last executing test programs: 2.749356556s ago: executing program 1 (id=8675): r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x80, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8000, 0x1e}}}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @device_b, @random="afe2ca893239", {0x3, 0x1}}, @ntf_ch_w={0x7, 0x0, 0x1}}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x1ff}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x48000) (async) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x2b, @empty, 0x4e20, 0x0, 'ovf\x00', 0x0, 0x42, 0x19}, {@remote, 0x4e22, 0x10000, 0x401, 0x44, 0x3}}, 0x44) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000000000000c81000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000001d00000008000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) r10 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0xe, 0xb}}}, 0x24}}, 0x800) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000380)={'veth1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r12, r16, 0x25, 0x0, @void}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x12, &(0x7f0000000240)=ANY=[@ANYBLOB="1802bce6057e6d0bde6f290d000000004fafc9e50000003f08c8b2aab6c5816dc68958ca56274340083b1048bd71721350891e12ce0be523c056b743add1a57d00b965c88bea6e2697952399e1fade262c8faf144cbdf791c13e363a0356f1159a803abe2fc5fa9f0df734ed9dce72b22d465834676bd922e8643699b1eeeaccdcec11fd8211f0d78bc186301a439a24787984eba9e8f2e9a316565f9d", @ANYRES32=r7, @ANYBLOB="00000000000000002702000014000000b7030000000000008500000039000000bf0900000000000055090100000000009500000000000000852000000100000018000000070000000000000001000000bf91000000000000b702000000000000850000006c000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x94) (async) splice(r5, &(0x7f00000005c0)=0x10001, r0, &(0x7f0000000600)=0x1d8ed928, 0x6, 0x2) 2.487309704s ago: executing program 0 (id=8679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc815}, 0x4040004) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x1}}, 0x2e) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="3f000000010000", 0x7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x5, 0x0, 0x1, [@typed={0x9, 0x6, 0x0, 0x0, @str='\xff\xff\xeb\xffs'}, @typed={0x8, 0x3, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x5}, 0x8) socket$kcm(0x2, 0xa, 0x2) write$tun(r7, 0x0, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r9, 0x200, 0x70bd27, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 2.486655961s ago: executing program 1 (id=8680): socket(0x2b, 0x1, 0x0) (async) r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000a00)={{r1}, "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"}) 2.387003199s ago: executing program 1 (id=8682): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x700, 0x700, 0x40, 0x1ff, {{0x7, 0x4, 0x3, 0x4, 0x1c, 0x68, 0x0, 0xb, 0x4, 0x0, @remote, @remote, {[@timestamp={0x44, 0x8, 0x3b, 0x0, 0x4, [0x400]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r4, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0xc000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000540)={'batadv_slave_1\x00', @remote}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c00028008000100080000000000000000000008000a00", @ANYRES32=r11, @ANYBLOB], 0x58}}, 0x0) 2.099634673s ago: executing program 0 (id=8683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8}]}, 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x6c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x401, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x36}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xe}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x40}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x9841}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x6c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x401, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x36}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xe}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x40}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x9841}, 0x80) (async) 2.097794913s ago: executing program 1 (id=8685): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x300}}]}, 0x24}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x56ad) 2.040416811s ago: executing program 0 (id=8686): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x8e, "2eb358f6869fc2c0dee3032a93629206b08191901f2fb1112e6db82599a712969f879e08daa7f0e85f4d8c37ee468af2a97bc21085381cf8eaadb11408a5c369698598c57db5f02fbeefb086e9d35d960a37ce825c2dd56f19d71b7b68c8e9de535300f2ff1e22f64f067c2166450f85d9d13b5990122fbe80f2c8c8013b037a6c048df1105d29e2c583e2be0455"}, &(0x7f0000000180)=0x96) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000340)=0x3, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000300)={r5, 0xf, 0x20}, &(0x7f0000000340)=0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) 2.005872759s ago: executing program 1 (id=8687): socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r2, @ANYBLOB="01000000000000047fc9010000000400048008000200010000000800010000000000d00008802c00078008000600c500000008000500aee6633708000600d9000000080005002d7c9172080005006d67491d0c0007800800050024da98751c00078008000500878f000008000600df0000de"], 0x10c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x46}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5492}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x6f6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet6(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd842b17065bd16f5) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) 1.918649005s ago: executing program 4 (id=8690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r5, 0x0, 0xf9, 0x22, &(0x7f0000000680)="d3b1e40426ba657ae34ab746235e52427a81e2d42bb8b36a595974e6342409a64fd5d246f5e647654c97ee5d1ad18eaea8ebc5c443e867402d3fd60a71ced4c3b6b01dffbc6ad15306c6d559c66975bee594f67e7c5488ace284d603718dc457d487cba1edc2f0a953741a7ce3d306b152ddc9868af95b56d5c8f15b7892ae663659c91d2fb0741131ccc57519e39a8b79156414b4b4666967df38b51493b36932c42c7cd9dd6241cf47d3e4402ecb95af791acd3af744a66c530663f1be42b03ea67563b2ab0b46967f51d9afb1cf4266576ddd26ec12694273cb3f5bbf3938768a0eb16ec64d089864033481dc45a5899290495009f8b019", &(0x7f0000000080)=""/34, 0xfffff972, 0x0, 0xa7, 0x20, &(0x7f0000000780)="ec3f0924f754944cfc79d091f392d5c575941922b58fb44e6c7b3e8a002a4b55e2ec320f34faf470a7e00ac9ff9644fc2c19831e34b5ab43f8ad9d1118e0c63b77230cd0517f1b160c2a1a8d7c793d40db5087e6b634b56d156f96cdebab633cf4314f574e679f69420ca79f82bc78095552b5f4c2bd4c6e6c9f88941a03e03780f054fc6eaae481d676c91b417093a0b74eb518635a81957c371f98e169a12cfc04a816220af9", &(0x7f00000005c0)="6c35b928ee19641d8582bf026d207a27b251eba730a96d618b42de8115729675", 0x1, 0x0, 0x4}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) (async) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="180000ce6278f907000000db000800faffbfff18240000", @ANYRES32, @ANYBLOB="0000000000000000d145f4ff010000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x1, 0x3, 0xe, 0x2}, {0x1, 0x5, 0xb, 0x8}, {0x1, 0x5, 0xa, 0x2}, {0x4, 0x5, 0x3, 0xa}, {0x5, 0x4, 0x9}, {0x3, 0x4, 0x9, 0x1}], 0x10, 0x9}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000003c0)={r3, r8}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r6) (async) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000b80)={'gretap0\x00', 0x0, 0x7, 0x20, 0xbc1, 0x800, {{0x24, 0x4, 0x1, 0x12, 0x90, 0x65, 0x0, 0xd, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x28}, {[@generic={0x86, 0x6, "b5d049de"}, @ssrr={0x89, 0x2b, 0xc1, [@loopback, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @private=0xa010101, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x3b}, @dev={0xac, 0x14, 0x14, 0x43}]}, @generic={0x83, 0xa, "a3351f5f86d7c840"}, @timestamp_addr={0x44, 0x2c, 0x1e, 0x1, 0x0, [{@loopback, 0x7}, {@broadcast, 0x7}, {@broadcast, 0xfa}, {@loopback, 0x7}, {@multicast2, 0x6509}]}, @timestamp_addr={0x44, 0xc, 0x28, 0x1, 0x7, [{@local, 0x2}]}, @end, @lsrr={0x83, 0x7, 0xe7, [@remote]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000d80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x98, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x98}}, 0x40000) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r9, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) (async) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r9, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r12, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r14, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r13, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYRES8=r1, @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000404000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000404000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.888900561s ago: executing program 0 (id=8691): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="c3aa00fe0000000071101a000000000095000000000000009ce03ee6429b9ec9b0b8a53132b6d5d4977000b54bad9f08c7d87b58526c68d5bf16decb25ed110d586d3ff2f89dae3f971815fa975c236e45680283d632825041a6b69f89b0fcb85f9fa27e9cc6eef0f0e9030db4d3ad8c6408a0d08fd4589cb1edd4deab5243b158a68c1cfbb8f776ec09be00000000dbf3229b1c689cbe51e51b412c3d418811c184c0fdb67ca1959e1d"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x27) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xfff) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x12, r6, 0x51af9000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x12, r6, 0x51af9000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x100003ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) (async) r9 = openat$cgroup_devices(r8, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r2, 0x0, r9, 0x0, 0x47, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r10}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x8, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "60001706111000"}}, 0x48}, 0x1, 0x0, 0x0, 0x400d4}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r10}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x8, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "60001706111000"}}, 0x48}, 0x1, 0x0, 0x0, 0x400d4}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r11, 0x890c, &(0x7f0000000100)={0x1, @bcast, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1ff, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$sock_netrom_SIOCDELRT(r11, 0x890c, &(0x7f0000000100)={0x1, @bcast, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1ff, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x1b4, 0x10, 0x713, 0x70bd2b, 0xfffffffc, {{@in6=@remote, @in=@multicast1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, r10}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0xd}, 0x0, 0x350a, 0xa}, [@algo_auth={0xc3, 0x1, {{'crc32c-intel\x00'}, 0x3d8, "b05669b8c9e2e2bc29034989a8b356db6b5fba34c336f4949f5c4125dc0adcd1526c37889d2a948479dbf66811b385249f3337c1ceafd962f3641b3b4058e993cdbcecf4a3483da38bf5e653d645f7500e8546acd8c7cf85fcc827084e0754c0022ade1b3d943cc44090d8d96b8d4b8de0ef867832d105a81f0000"}}]}, 0x1b4}}, 0x0) 1.640754243s ago: executing program 4 (id=8695): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000c0000000000000000008698a79f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x7, 0x80, 0xc7, 0xc, {{0x1b, 0x4, 0x0, 0x2, 0x6c, 0x68, 0x0, 0x58, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@generic={0x82, 0xa, "2882004095a2cf87"}, @timestamp_addr={0x44, 0x44, 0x82, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast1, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@empty}, {@empty, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0x8}, {@private=0xa010100, 0x8}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='cq_schedule\x00', r3, 0x0, 0x2}, 0x18) 1.588153819s ago: executing program 4 (id=8696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x16000b21, &(0x7f00000000c0)={0x11, 0x8100, r2, 0x1, 0x83, 0x6, @multicast}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) 1.546848354s ago: executing program 3 (id=8697): r0 = socket(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) write(r2, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) accept4$nfc_llcp(r0, &(0x7f0000000140), &(0x7f0000000000)=0x60, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c000100000000000000000002"], 0x114}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000240)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0xfffffffc, 0x0, 0xc, 0x3, 0x8, 0x0, 0x2]}}) socket(0xa, 0x3, 0x3a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) (async) write(r2, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) (async) accept4$nfc_llcp(r0, &(0x7f0000000140), &(0x7f0000000000)=0x60, 0x800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c000100000000000000000002"], 0x114}], 0x1}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000240)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0xfffffffc, 0x0, 0xc, 0x3, 0x8, 0x0, 0x2]}}) (async) 1.403726811s ago: executing program 4 (id=8698): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) r2 = openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x8, 0x0, 0x8, 0x3}) connect$unix(r0, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 1.358238012s ago: executing program 4 (id=8700): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0xc4}}, 0x2c000010) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)="dc", 0x1}], 0x1, 0x3) close(r2) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async, rerun: 32) setsockopt$inet6_int(r2, 0x29, 0x56, &(0x7f0000000140)=0x3, 0x4) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) (async, rerun: 32) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24) (rerun: 32) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_PIM(r4, 0x29, 0xd0, &(0x7f0000000040)=0x1, 0x4) unshare(0x22020600) unshare(0x2a020400) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001500010000000000fddbdf25fe880000000000000000000000000001ff010000000000000000000000000058eeec94336f35581c566b1601000000004e0100000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000010000000000000000000000000000000000000000000000090000000000000000000000000000000600000000000000ffffffffffffffff0000000000000000faffffffffffffff0000000000000000000000000000000004000000b56b6e000001030300000000"], 0xb8}}, 0x0) 1.339219421s ago: executing program 3 (id=8701): bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r1) close(r2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000), 0x0) r6 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x86, &(0x7f0000000440), 0x10) bind$isdn(r6, &(0x7f00000002c0)={0x22, 0x4, 0x4, 0x8, 0xa}, 0x6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r5, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x16, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_TXQLEN={0x8, 0xd, 0x4}]}, 0x28}}, 0x0) 1.235598369s ago: executing program 2 (id=8702): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a008313"], 0x28}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100003050200"/20, @ANYRES32=0x0, @ANYBLOB="1512800900f3e80f92759e06566cd6724c41ad0100626f6e6400000000140002800500010004000000080000"], 0x44}}, 0x0) 1.172673496s ago: executing program 3 (id=8703): r0 = socket$inet6(0xa, 0x3, 0xfffffffd) getsockopt$MRT6(r0, 0x29, 0x1e, 0x0, &(0x7f00000000c0)=0xfffffffffffffe6f) r1 = socket$inet(0x2, 0x3, 0xa) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000e000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 1.161076424s ago: executing program 2 (id=8704): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="fffffaff4cfce911406bfbc851c5808d9db098a90a9d866e57778ff7a6aa6e13237a1812bef048445ff3287a060cd55c0b039565dc1d39a6bba485dde67f2cfce5347ac55bd471d94b3ed20e663c36ad", 0x50, 0x0, 0x0, 0x0) (async) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) (async) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f00000000c0)={@default, @null, @default, 0x7, 0x1, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async, rerun: 32) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0xc000080}, 0x80) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, &(0x7f0000000040)) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)=@updsa={0x170, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x4a, 0x1, {{'sha224-ssse3\x00'}, 0x10, 'K\n'}}, @lifetime_val={0x24}, @replay_val={0x10, 0xa, {0x70bd29}}]}, 0x170}}, 0x0) (rerun: 32) 1.03929342s ago: executing program 1 (id=8705): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff, 0x32, 0x0, @void}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r4}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, 0x0, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x470, 0xffffffff, 0x160, 0x160, 0x160, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x8, 0x9, 0xd, 0x400, @private1, @empty, @mcast2, [0x0, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xffffffff, 0xffffff, 0xffffffff], [0x0, 0xffffff00, 0x41174af8ff298df6, 0xffffffff], 0x8e0, 0x2001}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @local}, [0x0, 0x0, 0xff000000, 0xff], [0xff000000, 0x0, 0xffffffff], 'syzkaller1\x00', 'erspan0\x00', {}, {0xff}, 0xf4, 0x6, 0x1, 0x2a}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x2, 0x0, [0x0, 0x1, 0x7, 0x8, 0x200, 0x7fff, 0x13, 0x9, 0x0, 0x43, 0x6, 0xd6e, 0x7, 0x4, 0x5, 0x9b], 0x1}}, @common=@srh={{0x30}, {0x33, 0x1, 0xea, 0xff, 0x2d2, 0x8c7, 0x1801}}]}, @REJECT={0x28}}, {{@ipv6={@remote, @mcast2, [0xff000000, 0xffffffff, 0xff000000, 0xff], [0xffffff00, 0xff, 0x0, 0xff], 'gre0\x00', 'bond_slave_0\x00', {}, {}, 0x2b, 0x1, 0x4, 0x48}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "1560", 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)=@newqdisc={0x128, 0x24, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xd, 0x3}, {0x0, 0x7}, {0xf, 0x1}}, [@TCA_STAB={0xfc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x9, 0x2, 0x0, 0x4, 0x0, 0x5}}, {0xe, 0x2, [0x1, 0x5, 0xe2, 0x6, 0x9]}}, {{0x1c, 0x1, {0x10, 0x3, 0x3, 0x200, 0x2, 0x44, 0x1, 0x4}}, {0xc, 0x2, [0x8, 0x40, 0x10f8, 0x2]}}, {{0x1c, 0x1, {0x8, 0xff, 0xf, 0x3, 0x1, 0x400, 0x38000, 0x8}}, {0x14, 0x2, [0x7, 0x2, 0x6, 0x4, 0x200, 0x2, 0x7fff, 0x9]}}, {{0x1c, 0x1, {0x2a, 0x8, 0x7, 0x7, 0x2, 0x9, 0x4, 0x5}}, {0xe, 0x2, [0x8, 0x3, 0xed7, 0x4, 0xc]}}, {{0x1c, 0x1, {0x6f, 0x2b, 0x8, 0x1000, 0x2, 0x1, 0x6, 0x2}}, {0x8, 0x2, [0x1, 0x401]}}, {{0x1c, 0x1, {0x9, 0xf, 0x0, 0x7f8, 0x1, 0x2, 0x8, 0x1}}, {0x6, 0x2, [0x8]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x6000000}, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000)) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0xfcfd}]}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x98}}, 0x0) close(r6) r11 = socket(0x2b, 0x80801, 0x1) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x300}, 0x90) listen(r11, 0x2a2a) setsockopt$inet6_mtu(r11, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x4}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000080)="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", 0xff}, {&(0x7f0000000180)="0ea3466e80e853c2249739ca52c06062bdcc5f8bded2ec4380a340bff8a6f72d56d13a0ecf7604d563f2bea1bce7d69ccec96cffa7f7f64cbfd0a7b0b12d2b3e1a0278524b4451c6241e08a46cf98fd850d31f3bd6903a6e5533b7558724facf76c744f9986ad0a016fec01ad28cd6efd5d0e4b8733d700ffbe27393bdb975cdf3bd1a5eb874aa54a07c7f73f73500969d5d8e3c227476962e8d3b71bd8391eebdab67d5d4fc4f202459aa561b350aaee40da901941a97e8c8eff43b5a19f35380eb", 