c2e66ed445084150d18d629f8ece8c70235988035fe02977ea50e3f45a36c8fb219996b4dde19731583b5486da35480de3268a6e6308de3ff95e5c2ad7ce8b06bb513c4b3f713b5003fe73e96dcff61a96d4872d039e19b0a37873519bad19abb8b5f138749eda267b366b3346a56acd103c2cfc87fd272c9a0f80cfa44ac14c00cbfa0a6ee78fd9c5cc067e1c7c18285123532ab504b7465e954c42f5dc6f46e50e10b68015c75e9aaf4a0fb209201fbd0", 0xc1}, {&(0x7f0000000980)="1f821db0bc87dfd1", 0x8}], 0x6, &(0x7f0000000a40)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x1f, "5f08d534c534e763d46d540c861ef4b7d56740099a9cb0508a9c3e7a314b06"}, @iv={0x108, 0x117, 0x2, 0xef, "78f6059493cf309c389ea2d389e7f4d54f98512bd81086a3b9b42c6d281d948af427f4cedcbabedce6b181de1b9b5b090bc74ef53d15156bf74febf8ac10142676447a88abaec9c7eee160115706ddf55fdb9dcb08d0bdbfee4a2515f4e859541b46b6fddf04c60329177fba3883550aa6e3562159814e2dcdfc5a82abc6004117fcbba98e84e3f9795c5413a13ddf57d38acd4560a59a2b6e2acd11a3777add4482f9a8490bef39f40f99c93b1c57a313b4248572e5b425bf05b34956b8a53ab88bb17d8c2f5e706a500ebb322f7b44c34c9eb027b03829221699eadcbfbc71e4c419fa9419ade751ccf6bfa55ac6"}, @assoc={0x18, 0x117, 0x4, 0xffffffbe}, @assoc={0x18, 0x117, 0x4, 0xffffffff}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x80000000}, @assoc={0x18, 0x117, 0x4, 0x700}, @op={0x18}, @iv={0xc8, 0x117, 0x2, 0xb1, "25800777e64c7a53fef5fc168889e03ec5127e4cdccb50ecb27309312f8f8a71b0a8bb8ef5a242592f99cf5ae7d5c0f013644f03d2d50f18e8576e383eb76c2bad9a5863519ada92a5d102cac2c3fbcf9a22d893df48787975bfedfc322cf06d6804cf459c2b339fcf3fe95bb6e6ae02fb5d1a296b0f815c9f2839409d7c65c63b6e87b7c194a0402e21c63ed802d1555b5bf5a30d60a0f1ffe159b4c002fda807ac7f3b5b3ee2a99024e71b52fd978f3e"}], 0x2b0, 0x8000}], 0x2, 0x20048040) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x3}, 0x97}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1.328269468s ago: executing program 2 (id=11318): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e65766500002000028014000700fe8000000000000000000000000000bb080001000100000004001a80140014007465616d300000000000000000000000080004"], 0x78}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.326050193s ago: executing program 0 (id=11319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[@ANYBLOB="c40000001900f3fe0000000000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000b86b6e0000000000000000000c0008"], 0xc4}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x1800}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xb}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r13, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r13, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r13, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3) setsockopt$sock_int(r13, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r13, &(0x7f0000000580)="17", 0xfffffffffffffd89, 0x10008095, 0x0, 0x0) socket(0x2a, 0x2, 0x0) 1.266937444s ago: executing program 5 (id=11320): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x14, "e72e5f4392b0237fec1578c93cfc5aef9672f74e"}, &(0x7f0000000040)=0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r3) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffff203a4098b605be1800000400"/36, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000950000000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008810}, 0x400c800) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r2, 0x6c36}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0x20, r7, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @private2, 0xffffffff}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 1.149565483s ago: executing program 3 (id=11321): setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz0\x00', @null, 0x3, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) recvfrom$llc(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x40000080, &(0x7f00000010c0)={0x1a, 0x108, 0x9, 0x0, 0x1, 0x5, @multicast}, 0x10) (async, rerun: 32) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) (rerun: 32) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f0000001100)="a29ef855c2abe3305780a8ea9a494486ec9261f27ee7ab4258994fa0125622a2f4d8d4a3fdb9ac64a4fdf3d374f65fbb942f97492ceda08c041cd5ecf39fb8508b5048952e65a893d45fca9c486b1e3bef8fede80df0cc7e28db0097f4e47f8bd56b49d27cff44") (async, rerun: 64) r1 = accept4(r0, 0x0, &(0x7f0000001180), 0x80800) (rerun: 64) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000011c0)=@req={0x5, 0x6, 0x5, 0x80000000}, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r1) (rerun: 32) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000001400)={&(0x7f0000001200), 0xc, &(0x7f00000013c0)={&(0x7f0000001280)={0x108, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6e6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2e}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x34af, 0xfffffffb, 0x4241559e, 0x1]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4183}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xbbe2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffff420}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x10080004) (async) bind$netrom(r1, &(0x7f0000001580)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001640)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0x5}, {0xfff3, 0x8}, {0xfff2, 0xffff}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000050) (async) sendmsg$inet6(r1, &(0x7f0000001d00)={&(0x7f0000001740)={0xa, 0x4e23, 0x20, @rand_addr=' \x01\x00', 0x3e}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001780)="917746c5bb834308f9b4e6750e7ecc12714aa6ee00acd3ebe52bcf9b0d2d96e7c7d0d583694245379565802291d5cfa1558e77dec3fa53ac3f40c237f7a2bc4498e6a9954d299c8855783c9a289c271165dbb829b792b7294027e1bbc1f2959b2c6c490765ac12134fd8604aad3f8b92f2ed4afd9a03cad73e3357b2eeb6e6ebe8889ac36c6a11b2f8995776d3b7d80021254d1e211ddc6814560c54fdc04d290428ca98e9cc5a10", 0xa8}, {&(0x7f0000001840)="5bf9b2854d3b5ad8dd2d39a696f543e17526d1ffb7bba72c7ff764e987e98aaa230c6d56d8938e52409f4c7204f1cf61f72b648f9a9d3cbb83f789dea13afda05ac2b73640273a67b51582d51124980fb32b6c79ea88538df611aff274ac4e453c3fe01eb4dc5becb21b69d9c329fe7c58f847c68e4abb53bac1f512ee062e5ced308f6548fb87eea14d7a108e7a116c9a6f1c2ed44409687ffe40526c3f18631dac3cfaff6ee6a724cf4e7762dd1f34524b6784409adbf03cf428dbc3e1d3f7", 0xc0}, {&(0x7f0000001900)="b787a02758775d0dd2c5c5c53ab5f3a71e546545db273b88c88a60765f99182cce6bb4e1a7f068354616939a4fb8773a468b64fcab008b1f82d96e7b2e90dc6b547df48b9c8a1323d1c52e2fe571c6c18cec8e9eb920973bb1a253b2972598989c8b617de9b4e28c66b1adb8767a3342fe39f832466d1182e19dcf16f7ddb59b376647aec45715e78e7414cf2d6c4c4385928bdf88c1a91ba8663c7a6ae9142b0597de300738aea03139e19384eb4c3e4213283ba991e262264d288a940da8dab9fa39102d20d66a9a25d226c1947b41080496376cc3", 0xd6}, {&(0x7f0000001a00)="f7aa3b1b70518a1df438873cadd623d96ab2140f5c7b80e48b77b5ac62a813567117c49542d11879f58a40c9f1e9c713c0efb06f0576e0bd7e5876abc2b9a244672b45e7cb8bc34874e2dd249e228f3407cb22ae573bd57067515d77f4", 0x5d}, {&(0x7f0000001a80)="9c8ed03578549e4bac661d2662924249c2014f36f082720680ea3d9302372636209e8e7a92b051537fd9d89b53246112f0d6ab6485db7f848414fc41561ef43f5e4b042e49320c42205f4650678aedebf5f4db6af59d03c43b8f1246ad2470f8ccdbd42a271fd191c0ec63bcb5fb50b29eaa1def91bb14e2c13e0bafff9d97281bc38bb69158a317d6a27b7b49dd5466181d8a81bf7237745736f59425aab50bd4237281844bb282303efeec8245ed028190b9ef47dcca74a548c57d4d5d", 0xbe}, {&(0x7f0000001b40)="b9f8514e3d9935c1e76367c7cc81d77f6f931d8e8a98a6c3b1ddfb8ae6fcb619ee4c9e9f95db28b8064717f83dc931bf7997df57e8b9978c7e4b5c23de74fc74202f405a9335d5de4df882474392689cbbc22381dfd9dfe58757591a8b6d062a96f99880c639f9a7a843b5f00f09ebfbe6d8446e3acfa6b9c4b400d6dbecec736635447db2", 0x85}, {&(0x7f0000001c00)="66bbeda98b650bd3f99bbca5837998a71c0b46db870dc75971226b4660f181b9c72b9d5ad0f53527fbc046f0e8abbe1f5fa68454f0adf20650", 0x39}], 0x7, &(0x7f0000001cc0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r3}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x40}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000001d40)=0x4, 0x4) (async, rerun: 32) r4 = accept4$inet(r1, &(0x7f0000001d80)={0x2, 0x0, @multicast1}, &(0x7f0000001dc0)=0x10, 0x80000) (rerun: 32) close(r4) sendmsg$can_raw(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e00)=@can={{0x4, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "bbdb78c14d93fa5b"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000001ec0)=[{0x1, 0x1, {0x2, 0x1, 0x4}, {0x0, 0x1, 0x2}, 0x1, 0x2}, {0x2, 0x1, {0x0, 0x1, 0x4}, {}, 0xff, 0xfe}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0x1}, 0xfe, 0xfdc6e7feca369020}], 0x60) (async, rerun: 32) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) (async, rerun: 32) r5 = accept4(r1, &(0x7f0000001f40)=@ethernet={0x0, @dev}, &(0x7f0000001fc0)=0x80, 0x80000) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r6, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)=@getchain={0x2c, 0x66, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xb, 0x3}, {0xf, 0xffff}, {0x10, 0x10}}, [{0x8, 0xb, 0x587}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004840}, 0x800) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x34, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8bb8c7acb5fe98d3}, 0x8c0) (async) r8 = accept4$bt_l2cap(r5, &(0x7f0000002240)={0x1f, 0x0, @fixed}, &(0x7f0000002280)=0xe, 0x800) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000002300)={{r8}, 0x2, &(0x7f00000022c0)=[0x6, 0x0], 0x2, 0x1, 0x1}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000023c0)={0x6, &(0x7f0000002380)=[{0x9, 0x3, 0x0, 0x3}, {0xd, 0x7, 0x8, 0x3}, {0xb, 0x0, 0x2}, {0x2f6, 0x1, 0x8}, {0x5, 0x9, 0x2, 0xab3}, {0x7, 0xdb, 0x6, 0x3}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002400)) 1.128030461s ago: executing program 1 (id=11322): r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0xdf, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @remote, @void, {@mpls_mc={0x8848, {[{0xffff7}, {0x8}, {}, {0x8}, {0x2}, {0x6, 0x0, 0x1}, {0xb9cd, 0x0, 0x1}], @generic="2c5f925a4ed0766235624c746833e3b93b83a36ccef386c17b57b5e11bde6fb1daab9c27796f9d99e6e63eda10214c9f85447a9b34353c1b0de19aaa31ffa9da62c7fb7fe5bb0810bf0f03adf5c81f0a9dfb284a1625e9d46e07936bcdbfceb9358ad93738694d75cd4f5787fc36822830017c5a9c184511a7bc7bbe57791d5f854005fb043d5dc571bacffbd806a338694df485c57b5339a83cf482a1d284c97fe3472136071cdc6e454a2fef188f5c425dbe303a"}}}}, &(0x7f0000000380)={0x1, 0x1, [0x69b, 0xbf0, 0xc1a, 0xdb1]}) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) socket$inet6_sctp(0xa, 0x1, 0x84) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000080)={0x7, 'veth0_vlan\x00', {0xe}, 0xc38}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x42, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd7d76b2af00042f00fc000000000000000000000000000000ff0200000000000000000000000000010000883e"], 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'veth0_to_bond\x00', @link_local}) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x4, 0x1, 0x4, 0x2, {0xa, 0x4e23, 0xffffffff, @remote}}}, 0x32) getsockopt(r7, 0x111, 0x2, 0x0, &(0x7f0000000080)) (async) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003"], 0xfdef) 941.262486ms ago: executing program 3 (id=11323): getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_emit_ethernet(0x13e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x108, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1c, "9595f429ae08a565c9a41d413270a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5"}]}}}}}}, 0x0) 872.482181ms ago: executing program 3 (id=11324): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x15) 767.698283ms ago: executing program 3 (id=11325): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240), 0x4) (async, rerun: 64) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000631121010000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0xffffffffffffffb8, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_RATE={0x14, 0x6, {0xf4d, 0x1c13, 0x6, 0x80000f}}]}}}]}, 0x60}}, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) (async) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001b80)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000001b40)=0xe8) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) sendmsg$unix(r5, &(0x7f00000004c0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000140)="2781e39f5b33ac6b1ac2e89c06a4e2b5739fbae829", 0x15}, {&(0x7f0000000180)="08f5f6017200657e737bad979b7113a49f4d8ead702d8e70f9165bb22181f16e4624f5170d135b4607e29f1a3b5c664775b8791e762e045c8ac093b7810d71877be4af6bb5d4d0ab4b70e8a729d62c8d7eba097695c4b131d1da2ef54eb52175ac689af56e440914bee866feaad84cb530194edf59c79104451674b1c31ccea5c9485412c9e85c61d0d9463c4c5e57e8c891e191f1b630e8923ec77ea6f88fb79d2c54eae16a96fd7a67a1617bc263e88d5bf83ab71c0c", 0xb7}], 0x2, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x20, 0xc04}, 0x20000084) r9 = socket(0x15, 0x80006, 0x0) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r11 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x45e], 0x0, 0x0, 0x1, 0x0, r11}}, 0x40) r12 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0xc) (async, rerun: 64) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r15 = getgid() ioctl$TUNSETGROUP(r14, 0x400454ce, r15) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x29000024}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x12fc}, {&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="ab00228016bc4da237fc15d1387687be9dda298b4e305f93626a7b3e3c080005000200000004006200f176d81e2ad9261e6e1415ecc7afd5610c253c529dc4e78d8f2a1c428eef4ea90c9ae5ef2695ed08d7c214ceb421c9495fbc79352f2aa4a763269e21e4a15d8b85238209a4fa6acc426240ec5760ebb7ba47ab54354a73f3155bc60576bc1e12ce65c538fe3038a48882619834a73faa24bc1ac381b2ecf82064dfc17b801e0a6b6200f6005d80040009000400538014000000fc010000000000000000000000000001040036800400138008002c00", @ANYRES32=r4, @ANYBLOB="72f77091c8cc08f2dbd5f62e897a5040a7749da11d02f86c73f2faf60ca54c770e9b161810863c8a05000000000000009a158a5eb379892a3baada9beb84452578341c5298a4445be2e0e81b3330adb2ebf1fd439188b97c9672450e97430f3075b69a5b2c216b09148f1632eb5b31cf13082f71ecba92eb8dda7c5faafa96af6ab0b4b79b697abd8be36ffc7ba8515d80647a09d51e4af81dc1d4be385583d124a5aaa00800a1c443cedf4d0e5d42102179fc969c60080069006401010008006300", @ANYRES32=r7, @ANYBLOB="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"], 0x844}], 0x2, &(0x7f0000001a40)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r9, r1, r1, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee01, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xffffffffffffffff, r15}}}], 0xd8}, 0x4000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @empty}, &(0x7f0000000080)=0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x18, 0x1, 0xfffffffa, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) (async) r16 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_hci(r16, 0x84, 0x83, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 719.862119ms ago: executing program 2 (id=11326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket(0x2d, 0x2, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000000)={'pim6reg1\x00', 0x6, 0x10000}) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/103, 0x67}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x11, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x9, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r8) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x804) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r12, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004c44}, 0x40) sendmsg$TIPC_NL_PEER_REMOVE(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d80)={0x38, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbf3}]}]}, 0x38}}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000400)={0x4, 0x309, 0xca}, 0xc) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r9, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008001}, 0x1) 710.47866ms ago: executing program 3 (id=11327): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001cc0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0), 0x20, &(0x7f0000000000)=[@iv={0x50, 0x117, 0x2, 0x36, "e2a05cddbf9aa5776826a245114bbc8c57bc901a483d4e5ad10201e2e2da046b8d0e88067af63c3b1b9b9d38a66ed0f641be75749d21"}], 0x50, 0x20040008}], 0x1, 0x4000005) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f00000008c0)="01b4945c76f43bf9e6e466072364b370a2e1ac03", 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 667.274857ms ago: executing program 1 (id=11328): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) write$cgroup_subtree(r0, &(0x7f0000001200)=ANY=[], 0xfe33) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x3, 0xa20}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x2d, 0x2, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) connect$qrtr(r3, &(0x7f0000000300)={0x2d, 0x1, 0x4001}, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newtclass={0x30, 0x28, 0x489, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x7}, {0x3, 0x1}}, [@tclass_kind_options=@c_taprio={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 519.951438ms ago: executing program 1 (id=11329): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000040), 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'rose0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x40}}, 0x0) 519.095365ms ago: executing program 2 (id=11330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1, '\x00', 0x0, r2, 0x4, 0x23, 0x5}, 0x50) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x8, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x94) recvfrom(r0, 0x0, 0x0, 0x40000020, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0xf5, 0x4) 433.556479ms ago: executing program 2 (id=11331): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async, rerun: 32) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) (rerun: 32) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa5, 0xa5, 0x3, [@float={0x4, 0x0, 0x0, 0x10, 0x4}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3e, 0x1}, @datasec={0x5, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x7, 0x2}], '%'}, @func={0xc, 0x0, 0x0, 0xc, 0x5}, @union={0xd, 0x4, 0x0, 0x5, 0x1, 0x81, [{0xe, 0x3, 0x2}, {0xe, 0x2, 0xb141}, {0x8, 0x5, 0x20}, {0x8, 0x5, 0x5}]}, @restrict={0xa, 0x0, 0x0, 0xb, 0x2}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x4}, @func={0x5, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0]}}, &(0x7f00000004c0)=""/4096, 0xc3, 0x1000, 0x0, 0x400, 0x10000}, 0x28) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)='%pS \x00'}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r5, &(0x7f00000001c0), 0x0}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@bloom_filter={0x1e, 0x80000001, 0x3, 0x1, 0x400, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x9}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000017c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001740), &(0x7f0000001780)='%-010d \x00'}, 0x20) (async, rerun: 32) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001840)=@generic={&(0x7f0000001800)='./file0\x00', 0x0, 0x10}, 0x18) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0xe, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6000000}], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000300)=""/151, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000014c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x2, 0xa, 0x5, 0xffff03eb}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001880)=[r3, r4, r5, r6, r7, r8, 0x1], &(0x7f00000018c0)=[{0x4, 0x2, 0x7, 0x2}, {0x4, 0x1, 0xe, 0x9}, {0x1, 0x5, 0x4, 0xc}, {0x4, 0x5, 0x5, 0xc}], 0x10, 0x4}, 0x94) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, 0x0) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000100)={r11}, 0x10) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_getvlan={0x48, 0x72, 0x200, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r14}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x48}}, 0x0) 376.943623ms ago: executing program 1 (id=11332): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000002060500000000000000000000000000050004000000000009000200e4a37a31000000000c00078008000800000000000500050002000000050001000600000011000300686173683a69702c706f7274"], 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000440006803e00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x50, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x373}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe159}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c040}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x20040000) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500007f41562d000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050003000d000000"], 