last executing test programs: 2.701932804s ago: executing program 0 (id=2307): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@generic={0x88f5}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xa, &(0x7f0000000180)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xba}, [@ldst={0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94) 2.550026952s ago: executing program 0 (id=2311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r5, 0x20b, 0x3, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) close(r8) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x6003}, @val={0x2, 0x80, 0x4, 0xf, 0x3}, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0xa004, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0xe000, @void}}}}}}}}, 0x3c) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r9, 0x802, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x6}]}, 0x24}}, 0x40841) 2.477511397s ago: executing program 1 (id=2312): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r3 = accept(r2, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f00000001c0)=r4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 2.148364736s ago: executing program 3 (id=2315): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) clock_gettime(0xaf098b49fff259ae, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="01002dbd7000000000002200000018000180140002007465616d5f736c6176655f3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x0, 0xfffffffd}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9f, 0x9f, 0x4, [@float={0x10, 0x0, 0x0, 0x10, 0xc}, @struct={0x9, 0x2, 0x0, 0x4, 0x0, 0x5, [{0xc, 0x2, 0x10}, {0xe, 0x3, 0x6}]}, @ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @datasec={0x2, 0x3, 0x0, 0xf, 0x1, [{0x1, 0x5, 0x71b}, {0x3, 0x6}, {0x3, 0x1, 0x800}], "f3"}, @datasec={0x6, 0x3, 0x0, 0xf, 0x2, [{0x2, 0x1, 0xb}, {0x1, 0xffffffff, 0xd8}, {0x1, 0x3ff, 0x7}], "e81a"}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000000)=""/32, 0xbc, 0x20, 0x1, 0xa7}, 0x28) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) clock_gettime(0xaf098b49fff259ae, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="01002dbd7000000000002200000018000180140002007465616d5f736c6176655f3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x0, 0xfffffffd}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9f, 0x9f, 0x4, [@float={0x10, 0x0, 0x0, 0x10, 0xc}, @struct={0x9, 0x2, 0x0, 0x4, 0x0, 0x5, [{0xc, 0x2, 0x10}, {0xe, 0x3, 0x6}]}, @ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @datasec={0x2, 0x3, 0x0, 0xf, 0x1, [{0x1, 0x5, 0x71b}, {0x3, 0x6}, {0x3, 0x1, 0x800}], "f3"}, @datasec={0x6, 0x3, 0x0, 0xf, 0x2, [{0x2, 0x1, 0xb}, {0x1, 0xffffffff, 0xd8}, {0x1, 0x3ff, 0x7}], "e81a"}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000000)=""/32, 0xbc, 0x20, 0x1, 0xa7}, 0x28) (async) 2.134956569s ago: executing program 2 (id=2316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r6, 0x200}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) shutdown(r8, 0x0) bind$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x120, r4, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1c9, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0xb5, 0x2a, [@random_vendor={0xdd, 0xaf, "088d9dbfbe67cd0f1fcbf834cf0bbaa2006516310c31aa96cdb417a3297515356d0c08119213ecc55df80a8a1952df36ca4608bd04eaedb6dee4434cc1886b19602b02d4ea82f1df4e95019fa190050e2c5c5ce65945a6de5812c38a317d82f1fb48be797792cac353fb527272b5508bb6d5e0b3ef803982982c9ba790cee8512f98b06e02c3378345c9b17ea2842c8b5c2e82df5df697ce71cfdf3fcad2a16ff36dfad21c8ef78f203833deeef36c"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x1, 0x111}}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xd}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000085}, 0x20040040) accept(r8, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r9, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5e18afa2200000002ac468fb15d680036c9af8", @ANYRES16=0x0, @ANYBLOB="000825bd7000fedbdf25360000000c009900ff7f000071000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x902}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x143, 0x80, 0x88a8}}, {0x14, 0x1, {0x3912, 0xf31, 0x7f, 0x8100}}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0x2, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f00000001c0)={'batadv0\x00', {0x2, 0x4e21, @remote}}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000100)={r7}) 1.970976215s ago: executing program 3 (id=2317): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000040) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0) 1.781688543s ago: executing program 2 (id=2319): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x471, &(0x7f0000000bc0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x43b, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, [{0x19, 0x21, "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"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f026"}, {0x21, 0x7, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c883747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e8860"}]}}}}}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0x41}, {&(0x7f0000000140)="ce903baa49", 0xfffffe11}], 0x2, 0x80000001, 0x4dc7a87d) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x2, &(0x7f00000003c0)={r5, 0x1, 0x4, @remote}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x4}, &(0x7f0000000440)=0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0xa}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x86dd, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100, @val=0x80}}}}}}}}, 0x3e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000005c0)="e81784245c50ef0909e77a31341995c9c95d216462117f827301a5328e3aa5fea355cf127f0049c024909e7ed79c2e92e2cf24b1c9712965ff"}, 0x25) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000f500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r11, 0x0, &(0x7f0000000500)=""/184}, 0x20) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x12, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000500000000000000b500000060048fd0f23b73f2273e496e2f730af9514cbb7a7bc1a3a226092490e66f65b339e5427cebd5e344d1053e855e1bc86086cc734ae24cfdc641b2d6c9a034e5424bcee0b1767d243b05f84cec0f8ea60fb737ed2836c6a5e977d5acb59bd5f3a82ca55d350f815469a0047495740c0d6f2c6a2a4bc7e39ec8c1456c7856549484265819a022172f2835b58023a09245866f421de8e53f89a94880eb7ab8818a2efb1f0a5501", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185b000007000000000000000000000063050600fcffffffbf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x60, '\x00', r10, 0x25, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x10, 0x1, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r11, r11, r7, r11, r11], 0x0, 0x10, 0x662}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r11}, &(0x7f00000007c0), &(0x7f0000000280)=r9}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.656222241s ago: executing program 3 (id=2320): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000040)={r1, 0x8, 0xd, "22caf2691e2f1e1cc53c43d4df3dba3f47d24479c3867a5cfe6885b582de6dcd61e0d6daf4d1bbe29d879cdc2a5d5d094fed2caa932be25d9cc1f97dc9ca47fd56ef705ae7eae7c5b3719e570180331ea054c52f4a7d6ca9e6352e2d1b2f0e9f30cd22fa0bc7dd93d9dbc83f68cffcde5a3e76e528598a89d170b2d31ab3c6802b2b016bf1dc76530da84b1e1d5cfce990b7257c2265"}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01, 0x0, 0x4}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.573221856s ago: executing program 4 (id=2321): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x8, 0x32}, 0x9c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002880)=@security={'security\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x130, 0x1d8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0xa, 0x7, 0x0, 0x3], 0x1, 0x1}, {0x4, [0x4, 0x1, 0x3, 0x1, 0x5, 0xe], 0x2, 0x4}}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'macvtap0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x32, 0x3, 0x10}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6, 0x1}, {0x2, 0x5, 0x6}, {0x6, 0x4, 0x4}, 0x8001}}}, {{@ip={@remote, @rand_addr=0x64010102, 0xffffff00, 0xff, 'ipvlan1\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x81f6fc83b80a76cf}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x0, 0x2, 0x1, 0x2, 0x3], 0x2, 0x2}, {0x1, [0x2, 0x0, 0x1, 0x6, 0x0, 0x1], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="017f00000000000000200300000004"], 0x18}}, 0x4000) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r5 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='hI', @ANYRES16=r4, @ANYBLOB="000200000000fadbdf240f0000000493262d00050108002600820981f25800a6800a000600ffffffff1cf500000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a00060008021100000100000a000600ffffffffffffddff0900060008021100000100000800a500010000000400a604000000000000000008000d007f"], 0x94}}, 0x840) 1.572045966s ago: executing program 0 (id=2322): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffff7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '*'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 1.500083932s ago: executing program 3 (id=2323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x40, 0x5961, {{0x2e, 0x4, 0x2, 0x4, 0xb8, 0x66, 0x0, 0x4, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x32}, {[@lsrr={0x83, 0x3, 0xbe}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x46, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x34}, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0x5, "7e97bd"}, @timestamp_addr={0x44, 0x34, 0x21, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0xdff8}, {@rand_addr=0x64010101, 0xe10}, {@multicast2, 0x858}, {@rand_addr=0x64010100}, {@empty, 0x8}]}, @timestamp_addr={0x44, 0x44, 0xd, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@loopback, 0xffffffff}, {@empty, 0x5}, {@empty, 0xffff0790}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x77ce}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@multicast2, 0x80000000}, {@loopback, 0x10000}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0x7, 0xfff1}, {0x1, 0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="be055fc46c8af78ef2a6650686391a7c60e4eda0fd7e4bdc7ab3c7baaaf43e2557d7f79ab3f38d78839d205c088eda3a5f864602511a0e93c2a82695f0dcb7224b4f6ec4e7162569", @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0000eb810000000000ffffffffff000000000000", @ANYRES32=r4], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r5, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r8) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="0048cea61257aa8be91191980287f6a3ffb7716519629fdb14e2d608d8678c0ae091a212fcdd94e8461fa7a4a093b6624eac697fd97ed0a2055586232b840dedee4e1f2eb5d6e463c63e6a312e645e26b1f0cb37b760772c78", @ANYRES16=r9, @ANYBLOB="2501fcffffff001000000100000008000200020000000800010000000000"], 0x24}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r6, &(0x7f00000001c0)="7545496697c822f42c72a762", 0x0}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0xffffffffffffff94, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=r2, @ANYBLOB="0300000080000081280012e54c21660076786c616e00", @ANYRES8=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x20016844) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r10}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0x9, 0x5}]}, @typedef={0x8, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x5f, 0x30, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000400)=""/2, 0x3f, 0x2, 0x1, 0x7fffffff, 0x10000, @value=r12}, 0x28) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r13, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x801) ioctl$BTRFS_IOC_GET_FEATURES(r13, 0x80189439, &(0x7f0000000300)) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r13) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="000126bd7000fcdbdf254c0000000c00a60087030000000000000c00a6000100000000000000080001007063690011000200303030303a30303a31302e30000000000e00a90066697273746e616d650000000c00a70081060000000000006953610246d115d18346258cf8eedd23da3715cdca53d27b25e2036e07f8a8d212eb3243872c"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8) r16 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r16, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.345359807s ago: executing program 1 (id=2324): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000001800", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00'/16, @ANYRES32=r0, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) 1.293207093s ago: executing program 0 (id=2325): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x12, "d243471da14ff23d079da4ca814b7d7b"}]}}}}}}}}, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r1, 0x34da2000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000200)='./file0\x00', r0}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x7800, 0x7, 0xff64, 0x5, {{0x1f, 0x4, 0x0, 0x4, 0x7c, 0x65, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@timestamp_prespec={0x44, 0x14, 0xe0, 0x3, 0x9, [{@rand_addr=0x64010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x6}]}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x7, 0x11, "8e7f327d27f85000fc38d6ffe6cef3"}, @timestamp_addr={0x44, 0x34, 0x9d, 0x1, 0x1, [{@local, 0x4}, {@multicast1, 0x1}, {@multicast1, 0xea}, {@private=0xa010101, 0x7ff}, {@broadcast}, {@private=0xa010100, 0xfffffffe}]}, @ssrr={0x89, 0x7, 0x4b, [@private=0xa010102]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000180)={'ip_vti0\x00', r2, 0x7e1, 0x7, 0xfffff800, 0xe4, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x65, 0xffff, 0x9, 0x2f, 0x0, @rand_addr=0x64010100, @remote, {[@noop]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c0000002000000125bd7000fbdbdf250a14807e060000081100000014000200fc01000000000000000000000000000114560300677265746170300000000000000000d61400020000000000000000000000ffffe000000114000100ff01000000000000000000000000000108000400ce00000014000200fc02000000000000000000000000000014000e3125d200000000000000000000000000014c9c0ac6cfe8c682b52fd40236a1462e7cd13734cba04f08133b018f10cbbeaa1f4f736a008e33dbcf909d2e462874ec360bbc40b3e4e692"], 0x9c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x20, r4, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1fffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x240280d0}, 0x8090) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 1.29263003s ago: executing program 4 (id=2326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x52}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) 1.287427187s ago: executing program 2 (id=2327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40488c0}, 0x90) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendto$l2tp6(r2, &(0x7f0000000040)="db930e7dc62eedf2fc177e5ffef965f93b03cdcfdc43fbd6c7fbcc177817799bfaa1dabe883220fef7cf0b9590d7bf17542d1065353de8ed3a731fecc31390ef6fe6a4c4be55eeb9905353066c8d41bf2ccc57004a8ecd5b7ec771262cf2ad43b4015f493250d73d87ace4759f35533fa159382745", 0x75, 0x4008000, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x390, 0xffffffff, 0x0, 0xd0, 0x1f0, 0xfeffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [0xff000000, 0x0, 0x0, 0xff], 'veth0_vlan\x00', 'syzkaller0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x62d}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff, 0x1}}, @common=@ipv6header={{0x28}, {0x9, 0x70}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x390, 0xffffffff, 0x0, 0xd0, 0x1f0, 0xfeffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [0xff000000, 0x0, 0x0, 0xff], 'veth0_vlan\x00', 'syzkaller0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x62d}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff, 0x1}}, @common=@ipv6header={{0x28}, {0x9, 0x70}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000080)=0x80) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) (async) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800900010068617368000000002c00028008000640e80000ff08000140000000030800044020000003080003400000000408000240000000120900010073797a30000000000900020073797a32"], 0x94}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000078000000000000000000000000001e0da3770c2a56a083f61200000000"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000078000000000000000000000000001e0da3770c2a56a083f61200000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) 1.149449501s ago: executing program 1 (id=2328): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01ff8d00"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x0) 1.108831675s ago: executing program 0 (id=2329): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000001c0), 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x76, &(0x7f00000014c0)={@local, @random="e462e98700", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x68, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x10, 0x7, 0x0, 0xe7, {[@mptcp=@remove_addr={0x1e, 0x3d, 0x2, 0x0, "88391a84ed441d2486917d411bdd858b3945eb7b104049c25287cdf6564600b902e2e7d74b3c7698494b8b50fa2b86bdbac1834970ce2e08de17"}]}}}}}}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40", 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "08ae00", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1}}}}}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast1, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x192, 0x6, 0xffff, 0x28251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffd}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffd06}}]}, 0x30}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0xe4, 0x30, 0x9, 0x0, 0x25dfdbff, {}, [{0xd0, 0x1, [@m_bpf={0xcc, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x107}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x80, 0x6, "8c57be6e0542b654af848ec9c667319fb627110ae27780cd4bc532c77cfb6e7c95a04106e698ad6ea077bf5c72da48e8c8972f8b1ab042380ed375f19ebc6923358c69bf08b1ba4a5bb7caca4bd487cba69ce53ecbd8023728c1b80161fe6afbed4f830ec1ca502ac328254e06d93fe3141bf5156a3776db336431db"}, {0xc}, {0xc}}}]}]}, 0xe4}}, 0x0) 1.075553741s ago: executing program 3 (id=2330): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@dev, 0x0}, &(0x7f00000001c0)=0x14) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)={0x28, r4, 0x1, 0x70bd28, 0x1, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x24000880) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000240)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0xfffffffc, 0x0, 0xc, 0x3, 0x8, 0x0, 0x2]}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000a40)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f0000000300), 0x3, 