0xc2}], 0x2, &(0x7f0000001300)=ANY=[@ANYBLOB="3000000000000000290000003600000033020000000000000103000000c910ff01000000000000000000000000000100140000000000000029000000340000000f0000000000000098000000000000002900000039000000001000b10000000020010000000000000000000000000002ff010000000000000000000000000001fe8000000000000000000000000000bbfe880000000000000000000000000001ff010000000000000000000000000001ff020000000000000000000000000001fc000000000000000000000000000001fe8800000000000000000000000001011400000000000000290000000b0000000000000200000000300000000000000029000000370000003a02000000000000c91000000000000000000000000000000001000100000000300000000000000029000000370000003a020000000000000710000000030209080000000000000000000000000000001400000000000000290000004300000009000000000000001400000000000000290000000b00000000006314000000001400000000000000290000000b000000800000010000000024000000000000002900000032000000fc0200"/448, @ANYRES32=r2, @ANYRESHEX=r10], 0x1c8}, 0x20000000) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x48, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xc3a}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xd}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000) write$bt_hci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000100020075"], 0x8) 973.004217ms ago: executing program 2 (id=8706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000000030d0003006c6973743a736574"], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000000030d0003006c6973743a736574"], 0x5c}}, 0x0) 947.718284ms ago: executing program 3 (id=8707): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x4, 0x8, 0x9, 0xff, 0x39a}, @alu={0x4, 0x1, 0x2, 0x3, 0x1, 0x42, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0xffffff43, 0x0, &(0x7f0000000240), 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xf, 0x1, 0x9143}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x4, 0x4, 0xf, 0xb}, {0x5, 0x4, 0x4, 0x5}, {0x5, 0x3, 0x0, 0x5}, {0x3, 0x4, 0x10, 0x9}, {0x4, 0x5, 0xb, 0x7}], 0x10, 0x6}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x4, 0x8, 0x9, 0xff, 0x39a}, @alu={0x4, 0x1, 0x2, 0x3, 0x1, 0x42, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0xffffff43, 0x0, &(0x7f0000000240), 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xf, 0x1, 0x9143}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x4, 0x4, 0xf, 0xb}, {0x5, 0x4, 0x4, 0x5}, {0x5, 0x3, 0x0, 0x5}, {0x3, 0x4, 0x10, 0x9}, {0x4, 0x5, 0xb, 0x7}], 0x10, 0x6}, 0x94) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x13, &(0x7f0000000500)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x60}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000200)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 839.213045ms ago: executing program 0 (id=8708): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c30000000000000000000008", @ANYRES32, @ANYBLOB="0000d40000000000a5c50b000009"], 0x2c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x34}}, 0x20000000) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r6, 0x2, 0x10}, &(0x7f0000000240)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x0, 0x4, 0xff, 0x100, r0}, 0x50) r10 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r11, 0x89e1, &(0x7f0000001880)={r10}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000240)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@lx}, @jmp={0x5, 0x1, 0x7, 0xb, 0x0, 0x30, 0xfffffffffffffff0}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ldst={0x1, 0x0, 0x4, 0x5, 0x0, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0xb, 0x2, 0x0, 0x8, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.608277ms ago: executing program 2 (id=8709): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001440)={0x184, 0x19, 0x400, 0x4000000, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e3561934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea30683bc4a506cf756740574b88d396af9b596387005002e0ccb26a568000005006f88d6e1db9b2bf7cbfa3c"]}, @nested={0x120, 0x6, 0x0, 0x1, [@typed={0x119, 0x0, 0x0, 0x0, @binary="0f46f1849e80333a72c47c602d9970739272ca25d0ed59ba325be2bda24a9d7bdfe830ec5ca57e2d54f2dbf1ce1d4305d0ef433df7b8370107edbc85bfb216efdc1b2b64d6a716ab6d8204ff7498a0d528471596a2bffd9f39f5d68ca46f729302ab4cb1bca132d999b0a04b1ddb2404cb28de890a87617e79217b4cafbcb340e885260db96e23db715cecc61ce445adffffffff29e6fb925cc6f1c5db000000004f582f94a84bf0152dfada7b9826bbbfd394d745fd122010a19f7c2e459f59c5e8882dc1043dec61df7983901630639c97157316c9285b79ba1991bc3c26eac94685926b8724edd1909877656caeb279bfb485282a7e32882ec6a67dd14e4d3d7d150ab8ca34b14e958ae0b4c89727b0a52fdcf8"}]}]}, 0x184}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r1, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x20}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9a7e2ab303ce0003a0ea3932e1"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "87b12575ecea25"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x4) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000001d0aab00000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) recvmmsg$unix(r0, &(0x7f00000050c0)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)=""/100, 0x64}, {&(0x7f00000004c0)=""/109, 0x6d}], 0x2, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/212, 0xd4}, {&(0x7f0000000900)=""/62, 0x3e}, {&(0x7f0000000940)=""/2, 0x2}, {&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/59, 0x3b}, {&(0x7f0000000a40)=""/95, 0x5f}, {&(0x7f0000000ac0)=""/254, 0xfe}], 0x8, &(0x7f0000000c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000000d80), 0x6e, &(0x7f0000002600)=[{&(0x7f0000000e00)=""/33, 0x21}, {&(0x7f0000000e40)=""/244, 0xf4}, {&(0x7f0000000f40)=""/222, 0xde}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000001040)=""/25, 0x19}, {&(0x7f0000001080)=""/125, 0x7d}, {&(0x7f0000001100)=""/218, 0xda}, {&(0x7f0000001280)=""/208, 0xd0}, {&(0x7f0000001380)=""/106, 0x6a}], 0x9, &(0x7f0000001200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000026c0)=""/106, 0x6a}, {&(0x7f0000002740)=""/114, 0x72}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/81, 0x51}], 0x4, &(0x7f0000003840)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f00000038c0)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003940)=""/198, 0xc6}, {&(0x7f0000003a40)=""/201, 0xc9}, {&(0x7f0000003b40)=""/212, 0xd4}], 0x3, &(0x7f0000003c80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003cc0), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000003d40)=""/10, 0xa}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/26, 0x1a}, {&(0x7f0000004dc0)=""/200, 0xc8}, {&(0x7f0000004ec0)}], 0x5, &(0x7f0000004f80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}], 0x6, 0x2000, &(0x7f0000005240)={0x0, 0x3938700}) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001440)={0x184, 0x19, 0x400, 0x4000000, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e3561934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea30683bc4a506cf756740574b88d396af9b596387005002e0ccb26a568000005006f88d6e1db9b2bf7cbfa3c"]}, @nested={0x120, 0x6, 0x0, 0x1, [@typed={0x119, 0x0, 0x0, 0x0, @binary="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"}]}]}, 0x184}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r1, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x20}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9a7e2ab303ce0003a0ea3932e1"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "87b12575ecea25"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x4) (async) socket$pptp(0x18, 0x1, 0x2) (async) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000001d0aab00000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async) recvmmsg$unix(r0, &(0x7f00000050c0)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)=""/100, 0x64}, {&(0x7f00000004c0)=""/109, 0x6d}], 0x2, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/212, 0xd4}, {&(0x7f0000000900)=""/62, 0x3e}, {&(0x7f0000000940)=""/2, 0x2}, {&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/59, 0x3b}, {&(0x7f0000000a40)=""/95, 0x5f}, {&(0x7f0000000ac0)=""/254, 0xfe}], 0x8, &(0x7f0000000c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000000d80), 0x6e, &(0x7f0000002600)=[{&(0x7f0000000e00)=""/33, 0x21}, {&(0x7f0000000e40)=""/244, 0xf4}, {&(0x7f0000000f40)=""/222, 0xde}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000001040)=""/25, 0x19}, {&(0x7f0000001080)=""/125, 0x7d}, {&(0x7f0000001100)=""/218, 0xda}, {&(0x7f0000001280)=""/208, 0xd0}, {&(0x7f0000001380)=""/106, 0x6a}], 0x9, &(0x7f0000001200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000026c0)=""/106, 0x6a}, {&(0x7f0000002740)=""/114, 0x72}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/81, 0x51}], 0x4, &(0x7f0000003840)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f00000038c0)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003940)=""/198, 0xc6}, {&(0x7f0000003a40)=""/201, 0xc9}, {&(0x7f0000003b40)=""/212, 0xd4}], 0x3, &(0x7f0000003c80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003cc0), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000003d40)=""/10, 0xa}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/26, 0x1a}, {&(0x7f0000004dc0)=""/200, 0xc8}, {&(0x7f0000004ec0)}], 0x5, &(0x7f0000004f80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}], 0x6, 0x2000, &(0x7f0000005240)={0x0, 0x3938700}) (async) 17.835166ms ago: executing program 3 (id=8710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000070000004000000005", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x71, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000540), 0xffff800016adffff}, 0x20) socket$inet(0x10, 0x3, 0x0) (async) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000007540), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440c1}, 0x40000000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440c1}, 0x40000000) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40080) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40080) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000280)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x66}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000001300)='GPL\x00'}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}]}]}}]}, 0xa4}}, 0x0) 14.836203ms ago: executing program 2 (id=8711): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, ';o\'.'}, &(0x7f0000000040)=0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0xa, &(0x7f00000000c0)=@raw=[@alu={0x4, 0x1, 0x4, 0x6, 0x6, 0xfffffffffffffffe, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000140)='GPL\x00', 0x5, 0x95, &(0x7f0000000180)=""/149, 0x41100, 0x50, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r0, r0, r0], 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.949272ms ago: executing program 0 (id=8712): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000000000000000ec8250d9e4bdb10500000a3c000000090a010400040000000000000a000004090032105285d3010073797a3100000040000000020900020073797a310000000008000a40fffffffc2bbf287e6cfc14000000110001000000000000000000010000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x559c7bd3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) syz_emit_ethernet(0x72, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x3c, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], "fb36eeca6ead50b375a22a58"}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 4.903008ms ago: executing program 3 (id=8713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000100)="c93e59e069a7abb9de25e2e9b0febcb43ad08102af0c649ee86c50d6188a5d7ab64db6f32d8f828d83f0604f278258c086548c24f497fd1ec770fe748bfc7772b545e0705656a5555beb181ac229c03e81edbe489b235c1781203d24118cb46bf2e078ccd75986f2ac9154afdfa94da720b22fcad2415790c6be922375cd65502b32eade28b0d73fe7b554") (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) socket(0x3, 0x2, 0x2) 1.09244ms ago: executing program 4 (id=8714): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0xf, 0x6, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) 0s ago: executing program 2 (id=8715): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x3a) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e}, 0x2d) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfcb3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040080}, 0x2000040) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x3a) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e}, 0x2d) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfcb3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040080}, 0x2000040) (async) 0s ago: executing program 1 (id=8724): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000340)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0xf, 0xf}}, 0x1c}}, 0x42094) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2e, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 256][T28491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.316183][T28491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6329'. [ 649.402263][T28136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.468430][T28136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.510409][T10968] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.529426][T28500] netlink: 'syz.3.6331': attribute type 1 has an invalid length. [ 649.544759][T10968] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.552216][T28503] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6333'. [ 649.563499][T28503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6333'. [ 649.582917][T10968] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.583458][T28504] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6334'. [ 649.600923][T10968] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.787103][T28515] netlink: 'syz.3.6338': attribute type 4 has an invalid length. [ 649.960311][T28521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6339'. [ 649.974695][T28521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6339'. [ 649.989355][T10962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.998301][T10962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.089447][T10962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.102170][T10962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.242554][T28536] netlink: 4240 bytes leftover after parsing attributes in process `syz.4.6226'. [ 650.572325][ T52] Bluetooth: hci1: command tx timeout [ 650.889847][T27713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 650.906412][T27713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 650.915553][T27713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 650.936875][T27713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 650.956425][T27713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 651.112241][T28546] wg1 speed is unknown, defaulting to 1000 [ 651.136891][T28546] hsr0 speed is unknown, defaulting to 1000 [ 651.420484][T28567] bond1: Invalid ad_actor_system MAC address. [ 651.426988][T28567] bond1: option ad_actor_system: invalid value (1) [ 651.437353][T28567] bond1 (unregistering): Released all slaves [ 651.729639][T28590] x_tables: duplicate underflow at hook 4 [ 651.791202][T28546] chnl_net:caif_netlink_parms(): no params data found [ 652.098340][T28546] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.111678][T28546] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.128122][T28546] bridge_slave_0: entered allmulticast mode [ 652.136809][T28546] bridge_slave_0: entered promiscuous mode [ 652.171898][T28546] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.180621][T28546] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.191894][T28546] bridge_slave_1: entered allmulticast mode [ 652.200090][T28546] bridge_slave_1: entered promiscuous mode [ 652.404081][T28546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.436109][T28546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.457376][T28616] x_tables: unsorted underflow at hook 2 [ 652.643645][T28546] team0: Port device team_slave_0 added [ 652.685856][T28546] team0: Port device team_slave_1 added [ 652.763040][T28621] netlink: 'syz.2.6365': attribute type 17 has an invalid length. [ 652.813912][T28546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.821316][T28546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.849560][T28546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.879317][T28623] vlan2: entered promiscuous mode [ 652.884627][T28623] bridge0: entered promiscuous mode [ 652.894500][T28546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.922711][T28546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.983595][T27713] Bluetooth: hci0: command tx timeout [ 652.991569][T28546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.131197][T28631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.213647][T28631] __nla_validate_parse: 6 callbacks suppressed [ 653.213668][T28631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6370'. [ 653.309417][T28546] hsr_slave_0: entered promiscuous mode [ 653.323004][T28546] hsr_slave_1: entered promiscuous mode [ 653.339927][T28546] debugfs: 'hsr0' already exists in 'hsr' [ 653.359590][T28546] Cannot create hsr debugfs directory [ 654.038494][T28546] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.112848][T28546] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 654.128640][T28667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.303853][T28546] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.347749][T28546] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 654.588352][T28673] v: renamed from vlan0 [ 654.658400][T28546] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.692208][T28546] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 655.053176][T27713] Bluetooth: hci0: command tx timeout [ 655.197802][T28697] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 655.289413][T28546] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 655.424569][T28546] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 655.556867][T28546] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 655.583105][T28546] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 655.648724][T28714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6393'. [ 655.939113][T28546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.048665][T28546] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.109488][T11828] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.116819][T11828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.187611][T11828] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.194863][T11828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.872303][T28750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.907059][T28546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.933530][T28750] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 656.970868][T28753] netlink: 'syz.2.6401': attribute type 2 has an invalid length. [ 657.030245][T28756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6401'. [ 657.062487][T28546] veth0_vlan: entered promiscuous mode [ 657.109535][T28546] veth1_vlan: entered promiscuous mode [ 657.134711][T27713] Bluetooth: hci0: command tx timeout [ 