0x48}}, 0x0) 292.373041ms ago: executing program 0 (id=11333): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/91, 0x5b}], 0x2}}], 0x48}, 0x0) socket(0x2c, 0x6, 0xdc63) 289.312535ms ago: executing program 5 (id=11334): r0 = socket(0x10, 0x803, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x7c}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f00000001c0)=""/17, 0x31}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x2}], 0x24, 0x2000, &(0x7f0000000300)={0x77359400}) 197.911893ms ago: executing program 2 (id=11335): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8000}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7f}]}}, @CTA_LABELS_MASK={0x2c, 0x17, [0x0, 0x7, 0x8, 0x3, 0x7, 0x8b, 0x7, 0xa, 0x4, 0x6]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x6}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xfffa, 0x3, [0x8, 0xef37, 0x8]}, &(0x7f00000001c0)=0xe) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000200)={r2, 0x1}, 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000240)={r2, 0x2}, 0x8) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r0}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000540)={&(0x7f00000002c0), 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x19c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x96}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x3000}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xf}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xbf7}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xa}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xf}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2b}, {0x8, 0xb, 0x2}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40004}, 0x44051) (async) r5 = accept$ax25(r3, &(0x7f0000000580)={{0x3, @default}, [@rose, @rose, @bcast, @netrom, @default, @netrom]}, &(0x7f0000000600)=0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, 0xffffffffffffffff}, 0x4) (async) r7 = accept4$unix(r3, &(0x7f0000000680), &(0x7f0000000700)=0x6e, 0x400) (async, rerun: 32) r8 = accept$phonet_pipe(r3, &(0x7f0000000740), &(0x7f0000000780)=0x10) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) ppoll(&(0x7f00000007c0)=[{r0, 0x2}, {r5, 0x10}, {r6, 0x400}, {r7, 0x2160}, {r1, 0x1000}, {r8, 0x400}], 0x6, &(0x7f0000000840)={r9, r10+60000000}, &(0x7f0000000880)={[0x100]}, 0x8) (async) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000900), r3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) (async, rerun: 32) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000009c0)={@ipv4={""/10, ""/2, @initdev}, 0x0}, &(0x7f0000000a00)=0x14) (rerun: 32) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000a40)={@dev, @empty, 0x0}, &(0x7f0000000a80)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x10, 0x80, 0x7, 0x3, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x68, 0x0, 0x3, 0x5a7406e558276fe4, 0x0, @remote, @remote, {[@noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000b80)=[0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000c00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000ec0)={'syztnl0\x00', &(0x7f0000000e40)={'syztnl0\x00', 0x0, 0x2f, 0x9a, 0x8, 0x5, 0x12, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, @private2, 0x8, 0x20, 0x4, 0x4}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000fc0)={'syztnl1\x00', &(0x7f0000000f40)={'syztnl0\x00', 0x0, 0x4, 0x7, 0xf, 0x3, 0x54, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x40, 0x80, 0xc21}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001180)={'ip_vti0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0xff9, 0x4, {{0x45, 0x4, 0x2, 0x3c, 0x114, 0x64, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x2, 0x1, 0x1, [{@remote, 0x7}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x80000000}, {@remote, 0x4}]}, @ssrr={0x89, 0x23, 0xea, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback, @loopback, @multicast2, @broadcast, @remote]}, @ssrr={0x89, 0x23, 0x2a, [@empty, @empty, @rand_addr=0x64010102, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @rand_addr=0x64010100]}, @lsrr={0x83, 0xf, 0x79, [@empty, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0xf5, 0x3, 0x4, [{@rand_addr=0x64010102, 0x5}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x2}, {@remote}, {@remote, 0x9}, {@loopback, 0xfffffff7}]}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0x11, "e4529b6a78a13e2fcc8e0f652d7e88"}, @timestamp={0x44, 0x20, 0x5a, 0x0, 0xd, [0x7ff, 0x0, 0x7fff, 0x401, 0x9, 0x6, 0x2]}, @ssrr={0x89, 0xf, 0x36, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000011c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a80)={&(0x7f00000013c0)={0x6bc, r11, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r12}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x772}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xfd6b, 0x75, 0x9, 0x80000001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x7f, 0xe, 0xdf}, {0x4, 0x8, 0x44, 0x9}, {0x2, 0x2, 0xd, 0x6}, {0xffff, 0x1, 0xf9}, {0x1000, 0x7, 0x4, 0x1}, {0x26e, 0x9, 0x6, 0x6}, {0xdbaf, 0x12, 0xa0, 0x4}, {0x7, 0x3, 0x3, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r21}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r22}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r23}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x6bc}, 0x1, 0x0, 0x0, 0x1}, 0x400000c4) 133.8689ms ago: executing program 0 (id=11336): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x28e6, 0x50, 0x7, 0x0, 0x1}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x43) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r1}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x3) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000005200010000000000000000000203000032000000d929dfd38aa76e248a438121fedb3827e67817242a8066543ab5d1101cb0aebac8483cfe97016ea508c60d7ef67051427a8c911e6043fc22a120cf0c61afea1cc365fdf276ece158c940038031b58dfa25c24070ca45ebb3dda8064523ce8fdeed0701cd730059f2a224b8fbc0a97e1f91daad4e990ff273cb424c0e30bfabbdf02a2affa0469240b91a25a6a48bcebd8b6ba4601d451e6b1365f8ba8c0bee06f524c075044774f917b930bc56a8666c120fa7240302d6380517"], 0x18}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x8c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_skbmod={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x0) r7 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r13 = syz_open_procfs$namespace(r10, &(0x7f0000001780)='ns/ipc\x00') r14 = getpid() sendmmsg$unix(r9, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r12}}}, @cred={{0x1c, 0x1, 0x2, {r14, r11}}}, @rights={{0x18, 0x1, 0x1, [r13, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$netlink(r4, &(0x7f0000000400)={&(0x7f00000002c0)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000580)={0x384, 0x35, 0x2, 0x70bd27, 0x25dfdbfe, "", [@nested={0x1ae, 0x158, 0x0, 0x1, [@typed={0x4, 0x72}, @typed={0xae, 0xe1, 0x0, 0x0, @binary="ad92152ee7252e853777c37e6d5dbdc941d6a6ffc416994120f02ad052bef62d3e0fc5670cb96e4cda9d7e74f4e365b2997ec7bd66c70d37c027118e2a9c4cbd7c16419c51148fa050e85141e4e5f3a4422598c1699c063a54913654471cb5b077db46429278d053989ea2064bdfab436b06192701d518ae5a3197c32b4c96d3e20abab634336a419b04f4c25071fb6e905aad36b9eebf6f0a135e4c735d9c5769232768b3b82ec13646"}, @generic="b65a5b9b5c044a352f103af89e6a8ea707fd2d33f54c4905058d0e290e08f19155f41fc44ce4a8cb8a121dfcf5e524de0ab89be3966a9aa6c9d198ee4e321a3bfaf800ade17e32e26ad3141da73300b66d08cb51cffc7ab3b604afb5ac3513d1df8b01b257b372211f1b377439cf44b2adb127d7231693a0f3b359d76f21c4063f90243a0e68a5ad3b2e44d15d70813ab473e4509690a6e1c2679536186e1d6ebc584e6982ca2cb4cbd04ea57c99b704c1f2d3538ab2d804d256ffdb5c0e2a33a7e82c88bd1e0aefb3dc9bc5a76caeb8a41bf036ea67d20b2546", @typed={0x14, 0x70, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x71, 0x0, 0x0, @uid=r5}]}, @typed={0x14, 0xad, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x4e, 0x0, 0x0, @fd=r6}, @nested={0x12d, 0xa3, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0xa7, 0x0, 0x0, @pid=r7}, @nested={0x4, 0xdb}, @generic="b8bb6dd11e2730f963772843ee42963ccb8ec2a0caaddc7f5e2fdb5e0d4b4454e70dd8a051b7166bce65e2cec5d1893265d6c5c868e4d841927ba6c473fc7922166c094e2b2f52182d69d5add9f6dec2b9f1514872504f2dfd62e1f1a5", @typed={0x8, 0x67, 0x0, 0x0, @uid=r8}, @typed={0xad, 0xe9, 0x0, 0x0, @binary="8216255241ace305000de121503141461f189b2974ea3f8507ce905b81c54ec7c3961f2876bada160923228a1132e5b64b585780417ce720a64b3c73eab7b82d19eec950cabc4a53ded4c8aae4a275f5bce206c76973f3ec728dfab3233f054dc5427ed4106e3c0e330be4fb457295fa972a716e249e16bc021ccf991e64b5613b10d20615ff7a665d9eb990d5f9386e8f0ff64562885ca9c22d14016ff54ee2db7c7186af0d3ebf4d"}]}, @nested={0x68, 0x1, 0x0, 0x1, [@nested={0x4, 0x105}, @typed={0x14, 0x109, 0x0, 0x0, @ipv6=@mcast1}, @generic="4bf7dc9ee8ec32ac03150b6d28350c7ec2fcfb67a84fb14c2ffead228732b3c460356db2aeffc73773f262280a3a786080ab7b10547bf66ee59a9fa421ca9f3c4f4a73145d90500aaf96a228"]}, @nested={0x10, 0x5d, 0x0, 0x1, [@nested={0x4, 0xfd}, @typed={0x8, 0x69, 0x0, 0x0, @fd=r1}]}]}, 0x384}, {&(0x7f0000000940)={0x1d0, 0x38, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x14, 0xd1, 0x0, 0x1, [@typed={0x4, 0x6d}, @nested={0x4, 0x1b}, @typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@multicast2}]}, @nested={0x94, 0xac, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @fd=r1}, @typed={0x5, 0x11e, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x136, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0xdf}, @typed={0x54, 0x4e, 0x0, 0x0, @binary="ed16f9d35cfd18c891b94e596055350dadcf7a1366350e3180120088df875ef77b2c440eae452aa58caa6f6c853e7644c68baffd943dbe51a347dc78625d131ce8afa09aa012bf7141af3f96dbf1e144"}, @typed={0x8, 0xdb, 0x0, 0x0, @fd=r3}, @typed={0x4, 0x117}, @generic="3cecee106a40c80a"]}, @generic="7ed3e3bfe5127b81089f22bc09b02f727a0f4cf4683fdcde032f8152203e73562f5303e488036963dfa1", @typed={0x8, 0xb, 0x0, 0x0, @ipv4=@multicast1}, @generic="c7ef421364bdef1087a537a274ec9acae89ae662ea3fc8f149bdb7594d2670fda3cfcc7e4694a8c8475c3c41064b435aff1afb", @generic="b06eb9ca441d394a8b4a3374271ec2bf7ffc8a37eafdba3e574b327b2cc1abf4e9954f9f557d1e2a2cc901ae9c3c3bd1a7945cddb8d3b3f06e5b7f0460d9b0e1f89caebdbd64488ee3afdad5675d0ee1908c2cf0ea23265752035f27f6ddefaa5f67df8c3e828d456c7457baadbe10fd5f0758d313f0e144c632ad6f417e847517e2ae73b61dc3bc8c9ad0684ee39512d010b7844c416a06d82562a9b3f666e30a7ac846f81c75628630", @typed={0x8, 0x94, 0x0, 0x0, @uid=r11}]}, 0x1d0}, {&(0x7f0000001980)={0x1348, 0x27, 0x22, 0x70bd28, 0x25dfdbfd, "", [@nested={0x44, 0xf0, 0x0, 0x1, [@nested={0x4, 0x69}, @generic="ee91ab55362fbea4816e0e14f2431db4d129e1155935496ed7e26f88a3727f8172cf9bcabdc49177f5b144e6c02aade514458fd8", @nested={0x4, 0x92}, @nested={0x4, 0x35}]}, @nested={0x1f4, 0x8e, 0x0, 0x1, [@generic="f1641116c0469e72ff84d05b7d6e76f681105c646704c8b6e2fa31bfe61f3661f7699a1def028debcf83414f30398eeb9075cd2573b3db58d773135ab9385dcc2972997676c7b7ea4f5d924b72c8428970ea58e2bbc8fa3d7473ff1eb8e444411df33e73d0bbe575f22fa4068bbc74e46f68dd86ab949f7688e3d10de9c6b69536ac2778f062de89", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="bf5c5a53cc3308f0e1e5e7aca521c8f9abdece2115840ad40629fd8fb6a3d1de507fc30bba520ecc70a1d2808c5759f9d464c4f736be953272b08c96f71ed60765fd33f21b48a1a5c3534402b14d8a6d3aa1ed6cda5533b1da994919f8d583d018b3bb004d9628af01af6de9eaf9bba4c70d0315ed468a78cbb76a6d0bf047889d31203aa610389c79f3ae4cbc180a8961ee59fe2a727ecbf2dc05814e3ba0421087248a90418248b1a2dcdac491fc0854576b25e8ee504de155b94b80faef8e60d0e9d0096c5f", @typed={0x4, 0x99}, @generic="c3789971db8da4d132da92f933fe4480a7866f1e0391c713b323befbbf2c771e8db7cd790e1bb205393f6a8841160f9f34510f941d8aa90c0cc699a3073124f819ca64e5f2fa2c2b52f2fbbccfc019753ce8e7f79b5d020a6ad776bdbcb573e6d9afaecc72b4454ca24b499da6f8a6d2773153cb2210c7b5d6df5d513eb19229c6a401c7a9", @nested={0x4, 0x125}]}, @nested={0xeb, 0xbf, 0x0, 0x1, [@generic="9686e41ef58c5d793c1696a9ced2b1d8026d7cfb512e359e2c9de3c0f90c5a19c2e11ba454e70801ca1d7274854b321f3bbdd38ad19646767dc4a9273ba75a9696520fed05404c82601a6b18b2c35aedd51e3dd328c1777c00eac437ee99bf4e5a127b67debc8597898919f1dbc1c83425c713a8d2ffc61d1a9e584e46d48bd5b8930140a87ccfba3aad2a9a85b3aa7cd4b1d82996bb988c9d5d1cfb33837e8b829f5209f4d95ea79d4b809755897d24539c2055205ad7699508d99e905c4549fd4749d1aead3193af32e2c7d99c4588350d827fc02a05456994e1c95e7a8d", @nested={0x4, 0xf9}, @nested={0x4, 0xbf}]}, @generic="de1a0130d95e01dd1944b8664d4f23685050375965ab4ce6564ea1da8edf8c68e44ab2fa13f270043c032ad0d5db41ad00dd16261e56a271763c6c0ade4edb7ee4fad407ed83a71a178e3080a975d2cf099846bff8d8fefbf04a6e1e8005f94dd2b98c89aade1809ff19310bffdefed15cc84dc0c724f7c60ef877e2181c4d40932601cd94f70ea0092ea2c3e3de8857d4865a70dc043979d80e92194f827304f85d2a6b24aa90aa26ec6d47ed04a0e26047035ed82d93f94da49f25b473ba2a03e7cb369131adffa99c6f9bd2d18ea1c6f083b768d53f754547d2f0de8705136416ecdafb8edbdc0a7fa9ff6a0a748a2d56eaa3c64a7f4183e54dacd53a5ba83fbc3e729443a1149cd17399e7bd23e1231a03e92875bb04e7841b2e230904964e29ffe626d7609233f999ea7834d7333b5b7c05c5350337ba13e38721148dd4d6c78117edc7dc7730d308b94d8158ef5617437c65f9be9a52b9cfc55003f9b266907c65b58535773807e118ec53b7d1503f3588dbd814b6369dfcf1050c3818943de4f215ae2cf9912c6bec68634f6d7b51fa8c9e2b3d851dced7caff8a391eee269647751c51bcd9f279aacb12dc61d9169afe93e5210caa11b1a53586c4ee3d72c26b3d94b22b82d7bd9100763bee4fcafa740891f8cb1947f5bde1a75d63595af2c360e4a5f9aff3716d76913181e815ef1570b726677a689ba432ed89000ccca9f3989fa927dfcf65e4025eb77ffcdcdc9492ee1a0aaaa4aa122944026cde6a63d597d6a64fb31a67e307c04e8dcc5bab7fa650dda5fbc7da6349f3c2facccf8ca8fa5eaddcbecd4516b2a65b2f48e575d2bed5385bf9cdfdf61b142f360a58481cdb66d6d8df0a201c14746c49029de9e110016b8cc6d9e26ff779bc9b1b033a497b4bdd51b9606dd1cd46b938f5aa630248b71fa235fd364a3b43e233675058e810454655134e4e8140d15a42b734e68e1f741842074811fab0c460af1a66a045ddabef2125dc1db184335820b78a33898f345bc123fabad5ae4eb6cf1551978f6b173202f9bc0bd99c6aff32eab4cbcfc8995e7d07410cc0f0ea9529df138013bf00624d54e8af88a9d2d0e947102b82212b99f7cb7ef41a57bc88bb66c8126dc640edc3a7193f7de4b7e5c95c6122cbaad64bec96860a466b0dd3b3a3b835a70d822ce824a4c7446ebd7ef050b67352f379a030c10b7a1a510d4e9beb87570a1560ead52d6c66e5b33ef552500d417091966bbe5dfb394426190bba7301840fb971939f855fc45aa4cfacf7f79809007f7e8397659ce88fe65a1b90ff77c250c9242f4f763db684cc9332394aabcdbde1cfe0980fe3149f843983c0d2349a9b1355ec5049e860fd4d6795b0ef50ee7b1ef26125be22cd22bdbc4cec5e9b7d4838bb2deced8fe62239febb322110de36bba99c4fd0d0870a63d588ed5980fb41ec1956377081ecd8d3cd4c6f40791114f9e10d0d5e068de50f6ec10d5c0a7b6817d3571bce8810f49093abd885613c1bffbe0b070b9cd72125411b3e234f2582b04fcffbdf07f481d89c8fbcc993cea65f34eaa750c049fa32f7bd8abdfaa90bf29ca17fff27ef7c78098c4b78c71beaf8306b947ad87e8f29b6aad4bdb4e3d94638e61fd8c4df410474a6d7161e802a6096168f6760c30d4e67c978c78440035e2c5b4165aab39a3641896375754981260280281d7334d299fbca3d9292c8a824b8a8c0a32f002814f082855dbc16ab9d7fe1b2292b5758760a03b1b3299a69c7fb431b862cf49b6977f54197c29dc500585e63e924d922651b31238279f8ef7b01feb09e1f51c7dbbd1840223f0e1bb5045b5d80817b9c9d337c67d5e0bfefbfe80233e97cb71119678e79988f940b9d72957a16885ebf424763c12a1df0a83331c104c41776748b247405f2ee1eed1c0ecdd73cecc8e46c6ec66ecf49a68ea6c1813e8f0048f3cd02e1059be87ccb378b936cfef341473801c4f3138a35e22ae6f412adb95662470e7f0736e0808daf92257ca5e30b4a4fd8284a904cc68eac8d7e3b342ea531cbcc571a2f3ad7347dfe5d1d4ddfc504a784dd75eacd7f5ee110d7ae958359e8108f4e1b4bd4025a3f907605bbdd7326411fabf587e1cccf1c311e6712ee86fc282301fb49bc291ae74a93a9b86ebcdaf58407f5b8591267ea2fa8d4a1a0a8a5b598547bce4f37dabe5c9a0e93b2bfd6015e7eeb74bcda2271a155a546e17fc90433e46cb8c35cdde1210ec155b79e75ce6554ed1415d8ccc7cb5f8209fdaa97bdfe7984d10953ab51cf8191d54c21da4a1411cd86ee2f0a0773463d5829c49cb1b8dd06e8e15e9f6fb4cfe0451de557618f103e101751939e8ea761f50fe8d2dbe4da495550a534a135eeffaf85db7ba4624da2575b6231dc7f8d04849965e3e7de94f1dd5ef225c29634cffb7e28d72989571414d946c9d01e7e5d443d5b3d0d34cf553d06b7788e4ca451861413829ebb630ccf2ead499325af4fca9b1f779be8f7c214080c2c6633c086c7d5fbd563f29cc87f8ac08847438cf9536c08f21c7fe77d6b01da39696b58c548d57241a17fd6e70e97f85c92661c3d3d94dbd3c783e4dca78a6778a252547fd09e3af6d308e49895522c23d9253d94ed495208ecc4a6ebafb2dbd824262e48a6e31f0fb2ee21fcfec9f8cfad50801fb12714fd986254340d950ae40f62d0c7bfd4c561cf2e1fb3e7a7d01d8872e7b85cfd2ffebff008a8cea422ee063409bdea53ce2b193ea5046745f8d9666239b21725fa679f1868409175497f40a956caf04d7ed151ad4c643b83ec99e744d5c3cf4471f5da0a8ef2fd90a47e54648a7c508684943fd128e3e072e8e15f835f520bdd775a911ec399ec50bc5cdcb8a15433d5e56e50c332870fdb96b8b9e56ef5b46d06c6a1ba0ccb0357bf3d87a460d9d81970b077f9f4d24aeb60bb494019ee48a2bd83d1f09a21bb11f137ec096bd81bb1ba1df273796bbd745a84a9c1b9666d579a6219d5032e55bf6d146e6ccef503a923488cf4b95f44c219c508ccfbcfe94f89d5a8076af04b36a3b62c475f14d270fd155b164dc9f0e8b87b86640717a83e9ec994b49ad8764384b13f97333c70fb72fd6313dd1dbda670e9ba65b613bb95ea8c2993c3760dbbf14aa8e7f40fff38ff447bb1e6ef2fc08050f287e7aff3b4e92f8a2eb3344599235b4eb6241ae1b49cd384ea499e094f24430dfcc6808b39586078191b7d3386a789174d820fd7e6581cbddfc11af54f8198db6abc26ee98b8cd4ce4b410e50201594eeeb46a73dc452f4ff9cf21a54a208f5c0502a41634577ee4464f31d80264ef08ed91a0025c245c3f34fc6a50685b845d9c5936733a295505e9368d74caa1c1b76947813b682cfd55b69e83b91547b457fa6521610c9c3fc7747124611ffb8330619143a55b902a557eee79874493361c49849ca8ad43c59940f2f55458605acedae4d8b5e33472d1794c302ba3665ed77c2c2085c2045fc20aff8dcf987f950fe9ae5df6dba49d7b4b8fc240058a9e9b2907a536133598a6d0e5f3843aa58fb2c34ea683b916b95ea9e19adc15b6accd356f811810b35bc48c9217432c3d2a7716bab0d35964729f1d1d82c32b5f0eeb51009a35d14df835261f52903ecfc1423135ad736c6a0a7a9848ef94d29ce89d24b284afe5d21f3adeebcdb249c975f4e781532a9bc8964f0d2a2fa4c1e4c37268409c7d79b6b67a02cee9ba0cc4373cfff08c0b59a87919387145690b825ba6265ffbef412fceb86182a2da7853ce59b8d33e3bd2bc1339bc47bc0fc1db45c34a4fdae562de621bf09fa98a797b803f8821a04e62ca363912acb06aafdc091c8841512f4f454e47d5a7a1ef98b7d5caa5722fcaa90a91537b69434fe95e87620ab897ac7fb04da5e63bdbf9e4bcb7e5fa3dd916342891aef49ad6db3cb62cf4badaf7e42282aa6df88258de60c7f6440071df7d8b0e166ea1aa50bdb415f88f2d297545bee68e0562942b3db57607f5e060ffd23516c9aa1b154f13118ec1492ae129625c9cf4392ecd8d88b82dea9fc23f93384bb95609837df51cd68cd672ba670c8c83fb41af6b8a5db54c4afb11f5771783d69674953b1dc3393ca5a0a2f925df24c426f55dcd4856486a64d1495b90d2d834717ec7888327ecfb08afd35c5cea729250a15a88ee1fbf73b1e43355ea51370abf1d97185af011e5fdd91c99be95da77b8d0206fa0207a0b709473630a7cba5c4d9a04e55861b7374d0fcf30c7d33c67e9d206c5a0ca634b6c8fe8f44e5ef23daa06cb945fc31f8c1bd9006a97e68759f9c1d2a0e9ee2f3c978407d8938fda19945423ba28adfb45bf9f727021f7a182ead0206d2e79e93d4924e13e8a2051ea5b61d99525d531c8541131fd85961208cdbd9a900f9a89b9a1418597d065e27815fa9e1bc9a9a33f64fb1f0e4457a4eba67de39b9ac0215a0004ed2c6b3a66f0f69a5fcdee4d88145a364c128fade9d1cfcb9bb58eae0108fee8d2d7a6994c8fcfa18ea6bddc28e45202f5fbdf40b8aa53ab5db3563571b670fc9755af87853b28a0ae84b792e1a337234c73f168cbeec13920650115fdd61d3ad80d25caef83f0d10891b5092cfd6617bad25ff9beea2a06fc868832d90a06a7c7a36f02a6f87a228e4d81b08c3e9030d938cf34c0d19fc5f66b3de93c9b0c5a61210be549528f32d47e50549e0c45b30d482ac3df2067db29cb5b1845b31a8944e4a0eca1ac133d4c8ab17e6347c4ac2f9ad5379f0237014715701eb9ed7f3a0b6ed79bca3b9a7bb13467ebd73fe596fc5f8fb587652282f32073a70a6b35a9fc91edc2e2b202151e8dec58743752903217a2b1f94c7efcfdf3f92b03fe1c5016ad1262e2ff9b7ae6b004a2c090c94712b30009f5e88308cf5b34469456cef1c5348f188b71005c2edaa8720bfe8ce2b7fe613b0b807dd80b39e16cdf2b9e4918c48a753f616256753e293a52a277bf34feec4a8f16784e9f50e7fd7390ceaf734ba4372e2f68f18e7fae752de2bada03248ee294f79ad4ab7d6d40243d22c385c489063f80ee36dd515b4fcf3a7429f420b7e55c0122afa2749fca5f0fa0b81717c5e51f2cbb6cc1812c135093c3eaba0bb8dd538a7e1903ec5415c9d0d7ada07df8c87449080395a6d88fabd4c77fa5a3555ef5c4fd6c1b9b2396276ec4ed6f8fef6ace1bb9463d1bcd6fecc90aa81a1e898e44cd8323834d07d595be5b34cfbd37f39c54ae589122c92af457104d4d9c43256aafbc350af64b8d5b61d14fdfe318e3810be321239805d886f951eeff0a8c330432eee4f8c89acacc0c027a0f2339c82c011bdca5f9876a813962eb5ba87174470e2cfd0b03ec2b43508b4997db9738d95eb706f45c2d10e1c693c4ab528b5de281dac6a5e4b41f2b9ede522fb2ac131dbc97485962104ee45b606f36772c55f400b90f9cdf675826ec754c3619eba7694dd32a41577ecbc7c5265b8a761183cf4a32b7f249b4061e563b8b8e290e5ed5cdad0d67849ce0535901b1e670b1b999130fff6ed290152bb82f29a1b0889eb185f6d1ea6cefc2a36d22d1359952ce8a36f7e3129834132306534f8cba0a2a3b580bcfad35cc6b1d5a6a8acea4f4d6f5d455f56d0241821874911cbc25380e60042b6e6a72e122cd41f7cdae6e989f48a48ed641973f0f44bca24e7fedcc6fe506470d71e5200e011f9d3491b1d43214aafe18d09e258a699d8979986d0a5374e28913ae10a6adbb0d979dfd97e48c215c67876129a3c167b0b859f93a6b16cee2de09a04d57c0", @typed={0x4, 