0x60, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a00)={'veth0_to_batadv\x00', &(0x7f00000009c0)=@ethtool_rxfh_indir={0x38, 0x2, [0xfffffffd, 0xb71f]}}) syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000080)=@raw=[@exit, @generic={0x4, 0x4, 0x2, 0x7, 0x200}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001}], &(0x7f00000000c0)='GPL\x00', 0x8, 0x7f, &(0x7f0000000100)=""/127, 0x41000, 0x5, '\x00', r1, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x9, 0xffffab08, 0x7}, 0x10, r5, r0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0xfffffffffffffe25) 981.265949ms ago: executing program 1 (id=2331): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x0, 0xa, 0xb, 0x2, 0x2a, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0xb9e371de47b7d3a7, 0xffffff21, 0xb}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0xe, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x5f, 0x61, 0x4f, 0x61, 0x30]}}, &(0x7f00000002c0)=""/49, 0x2f, 0x31, 0x0, 0xf8f, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', r1, r2, 0x1, 0x5}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0xa, 0x3, 0x3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000240), &(0x7f0000000380)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r8, 0x1, 0x4a, 0x0, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000040)=0x3) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000000)={0xfff, 0x8, 0x1, 0x7ff}, &(0x7f0000000240)=0x10) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}]}}]}, 0x38}}, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x6dd, 0x4}) 956.948382ms ago: executing program 3 (id=2332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x20, 0x2, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) 932.432494ms ago: executing program 4 (id=2333): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c00028008000340000000160800014000"], 0x110}}, 0x40040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) pipe(&(0x7f0000002740)={0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x4041) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) sendto$inet6(r5, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d6080045007cf7e304fb07673f0030029078ac1e0001e000000114009078ac1e000178e1054910d8a0f0efd0d4c0ba321cff5db0aac6ca0c2a102fd0649cf3bb93fb32fc5685805dc56b50fe529b8146a4e46fb39a33391ffeaa4679aa1c5be2c1990638b950bb4856cc4658b71a6ec55fa6c00edbff"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'caif0\x00', @link_local}) 829.598374ms ago: executing program 2 (id=2334): syz_emit_ethernet(0x8b9e3de1a31337ca, 0x0, 0x0) 828.791836ms ago: executing program 1 (id=2335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010425bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="7808020001a20100140012800900010069706970d510b3f96eb0ab0d"], 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 772.40766ms ago: executing program 4 (id=2336): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0xb, 0x800, 0x40) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x23, 0x3, 0x80000) socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000508000240000000000800044000000000080003400000001508000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x80, 0x1, @rand_addr=' \x01\x00', 0x2}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000091f155bbfa4c64db656377a475dd3d98a281f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 754.106848ms ago: executing program 2 (id=2337): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000029000000360000000000000000000000e8"], 0x100}, 0x20004094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000f0000000f00000000a0000000600000000000007000000000f00000000000009000000000e00000006000005020000000c00000002000000930000000700000003000000100000000300000002000000080000000100000001000000020000001000000000000000050000000b00000001000000840f0000080000000000001105000000080000000c00000002000004cc0000001000000000000000f50100000a00000005000000cf0c00000a0000000000000c05000009000000000000110404000006000000020000000200000604000000c3a6a0331c1d940100000008000000050300000104000006000000a6ba7d1b633fab0000615f5f0e611e713000"/281], &(0x7f0000000340)=""/1, 0x112, 0x1, 0x0, 0x401}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00000004000000070000f29059c90001000000", @ANYRES32, @ANYBLOB="f02eb60f00"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200000001000000050000000800"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001100688400001c0000000000583b810004000000000000"], 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d3, &(0x7f00000001c0)="9f9553") r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x38) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0x82, &(0x7f0000000200)={0x7, 0x0, 0x4}, &(0x7f0000000280)=0x20) r11 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r11, 0x200000000114, 0x8, 0x0, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x104, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1bc}}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @multicast2}, &(0x7f0000000180)=0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r14, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:'], 0x47) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000030000008e0c00000300000000000000", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="0300000001000000030000000100"/28], 0x50) 621.565451ms ago: executing program 1 (id=2338): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000280)=0x1, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x10fff76269569481, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 64) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xb) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x5, 0x1, &(0x7f0000000040)='\x00', 0x48, 0x1, 0x7, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 579.307841ms ago: executing program 2 (id=2339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x31}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000600000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffe7c, 0x2, {{0x7c, 0x0, 0xffff8593, 0x1, 0xc}, 0x4, 0xfffffffe, 0x9, 0x5, 0x9, 0x4, 0x6, 0x2, 0x5, 0x1, {0xffff1c72, 0x3, 0xfffffff2, 0x101, 0xfffffffe, 0x80000005}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c8f1}, 0x4008000) 578.284967ms ago: executing program 4 (id=2340): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1, @private2}}}}}}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) getpid() socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b27, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000140), 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448c9, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\b\x00', @ANYRES16=r8, @ANYBLOB="1d3200000000000000001000000014000f00fe8000000000000000000000000000bb0800010000000000"], 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 67.882525ms ago: executing program 0 (id=2341): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x800, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711065000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 0s ago: executing program 4 (id=2342): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB='V\n\x00\x00\x00\x00\x00\x00aL\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000ecad00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r4}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r4, &(0x7f0000000140), 0x0}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189", @ANYRES8=r6], 0x340a) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}}, 0x800) kernel console output (not intermixed with test programs): range [ 338.865963][ T6081] netlink: zone id is out of range [ 338.895201][ T6081] netlink: zone id is out of range [ 339.183003][ T6098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.223816][ T6098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.237148][ T6098] netlink: 'syz.3.35': attribute type 3 has an invalid length. [ 339.277700][ T6098] netlink: 'syz.3.35': attribute type 3 has an invalid length. [ 339.315112][ T6104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.334482][ T6101] Bluetooth: MGMT ver 1.23 [ 339.340997][ T6101] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 339.474961][ T6110] ipt_REJECT: ECHOREPLY no longer supported. [ 339.618597][ T6114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.41'. [ 339.785806][ T6121] syz.0.43 uses obsolete (PF_INET,SOCK_PACKET) [ 339.967214][ T6128] veth0_to_team: entered promiscuous mode [ 340.089361][ T6129] netlink: 'syz.1.46': attribute type 11 has an invalid length. [ 340.380802][ T6149] netlink: 'syz.2.54': attribute type 1 has an invalid length. [ 340.979457][ T6170] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.989240][ T6170] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.058157][ T6167] xt_CT: No such helper "pptp" [ 341.072107][ T6174] __nla_validate_parse: 2 callbacks suppressed [ 341.072125][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.61'. [ 341.260766][ T6184] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 341.294245][ T6189] netlink: 5 bytes leftover after parsing attributes in process `syz.2.64'. [ 341.337870][ T6189] netlink: 5 bytes leftover after parsing attributes in process `syz.2.64'. [ 341.376980][ T6189] netlink: 5 bytes leftover after parsing attributes in process `syz.2.64'. [ 341.388612][ T6189] netlink: 5 bytes leftover after parsing attributes in process `syz.2.64'. [ 341.398589][ T6189] netlink: 5 bytes leftover after parsing attributes in process `syz.2.64'. [ 341.408793][ T6189] netlink: 5 bytes leftover after parsing attributes in process `syz.2.64'. [ 341.421022][ T6189] netlink: 5 bytes leftover after parsing attributes in process `syz.2.64'. [ 341.435464][ T6189] netlink: 5 bytes leftover after parsing attributes in process `syz.2.64'. [ 341.452237][ T6189] netlink: 5 bytes leftover after parsing attributes in process `syz.2.64'. [ 341.611318][ T6199] netlink: 'syz.2.69': attribute type 6 has an invalid length. [ 341.655623][ T6199] netlink: 'syz.2.69': attribute type 6 has an invalid length. [ 341.693699][ T5961] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.709513][ T5961] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.732207][ T5961] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.851548][ T5961] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.937854][ T6207] netlink: 'syz.2.71': attribute type 3 has an invalid length. [ 342.259250][ T6222] syz.4.75 uses old SIOCAX25GETINFO [ 342.436219][ T6211] team0 (unregistering): Port device team_slave_0 removed [ 342.450458][ T6211] team0 (unregistering): Port device team_slave_1 removed [ 342.549900][ T6217] tipc: Started in network mode [ 342.555549][ T6217] tipc: Node identity 165834dd98fe, cluster identity 4711 [ 342.564417][ T6217] tipc: Enabled bearer , priority 0 [ 342.621965][ T6226] macvtap1: entered promiscuous mode [ 342.638343][ T6226] vlan0: entered promiscuous mode [ 342.646282][ T6226] macvtap1: entered allmulticast mode [ 342.652895][ T6226] vlan0: entered allmulticast mode [ 342.658680][ T6226] veth0_vlan: entered allmulticast mode [ 342.722418][ T6241] netlink: 'syz.4.80': attribute type 1 has an invalid length. [ 342.744085][ T6243] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20003 [ 342.851038][ T6208] tipc: Disabling bearer [ 343.046705][ T6259] syzkaller0: entered promiscuous mode [ 343.079489][ T6259] syzkaller0: entered allmulticast mode [ 343.099624][ T6256] tipc: Started in network mode [ 343.110347][ T6256] tipc: Node identity aa682d40fc8a, cluster identity 4711 [ 343.128344][ T6256] tipc: Enabled bearer , priority 0 [ 343.227746][ T6256] tipc: Resetting bearer [ 343.283412][ T6247] tipc: Resetting bearer [ 343.389491][ T6247] tipc: Disabling bearer [ 343.628282][ T6282] validate_nla: 1 callbacks suppressed [ 343.628303][ T6282] netlink: 'syz.0.90': attribute type 58 has an invalid length. [ 343.734851][ T6289] netlink: 'syz.4.92': attribute type 28 has an invalid length. [ 343.777546][ T6289] netlink: 'syz.4.92': attribute type 3 has an invalid length. [ 343.873538][ T6292] x_tables: duplicate underflow at hook 1 [ 344.017520][ T9] IPVS: starting estimator thread 0... [ 344.127592][ T6296] IPVS: using max 25 ests per chain, 60000 per kthread [ 344.216963][ T6306] trusted_key: syz.3.97 sent an empty control message without MSG_MORE. [ 344.249409][ T6301] tipc: Started in network mode [ 344.254784][ T6301] tipc: Node identity , cluster identity 4711 [ 344.288717][ T6301] tipc: Failed to obtain node identity [ 344.306299][ T6301] tipc: Enabling of bearer rejected, failed to enable media [ 344.367800][ T6308] xt_ecn: cannot match TCP bits for non-tcp packets [ 345.139463][ T6346] batadv1: entered allmulticast mode [ 346.059566][ T6397] netlink: 'syz.0.117': attribute type 8 has an invalid length. [ 346.174581][ T6408] sctp: [Deprecated]: syz.3.121 (pid 6408) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.174581][ T6408] Use struct sctp_sack_info instead [ 346.198347][ T6406] __nla_validate_parse: 70 callbacks suppressed [ 346.198366][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.121'. [ 346.222732][ T6406] netlink: 'syz.3.121': attribute type 7 has an invalid length. [ 346.233360][ T6406] netlink: 'syz.3.121': attribute type 8 has an invalid length. [ 346.243277][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 346.504511][ T6422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.124'. [ 346.520160][ T6423] syz_tun: entered allmulticast mode [ 346.531486][ T6422] xfrm0: Master is either lo or non-ether device [ 346.602571][ T6423] dvmrp1: entered allmulticast mode [ 346.804717][ T6432] netlink: 'syz.2.127': attribute type 4 has an invalid length. [ 346.845681][ T6432] netlink: 152 bytes leftover after parsing attributes in process `syz.2.127'. [ 346.882731][ T6425] syz_tun: left allmulticast mode [ 346.924323][ T6432] `: renamed from bond0 (while UP) [ 347.439272][ T6452] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 347.478676][ T6454] netlink: 64 bytes leftover after parsing attributes in process `syz.0.136'. [ 347.609987][ T6462] xt_TPROXY: Can be used only with -p tcp or -p udp [ 347.769125][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 347.809131][ T6468] netlink: 32 bytes leftover after parsing attributes in process `syz.0.140'. [ 347.810401][ T6471] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 347.833679][ T6473] netlink: 32 bytes leftover after parsing attributes in process `syz.2.141'. [ 347.859678][ T6472] netlink: 32 bytes leftover after parsing attributes in process `syz.2.141'. [ 347.881645][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 348.004331][ T6478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.096094][ T6472] hsr_slave_0 (unregistering): left promiscuous mode [ 348.118965][ T6481] bond1: entered allmulticast mode [ 348.671820][ T6507] macvtap1: entered promiscuous mode [ 348.696780][ T6507] vlan0: entered promiscuous mode [ 348.725816][ T6507] macvtap1: entered allmulticast mode [ 348.748363][ T6507] vlan0: entered allmulticast mode [ 348.772677][ T6507] veth0_vlan: entered allmulticast mode [ 348.842609][ T6514] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 348.871182][ T6514] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 348.899321][ T6518] netlink: 'syz.4.153': attribute type 1 has an invalid length. [ 349.458104][ T6539] pim6reg: entered allmulticast mode [ 349.465037][ T6539] pim6reg: left allmulticast mode [ 350.227893][ T6569] IPVS: set_ctl: invalid protocol: 36 224.0.0.2:20003 [ 350.247564][ T6569] IPVS: set_ctl: invalid protocol: 36 224.0.0.2:20003 [ 350.334221][ T6577] xt_l2tp: wrong L2TP version: 0 [ 350.684242][ T6589] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 351.067721][ T6602] netlink: 'syz.4.177': attribute type 1 has an invalid length. [ 351.321764][ T6610] __nla_validate_parse: 5 callbacks suppressed [ 351.321783][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 351.545886][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.183'. [ 351.565475][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 351.678275][ T6618] hsr_slave_1 (unregistering): left promiscuous mode [ 351.764486][ T6619] netlink: 32 bytes leftover after parsing attributes in process `syz.4.183'. [ 351.797059][ T6617] netlink: 'syz.4.183': attribute type 12 has an invalid length. [ 351.955933][ T6630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.185'. [ 352.002466][ T6632] netlink: 2 bytes leftover after parsing attributes in process `syz.0.186'. [ 352.016019][ T6630] netlink: 'syz.3.185': attribute type 1 has an invalid length. [ 352.043051][ T6630] netlink: 'syz.3.185': attribute type 1 has an invalid length. [ 352.251785][ T6644] netlink: 52 bytes leftover after parsing attributes in process `syz.0.189'. [ 352.329081][ T6647] vlan2: entered promiscuous mode [ 352.336003][ T6647] bond0: entered promiscuous mode [ 352.343486][ T6647] bond_slave_0: entered promiscuous mode [ 352.352922][ T6647] bond_slave_1: entered promiscuous mode [ 352.502984][ T6654] sctp: [Deprecated]: syz.4.191 (pid 6654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 352.502984][ T6654] Use struct sctp_sack_info instead [ 352.678998][ T6658] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.193'. [ 352.984281][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.198'. [ 353.353399][ T6694] Cannot find add_set index 0 as target [ 353.917950][ T6716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.208'. [ 354.290866][ T6731] xt_hashlimit: size too large, truncated to 1048576 [ 354.719813][ T6744] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 354.809409][ T6744] bond1 (unregistering): Released all slaves [ 354.892673][ T6762] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 354.974447][ T6745] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 354.991308][ T6745] bond1 (unregistering): Released all slaves [ 355.648908][ T6793] veth0_macvtap: left promiscuous mode [ 356.140710][ T6813] bridge0: port 3(batadv1) entered blocking state [ 356.154120][ T6813] bridge0: port 3(batadv1) entered disabled state [ 356.195002][ T6813] batadv1: entered allmulticast mode [ 356.229065][ T6813] batadv1: entered promiscuous mode [ 356.419976][ T6825] __nla_validate_parse: 5 callbacks suppressed [ 356.419997][ T6825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.232'. [ 356.472279][ T6828] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 356.642978][ T1111] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 356.653458][ T1111] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 356.850501][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.236'. [ 357.167001][ T6859] syzkaller1: entered promiscuous mode [ 357.209483][ T6859] syzkaller1: entered allmulticast mode [ 357.505592][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 357.518408][ T6869] netlink: 36 bytes leftover after parsing attributes in process `syz.3.243'. [ 357.883802][ T6891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.249'. [ 357.914938][ T6891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.249'. [ 358.220929][ T6904] netlink: 'syz.3.256': attribute type 9 has an invalid length. [ 358.305740][ T6904] netlink: 64 bytes leftover after parsing attributes in process `syz.3.256'. [ 358.460765][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'. [ 358.577225][ T6915] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 358.616328][ T6915] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 358.639619][ T6915] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 358.667075][ T6915] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 358.677701][ T6915] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 358.686613][ T6915] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 358.695548][ T6915] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 358.706840][ T6915] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 358.723724][ T6915] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 359.452893][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 359.508521][ T6919] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 360.122732][ T6987] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 360.209532][ T6989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 360.374348][ T6996] net_ratelimit: 334 callbacks suppressed [ 360.374369][ T6996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.429838][ T6998] IPv6: NLM_F_CREATE should be specified when creating new route [ 360.439614][ T6998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.447654][ T6998] IPv6: NLM_F_CREATE should be set when creating new route [ 360.455196][ T6998] IPv6: NLM_F_CREATE should be set when creating new route [ 360.462856][ T6998] IPv6: NLM_F_CREATE should be set when creating new route [ 360.475818][ T6996] tipc: Started in network mode [ 360.481776][ T6996] tipc: Node identity 2a03c7b201c3, cluster identity 4711 [ 360.490991][ T6996] tipc: Enabled bearer , priority 0 [ 360.502616][ T6996] syzkaller0: entered promiscuous mode [ 360.508886][ T6996] syzkaller0: entered allmulticast mode [ 360.547088][ T6996] tipc: Resetting bearer [ 360.565498][ T6995] tipc: Resetting bearer [ 360.609947][ T6995] tipc: Disabling bearer [ 360.657804][ T7006] macvlan0: entered promiscuous mode [ 360.665487][ T7006] batadv0: entered promiscuous mode [ 360.676938][ T7006] debugfs: 'hsr0' already exists in 'hsr' [ 360.683762][ T7006] Cannot create hsr debugfs directory [ 360.691063][ T7006] hsr0: entered allmulticast mode [ 360.696581][ T7006] macvlan0: entered allmulticast mode [ 360.705820][ T7006] veth1_vlan: entered allmulticast mode [ 360.712392][ T7006] batadv0: entered allmulticast mode [ 360.723336][ T7006] macvlan0: left promiscuous mode [ 360.738659][ T7006] batadv0: left promiscuous mode [ 360.762990][ T7010] netlink: 'syz.3.291': attribute type 11 has an invalid length. [ 360.791183][ T5875] Bluetooth: hci3: command 0x0401 tx timeout [ 361.390306][ T7030] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 361.445132][ T7030] bond0 (unregistering): Released all slaves [ 362.001083][ T7074] tipc: Enabled bearer , priority 0 [ 362.011220][ T7074] syzkaller0: entered promiscuous mode [ 362.017116][ T7074] syzkaller0: entered allmulticast mode [ 362.057072][ T7074] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 362.109219][ T7074] tipc: Resetting bearer [ 362.147003][ T7073] tipc: Resetting bearer [ 362.236987][ T7073] tipc: Disabling bearer [ 362.551051][ T7107] __nla_validate_parse: 4 callbacks suppressed [ 362.551073][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.320'. [ 362.570641][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.320'. [ 363.374490][ T7149] openvswitch: netlink: Actions may not be safe on all matching packets [ 363.577316][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.330'. [ 363.691131][ T7158] validate_nla: 47 callbacks suppressed [ 363.691151][ T7158] netlink: 'syz.2.331': attribute type 14 has an invalid length. [ 363.814876][ T7163] netlink: 256 bytes leftover after parsing attributes in process `syz.0.332'. [ 363.913164][ T7169] netlink: 64 bytes leftover after parsing attributes in process `syz.3.335'. [ 363.965747][ T7171] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 364.016749][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.025559][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.332474][ T7186] gtp0: entered promiscuous mode [ 364.356672][ T7186] gtp0: entered allmulticast mode [ 364.370047][ T7191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.342'. [ 364.370623][ T7195] Cannot find add_set index 0 as target [ 364.440204][ T7197] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.343'. [ 364.572176][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 364.984123][ T7225] netlink: 36 bytes leftover after parsing attributes in process `syz.4.350'. [ 365.220570][ T7238] netlink: 48 bytes leftover after parsing attributes in process `syz.3.354'. [ 366.152728][ T7283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.001662][ T7323] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 367.098747][ T7325] veth3: entered allmulticast mode [ 367.134903][ T7336] netlink: 'syz.2.383': attribute type 10 has an invalid length. [ 367.157127][ T7336] veth0_virt_wifi: entered allmulticast mode [ 367.240731][ T7336] team0: Port device veth0_virt_wifi added [ 367.336000][ T7337] netlink: 'syz.2.383': attribute type 10 has an invalid length. [ 367.740067][ T7355] __nla_validate_parse: 6 callbacks suppressed [ 367.740088][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 367.783256][ T7360] netlink: 'syz.1.389': attribute type 3 has an invalid length. [ 367.797004][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.390'. [ 367.803741][ T7360] netlink: 224 bytes leftover after parsing attributes in process `syz.1.389'. [ 367.892464][ T7362] vxcan2: entered allmulticast mode [ 368.075563][ T5875] Bluetooth: hci0: command tx timeout [ 368.106982][ T7373] netlink: 'syz.0.393': attribute type 2 has an invalid length. [ 368.139085][ T7373] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 368.202180][ T7380] bond0: entered allmulticast mode [ 368.207586][ T7380] bond_slave_0: entered allmulticast mode [ 368.213849][ T7380] bond_slave_1: entered allmulticast mode [ 368.371252][ T7386] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 368.452388][ T7394] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.397'. [ 368.476036][ T7386] bond0 (unregistering): Released all slaves [ 368.478936][ T7394] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 368.545516][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 368.605394][ T7389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.399'. [ 368.622805][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 369.097217][ T7424] netlink: 'syz.3.406': attribute type 1 has an invalid length. [ 369.106787][ T7425] netlink: 'syz.2.407': attribute type 21 has an invalid length. [ 369.137758][ T7425] netlink: 132 bytes leftover after parsing attributes in process `syz.2.407'. [ 369.159137][ T7427] --map-set only usable from mangle table [ 369.234412][ T7424] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 369.240253][ T7429] netlink: 88 bytes leftover after parsing attributes in process `syz.1.408'. [ 369.315144][ T7425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.476380][ T7451] netlink: 'syz.3.412': attribute type 10 has an invalid length. [ 369.579515][ T7451] team0: Device ipvlan1 failed to register rx_handler [ 369.642299][ T7446] netlink: 2 bytes leftover after parsing attributes in process `syz.0.413'. [ 369.665971][ T7446] netlink: 'syz.0.413': attribute type 2 has an invalid length. [ 369.869517][ T7467] nbd: must specify at least one socket [ 370.002525][ T7469] tipc: Enabling of bearer rejected, failed to enable media [ 370.131931][ T7473] tipc: Started in network mode [ 370.157606][ T7473] tipc: Node identity 628fcdcfded3, cluster identity 4711 [ 370.178260][ T7473] tipc: Enabled bearer , priority 0 [ 370.237698][ T7479] syzkaller0: entered promiscuous mode [ 370.243338][ T7479] syzkaller0: entered allmulticast mode [ 370.378553][ T7473] sctp: [Deprecated]: syz.3.419 (pid 7473) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.378553][ T7473] Use struct sctp_sack_info instead [ 370.501358][ T7473] tipc: Resetting bearer [ 370.569683][ T7471] tipc: Resetting bearer [ 370.616216][ T7471] tipc: Disabling bearer [ 371.154921][ T7516] openvswitch: netlink: Flow key attr not present in new flow. [ 371.345747][ T7520] netlink: 'syz.0.436': attribute type 8 has an invalid length. [ 371.687686][ T7545] netlink: 'syz.0.441': attribute type 12 has an invalid length. [ 371.712501][ T7541] netlink: 'syz.3.443': attribute type 2 has an invalid length. [ 371.717608][ T7545] netlink: 'syz.0.441': attribute type 11 has an invalid length. [ 371.898877][ T7551] netlink: 'syz.0.445': attribute type 1 has an invalid length. [ 372.540296][ T7578] hsr0 speed is unknown, defaulting to 1000 [ 372.590569][ T7578] hsr0 speed is unknown, defaulting to 1000 [ 372.632196][ T7578] hsr0 speed is unknown, defaulting to 1000 [ 372.694372][ T7578] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 372.727958][ T7578] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 372.736115][ T7584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.760429][ T7584] bond_slave_0: left promiscuous mode [ 372.809642][ T7584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.842110][ T7584] bond_slave_1: left promiscuous mode [ 372.863573][ T7584] bond0 (unregistering): Released all slaves [ 372.891950][ T7578] hsr0 speed is unknown, defaulting to 1000 [ 372.908195][ T7578] hsr0 speed is unknown, defaulting to 1000 [ 372.918910][ T7578] hsr0 speed is unknown, defaulting to 1000 [ 372.949037][ T7578] hsr0 speed is unknown, defaulting to 1000 [ 372.969811][ T7578] hsr0 speed is unknown, defaulting to 1000 [ 373.122976][ T7598] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 373.155186][ T7598] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 373.225803][ T7600] __nla_validate_parse: 15 callbacks suppressed [ 373.225824][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.458'. [ 373.323806][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 373.347495][ T7612] netlink: 'syz.3.462': attribute type 7 has an invalid length. [ 373.356060][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 373.448740][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 373.448881][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.467579][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 373.509938][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.535148][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.573743][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.817011][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'. [ 373.933756][ T7629] tipc: Enabled bearer , priority 0 [ 373.960835][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'. [ 373.988925][ T7629] syzkaller0: entered promiscuous mode [ 374.028100][ T7629] syzkaller0: entered allmulticast mode [ 374.070997][ T7629] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 374.123195][ T7628] tipc: Resetting bearer [ 374.192378][ T7648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.472'. [ 374.205973][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.472'. [ 374.252837][ T7628] tipc: Disabling bearer [ 374.270813][ T7648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.472'. [ 374.321274][ T7650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.672284][ T7654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.684599][ T7706] geneve2: entered promiscuous mode [ 375.697666][ T7706] geneve2: entered allmulticast mode [ 375.923734][ T7720] validate_nla: 1 callbacks suppressed [ 375.923754][ T7720] netlink: 'syz.0.490': attribute type 3 has an invalid length. [ 376.199812][ T7735] tipc: Enabled bearer , priority 0 [ 376.352869][ T7735] tipc: Disabling bearer [ 376.495352][ T7747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.508784][ T7750] netlink: 'syz.4.494': attribute type 10 has an invalid length. [ 377.047188][ T7773] netlink: 'syz.3.503': attribute type 30 has an invalid length. [ 377.502392][ T7792] tipc: Enabled bearer , priority 0 [ 377.517776][ T5875] Bluetooth: hci4: command tx timeout [ 377.532564][ T5875] Bluetooth: hci4: link tx timeout [ 377.541178][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 377.560125][ T7799] syzkaller0: entered promiscuous mode [ 377.566584][ T7799] syzkaller0: entered allmulticast mode [ 377.591763][ T7791] tipc: Enabling of bearer rejected, already enabled [ 377.741537][ T7799] tipc: Resetting bearer [ 377.852586][ T7799] tipc: Disabling bearer [ 377.946432][ T7810] tipc: Started in network mode [ 377.972929][ T7810] tipc: Node identity ee722919fb3b, cluster identity 4711 [ 378.015587][ T7810] tipc: Enabled bearer , priority 0 [ 378.049602][ T7813] syzkaller0: entered promiscuous mode [ 378.079269][ T7813] syzkaller0: entered allmulticast mode [ 378.316066][ T7825] netlink: 'syz.4.517': attribute type 1 has an invalid length. [ 378.357666][ T7825] __nla_validate_parse: 10 callbacks suppressed [ 378.357686][ T7825] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.517'. [ 378.391270][ T7831] tipc: Resetting bearer [ 378.410948][ T7809] tipc: Resetting bearer [ 378.466108][ T7809] tipc: Disabling bearer [ 378.478254][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 378.685064][ T7843] netlink: 'syz.4.520': attribute type 9 has an invalid length. [ 378.743074][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031a7c000: rx timeout, send abort [ 378.818784][ T7855] netlink: 36 bytes leftover after parsing attributes in process `syz.1.523'. [ 379.222416][ T7873] netlink: 64 bytes leftover after parsing attributes in process `syz.2.529'. [ 379.243820][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031a7e000: rx timeout, send abort [ 379.254654][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031a7c000: abort rx timeout. Force session deactivation [ 379.389500][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'. [ 379.411313][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.434980][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.537357][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.574184][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.587672][ T5875] Bluetooth: hci4: command 0x0406 tx timeout [ 379.751984][ T7891] netlink: 'syz.4.534': attribute type 1 has an invalid length. [ 379.754227][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031a7e000: abort rx timeout. Force session deactivation [ 379.805211][ T7891] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 380.127822][ T9] IPVS: starting estimator thread 0... [ 380.139228][ T7916] netlink: 44 bytes leftover after parsing attributes in process `syz.4.545'. [ 380.186402][ T7909] hsr0 speed is unknown, defaulting to 1000 [ 380.220694][ T7916] x_tables: duplicate underflow at hook 2 [ 380.268162][ T7917] IPVS: using max 25 ests per chain, 60000 per kthread [ 380.459384][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'. [ 380.559974][ T7932] 0: reclassify loop, rule prio 0, protocol 800 [ 380.782492][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 380.866793][ T7909] IPVS: You probably need to specify IP address on multicast interface. [ 380.879605][ T7909] IPVS: Error connecting to the multicast addr [ 380.975649][ T5960] IPVS: starting estimator thread 0... [ 381.077779][ T7955] IPVS: using max 23 ests per chain, 55200 per kthread [ 381.128120][ T7962] netlink: 124 bytes leftover after parsing attributes in process `syz.4.554'. [ 381.140130][ T7954] tipc: Enabled bearer , priority 10 [ 381.189512][ T7964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.555'. [ 381.575606][ T7976] geneve2: entered promiscuous mode [ 381.608327][ T7976] geneve2: entered allmulticast mode [ 381.776061][ T7984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.822938][ T7984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.851492][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 381.863063][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 381.954443][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 382.264755][ T5960] tipc: Node number set to 3160198607 [ 382.732414][ T8038] netlink: 'syz.2.574': attribute type 1 has an invalid length. [ 383.533846][ T7984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.586293][ T7984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.599149][ T7984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 383.632152][ T8080] tipc: Enabled bearer , priority 0 [ 383.645271][ T8077] syzkaller0: entered promiscuous mode [ 383.652295][ T8077] syzkaller0: entered allmulticast mode [ 383.680500][ T8081] __nla_validate_parse: 5 callbacks suppressed [ 383.680522][ T8081] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.585'. [ 383.790288][ T7984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.824143][ T7984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.852142][ T7984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 383.874028][ T8088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.587'. [ 383.937298][ T8077] tipc: Resetting bearer [ 384.005532][ T7984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.028519][ T7984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.043911][ T7984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 384.155080][ T8076] tipc: Resetting bearer [ 384.201385][ T8076] tipc: Disabling bearer [ 384.237750][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.238410][ T8097] tipc: Enabled bearer , priority 0 [ 384.244956][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.356572][ T8096] syzkaller0: entered promiscuous mode [ 384.363107][ T8096] syzkaller0: entered allmulticast mode [ 384.370129][ T8096] tipc: Resetting bearer [ 384.427696][ T8095] tipc: Resetting bearer [ 385.270957][ T5960] tipc: Node number