657.208707][T28763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6403'. [ 657.231154][T28546] veth0_macvtap: entered promiscuous mode [ 657.260449][T28546] veth1_macvtap: entered promiscuous mode [ 657.349314][T28546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.388726][T28546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.434028][ T9920] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.461715][ T9920] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.503941][T28768] bridge_slave_0: default FDB implementation only supports local addresses [ 657.537486][ T9920] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.568992][ T9920] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.969407][T10962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.017110][T10962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.175397][ T9922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.184838][ T9922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.410291][T28796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6413'. [ 658.554757][T28807] macvlan0: entered promiscuous mode [ 658.750167][ T43] IPVS: starting estimator thread 0... [ 658.861590][T28819] IPVS: using max 25 ests per chain, 60000 per kthread [ 658.868909][T28821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6421'. [ 658.994359][T28821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6421'. [ 659.049875][T28826] syzkaller0: entered promiscuous mode [ 659.056847][T28826] syzkaller0: entered allmulticast mode [ 659.182605][T28835] syzkaller0: entered promiscuous mode [ 659.188415][T28835] syzkaller0: entered allmulticast mode [ 659.223018][T27713] Bluetooth: hci0: command tx timeout [ 659.278250][T28842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6428'. [ 660.405331][T28629] Set syz1 is full, maxelem 65536 reached [ 661.969922][T28891] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6439'. [ 662.247495][T28905] syzkaller1: entered promiscuous mode [ 662.291716][T28905] syzkaller1: entered allmulticast mode [ 662.323663][T28905] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6443'. [ 662.914741][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 662.926320][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 662.936294][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 662.955670][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 662.964230][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 663.027969][T28927] wg1 speed is unknown, defaulting to 1000 [ 663.036046][T28927] hsr0 speed is unknown, defaulting to 1000 [ 663.163038][T28937] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6454'. [ 664.160797][T28927] chnl_net:caif_netlink_parms(): no params data found [ 664.495714][T28978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.507218][T28970] erspan0: entered allmulticast mode [ 665.053095][ T52] Bluetooth: hci4: command tx timeout [ 666.473700][T28927] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.481049][T28927] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.489226][T28927] bridge_slave_0: entered allmulticast mode [ 666.498562][T28927] bridge_slave_0: entered promiscuous mode [ 666.509484][T28927] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.520309][T28927] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.531324][T28927] bridge_slave_1: entered allmulticast mode [ 666.550856][T28927] bridge_slave_1: entered promiscuous mode [ 666.563781][T28996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6470'. [ 666.700713][T28927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.714411][T29008] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20002 [ 666.756808][T28927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.833402][T29012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6475'. [ 666.838484][T29014] netlink: 'syz.0.6476': attribute type 1 has an invalid length. [ 666.897736][T28927] team0: Port device team_slave_0 added [ 666.917081][T28927] team0: Port device team_slave_1 added [ 666.977716][T29020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6476'. [ 667.133626][ T52] Bluetooth: hci4: command tx timeout [ 667.183996][T28927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.191072][T28927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.218424][T28927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.256827][T28927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.265888][T28927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.295757][T28927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.344338][T29036] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6482'. [ 667.469297][T28927] hsr_slave_0: entered promiscuous mode [ 667.495362][T28927] hsr_slave_1: entered promiscuous mode [ 667.524548][T28927] debugfs: 'hsr0' already exists in 'hsr' [ 667.543571][T28927] Cannot create hsr debugfs directory [ 667.814285][T29068] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6486'. [ 668.103974][T29074] team0: Port device team_slave_0 removed [ 668.308181][T28927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.320145][T28927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.413374][T29083] netlink: 'syz.0.6491': attribute type 11 has an invalid length. [ 668.433498][T29083] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6491'. [ 668.453257][T29086] netlink: 408 bytes leftover after parsing attributes in process `syz.3.6494'. [ 668.456104][T28927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.495551][T28927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.721136][T28927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.733736][T28927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.829850][T29107] netlink: 592 bytes leftover after parsing attributes in process `syz.3.6499'. [ 668.845010][T28927] batman_adv: batadv0: Removing interface: netdevsim0 [ 668.848212][T29110] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 668.870481][T28927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.871120][T29109] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 668.891380][T28927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.957778][T29119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6501'. [ 669.133943][T29131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6504'. [ 669.190840][T29123] nbd: illegal input index -8454144 [ 669.212484][ T52] Bluetooth: hci4: command tx timeout [ 669.440535][T28927] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 669.467787][T28927] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 669.518616][T28927] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 669.537866][T28927] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 669.855656][T29161] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 670.150407][T28927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.274089][T28927] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.319326][T10968] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.326770][T10968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.377449][ T9920] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.384661][ T9920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.460657][T29185] openvswitch: netlink: Missing key (keys=40, expected=100) [ 670.494060][T29181] syzkaller0: entered promiscuous mode [ 670.505042][T29181] syzkaller0: entered allmulticast mode [ 670.545635][T29181] syzkaller0: mtu less than device minimum [ 670.692029][T29196] Cannot find add_set index 0 as target [ 671.067935][T28927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.253311][T28927] veth0_vlan: entered promiscuous mode [ 671.285987][T28927] veth1_vlan: entered promiscuous mode [ 671.302299][ T52] Bluetooth: hci4: command tx timeout [ 671.465787][T28927] veth0_macvtap: entered promiscuous mode [ 671.516536][T28927] veth1_macvtap: entered promiscuous mode [ 671.584389][T29238] __nla_validate_parse: 23 callbacks suppressed [ 671.584409][T29238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6543'. [ 671.620001][T28927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.650499][T28927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.736397][ T9920] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.758822][ T9920] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.799081][ T9920] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.820652][ T9920] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.131064][T29261] wg1 speed is unknown, defaulting to 1000 [ 672.140221][T29261] hsr0 speed is unknown, defaulting to 1000 [ 672.310373][ T9920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.322913][ T9920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.884474][ T9920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.932568][ T9920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.603938][T29313] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6558'. [ 673.685304][T29316] syzkaller0: entered promiscuous mode [ 673.694450][T29316] syzkaller0: entered allmulticast mode [ 673.722816][T29316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.148946][T29343] netlink: 'syz.1.6568': attribute type 16 has an invalid length. [ 674.201496][T29343] netlink: 'syz.1.6568': attribute type 17 has an invalid length. [ 674.267122][T29343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 674.333184][T29353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6570'. [ 674.469100][T29361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6572'. [ 674.500427][T29363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6572'. [ 674.520925][T29359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6572'. [ 674.836025][T29379] netlink: 'syz.4.6577': attribute type 1 has an invalid length. [ 674.855570][T29377] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6578'. [ 675.197873][T29393] netlink: 'syz.3.6581': attribute type 21 has an invalid length. [ 675.354369][T29400] openvswitch: netlink: Flow key attr not present in new flow. [ 675.490153][T29409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.656481][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6589'. [ 676.088333][T29436] netlink: 'syz.3.6595': attribute type 11 has an invalid length. [ 676.134183][T29436] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.6595'. [ 676.308381][T29446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6599'. [ 676.518411][T29452] vlan2: entered promiscuous mode [ 676.526274][T29452] vlan2: entered allmulticast mode [ 676.558994][T29452] hsr_slave_1: entered allmulticast mode [ 676.661979][T29449] wg1 speed is unknown, defaulting to 1000 [ 676.675609][T29455] wg1 speed is unknown, defaulting to 1000 [ 676.684170][T29449] hsr0 speed is unknown, defaulting to 1000 [ 676.733128][T29455] hsr0 speed is unknown, defaulting to 1000 [ 676.766990][T29463] netlink: 'syz.0.6603': attribute type 9 has an invalid length. [ 677.200481][T29469] openvswitch: netlink: Message has 237 unknown bytes. [ 677.668869][T29481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6608'. [ 677.679040][T29481] openvswitch: netlink: Flow key attr not present in new flow. [ 677.870004][T29489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6610'. [ 677.884433][T29490] sock: sock_set_timeout: `syz.0.6611' (pid 29490) tries to set negative timeout [ 677.907100][T29489] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6610'. [ 678.022285][T29496] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6612'. [ 678.332701][T29508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6614'. [ 678.376308][T29515] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6615'. [ 678.627253][T29528] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6622'. [ 679.014181][T29513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6618'. [ 679.124179][T29551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6630'. [ 679.282400][T29563] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6628'. [ 679.353966][T29567] gretap1: entered promiscuous mode [ 679.359416][T29567] gretap1: entered allmulticast mode [ 680.335860][T29617] bond1: entered allmulticast mode [ 680.352239][T29617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 680.360243][T29617] bridge0: port 3(bond1) entered blocking state [ 680.368138][T29617] bridge0: port 3(bond1) entered disabled state [ 680.377924][T29617] bond1: entered promiscuous mode [ 680.384205][T29617] bridge0: port 3(bond1) entered blocking state [ 680.390752][T29617] bridge0: port 3(bond1) entered forwarding state [ 680.438041][T11822] bridge0: port 3(bond1) entered disabled state [ 680.727033][T29643] netlink: 'syz.4.6654': attribute type 10 has an invalid length. [ 680.778838][T29643] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.786730][T29643] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.938580][T29643] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.945850][T29643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.953710][T29643] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.960926][T29643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.021864][T29643] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 681.280170][T29666] wg1 speed is unknown, defaulting to 1000 [ 681.300328][T29666] hsr0 speed is unknown, defaulting to 1000 [ 681.361704][T29671] xt_hashlimit: invalid rate [ 681.528613][T29673] netlink: 'syz.4.6663': attribute type 2 has an invalid length. [ 681.586933][T29673] 9: entered promiscuous mode [ 682.443395][T29683] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.450763][T29683] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.537059][T29683] bond0: (slave bridge0): Releasing backup interface [ 682.860621][T29736] __nla_validate_parse: 10 callbacks suppressed [ 682.861151][T29736] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6679'. [ 682.955416][T29683] bridge_slave_0: left allmulticast mode [ 682.961360][T29683] bridge_slave_0: left promiscuous mode [ 682.968083][T29683] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.993118][T29683] bridge_slave_1: left allmulticast mode [ 682.998948][T29683] bridge_slave_1: left promiscuous mode [ 683.006787][T29683] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.046305][T29683] bond0: (slave bond_slave_0): Releasing backup interface [ 683.068942][T29683] bond0: (slave bond_slave_1): Releasing backup interface [ 683.099567][T29683] team0: Port device team_slave_0 removed [ 683.129127][T29683] team0: Port device team_slave_1 removed [ 683.152098][T29683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.168163][T29683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.183339][T29683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.200216][T29683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.234418][T29683] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 683.408004][T29745] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6682'. [ 683.546659][T29732] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.558206][T29748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6684'. [ 683.669613][T29732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.690573][T29732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.800376][T29738] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 683.812215][T29739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.876829][T29748] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 683.877529][T29755] sch_fq: defrate 0 ignored. [ 683.942236][ T9920] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.954280][ T9920] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.978667][ T9920] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.032049][ T9920] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.071095][T29764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6686'. [ 684.115787][T29763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6687'. [ 684.316232][T29780] tipc: Started in network mode [ 684.337066][T29780] tipc: Node identity 569b7f344365, cluster identity 4711 [ 684.356400][T29780] tipc: Enabled bearer , priority 0 [ 684.419322][T29780] tipc: Disabling bearer [ 685.052604][T29829] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 685.154886][T29829] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.6698'. [ 685.157399][T29840] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6700'. [ 685.181196][T29841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6701'. [ 685.630723][T29859] veth0: entered promiscuous mode [ 685.685586][T29857] veth0: left promiscuous mode [ 685.826036][T29872] Cannot find add_set index 0 as target [ 685.839131][T29873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6710'. [ 685.901075][T29877] netlink: 'syz.0.6712': attribute type 16 has an invalid length. [ 685.923484][T29877] netlink: 'syz.0.6712': attribute type 17 has an invalid length. [ 686.003262][T29877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 686.125536][T29888] ip6t_rpfilter: unknown options [ 686.137339][T29889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6716'. [ 686.149837][T29887] tipc: Enabling of bearer rejected, failed to enable media [ 686.162317][T29889] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 686.224079][T29893] netlink: 'syz.1.6719': attribute type 1 has an invalid length. [ 686.252445][T29893] netlink: 'syz.1.6719': attribute type 3 has an invalid length. [ 686.270886][T29893] NCSI netlink: No device for ifindex 813332851 [ 686.295010][T29897] netlink: 'syz.1.6719': attribute type 4 has an invalid length. [ 686.348918][T29893] netlink: 'syz.1.6719': attribute type 4 has an invalid length. [ 686.480956][T29905] netlink: 'syz.2.6722': attribute type 1 has an invalid length. [ 686.974709][T29939] tipc: Started in network mode [ 686.986716][T29939] tipc: Node identity 66308f361816, cluster identity 4711 [ 687.013266][T29939] tipc: Enabled bearer , priority 0 [ 687.196407][T29939] tipc: Disabling bearer [ 687.584786][T29934] infiniband syû: set active [ 687.599470][T29934] infiniband syû: added bond_slave_0 [ 687.687321][T29934] RDS/IB: syû: added [ 687.692093][T29934] smc: adding ib device syû with port count 1 [ 687.698495][T29934] smc: ib device syû port 1 has no pnetid [ 687.724033][T29973] netlink: 'syz.2.6742': attribute type 1 has an invalid length. [ 687.782798][T29973] sctp: [Deprecated]: syz.2.6742 (pid 29973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 687.782798][T29973] Use struct sctp_sack_info instead [ 688.068573][T29986] netlink: 'syz.2.6747': attribute type 8 has an invalid length. [ 688.229215][T29994] __nla_validate_parse: 5 callbacks suppressed [ 688.229236][T29994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6750'. [ 688.304760][T29994] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 688.343877][T29994] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 688.358764][T30003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6749'. [ 688.367925][T30003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6749'. [ 688.762270][T30015] rdma_op ffff88807ca069f0 conn xmit_rdma 0000000000000000 [ 688.772000][T30015] rdma_op ffff888024dc49f0 conn xmit_rdma 0000000000000000 [ 688.791616][T30015] rdma_op ffff8880522d19f0 conn xmit_rdma 0000000000000000 [ 