0xaf}, @typed={0x8, 0x50, 0x0, 0x0, @u32=0x509}, @typed={0x8, 0xcf, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1348}], 0x3, 0x0, 0x0, 0x20008800}, 0x0) 55.882873ms ago: executing program 1 (id=11337): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x6, 0x1, 0xf}) 0s ago: executing program 2 (id=11338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x4000010, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000600)=0x1bf, 0x4) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_DELSET={0x90, 0xb, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x68, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xc7}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xe4}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x91}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xc7}]}}}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000101400042bbd7000ffdbdf2508004b001300000008004f0800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000090}, 0x40000) r6 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) syz_emit_ethernet(0x14b, &(0x7f0000000680)={@multicast, @link_local, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x111, 0x3a, 0x0, @dev, @loopback, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x40, 0x3c, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}], "19003c371895c0df7981bbd549ebb3825636a4ece012e722653ae2f50d0ea13cbffddcbd718bbcaa8b3aeaba9d86fa38710db1a6f496ee8d8321ccb460218ffa419be3152c2b8a7ef63fa2cd72593c06ced8a45a3212eaaa64d1b7cc3194f8881ff9e64548e9fccac2ac6427c4387caaa3a0048c90066f2b6865982e4a4f92276e23611f19917b84254e51d1ced85f4a29cb3e085f32f4e03aac3edbf38e6adf1a49aa7c2891900d2fa739842b3cb9ff5ab50af98192356a19ce8c4e41c592efd27f3e07531527de02cf7e144b9254b9aea1143868defb89b7"}}}}}}}, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008044}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x0) kernel console output (not intermixed with test programs): ning slave failed [ 1110.513077][ T7747] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9276'. [ 1110.538960][ T7740] bond0: (slave wlan1): Opening slave failed [ 1110.646226][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9277'. [ 1110.698027][ T7752] netlink: 'syz.0.9277': attribute type 5 has an invalid length. [ 1110.716395][ T7753] syzkaller0: entered promiscuous mode [ 1110.721979][ T7753] syzkaller0: entered allmulticast mode [ 1110.738245][ T7752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9277'. [ 1110.750640][ T7756] netlink: 'syz.2.9279': attribute type 17 has an invalid length. [ 1110.839312][ T7764] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 1111.037082][ T7752] geneve2: entered promiscuous mode [ 1111.042371][ T7752] geneve2: entered allmulticast mode [ 1111.074583][ T7756] erspan0: entered promiscuous mode [ 1111.091377][ T7756] gretap0: entered promiscuous mode [ 1111.105783][ T7756] gretap0: left promiscuous mode [ 1111.122942][ T7756] erspan0: left promiscuous mode [ 1111.237134][ T7758] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1111.276311][ T7758] bond2 (unregistering): Released all slaves [ 1111.337606][ T7765] bridge3: entered allmulticast mode [ 1111.376901][ T7764] `: renamed from bond0 (while UP) [ 1111.399212][ T1838] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1111.427581][ T1838] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1111.459202][ T1838] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1111.470180][ T1838] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1111.868998][ T7805] bridge0: port 3(team0) entered blocking state [ 1111.876854][ T7805] bridge0: port 3(team0) entered disabled state [ 1111.883486][ T7805] team0: entered allmulticast mode [ 1111.889525][ T7805] team_slave_0: entered allmulticast mode [ 1111.898376][ T7805] team_slave_1: entered allmulticast mode [ 1111.909272][ T7805] team0: entered promiscuous mode [ 1111.915274][ T7805] team_slave_0: entered promiscuous mode [ 1111.929283][ T7805] team_slave_1: entered promiscuous mode [ 1111.941290][ T7805] bridge0: port 3(team0) entered blocking state [ 1111.947801][ T7805] bridge0: port 3(team0) entered forwarding state [ 1111.959282][ T7802] tipc: Enabling of bearer rejected, failed to enable media [ 1112.088435][ T7814] sctp: [Deprecated]: syz.0.9294 (pid 7814) Use of int in maxseg socket option. [ 1112.088435][ T7814] Use struct sctp_assoc_value instead [ 1112.340211][ T7824] NCSI netlink: No device for ifindex 131092 [ 1112.469020][ T7828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1112.537736][ T7833] vxcan2: entered allmulticast mode [ 1112.719259][ T7841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1112.787809][ T7851] validate_nla: 11 callbacks suppressed [ 1112.787830][ T7851] netlink: 'syz.5.9309': attribute type 10 has an invalid length. [ 1112.847084][ T7851] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1112.936139][ T7861] netem: incorrect ge model size [ 1112.952802][ T7861] netem: change failed [ 1113.113740][ T7870] netlink: 'syz.0.9315': attribute type 1 has an invalid length. [ 1113.122090][ T7870] netlink: 'syz.0.9315': attribute type 2 has an invalid length. [ 1113.279653][ T7884] __nla_validate_parse: 16 callbacks suppressed [ 1113.279678][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9319'. [ 1113.355073][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9319'. [ 1113.369953][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9320'. [ 1113.370864][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9319'. [ 1113.388778][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9319'. [ 1113.402774][ T7884] netlink: 'syz.0.9319': attribute type 4 has an invalid length. [ 1113.411388][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9320'. [ 1113.437038][ T7889] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9320'. [ 1113.503079][ T7893] ip6gre1: entered promiscuous mode [ 1113.712427][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9326'. [ 1113.762532][ T7910] team_slave_0: entered promiscuous mode [ 1113.768714][ T7910] team_slave_1: entered promiscuous mode [ 1113.788956][ T7910] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1113.831932][ T7909] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1113.913127][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9328'. [ 1113.933865][ T7924] netlink: 'syz.2.9329': attribute type 1 has an invalid length. [ 1113.956213][ T7924] netlink: 'syz.2.9329': attribute type 2 has an invalid length. [ 1113.976529][ T7922] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9329'. [ 1114.225845][ T7947] netlink: zone id is out of range [ 1114.244488][ T7947] netlink: zone id is out of range [ 1114.249766][ T7947] netlink: zone id is out of range [ 1114.273451][ T7947] netlink: zone id is out of range [ 1114.291714][ T7947] netlink: zone id is out of range [ 1114.309333][ T7947] netlink: zone id is out of range [ 1114.327574][ T7947] netlink: zone id is out of range [ 1114.346917][ T7947] netlink: zone id is out of range [ 1114.367210][ T7947] netlink: zone id is out of range [ 1114.444407][ T7959] nbd: device at index 2 is going down [ 1114.522063][ T7961] sctp: [Deprecated]: syz.1.9340 (pid 7961) Use of int in max_burst socket option. [ 1114.522063][ T7961] Use struct sctp_assoc_value instead [ 1114.665439][ T7708] udevd[7708]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 1114.749335][ T7708] udevd[7708]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 1115.287396][T19700] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1115.297336][T19700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1115.309427][T19700] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1115.318072][T19700] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1115.335778][T19700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1115.401698][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1115.445860][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1115.454308][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1115.465164][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1115.472948][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1115.885606][ T8029] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 1116.583059][ T8003] chnl_net:caif_netlink_parms(): no params data found [ 1116.628416][T18859] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.655677][T18859] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.758062][ T8082] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20002 [ 1116.777844][ T1846] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.878109][T31125] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.982885][T31130] bridge_slave_1: left allmulticast mode [ 1116.999403][T31130] bridge_slave_1: left promiscuous mode [ 1117.014515][T31130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.024083][T31130] bridge_slave_0: left promiscuous mode [ 1117.029910][T31130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.088588][ T8101] netlink: 'syz.1.9377': attribute type 10 has an invalid length. [ 1117.539173][ T5827] Bluetooth: hci0: command tx timeout [ 1118.259245][T31130] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 1118.282233][T31130] bond8 (unregistering): (slave ip6gretap2): Releasing active interface [ 1118.430809][T31130] bond5 (unregistering): (slave gretap1): Releasing active interface [ 1118.735841][T31130] bond4 (unregistering): (slave bridge3): Releasing active interface [ 1119.049287][T31130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.060121][T31130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.071273][T31130] bond0 (unregistering): Released all slaves [ 1119.189291][T31130] bond1 (unregistering): (slave veth3): Releasing active interface [ 1119.197651][T31130] veth0_to_bond: entered promiscuous mode [ 1119.211428][T31130] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1119.221944][T31130] bond1 (unregistering): (slave veth5): Releasing active interface [ 1119.231368][T31130] bond1 (unregistering): Released all slaves [ 1119.349758][T31130] bond2 (unregistering): Released all slaves [ 1119.467459][T31130] bond3 (unregistering): Released all slaves [ 1119.482190][T31130] bond4 (unregistering): Released all slaves [ 1119.497280][T31130] bond5 (unregistering): Released all slaves [ 1119.511359][T31130] bond6 (unregistering): Released all slaves [ 1119.528982][T31130] bond7 (unregistering): Released all slaves [ 1119.607999][ T5827] Bluetooth: hci0: command tx timeout [ 1119.659171][T31130] bond8 (unregistering): Released all slaves [ 1119.779141][T31130] bond9 (unregistering): Released all slaves [ 1119.792457][ T8096] __nla_validate_parse: 20 callbacks suppressed [ 1119.792479][ T8096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9375'. [ 1119.809096][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9375'. [ 1119.844584][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9375'. [ 1119.987866][ T8101] dummy0: entered promiscuous mode [ 1119.999354][ T8101] team0: Port device dummy0 added [ 1120.055638][ T8003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.073899][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.098893][ T8003] bridge_slave_0: entered allmulticast mode [ 1120.126842][ T8003] bridge_slave_0: entered promiscuous mode [ 1120.143556][T31130] : left promiscuous mode [ 1120.259074][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.274389][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.281838][ T8003] bridge_slave_1: entered allmulticast mode [ 1120.296013][ T8003] bridge_slave_1: entered promiscuous mode [ 1120.306500][ T8128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9381'. [ 1120.347708][T31130] 9: left promiscuous mode [ 1120.489692][ T8003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.582843][T31130] tipc: Disabling bearer [ 1120.601928][T31130] tipc: Left network mode [ 1120.622672][ T8003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.702045][ T8003] team0: Port device team_slave_0 added [ 1120.727607][ T8003] team0: Port device team_slave_1 added [ 1120.781312][T31130] IPVS: stopping backup sync thread 4197 ... [ 1120.866798][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.882852][ T8159] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9390'. [ 1120.892956][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.932642][ T8003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.946801][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.954213][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.987538][ T8003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.023463][ T8154] syzkaller0: entered promiscuous mode [ 1121.030025][ T8154] syzkaller0: entered allmulticast mode [ 1121.054370][ T8162] tipc: Enabling of bearer rejected, failed to enable media [ 1121.066268][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1121.074119][ T8164] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9392'. [ 1121.573015][ T8003] hsr_slave_0: entered promiscuous mode [ 1121.601241][ T8003] hsr_slave_1: entered promiscuous mode [ 1121.642131][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9396'. [ 1121.672533][ T8003] debugfs: 'hsr0' already exists in 'hsr' [ 1121.689022][ T5827] Bluetooth: hci0: command tx timeout [ 1121.698702][ T8003] Cannot create hsr debugfs directory [ 1121.716845][ T8201] net_ratelimit: 47 callbacks suppressed [ 1121.716874][ T8201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1121.922054][ T8206] netlink: 'syz.5.9399': attribute type 32 has an invalid length. [ 1121.937979][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9399'. [ 1121.988180][ T8211] nbd: must specify a size in bytes for the device [ 1121.998247][ T8211] block nbd0: NBD_DISCONNECT [ 1122.003325][ T8211] block nbd0: Send disconnect failed -32 [ 1122.011873][ T8211] block nbd0: shutting down sockets [ 1122.042957][ T8204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.050550][ T8204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.179488][ T8206] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1122.283426][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9403'. [ 1122.336088][ T8230] netlink: 'syz.0.9401': attribute type 1 has an invalid length. [ 1122.358167][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9404'. [ 1122.563271][ T8230] bond3: entered promiscuous mode [ 1122.569718][ T8230] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1122.663121][ T8248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.709642][ T8226] bond3: (slave bridge4): making interface the new active one [ 1122.718907][ T8226] bridge4: entered promiscuous mode [ 1122.727977][ T8226] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 1122.934395][T31130] hsr_slave_0: left promiscuous mode [ 1122.947139][T31130] hsr_slave_1: left promiscuous mode [ 1122.953239][T31130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.969385][T31130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.990729][T31130] batman_adv: batadv0: Removing interface: ipvlan2 [ 1123.339226][ T8273] netlink: 'syz.1.9409': attribute type 11 has an invalid length. [ 1123.652865][T31130] vlan1 (unregistering): left allmulticast mode [ 1123.659262][T31130] veth0_vlan (unregistering): left allmulticast mode [ 1123.765769][ T5827] Bluetooth: hci0: command tx timeout [ 1123.991051][T31130] team0 (unregistering): Port device team_slave_1 removed [ 1124.041802][T31130] team0 (unregistering): Port device team_slave_0 removed [ 1124.657949][ T8003] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.748440][ T8003] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.819650][ T8290] __nla_validate_parse: 6 callbacks suppressed [ 1124.819673][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9412'. [ 1125.158778][ T8003] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.268581][ T8003] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.346931][T31130] IPVS: stop unused estimator thread 0... [ 1125.633187][ T8003] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1125.827544][ T8003] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1125.867803][ T8319] netlink: 'syz.0.9418': attribute type 4 has an invalid length. [ 1125.899125][ T8003] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1125.948066][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9419'. [ 1125.958446][ T8003] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1126.074165][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1126.082273][ C1] lec:lec_tx_timeout: lec0 [ 1126.168350][T31130] dummy0: left allmulticast mode [ 1126.175446][T31130] bridge0: port 3(dummy0) entered disabled state [ 1126.221678][T31130] bridge_slave_1: left allmulticast mode [ 1126.230396][T31130] bridge_slave_1: left promiscuous mode [ 1126.248307][T31130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.267852][T31130] bridge_slave_0: left allmulticast mode [ 1126.282944][T31130] bridge_slave_0: left promiscuous mode [ 1126.290645][T31130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.400160][ T8360] netlink: 100 bytes leftover after parsing attributes in process `syz.5.9426'. [ 1127.171391][T31130] bond5 (unregistering): (slave geneve4): Releasing active interface [ 1127.259721][T31130] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1129.203850][T31130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.218360][T31130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.241244][T31130] bond0 (unregistering): Released all slaves [ 1129.364242][T31130] bond1 (unregistering): Released all slaves [ 1129.490175][T31130] bond2 (unregistering): Released all slaves [ 1129.504970][T31130] bond3 (unregistering): Released all slaves [ 1129.519124][T31130] bond4 (unregistering): Released all slaves [ 1129.534274][T31130] bond5 (unregistering): Released all slaves [ 1129.550379][T31130] bond6 (unregistering): Released all slaves [ 1129.798006][T31130] : left promiscuous mode [ 1129.877946][T31130] tipc: Left network mode [ 1130.188252][ T8003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.266395][T15042] lec:lec_start_xmit: lec0:No lecd attached [ 1130.282446][ T8405] netlink: 'syz.5.9436': attribute type 1 has an invalid length. [ 1130.328020][ T8405] netlink: 'syz.5.9436': attribute type 2 has an invalid length. [ 1130.339112][ T8405] netlink: 'syz.5.9436': attribute type 1 has an invalid length. [ 1130.373086][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9437'. [ 1130.393268][ T8003] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.448122][ T8413] netlink: 'syz.5.9439': attribute type 1 has an invalid length. [ 1130.486008][ T8410] bridge2: entered promiscuous mode [ 1130.491525][ T8410] bridge2: entered allmulticast mode [ 1130.547358][ T8413] bond13: entered promiscuous mode [ 1130.553116][ T8413] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1130.595104][ T1838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.602286][ T1838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.731972][ T8413] bond13: (slave bridge4): making interface the new active one [ 1130.757070][ T8413] bridge4: entered promiscuous mode [ 1130.766078][ T8413] bond13: (slave bridge4): Enslaving as an active interface with an up link [ 1130.779872][T31141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.787104][T31141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.080863][ T8442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9447'. [ 1131.320358][ T8452] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9451'. [ 1131.338485][ T8453] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9451'. [ 1131.414244][ T8452] ip6gre1: entered promiscuous mode [ 1131.419537][ T8452] ip6gre1: entered allmulticast mode [ 1131.442543][ T8460] netlink: 'syz.1.9450': attribute type 1 has an invalid length. [ 1131.457186][ T8460] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9450'. [ 1131.674492][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9454'. [ 1131.814855][ T8482] x_tables: duplicate underflow at hook 1 [ 1131.914751][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9456'. [ 