set to 734054322 [ 386.151704][ T8095] tipc: Disabling bearer [ 386.167961][ T8110] netlink: 284 bytes leftover after parsing attributes in process `syz.2.593'. [ 386.201171][ T8111] tipc: Invalid UDP bearer configuration [ 386.201239][ T8111] tipc: Enabling of bearer rejected, failed to enable media [ 386.268322][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.311251][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 386.342853][ T36] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 386.422714][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.447129][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 386.464813][ T36] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 386.568702][ T8121] netlink: 32 bytes leftover after parsing attributes in process `syz.2.596'. [ 386.584695][ T1111] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.620389][ T1111] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 386.647542][ T1111] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 386.673934][ T1111] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.703899][ T1111] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 386.715658][ T1111] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 386.994345][ T8136] xt_CT: You must specify a L4 protocol and not use inversions on it [ 387.105499][ T8147] netlink: 88 bytes leftover after parsing attributes in process `syz.4.604'. [ 387.140006][ T8147] netem: invalid attributes len -24 [ 387.163143][ T8147] netem: change failed [ 387.195887][ T8148] veth0: entered promiscuous mode [ 387.234899][ T8147] veth0: left promiscuous mode [ 387.372302][ T8154] netlink: 'syz.0.605': attribute type 11 has an invalid length. [ 387.400311][ T8157] netlink: 'syz.2.607': attribute type 1 has an invalid length. [ 387.420028][ T8157] netlink: 244 bytes leftover after parsing attributes in process `syz.2.607'. [ 387.548349][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 387.673470][ T8168] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 387.698417][ T8170] tipc: Enabling of bearer rejected, failed to enable media [ 387.907624][ T8187] netlink: 'syz.4.615': attribute type 11 has an invalid length. [ 387.928262][ T8187] netlink: 64 bytes leftover after parsing attributes in process `syz.4.615'. [ 388.011850][ T8191] netlink: 'syz.1.616': attribute type 2 has an invalid length. [ 388.027535][ T8191] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 388.036672][ T8191] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 388.132208][ T8201] netlink: 'syz.2.619': attribute type 1 has an invalid length. [ 388.236974][ T8201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.257249][ T8204] tipc: Enabled bearer , priority 13 [ 388.264834][ T8210] netlink: 'syz.3.622': attribute type 1 has an invalid length. [ 388.349586][ T8210] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 388.362517][ T8210] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 388.441775][ T8216] gretap1: entered promiscuous mode [ 388.474600][ T8216] bond1: (slave gretap1): making interface the new active one [ 388.489281][ T8216] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 388.558278][ T8210] macvlan3: entered promiscuous mode [ 388.572405][ T8210] macvlan3: entered allmulticast mode [ 388.592602][ T8210] bond1: entered promiscuous mode [ 388.609696][ T8210] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 388.640309][ T8210] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 388.669211][ T8232] openvswitch: netlink: Actions may not be safe on all matching packets [ 388.669535][ T8210] bond1: left promiscuous mode [ 388.682029][ T8233] openvswitch: netlink: Actions may not be safe on all matching packets [ 388.798258][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.125054][ T8250] º: renamed from veth1_vlan (while UP) [ 389.218873][ T8253] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.631'. [ 389.241642][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 389.384923][ T9] tipc: Node number set to 1457663296 [ 389.490589][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 389.507799][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 389.888393][ T8279] tipc: Enabled bearer , priority 0 [ 389.943570][ T8280] syzkaller0: entered promiscuous mode [ 389.960943][ T8280] syzkaller0: entered allmulticast mode [ 390.020314][ T8268] tipc: Resetting bearer [ 390.058904][ T8266] tipc: Resetting bearer [ 390.082667][ T8289] netlink: 5 bytes leftover after parsing attributes in process `syz.4.644'. [ 390.150249][ T8266] tipc: Disabling bearer [ 390.175306][ T8296] tipc: Enabled bearer , priority 10 [ 390.201738][ T8294] xt_cgroup: invalid path, errno=-2 [ 390.217147][ T8295] netlink: 'syz.2.646': attribute type 4 has an invalid length. [ 390.277990][ T8295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.646'. [ 390.410151][ T8307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.649'. [ 390.739979][ T8327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.655'. [ 391.298135][ T44] tipc: Node number set to 357116185 [ 391.568922][ T8373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.668'. [ 391.686652][ T8378] netlink: 36 bytes leftover after parsing attributes in process `syz.1.669'. [ 392.276364][ T8400] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 392.335410][ T8402] tipc: Enabling of bearer rejected, failed to enable media [ 392.705741][ T8420] team0: Device wireguard0 is of different type [ 392.889895][ T8421] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 393.223493][ T8448] netlink: 'syz.1.686': attribute type 142 has an invalid length. [ 393.450078][ T8462] netlink: 'syz.0.688': attribute type 2 has an invalid length. [ 393.479057][ T8462] netlink: 'syz.0.688': attribute type 2 has an invalid length. [ 393.731385][ T8469] bond1 (unregistering): Released all slaves [ 393.936434][ T8466] bond1 (unregistering): Released all slaves [ 394.295553][ T8497] netlink: 'syz.4.697': attribute type 1 has an invalid length. [ 394.323710][ T8497] __nla_validate_parse: 4 callbacks suppressed [ 394.323730][ T8497] netlink: 184 bytes leftover after parsing attributes in process `syz.4.697'. [ 394.367654][ T8498] netlink: 'syz.4.697': attribute type 1 has an invalid length. [ 394.383376][ T8503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.697'. [ 394.402458][ T8498] netlink: 184 bytes leftover after parsing attributes in process `syz.4.697'. [ 394.569337][ T8513] nbd: must specify a device to reconfigure [ 394.598440][ T8512] nbd: must specify a device to reconfigure [ 394.837278][ T8527] netlink: 'syz.2.708': attribute type 58 has an invalid length. [ 394.860670][ T8526] netlink: 'syz.2.708': attribute type 58 has an invalid length. [ 394.875627][ T8530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.707'. [ 394.878074][ T8520] netlink: 'syz.4.705': attribute type 3 has an invalid length. [ 394.892989][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 394.908291][ T8518] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 394.921081][ T8526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.708'. [ 394.935389][ T8527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.708'. [ 395.187053][ T8533] netlink: 128 bytes leftover after parsing attributes in process `syz.0.709'. [ 395.197565][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.711'. [ 395.266254][ T8538] netlink: 'syz.1.711': attribute type 11 has an invalid length. [ 395.303190][ T8535] delete_channel: no stack [ 395.454592][ T8553] v: renamed from vlan0 (while UP) [ 395.602722][ T8555] Bluetooth: MGMT ver 1.23 [ 395.680469][ T8559] tipc: Enabled bearer , priority 0 [ 395.688795][ T8559] syzkaller0: entered promiscuous mode [ 395.694655][ T8559] syzkaller0: entered allmulticast mode [ 395.731397][ T8559] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 395.819902][ T8559] tipc: Resetting bearer [ 395.867727][ T8559] tipc: Disabling bearer [ 395.967093][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.719'. [ 396.242191][ T8573] hsr0 speed is unknown, defaulting to 1000 [ 396.366809][ T8582] syzkaller1: entered promiscuous mode [ 396.372795][ T8582] syzkaller1: entered allmulticast mode [ 396.381690][ T8582] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 396.751800][ T8596] netlink: 'syz.1.726': attribute type 13 has an invalid length. [ 396.791455][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.808393][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.822932][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.854615][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.460145][ T8635] netlink: 'syz.3.737': attribute type 11 has an invalid length. [ 397.784274][ T8648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 398.319471][ T8673] syzkaller0: entered allmulticast mode [ 398.486712][ T8681] bond0: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 398.525521][ T8681] bond0 (unregistering): Released all slaves [ 398.995140][ T8710] xt_TCPMSS: Only works on TCP SYN packets [ 399.140825][ T8713] IPv6: sit1: Disabled Multicast RS [ 399.218893][ T8720] Bluetooth: MGMT ver 1.23 [ 399.294387][ T8722] bond0: (slave rose0): Enslaving as an active interface with an up link [ 399.360820][ T8731] __nla_validate_parse: 14 callbacks suppressed [ 399.360842][ T8731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.768'. [ 399.383147][ T8720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.471759][ T8720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.553606][ T8726] netlink: 96 bytes leftover after parsing attributes in process `syz.3.764'. [ 399.819641][ T8742] tipc: Enabled bearer , priority 0 [ 399.846798][ T8742] syzkaller0: entered promiscuous mode [ 399.862295][ T8742] syzkaller0: entered allmulticast mode [ 399.862782][ T8748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.773'. [ 399.895426][ T8748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.773'. [ 399.930971][ T8742] tipc: Resetting bearer [ 399.979288][ T8749] bond1: ARP target 1.0.0.0 is already present [ 399.986184][ T8749] bond1: option arp_ip_target: invalid value (1) [ 400.015801][ T8749] bond1 (unregistering): Released all slaves [ 400.141230][ T8748] gretap0: entered promiscuous mode [ 400.183696][ T8748] gretap0: left promiscuous mode [ 400.244032][ T8740] tipc: Resetting bearer [ 400.416399][ T8740] tipc: Disabling bearer [ 400.479944][ T8763] team0: Cannot enslave team device to itself [ 400.496810][ T8764] tipc: Enabled bearer , priority 0 [ 400.505657][ T8769] syzkaller0: entered promiscuous mode [ 400.533718][ T8769] syzkaller0: entered allmulticast mode [ 400.559037][ T8759] tipc: Resetting bearer [ 400.613526][ T8759] tipc: Disabling bearer [ 400.643081][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 400.679864][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'. [ 400.910637][ T8789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.784'. [ 401.059071][ T8793] syzkaller0: entered promiscuous mode [ 401.065619][ T8793] syzkaller0: entered allmulticast mode [ 401.468416][ T8815] C: renamed from lo (while UP) [ 401.539132][ T8816] syzkaller0: entered promiscuous mode [ 401.552243][ T8816] syzkaller0: entered allmulticast mode [ 401.561208][ T8823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.794'. [ 401.699009][ T8823] IPVS: persistence engine module ip_vs_pe_@ not found [ 401.770461][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 402.062528][ T8843] validate_nla: 3 callbacks suppressed [ 402.062552][ T8843] netlink: 'syz.0.800': attribute type 10 has an invalid length. [ 402.361001][ T8856] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 402.518658][ T8856] veth5: entered promiscuous mode [ 402.639772][ T8868] netlink: 76 bytes leftover after parsing attributes in process `syz.2.807'. [ 402.689345][ T8864] vlan0: entered promiscuous mode [ 402.695993][ T8864] vlan0: entered allmulticast mode [ 402.713371][ T8864] veth0_vlan: entered allmulticast mode [ 403.105968][ T8886] tipc: Enabling of bearer rejected, failed to enable media [ 403.140791][ T8889] bridge2: entered allmulticast mode [ 403.379088][ T8898] netlink: 'syz.2.819': attribute type 1 has an invalid length. [ 404.404615][ T8955] netlink: 'syz.1.832': attribute type 13 has an invalid length. [ 404.435694][ T8955] netlink: 'syz.1.832': attribute type 17 has an invalid length. [ 404.461210][ T8959] __nla_validate_parse: 9 callbacks suppressed [ 404.461235][ T8959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.834'. [ 404.491640][ T8955] netlink: 'syz.1.832': attribute type 5 has an invalid length. [ 404.577077][ T8926] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 404.597728][ T8926] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 404.655936][ T8926] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 404.702065][ T8926] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 404.781390][ T8926] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 404.805993][ T8926] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 404.897302][ T8926] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 404.932202][ T8926] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 404.997082][ T8926] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 405.068995][ T8926] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 405.350702][ T8992] netlink: 256 bytes leftover after parsing attributes in process `syz.4.843'. [ 405.538290][ T8995] wg2: entered promiscuous mode [ 405.545416][ T8995] wg2: entered allmulticast mode [ 405.574171][ T9000] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 405.751211][ T9001] hsr0 speed is unknown, defaulting to 1000 [ 405.935278][ T9021] netlink: 104 bytes leftover after parsing attributes in process `syz.1.850'. [ 406.448446][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.855'. [ 406.468617][ T9047] xt_bpf: check failed: parse error [ 406.586342][ T9046] IPv6: sit1: Disabled Multicast RS [ 406.630309][ T9046] sit1: entered allmulticast mode [ 406.687550][ T9052] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 406.823348][ T9058] netlink: 'syz.4.860': attribute type 4 has an invalid length. [ 407.140292][ T9070] netlink: 44 bytes leftover after parsing attributes in process `syz.2.863'. [ 407.174496][ T9064] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 407.810519][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 407.863335][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'. [ 407.904001][ T9111] netlink: 'syz.3.872': attribute type 5 has an invalid length. [ 410.368788][ T9161] netlink: 32 bytes leftover after parsing attributes in process `syz.3.879'. [ 410.804518][ T9181] delete_channel: no stack [ 410.918054][ T9190] x_tables: duplicate underflow at hook 1 [ 410.942146][ T9190] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 411.055303][ T9200] netlink: 68 bytes leftover after parsing attributes in process `syz.4.887'. [ 411.479669][ T9218] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 411.544307][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.891'. [ 411.882458][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 411.919007][ T9235] ip6gre1: entered allmulticast mode [ 411.920073][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 413.541540][ T9317] netlink: 256 bytes leftover after parsing attributes in process `syz.0.916'. [ 413.805449][ T9335] x_tables: duplicate underflow at hook 3 [ 414.106755][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.927'. [ 414.158113][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.927'. [ 414.260383][ T9359] netlink: 14 bytes leftover after parsing attributes in process `syz.2.930'. [ 414.595302][ T9380] netlink: 'syz.0.934': attribute type 11 has an invalid length. [ 414.720071][ T9359] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.733113][ T9359] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.745178][ T9359] ` (unregistering): Released all slaves [ 414.766134][ T9379] veth1_macvtap: left promiscuous mode [ 414.774487][ T9379] macsec0: entered promiscuous mode [ 415.012585][ T9403] netlink: 'syz.0.940': attribute type 21 has an invalid length. [ 415.071485][ T9403] netlink: 128 bytes leftover after parsing attributes in process `syz.0.940'. [ 415.123469][ T9403] raw_sendmsg: syz.0.940 forgot to set AF_INET. Fix it! [ 415.716292][ T9443] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 415.855650][ T9451] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 416.271904][ T9466] SET target dimension over the limit! [ 416.296612][ T9471] __nla_validate_parse: 1 callbacks suppressed [ 416.296632][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 416.390555][ T9474] netlink: 'syz.3.960': attribute type 10 has an invalid length. [ 416.407159][ T9474] team0: Port device dummy0 added [ 416.524261][ T9478] netlink: 'syz.0.961': attribute type 3 has an invalid length. [ 416.687961][ T9488] netlink: 'syz.4.967': attribute type 2 has an invalid length. [ 416.716960][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 416.907577][ T9497] netlink: 'syz.1.966': attribute type 2 has an invalid length. [ 417.202468][ T9520] ieee802154 phy0 wpan0: encryption failed: -22 [ 417.224202][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 417.403042][ T9532] netlink: 'syz.2.976': attribute type 10 has an invalid length. [ 417.440259][ T9535] tipc: Enabled bearer , priority 2 [ 417.453299][ T9539] netlink: 'syz.2.976': attribute type 10 has an invalid length. [ 417.497806][ T9542] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 417.554023][ T9536] can: request_module (can-proto-0) failed. [ 417.649408][ T9542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 417.986387][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 418.054604][ T9579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.990'. [ 418.330131][ T9589] 8021q: VLANs not supported on ipvlan0 [ 418.747272][ T9617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1001'. [ 418.818067][ T9623] netlink: 'syz.3.1001': attribute type 12 has an invalid length. [ 418.871991][ T9617] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1001'. [ 419.801880][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 419.956554][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 419.990672][ T9681] macsec2: entered promiscuous mode [ 420.006501][ T9681] bridge0: entered promiscuous mode [ 420.016848][ T9681] macsec2: entered allmulticast mode [ 420.031032][ T9681] bridge0: entered allmulticast mode [ 