689.345998][T30036] syzkaller0: entered promiscuous mode [ 689.381800][T30036] syzkaller0: entered allmulticast mode [ 689.563140][T30036] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6760'. [ 689.802674][T30042] veth0: entered promiscuous mode [ 689.833808][T30041] veth0: left promiscuous mode [ 689.839439][T30044] nbd: illegal input index 2958377 [ 689.880531][T30044] macvtap1: entered allmulticast mode [ 689.897090][T30044] veth0_macvtap: entered allmulticast mode [ 689.996330][T30051] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6764'. [ 690.039128][T30053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6765'. [ 690.065832][T30055] netlink: 'syz.4.6766': attribute type 6 has an invalid length. [ 690.081749][T30056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6765'. [ 690.091210][T30047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6764'. [ 690.113795][T30058] gtp0: entered promiscuous mode [ 690.127046][T30058] gtp0: entered allmulticast mode [ 690.309326][T30065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6770'. [ 690.328861][T30063] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6771'. [ 690.347375][T30063] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 690.578876][T30079] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 690.793411][T30086] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 690.824807][T30086] bond2 (unregistering): Released all slaves [ 690.929746][T30096] geneve2: entered promiscuous mode [ 690.973666][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.011725][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.020659][T30086] tipc: Enabled bearer , priority 0 [ 691.088208][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.104396][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.118658][T30091] syzkaller0: entered promiscuous mode [ 691.171707][T30091] syzkaller0: entered allmulticast mode [ 691.271222][T30086] tipc: Resetting bearer [ 691.491212][T30080] tipc: Resetting bearer [ 691.541006][T30080] tipc: Disabling bearer [ 691.989123][T30141] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 692.044079][T30143] tipc: Started in network mode [ 692.049011][T30143] tipc: Node identity defad57eab71, cluster identity 4711 [ 692.058823][T30143] tipc: Enabled bearer , priority 0 [ 692.089728][T30143] validate_nla: 3 callbacks suppressed [ 692.089751][T30143] netlink: 'syz.3.6793': attribute type 21 has an invalid length. [ 692.110904][T30148] geneve2: entered promiscuous mode [ 692.129431][T30148] geneve2: entered allmulticast mode [ 692.145649][T30143] syzkaller0: entered promiscuous mode [ 692.164323][T30143] syzkaller0: entered allmulticast mode [ 692.271360][T30143] tipc: Resetting bearer [ 692.306339][T30142] tipc: Resetting bearer [ 692.354008][T30142] tipc: Disabling bearer [ 692.430970][T30162] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 692.487842][T30162] bond2 (unregistering): Released all slaves [ 692.560491][T30171] ipt_ECN: cannot use operation on non-tcp rule [ 692.886894][T30184] netlink: 'syz.4.6804': attribute type 10 has an invalid length. [ 692.914567][T30184] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 693.286612][T30199] __nla_validate_parse: 11 callbacks suppressed [ 693.286634][T30199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6806'. [ 693.359088][T30202] netlink: 'syz.1.6810': attribute type 10 has an invalid length. [ 693.458810][T30202] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 693.476468][T30210] ÿ: renamed from batadv_slave_1 (while UP) [ 693.744583][T30221] netlink: 'syz.4.6815': attribute type 3 has an invalid length. [ 694.219668][T10968] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 694.238362][T30247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6822'. [ 694.266776][T30248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6822'. [ 694.276967][T30247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6822'. [ 694.286856][T30248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6822'. [ 694.297525][T30247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6822'. [ 694.307255][T30248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6822'. [ 694.316956][T30248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6822'. [ 694.327133][T30247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6822'. [ 694.344568][T30248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6822'. [ 695.153524][T30270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 695.230809][T30276] vlan4: entered allmulticast mode [ 695.243581][T30276] bond3: entered allmulticast mode [ 695.324137][T30281] netlink: 'syz.4.6830': attribute type 29 has an invalid length. [ 695.373444][T30282] netlink: 'syz.4.6830': attribute type 29 has an invalid length. [ 695.893948][T30295] tipc: Enabled bearer , priority 0 [ 695.942986][T30298] syzkaller0: entered promiscuous mode [ 695.948518][T30298] syzkaller0: entered allmulticast mode [ 695.965375][T30280] tipc: Resetting bearer [ 696.044303][T30280] tipc: Disabling bearer [ 696.267783][T30314] tipc: Enabled bearer , priority 0 [ 696.287632][T30314] syzkaller0: entered promiscuous mode [ 696.349395][T30314] syzkaller0: entered allmulticast mode [ 696.418241][T30316] tipc: Resetting bearer [ 696.487333][T30316] tipc: Disabling bearer [ 696.639470][T30340] rdma_rxe: rxe_newlink: failed to add team0 [ 696.664346][T30342] smc: net device vcan0 applied user defined pnetid SYZ1 [ 696.794028][T30353] netlink: 'syz.4.6849': attribute type 1 has an invalid length. [ 696.858442][T30353] bond2: entered promiscuous mode [ 696.867040][T30353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 696.895281][T30356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 696.904899][T30356] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 696.915840][T30356] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 696.929327][T30356] bond2: (slave gre1): making interface the new active one [ 696.936736][T30356] gre1: entered promiscuous mode [ 696.945696][T30356] bond2: (slave gre1): Enslaving as an active interface with an up link [ 697.046234][T30362] bond4: entered allmulticast mode [ 697.053575][T30362] 8021q: adding VLAN 0 to HW filter on device bond4 [ 697.061285][T30362] bridge0: port 3(bond4) entered blocking state [ 697.069208][T30362] bridge0: port 3(bond4) entered disabled state [ 697.079754][T30362] bond4: entered promiscuous mode [ 697.205115][T30370] netlink: 'syz.1.6854': attribute type 1 has an invalid length. [ 697.395677][T30370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 697.513417][T30372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 697.534933][T30372] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 697.593803][T30372] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 697.735691][T30373] veth3: entered promiscuous mode [ 697.767728][T30373] bond1: (slave veth3): Enslaving as an active interface with a down link [ 697.858918][T30370] vlan2: entered allmulticast mode [ 697.865143][T30370] bond1: entered allmulticast mode [ 698.311336][T30395] __nla_validate_parse: 125 callbacks suppressed [ 698.311359][T30395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6860'. [ 698.646364][T30417] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6868'. [ 698.849225][T30433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6873'. [ 698.899885][T30433] geneve3: entered promiscuous mode [ 699.093368][T30444] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 699.096901][T30452] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6877'. [ 699.569482][T30474] netlink: 'syz.1.6881': attribute type 13 has an invalid length. [ 699.577761][T30474] netlink: 'syz.1.6881': attribute type 58 has an invalid length. [ 699.588937][T30474] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6881'. [ 699.602070][T30474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6881'. [ 699.702827][T30476] netlink: 'syz.1.6882': attribute type 1 has an invalid length. [ 699.902966][T30482] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6885'. [ 700.377053][T30508] netlink: 'syz.1.6890': attribute type 1 has an invalid length. [ 700.385364][T30507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6892'. [ 700.749516][T30521] team0: Cannot enslave team device to itself [ 700.921064][T30534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6898'. [ 700.953010][T30534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6898'. [ 701.570784][T30431] Set syz1 is full, maxelem 65536 reached [ 701.795857][T30565] netlink: 'syz.0.6905': attribute type 2 has an invalid length. [ 701.844436][T30572] netlink: 'syz.1.6909': attribute type 10 has an invalid length. [ 701.856390][T30572] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 701.877324][T30564] tipc: Enabled bearer , priority 0 [ 701.892567][T30568] syzkaller0: entered promiscuous mode [ 701.898626][T30568] syzkaller0: entered allmulticast mode [ 701.976743][T30563] tipc: Disabling bearer [ 702.123251][T30580] team0: Device gtp0 is of different type [ 702.264500][T30582] tipc: Started in network mode [ 702.269470][T30582] tipc: Node identity ae732f456851, cluster identity 4711 [ 702.277900][T30582] tipc: Enabled bearer , priority 0 [ 702.379928][T30582] syzkaller0: entered promiscuous mode [ 702.385755][T30582] syzkaller0: entered allmulticast mode [ 702.393151][T30582] tipc: Resetting bearer [ 702.443060][T30581] tipc: Resetting bearer [ 702.512679][T30599] netlink: 'syz.3.6917': attribute type 18 has an invalid length. [ 702.586880][T30603] Cannot find add_set index 0 as target [ 702.660547][T30607] netlink: 'syz.2.6919': attribute type 1 has an invalid length. [ 704.357616][T30581] tipc: Disabling bearer [ 704.374164][T30595] netlink: 'syz.2.6919': attribute type 12 has an invalid length. [ 704.384019][T30600] tipc: Enabling of bearer rejected, failed to enable media [ 704.411977][ T983] tipc: Node number set to 3324129093 [ 704.527947][T30615] __nla_validate_parse: 8 callbacks suppressed [ 704.527968][T30615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6921'. [ 704.644113][T30626] netlink: 'syz.4.6922': attribute type 5 has an invalid length. [ 704.659335][T30618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6923'. [ 704.702274][T30628] netlink: 'syz.1.6925': attribute type 1 has an invalid length. [ 704.925663][T30628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 704.933880][T30646] Bluetooth: MGMT ver 1.23 [ 704.953716][T30646] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6930'. [ 705.005541][T30650] netlink: 'syz.2.6930': attribute type 10 has an invalid length. [ 705.015551][T30650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6930'. [ 705.025102][T30650] batadv0: entered promiscuous mode [ 705.030778][T30650] batadv0: entered allmulticast mode [ 705.083300][T30650] bridge0: port 3(batadv0) entered blocking state [ 705.110355][T30652] netlink: 'syz.2.6930': attribute type 4 has an invalid length. [ 705.110388][T30650] bridge0: port 3(batadv0) entered disabled state [ 705.175672][T30650] bridge0: port 3(batadv0) entered blocking state [ 705.182321][T30650] bridge0: port 3(batadv0) entered forwarding state [ 705.187635][T30660] netlink: 'syz.1.6934': attribute type 1 has an invalid length. [ 705.191725][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 705.206467][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 705.250323][T30652] vlan3: entered promiscuous mode [ 705.257809][T30652] vlan3: entered allmulticast mode [ 705.264192][T30652] hsr_slave_1: entered allmulticast mode [ 705.370877][T30660] 8021q: adding VLAN 0 to HW filter on device bond3 [ 705.395885][T30676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6935'. [ 705.413573][T30646] IPv6: sit1: Disabled Multicast RS [ 705.423387][T30646] sit1: entered allmulticast mode [ 705.537819][T30664] veth5: entered promiscuous mode [ 705.628352][T30679] netlink: 292 bytes leftover after parsing attributes in process `syz.3.6937'. [ 705.646237][T30683] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6938'. [ 705.686335][T30683] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6938'. [ 706.253771][T30718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6948'. [ 706.287188][T30721] netlink: 'syz.1.6949': attribute type 1 has an invalid length. [ 706.328322][T30721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6949'. [ 706.694444][T30733] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 706.963356][T30748] netlink: 'syz.4.6953': attribute type 29 has an invalid length. [ 707.242639][T30760] x_tables: unsorted underflow at hook 3 [ 707.252528][T30760] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 707.261048][T30760] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 707.291155][T30760] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 707.684317][T30792] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 707.791810][T30792] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 707.799584][T30792] gretap1: entered promiscuous mode [ 707.971846][T30792] gretap1: entered allmulticast mode [ 737.147543][ T9922] bond3: left promiscuous mode [ 737.152588][ T9922] bridge0: port 1(bond3) entered disabled state [ 737.243722][ T9922] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 737.257142][ T9922] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 737.382557][ T9922] tipc: Disabling bearer [ 737.388557][ T9922] gretap0 (unregistering): left promiscuous mode [ 738.126541][ T9922] $Hÿ (unregistering): Released all slaves [ 738.246238][ T9922] bond1 (unregistering): Released all slaves [ 738.260866][ T9922] bond2 (unregistering): Released all slaves [ 738.381302][ T9922] bond3 (unregistering): Released all slaves [ 738.395526][ T9922] bond0 (unregistering): Released all slaves [ 738.508523][ T9922] tipc: Disabling bearer [ 738.521260][ T9922] tipc: Left network mode [ 738.795546][ T9922] veth0_to_batadv: left promiscuous mode [ 738.805844][ T9922] hsr_slave_0: left promiscuous mode [ 738.813393][ T9922] hsr_slave_1: left promiscuous mode [ 739.215628][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 759.691751][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 764.812264][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 775.638166][T30800] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 775.679427][T30815] __nla_validate_parse: 3 callbacks suppressed [ 775.679447][T30815] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6972'. [ 775.713399][T30808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6973'. [ 776.148849][T30844] dvmrp0: entered allmulticast mode [ 776.163315][T30844] dvmrp0: left allmulticast mode [ 776.300158][T30858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6984'. [ 776.315521][T30854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6983'. [ 776.409000][T30861] team0: No ports can be present during mode change [ 776.433645][T30861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6986'. [ 776.596843][T30874] validate_nla: 2 callbacks suppressed [ 776.596865][T30874] netlink: 'syz.0.6990': attribute type 8 has an invalid length. [ 776.978716][T30887] 8021q: VLANs not supported on ip6gre0 [ 777.166322][T30897] vlan1: entered promiscuous mode [ 777.191643][T30897] bridge0: entered promiscuous mode [ 777.446353][T30912] syzkaller1: entered allmulticast mode [ 777.517835][T30914] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7004'. [ 777.547009][T30914] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7004'. [ 777.559373][T30919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7005'. [ 777.569649][T30914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7004'. [ 777.579610][T30919] veth1_to_bond: entered allmulticast mode [ 777.586536][T30919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7005'. [ 777.746005][T30919] bond0: (slave bond_slave_1): Releasing backup interface [ 777.813745][T30919] veth1_to_bond (unregistering): left allmulticast mode [ 777.887914][T30931] 8021q: adding VLAN 0 to HW filter on device bond3 [ 777.909709][T30931] bond0: (slave bond3): Enslaving as an active interface with an up link [ 778.204956][T30950] netlink: 'syz.1.7013': attribute type 21 has an invalid length. [ 778.364799][T30959] SET target dimension over the limit! [ 778.660474][T30970] pim6reg1: entered promiscuous mode [ 778.675141][T30970] pim6reg1: entered allmulticast mode [ 778.703806][T30970] netlink: 'syz.4.7020': attribute type 23 has an invalid length. [ 778.921969][T30982] netlink: 'syz.2.7025': attribute type 6 has an invalid length. [ 778.934054][T30982] netlink: 'syz.2.7025': attribute type 5 has an invalid length. [ 778.965416][T30982] tipc: Started in network mode [ 778.970336][T30982] tipc: Node identity 4, cluster identity 4711 [ 778.978422][T30982] tipc: Node number set to 4 [ 779.319381][T31005] bond0: entered allmulticast mode [ 779.336048][T31005] bond_slave_0: entered allmulticast mode [ 779.347597][T31005] bond_slave_1: entered allmulticast mode [ 779.770159][T31031] netlink: 'syz.0.7038': attribute type 1 has an invalid length. [ 779.945609][T31037] Cannot find add_set index 2 as target [ 780.034615][T31040] bridge0: port 2(veth0_to_bridge) entered blocking state [ 780.083030][T31040] bridge0: port 2(veth0_to_bridge) entered disabled state [ 780.090457][T31040] veth0_to_bridge: entered allmulticast mode [ 780.143788][T31040] veth0_to_bridge: entered promiscuous mode [ 780.182635][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 780.589038][T31070] netlink: 'syz.3.7053': attribute type 5 has an invalid length. [ 780.609921][T31070] netlink: 'syz.3.7053': attribute type 5 has an invalid length. [ 780.749643][T31082] lo: entered allmulticast mode [ 780.769505][T31083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.794574][T31085] __nla_validate_parse: 17 callbacks suppressed [ 780.794593][T31085] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7058'. [ 780.828252][T31086] syzkaller0: entered promiscuous mode [ 780.853902][T31086] syzkaller0: entered allmulticast mode [ 780.920178][T31093] geneve3: entered promiscuous mode [ 780.929714][T31093] geneve3: entered allmulticast mode [ 780.946399][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 780.963744][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 780.989098][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 781.014924][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 781.133615][T31102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7061'. [ 781.674324][T31123] macsec1: entered promiscuous mode [ 782.115001][T31146] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7074'. [ 782.204624][T31152] openvswitch: netlink: Unknown nsh attribute 0 [ 782.211190][T31152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.259762][T31154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7077'. [ 782.270172][T31154] netlink: 184 bytes leftover after parsing attributes in process `syz.2.7077'. [ 782.444442][T31168] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7082'. [ 782.459365][T31168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7082'. [ 782.504019][T31168] bond0: (slave bond_slave_1): Releasing backup interface [ 782.515062][T31168] bond_slave_1 (unregistering): left allmulticast mode [ 