1131.932471][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9456'. [ 1132.059324][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9460'. [ 1132.115027][ T8497] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9460'. [ 1132.125257][ T8488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1132.234818][ T8478] syzkaller0: entered promiscuous mode [ 1132.258532][ T8478] syzkaller0: entered allmulticast mode [ 1132.291324][T31130] hsr_slave_0: left promiscuous mode [ 1132.299226][T31130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1132.308833][T31130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.349059][T31130] veth1_vlan: left promiscuous mode [ 1132.356858][T31130] veth0_vlan: left promiscuous mode [ 1135.608296][ T8003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.648861][ T8558] openvswitch: netlink: Key type 228 is out of range max 32 [ 1135.719053][ T8003] veth0_vlan: entered promiscuous mode [ 1135.755091][ T8003] veth1_vlan: entered promiscuous mode [ 1135.916093][ T8003] veth0_macvtap: entered promiscuous mode [ 1135.923853][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 1135.931991][ C1] lec:lec_tx_timeout: lec0 [ 1135.964989][ T8003] veth1_macvtap: entered promiscuous mode [ 1135.997512][ T8571] __nla_validate_parse: 5 callbacks suppressed [ 1135.997534][ T8571] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9477'. [ 1136.042051][T31130] IPVS: stop unused estimator thread 0... [ 1136.080133][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.132481][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.235647][T31128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.270648][T31128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.310078][T31128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.342652][T31128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.407975][ T8594] netlink: 'syz.3.9482': attribute type 1 has an invalid length. [ 1136.677204][ T8609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9488'. [ 1136.745027][ T1846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.784602][ T1846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.913633][T31128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.921653][T31128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.931955][ T8621] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9492'. [ 1136.965240][ T8621] openvswitch: netlink: Flow key attr not present in new flow. [ 1137.069077][ T8629] netlink: 'syz.5.9495': attribute type 1 has an invalid length. [ 1137.085787][ T8629] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9495'. [ 1137.094553][ T8628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9494'. [ 1137.109108][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9495'. [ 1137.130628][ T8632] x_tables: duplicate underflow at hook 1 [ 1137.137102][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9495'. [ 1137.149727][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9495'. [ 1137.331856][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9499'. [ 1137.369265][ T8646] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9502'. [ 1137.866736][ T8670] netlink: 'syz.2.9511': attribute type 1 has an invalid length. [ 1137.890845][ T8673] netlink: 'syz.0.9513': attribute type 4 has an invalid length. [ 1137.899230][ T8670] netlink: 'syz.2.9511': attribute type 17 has an invalid length. [ 1138.199981][ T8690] netlink: 'syz.5.9517': attribute type 1 has an invalid length. [ 1138.781609][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.808533][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.888955][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.898569][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.468932][ T8752] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1139.518697][ T8752] netlink: 'syz.3.9532': attribute type 4 has an invalid length. [ 1139.534532][ T8752] netlink: 'syz.3.9532': attribute type 4 has an invalid length. [ 1139.854138][ T8772] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1139.884421][ T8772] delete_channel: no stack [ 1139.962224][ T8772] ip6tnl2: entered allmulticast mode [ 1140.207602][ T8796] ip6t_srh: unknown srh invflags 4000 [ 1140.280251][ T8793] netlink: 'syz.2.9543': attribute type 23 has an invalid length. [ 1140.389943][ T8803] netlink: 'syz.2.9543': attribute type 23 has an invalid length. [ 1140.770714][ T8825] gretap1: entered promiscuous mode [ 1140.867135][ T8828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.095585][ T8828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.270489][ T8819] macvlan2: entered promiscuous mode [ 1141.293942][ T8819] macvlan2: entered allmulticast mode [ 1141.813642][ T8871] syzkaller0: entered promiscuous mode [ 1141.819909][ T8871] syzkaller0: entered allmulticast mode [ 1141.902651][ T8874] __nla_validate_parse: 17 callbacks suppressed [ 1141.902675][ T8874] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9561'. [ 1142.055826][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9564'. [ 1142.073301][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9564'. [ 1142.102140][ T8886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9564'. [ 1142.490523][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9570'. [ 1142.518145][ T8904] Bluetooth: MGMT ver 1.23 [ 1142.702297][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9573'. [ 1142.714972][ T8915] xfrm0: entered promiscuous mode [ 1142.931216][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9578'. [ 1142.968763][ T8936] sit0: entered promiscuous mode [ 1143.023745][ T8936] validate_nla: 1 callbacks suppressed [ 1143.023764][ T8936] netlink: 'syz.1.9579': attribute type 1 has an invalid length. [ 1143.063151][ T8936] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9579'. [ 1143.330808][ T8949] syzkaller1: entered promiscuous mode [ 1143.352576][ T8949] syzkaller1: entered allmulticast mode [ 1143.547562][ T8970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9587'. [ 1143.870969][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9592'. [ 1143.908416][ T8986] netlink: 'syz.5.9592': attribute type 1 has an invalid length. [ 1144.991403][ T9046] xt_ipcomp: unknown flags 1D [ 1145.011966][ T9044] IPVS: Error connecting to the multicast addr [ 1145.042174][ T9044] syzkaller0: entered promiscuous mode [ 1145.048615][ T9044] syzkaller0: entered allmulticast mode [ 1145.153031][ T9052] syzkaller0: entered promiscuous mode [ 1145.173274][ T9052] syzkaller0: entered allmulticast mode [ 1145.636306][ T9087] sit0: entered promiscuous mode [ 1145.646116][ T9087] netlink: 'syz.2.9625': attribute type 1 has an invalid length. [ 1145.796204][ T9101] netlink: 'syz.2.9628': attribute type 16 has an invalid length. [ 1145.970832][ T9109] IPVS: set_ctl: invalid protocol: 51 172.30.0.6:20001 [ 1146.073159][ T9116] netlink: 'syz.5.9634': attribute type 10 has an invalid length. [ 1146.086099][ T9113] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20003 [ 1146.094278][ T9116] syz_tun: entered promiscuous mode [ 1146.105652][ T9116] netlink: 'syz.5.9634': attribute type 10 has an invalid length. [ 1146.490667][ T9134] xt_policy: output policy not valid in PREROUTING and INPUT [ 1146.549407][ T9133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.709858][ T9133] syzkaller0: entered promiscuous mode [ 1146.716630][ T9133] syzkaller0: entered allmulticast mode [ 1147.017045][ T9164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1148.754419][ T9167] __nla_validate_parse: 16 callbacks suppressed [ 1148.754443][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9647'. [ 1148.906177][ T9170] netlink: 'syz.1.9648': attribute type 21 has an invalid length. [ 1149.168186][ T9192] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1149.196846][ T5657] IPVS: starting estimator thread 0... [ 1149.305305][ T9196] IPVS: using max 26 ests per chain, 62400 per kthread [ 1149.354460][ T9206] netlink: 'syz.0.9657': attribute type 3 has an invalid length. [ 1149.453107][ T9186] syzkaller0: entered promiscuous mode [ 1149.459198][ T9186] syzkaller0: entered allmulticast mode [ 1149.881106][ T9235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9660'. [ 1151.800071][T31128] bridge_slave_1: left allmulticast mode [ 1151.810617][T31128] bridge_slave_1: left promiscuous mode [ 1151.819963][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9668'. [ 1151.830681][T31128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.867527][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9667'. [ 1151.884098][T31128] ¾x9ÿ: left allmulticast mode [ 1151.889067][T31128] ¾x9ÿ: left promiscuous mode [ 1151.908147][T31128] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1151.930484][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9669'. [ 1151.988780][T31128] tipc: Resetting bearer [ 1152.233919][T31128] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 1152.500290][T31128] bond6 (unregistering): (slave gre1): Releasing backup interface [ 1152.568813][T31128] dvmrp0 (unregistering): left allmulticast mode [ 1152.787732][T31128] tipc: Disabling bearer [ 1152.962969][T31128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1152.978406][T31128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1152.988578][T31128] bond0 (unregistering): Released all slaves [ 1153.000293][T31128] bond1 (unregistering): Released all slaves [ 1153.015072][T31128] bond2 (unregistering): Released all slaves [ 1153.138607][T31128] bond3 (unregistering): Released all slaves [ 1153.153149][T31128] bond4 (unregistering): Released all slaves [ 1153.273449][T31128] bond5 (unregistering): Released all slaves [ 1153.393994][T31128] bond6 (unregistering): Released all slaves [ 1153.407981][T31128] bond7 (unregistering): Released all slaves [ 1153.421584][T31128] bond8 (unregistering): Released all slaves [ 1153.551701][T31128] bond9 (unregistering): Released all slaves [ 1153.566776][T31128] bond10 (unregistering): Released all slaves [ 1153.580614][T31128] bond11 (unregistering): Released all slaves [ 1153.710978][T31128] bond12 (unregistering): Released all slaves [ 1153.725402][T31128] bond13 (unregistering): Released all slaves [ 1153.739860][T31128] bond14 (unregistering): Released all slaves [ 1153.758556][T31128] bond15 (unregistering): Released all slaves [ 1153.782274][ T9262] vlan3: entered allmulticast mode [ 1153.799280][ T9282] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 1153.904751][T31128] : left promiscuous mode [ 1154.101929][T31128] tipc: Left network mode [ 1154.215585][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9684'. [ 1154.261689][ T9315] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9684'. [ 1154.274867][ T9315] bridge0: port 3(team0) entered disabled state [ 1154.281597][ T9315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.289348][ T9315] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1154.329787][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9684'. [ 1154.544834][ T9343] netlink: 'syz.5.9686': attribute type 1 has an invalid length. [ 1154.620283][ T9341] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9689'. [ 1154.826993][ T9329] bond14: (slave bridge5): making interface the new active one [ 1154.859034][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9691'. [ 1154.870419][ T9329] bond14: (slave bridge5): Enslaving as an active interface with an up link [ 1155.110646][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9693'. [ 1155.169028][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1155.194473][ T9362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.220522][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1155.228202][ T9362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.358392][ T9369] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9695'. [ 1155.528427][ T9380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9697'. [ 1155.547482][ T9380] netlink: 'syz.2.9697': attribute type 7 has an invalid length. [ 1155.559590][T31128] hsr_slave_0: left promiscuous mode [ 1155.569644][ T9380] netlink: 'syz.2.9697': attribute type 8 has an invalid length. [ 1155.597924][T31128] hsr_slave_1: left promiscuous mode [ 1155.613752][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9697'. [ 1155.626157][T31128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1157.017028][ T9422] netlink: 'syz.0.9702': attribute type 1 has an invalid length. [ 1157.110077][ T9422] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1157.117799][ T9423] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.9705'. [ 1157.144170][ T9422] bond4: (slave veth0_to_bond): making interface the new active one [ 1157.154810][ T9422] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1157.185948][ T9422] netlink: 'syz.0.9702': attribute type 1 has an invalid length. [ 1157.194135][ T9422] netlink: 'syz.0.9702': attribute type 2 has an invalid length. [ 1157.508663][ T9444] nbd: must specify a size in bytes for the device [ 1157.563829][ T9452] ksmbd: Unknown IPC event: 3, ignore. [ 1157.642580][T31128] IPVS: stop unused estimator thread 0... [ 1158.421177][ T9502] gre2: entered promiscuous mode [ 1158.427616][ T9502] gre2: entered allmulticast mode [ 1158.968616][ T9543] netlink: 'syz.2.9730': attribute type 6 has an invalid length. [ 1159.310168][ T9563] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1159.451299][ T9572] __nla_validate_parse: 8 callbacks suppressed [ 1159.451321][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9739'. [ 1159.547763][ T9577] xt_hashlimit: size too large, truncated to 1048576 [ 1159.585378][ T9579] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9741'. [ 1159.604208][ T9579] netlink: 'syz.2.9741': attribute type 9 has an invalid length. [ 1159.674468][ T9583] openvswitch: netlink: IP tunnel dst address not specified [ 1159.936777][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9745'. [ 1159.951966][ T9593] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 1160.072997][ T9600] netlink: 'syz.5.9746': attribute type 16 has an invalid length. [ 1160.189726][ T9600] netlink: 'syz.5.9746': attribute type 17 has an invalid length. [ 1160.212408][ T9602] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9747'. [ 1160.276385][ T9602] netlink: 'syz.1.9747': attribute type 2 has an invalid length. [ 1160.323443][ T9611] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.9750'. [ 1160.338239][ T9600] erspan0: left allmulticast mode [ 1160.351686][ T9611] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.9750'. [ 1160.384946][ T9611] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.9750'. [ 1160.404455][ T9611] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.9750'. [ 1160.435125][ T9611] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.9750'. [ 1160.459050][ T9611] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.9750'. [ 1160.502114][ T9600] syz_tun: left promiscuous mode [ 1160.534251][ T9600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.581508][ T9600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1160.686761][ T9622] netlink: 'syz.3.9752': attribute type 1 has an invalid length. [ 1160.978519][ T9638] netlink: 'syz.5.9756': attribute type 1 has an invalid length. [ 1161.115433][ T9647] xt_HMARK: proto mask must be zero with L3 mode [ 1161.312917][ T9645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.839378][ T9645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.897940][ T9645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1162.380848][ T9648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1162.437595][ T9648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.490763][ T9653] IPv6: sit1: Disabled Multicast RS [ 1162.497816][ T9653] sit1: entered allmulticast mode [ 1162.529142][ T9655] ip_vti0: entered promiscuous mode [ 1162.721451][T31128] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.750723][T31128] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.779469][T31128] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.801221][T31128] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.889961][T31128] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.917548][T31128] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.945501][T31128] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.975462][T31128] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.060679][ T9707] netlink: 'syz.1.9767': attribute type 29 has an invalid length. [ 1163.114339][ T9707] netlink: 'syz.1.9767': attribute type 29 has an invalid length. [ 1164.081642][ T9765] tipc: Enabling of bearer rejected, media not registered [ 1164.132107][ T9769] netlink: 'syz.3.9780': attribute type 9 has an invalid length. [ 1164.182428][ T9769] netlink: 'syz.3.9780': attribute type 11 has an invalid length. [ 1164.206755][ T9775] bond0: option ad_select: unable to set because the bond device is up [ 1164.700339][ T9799] syzkaller0: entered allmulticast mode [ 1164.830867][ T9807] __nla_validate_parse: 67 callbacks suppressed [ 1164.830888][ T9807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9791'. [ 1164.852832][ T9807] netlink: 340 bytes leftover after parsing attributes in process `syz.0.9791'. [ 1165.031889][ T9824] x_tables: duplicate underflow at hook 1 [ 1165.344469][ T9845] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9800'. [ 1165.415856][ T9852] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9804'. [ 1165.442191][ T9845] syzkaller0: entered promiscuous mode [ 1165.479368][ T9845] syzkaller0: entered allmulticast mode [ 1167.791150][ T9887] validate_nla: 1 callbacks suppressed [ 1167.791172][ T9887] netlink: 'syz.5.9812': attribute type 3 has an invalid length. [ 1167.819198][ T9887] netlink: 'syz.5.9812': attribute type 1 has an invalid length. [ 1168.025995][ T9899] IPv6: addrconf: prefix option has invalid lifetime [ 1168.032801][ T9899] IPv6: addrconf: prefix option has invalid lifetime [ 1168.153438][ T9911] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1168.162597][ T9911] netlink: 'syz.0.9821': attribute type 21 has an invalid length. [ 1168.183331][ T9911] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9821'. [ 1168.219808][ T9913] syzkaller0: entered promiscuous mode [ 1168.225597][ T9913] syzkaller0: entered allmulticast mode [ 1168.238824][ T9913] tipc: Enabled bearer , priority 0 [ 1168.258925][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9822'. [ 1168.302086][ T9915] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1168.820726][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9831'. [ 1168.820726][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9831'. [ 1168.997117][ T9907] tipc: Resetting bearer [ 1169.052871][ T9907] tipc: Disabling bearer [ 1169.077069][ T9950] s5ÿÿø: renamed from vlan1 [ 1169.328674][ T9963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9839'. [ 1169.392832][ T9969] netlink: 'syz.2.9839': attribute type 13 has an invalid length. [ 1169.403928][ T9965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9838'. [ 1169.418584][ T9969] netlink: 'syz.2.9839': attribute type 17 has an invalid length. [ 1169.432775][ T9965] IPv6: sit1: Disabled Multicast RS [ 1169.439157][ T9965] sit1: entered allmulticast mode [ 1169.495697][ T9971] bond15: Removing last arp target with arp_interval on [ 1169.539408][ T9969] ip_vti0: left promiscuous mode [ 1169.553436][ T9969] sit0: left promiscuous mode [ 1169.630737][ T9969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1169.667239][ T9975] gretap1: entered promiscuous mode [ 1169.672865][ T9975] gretap1: entered allmulticast mode [ 1169.758472][ T9978] bond16: Unable to set down delay as MII monitoring is disabled [ 1169.774051][ T9978] bond16 (unregistering): Released all slaves [ 1169.816607][ T9983] IPVS: length: 24 != 12312 [ 1169.821533][ T9983] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1169.959673][ T9991] tipc: Enabled bearer , priority 0 [ 1169.977177][ T9993] __nla_validate_parse: 3 callbacks suppressed [ 1169.977198][ T9993] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9847'. [ 1169.990491][ T9991] syzkaller0: entered promiscuous mode [ 1170.016812][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9846'. [ 1170.033331][ T9991] syzkaller0: entered allmulticast mode [ 1170.063420][ T9991] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1170.109225][ T9997] tipc: Resetting bearer [ 1170.212735][ T9997] tipc: Resetting bearer [ 1170.318669][ T9997] tipc: Disabling bearer [ 1170.350399][T10017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9853'. [ 1170.492475][T10024] netlink: 'syz.5.9854': attribute type 1 has an invalid length. [ 1170.504267][T10024] netlink: 'syz.5.9854': attribute type 2 has an invalid length. [ 1170.533823][T10030] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 1170.542572][T10030] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 1170.569828][T10032] netlink: 'syz.1.9856': attribute type 5 has an invalid length. [ 1170.582672][T10032] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9856'. [ 1170.708031][T10040] netlink: 'syz.2.9859': attribute type 1 has an invalid length. [ 1170.753213][T10044] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9860'. [ 1170.783414][T10040] bond1: entered promiscuous mode [ 1170.790166][T10040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1171.395562][T10082] syzkaller0: entered promiscuous mode [ 1171.401981][T10082] syzkaller0: entered allmulticast mode [ 1171.490371][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9872'. [ 1171.836777][T10113] erspan0: entered promiscuous mode [ 1171.842121][T10113] erspan0: entered allmulticast mode [ 1171.988375][T10119] netlink: 'syz.3.9878': attribute type 1 has an invalid length. [ 1172.047317][T10119] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9878'. [ 1172.089460][T10119] NCSI netlink: No device for ifindex 131092 [ 1172.121608][T10122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1172.467042][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9886'. [ 1172.490138][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9886'. [ 1172.604963][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9889'. [ 1172.632685][T10162] syzkaller0: entered promiscuous mode [ 1172.642981][T10162] syzkaller0: entered allmulticast mode [ 1172.654666][T10165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1172.759513][T10172] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1172.836571][T10175] chnl_net:caif_netlink_parms(): no params data found [ 1173.245717][T10200] xt_hashlimit: size too large, truncated to 1048576 [ 1173.262003][T10202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1174.216754][T10247] syzkaller0: entered promiscuous mode [ 1174.222779][T10247] syzkaller0: entered allmulticast mode [ 1174.370043][T10259] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1174.445447][T10264] validate_nla: 4 callbacks suppressed [ 1174.445469][T10264] netlink: 'syz.2.9921': attribute type 3 has an invalid length. [ 1174.582666][T10273] netlink: 'syz.5.9922': attribute type 21 has an invalid length. [ 1174.603899][T10273] netlink: 'syz.5.9922': attribute type 5 has an invalid length. [ 1174.662796][T10280] netlink: 'syz.2.9925': attribute type 21 has an invalid length. [ 1174.670911][T10280] netlink: 'syz.2.9925': attribute type 5 has an invalid length. [ 1175.447799][T10315] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1175.459563][T10315] __nla_validate_parse: 14 callbacks suppressed [ 1175.459580][T10315] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9932'. [ 1175.569087][T10318] netlink: 'syz.1.9933': attribute type 1 has an invalid length. [ 1175.604893][T10318] bond2: (slave gretap2): making interface the new active one [ 1175.614740][T10318] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1177.250075][T10253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1177.447678][T10341] openvswitch: netlink: Missing valid actions attribute. [ 1177.464732][T10341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1177.965361][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9945'. [ 1178.000648][T10381] netlink: 'syz.3.9946': attribute type 1 has an invalid length. [ 1178.009509][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9945'. [ 1178.201593][T10394] netlink: 'syz.2.9949': attribute type 1 has an invalid length. [ 1178.319472][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9953'. [ 1178.337366][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9953'. [ 1178.355223][T10394] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1178.607223][T10416] syzkaller0: entered promiscuous mode [ 1178.635409][T10416] syzkaller0: entered allmulticast mode [ 1178.703708][T10416] tipc: Enabled bearer , priority 0 [ 1178.781405][T10415] tipc: Resetting bearer [ 1178.801210][T10415] tipc: Disabling bearer [ 1178.831396][T10428] wg0 speed is unknown, defaulting to 1000 [ 1178.839468][T10428] wg0 speed is unknown, defaulting to 1000 [ 1178.855215][T10428] wg0 speed is unknown, defaulting to 1000 [ 1179.106348][T10448] sctp: [Deprecated]: syz.0.9969 (pid 10448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1179.106348][T10448] Use struct sctp_sack_info instead [ 1179.317411][T10460] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9974'. [ 1179.358668][T10428] infiniband syz5: set active [ 1179.384315][T10428] infiniband syz5: added wg0 [ 1179.413395][ T9661] wg0 speed is unknown, defaulting to 1000 [ 1179.468412][T10460] bond3 (unregistering): Released all slaves [ 1179.488429][T10428] RDS/IB: syz5: added [ 1179.492757][T10428] smc: adding ib device syz5 with port count 1 [ 1179.500995][T10428] smc: ib device syz5 port 1 has no pnetid [ 1179.512611][ T9661] wg0 speed is unknown, defaulting to 1000 [ 1179.553322][T10428] wg0 speed is unknown, defaulting to 1000 [ 1179.700303][T10478] netlink: 'syz.5.9978': attribute type 1 has an invalid length. [ 1179.713214][T10475] syzkaller0: entered promiscuous mode [ 1179.719239][T10475] syzkaller0: entered allmulticast mode [ 1179.728147][T10478] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9978'. [ 1179.755981][T10478] workqueue: Failed to create a rescuer kthread for wq "phy8-mac-cmds": -EINTR [ 1179.778203][T10475] tipc: Enabled bearer , priority 0 [ 1179.824073][T10475] tipc: Resetting bearer [ 1179.830816][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9980'. [ 1179.832713][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.848587][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.911761][T10486] bond2: entered promiscuous mode [ 1179.917773][T10486] bond2: entered allmulticast mode [ 1179.926668][T10486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1179.963762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.967999][T10474] tipc: Resetting bearer [ 1179.972926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.045766][T10474] tipc: Disabling bearer [ 1180.175775][T10428] wg0 speed is unknown, defaulting to 1000 [ 1180.259012][T10503] netlink: 'syz.0.9983': attribute type 10 has an invalid length. [ 1180.295184][T10503] dummy0: entered promiscuous mode [ 1180.300578][T10503] dummy0: entered allmulticast mode [ 1180.320389][T10503] team0: Port device dummy0 added [ 1180.445469][T10510] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9986'. [ 1180.544609][T10514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9988'. [ 1180.654791][T10428] wg0 speed is unknown, defaulting to 1000 [ 1180.869031][T10529] netlink: 'syz.1.9992': attribute type 1 has an invalid length. [ 1180.889516][T10529] netlink: 'syz.1.9992': attribute type 3 has an invalid length. [ 1180.899462][T10532] xt_addrtype: ipv6 does not support BROADCAST matching [ 1180.957336][T10529] netlink: 'syz.1.9992': attribute type 7 has an invalid length. [ 1180.999124][T10529] netlink: 'syz.1.9992': attribute type 8 has an invalid length. [ 1181.012369][T10529] netlink: 184 bytes leftover after parsing attributes in process `syz.1.9992'. [ 1181.023978][T10529] NCSI netlink: No device for ifindex 131092 [ 1181.128403][T10428] wg0 speed is unknown, defaulting to 1000 [ 1181.134419][T10539] syzkaller1: entered promiscuous mode [ 1181.141552][T10539] syzkaller1: entered allmulticast mode [ 1181.167057][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9994'. [ 1181.237933][T10537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9994'. [ 1181.371819][T10546] smc: net device team0 applied user defined pnetid SYZ2 [ 1181.391512][T10546] smc: net device team0 erased user defined pnetid SYZ2 [ 1181.486130][T10550] tipc: Invalid UDP bearer configuration [ 1181.486187][T10550] tipc: Enabling of bearer rejected, failed to enable media [ 1181.571825][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10001'. [ 1181.572419][T10428] wg0 speed is unknown, defaulting to 1000 [ 1181.592247][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10001'. [ 1181.766274][T10566] netlink: 184 bytes leftover after parsing attributes in process `syz.5.10004'. [ 1181.803769][T10573] netlink: 184 bytes leftover after parsing attributes in process `syz.5.10004'. [ 1182.008671][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10008'. [ 1182.032082][T10583] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10007'. [ 1182.066402][T10428] wg0 speed is unknown, defaulting to 1000 [ 1182.127219][T10587] bond5: (slave syz_tun): Enslaving as an active interface with an up link [ 1182.460221][T10428] wg0 speed is unknown, defaulting to 1000 [ 1182.497410][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1182.756722][T10613] netlink: 'syz.0.10016': attribute type 4 has an invalid length. [ 1182.789425][T10609] bond3: option miimon: invalid value (18446744073709551585) [ 1182.797139][T10609] bond3: option miimon: allowed values 0 - 2147483647 [ 1182.817040][T10616] netlink: 'syz.5.10018': attribute type 18 has an invalid length. [ 1182.827285][T10609] bond3 (unregistering): Released all slaves [ 1182.946166][T10614] bond3: Unable to set up delay as MII monitoring is disabled [ 1182.956743][T10614] bond3 (unregistering): Released all slaves [ 1182.965508][T10628] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1183.000648][T10428] wg0 speed is unknown, defaulting to 1000 [ 1183.209468][T10635] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20000 [ 1183.324167][ T9660] IPVS: starting estimator thread 0... [ 1183.414049][T10640] IPVS: using max 28 ests per chain, 67200 per kthread [ 1185.410469][T10666] dvmrp9: entered allmulticast mode [ 1185.702523][T10693] netlink: 'syz.5.10038': attribute type 21 has an invalid length. [ 1185.738948][T10693] delete_channel: no stack [ 1185.809921][T10700] Cannot find add_set index 0 as target [ 1185.825951][T10700] geneve2: entered promiscuous mode [ 1185.852870][T10701] __nla_validate_parse: 6 callbacks suppressed [ 1185.852891][T10701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10040'. [ 1185.937131][T10706] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10041'. [ 1186.094994][T10715] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.10045'. [ 1186.117601][T10716] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.10045'. [ 1186.137980][T10715] netlink: Unknown conntrack attr (type=2304, max=9) [ 1186.155613][T10716] netlink: Unknown conntrack attr (type=2304, max=9) [ 1186.308381][T19700] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1186.320700][T19700] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1186.329267][T19700] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1186.337503][T19700] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1186.346778][T19700] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1186.400175][T10720] wg0 speed is unknown, defaulting to 1000 [ 1186.507357][T10726] netlink: 112 bytes leftover after parsing attributes in process `syz.1.10047'. [ 1186.536469][T10727] netlink: 112 bytes leftover after parsing attributes in process `syz.1.10047'. [ 1186.554565][T10726] openvswitch: netlink: Flow key attr not present in new flow. [ 1186.572466][T10727] openvswitch: netlink: Flow key attr not present in new flow. [ 1186.852367][T32484] bond0: (slave syz_tun): Releasing backup interface [ 1186.937182][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10051'. [ 1186.965325][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10051'. [ 1187.001790][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10051'. [ 1187.068751][T31128] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.081937][T31128] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.095988][T10759] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1187.122971][T31125] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.123168][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10051'. [ 1187.215838][T31128] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.228624][T31128] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.340466][T31125] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.349957][T31125] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.362236][T10766] netlink: 'syz.2.10056': attribute type 1 has an invalid length. [ 1187.412688][T31128] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.423122][T31128] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.455353][T31125] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.548336][T31128] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 1187.562753][T31128] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.576167][T31128] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.628823][T10720] chnl_net:caif_netlink_parms(): no params data found [ 1187.821341][T31125] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.840753][T31125] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.868214][T31125] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.897366][T31125] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.909257][T10789] netlink: 'syz.1.10061': attribute type 1 has an invalid length. [ 1187.923594][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1187.931720][ C1] lec:lec_tx_timeout: lec0 [ 1187.937609][T10794] x_tables: duplicate underflow at hook 2 [ 1187.964074][T10793] netlink: 'syz.1.10061': attribute type 1 has an invalid length. [ 1188.047149][T10720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.069481][T10720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.078432][T10720] bridge_slave_0: entered allmulticast mode [ 1188.087999][T10720] bridge_slave_0: entered promiscuous mode [ 1188.098910][ T13] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1188.108969][ T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.141291][T10720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.153733][T10720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.161091][T10720] bridge_slave_1: entered allmulticast mode [ 1188.183260][T10720] bridge_slave_1: entered promiscuous mode [ 1188.196544][ T13] netdevsim netdevsim5 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1188.220025][ T13] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.229581][T31128] bridge_slave_1: left promiscuous mode [ 1188.236139][T31128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.254629][T31128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.404769][ T5827] Bluetooth: hci2: command tx timeout [ 1188.549313][T31128] bond8 (unregistering): (slave ip6gretap1): Releasing active interface [ 1188.858313][T31128] dvmrp9 (unregistering): left allmulticast mode [ 1189.117548][T31128] bond13 (unregistering): (slave bridge4): Releasing backup interface [ 1189.127693][T31128] bridge4 (unregistering): left promiscuous mode [ 1189.176336][T31128] bond14 (unregistering): (slave bridge5): Releasing active interface [ 1189.229045][T31128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1189.240213][T31128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1189.251333][T31128] bond0 (unregistering): Released all slaves [ 1189.371120][T31128] bond1 (unregistering): Released all slaves [ 1189.497060][T31128] bond2 (unregistering): (slave veth3): Releasing active interface [ 1189.507537][T31128] bond2 (unregistering): Released all slaves [ 1189.629112][T31128] bond3 (unregistering): Released all slaves [ 1189.643429][T31128] bond4 (unregistering): Released all slaves [ 1189.766698][T31128] bond5 (unregistering): (slave veth5): Releasing active interface [ 1189.777216][T31128] bond5 (unregistering): Released all slaves [ 1189.791170][T31128] bond6 (unregistering): Released all slaves [ 1189.806116][T31128] bond7 (unregistering): (slave veth7): Releasing active interface [ 1189.818407][T31128] bond7 (unregistering): Released all slaves [ 1189.838603][T31128] bond8 (unregistering): Released all slaves [ 1189.963233][T31128] bond9 (unregistering): (slave veth9): Releasing active interface [ 1189.973856][T31128] bond9 (unregistering): Released all slaves [ 1189.990448][T31128] bond10 (unregistering): Released all slaves [ 1190.115017][T31128] bond11 (unregistering): Released all slaves [ 1190.129154][T31128] bond12 (unregistering): Released all slaves [ 1190.257730][T31128] bond13 (unregistering): Released all slaves [ 1190.271772][T31128] bond14 (unregistering): Released all slaves [ 1190.287004][T31128] bond15 (unregistering): Released all slaves [ 1190.424695][T10824] netlink: 'syz.3.10067': attribute type 1 has an invalid length. [ 1190.433720][T10825] netlink: 'syz.3.10067': attribute type 1 has an invalid length. [ 1190.468352][T31128] : left promiscuous mode [ 1190.487100][ T5827] Bluetooth: hci2: command tx timeout [ 1190.547657][T10720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.597223][T10720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.617301][T31128] tipc: Disabling bearer [ 1190.622928][T31128] tipc: Left network mode [ 1190.689499][T10720] team0: Port device team_slave_0 added [ 1190.711490][T10720] team0: Port device team_slave_1 added [ 1190.896014][T10720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.903026][T10720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.936928][T10720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.977306][T10720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.986001][T10720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.020233][T10720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.051500][T10849] xt_ecn: cannot match TCP bits for non-tcp packets [ 1191.116105][T10852] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1191.195227][T10850] wg0 speed is unknown, defaulting to 1000 [ 1191.209292][T10720] hsr_slave_0: entered promiscuous mode [ 1191.218340][T10720] hsr_slave_1: entered promiscuous mode [ 1191.226366][T10720] debugfs: 'hsr0' already exists in 'hsr' [ 1191.245094][T10720] Cannot create hsr debugfs directory [ 1191.580218][T10870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1191.667866][T10871] __nla_validate_parse: 9 callbacks suppressed [ 1191.667889][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10077'. [ 1191.746658][T10871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10077'. [ 1192.178314][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10081'. [ 1192.374342][T10901] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10083'. [ 1192.583320][ T5827] Bluetooth: hci2: command tx timeout [ 1192.671140][T10913] xt_NFQUEUE: number of total queues is 0 [ 1192.752944][T10720] netdevsim netdevsim5 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1192.770081][T10720] netdevsim netdevsim5 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.874548][T31128] hsr_slave_0: left promiscuous mode [ 1193.020487][T31128] veth1_macvtap: left promiscuous mode [ 1193.041235][T31128] veth0_macvtap: left promiscuous mode [ 1193.057222][T31128] veth1_vlan: left promiscuous mode [ 1193.072105][T31128] veth0_vlan: left promiscuous mode [ 1194.405462][T10720] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1194.415494][T10720] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.519786][T10720] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1194.560537][T10720] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.592825][T10947] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1194.645361][ T5827] Bluetooth: hci2: command tx timeout [ 1194.882175][T10720] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1194.895868][T10720] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.966458][T10956] tipc: Enabled bearer , priority 10 [ 1194.985912][T10970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10100'. [ 1195.255679][T10981] netlink: 'syz.1.10102': attribute type 10 has an invalid length. [ 1195.285440][T10981] blkio.reset_stats is deprecated [ 1195.291657][T10981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.573912][T10720] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1195.603129][T10720] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1195.621001][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10107'. [ 