420.052269][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 420.064634][ T9681] bridge0: port 3(macsec2) entered blocking state [ 420.090229][ T9681] bridge0: port 3(macsec2) entered disabled state [ 420.155269][ T9681] bridge0: left allmulticast mode [ 420.167925][ T9681] bridge0: left promiscuous mode [ 420.259954][ T9687] macsec2: entered promiscuous mode [ 420.282105][ T9687] bridge0: entered promiscuous mode [ 420.290385][ T9687] macsec2: entered allmulticast mode [ 420.296953][ T9687] bridge0: entered allmulticast mode [ 420.305064][ T9687] bridge0: port 3(macsec2) entered blocking state [ 420.313600][ T9687] bridge0: port 3(macsec2) entered disabled state [ 420.321618][ T9702] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 420.336056][ T9687] bridge0: left allmulticast mode [ 420.346916][ T9687] bridge0: left promiscuous mode [ 420.392068][ T9695] bond1 (unregistering): Released all slaves [ 420.418525][ T9684] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.426239][ T9684] bridge0: port 2(bridge_slave_1) entered listening state [ 420.434398][ T9684] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.442310][ T9684] bridge0: port 1(bridge_slave_0) entered listening state [ 420.456629][ T9684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.684072][ T9711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.694718][ T9708] openvswitch: netlink: IPv4 tunnel dst address is zero [ 420.801536][ T9718] SET target dimension over the limit! [ 420.810787][ T9718] validate_nla: 1 callbacks suppressed [ 420.810815][ T9718] netlink: 'syz.0.1031': attribute type 10 has an invalid length. [ 420.834966][ T9718] bridge0: port 4(team0) entered blocking state [ 420.858651][ T9718] bridge0: port 4(team0) entered disabled state [ 420.915984][ T9718] team0: entered allmulticast mode [ 420.946169][ T9718] team_slave_0: entered allmulticast mode [ 420.969485][ T9718] team_slave_1: entered allmulticast mode [ 420.992099][ T9718] team0: entered promiscuous mode [ 421.008905][ T9718] team_slave_0: entered promiscuous mode [ 421.022027][ T9718] team_slave_1: entered promiscuous mode [ 421.038444][ T9726] netlink: 'syz.1.1032': attribute type 20 has an invalid length. [ 421.049309][ T9726] netlink: 'syz.1.1032': attribute type 20 has an invalid length. [ 421.095509][ T9727] syzkaller0: entered promiscuous mode [ 421.142687][ T9727] syzkaller0: entered allmulticast mode [ 421.340212][ T9731] tipc: New replicast peer: 255.255.255.255 [ 421.354211][ T9731] tipc: Enabled bearer , priority 10 [ 421.478734][ T9753] __nla_validate_parse: 5 callbacks suppressed [ 421.478764][ T9753] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1039'. [ 421.634653][ T9762] Bluetooth: hci0: unsupported parameter 512 [ 421.652840][ T9762] Bluetooth: hci0: invalid length 11, exp 2 for type 21 [ 421.897329][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1044'. [ 422.022236][ T9780] syzkaller0: entered promiscuous mode [ 422.038783][ T9780] syzkaller0: entered allmulticast mode [ 422.469146][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 422.481861][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 422.506429][ T9803] IPv6: addrconf: prefix option has invalid lifetime [ 422.590747][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1051'. [ 422.645869][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 423.090927][ T30] audit: type=1107 audit(1760953347.183:2): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 423.131922][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 423.309478][ T9844] netlink: 'syz.1.1062': attribute type 21 has an invalid length. [ 423.331916][ T9844] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1062'. [ 423.369663][ T9844] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1062'. [ 423.395913][ T9844] syzkaller0: entered promiscuous mode [ 423.404135][ T9844] syzkaller0: entered allmulticast mode [ 423.520739][ T9855] tipc: Enabling of bearer rejected, failed to enable media [ 423.807909][ T9876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1068'. [ 423.865866][ T9881] netlink: 'syz.2.1071': attribute type 1 has an invalid length. [ 424.002033][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'. [ 424.195268][ T9881] veth7: entered promiscuous mode [ 424.336596][ T9901] IPv6: sit3: Disabled Multicast RS [ 424.368748][ T9901] sit3: entered allmulticast mode [ 424.547520][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.555287][ C0] bridge0: topology change detected, propagating [ 424.562244][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.569615][ C0] bridge0: topology change detected, propagating [ 424.855297][ T9930] smc: net device vcan0 applied user defined pnetid SYZ1 [ 424.866123][ T9932] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20001 [ 425.079030][ T9945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1089'. [ 425.123328][ T9945] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 425.168913][ T9950] netlink: 'syz.3.1091': attribute type 1 has an invalid length. [ 425.319061][ T9950] bond5: entered promiscuous mode [ 425.326512][ T9950] 8021q: adding VLAN 0 to HW filter on device bond5 [ 425.336549][ T9950] netlink: 'syz.3.1091': attribute type 1 has an invalid length. [ 425.358042][ T9950] netlink: 'syz.3.1091': attribute type 1 has an invalid length. [ 425.398530][ T9950] netlink: 'syz.3.1091': attribute type 1 has an invalid length. [ 425.627855][ T9951] 8021q: adding VLAN 0 to HW filter on device bond5 [ 425.635754][ T9951] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 425.654825][ T9951] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 425.676960][ T9951] bond5: (slave wireguard0): making interface the new active one [ 425.687720][ T9951] wireguard0: entered promiscuous mode [ 425.700486][ T9951] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 425.805144][ T9981] xt_l2tp: wrong L2TP version: 0 [ 425.822377][ T9951] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 425.879704][ T9951] bond5: (slave wireguard1): Enslaving as a backup interface with an up link [ 425.969003][ T9951] bond5: (slave wireguard2): The slave device specified does not support setting the MAC address [ 426.030814][ T9951] bond5: (slave wireguard2): Enslaving as a backup interface with an up link [ 426.453748][T10025] validate_nla: 29 callbacks suppressed [ 426.453769][T10025] netlink: 'syz.1.1112': attribute type 5 has an invalid length. [ 426.554837][T10037] sctp: [Deprecated]: syz.3.1115 (pid 10037) Use of int in maxseg socket option. [ 426.554837][T10037] Use struct sctp_assoc_value instead [ 426.752071][T10047] __nla_validate_parse: 10 callbacks suppressed [ 426.752095][T10047] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1117'. [ 427.105448][T10062] netlink: 'syz.4.1122': attribute type 5 has an invalid length. [ 427.262301][T10072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.340816][T10072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.395937][T10078] Cannot find add_set index 0 as target [ 427.410928][T10080] netlink: 'syz.0.1129': attribute type 13 has an invalid length. [ 427.441697][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 427.470774][T10082] nbd: illegal input index -1 [ 427.484238][T10080] netlink: 'syz.0.1129': attribute type 13 has an invalid length. [ 427.509347][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 427.602557][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 427.894073][T10105] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 427.927892][T10105] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 428.031497][T10112] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1141'. [ 428.121676][T10116] netlink: 'syz.3.1143': attribute type 10 has an invalid length. [ 428.131713][T10116] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 428.442141][T10131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1148'. [ 428.485241][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1149'. [ 428.650897][T10146] batadv_slave_1: entered promiscuous mode [ 428.664414][T10143] batadv_slave_1: left promiscuous mode [ 428.692932][T10148] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1153'. [ 429.154040][T10171] Bluetooth: hci0: unsupported parameter 12336 [ 429.185984][T10171] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 429.221461][T10171] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1160'. [ 429.271645][T10177] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 429.347259][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 429.429129][T10187] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 429.445344][T10177] bond5 (unregistering): Released all slaves [ 429.729557][T10201] openvswitch: netlink: Flow key attr not present in new flow. [ 429.851374][T10208] tipc: Resetting bearer [ 429.870912][T10208] syzkaller1: entered allmulticast mode [ 430.149296][T10226] netlink: 'syz.3.1180': attribute type 10 has an invalid length. [ 430.160408][T10226] bridge0: port 3(team0) entered blocking state [ 430.169251][T10226] bridge0: port 3(team0) entered disabled state [ 430.176713][T10226] team0: entered allmulticast mode [ 430.183869][T10226] team_slave_0: entered allmulticast mode [ 430.191473][T10226] team_slave_1: entered allmulticast mode [ 430.223927][T10226] dummy0: entered allmulticast mode [ 430.246616][T10226] team0: entered promiscuous mode [ 430.267501][T10226] team_slave_0: entered promiscuous mode [ 430.279272][T10226] team_slave_1: entered promiscuous mode [ 430.291365][T10226] dummy0: entered promiscuous mode [ 430.301633][T10226] bridge0: port 3(team0) entered blocking state [ 430.308354][T10226] bridge0: port 3(team0) entered listening state [ 430.863581][T10264] batadv_slave_0: entered promiscuous mode [ 430.871184][T10264] batadv_slave_0: entered allmulticast mode [ 431.033006][T10276] netlink: del zone limit has 8 unknown bytes [ 431.242412][T10286] netlink: 'syz.1.1196': attribute type 1 has an invalid length. [ 431.342105][T10286] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.442511][T10292] bond2: (slave veth5): Enslaving as an active interface with a down link [ 431.511584][T10295] bond2: (slave veth0_to_bond): making interface the new active one [ 431.555152][T10295] veth0_to_bond: entered promiscuous mode [ 431.578901][T10295] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 431.889346][T10325] __nla_validate_parse: 6 callbacks suppressed [ 431.889365][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'. [ 432.009938][T10328] veth0: entered promiscuous mode [ 432.024953][T10331] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜z [ 432.040323][T10327] netlink: del zone limit has 8 unknown bytes [ 432.066957][T10326] veth0: left promiscuous mode [ 432.375112][T10354] netlink: 'syz.3.1215': attribute type 12 has an invalid length. [ 432.387009][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'. [ 432.397568][ C1] bridge0: port 3(team0) entered learning state [ 432.447773][T10354] netlink: 'syz.3.1215': attribute type 12 has an invalid length. [ 432.486775][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'. [ 433.296482][T10409] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 433.350142][T10410] hsr0 speed is unknown, defaulting to 1000 [ 433.674128][T10426] netlink: 'syz.3.1235': attribute type 11 has an invalid length. [ 433.696948][T10426] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1235'. [ 433.800863][T10432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1237'. [ 433.954585][T10438] netlink: 'syz.2.1238': attribute type 13 has an invalid length. [ 433.972021][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 433.979277][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1238'. [ 433.993527][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1240'. [ 434.161057][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1243'. [ 434.278640][T10458] netlink: 'syz.1.1245': attribute type 21 has an invalid length. [ 434.288069][T10458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1245'. [ 434.349221][T10464] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.477536][ C1] bridge0: port 3(team0) entered forwarding state [ 434.484564][ C1] bridge0: topology change detected, propagating [ 434.728896][T10488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.231135][T10519] 8021q: adding VLAN 0 to HW filter on device bond5 [ 435.241941][T10522] bond5: option mode: unable to set because the bond device is up [ 435.559422][ T30] audit: type=1800 audit(1760953359.663:3): pid=10542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1267" name="memory.events" dev="tmpfs" ino=1258 res=0 errno=0 [ 435.608092][ T30] audit: type=1804 audit(1760953359.683:4): pid=10542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1267" name="/newroot/243/memory.events" dev="tmpfs" ino=1258 res=1 errno=0 [ 435.712168][T10546] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 435.813608][T10549] tipc: Enabled bearer , priority 0 [ 435.829691][T10549] syzkaller0: entered promiscuous mode [ 435.837117][T10549] syzkaller0: entered allmulticast mode [ 435.889842][T10549] tipc: Resetting bearer [ 435.910986][T10548] tipc: Resetting bearer [ 435.968629][T10548] tipc: Disabling bearer [ 436.068672][T10568] netlink: 'syz.0.1275': attribute type 7 has an invalid length. [ 436.077318][T10568] netlink: 'syz.0.1275': attribute type 8 has an invalid length. [ 436.156207][T10576] tc_dump_action: action bad kind [ 436.359124][T10591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.565394][T10600] pim6reg: entered allmulticast mode [ 436.574620][T10600] pim6reg: left allmulticast mode [ 436.856470][T10618] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 437.194925][T10642] __nla_validate_parse: 21 callbacks suppressed [ 437.194954][T10642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1298'. [ 437.319359][T10648] netlink: 'syz.2.1297': attribute type 1 has an invalid length. [ 437.496391][T10650] bond6: (slave geneve2): making interface the new active one [ 437.505633][T10650] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 437.523904][ T9656] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 437.536416][T10652] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.604655][ T9656] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 437.631863][ T9656] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 437.643898][ T9656] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 437.750887][ T52] Bluetooth: hci0: command tx timeout [ 437.758137][T10670] netlink: 'syz.3.1306': attribute type 4 has an invalid length. [ 437.834806][T10679] netlink: 'syz.3.1306': attribute type 4 has an invalid length. [ 437.894975][T10682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1306'. [ 438.371717][T10709] netlink: 'syz.2.1315': attribute type 25 has an invalid length. [ 438.401772][T10711] netlink: 'syz.2.1315': attribute type 25 has an invalid length. [ 438.468599][T10682] bridge0: port 3(team0) entered disabled state [ 438.475687][T10682] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.483346][T10682] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.795060][T10682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.816558][T10682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.124233][ T5961] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.156881][ T5961] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 439.176263][ T5961] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.203012][ T5961] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.232510][ T5961] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 439.267048][ T5961] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.296003][ T5961] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.315274][ T5961] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 439.358153][ T5961] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.386493][ T5961] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.436798][ T5961] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 439.490689][ T5961] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.553062][T10738] vlan3: entered allmulticast mode [ 439.851672][T10754] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1321'. [ 439.892954][T10754] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 439.966471][T10756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1325'. [ 440.098725][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1323'. [ 440.681639][T10789] veth0: entered promiscuous mode [ 440.799811][T10809] Bluetooth: hci0: invalid length 39, exp 2 for type 18 [ 440.834575][T10809] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1338'. [ 440.922384][T10788] veth0: left promiscuous mode [ 441.177005][T10826] netlink: 'syz.0.1345': attribute type 1 has an invalid length. [ 441.418229][T10839] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1350'. [ 441.460179][T10841] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1351'. [ 441.491670][T10841] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1351'. [ 441.611330][T10845] tipc: Enabled bearer , priority 0 [ 441.632634][T10845] syzkaller0: entered promiscuous mode [ 441.646550][T10845] syzkaller0: entered allmulticast mode [ 441.657047][T10852] bridge0: port 3(veth0_to_bridge) entered blocking state [ 441.687940][T10852] bridge0: port 3(veth0_to_bridge) entered disabled state [ 441.707221][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 441.718863][T10852] veth0_to_bridge: entered allmulticast mode [ 441.727022][T10852] veth0_to_bridge: entered promiscuous mode [ 441.749009][T10845] veth1_macvtap: left promiscuous mode [ 441.791738][T10845] tipc: Resetting bearer [ 441.872584][T10842] tipc: Resetting bearer [ 441.935796][T10842] tipc: Disabling bearer [ 441.979025][T10868] netlink: 'syz.3.1362': attribute type 4 has an invalid length. [ 442.329749][T10879] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 442.377042][T10879] bond7: option packets_per_slave: allowed values 0 - 65535 [ 442.396538][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 442.435590][T10879] bond7 (unregistering): Released all slaves [ 442.572129][T10898] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 442.871606][T10895] hsr_slave_1 (unregistering): left promiscuous mode [ 442.902391][T10879] syzkaller0: entered promiscuous mode [ 442.917506][T10879] syzkaller0: entered allmulticast mode [ 443.070577][ T12] veth0_to_bond: left promiscuous mode [ 443.590040][T10935] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1379'. [ 