782.582993][T31171] netlink: 'syz.2.7084': attribute type 1 has an invalid length. [ 782.591258][T31171] netlink: 'syz.2.7084': attribute type 1 has an invalid length. [ 782.599390][T31171] netlink: 'syz.2.7084': attribute type 1 has an invalid length. [ 782.907815][T31183] xt_TCPMSS: Only works on TCP SYN packets [ 783.059923][T31188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7091'. [ 783.078628][T31195] netlink: 'syz.2.7092': attribute type 1 has an invalid length. [ 783.186132][T31195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 783.215833][T11822] bond0: (slave bond_slave_0): interface is now down [ 783.270406][T31201] Bluetooth: MGMT ver 1.23 [ 783.453462][T31215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7100'. [ 783.507977][T31215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7100'. [ 783.673211][T31231] netlink: 'syz.3.7105': attribute type 3 has an invalid length. [ 783.686716][T31231] netlink: 'syz.3.7105': attribute type 3 has an invalid length. [ 783.734111][T31231] netlink: 'syz.3.7105': attribute type 3 has an invalid length. [ 783.743009][ T9922] nci: nci_rsp_packet: unknown rsp opcode 0x8 [ 783.778025][T31231] netlink: 'syz.3.7105': attribute type 3 has an invalid length. [ 783.787964][T31231] netlink: 'syz.3.7105': attribute type 3 has an invalid length. [ 783.796962][T31231] netlink: 'syz.3.7105': attribute type 3 has an invalid length. [ 783.962059][T31242] syz_tun: entered promiscuous mode [ 783.969714][T31242] syz_tun: left promiscuous mode [ 784.402615][T31254] ip6gre1: entered allmulticast mode [ 784.613974][T31263] ipt_ECN: cannot use operation on non-tcp rule [ 785.232342][T31295] bond4: Setting coupled_control to off (0) [ 787.317968][T31341] vxlan0: entered promiscuous mode [ 787.328729][T31341] vxlan0: entered allmulticast mode [ 787.336122][T11822] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.371144][T11822] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.382024][T27713] Bluetooth: hci4: command tx timeout [ 787.412623][T11822] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.422653][T11822] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.481067][T31344] __nla_validate_parse: 7 callbacks suppressed [ 787.481089][T31344] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7131'. [ 787.507583][T31343] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 787.775203][T31366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7139'. [ 788.361770][T31395] netlink: 'syz.4.7150': attribute type 11 has an invalid length. [ 788.370794][T31398] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7151'. [ 789.104295][T31429] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 789.184884][T31439] validate_nla: 24 callbacks suppressed [ 789.184909][T31439] netlink: 'syz.3.7165': attribute type 11 has an invalid length. [ 789.200535][T31434] openvswitch: netlink: Flow actions attr not present in new flow. [ 789.845258][T31466] netlink: 'syz.0.7174': attribute type 64 has an invalid length. [ 789.866773][T31466] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7174'. [ 789.890905][T31470] netlink: 'syz.3.7175': attribute type 1 has an invalid length. [ 789.923460][T31466] bond2: option min_links: invalid value (18446744073709551614) [ 789.931271][T31466] bond2: option min_links: allowed values 0 - 2147483647 [ 789.955227][T31466] bond2 (unregistering): Released all slaves [ 790.104834][T31487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7178'. [ 790.169268][T31489] netlink: 'syz.2.7181': attribute type 13 has an invalid length. [ 790.185095][T31489] veth0_macvtap: left promiscuous mode [ 790.192860][T31489] macvtap0: entered allmulticast mode [ 790.204088][T31489] macvtap0: refused to change device tx_queue_len [ 790.344852][T31496] tipc: New replicast peer: 255.255.255.255 [ 790.352548][T31496] tipc: Enabled bearer , priority 10 [ 790.359487][T31496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7182'. [ 790.426429][T31502] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7185'. [ 790.427379][T31504] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7185'. [ 790.436708][T31502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7185'. [ 790.459288][T31502] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7185'. [ 790.469527][T31502] netlink: 'syz.0.7185': attribute type 3 has an invalid length. [ 790.469727][T31499] netlink: 'syz.2.7184': attribute type 1 has an invalid length. [ 790.480546][T31502] netlink: 'syz.0.7185': attribute type 2 has an invalid length. [ 790.495325][T31504] netlink: 'syz.0.7185': attribute type 3 has an invalid length. [ 790.503860][T31504] netlink: 'syz.0.7185': attribute type 2 has an invalid length. [ 791.143390][T31545] syzkaller0: entered promiscuous mode [ 791.159298][T31545] syzkaller0: entered allmulticast mode [ 791.282721][T31547] can: request_module (can-proto-0) failed. [ 791.540403][T31562] netlink: 'syz.3.7201': attribute type 11 has an invalid length. [ 791.578352][T31568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.046099][T31599] netlink: 'syz.0.7214': attribute type 1 has an invalid length. [ 792.744363][T31635] __nla_validate_parse: 12 callbacks suppressed [ 792.744386][T31635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7225'. [ 792.763833][T31635] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7225'. [ 792.787132][T31639] delete_channel: no stack [ 792.909788][T31645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.966571][T31645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7230'. [ 793.281125][T31660] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7234'. [ 793.318035][T31669] pim6reg: entered allmulticast mode [ 793.649922][T31695] syzkaller1: entered promiscuous mode [ 793.664558][T31695] syzkaller1: entered allmulticast mode [ 793.759479][T31701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.789513][T31701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.818157][T31701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7246'. [ 794.074103][T31716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.086377][T31717] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 794.099595][T31717] bond4 (unregistering): Released all slaves [ 794.115727][T31720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7253'. [ 794.132338][T31720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7253'. [ 794.219485][T31717] validate_nla: 3 callbacks suppressed [ 794.219509][T31717] netlink: 'syz.1.7253': attribute type 19 has an invalid length. [ 794.238514][T31717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7253'. [ 794.254815][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 794.268583][T31717] netlink: 'syz.1.7253': attribute type 19 has an invalid length. [ 794.276968][T31717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7253'. [ 794.773920][T31756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7264'. [ 794.890011][T31764] netlink: 'syz.1.7267': attribute type 3 has an invalid length. [ 794.898048][T31764] netlink: 'syz.1.7267': attribute type 1 has an invalid length. [ 794.974798][T31756] hsr_slave_0 (unregistering): left promiscuous mode [ 795.282363][T31777] : renamed from bridge_slave_0 (while UP) [ 795.591962][T31796] hsr_slave_0: left promiscuous mode [ 796.088678][T31835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.097284][T31835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.106892][T31835] batman_adv: batadv0: Interface deactivated: ÿ [ 796.114510][T31835] batman_adv: batadv0: Removing interface: ÿ [ 796.178725][T10968] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.187897][T10968] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.251267][T10968] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.269407][T10968] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.526055][T31853] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 796.961562][T31891] netlink: 'syz.2.7298': attribute type 10 has an invalid length. [ 797.018497][T31882] tipc: Enabled bearer , priority 0 [ 797.067564][T31891] syz_tun: entered promiscuous mode [ 797.088205][T31891] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 797.166372][T31901] netlink: zone id is out of range [ 797.181931][T31901] netlink: set zone limit has 4 unknown bytes [ 797.250796][T31876] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.258588][T31876] bridge0: port 1() entered disabled state [ 797.263124][T31903] netlink: 'syz.1.7302': attribute type 1 has an invalid length. [ 797.287786][T31903] NCSI netlink: No device for ifindex 0 [ 797.510140][T31876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.531169][T31876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.872883][T31887] syzkaller0: entered promiscuous mode [ 797.878593][T31887] syzkaller0: entered allmulticast mode [ 797.908321][T31907] __nla_validate_parse: 14 callbacks suppressed [ 797.908347][T31907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7301'. [ 797.927394][T31875] tipc: Resetting bearer [ 797.993038][T31875] tipc: Disabling bearer [ 798.034185][T31921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.137334][T11828] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.147254][T11828] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.170977][T11828] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.193142][T11828] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.211830][T11828] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.240393][T11828] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.260387][T11828] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.281124][T11828] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.310607][T11828] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.339490][T11828] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 798.600399][T31947] netlink: 'syz.2.7311': attribute type 1 has an invalid length. [ 798.627097][T31947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7311'. [ 798.634245][T31949] tipc: Enabling of bearer rejected, failed to enable media [ 798.700561][T31949] bond5: option lp_interval: invalid value (0) [ 798.707218][T31949] bond5: option lp_interval: allowed values 1 - 2147483647 [ 798.717303][T31949] bond5 (unregistering): Released all slaves [ 798.790254][T31950] bond5: option lp_interval: invalid value (0) [ 798.803682][T31961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7315'. [ 798.816166][T31950] bond5: option lp_interval: allowed values 1 - 2147483647 [ 798.888146][T31950] bond5 (unregistering): Released all slaves [ 798.960030][T31952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7313'. [ 799.450766][T31996] netlink: 'syz.0.7324': attribute type 3 has an invalid length. [ 799.500321][T31998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7326'. [ 799.536396][T31998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7326'. [ 799.579587][T31998] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 799.592948][T31998] bond5 (unregistering): Released all slaves [ 799.624890][T32006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7325'. [ 799.635800][T32006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7325'. [ 799.638360][T32009] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 799.672562][T32006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7325'. [ 799.684444][T32006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7325'. [ 799.880277][T32016] tipc: Enabled bearer , priority 0 [ 799.891039][T32016] syzkaller0: entered promiscuous mode [ 799.897311][T32016] syzkaller0: entered allmulticast mode [ 799.919147][T32016] tipc: Resetting bearer [ 799.933899][T32015] tipc: Resetting bearer [ 799.949430][T32015] tipc: Disabling bearer [ 800.264767][T32032] x_tables: duplicate underflow at hook 1 [ 801.175058][T32082] netlink: 'syz.0.7355': attribute type 12 has an invalid length. [ 801.355915][T32099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.321176][T20393] IPVS: starting estimator thread 0... [ 802.332343][T32152] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20000 [ 802.353837][T32153] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20000 [ 802.383794][T32158] netlink: 'syz.1.7372': attribute type 8 has an invalid length. [ 802.393838][T32157] netlink: 'syz.1.7372': attribute type 8 has an invalid length. [ 802.421537][T32156] IPVS: using max 23 ests per chain, 55200 per kthread [ 803.026208][T32174] vlan4: entered allmulticast mode [ 803.061975][T32179] __nla_validate_parse: 9 callbacks suppressed [ 803.061997][T32179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7379'. [ 803.315487][T32185] netlink: 'syz.4.7381': attribute type 1 has an invalid length. [ 803.357588][T32185] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7381'. [ 803.880446][T32205] bond5: Removing last arp target with arp_interval on [ 803.916030][T32213] netlink: 'syz.1.7389': attribute type 1 has an invalid length. [ 803.932649][T32205] xt_cluster: node mask cannot exceed total number of nodes [ 803.979941][T32213] 8021q: adding VLAN 0 to HW filter on device bond4 [ 804.051277][T32216] bond4: (slave geneve4): making interface the new active one [ 804.102158][T32216] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 804.117208][T32224] netlink: 'syz.2.7392': attribute type 2 has an invalid length. [ 804.140242][T32224] netlink: 'syz.2.7392': attribute type 11 has an invalid length. [ 804.168000][T32224] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7392'. [ 804.339158][T32235] Cannot find del_set index 4 as target [ 804.351017][T32233] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7395'. [ 804.498633][T32242] IPv6: NLM_F_CREATE should be specified when creating new route [ 804.565651][T32246] bond2: entered promiscuous mode [ 804.570761][T32246] bond2: entered allmulticast mode [ 804.577457][T32246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 804.591867][T32247] netem: change failed [ 804.687505][T32259] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7404'. [ 804.782041][T32263] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7406'. [ 804.855879][T32268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7408'. [ 805.018725][T32277] lo: entered allmulticast mode [ 805.042242][T32277] Cannot find add_set index 2 as target [ 805.067680][T32277] Cannot find add_set index 2 as target [ 805.130168][T32277] lo: left allmulticast mode [ 805.186610][T32293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7414'. [ 805.428531][T32303] sctp_getsockopt_maxseg: 23 callbacks suppressed [ 805.428555][T32303] sctp: [Deprecated]: syz.0.7420 (pid 32303) Use of int in maxseg socket option. [ 805.428555][T32303] Use struct sctp_assoc_value instead [ 805.635840][T32317] dvmrp0: entered allmulticast mode [ 805.665815][T32323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7422'. [ 805.809688][T32330] netlink: 'syz.3.7428': attribute type 1 has an invalid length. [ 805.896864][T32330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 805.946583][T32337] veth3: entered promiscuous mode [ 805.962334][T32330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7428'. [ 805.980742][T32337] bond6: (slave veth3): Enslaving as an active interface with a down link [ 806.013827][T32341] bond0: (slave bridge0): Releasing backup interface [ 806.020849][T32341] bond0: (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 806.089907][T32341] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 806.130470][T32342] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 806.155458][T32345] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 806.173121][T32345] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 806.258643][T32330] veth5: entered promiscuous mode [ 806.280912][T32330] bond6: (slave veth5): Enslaving as an active interface with a down link [ 806.297896][T32337] bond6: entered allmulticast mode [ 806.325560][T32336] syzkaller1: entered promiscuous mode [ 806.336669][T32336] syzkaller1: entered allmulticast mode [ 806.954635][T32400] netlink: 'syz.2.7445': attribute type 1 has an invalid length. [ 806.975370][T32400] netlink: 'syz.2.7445': attribute type 2 has an invalid length. [ 807.369697][T32429] xt_l2tp: v2 doesn't support IP mode [ 807.446528][T32425] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 807.737789][T32447] debugfs: '“&˜%àï÷åQÍ0@æjÛÈÊ«–Óéôð} ŽæýàÅ ¸Þ}³£!' already exists in 'ieee80211' [ 808.032230][T32466] 8021q: adding VLAN 0 to HW filter on device bond7 [ 808.116071][T32482] __nla_validate_parse: 12 callbacks suppressed [ 808.116094][T32482] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7467'. [ 808.406486][T32490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7470'. [ 808.446090][T32495] netlink: 'syz.2.7471': attribute type 1 has an invalid length. [ 808.513596][T32495] 8021q: adding VLAN 0 to HW filter on device bond3 [ 808.538897][T32491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7470'. [ 808.552871][T32491] veth0_macvtap: left promiscuous mode [ 808.569131][T32495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7471'. [ 808.664161][T32500] veth5: entered promiscuous mode [ 808.686533][T32500] bond3: (slave veth5): Enslaving as an active interface with a down link [ 808.773348][T32495] vlan4: entered allmulticast mode [ 808.778535][T32495] bond3: entered allmulticast mode [ 808.828241][T32495] bond3: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 808.911054][T32519] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7477'. [ 809.035298][T32523] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7477'. [ 809.095951][T32525] netlink: 'syz.3.7479': attribute type 2 has an invalid length. [ 809.111596][T32526] netlink: 'syz.3.7479': attribute type 2 has an invalid length. [ 809.233172][T32530] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7478'. [ 809.326078][T32534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7481'. [ 809.372368][T27713] Bluetooth: hci2: command 0x0406 tx timeout [ 809.382476][T32538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7478'. [ 810.001254][T32569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7489'. [ 810.123351][T32574] netlink: 'syz.1.7490': attribute type 39 has an invalid length. [ 810.360319][T32584] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 810.385602][T32584] bond5 (unregistering): Released all slaves [ 810.426081][T32592] vetè0_virt_wifi: renamed from dummy0 [ 810.588756][T32597] batadv_slave_0: entered promiscuous mode [ 810.622608][T32596] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 810.872300][T32597] batadv_slave_0: left promiscuous mode [ 810.908732][T32612] syzkaller1: entered promiscuous mode [ 810.915124][T32612] syzkaller1: entered allmulticast mode [ 811.103678][T32625] gretap0: entered promiscuous mode [ 811.110946][T32625] batadv_slave_1: entered promiscuous mode [ 811.117886][T32625] batadv_slave_1: left promiscuous mode [ 811.124395][T32625] gretap0: left promiscuous mode [ 811.184798][T32626] veth7: entered allmulticast mode [ 811.450152][T32642] xt_limit: Overflow, try lower: 271964/0 [ 811.630517][T32651] netlink: 'syz.0.7511': attribute type 10 has an invalid length. [ 811.659437][T32651] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.669089][T32651] team0: entered allmulticast