1195.648016][T10993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10107'. [ 1195.650176][T10720] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1195.677647][T10997] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10109'. [ 1195.732335][T10720] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1196.001948][T15042] lec:lec_start_xmit: lec0:No lecd attached [ 1196.640852][T11033] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1196.874333][T10720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.948468][T10720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.993080][T18859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.000308][T18859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.033355][T11059] netlink: 'syz.0.10121': attribute type 11 has an invalid length. [ 1197.050075][T11060] netlink: 'syz.2.10120': attribute type 10 has an invalid length. [ 1197.103325][T18859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.110570][T18859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.219186][T11060] team0: Port device dummy0 added [ 1197.496128][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10126'. [ 1197.512777][T11077] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1198.002606][T10720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.057813][ T7273] IPVS: starting estimator thread 0... [ 1198.164594][T11116] IPVS: using max 28 ests per chain, 67200 per kthread [ 1198.388313][T11126] wg0 speed is unknown, defaulting to 1000 [ 1198.806394][T10720] veth0_vlan: entered promiscuous mode [ 1198.845867][T10720] veth1_vlan: entered promiscuous mode [ 1199.038510][T10720] veth0_macvtap: entered promiscuous mode [ 1199.069330][T10720] veth1_macvtap: entered promiscuous mode [ 1199.170307][T10720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.340518][T10720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.368631][T11173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10147'. [ 1199.378695][T11170] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10148'. [ 1199.597239][T11170] bond2: (slave gretap0): Device is not bonding slave [ 1199.615117][T11170] bond2: option active_slave: invalid value (gretap0) [ 1199.687367][T11170] bond2 (unregistering): Released all slaves [ 1199.808695][T11182] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1199.828645][T11182] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1199.847148][T11182] gretap1: entered promiscuous mode [ 1199.863709][T11182] gretap1: entered allmulticast mode [ 1200.043188][ T1838] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.067388][ T1838] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.093134][ T1838] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.237536][ T1838] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.414789][ T1837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.432271][ T1837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.523841][T11209] netlink: 'syz.0.10157': attribute type 33 has an invalid length. [ 1200.532967][T11209] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10157'. [ 1200.608084][ T1837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.654274][ T1837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.745801][T11224] netlink: 'syz.3.10161': attribute type 1 has an invalid length. [ 1201.014048][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1201.022138][ C1] lec:lec_tx_timeout: lec0 [ 1201.029343][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10162'. [ 1201.108470][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10162'. [ 1201.135903][T11245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1201.434617][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10170'. [ 1201.480875][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10170'. [ 1201.490158][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10170'. [ 1201.512642][T11276] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10172'. [ 1201.532003][T11274] xt_cgroup: invalid path, errno=-2 [ 1201.650029][T11276] netlink: 'syz.5.10172': attribute type 1 has an invalid length. [ 1201.838673][T11297] bond7 (unregistering): Released all slaves [ 1202.019848][T11309] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1202.139931][T11313] syzkaller1: entered promiscuous mode [ 1202.146739][T11313] syzkaller1: entered allmulticast mode [ 1202.748699][T11353] __nla_validate_parse: 14 callbacks suppressed [ 1202.748725][T11353] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10194'. [ 1202.766074][T11353] netlink: 'syz.3.10194': attribute type 1 has an invalid length. [ 1202.766436][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10195'. [ 1202.774168][T11353] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10194'. [ 1202.774217][T11353] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10194'. [ 1202.774236][T11353] netlink: 'syz.3.10194': attribute type 1 has an invalid length. [ 1202.774254][T11353] netlink: 618 bytes leftover after parsing attributes in process `syz.3.10194'. [ 1202.986923][T11363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10197'. [ 1203.004823][T11362] netlink: 'syz.1.10198': attribute type 1 has an invalid length. [ 1203.034817][T11362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1203.093085][T11365] : entered promiscuous mode [ 1203.179200][T11372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10200'. [ 1203.671742][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10206'. [ 1203.768860][T11408] syzkaller0: entered promiscuous mode [ 1203.784239][T11408] syzkaller0: entered allmulticast mode [ 1203.865551][ T30] audit: type=1107 audit(1769770124.586:14): pid=11412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1204.123127][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10216'. [ 1204.444580][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10220'. [ 1204.481689][T11451] geneve2: entered promiscuous mode [ 1204.512673][T11451] geneve2: entered allmulticast mode [ 1204.521567][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.540778][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.561050][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.599081][ T7273] IPVS: starting estimator thread 0... [ 1204.710815][T11463] IPVS: using max 25 ests per chain, 60000 per kthread [ 1204.741778][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.269720][T11495] syzkaller1: entered promiscuous mode [ 1205.297511][T11495] syzkaller1: entered allmulticast mode [ 1205.321288][T11503] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20001 [ 1205.382305][T11505] netlink: 'syz.1.10237': attribute type 1 has an invalid length. [ 1205.612121][T11517] netlink: 'syz.1.10241': attribute type 1 has an invalid length. [ 1205.755378][T11517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1205.862950][T11539] netlink: 'syz.5.10247': attribute type 3 has an invalid length. [ 1205.962716][T11542] netlink: 'syz.2.10249': attribute type 2 has an invalid length. [ 1206.089241][T11550] bridge1: entered promiscuous mode [ 1206.148372][T11555] netlink: 'syz.1.10248': attribute type 21 has an invalid length. [ 1206.317026][T11545] syzkaller0: entered promiscuous mode [ 1206.322573][T11545] syzkaller0: entered allmulticast mode [ 1206.526822][T11581] netlink: 'syz.3.10261': attribute type 1 has an invalid length. [ 1208.568356][T11581] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1208.808491][T11617] __nla_validate_parse: 7 callbacks suppressed [ 1208.808507][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10266'. [ 1208.839111][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10266'. [ 1209.009901][T11629] 0: reclassify loop, rule prio 0, protocol 700 [ 1209.016790][T11631] 0: reclassify loop, rule prio 0, protocol 700 [ 1209.069028][T11633] netlink: 81 bytes leftover after parsing attributes in process `syz.1.10274'. [ 1209.086507][T11640] netlink: 'syz.3.10273': attribute type 1 has an invalid length. [ 1209.266630][T11653] netlink: 244 bytes leftover after parsing attributes in process `syz.5.10278'. [ 1209.276820][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10278'. [ 1209.547949][T11668] netlink: 144 bytes leftover after parsing attributes in process `syz.5.10282'. [ 1209.767496][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10284'. [ 1209.792134][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10284'. [ 1209.801966][T11671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10284'. [ 1209.871586][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10285'. [ 1209.881457][T11673] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 1209.909078][T11673] team1: entered promiscuous mode [ 1209.915806][T11673] team1: entered allmulticast mode [ 1210.145900][T11685] sctp: [Deprecated]: syz.1.10288 (pid 11685) Use of int in maxseg socket option. [ 1210.145900][T11685] Use struct sctp_assoc_value instead [ 1210.509791][T11699] netlink: 'syz.1.10295': attribute type 1 has an invalid length. [ 1210.546425][T11699] bond4 (unregistering): Released all slaves [ 1211.364654][T11750] syzkaller0: entered promiscuous mode [ 1211.370201][T11750] syzkaller0: entered allmulticast mode [ 1211.497570][T11761] netlink: 'syz.5.10314': attribute type 39 has an invalid length. [ 1213.517889][T11786] dvmrp0: entered allmulticast mode [ 1213.898077][T11815] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1214.027771][T11823] __nla_validate_parse: 6 callbacks suppressed [ 1214.027796][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10334'. [ 1214.068244][T11824] ip6gre1: entered allmulticast mode [ 1214.880293][T11771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1215.084792][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10337'. [ 1215.110644][T11837] syzkaller0: entered promiscuous mode [ 1215.130879][T11837] syzkaller0: entered allmulticast mode [ 1215.214403][T11836] tipc: Enabled bearer , priority 0 [ 1215.224715][T11834] tipc: Resetting bearer [ 1215.276765][T11834] tipc: Disabling bearer [ 1215.319781][T11850] netlink: 'syz.3.10343': attribute type 3 has an invalid length. [ 1215.342335][T11856] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.10345'. [ 1215.358548][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10345'. [ 1215.376371][T11848] netlink: 'syz.0.10341': attribute type 1 has an invalid length. [ 1215.385032][T11847] netlink: 'syz.0.10341': attribute type 1 has an invalid length. [ 1215.399566][T11848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10341'. [ 1215.423823][T11847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10341'. [ 1215.522551][T11856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1215.568018][T11861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10346'. [ 1215.605989][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10347'. [ 1215.651324][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10346'. [ 1215.741644][T11861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10346'. [ 1215.763422][T11863] netlink: 'syz.1.10347': attribute type 12 has an invalid length. [ 1215.784563][T11861] bridge5: port 1(veth0_to_bond) entered blocking state [ 1215.791894][T11861] bridge5: port 1(veth0_to_bond) entered disabled state [ 1215.800787][T11861] veth0_to_bond: entered allmulticast mode [ 1215.812917][T11861] veth0_to_bond: entered promiscuous mode [ 1215.884115][T11863] bond4: option primary_reselect: invalid value (255) [ 1215.895643][T11863] bond4 (unregistering): Released all slaves [ 1216.303751][T11884] bond2: Removing last arp target with arp_interval on [ 1216.708526][T11922] netlink: 'syz.1.10365': attribute type 1 has an invalid length. [ 1216.746482][T11922] netlink: 'syz.1.10365': attribute type 1 has an invalid length. [ 1216.766861][T11922] netlink: 'syz.1.10365': attribute type 1 has an invalid length. [ 1216.787923][T11922] netlink: 'syz.1.10365': attribute type 2 has an invalid length. [ 1217.220310][T11957] syzkaller1: entered promiscuous mode [ 1217.226405][T11957] syzkaller1: entered allmulticast mode [ 1217.315117][T11956] delete_channel: no stack [ 1217.512996][T11973] netlink: 'syz.5.10382': attribute type 24 has an invalid length. [ 1217.725795][T11983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1217.791596][T11987] lo speed is unknown, defaulting to 1000 [ 1217.826791][T11987] lo speed is unknown, defaulting to 1000 [ 1217.846263][T11987] lo speed is unknown, defaulting to 1000 [ 1218.182534][T12007] netlink: 'syz.3.10393': attribute type 10 has an invalid length. [ 1218.238062][T11987] infiniband syz0: set active [ 1218.242892][T11987] infiniband syz0: added lo [ 1218.282595][T11987] RDS/IB: syz0: added [ 1218.287694][T11987] smc: adding ib device syz0 with port count 1 [ 1218.294412][T11987] smc: ib device syz0 port 1 has no pnetid [ 1218.345076][T12011] sit3: entered promiscuous mode [ 1218.350309][T12011] sit3: entered allmulticast mode [ 1218.407549][T12007] team0 (unregistering): Port device team_slave_0 removed [ 1218.421229][T12007] team0 (unregistering): Port device team_slave_1 removed [ 1218.436526][ T7273] lo speed is unknown, defaulting to 1000 [ 1218.442623][ T7271] lo speed is unknown, defaulting to 1000 [ 1218.448985][T11987] lo speed is unknown, defaulting to 1000 [ 1218.855718][T11987] lo speed is unknown, defaulting to 1000 [ 1219.348214][T12051] syzkaller0: entered promiscuous mode [ 1219.377965][T12051] syzkaller0: entered allmulticast mode [ 1219.682157][T11987] lo speed is unknown, defaulting to 1000 [ 1219.862483][T12071] IPv6: NLM_F_CREATE should be specified when creating new route [ 1219.910397][T12071] netlink: 'syz.1.10411': attribute type 11 has an invalid length. [ 1219.991036][T12075] netlink: 'syz.2.10413': attribute type 12 has an invalid length. [ 1220.110156][T12075] bond2: option primary_reselect: invalid value (255) [ 1220.133313][T12084] __nla_validate_parse: 10 callbacks suppressed [ 1220.133336][T12084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10415'. [ 1220.159917][T12075] bond2 (unregistering): Released all slaves [ 1220.212500][T12071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10411'. [ 1220.285864][T12084] geneve3: entered promiscuous mode [ 1220.305299][T12082] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10411'. [ 1220.382337][T11987] lo speed is unknown, defaulting to 1000 [ 1220.414513][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10417'. [ 1220.477250][T12098] l2tp_ppp: sess 2/0: no socket in recv [ 1220.714860][T12116] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.10420'. [ 1220.987870][T11987] lo speed is unknown, defaulting to 1000 [ 1221.254935][T12145] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1221.473929][T12160] netlink: 'syz.3.10434': attribute type 1 has an invalid length. [ 1221.510895][T12160] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10434'. [ 1221.540421][T12161] netlink: 'syz.3.10434': attribute type 1 has an invalid length. [ 1221.563300][T12161] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10434'. [ 1221.612888][T11987] lo speed is unknown, defaulting to 1000 [ 1221.698576][T12171] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1221.713045][T12171] bond7 (unregistering): Released all slaves [ 1221.745242][T12174] netlink: 284 bytes leftover after parsing attributes in process `syz.0.10437'. [ 1221.769097][T12174] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10437'. [ 1222.059984][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10443'. [ 1222.222126][T11987] lo speed is unknown, defaulting to 1000 [ 1222.766036][T12240] openvswitch: netlink: Key type 132 is out of range max 32 [ 1222.802834][T11987] lo speed is unknown, defaulting to 1000 [ 1222.864912][T12243] syzkaller0: entered promiscuous mode [ 1222.870454][T12243] syzkaller0: entered allmulticast mode [ 1222.900399][T12243] netlink: 'syz.0.10457': attribute type 1 has an invalid length. [ 1222.962407][T12249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1223.191900][T12258] netlink: 'syz.0.10463': attribute type 1 has an invalid length. [ 1223.617150][T12280] xt_hashlimit: size too large, truncated to 1048576 [ 1223.651034][T12288] openvswitch: netlink: Multiple metadata blocks provided [ 1223.900621][T12294] netlink: 'syz.2.10472': attribute type 14 has an invalid length. [ 1223.909701][T12294] netlink: 'syz.2.10472': attribute type 13 has an invalid length. [ 1224.083366][T12305] netlink: 'syz.5.10477': attribute type 21 has an invalid length. [ 1224.121521][T12303] Bluetooth: MGMT ver 1.23 [ 1224.354262][T12324] netlink: 'syz.2.10484': attribute type 12 has an invalid length. [ 1224.646991][T12339] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1224.790248][T12357] bridge6: entered promiscuous mode [ 1224.796340][T12357] bridge6: entered allmulticast mode [ 1224.887426][T12362] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1224.924051][T12364] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1225.610902][T12402] __nla_validate_parse: 13 callbacks suppressed [ 1225.610923][T12402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10502'. [ 1225.765108][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10506'. [ 1225.996560][T12422] netlink: 'syz.5.10509': attribute type 64 has an invalid length. [ 1226.027265][T12422] netlink: 5 bytes leftover after parsing attributes in process `syz.5.10509'. [ 1226.741570][T12477] syzkaller0: entered promiscuous mode [ 1226.783706][T12477] syzkaller0: entered allmulticast mode [ 1226.804160][T12474] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1226.856946][T12477] syzkaller0: left allmulticast mode [ 1226.932976][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10531'. [ 1227.157156][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10533'. [ 1227.166595][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10533'. [ 1227.224820][T12497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.416748][T12497] bridge_slave_0 (unregistering): left allmulticast mode [ 1227.428330][T12497] bridge_slave_0 (unregistering): left promiscuous mode [ 1227.449227][T12497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.670000][T12531] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10537'. [ 1227.705060][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10537'. [ 1227.730858][T12535] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.10540'. [ 1228.216345][T12559] netlink: zone id is out of range [ 1228.221552][T12559] netlink: del zone limit has 4 unknown bytes [ 1228.266525][T12562] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10548'. [ 1228.458562][T12575] syzkaller0: entered promiscuous mode [ 1228.477856][T12575] syzkaller0: entered allmulticast mode [ 1228.585622][T12587] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1228.883769][T19700] Bluetooth: hci2: command 0x0405 tx timeout [ 1229.154863][T12600] 8021q: VLANs not supported on ip6_vti0 [ 1229.588209][T12655] netlink: 'syz.3.10578': attribute type 39 has an invalid length. [ 1230.112735][T12688] netlink: 'syz.2.10588': attribute type 15 has an invalid length. [ 1230.194457][T12697] xt_hashlimit: size too large, truncated to 1048576 [ 1230.236193][T12700] netlink: 'syz.5.10590': attribute type 10 has an invalid length. [ 1230.610260][T12711] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.759838][T12711] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.895847][T12711] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.133011][T12711] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.217045][T12733] netem: unknown loss type 0 [ 1231.222039][T12733] netem: change failed [ 1231.321663][ T1845] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.388303][T31124] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.452933][T12743] IPv6: NLM_F_CREATE should be specified when creating new route [ 1231.454684][T31146] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.531737][T31126] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.757297][T12755] ipvlan2: entered allmulticast mode [ 1231.816961][T12755] batadv_slave_1: entered allmulticast mode [ 1231.827658][T12755] batman_adv: batadv0: Adding interface: ipvlan2 [ 