443.689721][T10946] tipc: Enabled bearer , priority 0 [ 443.698849][T10946] syzkaller0: entered promiscuous mode [ 443.704375][T10946] syzkaller0: entered allmulticast mode [ 443.724213][T10946] tipc: Resetting bearer [ 443.758165][T10944] tipc: Resetting bearer [ 443.829414][T10944] tipc: Disabling bearer [ 444.117751][T10975] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 444.224749][T10980] veth0: entered promiscuous mode [ 444.250517][T10978] veth0: left promiscuous mode [ 444.432473][T10996] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1398'. [ 444.467780][T10996] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1398'. [ 444.487872][T10996] netlink: 'syz.4.1398': attribute type 6 has an invalid length. [ 444.501945][T10996] netlink: 'syz.4.1398': attribute type 5 has an invalid length. [ 444.517848][T10996] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1398'. [ 444.563624][T10996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1398'. [ 444.573826][T10996] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1398'. [ 444.908717][T11032] Unsupported ieee802154 address type: 0 [ 445.409539][T11058] netlink: 'syz.3.1416': attribute type 10 has an invalid length. [ 445.428046][T11058] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 445.543027][T11069] tipc: Enabling of bearer rejected, failed to enable media [ 445.674854][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.689678][T11074] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1419'. [ 445.700256][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.784888][T11088] Driver unsupported XDP return value 0 on prog (id 418) dev N/A, expect packet loss! [ 445.805330][T11088] netlink: 'syz.3.1422': attribute type 24 has an invalid length. [ 445.977229][T11094] vlan0: entered allmulticast mode [ 445.994755][T11094] veth1: entered allmulticast mode [ 446.020448][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 446.038760][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 446.374502][T11129] ip6erspan0: entered promiscuous mode [ 446.381160][T11129] ip6erspan0: entered allmulticast mode [ 447.190314][T11150] can: request_module (can-proto-5) failed. [ 447.382740][T11162] netlink: 'syz.1.1442': attribute type 2 has an invalid length. [ 447.467951][T11168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.520029][T11167] netlink: 'syz.3.1446': attribute type 4 has an invalid length. [ 447.535278][T11171] __nla_validate_parse: 4 callbacks suppressed [ 447.535297][T11171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1447'. [ 447.705155][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1445'. [ 447.821580][T11184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1450'. [ 447.898338][T11181] tipc: Enabled bearer , priority 0 [ 447.984809][T11190] SET target dimension over the limit! [ 448.039253][T11179] tipc: Resetting bearer [ 449.940780][T11179] tipc: Disabling bearer [ 449.961859][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'. [ 449.971374][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'. [ 449.981638][T11198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1454'. [ 450.218168][T11229] netlink: 'syz.1.1461': attribute type 1 has an invalid length. [ 450.233652][T11229] netlink: 'syz.1.1461': attribute type 11 has an invalid length. [ 450.248092][T11229] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1461'. [ 450.419483][T11244] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.626136][T11252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1473'. [ 450.725909][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1475'. [ 450.935074][T11266] netlink: 'syz.2.1478': attribute type 1 has an invalid length. [ 450.967511][T11266] netlink: 'syz.2.1478': attribute type 3 has an invalid length. [ 450.968369][T11268] bond0: entered promiscuous mode [ 450.975913][T11266] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1478'. [ 451.016153][T11268] bond_slave_0: entered promiscuous mode [ 451.024604][T11268] bond_slave_1: entered promiscuous mode [ 451.031311][T11268] bond0: entered allmulticast mode [ 451.038331][T11268] bond_slave_0: entered allmulticast mode [ 451.050443][T11268] bond_slave_1: entered allmulticast mode [ 451.175973][T11280] netlink: 'syz.4.1483': attribute type 7 has an invalid length. [ 451.201720][T11280] netlink: 'syz.4.1483': attribute type 8 has an invalid length. [ 451.695430][T11323] netlink: 'syz.0.1495': attribute type 26 has an invalid length. [ 451.724217][T11323] netlink: 'syz.0.1495': attribute type 26 has an invalid length. [ 452.026528][T11343] tipc: Enabling of bearer rejected, already enabled [ 452.092236][T11350] openvswitch: netlink: Key type 112 is out of range max 32 [ 452.491046][T11371] netlink: 'syz.2.1510': attribute type 1 has an invalid length. [ 452.506331][T11371] block nbd1: not configured, cannot reconfigure [ 452.548180][T11373] __nla_validate_parse: 16 callbacks suppressed [ 452.548204][T11373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1511'. [ 452.571516][T11373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1511'. [ 452.590797][T11373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1511'. [ 452.608162][T11373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1511'. [ 452.679816][T11380] xt_policy: output policy not valid in PREROUTING and INPUT [ 452.703813][T11375] can: request_module (can-proto-0) failed. [ 452.797139][T11387] netlink: 'syz.1.1515': attribute type 1 has an invalid length. [ 453.063474][T11399] netlink: 'syz.0.1519': attribute type 1 has an invalid length. [ 453.073068][T11399] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1519'. [ 453.089649][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 453.789529][T11404] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.800198][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'. [ 453.861508][T11412] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1524'. [ 453.873723][T11412] team0: No ports can be present during mode change [ 454.093919][T11424] syzkaller0: entered promiscuous mode [ 454.105289][T11424] syzkaller0: entered allmulticast mode [ 454.292830][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1530'. [ 454.302668][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1530'. [ 454.525646][T11438] tipc: Enabled bearer , priority 0 [ 454.695895][T11438] tipc: Disabling bearer [ 454.840039][T11461] mac80211_hwsim hwsim11 : renamed from wlan1 [ 454.964638][T11463] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1536) ! [ 455.418373][T11499] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 455.972750][T11533] validate_nla: 5 callbacks suppressed [ 455.972770][T11533] netlink: 'syz.1.1560': attribute type 30 has an invalid length. [ 456.144111][T11542] lo: entered allmulticast mode [ 456.178868][T11542] lo: left allmulticast mode [ 456.378638][T11554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.525855][T11562] bond0: mtu less than device minimum [ 456.611850][T11564] tipc: Enabled bearer , priority 0 [ 456.624948][T11564] syzkaller0: entered promiscuous mode [ 456.633309][T11564] syzkaller0: entered allmulticast mode [ 456.640415][T11566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.641449][T11568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.688395][T11564] tipc: Resetting bearer [ 456.700720][T11563] tipc: Resetting bearer [ 456.746091][T11563] tipc: Disabling bearer [ 457.101361][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.121655][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.150976][T11592] netlink: 'syz.3.1582': attribute type 1 has an invalid length. [ 457.157562][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.159689][T11592] netlink: 'syz.3.1582': attribute type 2 has an invalid length. [ 457.210509][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.244921][T11593] tunl0: entered promiscuous mode [ 457.260327][T11593] tunl0: entered allmulticast mode [ 457.611526][T11615] : entered promiscuous mode [ 457.737857][T11619] netlink: 'syz.4.1588': attribute type 1 has an invalid length. [ 458.119526][T11639] __nla_validate_parse: 10 callbacks suppressed [ 458.119549][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1596'. [ 458.188156][T11643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1597'. [ 458.239571][T11646] netlink: 'syz.1.1599': attribute type 1 has an invalid length. [ 458.362228][T11648] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 458.446729][T11652] veth7: entered promiscuous mode [ 458.494639][T11652] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 458.636358][T11672] wg1 speed is unknown, defaulting to 1000 [ 458.655109][T11672] wg1 speed is unknown, defaulting to 1000 [ 458.672453][T11672] wg1 speed is unknown, defaulting to 1000 [ 458.718975][T11672] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 458.761576][T11672] wg1 speed is unknown, defaulting to 1000 [ 458.793565][T11679] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1608'. [ 458.803408][T11672] wg1 speed is unknown, defaulting to 1000 [ 458.810821][T11672] wg1 speed is unknown, defaulting to 1000 [ 458.842364][T11679] ip6erspan0: entered promiscuous mode [ 458.848709][T11679] ip6erspan0: entered allmulticast mode [ 458.867508][T11672] wg1 speed is unknown, defaulting to 1000 [ 458.893015][T11672] wg1 speed is unknown, defaulting to 1000 [ 459.726788][T11686] syzkaller1: entered promiscuous mode [ 459.743579][T11686] syzkaller1: entered allmulticast mode [ 460.029565][T11699] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1614'. [ 460.044391][T11702] tipc: Enabled bearer , priority 0 [ 460.054052][T11702] syzkaller0: entered promiscuous mode [ 460.077633][T11702] syzkaller0: entered allmulticast mode [ 460.113332][T11702] tipc: Resetting bearer [ 460.151743][T11701] tipc: Resetting bearer [ 460.299573][T11701] tipc: Disabling bearer [ 460.994574][T11731] hsr0 speed is unknown, defaulting to 1000 [ 461.059856][T11731] wg1 speed is unknown, defaulting to 1000 [ 461.120197][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1620'. [ 461.167436][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1620'. [ 461.212278][T11727] 8021q: VLANs not supported on gre0 [ 461.548115][T11753] hsr0 speed is unknown, defaulting to 1000 [ 461.563629][T11753] wg1 speed is unknown, defaulting to 1000 [ 461.791247][T11768] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.1633'. [ 461.802372][T11768] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 461.975166][T11772] dvmrp0: entered allmulticast mode [ 462.077030][T11731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1622'. [ 462.611348][T11807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1644'. [ 462.886160][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1649'. [ 463.234011][T11843] xt_TCPMSS: Only works on TCP SYN packets [ 463.455764][T11855] tipc: Enabling of bearer rejected, failed to enable media [ 463.533349][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1659'. [ 463.600157][T11864] IPVS: set_ctl: invalid protocol: 47 172.20.20.49:20000 [ 463.729093][T11874] netlink: 'syz.3.1662': attribute type 83 has an invalid length. [ 463.825488][T11877] syzkaller1: entered promiscuous mode [ 463.844159][T11877] syzkaller1: entered allmulticast mode [ 463.932560][T11879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1665'. [ 463.943329][T11884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1666'. [ 464.052785][T11890] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1668'. [ 465.133059][T11940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.280363][T11950] sch_fq: defrate 0 ignored. [ 465.394267][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1685'. [ 465.419150][T11956] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 465.737650][T11986] netlink: 'syz.4.1690': attribute type 6 has an invalid length. [ 465.746344][T11987] netlink: 'syz.4.1690': attribute type 6 has an invalid length. [ 465.793671][T11975] syz.3.1689: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 465.814825][T11975] CPU: 0 UID: 0 PID: 11975 Comm: syz.3.1689 Not tainted syzkaller #0 PREEMPT(full) [ 465.814857][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 465.814878][T11975] Call Trace: [ 465.814887][T11975] [ 465.814897][T11975] dump_stack_lvl+0x189/0x250 [ 465.814927][T11975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.814948][T11975] ? __pfx__printk+0x10/0x10 [ 465.814968][T11975] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 465.814988][T11975] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 465.815009][T11975] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 465.815032][T11975] warn_alloc+0x214/0x310 [ 465.815075][T11975] ? __pfx_warn_alloc+0x10/0x10 [ 465.815109][T11975] ? __get_vm_area_node+0x28f/0x300 [ 465.815133][T11975] ? nf_tables_newset+0x1330/0x2540 [ 465.815159][T11975] __vmalloc_node_range_noprof+0x690/0x12d0 [ 465.815215][T11975] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 465.815239][T11975] ? nf_tables_newset+0x1330/0x2540 [ 465.815265][T11975] ? rcu_is_watching+0x15/0xb0 [ 465.815297][T11975] ? nf_tables_newset+0x1330/0x2540 [ 465.815320][T11975] __kvmalloc_node_noprof+0x674/0x910 [ 465.815346][T11975] ? nf_tables_newset+0x1330/0x2540 [ 465.815373][T11975] ? nft_set_lookup+0x128/0x150 [ 465.815404][T11975] ? nft_hash_privsize+0x6f/0xf0 [ 465.815440][T11975] nf_tables_newset+0x1330/0x2540 [ 465.815478][T11975] ? __pfx_nf_tables_newset+0x10/0x10 [ 465.815526][T11975] ? __nla_parse+0x40/0x60 [ 465.815557][T11975] nfnetlink_rcv+0x11d9/0x2590 [ 465.815625][T11975] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 465.815712][T11975] ? netlink_deliver_tap+0x2e/0x1b0 [ 465.815764][T11975] netlink_unicast+0x82f/0x9e0 [ 465.815802][T11975] ? __pfx_netlink_unicast+0x10/0x10 [ 465.815833][T11975] ? netlink_sendmsg+0x642/0xb30 [ 465.815862][T11975] ? skb_put+0x11b/0x210 [ 465.815898][T11975] netlink_sendmsg+0x805/0xb30 [ 465.815940][T11975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.815984][T11975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.816018][T11975] __sock_sendmsg+0x21c/0x270 [ 465.816106][T11975] ____sys_sendmsg+0x505/0x830 [ 465.816147][T11975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.816192][T11975] ? import_iovec+0x74/0xa0 [ 465.816225][T11975] ___sys_sendmsg+0x21f/0x2a0 [ 465.816248][T11975] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.816312][T11975] ? __fget_files+0x2a/0x420 [ 465.816337][T11975] ? __fget_files+0x3a0/0x420 [ 465.816376][T11975] __x64_sys_sendmsg+0x19b/0x260 [ 465.816400][T11975] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.816441][T11975] ? do_syscall_64+0xbe/0xfa0 [ 465.816467][T11975] do_syscall_64+0xfa/0xfa0 [ 465.816486][T11975] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.816507][T11975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.816527][T11975] ? clear_bhb_loop+0x60/0xb0 [ 465.816554][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.816581][T11975] RIP: 0033:0x7f95ed98efc9 [ 465.816601][T11975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.816619][T11975] RSP: 002b:00007f95ee790038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.816641][T11975] RAX: ffffffffffffffda RBX: 00007f95edbe5fa0 RCX: 00007f95ed98efc9 [ 465.816657][T11975] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 465.816670][T11975] RBP: 00007f95eda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 465.816682][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.816694][T11975] R13: 00007f95edbe6038 R14: 00007f95edbe5fa0 R15: 00007ffd2558f608 [ 465.816730][T11975] [ 465.816743][T11975] Mem-Info: [ 465.929206][T11986] bond3: entered allmulticast mode [ 465.933101][T11975] active_anon:4643 inactive_anon:0 isolated_anon:0 [ 465.933101][T11975] active_file:2564 inactive_file:39930 isolated_file:0 [ 465.933101][T11975] unevictable:768 dirty:55 writeback:0 [ 465.933101][T11975] slab_reclaimable:11314 slab_unreclaimable:100941 [ 465.933101][T11975] mapped:28861 shmem:1358 pagetables:1052 [ 465.933101][T11975] sec_pagetables:0 bounce:0 [ 465.933101][T11975] kernel_misc_reclaimable:0 [ 465.933101][T11975] free:1325865 free_pcp:13910 free_cma:0 [ 465.956692][T11986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.960750][T11975] Node 0 active_anon:18572kB inactive_anon:0kB active_file:10256kB inactive_file:159516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115444kB dirty:220kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13232kB pagetables:4096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 465.981802][T11986] bridge0: port 3(bond3) entered blocking state [ 465.982106][T11975] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 465.994518][T11986] bridge0: port 3(bond3) entered disabled state [ 465.998967][T11975] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 465.999057][T11975] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 465.999107][T11975] Node 0 DMA32 free:1391240kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18572kB inactive_anon:0kB active_file:10256kB inactive_file:159516kB unevictable:1536kB writepending:220kB zspages:0kB present:3129332kB managed:2561620kB mlocked:0kB bounce:0kB free_pcp:37704kB local_pcp:21300kB free_cma:0kB [ 466.034270][T11986] bond3: entered promiscuous mode [ 466.058161][T11975] lowmem_reserve[]: [ 466.101022][T11986] bridge0: port 3(bond3) entered blocking state [ 466.106503][T11975] 0 [ 466.111623][T11986] bridge0: port 3(bond3) entered forwarding state [ 466.450696][T11975] 0 1 1 1 [ 466.454039][T11975] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.454663][ T1111] bridge0: port 3(bond3) entered disabled state [ 466.488454][T11975] lowmem_reserve[]: 0 0 0 0 0 [ 466.499271][T11975] Node 1 Normal free:3896592kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18272kB local_pcp:9152kB free_cma:0kB [ 466.535640][T11975] lowmem_reserve[]: 0 0 0 0 0 [ 466.550013][T11975] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 466.567949][T12008] veth0: entered promiscuous mode [ 466.576907][T12005] veth0: left promiscuous mode [ 466.642339][T11975] Node 0 DMA32: 689*4kB (ME) 347*8kB (UM) 150*16kB (UM) 294*32kB (UM) 95*64kB (UME) 32*128kB (UME) 15*256kB (UME) 7*512kB (UM) 2*1024kB (UM) 7*2048kB (UME) 327*4096kB (M) = 1390716kB [ 466.663254][T11975] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 466.675378][T11975] Node 1 Normal: 218*4kB (UM) 59*8kB (UME) 37*16kB (UME) 132*32kB (UME) 38*64kB (UME) 7*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3896592kB [ 466.715728][T11975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.727655][T11975] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 466.730785][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1701'. [ 466.738401][T11975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.780212][T12019] bridge_slave_1: left allmulticast mode [ 466.790646][T11975] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 466.803228][T12019] bridge_slave_1: left promiscuous mode [ 466.823752][T12019] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.828840][T11975] 43848 total pagecache pages [ 466.836266][T11975] 0 pages in swap cache [ 466.870249][T11975] Free swap = 124996kB [ 466.876812][T12019] bridge_slave_0: left promiscuous mode [ 466.881954][T11975] Total swap = 124996kB [ 466.900284][T12019] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.915533][T12030] openvswitch: netlink: Unknown key attributes 1 [ 466.932107][T11975] 2097051 pages RAM [ 466.936222][T11975] 0 pages HighMem/MovableOnly [ 466.941313][T11975] 424556 pages reserved [ 466.945887][T11975] 0 pages cma reserved [ 467.076318][T12023] erspan0: entered promiscuous mode [ 467.082187][T12023] erspan0: entered allmulticast mode [ 467.415794][T12048] netlink: 'syz.2.1708': attribute type 8 has an invalid length. [ 467.504713][T12053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1710'. [ 467.530558][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1710'. [ 467.542898][T12058] netlink: 'syz.2.1708': attribute type 13 has an invalid length. [ 467.546476][T12057] netlink: 'syz.2.1708': attribute type 13 has an invalid length. [ 467.554268][T12053] block nbd1: Unsupported socket: should be TCP or UNIX. [ 467.563150][T12057] netlink: 'syz.2.1708': attribute type 17 has an invalid length. [ 467.574497][T12058] netlink: 'syz.2.1708': attribute type 17 has an invalid length. [ 467.599839][T12056] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1709'. [ 467.765511][T12064] openvswitch: netlink: Tunnel attr 10 has unexpected len 4 expected 2 [ 467.807892][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.835093][T12070] netlink: 'syz.0.1712': attribute type 10 has an invalid length. [ 467.903877][T12058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.926004][T12057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.951220][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.965473][T12070] dummy0: entered promiscuous mode [ 467.971338][T12070] dummy0: entered allmulticast mode [ 467.978046][T12070] team0: Port device dummy0 added [ 468.032782][T12072] netlink: 396 bytes leftover after parsing attributes in process `syz.1.1715'. [ 468.112072][T12074] netlink: 'syz.3.1716': attribute type 10 has an invalid length. [ 468.148406][T12074] bond0: (slave wlan1): Opening slave failed [ 468.710778][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.991711][T12129] __nla_validate_parse: 1 callbacks suppressed [ 468.991735][T12129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1733'. [ 469.029013][T12124] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 469.046693][T12124] bond5 (unregistering): Released all slaves [ 469.215861][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1736'. [ 469.252778][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1736'. [ 469.306504][T12143] bond7 (unregistering): Released all slaves [ 469.570778][T12155] validate_nla: 2 callbacks suppressed [ 469.570801][T12155] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 469.653832][T12160] netlink: 'syz.2.1742': attribute type 1 has an invalid length. [ 469.673476][T12160] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1742'. [ 469.874784][T12170] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 469.897134][T12175] netlink: 'syz.2.1746': attribute type 13 has an invalid length. [ 469.922563][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1746'. [ 469.945261][T12175] netlink: 'syz.2.1746': attribute type 13 has an invalid length. [ 469.974050][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1746'. [ 470.053435][T12178] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1744'. [ 470.294568][T12197] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1751'. [ 470.320102][T12200] tunl0: left promiscuous mode [ 470.330902][T12200] tunl0: left allmulticast mode [ 470.379998][T12200] erspan0: left promiscuous mode [ 470.393524][T12200] erspan0: left allmulticast mode [ 470.449891][T12202] netlink: 14448 bytes leftover after parsing attributes in process `syz.1.1753'. [ 470.465257][T12200] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.474015][T12200] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.573117][T12200] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 470.829038][T12217] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 471.055313][T12227] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 471.167315][T12237] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1763'. [ 471.268454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.444584][T12255] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 471.872619][T12283] netlink: 'syz.2.1774': attribute type 10 has an invalid length. [ 471.928805][T12289] delete_channel: no stack [ 472.122373][T12300] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1536) ! [ 472.248415][T12310] tipc: Enabled bearer , priority 0 [ 472.259045][T12310] syzkaller0: entered promiscuous mode [ 472.264737][T12310] syzkaller0: entered allmulticast mode [ 472.299980][T12310] tipc: Resetting bearer [ 472.315163][T12309] tipc: Resetting bearer [ 472.397764][T12309] tipc: Disabling bearer [ 472.564373][T12323] tipc: Enabling of bearer rejected, failed to enable media [ 472.640236][T12331] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 472.691984][T12331] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 472.741808][T12334] gre0: entered promiscuous mode [ 472.997301][T12354] netlink: 'syz.2.1795': attribute type 2 has an invalid length. [ 473.327193][T12372] xt_nat: multiple ranges no longer supported [ 474.009018][T12401] bridge0: port 4(veth0_to_bridge) entered blocking state [ 474.026852][T12401] bridge0: port 4(veth0_to_bridge) entered disabled state [ 474.044849][T12401] veth0_to_bridge: entered allmulticast mode [ 474.053648][T12401] veth0_to_bridge: entered promiscuous mode [ 474.273400][T12413] __nla_validate_parse: 8 callbacks suppressed [ 474.273425][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 474.313217][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 474.336678][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 474.350261][T12413] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1812'. [ 474.638917][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 474.691844][T12438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1820'. [ 474.913736][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 474.961502][T12445] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1823'. [ 475.010003][T12445] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1823'. [ 475.012624][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1823'. [ 475.117946][T12467] netlink: 'syz.3.1829': attribute type 1 has an invalid length. [ 475.585118][T12494] netlink: 'syz.1.1836': attribute type 18 has an invalid length. [ 475.595755][T12494] netlink: 'syz.1.1836': attribute type 18 has an invalid length. [ 476.145475][T12513] netlink: 'syz.2.1843': attribute type 10 has an invalid length. [ 476.179248][T12513] veth1_macvtap: left promiscuous mode [ 476.823500][T12553] tipc: Enabled bearer , priority 0 [ 476.921989][T12553] syzkaller0: entered promiscuous mode [ 476.932627][T12553] syzkaller0: entered allmulticast mode [ 476.958232][T12552] tipc: Resetting bearer [ 478.643856][T12552] tipc: Disabling bearer [ 479.532876][T12623] tipc: Enabled bearer , priority 0 [ 479.541628][T12623] syzkaller0: entered promiscuous mode [ 479.548090][T12623] syzkaller0: entered allmulticast mode [ 479.609288][T12623] tipc: Resetting bearer [ 479.634637][T12622] tipc: Resetting bearer [ 479.693440][T12622] tipc: Disabling bearer [ 479.736322][T12628] __nla_validate_parse: 7 callbacks suppressed [ 479.736342][T12628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1879'. [ 479.753984][T12628] netlink: 'syz.0.1879': attribute type 2 has an invalid length. [ 479.765631][T12628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1879'. [ 479.811997][T12628] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1879'. [ 479.950161][T12643] tipc: Enabled bearer , priority 0 [ 479.971969][T12643] tipc: Resetting bearer [ 479.982640][T12641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1883'. [ 480.068407][T12651] xt_cgroup: invalid path, errno=-2 [ 480.159326][T12650] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 480.159516][T12655] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1887'. [ 480.199611][T12655] netlink: 'syz.3.1887': attribute type 1 has an invalid length. [ 480.209469][T12655] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1887'. [ 480.259977][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1883'. [ 480.290587][T12660] tipc: Enabling of bearer rejected, already enabled [ 480.309908][T12661] tipc: Enabling of bearer rejected, already enabled [ 480.387080][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1890'. [ 480.423359][T12669] xt_bpf: check failed: parse error [ 480.432125][T12669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1891'. [ 480.472633][T12670] netlink: 'syz.3.1890': attribute type 1 has an invalid length. [ 480.480872][T12670] netlink: 'syz.3.1890': attribute type 1 has an invalid length. [ 480.775740][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1893'. [ 480.950957][T12682] openvswitch: netlink: Missing key (keys=40, expected=80) [ 481.166259][T12695] veth0: entered promiscuous mode [ 482.224345][T12751] netlink: 'syz.4.1916': attribute type 1 has an invalid length. [ 482.349157][T12752] tipc: Enabled bearer , priority 0 [ 482.359795][T12749] syzkaller0: entered promiscuous mode [ 482.365701][T12749] syzkaller0: entered allmulticast mode [ 482.424688][T12749] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 482.777255][T12747] tipc: Resetting bearer [ 482.882703][T12747] tipc: Disabling bearer [ 482.915709][T12785] batman_adv: batadv0: Adding interface: vlan2 [ 482.923039][T12785] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.960390][T12785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.990302][T12785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.000775][T12785] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 483.838847][T12827] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 483.906103][T12827] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 483.913867][T12833] netlink: 'syz.4.1936': attribute type 11 has an invalid length. [ 483.913894][T12833] netlink: 'syz.4.1936': attribute type 11 has an invalid length. [ 483.937170][T12827] gretap3: entered promiscuous mode [ 483.944083][T12827] gretap3: entered allmulticast mode [ 484.382886][T12854] xt_CT: No such helper "syz1" [ 484.533864][T12870] tc_dump_action: action bad kind [ 484.863956][T12881] tls_set_device_offload: netdev not found [ 484.878123][T12881] __nla_validate_parse: 47 callbacks suppressed [ 484.878148][T12881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1953'. [ 485.028481][T12885] tipc: Enabling of bearer rejected, failed to enable media [ 485.112801][T12889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1957'. [ 485.122689][T12889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1957'. [ 485.191541][T12894] netlink: 'syz.1.1958': attribute type 1 has an invalid length. [ 485.191929][T12889] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1957'. [ 485.210179][T12894] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1958'. [ 485.222283][T12894] netlink: 'syz.1.1958': attribute type 2 has an invalid length. [ 485.230918][T12894] netlink: 'syz.1.1958': attribute type 1 has an invalid length. [ 485.248066][T12897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1957'. [ 485.260931][T12897] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1957'. [ 485.317460][T12896] nbd4: detected capacity change from 0 to 63 [ 485.335868][T12899] block nbd4: NBD_DISCONNECT [ 485.355068][T12899] block nbd4: Disconnected due to user request. [ 485.369029][T12899] block nbd4: shutting down sockets [ 485.374271][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1960'. [ 485.625906][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1965'. [ 485.676304][T12923] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 485.931256][T12953] netlink: 'syz.4.1970': attribute type 1 has an invalid length. [ 485.939959][T12953] netlink: 'syz.4.1970': attribute type 2 has an invalid length. [ 486.058573][T12939] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1970'. [ 486.172297][T12962] ieee802154 phy0 wpan0: encryption failed: -22 [ 486.655978][T12996] netlink: 'syz.2.1985': attribute type 1 has an invalid length. [ 486.665686][T12998] netlink: 'syz.2.1985': attribute type 1 has an invalid length. [ 486.720866][T12996] bond8: (slave gretap1): making interface the new active one [ 486.731185][T12996] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 486.748985][T12996] 8021q: adding VLAN 0 to HW filter on device bond8 [ 487.448275][T13045] netlink: 'syz.4.1999': attribute type 1 has an invalid length. [ 487.467008][T13045] netlink: 'syz.4.1999': attribute type 1 has an invalid length. [ 487.475650][T13045] netlink: 'syz.4.1999': attribute type 1 has an invalid length. [ 487.491182][T13045] netlink: 'syz.4.1999': attribute type 2 has an invalid length. [ 487.713217][T12757] tipc: Resetting bearer [ 487.769515][T13066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.569146][T13091] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 488.580972][T13090] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 488.604382][T13091] team1: entered promiscuous mode [ 488.612872][T13091] team1: entered allmulticast mode [ 489.346973][T13135] bond10 (unregistering): Released all slaves [ 489.539402][T13154] NCSI netlink: No device for ifindex 0 [ 490.098961][T13194] __nla_validate_parse: 20 callbacks suppressed [ 490.098987][T13194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2044'. [ 490.334658][T13208] openvswitch: netlink: Unknown key attributes 1 [ 490.494407][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2050'. [ 490.777507][T13227] xt_CT: No such helper "syz1" [ 490.862530][T13236] syzkaller1: entered promiscuous mode [ 490.895882][T13236] syzkaller1: entered allmulticast mode [ 491.014252][T13246] validate_nla: 2 callbacks suppressed [ 491.014275][T13246] netlink: 'syz.3.2060': attribute type 10 has an invalid length. [ 491.046632][T13246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2060'. [ 491.072312][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2060'. [ 491.092703][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2060'. [ 491.116503][T13246] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 491.130467][T13246] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 491.157648][T13246] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 491.254111][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 491.267026][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2063'. [ 491.293209][T13258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2063'. [ 491.337824][T13260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2065'. [ 491.430786][T13269] openvswitch: netlink: Multiple metadata blocks provided [ 491.492599][T13272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.884146][T13293] netlink: 'syz.0.2073': attribute type 1 has an invalid length. [ 492.156603][T13308] tipc: Enabled bearer , priority 0 [ 492.179954][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2076'. [ 492.455010][T13325] syzkaller0: entered promiscuous mode [ 492.470838][T13325] syzkaller0: entered allmulticast mode [ 492.504086][ T5909] IPVS: starting estimator thread 0... [ 492.531136][T13307] tipc: Disabling bearer [ 492.576795][T13319] delete_channel: no stack [ 492.597458][T13329] IPVS: using max 28 ests per chain, 67200 per kthread [ 492.894742][T13348] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 493.121706][T13359] hsr0 speed is unknown, defaulting to 1000 [ 493.163541][T13359] wg1 speed is unknown, defaulting to 1000 [ 493.569996][T13387] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 494.102441][T13418] netlink: 'syz.0.2102': attribute type 6 has an invalid length. [ 494.111012][T13418] netlink: 'syz.0.2102': attribute type 5 has an invalid length. [ 494.193729][T13420] netlink: 'syz.2.2103': attribute type 1 has an invalid length. [ 494.204672][T13422] ipt_REJECT: TCP_RESET invalid for non-tcp [ 494.368963][T13426] netlink: 'syz.2.2106': attribute type 9 has an invalid length. [ 494.612082][T13433] netlink: 'syz.0.2109': attribute type 1 has an invalid length. [ 494.621353][T13435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.716141][T13439] netlink: 'syz.3.2108': attribute type 1 has an invalid length. [ 495.056943][T13471] syzkaller0: entered promiscuous mode [ 495.081223][T13471] syzkaller0: entered allmulticast mode [ 495.110377][T13462] tipc: Enabled bearer , priority 0 [ 495.170538][T13462] tipc: Resetting bearer [ 495.239456][T13462] tipc: Disabling bearer [ 495.268029][T13480] __nla_validate_parse: 14 callbacks suppressed [ 495.268053][T13480] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2121'. [ 495.291861][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'. [ 495.326655][T13481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.350473][T13481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.394475][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2123'. [ 495.431555][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2123'. [ 495.529277][T13498] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2127'. [ 495.555544][T13498] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2127'. [ 495.577184][T13498] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2127'. [ 495.615991][T13498] tipc: Enabling of bearer rejected, failed to enable media [ 495.925909][T13511] Cannot find add_set index 65532 as target [ 496.046042][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 496.055965][T13517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2133'. [ 496.270873][T13529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2137'. [ 