mode [ 811.676530][T32654] netlink: 'syz.4.7512': attribute type 1 has an invalid length. [ 811.677008][T32651] team_slave_0: entered allmulticast mode [ 811.700181][T32651] team_slave_1: entered allmulticast mode [ 811.706897][T32651] bond0: (slave team0): Enslaving as an active interface with an up link [ 811.740455][T32654] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 812.039246][T32667] IPVS: Error connecting to the multicast addr [ 812.130248][T32686] netlink: 'syz.2.7521': attribute type 2 has an invalid length. [ 812.160030][T32681] nbd: device at index 64 is going down [ 812.263320][T32688] udevd[32688]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 812.320047][T32687] udevd[32687]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 812.509103][T32711] sctp: [Deprecated]: syz.4.7527 (pid 32711) Use of int in maxseg socket option. [ 812.509103][T32711] Use struct sctp_assoc_value instead [ 812.519184][T32709] netlink: 'syz.0.7525': attribute type 11 has an invalid length. [ 813.085549][T32747] netlink: 'syz.4.7537': attribute type 12 has an invalid length. [ 813.111522][T32745] netlink: 'syz.4.7537': attribute type 12 has an invalid length. [ 813.320475][T32757] SET target dimension over the limit! [ 813.993317][ T316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.008842][ T323] __nla_validate_parse: 16 callbacks suppressed [ 814.008864][ T323] netlink: 4340 bytes leftover after parsing attributes in process `syz.0.7553'. [ 814.021728][ T322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7552'. [ 814.177935][ T332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7554'. [ 814.203055][ T335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7555'. [ 814.222674][ T334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7556'. [ 814.336588][ T332] netlink: 'syz.1.7554': attribute type 5 has an invalid length. [ 814.639575][ T357] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7562'. [ 815.533908][ T396] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7575'. [ 815.577629][ T396] nbd: illegal input index -8454144 [ 815.593453][ T396] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7575'. [ 815.610379][ T408] netlink: 'syz.3.7578': attribute type 1 has an invalid length. [ 815.641697][T27713] block nbd0: Receive control failed (result -32) [ 815.714323][ T408] macvlan4: entered promiscuous mode [ 815.720201][ T408] macvlan4: entered allmulticast mode [ 815.743031][ T408] bond8: entered promiscuous mode [ 815.762379][ T408] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 815.780428][ T408] bond8: left promiscuous mode [ 815.820577][ T419] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7582'. [ 815.829530][ T417] : entered promiscuous mode [ 816.021326][ T429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7584'. [ 816.284360][ T446] ip6erspan0: entered promiscuous mode [ 816.453206][ T453] macsec1: entered promiscuous mode [ 816.459113][ T453] macsec1: entered allmulticast mode [ 816.465846][ T453] bridge0: entered allmulticast mode [ 816.473219][ T453] bridge0: port 4(macsec1) entered blocking state [ 816.479937][ T453] bridge0: port 4(macsec1) entered disabled state [ 816.494337][ T453] bridge0: left allmulticast mode [ 816.573905][ T459] netlink: 'syz.3.7595': attribute type 1 has an invalid length. [ 816.724985][ T459] bond9: entered promiscuous mode [ 816.730535][ T459] bond9: entered allmulticast mode [ 816.737023][ T459] 8021q: adding VLAN 0 to HW filter on device bond9 [ 816.768057][ T462] macvlan4: entered promiscuous mode [ 816.773811][ T462] macvlan4: entered allmulticast mode [ 816.786128][ T462] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 816.846141][ T469] syzkaller0: mtu less than device minimum [ 817.046731][ T483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 817.088752][ T485] netlink: 'syz.3.7601': attribute type 9 has an invalid length. [ 817.111976][ T485] netlink: 'syz.3.7601': attribute type 9 has an invalid length. [ 817.543912][ T514] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 817.552785][ T520] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 817.567660][ T514] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 817.826533][ T539] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 817.836336][ T537] x_tables: duplicate underflow at hook 2 [ 817.893746][ T535] x_tables: duplicate underflow at hook 2 [ 818.137939][ T556] : entered promiscuous mode [ 819.021981][ T600] __nla_validate_parse: 16 callbacks suppressed [ 819.022004][ T600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7635'. [ 819.077752][ T604] netlink: 'syz.1.7639': attribute type 2 has an invalid length. [ 819.110892][ T604] : entered promiscuous mode [ 819.159212][ T609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7641'. [ 819.234428][ T607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7640'. [ 819.300849][ T612] netlink: 'syz.4.7643': attribute type 1 has an invalid length. [ 819.405786][ T612] 8021q: adding VLAN 0 to HW filter on device bond5 [ 821.905526][ T673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7656'. [ 822.046265][ T684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7659'. [ 822.398287][ T711] SET target dimension over the limit! [ 822.416622][ T711] xt_l2tp: missing protocol rule (udp|l2tpip) [ 822.629941][ T722] veth0: entered promiscuous mode [ 822.653465][ T720] veth0: left promiscuous mode [ 822.680683][ T725] Unsupported ieee802154 address type: 0 [ 822.719861][ T725] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7671'. [ 822.810446][ T732] netlink: 'syz.1.7677': attribute type 11 has an invalid length. [ 823.370698][ T765] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7686'. [ 823.383617][ T765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7686'. [ 823.412907][ T765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7686'. [ 824.344031][ T783] netlink: 'syz.0.7691': attribute type 21 has an invalid length. [ 824.390498][ T783] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7691'. [ 824.414810][ T783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7691'. [ 825.063654][ T820] netlink: 260 bytes leftover after parsing attributes in process `syz.3.7699'. [ 825.109396][ T826] netlink: 260 bytes leftover after parsing attributes in process `syz.3.7699'. [ 825.110933][ T825] netlink: 'syz.0.7700': attribute type 10 has an invalid length. [ 825.165646][ T825] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7700'. [ 825.189340][ T825] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 825.234079][ T832] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7700'. [ 825.243157][ T825] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 825.243188][ T825] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 825.319270][ T835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7705'. [ 825.466071][T27713] Bluetooth: hci4: link tx timeout [ 825.471949][T27713] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 825.484279][T27713] Bluetooth: hci4: link tx timeout [ 825.489540][T27713] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 825.510066][T27713] Bluetooth: hci4: link tx timeout [ 825.517879][T27713] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 825.525888][T27713] Bluetooth: hci4: link tx timeout [ 825.534364][T27713] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 825.618370][ T851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7709'. [ 825.652521][ T854] x_tables: unsorted entry at hook 3 [ 825.785824][ T869] Bluetooth: MGMT ver 1.23 [ 825.838215][ T863] syzkaller0: entered promiscuous mode [ 825.867325][ T863] syzkaller0: entered allmulticast mode [ 825.925216][ T863] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7712'. [ 826.024595][ T886] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7716'. [ 826.106042][ T890] syzkaller1: entered promiscuous mode [ 826.112213][ T890] syzkaller1: entered allmulticast mode [ 826.124657][ T890] tipc: New replicast peer: 255.255.255.255 [ 826.133558][ T890] tipc: Enabled bearer , priority 10 [ 826.594198][ T922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.660538][ T924] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 827.252437][ T5927] tipc: Node number set to 369000244 [ 827.532902][T27713] Bluetooth: hci4: command 0x0405 tx timeout [ 828.137399][ T1011] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 828.943508][ T1066] netlink: 'syz.1.7770': attribute type 12 has an invalid length. [ 828.959796][ T1066] netlink: 'syz.1.7770': attribute type 29 has an invalid length. [ 829.133241][ T1084] veth0_to_bridge: left allmulticast mode [ 829.141020][ T1084] veth0_to_bridge: left promiscuous mode [ 829.158773][ T1084] bridge0: port 2(veth0_to_bridge) entered disabled state [ 829.177305][ T1084] bridge_slave_0: left allmulticast mode [ 829.184314][ T1084] bridge_slave_0: left promiscuous mode [ 829.190163][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.218965][ T1084] bond0: (slave bridge0): Releasing backup interface [ 829.266592][ T1090] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 829.308287][ T1093] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 829.489857][ T1100] nbd: must specify an index to disconnect [ 829.524502][ T1106] __nla_validate_parse: 21 callbacks suppressed [ 829.524535][ T1106] netlink: 216 bytes leftover after parsing attributes in process `syz.3.7780'. [ 829.610946][ T1109] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7783'. [ 829.637720][ T1112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7784'. [ 829.671216][ T1109] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7783'. [ 830.019416][ T1140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7791'. [ 830.036647][ T1141] netlink: 'syz.4.7791': attribute type 5 has an invalid length. [ 830.090832][ T1147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7794'. [ 830.112960][ T1147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7794'. [ 830.136940][ T1148] netlink: 'syz.2.7793': attribute type 1 has an invalid length. [ 830.146157][ T1147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7794'. [ 830.160853][ T1147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7794'. [ 830.306569][ T1159] bond4: (slave gretap3): making interface the new active one [ 830.315821][ T1159] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 831.000268][ T1207] netlink: 'syz.2.7809': attribute type 2 has an invalid length. [ 831.200630][ T1224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7813'. [ 831.210963][ T1221] bond0: entered promiscuous mode [ 831.210990][ T1221] bond3: entered promiscuous mode [ 831.215586][ T1221] batadv0: entered promiscuous mode [ 831.229233][ T1221] batadv0: left promiscuous mode [ 831.234949][ T1221] bond0: left promiscuous mode [ 831.239983][ T1221] bond3: left promiscuous mode [ 831.498423][ T1237] netlink: 'syz.1.7818': attribute type 3 has an invalid length. [ 831.584249][ T1184] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 831.713983][ T1251] vlan1: entered allmulticast mode [ 831.728336][ T1255] netlink: 'syz.2.7825': attribute type 21 has an invalid length. [ 831.752968][ T1255] netlink: 'syz.2.7825': attribute type 21 has an invalid length. [ 832.044875][ T1273] netlink: 'syz.2.7831': attribute type 12 has an invalid length. [ 832.055564][ T1273] netlink: 'syz.2.7831': attribute type 13 has an invalid length. [ 832.068218][ T1273] macvtap0: refused to change device tx_queue_len [ 832.380641][ T1301] tipc: Enabled bearer , priority 0 [ 832.403428][ T1301] syzkaller0: entered promiscuous mode [ 832.419156][ T1301] syzkaller0: entered allmulticast mode [ 832.456046][ T1301] tipc: Resetting bearer [ 832.479854][ T1298] tipc: Resetting bearer [ 832.519960][ T1298] tipc: Disabling bearer [ 832.533940][ T1311] xfrm1: entered promiscuous mode [ 832.539079][ T1311] xfrm1: entered allmulticast mode [ 832.955263][ T1332] pim6reg1: entered promiscuous mode [ 832.960624][ T1332] pim6reg1: entered allmulticast mode [ 833.208600][ T1347] 8021q: VLANs not supported on ip6gre0 [ 833.642029][ T1366] macvtap0: entered promiscuous mode [ 833.668529][ T1366] vlan0: entered promiscuous mode [ 833.690070][ T1366] macvtap0: entered allmulticast mode [ 833.737806][ T1366] vlan0: entered allmulticast mode [ 833.761257][ T1366] veth0_vlan: entered allmulticast mode [ 833.884277][ T1385] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 834.110655][ T1371] macvtap1: entered promiscuous mode [ 834.118279][ T1371] macvtap1: entered allmulticast mode [ 834.139684][ T1394] validate_nla: 8 callbacks suppressed [ 834.139708][ T1394] netlink: 'syz.3.7864': attribute type 20 has an invalid length. [ 834.253268][ T1394] netlink: 'syz.3.7864': attribute type 20 has an invalid length. [ 834.419318][ T1401] IPVS: persistence engine module ip_vs_pe_À not found [ 834.567672][ T1412] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 834.818574][ T1432] netlink: 'syz.4.7878': attribute type 10 has an invalid length. [ 834.836060][ T1433] netlink: 'syz.3.7877': attribute type 1 has an invalid length. [ 834.899777][ T1433] 8021q: adding VLAN 0 to HW filter on device bond12 [ 834.946540][ T1438] bond12: (slave veth7): Enslaving as an active interface with a down link [ 835.058686][ T1433] veth9: entered promiscuous mode [ 835.084736][ T1433] bond12: (slave veth9): Enslaving as an active interface with a down link [ 835.128459][ T1436] pimreg: entered allmulticast mode [ 835.235232][ T1454] vlan4: entered allmulticast mode [ 835.248022][ T1454] bond12: entered allmulticast mode [ 835.256484][ T30] audit: type=1107 audit(1763005329.892:11): pid=1452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I×Ú9Em\º1ÆïA%íÅÎØñ*`¿' [ 835.295843][ T1454] bond12: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 835.326814][ T1466] netlink: 'syz.4.7887': attribute type 1 has an invalid length. [ 835.340326][ T1466] __nla_validate_parse: 26 callbacks suppressed [ 835.340347][ T1466] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7887'. [ 835.507520][ T1470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7888'. [ 835.520110][ T1473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7889'. [ 835.794283][ T1492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7895'. [ 835.883694][ T1497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7898'. [ 835.889267][ T1499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7900'. [ 835.905469][ T1495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7897'. [ 835.962824][ T1504] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 836.010946][ T1502] SET target dimension over the limit! [ 836.148566][ T1513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7904'. [ 836.315132][ T1522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7907'. [ 836.616745][ T1539] netlink: 'syz.0.7910': attribute type 13 has an invalid length. [ 836.713347][ T1549] netlink: 'syz.4.7911': attribute type 1 has an invalid length. [ 836.857214][ T1549] bond6: entered promiscuous mode [ 836.879375][ T1549] 8021q: adding VLAN 0 to HW filter on device bond6 [ 836.899723][ T1555] netlink: 'syz.0.7914': attribute type 1 has an invalid length. [ 836.954223][ T1556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7914'. [ 836.970938][ T1550] wg1 speed is unknown, defaulting to 1000 [ 836.983724][ T1545] wg1 speed is unknown, defaulting to 1000 [ 836.983884][ T1550] hsr0 speed is unknown, defaulting to 1000 [ 837.040625][ T1555] 8021q: adding VLAN 0 to HW filter on device bond2 [ 837.048705][ T1545] hsr0 speed is unknown, defaulting to 1000 [ 837.784198][ T1580] vlan1: entered allmulticast mode [ 837.789536][ T1580] veth0_vlan: entered allmulticast mode [ 838.226145][ T1608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.273213][ T1598] macvtap1: entered promiscuous mode [ 838.282436][ T1598] macvtap1: entered allmulticast mode [ 838.551931][ T1618] TCP: TCP_TX_DELAY enabled [ 838.662705][ T1625] openvswitch: netlink: Missing valid actions attribute. [ 838.731676][ T1625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.297974][ T1624] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 839.310379][ T1624] bond5 (unregistering): Released all slaves [ 839.346093][ T1631] IPv6: sit2: Disabled Multicast RS [ 840.194232][ T1670] netlink: 'syz.1.7946': attribute type 29 has an invalid length. [ 840.229830][ T1670] netlink: 'syz.1.7946': attribute type 29 has an invalid length. [ 840.249381][ T1669] nbd: illegal input index -8454144 [ 840.386809][ T1681] __nla_validate_parse: 5 callbacks suppressed [ 840.386831][ T1681] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7947'. [ 840.427904][ T1681] 8021q: VLANs not supported on sit0 [ 840.608204][ T1699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7955'. [ 840.707111][ T1699] sctp: [Deprecated]: syz.2.7955 (pid 1699) Use of struct sctp_assoc_value in delayed_ack socket option. [ 840.707111][ T1699] Use struct sctp_sack_info instead [ 840.734318][ T1702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7957'. [ 840.748138][ T1702] netlink: 196 bytes leftover after parsing attributes in process `syz.1.7957'. [ 840.757913][ T1702] netlink: 196 bytes leftover after parsing attributes in process `syz.1.7957'. [ 840.769566][ T1702] netlink: 19 bytes leftover after parsing attributes in process `syz.1.7957'. [ 840.796083][ T1704] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7958'. [ 840.842225][ T1704] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7958'. [ 840.880111][ T1711] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 841.278096][ T1729] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7966'. [ 841.307403][ T1729] block nbd0: Unsupported socket: should be TCP or UNIX. [ 841.317022][ T30] audit: type=1804 audit(1763005335.972:12): pid=1735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7968" name="/newroot/350/cgroup.controllers" dev="tmpfs" ino=1801 res=1 errno=0 [ 841.355810][ T1731] openvswitch: netlink: Key type 204 is out of range max 32 [ 841.361238][ T30] audit: type=1800 audit(1763005335.972:13): pid=1735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7968" name="cgroup.controllers" dev="tmpfs" ino=1801 res=0 errno=0 [ 841.439536][ T1741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7969'. [ 842.073174][ T1774] xt_policy: output policy not valid in PREROUTING and INPUT [ 842.090545][ T1773] xt_policy: output policy not valid in PREROUTING and INPUT [ 842.796098][ T1811] x_tables: duplicate underflow at hook 2 [ 842.823417][ T1811] netlink: 'syz.2.7985': attribute type 23 has an invalid length. [ 842.828666][ T1818] bond7: entered allmulticast mode [ 842.838484][ T1818] 8021q: adding VLAN 0 to HW filter on device bond7 [ 843.008692][ T1823] syzkaller0: entered promiscuous mode [ 843.016264][ T1823] syzkaller0: entered allmulticast mode [ 845.517487][ T1866] __nla_validate_parse: 10 callbacks suppressed [ 845.517510][ T1866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8004'. [ 845.547035][ T1866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8004'. [ 845.561125][ T1870] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8005'. [ 845.582978][ T1873] netlink: 'syz.2.8004': attribute type 6 has an invalid length. [ 845.609757][ T1870] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8005'. [ 845.675743][ T1870] netlink: 'syz.0.8005': attribute type 5 has an invalid length. [ 845.699036][ T1870] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8005'. [ 846.112390][ T1892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.182422][ T1892] netlink: 'syz.2.8013': attribute type 11 has an invalid length. [ 846.190300][ T1892] netlink: 'syz.2.8013': attribute type 11 has an invalid length. [ 846.199127][ T1892] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8013'. [ 846.707111][ T1920] pim6reg: entered allmulticast mode [ 846.733154][ T1922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8024'. [ 846.746343][ T1928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8024'. [ 846.798282][ T1932] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8025'. [ 846.905372][ T1937] netlink: 'syz.4.8028': attribute type 33 has an invalid length. [ 846.917646][ T1937] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8028'. [ 846.954656][ T1940] vlan4: entered allmulticast mode [ 846.959974][ T1940] gretap0: entered allmulticast mode [ 847.009156][ T1941] vxcan1: entered allmulticast mode [ 847.386417][ T1954] pim6reg1: entered promiscuous mode [ 847.393928][ T1954] pim6reg1: entered allmulticast mode [ 847.832777][ T1984] syzkaller0: entered allmulticast mode [ 847.999949][ T1999] openvswitch: netlink: Flow key attr not present in new flow. [ 848.931759][ T2042] nbd: must specify at least one socket [ 849.578636][ T2072] tipc: Enabling of bearer rejected, failed to enable media [ 849.865954][ T2097] tipc: Enabled bearer , priority 0 [ 849.882086][ T2097] syzkaller0: entered promiscuous mode [ 849.888042][ T2097] syzkaller0: entered allmulticast mode [ 849.914491][ T2097] tipc: Resetting bearer [ 849.956502][ T2097] tipc: Disabling bearer [ 850.030722][ T2099] bond5: option lp_interval: invalid value (0) [ 850.037648][ T2099] bond5: option lp_interval: allowed values 1 - 2147483647 [ 850.050150][ T2099] bond5 (unregistering): Released all slaves [ 850.417356][ T2112] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 850.432993][ T2112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.852786][ T2138] netlink: 'syz.0.8082': attribute type 1 has an invalid length. [ 851.248588][ T2161] __nla_validate_parse: 14 callbacks suppressed [ 851.248610][ T2161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8086'. [ 851.625792][ T2174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8089'. [ 851.687486][ T2177] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8090'. [ 851.688711][ T2173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8089'. [ 851.921215][ T2191] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8095'. [ 852.110896][ T2200] netlink: 'syz.3.8098': attribute type 15 has an invalid length. [ 852.141676][ T2200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8098'. [ 852.145158][ T2198] bond5: entered promiscuous mode [ 852.157118][ T2198] bond5: entered allmulticast mode [ 852.163534][ T2198] 8021q: adding VLAN 0 to HW filter on device bond5 [ 852.189832][ T2196] netlink: 'syz.0.8096': attribute type 62 has an invalid length. [ 852.638332][ T2226] netlink: 'syz.3.8106': attribute type 9 has an invalid length. [ 853.205156][ T2268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 853.212860][ T2268] IPv6: NLM_F_CREATE should be set when creating new route [ 853.220406][ T2268] IPv6: NLM_F_CREATE should be set when creating new route [ 853.257923][ T2268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 853.272894][ T2271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8118'. [ 853.283525][ T2271] hsr_slave_0: left promiscuous mode [ 853.296589][ T2271] hsr_slave_1: left promiscuous mode [ 853.305870][ T2268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8116'. [ 853.358226][ T2268] bridge0: port 1(batadv1) entered blocking state [ 853.388405][ T2268] bridge0: port 1(batadv1) entered disabled state [ 853.411775][ T2268] batadv1: entered allmulticast mode [ 853.426167][ T2268] batadv1: entered promiscuous mode [ 853.745863][ T2291] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 853.796740][ T2291] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 853.842442][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 853.852039][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 853.947883][ T2305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8128'. [ 853.964128][ T2305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 854.129236][ T2318] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 854.235548][ T2324] bridge1: entered promiscuous mode [ 854.248159][ T2324] bridge1: entered allmulticast mode [ 854.289989][ T2329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8135'. [ 854.952193][ T2377] netlink: 'syz.4.8148': attribute type 1 has an invalid length. [ 855.045148][ T2385] mac80211_hwsim hwsim74 syzkaller0: entered promiscuous mode [ 855.054255][ T2385] mac80211_hwsim hwsim74 syzkaller0: entered allmulticast mode [ 855.087747][ T2377] gretap1: entered promiscuous mode [ 855.206355][ T2400] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 855.271569][ T2394] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 855.610483][ T2423] mac80211_hwsim hwsim74 wlan1: Caught tx_queue_len zero misconfig [ 856.454767][ T2495] __nla_validate_parse: 8 callbacks suppressed [ 856.454787][ T2495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8182'. [ 856.488172][ T2495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8182'. [ 856.499641][ T2495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8182'. [ 856.640161][ T2505] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8184'. [ 856.709126][ T2511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8186'. [ 856.759439][ T2511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8186'. [ 856.810175][ T2511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8186'. [ 856.852615][ T2530] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8187'. [ 856.880101][ T2511] ip6gretap0: entered promiscuous mode [ 856.919672][ T2514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8187'. [ 856.943294][ T2511] ip6gretap0: left promiscuous mode [ 857.439933][ T2559] batman_adv: batadv0: Adding interface: dummy0 [ 857.461469][ T2559] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.498828][ T2559] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 857.729612][ T2571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8197'. [ 858.656026][ T2642] tipc: Enabled bearer , priority 0 [ 858.697588][ T2642] syzkaller0: entered promiscuous mode [ 858.705531][ T2642] syzkaller0: entered allmulticast mode [ 858.753273][ T2642] tipc: Resetting bearer [ 858.769969][ T2640] tipc: Resetting bearer [ 858.827322][ T2640] tipc: Disabling bearer [ 858.932041][ T2660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.944069][ T2660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.039342][ T2664] netlink: 'syz.2.8222': attribute type 2 has an invalid length. [ 859.296937][ T2683] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 859.313143][ T2683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 859.335402][ T2692] openvswitch: netlink: IP tunnel dst address not specified [ 859.430656][ T2694] openvswitch: netlink: Flow key attr not present in new flow. [ 859.622173][ T2719] veth1_macvtap: left promiscuous mode [ 859.624153][ T2715] netlink: 'syz.0.8235': attribute type 1 has an invalid length. [ 859.867126][ T2731] netlink: 'syz.2.8241': attribute type 12 has an invalid length. [ 859.978255][ T2739] v: renamed from vlan0 [ 859.992243][ T2739] xt_hashlimit: size too large, truncated to 1048576 [ 860.292762][ T2741] veth0: entered promiscuous mode [ 860.299438][ T2740] veth0: left promiscuous mode [ 861.524772][ T2782] __nla_validate_parse: 19 callbacks suppressed [ 861.524795][ T2782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8254'. [ 861.546596][ T2782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8254'. [ 861.694449][ T2788] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8255'. [ 861.789468][ T2796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8258'. [ 861.820127][ T2796] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8258'. [ 861.839444][ T2796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8258'. [ 861.858334][ T2799] netlink: 'syz.2.8257': attribute type 2 has an invalid length. [ 861.868363][ T2799] netlink: 244 bytes leftover after parsing attributes in process `syz.2.8257'. [ 861.965543][ T2806] macvtap0: entered promiscuous mode [ 861.979387][ T2806] macvtap0: entered allmulticast mode [ 862.027472][ T2808] macvtap0: entered promiscuous mode [ 862.033407][ T2808] macvtap0: entered allmulticast mode [ 862.158787][ T2829] netlink: 'syz.2.8265': attribute type 1 has an invalid length. [ 862.234895][ T2832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8266'. [ 862.266868][ T2835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8266'. [ 862.612725][ T2855] nbd2: detected capacity change from 0 to 127 [ 862.633372][T27713] block nbd2: Receive control failed (result -32) [ 862.646627][ T2647] block nbd2: Dead connection, failed to find a fallback [ 862.662692][ T2647] block nbd2: shutting down sockets [ 862.667957][ T2647] blk_print_req_error: 11 callbacks suppressed [ 862.667974][ T2647] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.686980][ T2647] buffer_io_error: 11 callbacks suppressed [ 862.687000][ T2647] Buffer I/O error on dev nbd2, logical block 0, async page read [ 862.703983][ T2647] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.713399][ T2647] Buffer I/O error on dev nbd2, logical block 1, async page read [ 862.741726][ T2647] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.750825][ T2647] Buffer I/O error on dev nbd2, logical block 2, async page read [ 862.762613][ T2647] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.773121][ T2647] Buffer I/O error on dev nbd2, logical block 3, async page read [ 862.781180][ T2647] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.791247][ T2647] Buffer I/O error on dev nbd2, logical block 0, async page read [ 862.799459][ T2647] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.810022][ T2647] Buffer I/O error on dev nbd2, logical block 1, async page read [ 862.820099][ T2647] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.830583][ T2647] Buffer I/O error on dev nbd2, logical block 2, async page read [ 862.839479][ T2647] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.848878][ T2647] Buffer I/O error on dev nbd2, logical block 3, async page read [ 862.857015][ T2647] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.866963][ T2647] Buffer I/O error on dev nbd2, logical block 0, async page read [ 862.875016][ T2647] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.889996][ T2647] Buffer I/O error on dev nbd2, logical block 1, async page read [ 862.903018][ T2647] ldm_validate_partition_table(): Disk read failed. [ 862.912283][ T2647] Dev nbd2: unable to read RDB block 0 [ 862.920391][ T2647] nbd2: unable to read partition table [ 862.948184][ T2647] ldm_validate_partition_table(): Disk read failed. [ 862.956247][ T2877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8276'. [ 862.968102][ T2647] Dev nbd2: unable to read RDB block 0 [ 862.982312][ T2877] IPVS: Unknown mcast interface: vcan0 [ 862.993637][ T2647] nbd2: unable to read partition table [ 863.504960][ T2905] x_tables: duplicate underflow at hook 3 [ 864.003939][ T2932] tipc: New replicast peer: 255.255.255.255 [ 864.011164][ T2932] tipc: Enabled bearer , priority 10 [ 864.106561][ T2938] xt_connbytes: Forcing CT accounting to be enabled [ 864.587213][ T2972] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 864.601005][ T2972] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 864.634567][ T2972] openvswitch: netlink: Message has 6 unknown bytes. [ 864.801055][ T2983] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 864.994381][ T2989] netlink: 'syz.1.8315': attribute type 10 has an invalid length. [ 865.020987][ T2990] netlink: 'syz.1.8315': attribute type 10 has an invalid length. [ 865.208045][ T5915] tipc: Node number set to 1972098430 [ 866.044126][ T3043] netlink: 'syz.1.8328': attribute type 1 has an invalid length. [ 866.127878][ T3043] 8021q: adding VLAN 0 to HW filter on device bond6 [ 866.876683][ T3101] x_tables: duplicate underflow at hook 1 [ 866.924108][ T3105] __nla_validate_parse: 15 callbacks suppressed [ 866.924133][ T3105] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8345'. [ 867.203174][ T3111] netlink: 'syz.1.8349': attribute type 6 has an invalid length. [ 867.213968][ T3111] netlink: 'syz.1.8349': attribute type 6 has an invalid length. [ 867.353889][ T3115] netlink: 204 bytes leftover after parsing attributes in process `syz.1.8350'. [ 867.367860][ T3116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8350'. [ 867.649632][ T3133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8356'. [ 867.768105][ T3140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8356'. [ 867.839349][ T3073] udevd[3073]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 867.860708][ T3140] nbd: device at index 64 is going down [ 868.341219][ T3164] veth1_macvtap: left promiscuous mode [ 868.598218][ T3156] syzkaller0: entered allmulticast mode [ 868.613835][ T3163] syzkaller0: mtu less than device minimum [ 868.644010][ T3173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8365'. [ 868.760049][ T3181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8367'. [ 868.856267][ T3181] macsec1: entered promiscuous mode [ 868.908335][ T3198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8370'. [ 868.909948][ T3181] macsec1: entered allmulticast mode [ 868.918375][ T3198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8370'. [ 868.936101][ T3181] bond5: (slave macsec1): Error -34 calling dev_set_mtu [ 868.966197][ T3198] bridge0: port 4(vlan0) entered blocking state [ 868.973172][ T3199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8370'. [ 868.989727][ T3198] bridge0: port 4(vlan0) entered disabled state [ 868.998170][ T3198] vlan0: entered allmulticast mode [ 869.047808][ T3198] bridge0: entered allmulticast mode [ 869.062871][ T3198] vlan0: left allmulticast mode [ 869.068231][ T3198] bridge0: left allmulticast mode [ 871.297857][ T3229] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 872.090218][ T3257] __nla_validate_parse: 2 callbacks suppressed [ 872.090238][ T3257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8387'. [ 872.109067][ T3257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8387'. [ 872.213412][ T3259] x_tables: duplicate underflow at hook 1 [ 872.677766][ T3272] lo: entered allmulticast mode [ 872.733805][ T3272] lo: left allmulticast mode [ 872.755977][ T3279] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8395'. [ 872.760749][ T3280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8396'. [ 872.775523][ T3280] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 872.784297][ T3280] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8396'. [ 872.802941][ T3279] netlink: 'syz.1.8395': attribute type 2 has an invalid length. [ 872.875017][ T3279] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20007 [ 873.063970][ T3294] nbd: must specify a device to reconfigure [ 873.106728][ T3295] syzkaller0: entered promiscuous mode [ 873.113258][ T3295] syzkaller0: entered allmulticast mode [ 873.159439][ T3299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8403'. [ 873.432965][ T3315] netlink: 'syz.4.8408': attribute type 3 has an invalid length. [ 873.442740][ T3298] wg1 speed is unknown, defaulting to 1000 [ 873.466708][ T3298] hsr0 speed is unknown, defaulting to 1000 [ 873.696200][ T3335] tipc: Enabled bearer , priority 0 [ 873.795830][ T3342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8415'. [ 874.267398][ T3359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8419'. [ 874.279903][ T3359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8419'. [ 874.319367][ T3363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.334367][ T3359] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8419'. [ 874.751218][ T3383] tipc: Enabled bearer , priority 0 [ 874.779347][ T3383] syzkaller0: entered promiscuous mode [ 874.797293][ T3383] syzkaller0: entered allmulticast mode [ 874.870866][ T3383] tipc: Resetting bearer [ 874.904517][ T3383] tipc: Resetting bearer [ 875.001043][ T3383] tipc: Disabling bearer [ 875.449746][ T3422] : entered promiscuous mode [ 875.494098][ T3427] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 875.522338][ T3431] netlink: 'syz.2.8438': attribute type 1 has an invalid length. [ 875.646099][ T3431] netlink: 'syz.2.8438': attribute type 1 has an invalid length. [ 875.672324][ T3438] vlan0: entered promiscuous mode [ 875.677689][ T3438] hsr_slave_1: entered promiscuous mode [ 875.685588][ T3438] vlan0: entered allmulticast mode [ 875.700426][ T3438] hsr_slave_1: entered allmulticast mode [ 875.729563][ T3432] bond6: (slave geneve2): making interface the new active one [ 875.738137][ T3432] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 875.749491][ T3431] netlink: 'syz.2.8438': attribute type 1 has an invalid length. [ 875.759522][ T3431] netlink: 'syz.2.8438': attribute type 1 has an invalid length. [ 875.767909][ T3431] netlink: 'syz.2.8438': attribute type 1 has an invalid length. [ 875.776205][ T3431] netlink: 'syz.2.8438': attribute type 1 has an invalid length. [ 875.785132][ T3431] netlink: 'syz.2.8438': attribute type 1 has an invalid length. [ 875.793371][ T3431] netlink: 'syz.2.8438': attribute type 1 has an invalid length. [ 875.821585][T10961] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 875.830482][T10961] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 875.840415][T10961] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 875.860738][T10961] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 875.877405][ T3447] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 876.030845][ T3450] bond0: (slave bond_slave_1): Releasing backup interface [ 876.101023][ T3440] mac80211_hwsim hwsim74 syzkaller0: left promiscuous mode [ 876.119775][ T3440] mac80211_hwsim hwsim74 syzkaller0: left allmulticast mode [ 876.606208][ T3486] IPVS: set_ctl: invalid protocol: 60 172.30.0.1:20002 [ 877.190018][ T3505] syzkaller0: entered promiscuous mode [ 877.202846][ T3505] syzkaller0: entered allmulticast mode [ 877.389553][ T3519] __nla_validate_parse: 7 callbacks suppressed [ 877.389572][ T3519] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.8462'. [ 877.844429][ T3549] IPVS: length: 82 != 8 [ 877.873415][ T3547] validate_nla: 58 callbacks suppressed [ 877.873436][ T3547] netlink: 'syz.2.8474': attribute type 29 has an invalid length. [ 877.887883][ T3547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8474'. [ 878.043163][ T3556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 878.223577][ T3566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8477'. [ 878.306360][ T3568] bond7: ARP target 1.0.0.0 is already present [ 878.314667][ T3568] bond7: option arp_ip_target: invalid value (1) [ 878.327386][ T3572] netlink: 