1231.836615][T12755] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.865434][T12755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.881632][T12755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.898891][T12755] batman_adv: batadv0: Interface activated: ipvlan2 [ 1232.036806][T12762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.044661][T12762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.081161][T12762] team0: Port device dummy0 removed [ 1232.129980][T12762] bridge_slave_0: left allmulticast mode [ 1232.136494][T12762] bridge_slave_0: left promiscuous mode [ 1232.142322][T12762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.166102][T12762] bridge_slave_1: left allmulticast mode [ 1232.172084][T12762] bridge_slave_1: left promiscuous mode [ 1232.178366][T12762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.198070][T12762] bond0: (slave bond_slave_0): Releasing backup interface [ 1232.218377][T12762] bond0: (slave bond_slave_1): Releasing backup interface [ 1232.240764][T12762] team0: Port device team_slave_0 removed [ 1232.259615][T12762] team0: Port device team_slave_1 removed [ 1232.271849][T12762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1232.286445][T12762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.300338][T12762] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1232.335692][T12767] batman_adv: batadv0: Adding interface: geneve3 [ 1232.342512][T12767] batman_adv: batadv0: The MTU of interface geneve3 is too small (1486) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.374414][T12767] batman_adv: batadv0: Not using interface geneve3 (retrying later): interface not active [ 1232.401365][ T5654] wg0 speed is unknown, defaulting to 1000 [ 1232.404163][T12780] pim6reg1: entered promiscuous mode [ 1232.412642][T12780] pim6reg1: entered allmulticast mode [ 1232.419793][ T5654] syz5: Port: 1 Link DOWN [ 1232.475689][ T5660] wg0 speed is unknown, defaulting to 1000 [ 1232.796999][T12811] __nla_validate_parse: 9 callbacks suppressed [ 1232.797020][T12811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10622'. [ 1232.855855][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10622'. [ 1233.058799][T12830] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10626'. [ 1233.131455][T12834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10629'. [ 1233.551397][T12846] syzkaller0: entered promiscuous mode [ 1233.595346][T12846] syzkaller0: entered allmulticast mode [ 1233.707005][T12867] syzkaller1: entered promiscuous mode [ 1233.712744][T12867] syzkaller1: entered allmulticast mode [ 1233.802620][T12873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10638'. [ 1233.848930][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10639'. [ 1233.888313][T12875] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1233.907274][T12875] batadv1: entered promiscuous mode [ 1233.912941][T12875] batadv1: entered allmulticast mode [ 1233.921848][T12875] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 1233.932753][T12875] team0: Failed to send options change via netlink (err -105) [ 1233.940713][T12875] team0: Port device batadv1 added [ 1233.953623][T12878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1234.017569][T12881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10641'. [ 1234.051953][T12881] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10641'. [ 1234.082575][T12881] netlink: 404 bytes leftover after parsing attributes in process `syz.3.10641'. [ 1234.095296][T12888] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1234.238310][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10642'. [ 1234.375359][T31130] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1234.384810][T31130] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1234.728676][T12931] netlink: 'syz.2.10655': attribute type 1 has an invalid length. [ 1234.740070][T12931] netlink: 'syz.2.10655': attribute type 1 has an invalid length. [ 1234.772565][T12929] tipc: Enabling of bearer rejected, failed to enable media [ 1235.325494][T12975] veth1_macvtap: left promiscuous mode [ 1235.341394][T12975] macsec0: entered promiscuous mode [ 1235.358202][T12975] macsec0: entered allmulticast mode [ 1235.472833][T12979] veth1_macvtap: entered promiscuous mode [ 1235.482301][T12979] veth1_macvtap: entered allmulticast mode [ 1235.495001][T12979] macsec0: left promiscuous mode [ 1235.514866][T12979] macsec0: left allmulticast mode [ 1235.520078][T12979] veth1_macvtap: left allmulticast mode [ 1236.014707][T13017] wireguard: wg2: Could not create IPv4 socket [ 1236.386866][T13045] tipc: Invalid UDP bearer configuration [ 1236.386930][T13045] tipc: Enabling of bearer rejected, failed to enable media [ 1236.539293][T13052] syzkaller1: entered promiscuous mode [ 1236.566322][T13052] syzkaller1: entered allmulticast mode [ 1236.810830][T13076] x_tables: duplicate underflow at hook 3 [ 1237.049091][T13067] syzkaller0: entered promiscuous mode [ 1237.054839][T13067] syzkaller0: entered allmulticast mode [ 1237.147354][T13095] netlink: 'syz.5.10696': attribute type 5 has an invalid length. [ 1237.242765][T13101] netlink: 'syz.2.10699': attribute type 1 has an invalid length. [ 1237.299050][T13104] netlink: 'syz.1.10701': attribute type 21 has an invalid length. [ 1239.015449][T13101] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1239.017013][T13105] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1239.027167][T13104] __nla_validate_parse: 9 callbacks suppressed [ 1239.027190][T13104] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10701'. [ 1239.160907][T13115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1239.198230][T13115] netlink: 'syz.5.10702': attribute type 1 has an invalid length. [ 1239.239885][T13119] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.10703'. [ 1239.264278][T13121] netlink: 204 bytes leftover after parsing attributes in process `syz.3.10705'. [ 1239.357834][T13126] sctp: [Deprecated]: syz.2.10706 (pid 13126) Use of int in maxseg socket option. [ 1239.357834][T13126] Use struct sctp_assoc_value instead [ 1239.437404][T13126] sctp: [Deprecated]: syz.2.10706 (pid 13126) Use of int in maxseg socket option. [ 1239.437404][T13126] Use struct sctp_assoc_value instead [ 1239.459660][T13132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10709'. [ 1239.506311][T13126] netlink: 'syz.2.10706': attribute type 2 has an invalid length. [ 1239.532533][T13126] netlink: 'syz.2.10706': attribute type 8 has an invalid length. [ 1239.547371][T13126] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10706'. [ 1239.749924][T13150] xt_policy: output policy not valid in PREROUTING and INPUT [ 1239.758529][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10715'. [ 1240.596852][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10723'. [ 1240.706608][T13182] macsec1: entered promiscuous mode [ 1240.711901][T13182] bridge0: entered promiscuous mode [ 1240.719044][T13182] macsec1: entered allmulticast mode [ 1240.746445][T13182] bridge0: entered allmulticast mode [ 1240.756622][T13182] bridge0: port 1(macsec1) entered blocking state [ 1240.772642][T13182] bridge0: port 1(macsec1) entered disabled state [ 1240.815317][T13182] bridge0: left allmulticast mode [ 1240.820514][T13182] bridge0: left promiscuous mode [ 1241.044719][T13202] IPv6: NLM_F_CREATE should be specified when creating new route [ 1241.056955][T13204] x_tables: duplicate underflow at hook 2 [ 1241.077197][T13202] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1241.085018][T13202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1241.085682][T13204] x_tables: duplicate underflow at hook 2 [ 1241.674259][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10742'. [ 1241.732532][T13240] : entered promiscuous mode [ 1241.740069][T13242] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10744'. [ 1241.754377][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10742'. [ 1242.110839][T13266] netlink: 'syz.1.10752': attribute type 1 has an invalid length. [ 1242.442188][T13296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1242.608928][T13303] netlink: 'syz.0.10765': attribute type 10 has an invalid length. [ 1242.633176][T13302] netlink: 'syz.2.10766': attribute type 10 has an invalid length. [ 1242.697725][T13303] team0: Device veth0_macvtap failed to register rx_handler [ 1243.353036][T13350] pim6reg527: entered allmulticast mode [ 1243.421715][T13352] bond4: (slave veth0_to_bond): Releasing active interface [ 1243.492694][T13362] netlink: 'syz.2.10778': attribute type 1 has an invalid length. [ 1243.516301][T13362] netlink: 'syz.2.10778': attribute type 3 has an invalid length. [ 1243.547933][T13362] NCSI netlink: No device for ifindex 813332851 [ 1243.560813][T13362] tipc: Started in network mode [ 1243.566571][T13362] tipc: Node identity ac1414aa, cluster identity 4711 [ 1243.576337][T13362] tipc: Enabled bearer , priority 10 [ 1243.615716][T13367] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1243.623152][T13366] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 1243.835671][T13379] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1243.860397][T13380] netlink: 'syz.2.10782': attribute type 1 has an invalid length. [ 1243.873637][T13380] netlink: 'syz.2.10782': attribute type 1 has an invalid length. [ 1243.882328][T13380] netlink: 'syz.2.10782': attribute type 2 has an invalid length. [ 1243.932619][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1244.006762][T13385] netlink: 'syz.2.10784': attribute type 1 has an invalid length. [ 1244.042851][T13385] __nla_validate_parse: 7 callbacks suppressed [ 1244.042874][T13385] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10784'. [ 1244.060883][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10784'. [ 1244.083285][T13385] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10784'. [ 1244.095200][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10784'. [ 1244.284462][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10788'. [ 1244.472746][T13409] pim6reg527: entered allmulticast mode [ 1244.601150][T13419] syzkaller1: entered promiscuous mode [ 1244.607737][T13419] syzkaller1: entered allmulticast mode [ 1244.616149][T13419] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 1244.705309][ T9660] tipc: Node number set to 2886997162 [ 1244.791997][T13426] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10799'. [ 1245.008431][T13441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10803'. [ 1245.040517][T13441] siw: device registration error -23 [ 1245.154679][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10807'. [ 1245.167085][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10807'. [ 1245.432948][T13468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10814'. [ 1245.492161][T13468] gretap0: entered promiscuous mode [ 1245.526568][T13468] batadv_slave_1: entered promiscuous mode [ 1245.570070][T13468] batadv_slave_1: left promiscuous mode [ 1245.584607][T13468] gretap0: left promiscuous mode [ 1245.619530][ T30] audit: type=1107 audit(1769770166.336:15): pid=13476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1246.115033][T13501] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 1246.307896][T13502] netlink: 'syz.1.10826': attribute type 1 has an invalid length. [ 1246.617011][T13530] syzkaller1: entered promiscuous mode [ 1246.624805][T13530] syzkaller1: entered allmulticast mode [ 1246.744476][T13538] wg0 speed is unknown, defaulting to 1000 [ 1246.962745][T13538] lo speed is unknown, defaulting to 1000 [ 1247.625772][T13580] tipc: Trying to set illegal importance in message [ 1247.681139][T13580] tipc: Trying to set illegal importance in message [ 1248.954119][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1248.962301][ C1] lec:lec_tx_timeout: lec0 [ 1250.077518][T13584] hsr_slave_0 (unregistering): left promiscuous mode [ 1250.342363][T13619] Cannot find add_set index 0 as target [ 1250.396260][T13619] __nla_validate_parse: 8 callbacks suppressed [ 1250.396281][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10856'. [ 1250.496931][T13629] validate_nla: 1 callbacks suppressed [ 1250.496955][T13629] netlink: 'syz.2.10858': attribute type 11 has an invalid length. [ 1250.584608][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10858'. [ 1250.696835][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10862'. [ 1250.717454][T13640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10861'. [ 1250.784127][T13649] ip6gre2: entered allmulticast mode [ 1250.881814][T13651] netlink: 'syz.5.10865': attribute type 1 has an invalid length. [ 1250.923677][T13655] netlink: 'syz.1.10866': attribute type 1 has an invalid length. [ 1251.066152][T13655] bond4: entered promiscuous mode [ 1251.110864][T13655] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1251.160153][T13666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10866'. [ 1251.398568][T13675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10871'. [ 1251.508400][T13680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10871'. [ 1251.577552][T13681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10872'. [ 1251.587745][T13681] netlink: 7 bytes leftover after parsing attributes in process `syz.0.10872'. [ 1251.631618][T13687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1251.958266][T13696] netlink: 'syz.5.10877': attribute type 16 has an invalid length. [ 1251.967145][T13696] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10877'. [ 1252.734246][T13749] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1252.741893][ T1846] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.786092][ T1846] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.812320][T13749] bond_slave_0: entered promiscuous mode [ 1252.818152][T13749] bond_slave_1: entered promiscuous mode [ 1252.825603][T13749] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1252.837329][T13749] bond8: (slave macvlan2): making interface the new active one [ 1252.847215][T13749] bond8: (slave macvlan2): Enslaving as an active interface with an up link [ 1252.857237][ T1846] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.869639][ T1846] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1253.167916][T13781] xt_hashlimit: max too large, truncated to 1048576 [ 1253.187723][T13777] gre0: entered promiscuous mode [ 1253.204729][T13777] gre0: entered allmulticast mode [ 1253.546872][T13801] vcan0: tx drop: invalid sa for name 0x0000000000000401 [ 1253.907334][T13832] netlink: 'syz.5.10920': attribute type 4 has an invalid length. [ 1254.770096][T13878] netlink: 'syz.0.10933': attribute type 25 has an invalid length. [ 1254.836804][T13878] netlink: 'syz.0.10933': attribute type 25 has an invalid length. [ 1255.075475][T13896] netlink: 'syz.2.10937': attribute type 1 has an invalid length. [ 1255.420556][T13923] __nla_validate_parse: 17 callbacks suppressed [ 1255.420576][T13923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10946'. [ 1255.484552][T13929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1255.603011][T13935] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10949'. [ 1255.614814][T13935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10949'. [ 1255.648111][T13935] netem: change failed [ 1256.124723][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10960'. [ 1256.513783][T13989] netlink: 'syz.5.10968': attribute type 3 has an invalid length. [ 1256.531998][T13989] netlink: 666 bytes leftover after parsing attributes in process `syz.5.10968'. [ 1256.630707][T13985] "syz.1.10967" (13985) uses obsolete ecb(arc4) skcipher [ 1256.721205][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10971'. [ 1256.749931][T13998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10971'. [ 1256.791934][T13998] geneve2: entered promiscuous mode [ 1256.798418][T13998] geneve2: entered allmulticast mode [ 1256.828446][T13979] infiniband : set down [ 1256.833016][T13979] infiniband : added ipvlan0 [ 1256.877199][T14001] netlink: 'syz.2.10972': attribute type 10 has an invalid length. [ 1256.904113][T13979] RDS/IB: : added [ 1256.911669][T13979] smc: adding ib device  with port count 1 [ 1256.919640][T13979] smc: ib device  port 1 has no pnetid [ 1257.371182][T14019] netlink: 160 bytes leftover after parsing attributes in process `syz.1.10978'. [ 1257.397857][T14017] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1257.491254][T14022] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1257.514442][T14022] bond5 (unregistering): Released all slaves [ 1257.776531][T14038] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10985'. [ 1257.786426][T14038] netlink: 35 bytes leftover after parsing attributes in process `syz.1.10985'. [ 1257.796223][T14038] netlink: 'syz.1.10985': attribute type 5 has an invalid length. [ 1257.814215][T14038] netlink: 'syz.1.10985': attribute type 6 has an invalid length. [ 1257.975080][T14047] vlan2: entered allmulticast mode [ 1257.980281][T14047] gretap0: entered allmulticast mode [ 1258.175185][T14061] delete_channel: no stack [ 1258.232428][T14056] wg0 speed is unknown, defaulting to 1000 [ 1258.754217][T14056] lo speed is unknown, defaulting to 1000 [ 1259.159517][T14096] block nbd0: not configured, cannot reconfigure [ 1259.273662][T15042] lec:lec_start_xmit: lec0:No lecd attached [ 1260.193768][T14119] tipc: Enabling of bearer rejected, failed to enable media [ 1260.250198][T14119] netlink: 'syz.2.11010': attribute type 5 has an invalid length. [ 1260.290694][T14123] netlink: 'syz.5.11012': attribute type 5 has an invalid length. [ 1260.305131][T14125] netlink: 'syz.5.11012': attribute type 5 has an invalid length. [ 1260.570024][T14135] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1260.594625][T14137] __nla_validate_parse: 15 callbacks suppressed [ 1260.594648][T14137] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11014'. [ 1260.622514][T14136] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11014'. [ 1260.646462][T14140] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1260.655452][T14140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1260.721245][T14143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11017'. [ 1260.742023][T14144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11017'. [ 1260.752053][T14143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11017'. [ 1260.797841][T14143] netlink: 'syz.1.11017': attribute type 7 has an invalid length. [ 1260.814927][T14147] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.11018'. [ 1260.821782][T14144] netlink: 'syz.1.11017': attribute type 7 has an invalid length. [ 1260.840947][T14143] netlink: 'syz.1.11017': attribute type 8 has an invalid length. [ 1260.852781][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11017'. [ 1260.862654][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11017'. [ 1260.997532][T14158] netlink: 5 bytes leftover after parsing attributes in process `syz.5.11020'. [ 1261.041021][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11021'. [ 1261.095564][T14162] tipc: Enabling of bearer rejected, failed to enable media [ 1261.175089][T14164] syzkaller0: entered promiscuous mode [ 1261.198359][T14164] syzkaller0: entered allmulticast mode [ 1261.233041][T14164] tipc: Started in network mode [ 1261.239190][T14164] tipc: Node identity 2e3852917f9b, cluster identity 4711 [ 1261.273625][ T30] audit: type=1107 audit(1769770181.966:16): pid=14168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1261.274670][T14164] tipc: Enabled bearer , priority 0 [ 1261.434525][T14163] tipc: Resetting bearer [ 1261.491374][T14163] tipc: Disabling bearer [ 1261.522141][T14177] bridge0: port 1(veth0_to_bridge) entered blocking state [ 1261.532011][T14177] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1261.562213][T14177] veth0_to_bridge: entered allmulticast mode [ 1261.576075][T14177] veth0_to_bridge: entered promiscuous mode [ 1261.698882][T14187] validate_nla: 6 callbacks suppressed [ 1261.698905][T14187] netlink: 'syz.1.11028': attribute type 1 has an invalid length. [ 1261.757102][T14187] bond5: entered promiscuous mode [ 1261.762659][T14187] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1262.152658][T14193] bond6: entered promiscuous mode [ 1262.197866][T14193] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1262.267892][T14207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1262.311363][T14203] bond6: (slave xfrm1): refused to change device type [ 1263.369857][T14270] netlink: 'syz.1.11048': attribute type 