496.352813][T13532] veth0_to_bridge: left allmulticast mode [ 496.379733][T13532] veth0_to_bridge: left promiscuous mode [ 496.397130][T13532] bridge0: port 4(veth0_to_bridge) entered disabled state [ 496.447856][T13532] team0: left allmulticast mode [ 496.487485][T13532] team_slave_0: left allmulticast mode [ 496.493755][T13532] team_slave_1: left allmulticast mode [ 496.525298][T13532] dummy0: left allmulticast mode [ 496.557468][T13532] team0: left promiscuous mode [ 496.577005][T13532] team_slave_0: left promiscuous mode [ 496.606909][T13532] team_slave_1: left promiscuous mode [ 496.613463][T13532] dummy0: left promiscuous mode [ 496.626693][T13532] bridge0: port 3(team0) entered disabled state [ 496.639630][T13532] bridge_slave_1: left allmulticast mode [ 496.647260][T13532] bridge_slave_1: left promiscuous mode [ 496.653786][T13532] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.664273][T13532] bridge_slave_0: left allmulticast mode [ 496.670315][T13532] bridge_slave_0: left promiscuous mode [ 496.676437][T13532] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.937127][T13567] netlink: 'syz.1.2146': attribute type 1 has an invalid length. [ 497.024098][T13573] sctp: [Deprecated]: syz.0.2150 (pid 13573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.024098][T13573] Use struct sctp_sack_info instead [ 498.120410][T13588] syzkaller0: entered allmulticast mode [ 498.121880][T13592] netlink: 'syz.2.2156': attribute type 1 has an invalid length. [ 498.154081][T13592] netlink: 'syz.2.2156': attribute type 1 has an invalid length. [ 499.836554][T13616] bridge0: port 4(vlan3) entered blocking state [ 499.861106][T13616] bridge0: port 4(vlan3) entered disabled state [ 499.877264][T13616] vlan3: entered allmulticast mode [ 499.883827][T13616] bridge0: entered allmulticast mode [ 499.892501][T13616] vlan3: left allmulticast mode [ 499.902382][T13616] bridge0: left allmulticast mode [ 500.010873][T13620] bond10: option miimon: invalid value (18446744073709551585) [ 500.020197][T13620] bond10: option miimon: allowed values 0 - 2147483647 [ 500.030267][T13620] bond10 (unregistering): Released all slaves [ 500.091767][T13624] netlink: 'syz.1.2162': attribute type 24 has an invalid length. [ 500.474417][T13641] __nla_validate_parse: 15 callbacks suppressed [ 500.474439][T13641] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2168'. [ 500.671654][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2172'. [ 500.759233][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2174'. [ 500.891032][T13659] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2175'. [ 501.110653][T13677] nbd: must specify a device to reconfigure [ 501.330998][T13693] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2186'. [ 501.378426][T13693] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2186'. [ 501.401518][T13693] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2186'. [ 501.464728][T13706] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2188'. [ 501.950618][T13736] syzkaller1: entered promiscuous mode [ 501.956749][T13736] syzkaller1: entered allmulticast mode [ 501.986603][T13739] 8021q: VLANs not supported on sit0 [ 502.250772][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2202'. [ 502.272289][T13761] : entered promiscuous mode [ 502.280243][T13754] syzkaller0: entered promiscuous mode [ 502.286038][T13754] syzkaller0: entered allmulticast mode [ 502.312851][T13758] netlink: 'syz.1.2203': attribute type 1 has an invalid length. [ 502.342982][T13754] netlink: 'syz.1.2203': attribute type 1 has an invalid length. [ 502.403111][T13758] 8021q: adding VLAN 0 to HW filter on device bond5 [ 502.705161][T13785] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 502.881401][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'. [ 502.946238][T13802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.251957][T13811] netlink: 'syz.1.2220': attribute type 1 has an invalid length. [ 503.276338][T13811] netlink: 'syz.1.2220': attribute type 3 has an invalid length. [ 503.314358][T13811] NCSI netlink: No device for ifindex 0 [ 503.365060][T13811] gretap1: entered promiscuous mode [ 503.371176][T13811] gretap1: entered allmulticast mode [ 503.688024][T13833] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 504.008873][T13845] syz.4.2231 (13845) used greatest stack depth: 17832 bytes left [ 504.205670][T13868] sctp: [Deprecated]: syz.4.2239 (pid 13868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 504.205670][T13868] Use struct sctp_sack_info instead [ 504.488958][T13882] netlink: 'syz.1.2243': attribute type 1 has an invalid length. [ 504.750619][T13889] syzkaller1: entered promiscuous mode [ 504.756340][T13889] syzkaller1: entered allmulticast mode [ 505.072166][T13914] netlink: 'syz.0.2255': attribute type 8 has an invalid length. [ 505.102632][T13916] netlink: 'syz.1.2256': attribute type 21 has an invalid length. [ 505.237810][T13926] lo: entered promiscuous mode [ 505.258212][T13926] tunl0: entered promiscuous mode [ 505.268297][T13926] gre0: entered promiscuous mode [ 505.291011][T13926] gretap0: entered promiscuous mode [ 505.297065][T13926] erspan0: entered promiscuous mode [ 505.322528][T13926] ip_vti0: entered promiscuous mode [ 505.416446][T13931] bond10: Removing last arp target with arp_interval on [ 505.425023][T13932] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 505.580397][T13946] __nla_validate_parse: 16 callbacks suppressed [ 505.580425][T13946] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2264'. [ 505.779223][T13966] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 505.920966][T13978] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2270'. [ 506.034555][T13983] batadv_slave_0: mtu less than device minimum [ 506.180491][T13987] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 506.229681][T13987] x_tables: duplicate underflow at hook 1 [ 506.413354][T13997] bond4 (unregistering): Released all slaves [ 506.449068][T14005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2280'. [ 506.725726][T14020] netlink: 'syz.3.2281': attribute type 1 has an invalid length. [ 506.903444][T14029] bond11: entered promiscuous mode [ 506.909186][T14029] bond11: entered allmulticast mode [ 506.909244][T14035] delete_channel: no stack [ 506.919391][T14029] 8021q: adding VLAN 0 to HW filter on device bond11 [ 507.005327][T14029] xt_CT: No such helper "syz1" [ 507.013165][T14039] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2288'. [ 507.081885][T14041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2289'. [ 507.111901][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.119304][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.130663][T14043] netlink: 'syz.1.2290': attribute type 29 has an invalid length. [ 507.169906][T14043] netlink: 'syz.1.2290': attribute type 29 has an invalid length. [ 507.191949][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2291'. [ 507.459173][T14061] netlink: 'syz.1.2294': attribute type 1 has an invalid length. [ 508.131847][T14094] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2303'. [ 508.195331][T14100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2305'. [ 508.283096][T14099] netlink: 'syz.4.2304': attribute type 2 has an invalid length. [ 508.291955][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 508.564206][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2311'. [ 508.991697][T14139] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 509.125251][T14142] bond6 (unregistering): Released all slaves [ 509.209354][T14145] netlink: 'syz.4.2318': attribute type 1 has an invalid length. [ 509.318655][T14148] veth0_to_bridge: entered promiscuous mode [ 509.380160][T14147] veth0_to_bridge: left promiscuous mode [ 509.736272][ T30] audit: type=1804 audit(1760953433.833:5): pid=14170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2325" name="/newroot/460/cgroup.controllers" dev="tmpfs" ino=2359 res=1 errno=0 [ 509.813603][ T30] audit: type=1800 audit(1760953433.883:6): pid=14170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2325" name="cgroup.controllers" dev="tmpfs" ino=2359 res=0 errno=0 [ 510.030571][T14191] netlink: 'syz.4.2333': attribute type 2 has an invalid length. [ 510.054301][T14191] €Â: renamed from caif0 [ 510.927820][T14216] ------------[ cut here ]------------ [ 510.933654][T14216] WARNING: CPU: 0 PID: 14216 at net/ipv4/route.c:1270 ip_rt_bug+0x2c/0x110 [ 510.942724][T14216] Modules linked in: [ 510.946910][T14216] CPU: 0 UID: 0 PID: 14216 Comm: syz.0.2341 Not tainted syzkaller #0 PREEMPT(full) [ 510.956631][T14216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 510.967155][T14216] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 510.972294][T14216] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 8b dd 08 f8 66 90 e8 84 dd 08 f8 31 ff 48 89 de ba 02 00 00 00 e8 d5 0d 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 11 9e 97 01 cc f3 0f [ 510.996988][T14216] RSP: 0018:ffffc9001bf27180 EFLAGS: 00010286 [ 511.003378][T14216] RAX: 49b8ff62d3d85b00 RBX: ffff888066c4fa00 RCX: 49b8ff62d3d85b00 [ 511.011532][T14216] RDX: 0000000000000002 RSI: ffffffff8d7e845f RDI: ffffffff8bc077e0 [ 511.019860][T14216] RBP: 0000000000000001 R08: ffffffff8f9e1377 R09: 1ffffffff1f3c26e [ 511.028177][T14216] R10: dffffc0000000000 R11: fffffbfff1f3c26f R12: dffffc0000000000 [ 511.036375][T14216] R13: dffffc0000000000 R14: ffff888066c4fa00 R15: ffff8881456f9e00 [ 511.044721][T14216] FS: 00007f18e30246c0(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 511.054393][T14216] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.061557][T14216] CR2: 000000110c2923ec CR3: 000000007789c000 CR4: 00000000003526f0 [ 511.070009][T14216] Call Trace: [ 511.073431][T14216] [ 511.076494][T14216] ip_push_pending_frames+0xbe/0x150 [ 511.081915][T14216] __icmp_send+0xfc3/0x1320 [ 511.086503][T14216] ? __icmp_send+0x1b9/0x1320 [ 511.091407][T14216] ? __pfx___icmp_send+0x10/0x10 [ 511.096708][T14216] ? ip_route_input_noref+0x98/0x250 [ 511.102733][T14216] ? __pfx_ip_route_input_noref+0x10/0x10 [ 511.109062][T14216] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 511.115007][T14216] ip_options_compile+0x80/0xb0 [ 511.120316][T14216] ip_rcv_finish_core+0xaa2/0x1c00 [ 511.125712][T14216] ip_rcv_finish+0x14c/0x2f0 [ 511.130667][T14216] NF_HOOK+0x30c/0x3a0 [ 511.134974][T14216] ? __pfx_ip_rcv_finish+0x10/0x10 [ 511.140384][T14216] ? NF_HOOK+0x9a/0x3a0 [ 511.144713][T14216] ? __pfx_NF_HOOK+0x10/0x10 [ 511.149421][T14216] ? ip_rcv_core+0x7f7/0xd00 [ 511.154088][T14216] ? __pfx_ip_rcv_finish+0x10/0x10 [ 511.159437][T14216] ? __pfx_ip_rcv+0x10/0x10 [ 511.164093][T14216] __netif_receive_skb+0x143/0x380 [ 511.169348][T14216] ? netif_receive_skb+0x115/0x790 [ 511.174795][T14216] netif_receive_skb+0x1cb/0x790 [ 511.179851][T14216] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 511.185831][T14216] ? __pfx_netif_receive_skb+0x10/0x10 [ 511.191500][T14216] ? tun_rx_batched+0x160/0x730 [ 511.196420][T14216] tun_rx_batched+0x1b9/0x730 [ 511.201469][T14216] ? __lock_acquire+0xab9/0xd20 [ 511.206392][T14216] ? __pfx_tun_rx_batched+0x10/0x10 [ 511.211731][T14216] ? tun_get_user+0x272f/0x3e90 [ 511.216786][T14216] tun_get_user+0x2b65/0x3e90 [ 511.221673][T14216] ? tun_get_user+0x6f6/0x3e90 [ 511.226840][T14216] ? tun_get_user+0x272f/0x3e90 [ 511.232067][T14216] ? aa_file_perm+0x44d/0x1550 [ 511.237065][T14216] ? __pfx_tun_get_user+0x10/0x10 [ 511.242434][T14216] ? ref_tracker_alloc+0x318/0x460 [ 511.247813][T14216] ? __lock_acquire+0xab9/0xd20 [ 511.252723][T14216] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 511.258380][T14216] ? tun_get+0x1c/0x2f0 [ 511.262872][T14216] ? tun_get+0x1c/0x2f0 [ 511.267166][T14216] ? tun_get+0x1c/0x2f0 [ 511.272249][T14216] tun_chr_write_iter+0x113/0x200 [ 511.277391][T14216] vfs_write+0x5c9/0xb30 [ 511.282051][T14216] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 511.288236][T14216] ? __pfx_vfs_write+0x10/0x10 [ 511.293797][T14216] ? __fget_files+0x2a/0x420 [ 511.299230][T14216] ksys_write+0x145/0x250 [ 511.303623][T14216] ? __pfx_ksys_write+0x10/0x10 [ 511.308674][T14216] ? do_syscall_64+0xbe/0xfa0 [ 511.313417][T14216] do_syscall_64+0xfa/0xfa0 [ 511.318305][T14216] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.323634][T14216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.330354][T14216] ? clear_bhb_loop+0x60/0xb0 [ 511.335101][T14216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.341374][T14216] RIP: 0033:0x7f18e218da7f [ 511.346044][T14216] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 511.366574][T14216] RSP: 002b:00007f18e3024000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 511.375379][T14216] RAX: ffffffffffffffda RBX: 00007f18e23e5fa0 RCX: 00007f18e218da7f [ 511.383903][T14216] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 511.392445][T14216] RBP: 00007f18e2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 511.400983][T14216] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 511.409236][T14216] R13: 00007f18e23e6038 R14: 00007f18e23e5fa0 R15: 00007ffd5e4ddd08 [ 511.417690][T14216] [ 511.420971][T14216] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 511.428773][T14216] CPU: 0 UID: 0 PID: 14216 Comm: syz.0.2341 Not tainted syzkaller #0 PREEMPT(full) [ 511.439081][T14216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 511.449460][T14216] Call Trace: [ 511.453144][T14216] [ 511.456377][T14216] dump_stack_lvl+0x99/0x250 [ 511.461186][T14216] ? __asan_memcpy+0x40/0x70 [ 511.465903][T14216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.471440][T14216] ? __pfx__printk+0x10/0x10 [ 511.476369][T14216] vpanic+0x237/0x6d0 [ 511.480573][T14216] ? __pfx_vpanic+0x10/0x10 [ 511.485328][T14216] panic+0xb9/0xc0 [ 511.489150][T14216] ? __pfx_panic+0x10/0x10 [ 511.493921][T14216] __warn+0x31b/0x4b0 [ 511.498035][T14216] ? ip_rt_bug+0x2c/0x110 [ 511.502411][T14216] ? ip_rt_bug+0x2c/0x110 [ 511.506964][T14216] report_bug+0x2be/0x4f0 [ 511.511587][T14216] ? ip_rt_bug+0x2c/0x110 [ 511.516178][T14216] ? ip_rt_bug+0x2c/0x110 [ 511.520725][T14216] ? ip_rt_bug+0x2e/0x110 [ 511.525356][T14216] handle_bug+0x84/0x160 [ 511.529826][T14216] exc_invalid_op+0x1a/0x50 [ 511.534464][T14216] asm_exc_invalid_op+0x1a/0x20 [ 511.539814][T14216] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 511.545353][T14216] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 8b dd 08 f8 66 90 e8 84 dd 08 f8 31 ff 48 89 de ba 02 00 00 00 e8 d5 0d 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 11 9e 97 01 cc f3 0f [ 511.565771][T14216] RSP: 0018:ffffc9001bf27180 EFLAGS: 00010286 [ 511.572150][T14216] RAX: 49b8ff62d3d85b00 RBX: ffff888066c4fa00 RCX: 49b8ff62d3d85b00 [ 511.580508][T14216] RDX: 0000000000000002 RSI: ffffffff8d7e845f RDI: ffffffff8bc077e0 [ 511.589050][T14216] RBP: 0000000000000001 R08: ffffffff8f9e1377 R09: 1ffffffff1f3c26e [ 511.597511][T14216] R10: dffffc0000000000 R11: fffffbfff1f3c26f R12: dffffc0000000000 [ 511.605893][T14216] R13: dffffc0000000000 R14: ffff888066c4fa00 R15: ffff8881456f9e00 [ 511.614207][T14216] ip_push_pending_frames+0xbe/0x150 [ 511.619584][T14216] __icmp_send+0xfc3/0x1320 [ 511.624572][T14216] ? __icmp_send+0x1b9/0x1320 [ 511.630018][T14216] ? __pfx___icmp_send+0x10/0x10 [ 511.635226][T14216] ? ip_route_input_noref+0x98/0x250 [ 511.640843][T14216] ? __pfx_ip_route_input_noref+0x10/0x10 [ 511.646816][T14216] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 511.653035][T14216] ip_options_compile+0x80/0xb0 [ 511.658031][T14216] ip_rcv_finish_core+0xaa2/0x1c00 [ 511.663329][T14216] ip_rcv_finish+0x14c/0x2f0 [ 511.668168][T14216] NF_HOOK+0x30c/0x3a0 [ 511.672490][T14216] ? __pfx_ip_rcv_finish+0x10/0x10 [ 511.677669][T14216] ? NF_HOOK+0x9a/0x3a0 [ 511.681970][T14216] ? __pfx_NF_HOOK+0x10/0x10 [ 511.686871][T14216] ? ip_rcv_core+0x7f7/0xd00 [ 511.691615][T14216] ? __pfx_ip_rcv_finish+0x10/0x10 [ 511.696991][T14216] ? __pfx_ip_rcv+0x10/0x10 [ 511.701637][T14216] __netif_receive_skb+0x143/0x380 [ 511.706898][T14216] ? netif_receive_skb+0x115/0x790 [ 511.712166][T14216] netif_receive_skb+0x1cb/0x790 [ 511.717326][T14216] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 511.723372][T14216] ? __pfx_netif_receive_skb+0x10/0x10 [ 511.729154][T14216] ? tun_rx_batched+0x160/0x730 [ 511.734505][T14216] tun_rx_batched+0x1b9/0x730 [ 511.739328][T14216] ? __lock_acquire+0xab9/0xd20 [ 511.744411][T14216] ? __pfx_tun_rx_batched+0x10/0x10 [ 511.749723][T14216] ? tun_get_user+0x272f/0x3e90 [ 511.754903][T14216] tun_get_user+0x2b65/0x3e90 [ 511.759725][T14216] ? tun_get_user+0x6f6/0x3e90 [ 511.764940][T14216] ? tun_get_user+0x272f/0x3e90 [ 511.770836][T14216] ? aa_file_perm+0x44d/0x1550 [ 511.776199][T14216] ? __pfx_tun_get_user+0x10/0x10 [ 511.782226][T14216] ? ref_tracker_alloc+0x318/0x460 [ 511.788196][T14216] ? __lock_acquire+0xab9/0xd20 [ 511.793986][T14216] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 511.799833][T14216] ? tun_get+0x1c/0x2f0 [ 511.804048][T14216] ? tun_get+0x1c/0x2f0 [ 511.808429][T14216] ? tun_get+0x1c/0x2f0 [ 511.813161][T14216] tun_chr_write_iter+0x113/0x200 [ 511.818955][T14216] vfs_write+0x5c9/0xb30 [ 511.823953][T14216] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 511.830280][T14216] ? __pfx_vfs_write+0x10/0x10 [ 511.835457][T14216] ? __fget_files+0x2a/0x420 [ 511.840413][T14216] ksys_write+0x145/0x250 [ 511.844966][T14216] ? __pfx_ksys_write+0x10/0x10 [ 511.850223][T14216] ? do_syscall_64+0xbe/0xfa0 [ 511.855029][T14216] do_syscall_64+0xfa/0xfa0 [ 511.859755][T14216] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.865156][T14216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.871729][T14216] ? clear_bhb_loop+0x60/0xb0 [ 511.876534][T14216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.882662][T14216] RIP: 0033:0x7f18e218da7f [ 511.887482][T14216] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 511.907847][T14216] RSP: 002b:00007f18e3024000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 511.916579][T14216] RAX: ffffffffffffffda RBX: 00007f18e23e5fa0 RCX: 00007f18e218da7f [ 511.925391][T14216] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 511.934548][T14216] RBP: 00007f18e2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 511.943097][T14216] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 511.951715][T14216] R13: 00007f18e23e6038 R14: 00007f18e23e5fa0 R15: 00007ffd5e4ddd08 [ 511.960102][T14216] [ 511.963850][T14216] Kernel Offset: disabled [ 511.968381][T14216] Rebooting in 86400 seconds..