'syz.3.8479': attribute type 39 has an invalid length. [ 878.332206][ T3568] bond7 (unregistering): Released all slaves [ 878.435502][ T3579] netlink: 'syz.4.8480': attribute type 6 has an invalid length. [ 878.445467][ T3575] netlink: 'syz.4.8480': attribute type 6 has an invalid length. [ 878.717231][ T3592] netlink: 'syz.4.8484': attribute type 10 has an invalid length. [ 878.774349][ T3592] syzkaller0: entered allmulticast mode [ 878.839014][ T3597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.925148][ T3600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.505033][ T3632] netlink: 284 bytes leftover after parsing attributes in process `syz.0.8495'. [ 879.650757][ T3641] IPv6: sit2: Disabled Multicast RS [ 879.864052][ T3653] mac80211_hwsim hwsim74 syzkaller0: entered promiscuous mode [ 879.873202][ T3653] mac80211_hwsim hwsim74 syzkaller0: entered allmulticast mode [ 879.957656][ T3658] tipc: Resetting bearer [ 880.215855][ T3666] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8503'. [ 880.403792][ T3679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8506'. [ 880.523529][ T3679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8506'. [ 880.523639][ T3685] ip6tnl0: Caught tx_queue_len zero misconfig [ 880.592359][ T9922] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.616617][ T9922] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.665435][ T9922] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.907517][ T3704] netlink: 'syz.3.8514': attribute type 1 has an invalid length. [ 880.942573][ T3704] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8514'. [ 881.042421][ T3704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8514'. [ 881.065161][ T3712] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.318215][ T3733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8522'. [ 881.346634][ T3733] netlink: 'syz.4.8522': attribute type 6 has an invalid length. [ 881.536311][ T3746] netlink: 'syz.4.8526': attribute type 12 has an invalid length. [ 881.616619][ T3746] bond9: option primary_reselect: invalid value (255) [ 881.637899][ T3746] bond9 (unregistering): Released all slaves [ 881.717742][ T3747] wg1 speed is unknown, defaulting to 1000 [ 881.730205][ T3747] hsr0 speed is unknown, defaulting to 1000 [ 881.738717][ T3760] netlink: 'syz.0.8528': attribute type 1 has an invalid length. [ 882.439393][ T3781] __nla_validate_parse: 3 callbacks suppressed [ 882.439414][ T3781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8535'. [ 882.763633][ T3798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8540'. [ 882.775285][ T3798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8540'. [ 882.943380][ T3804] lo: Caught tx_queue_len zero misconfig [ 883.059963][ T3804] netlink: 'syz.0.8543': attribute type 4 has an invalid length. [ 883.247381][ T3820] netlink: 'syz.4.8547': attribute type 1 has an invalid length. [ 883.256426][ T3820] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8547'. [ 883.293197][ T3819] netlink: 'syz.0.8549': attribute type 12 has an invalid length. [ 883.303742][ T3819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8549'. [ 883.323372][ T3819] netlink: 'syz.0.8549': attribute type 12 has an invalid length. [ 883.354219][ T3819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8549'. [ 883.449697][ T3828] netlink: 'syz.4.8551': attribute type 9 has an invalid length. [ 883.482101][ T3828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8551'. [ 883.512332][ T3828] netlink: 'syz.4.8551': attribute type 9 has an invalid length. [ 883.540578][ T3828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8551'. [ 883.597831][ T3837] Unknown options in mask b7f2 [ 883.619058][ T3840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 883.758222][ T5947] IPVS: starting estimator thread 0... [ 883.774301][ T3846] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 883.806633][ T3848] tipc: Enabled bearer , priority 10 [ 883.871485][ T3850] IPVS: using max 28 ests per chain, 67200 per kthread [ 883.977463][ T3859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8561'. [ 883.988952][ T3859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 884.024002][ T3859] veth13: entered promiscuous mode [ 884.037616][ T3864] macsec0: entered promiscuous mode [ 884.038727][ T3863] netdevsim netdevsim0: Direct firmware load for /.€ failed with error -2 [ 884.043870][ T3864] macsec0: entered allmulticast mode [ 884.053792][ T3863] netdevsim netdevsim0: Falling back to sysfs fallback for: /.€ [ 884.086719][ T3867] netlink: 'syz.0.8563': attribute type 1 has an invalid length. [ 884.100283][ T3867] netlink: 'syz.0.8563': attribute type 1 has an invalid length. [ 884.108757][ T3867] netlink: 'syz.0.8563': attribute type 1 has an invalid length. [ 884.127279][ T3867] netlink: 'syz.0.8563': attribute type 2 has an invalid length. [ 884.143598][ T3867] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8563'. [ 884.512619][ T3882] delete_channel: no stack [ 884.736216][ T3898] tipc: Enabled bearer , priority 0 [ 884.827244][ T3898] syzkaller0: entered promiscuous mode [ 884.842271][ T3898] syzkaller0: entered allmulticast mode [ 884.860584][ T3898] tipc: Resetting bearer [ 884.955363][ T3912] syzkaller0: entered promiscuous mode [ 884.960918][ T3912] syzkaller0: entered allmulticast mode [ 885.014175][ T3897] tipc: Resetting bearer [ 885.056136][ T3920] can: request_module (can-proto-0) failed. [ 887.111988][ T3897] tipc: Disabling bearer [ 887.784770][ T3958] __nla_validate_parse: 1 callbacks suppressed [ 887.784792][ T3958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8588'. [ 887.898349][ T3961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8590'. [ 887.925008][ T3966] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8592'. [ 887.940455][ T3967] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8592'. [ 887.958955][ T3965] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8591'. [ 887.969698][ T3965] netlink: 59 bytes leftover after parsing attributes in process `syz.3.8591'. [ 887.984324][ T3961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8590'. [ 887.992957][ T3968] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8591'. [ 888.029076][ T3968] netlink: 59 bytes leftover after parsing attributes in process `syz.3.8591'. [ 888.100676][ T3961] bond9: entered promiscuous mode [ 888.114208][ T3961] 8021q: adding VLAN 0 to HW filter on device bond9 [ 888.187924][ T3976] "syz.3.8594" (3976) uses obsolete ecb(arc4) skcipher [ 888.533466][ T3990] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8599'. [ 888.561421][ T3990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 888.585369][ T3994] validate_nla: 6 callbacks suppressed [ 888.585390][ T3994] netlink: 'syz.0.8600': attribute type 33 has an invalid length. [ 888.690185][ T3994] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 888.714066][ T3994] bond4 (unregistering): Released all slaves [ 889.094216][ T4030] tipc: Cannot configure node identity twice [ 889.349024][ T4042] netlink: 'syz.3.8614': attribute type 64 has an invalid length. [ 889.584153][ T4052] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 889.622616][ T4052] netlink: 'syz.0.8619': attribute type 1 has an invalid length. [ 889.639609][ T4052] netlink: 'syz.0.8619': attribute type 3 has an invalid length. [ 889.655484][ T4052] NCSI netlink: No device for ifindex 813332851 [ 889.772577][T27713] Bluetooth: hci4: command 0x0405 tx timeout [ 890.125436][ T4078] syzkaller0: entered promiscuous mode [ 890.132240][ T4078] syzkaller0: entered allmulticast mode [ 890.583061][ T4099] netlink: 'syz.0.8633': attribute type 29 has an invalid length. [ 890.593009][ T4104] netlink: 'syz.0.8633': attribute type 29 has an invalid length. [ 890.622544][ T4097] wg1 speed is unknown, defaulting to 1000 [ 890.630483][ T4097] hsr0 speed is unknown, defaulting to 1000 [ 890.750299][ T4108] netlink: 'syz.0.8638': attribute type 28 has an invalid length. [ 890.758957][ T4108] netlink: 'syz.0.8638': attribute type 3 has an invalid length. [ 891.685553][ T4135] netlink: 'syz.2.8643': attribute type 10 has an invalid length. [ 891.786648][ T4135] team0: Port device dummy0 added [ 892.818082][ T4185] veth0_to_bond: entered allmulticast mode [ 893.049704][ T4199] __nla_validate_parse: 15 callbacks suppressed [ 893.049730][ T4199] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8658'. [ 893.224844][ T4206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8659'. [ 893.262897][ T4211] netlink: 'syz.3.8662': attribute type 30 has an invalid length. [ 893.273488][ T4203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8660'. [ 893.288694][ T4203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8660'. [ 893.362188][ T4204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8660'. [ 893.392761][ T4204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8660'. [ 893.403143][ T4204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8660'. [ 893.416571][ T4204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8660'. [ 893.426878][ T4204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8660'. [ 893.480277][ T4211] bond13: option arp_missed_max: invalid value (0) [ 893.487956][ T4211] bond13: option arp_missed_max: allowed values 1 - 255 [ 893.507872][ T4211] bond13 (unregistering): Released all slaves [ 893.813207][ T4244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8669'. [ 893.973004][ T4257] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 894.058086][ T4258] netlink: 'syz.0.8670': attribute type 7 has an invalid length. [ 894.066708][ T4258] netlink: 'syz.0.8670': attribute type 8 has an invalid length. [ 894.157974][ T4264] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 894.269278][ T4274] netlink: 'syz.2.8678': attribute type 13 has an invalid length. [ 894.479175][ T4294] openvswitch: netlink: Flow key attr not present in new flow. [ 894.545273][ T4287] syzkaller1: entered promiscuous mode [ 894.552972][ T4287] syzkaller1: entered allmulticast mode [ 894.911048][ T4318] netlink: 'syz.4.8690': attribute type 1 has an invalid length. [ 895.266153][ T4343] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 895.330882][ T4345] netlink: 'syz.3.8697': attribute type 1 has an invalid length. [ 895.706104][ T4370] xt_CT: No such helper "snmp_trap" [ 895.995650][ T4384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 896.953653][ T4430] [ 896.956040][ T4430] ====================================================== [ 896.963142][ T4430] WARNING: possible circular locking dependency detected [ 896.970161][ T4430] syzkaller #0 Not tainted [ 896.974573][ T4430] ------------------------------------------------------ [ 896.981765][ T4430] syz.1.8724/4430 is trying to acquire lock: [ 896.987831][ T4430] ffffffff8f426358 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 896.997156][ T4430] [ 896.997156][ T4430] but task is already holding lock: [ 897.004520][ T4430] ffff888048c36870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 897.013833][ T4430] [ 897.013833][ T4430] which lock already depends on the new lock. [ 897.013833][ T4430] [ 897.024236][ T4430] [ 897.024236][ T4430] the existing dependency chain (in reverse order) is: [ 897.033336][ T4430] [ 897.033336][ T4430] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 897.041342][ T4430] lock_acquire+0x120/0x360 [ 897.046375][ T4430] _raw_spin_lock_bh+0x36/0x50 [ 897.051661][ T4430] nr_rt_ioctl+0x193/0xd50 [ 897.056610][ T4430] sock_do_ioctl+0xdc/0x300 [ 897.061639][ T4430] sock_ioctl+0x576/0x790 [ 897.066748][ T4430] __se_sys_ioctl+0xfc/0x170 [ 897.071883][ T4430] do_syscall_64+0xfa/0xfa0 [ 897.077197][ T4430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.083615][ T4430] [ 897.083615][ T4430] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 897.091435][ T4430] lock_acquire+0x120/0x360 [ 897.096458][ T4430] _raw_spin_lock_bh+0x36/0x50 [ 897.101746][ T4430] nr_rt_device_down+0xa9/0x720 [ 897.107128][ T4430] nr_device_event+0x137/0x150 [ 897.112410][ T4430] notifier_call_chain+0x1b6/0x3e0 [ 897.118048][ T4430] __dev_notify_flags+0x18d/0x2e0 [ 897.123608][ T4430] netif_change_flags+0xe8/0x1a0 [ 897.129069][ T4430] dev_change_flags+0x130/0x260 [ 897.134450][ T4430] dev_ioctl+0x7b4/0x1150 [ 897.139303][ T4430] sock_do_ioctl+0x22c/0x300 [ 897.144413][ T4430] sock_ioctl+0x576/0x790 [ 897.149269][ T4430] __se_sys_ioctl+0xfc/0x170 [ 897.154386][ T4430] do_syscall_64+0xfa/0xfa0 [ 897.159508][ T4430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.165925][ T4430] [ 897.165925][ T4430] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 897.173930][ T4430] validate_chain+0xb9b/0x2140 [ 897.179229][ T4430] __lock_acquire+0xab9/0xd20 [ 897.184426][ T4430] lock_acquire+0x120/0x360 [ 897.189443][ T4430] _raw_spin_lock_bh+0x36/0x50 [ 897.194732][ T4430] nr_remove_neigh+0x25/0xe0 [ 897.199842][ T4430] nr_add_node+0x1d9f/0x2570 [ 897.204958][ T4430] nr_rt_ioctl+0xc12/0xd50 [ 897.209898][ T4430] sock_do_ioctl+0xdc/0x300 [ 897.214924][ T4430] sock_ioctl+0x576/0x790 [ 897.219775][ T4430] __se_sys_ioctl+0xfc/0x170 [ 897.224887][ T4430] do_syscall_64+0xfa/0xfa0 [ 897.230782][ T4430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.237218][ T4430] [ 897.237218][ T4430] other info that might help us debug this: [ 897.237218][ T4430] [ 897.247615][ T4430] Chain exists of: [ 897.247615][ T4430] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 897.247615][ T4430] [ 897.261524][ T4430] Possible unsafe locking scenario: [ 897.261524][ T4430] [ 897.269057][ T4430] CPU0 CPU1 [ 897.274508][ T4430] ---- ---- [ 897.279958][ T4430] lock(&nr_node->node_lock); [ 897.284723][ T4430] lock(nr_node_list_lock); [ 897.291835][ T4430] lock(&nr_node->node_lock); [ 897.299143][ T4430] lock(nr_neigh_list_lock); [ 897.303821][ T4430] [ 897.303821][ T4430] *** DEADLOCK *** [ 897.303821][ T4430] [ 897.311959][ T4430] 1 lock held by syz.1.8724/4430: [ 897.316992][ T4430] #0: ffff888048c36870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 897.326765][ T4430] [ 897.326765][ T4430] stack backtrace: [ 897.332660][ T4430] CPU: 0 UID: 0 PID: 4430 Comm: syz.1.8724 Not tainted syzkaller #0 PREEMPT(full) [ 897.332680][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 897.332690][ T4430] Call Trace: [ 897.332699][ T4430] [ 897.332707][ T4430] dump_stack_lvl+0x189/0x250 [ 897.332732][ T4430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 897.332751][ T4430] ? __pfx__printk+0x10/0x10 [ 897.332765][ T4430] ? stack_trace_save+0x9c/0xe0 [ 897.332789][ T4430] print_circular_bug+0x2ee/0x310 [ 897.332810][ T4430] check_noncircular+0x134/0x160 [ 897.332830][ T4430] validate_chain+0xb9b/0x2140 [ 897.332855][ T4430] __lock_acquire+0xab9/0xd20 [ 897.332871][ T4430] ? nr_remove_neigh+0x25/0xe0 [ 897.332889][ T4430] lock_acquire+0x120/0x360 [ 897.332902][ T4430] ? nr_remove_neigh+0x25/0xe0 [ 897.332922][ T4430] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 897.332942][ T4430] ? nr_remove_neigh+0x25/0xe0 [ 897.332960][ T4430] _raw_spin_lock_bh+0x36/0x50 [ 897.332978][ T4430] ? nr_remove_neigh+0x25/0xe0 [ 897.332996][ T4430] nr_remove_neigh+0x25/0xe0 [ 897.333015][ T4430] nr_add_node+0x1d9f/0x2570 [ 897.333033][ T4430] ? __asan_memcpy+0x40/0x70 [ 897.333053][ T4430] ? nr_call_to_digi+0x126/0x1b0 [ 897.333071][ T4430] nr_rt_ioctl+0xc12/0xd50 [ 897.333092][ T4430] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 897.333108][ T4430] ? lockdep_hardirqs_on+0x9c/0x150 [ 897.333131][ T4430] ? apparmor_capable+0x137/0x1b0 [ 897.333151][ T4430] ? capable+0x89/0xe0 [ 897.333166][ T4430] ? nr_ioctl+0x1b1/0x3b0 [ 897.333181][ T4430] sock_do_ioctl+0xdc/0x300 [ 897.333201][ T4430] ? __pfx_sock_do_ioctl+0x10/0x10 [ 897.333225][ T4430] sock_ioctl+0x576/0x790 [ 897.333243][ T4430] ? __pfx_sock_ioctl+0x10/0x10 [ 897.333262][ T4430] ? __fget_files+0x3a0/0x420 [ 897.333275][ T4430] ? __fget_files+0x2a/0x420 [ 897.333289][ T4430] ? bpf_lsm_file_ioctl+0x9/0x20 [ 897.333305][ T4430] ? __pfx_sock_ioctl+0x10/0x10 [ 897.333329][ T4430] __se_sys_ioctl+0xfc/0x170 [ 897.333348][ T4430] do_syscall_64+0xfa/0xfa0 [ 897.333369][ T4430] ? lockdep_hardirqs_on+0x9c/0x150 [ 897.333395][ T4430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.333410][ T4430] ? clear_bhb_loop+0x60/0xb0 [ 897.333426][ T4430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.333440][ T4430] RIP: 0033:0x7ff2cc78f6c9 [ 897.333455][ T4430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.333469][ T4430] RSP: 002b:00007ff2cd65f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 897.333486][ T4430] RAX: ffffffffffffffda RBX: 00007ff2cc9e5fa0 RCX: 00007ff2cc78f6c9 [ 897.333498][ T4430] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000004 [ 897.333508][ T4430] RBP: 00007ff2cc811f91 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 897.333518][ T4430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.333527][ T4430] R13: 00007ff2cc9e6038 R14: 00007ff2cc9e5fa0 R15: 00007fffe4c28178 [ 897.333544][ T4430] [ 897.635512][ T4428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 898.212602][T28927] bond0: (slave syz_tun): Releasing backup interface [ 898.474361][T11828] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.485474][T11828] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.496875][T11828] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 898.555272][T11828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.565883][T11828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.576713][T11828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 898.642811][T11828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.653572][T11828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.664779][T11828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 898.944514][T11828] bond4 (unregistering): (slave geneve4): Releasing active interface [ 899.356692][T11828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.366624][T11828] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 899.376559][T11828] bond0 (unregistering): Released all slaves [ 899.510687][T11828] bond1 (unregistering): (slave veth3): Releasing active interface [ 899.520709][T11828] bond1 (unregistering): Released all slaves [ 899.638559][T11828] bond2 (unregistering): Released all slaves [ 899.758229][T11828] bond3 (unregistering): Released all slaves [ 899.769590][T11828] bond4 (unregistering): Released all slaves [ 899.888235][T11828] bond5 (unregistering): Released all slaves [ 900.003272][T11828] bond6 (unregistering): Released all slaves [ 900.065202][T11828] : left promiscuous mode [ 900.122244][T11828] : left promiscuous mode [ 900.163997][T11828] tipc: Disabling bearer [ 900.169390][T11828] tipc: Left network mode [ 900.447833][T11828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.456106][T11828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.465074][T11828] batman_adv: batadv0: Removing interface: dummy0 [ 900.473216][T11828] veth0_macvtap: left allmulticast mode [ 900.512684][T11828] pim6reg (unregistering): left allmulticast mode [ 900.808792][T11828] team0 (unregistering): Port device team_slave_1 removed [ 900.855592][T11828] team0 (unregistering): Port device team_slave_0 removed [ 901.406811][T11828] IPVS: stop unused estimator thread 0...