1 has an invalid length. [ 1263.521675][T14272] bond7: (slave ip6gretap1): making interface the new active one [ 1263.553718][T14272] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1263.562030][T14272] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1263.571621][T14272] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1263.890394][T14299] netlink: 'syz.0.11054': attribute type 24 has an invalid length. [ 1264.443178][T14329] bridge0: entered allmulticast mode [ 1264.883469][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5610 ms [ 1264.891575][ C1] lec:lec_tx_timeout: lec0 [ 1264.971978][T14358] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1265.795853][T14402] netlink: 'syz.0.11081': attribute type 2 has an invalid length. [ 1265.814045][T14402] __nla_validate_parse: 17 callbacks suppressed [ 1265.814065][T14402] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11081'. [ 1266.620974][T14449] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 1266.762711][T14449] input: failed to attach handler evdev to device input5, error: -4 [ 1266.898901][T14468] netlink: 'syz.2.11095': attribute type 1 has an invalid length. [ 1266.936311][T14458] xt_HMARK: spi-set and port-set can't be combined [ 1266.948957][T14468] netlink: 244 bytes leftover after parsing attributes in process `syz.2.11095'. [ 1267.002006][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11095'. [ 1267.017447][T14476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11095'. [ 1267.035536][T14476] geneve2: entered promiscuous mode [ 1267.041942][T14476] geneve2: entered allmulticast mode [ 1267.657993][T14519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11103'. [ 1269.766180][T14466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1269.893101][T14528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11105'. [ 1269.932406][T14531] netlink: 'syz.5.11107': attribute type 2 has an invalid length. [ 1269.962100][T14528] netlink: 'syz.0.11105': attribute type 83 has an invalid length. [ 1270.170941][T14548] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11111'. [ 1270.320506][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11115'. [ 1270.369006][T14566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1270.535294][T14577] bond0: Device is already in use. [ 1270.675023][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11124'. [ 1270.690900][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11124'. [ 1270.948779][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11126'. [ 1270.987451][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11127'. [ 1271.101990][T14601] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1271.169368][T14601] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11127'. [ 1271.592230][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11136'. [ 1272.035756][T14667] tipc: New replicast peer: 255.255.255.255 [ 1272.042276][T14667] tipc: Enabled bearer , priority 10 [ 1272.260271][T14685] x_tables: duplicate underflow at hook 2 [ 1272.307552][T14680] bond4: option min_links: invalid value (18446744073709551614) [ 1272.316077][T14680] bond4: option min_links: allowed values 0 - 2147483647 [ 1272.327147][T14680] bond4 (unregistering): Released all slaves [ 1272.374344][T14683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11146'. [ 1272.466566][T14683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11146'. [ 1272.481732][T14683] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 1272.527180][T14687] wg0 speed is unknown, defaulting to 1000 [ 1272.659970][T14706] tc_dump_action: action bad kind [ 1272.668040][T14707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11151'. [ 1272.965627][T14687] lo speed is unknown, defaulting to 1000 [ 1274.954190][ T9660] tipc: Node number set to 1369658001 [ 1275.124531][T14743] netlink: 260 bytes leftover after parsing attributes in process `syz.5.11160'. [ 1275.142478][T14739] netlink: 'syz.3.11159': attribute type 17 has an invalid length. [ 1275.154387][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11159'. [ 1275.167021][T14739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11159'. [ 1275.222273][T14739] gretap0: entered promiscuous mode [ 1275.257265][T14739] gretap0: left promiscuous mode [ 1275.381264][T14757] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1275.399882][T14757] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1275.435771][T14757] gretap1: entered promiscuous mode [ 1275.447020][T14761] netlink: 'syz.2.11164': attribute type 1 has an invalid length. [ 1275.472013][T14757] gretap1: entered allmulticast mode [ 1275.561325][T14757] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1275.573075][T14757] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1275.631000][T14756] gretap2: entered promiscuous mode [ 1275.660076][T14756] bond4: (slave gretap2): making interface the new active one [ 1275.682322][T14756] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 1276.305247][T14802] __nla_validate_parse: 3 callbacks suppressed [ 1276.305269][T14802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11179'. [ 1276.417099][T14804] netlink: 'syz.5.11181': attribute type 2 has an invalid length. [ 1276.539895][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11182'. [ 1276.741132][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11185'. [ 1276.980485][T14829] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1277.018791][T14829] netlink: 'syz.3.11187': attribute type 1 has an invalid length. [ 1277.045823][T14832] netlink: 'syz.3.11187': attribute type 1 has an invalid length. [ 1277.085540][T14838] nbd: must specify an index to disconnect [ 1277.087393][T14829] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1277.097963][T14832] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1277.108246][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11191'. [ 1277.148836][T14832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1277.256384][T14853] openvswitch: netlink: Flow actions attr not present in new flow. [ 1277.408726][T14863] netlink: 'syz.1.11196': attribute type 1 has an invalid length. [ 1277.418394][T14863] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11196'. [ 1277.432108][T14863] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11196'. [ 1277.443717][T14863] netlink: 'syz.1.11196': attribute type 1 has an invalid length. [ 1277.463846][T14863] netlink: 'syz.1.11196': attribute type 8 has an invalid length. [ 1277.482784][T14863] netlink: 582 bytes leftover after parsing attributes in process `syz.1.11196'. [ 1277.552570][T14870] ip6t_rpfilter: unknown options [ 1277.842954][T14885] netlink: 'syz.2.11203': attribute type 1 has an invalid length. [ 1277.871712][T14835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1278.014690][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11207'. [ 1278.142917][T14903] tipc: Enabled bearer , priority 10 [ 1278.154274][T14902] tipc: Enabling of bearer rejected, already enabled [ 1278.170504][T14903] tipc: Resetting bearer [ 1278.228040][T14901] tipc: Disabling bearer [ 1278.392256][T14925] IPVS: length: 209 != 8 [ 1278.606951][T14932] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1278.715149][T14940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11220'. [ 1278.802244][T14935] wg0 speed is unknown, defaulting to 1000 [ 1278.854190][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11220'. [ 1279.292798][T14935] lo speed is unknown, defaulting to 1000 [ 1280.351210][T15017] netlink: 'syz.3.11240': attribute type 1 has an invalid length. [ 1280.430400][T15017] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1280.445121][T15021] vlan1: entered allmulticast mode [ 1280.451668][T15021] bond3: entered allmulticast mode [ 1280.572582][T15017] bond3: (slave gretap2): making interface the new active one [ 1280.598257][T15017] gretap2: entered allmulticast mode [ 1280.612035][T15017] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1281.254101][T15043] wg0 speed is unknown, defaulting to 1000 [ 1281.396555][T15055] netlink: 'syz.1.11251': attribute type 9 has an invalid length. [ 1281.404605][T15055] netlink: 'syz.1.11251': attribute type 11 has an invalid length. [ 1281.412548][T15055] netlink: 'syz.1.11251': attribute type 12 has an invalid length. [ 1281.437758][T15055] __nla_validate_parse: 6 callbacks suppressed [ 1281.437778][T15055] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.11251'. [ 1281.486055][T15055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11251'. [ 1281.593102][T15058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11251'. [ 1281.807749][T15043] lo speed is unknown, defaulting to 1000 [ 1281.873209][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11256'. [ 1282.191206][T15078] netlink: 'syz.5.11257': attribute type 10 has an invalid length. [ 1282.231127][T15080] netlink: 'syz.0.11258': attribute type 1 has an invalid length. [ 1282.239550][T15080] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11258'. [ 1282.261509][T15078] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.269325][T15080] netlink: 658 bytes leftover after parsing attributes in process `syz.0.11258'. [ 1282.289715][T15078] bond0: (slave team0): Enslaving as an active interface with an up link [ 1282.301399][T15080] netlink: 1 bytes leftover after parsing attributes in process `syz.0.11258'. [ 1282.330326][T15080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1282.346741][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11259'. [ 1282.367067][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11259'. [ 1282.491786][T15085] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11260'. [ 1282.535495][T15085] netlink: 'syz.0.11260': attribute type 1 has an invalid length. [ 1282.648470][T15103] netlink: 'syz.0.11260': attribute type 11 has an invalid length. [ 1282.738351][T15085] bond9: entered promiscuous mode [ 1282.744071][T15085] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1283.091134][T15122] netlink: 'syz.1.11268': attribute type 5 has an invalid length. [ 1283.783038][T15162] netlink: 'syz.0.11278': attribute type 2 has an invalid length. [ 1285.846525][T15218] netlink: 'syz.1.11297': attribute type 24 has an invalid length. [ 1286.235198][T15227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1286.244162][T15229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1286.980178][T15213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.092621][T15213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.107518][T15213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.236186][ T7273] lo speed is unknown, defaulting to 1000 [ 1287.254359][ T7273] syz0: Port: 1 Link DOWN [ 1287.285244][T31130] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.305275][ T1844] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.326536][ T7273] lo speed is unknown, defaulting to 1000 [ 1287.370385][ T1844] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.404394][ T1844] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.485186][T15250] sctp: [Deprecated]: syz.1.11305 (pid 15250) Use of int in max_burst socket option. [ 1287.485186][T15250] Use struct sctp_assoc_value instead [ 1287.634051][T15261] netlink: 'syz.1.11309': attribute type 1 has an invalid length. [ 1287.724586][T15263] __nla_validate_parse: 10 callbacks suppressed [ 1287.724610][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11308'. [ 1287.852238][T15273] bridge0: port 1(batadv2) entered blocking state [ 1287.875958][T15273] bridge0: port 1(batadv2) entered disabled state [ 1287.887855][T15273] batadv2: entered allmulticast mode [ 1287.916165][T15273] batadv2: entered promiscuous mode [ 1288.146138][T15291] netlink: 'syz.0.11319': attribute type 13 has an invalid length. [ 1288.191341][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11318'. [ 1288.243249][T15297] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.11318'. [ 1288.266717][T15297] netlink: Unknown conntrack attr (0) [ 1288.345184][T31124] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1288.354638][T31124] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1288.760476][T15333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1288.798515][T15333] netlink: 'syz.2.11326': attribute type 4 has an invalid length. [ 1289.146511][T15347] netlink: 'syz.1.11332': attribute type 10 has an invalid length. [ 1289.159237][T15347] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1289.356726][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11336'. [ 1289.390961][T15367] [ 1289.393350][T15367] ====================================================== [ 1289.400394][T15367] WARNING: possible circular locking dependency detected [ 1289.407470][T15367] syzkaller #0 Not tainted [ 1289.411919][T15367] ------------------------------------------------------ [ 1289.418959][T15367] syz.1.11337/15367 is trying to acquire lock: [ 1289.425137][T15367] ffffffff8fb283d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 1289.434510][T15367] [ 1289.434510][T15367] but task is already holding lock: [ 1289.441896][T15367] ffff888027a39670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1289.451344][T15367] [ 1289.451344][T15367] which lock already depends on the new lock. [ 1289.451344][T15367] [ 1289.461776][T15367] [ 1289.461776][T15367] the existing dependency chain (in reverse order) is: [ 1289.470824][T15367] [ 1289.470824][T15367] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1289.478870][T15367] _raw_spin_lock_bh+0x36/0x50 [ 1289.484210][T15367] nr_rt_device_down+0x153/0x860 [ 1289.489713][T15367] nr_device_event+0x137/0x150 [ 1289.495035][T15367] notifier_call_chain+0x19d/0x3a0 [ 1289.500700][T15367] netif_close_many+0x2ae/0x420 [ 1289.506094][T15367] netif_close+0x160/0x220 [ 1289.511048][T15367] dev_close+0x10a/0x220 [ 1289.515829][T15367] bpq_device_event+0x377/0x6a0 [ 1289.521230][T15367] notifier_call_chain+0x19d/0x3a0 [ 1289.526878][T15367] netif_close_many+0x2ae/0x420 [ 1289.532276][T15367] netif_close+0x160/0x220 [ 1289.537230][T15367] dev_close+0x10a/0x220 [ 1289.542014][T15367] bond_setup_by_slave+0x5f/0x3d0 [ 1289.547580][T15367] bond_enslave+0x847/0x3c40 [ 1289.552718][T15367] bond_do_ioctl+0x6ec/0x8d0 [ 1289.557869][T15367] bond_siocdevprivate+0x19c/0x1f0 [ 1289.563529][T15367] dev_ifsioc+0xba6/0x1280 [ 1289.568486][T15367] dev_ioctl+0x84c/0x1150 [ 1289.573346][T15367] sock_ioctl+0x75f/0x7f0 [ 1289.578214][T15367] __se_sys_ioctl+0xfc/0x170 [ 1289.583342][T15367] do_syscall_64+0xe2/0xf80 [ 1289.588380][T15367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.594808][T15367] [ 1289.594808][T15367] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1289.602662][T15367] _raw_spin_lock_bh+0x36/0x50 [ 1289.607975][T15367] nr_rt_device_down+0xbe/0x860 [ 1289.613371][T15367] nr_device_event+0x137/0x150 [ 1289.618675][T15367] notifier_call_chain+0x19d/0x3a0 [ 1289.624327][T15367] netif_close_many+0x2ae/0x420 [ 1289.629711][T15367] netif_close+0x160/0x220 [ 1289.634662][T15367] dev_close+0x10a/0x220 [ 1289.639442][T15367] bpq_device_event+0x377/0x6a0 [ 1289.644861][T15367] notifier_call_chain+0x19d/0x3a0 [ 1289.650521][T15367] netif_close_many+0x2ae/0x420 [ 1289.655914][T15367] netif_close+0x160/0x220 [ 1289.660867][T15367] dev_close+0x10a/0x220 [ 1289.665647][T15367] bond_setup_by_slave+0x5f/0x3d0 [ 1289.671214][T15367] bond_enslave+0x847/0x3c40 [ 1289.676339][T15367] bond_do_ioctl+0x6ec/0x8d0 [ 1289.681482][T15367] bond_siocdevprivate+0x19c/0x1f0 [ 1289.687135][T15367] dev_ifsioc+0xba6/0x1280 [ 1289.692091][T15367] dev_ioctl+0x84c/0x1150 [ 1289.696958][T15367] sock_ioctl+0x75f/0x7f0 [ 1289.701837][T15367] __se_sys_ioctl+0xfc/0x170 [ 1289.706967][T15367] do_syscall_64+0xe2/0xf80 [ 1289.712002][T15367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.718431][T15367] [ 1289.718431][T15367] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1289.726365][T15367] __lock_acquire+0x15a5/0x2cf0 [ 1289.731758][T15367] lock_acquire+0x106/0x330 [ 1289.736805][T15367] _raw_spin_lock_bh+0x36/0x50 [ 1289.742118][T15367] nr_remove_neigh+0x25/0xe0 [ 1289.747255][T15367] nr_add_node+0x1e41/0x2630 [ 1289.752388][T15367] nr_rt_ioctl+0xe59/0xf90 [ 1289.757345][T15367] sock_do_ioctl+0x101/0x320 [ 1289.762474][T15367] sock_ioctl+0x5c6/0x7f0 [ 1289.767350][T15367] __se_sys_ioctl+0xfc/0x170 [ 1289.772481][T15367] do_syscall_64+0xe2/0xf80 [ 1289.777520][T15367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.783946][T15367] [ 1289.783946][T15367] other info that might help us debug this: [ 1289.783946][T15367] [ 1289.794184][T15367] Chain exists of: [ 1289.794184][T15367] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1289.794184][T15367] [ 1289.808039][T15367] Possible unsafe locking scenario: [ 1289.808039][T15367] [ 1289.815498][T15367] CPU0 CPU1 [ 1289.820873][T15367] ---- ---- [ 1289.826250][T15367] lock(&nr_node->node_lock); [ 1289.831030][T15367] lock(nr_node_list_lock); [ 1289.838159][T15367] lock(&nr_node->node_lock); [ 1289.845471][T15367] lock(nr_neigh_list_lock); [ 1289.850186][T15367] [ 1289.850186][T15367] *** DEADLOCK *** [ 1289.850186][T15367] [ 1289.858351][T15367] 1 lock held by syz.1.11337/15367: [ 1289.863564][T15367] #0: ffff888027a39670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1289.873429][T15367] [ 1289.873429][T15367] stack backtrace: [ 1289.879336][T15367] CPU: 0 UID: 0 PID: 15367 Comm: syz.1.11337 Not tainted syzkaller #0 PREEMPT(full) [ 1289.879357][T15367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1289.879369][T15367] Call Trace: [ 1289.879377][T15367] [ 1289.879385][T15367] dump_stack_lvl+0xe8/0x150 [ 1289.879409][T15367] print_circular_bug+0x2e1/0x300 [ 1289.879429][T15367] check_noncircular+0x12e/0x150 [ 1289.879449][T15367] __lock_acquire+0x15a5/0x2cf0 [ 1289.879488][T15367] ? nr_remove_neigh+0x25/0xe0 [ 1289.879512][T15367] lock_acquire+0x106/0x330 [ 1289.879534][T15367] ? nr_remove_neigh+0x25/0xe0 [ 1289.879559][T15367] ? do_raw_spin_lock+0x12b/0x2f0 [ 1289.879578][T15367] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1289.879598][T15367] ? nr_remove_neigh+0x25/0xe0 [ 1289.879621][T15367] _raw_spin_lock_bh+0x36/0x50 [ 1289.879646][T15367] ? nr_remove_neigh+0x25/0xe0 [ 1289.879670][T15367] nr_remove_neigh+0x25/0xe0 [ 1289.879694][T15367] nr_add_node+0x1e41/0x2630 [ 1289.879722][T15367] ? nr_call_to_digi+0x126/0x1b0 [ 1289.879746][T15367] nr_rt_ioctl+0xe59/0xf90 [ 1289.879773][T15367] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1289.879800][T15367] ? apparmor_capable+0x137/0x1a0 [ 1289.879828][T15367] ? capable+0x88/0xe0 [ 1289.879843][T15367] ? nr_ioctl+0x1b1/0x3b0 [ 1289.879863][T15367] sock_do_ioctl+0x101/0x320 [ 1289.879880][T15367] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1289.879893][T15367] ? do_futex+0x395/0x420 [ 1289.879923][T15367] sock_ioctl+0x5c6/0x7f0 [ 1289.879949][T15367] ? __pfx_sock_ioctl+0x10/0x10 [ 1289.879973][T15367] ? __fget_files+0x2a/0x420 [ 1289.879991][T15367] ? __fget_files+0x3a0/0x420 [ 1289.880008][T15367] ? __fget_files+0x2a/0x420 [ 1289.880027][T15367] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1289.880048][T15367] ? __pfx_sock_ioctl+0x10/0x10 [ 1289.880071][T15367] __se_sys_ioctl+0xfc/0x170 [ 1289.880096][T15367] do_syscall_64+0xe2/0xf80 [ 1289.880114][T15367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.880130][T15367] ? trace_irq_disable+0x37/0x100 [ 1289.880147][T15367] ? clear_bhb_loop+0x60/0xb0 [ 1289.880166][T15367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.880182][T15367] RIP: 0033:0x7f21e859aeb9 [ 1289.880198][T15367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.880214][T15367] RSP: 002b:00007f21e944e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.880231][T15367] RAX: ffffffffffffffda RBX: 00007f21e8815fa0 RCX: 00007f21e859aeb9 [ 1289.880245][T15367] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000004 [ 1289.880256][T15367] RBP: 00007f21e8608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1289.880267][T15367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1289.880277][T15367] R13: 00007f21e8816038 R14: 00007f21e8815fa0 R15: 00007ffd367714d8 [ 1289.880297][T15367] [ 1290.171554][T15373] netlink: 'syz.2.11338': attribute type 1 has an invalid length. [ 1290.180609][T15373] netlink: 'syz.2.11338': attribute type 4 has an invalid length. [ 1290.188537][T15373] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.11338'.