last executing test programs: 8m35.286269245s ago: executing program 3 (id=2701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="f8ffff00000000d528", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000200015"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m34.954620403s ago: executing program 3 (id=2704): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "408b1465cc98145235faa3108e14d7b2fee081eb57514a4196af7d15b24d9eb526931a287b2e7c3c563ca407db93c418bddf98a2dbff0f1ac7fa6d079ef090fb51"}}]}, 0x17c}}, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r4}]}, 0x24}}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r6}]}, 0x1c}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x4e20, 0x9, 0x4e24, 0x0, 0xa, 0x0, 0x80, 0xff, r4, r6}, {0x0, 0x7, 0x6, 0x0, 0x5, 0x2, 0x99, 0x7}, {0x6, 0x7, 0xbab8, 0x3}, 0x4fe, 0x6e6bbe, 0x0, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d6, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x4, 0x0, 0xaa, 0x5, 0xeaf8, 0x6}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8m33.964305821s ago: executing program 3 (id=2709): socket$netlink(0x10, 0x3, 0x12) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @multicast, @remote, @link_local, @loopback}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 8m31.85304558s ago: executing program 3 (id=2724): syz_emit_ethernet(0x46, &(0x7f0000000f00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x15, 0xd}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @broadcast}}, 0x3, 0x0, 0x36, 0x9, 0xf}, &(0x7f0000000500)=0x98) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x3ff, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4}, 0x20) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmmsg$unix(r3, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/220, 0xdc}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000000)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xe44f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xef}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000884}, 0x20040001) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000080), &(0x7f00000001c0)=r7}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000005400000054000000080000000000000000000003000000000100000003000000020000000200000000000008"], 0x0, 0x74, 0x0, 0x1, 0x8}, 0x28) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xa2, r6, 0x200, 0x70bd25, 0x25dfdbfd}, 0x40}}, 0x40050) 8m29.996574843s ago: executing program 3 (id=2732): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x25, 0x0, 0x1, 0xfffffffd}, {}, {0x81}, {0x0, 0x1}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8090}, 0x8000) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0xe, 0x357487ab4c96131) connect$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) 8m28.941900583s ago: executing program 3 (id=2737): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) (async) unshare(0x6a040000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x1c, 0x107, 0x70bd2b, 0x0, {0x21, 0x7c}, [@typed={0xc, 0x27, 0x0, 0x0, @u64=0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x6, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x0, 0x0, 0x0, 0x4}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x6, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000100)=0x204, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r5, 0x4}, &(0x7f00000002c0)=0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r6, 0x0, 0x4, &(0x7f0000000180)="6e54922475cc82ac929c77e2efee814133c8cef498f82ac131d79c4a43707d0ada99235f87de5e0c77", 0x29) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000200)=""/124, 0x7c}) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000200)=""/124, 0x7c}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 8m13.80615187s ago: executing program 32 (id=2737): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) (async) unshare(0x6a040000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x1c, 0x107, 0x70bd2b, 0x0, {0x21, 0x7c}, [@typed={0xc, 0x27, 0x0, 0x0, @u64=0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x6, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x0, 0x0, 0x0, 0x4}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x6, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000100)=0x204, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r5, 0x4}, &(0x7f00000002c0)=0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r6, 0x0, 0x4, &(0x7f0000000180)="6e54922475cc82ac929c77e2efee814133c8cef498f82ac131d79c4a43707d0ada99235f87de5e0c77", 0x29) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000200)=""/124, 0x7c}) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000200)=""/124, 0x7c}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3m41.284182523s ago: executing program 1 (id=4272): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x10}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800feea, [0x1]}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r6) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x9}]}}]}, 0x3c}}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 3m38.94821585s ago: executing program 1 (id=4277): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x4000, &(0x7f0000000040)={@align=0x1, {0x7fff, 0x7, 0x8469, 0x100000000}}, 0x3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000400)=0x400000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x1, 0x4, 0x280000, 0x1009, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78000000130005000100000000000200079269cb", @ANYRES32=r4, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180080001000100000008000200", @ANYRES32, @ANYBLOB="02080003", @ANYRES32, @ANYBLOB="2c000680"], 0x78}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4d8, 0x9, 0x1368fafd, 0x20, r1, 0x7, '\x00', r4, r0, 0x2, 0x1, 0x1, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000540)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0ff980", 0x10, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m38.449195869s ago: executing program 1 (id=4283): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c"], 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r6, @ANYBLOB="56060800000000002400128009000100626f6e640000000014000280050022"], 0x44}}, 0x40) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f00000007c0)={&(0x7f00000001c0)={0x5fc, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1d8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xd4, 0x5, "f7d2459d421d5fccc61a7dd7743ccc5731490968edd5aa59d57ff7496a3c702f2897c67f574ae1839d384c30f8f85a0b77d51288d5dd0270bcaf1ed9916ec53e1985475df5105d4f6a66405d70b426eeda72b1e33ac0f0a80046f60c86796c2cc1eab88019751bac7c6caf1fae29a95d592bb154db18bc56c22247d2208c101f2f2f9180fb4773c9a277929d5a4f27be20fbed07e8b9a117c25e218e89c05b84fb17706c52398c5cb5f05f58addfb41be3f74a3f0fa87dae93789974780b742da6b3f5edd8c54d6c332a2c1eb8eb5c91"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xeb, 0x4, "b078f7320d5c269a105256385b9ad5e3b2d224e19bba96d31e1290b885e2baf7639cc5ad89f32d8dfaef52bdd8bc5ef45bd38832df752d6cb09922b5e2a87b9075cafc19063d7d5f75330921f183a4fb64930483f1c69e619dae168a0190e880e9658e3ac162bd9d79590e7ca2585b8d6e76eba919ef2ab3a7dd4652e1240397769ff60a8aecb611e1d67c6a90cf7b679628565c6ff2dc6292c82f5bf9625a2beeb80335c3f0486ea1406ac667b7e0bfdbb59ae39e8c744cb568179d883734f39e3f5d1626e6a2ceeff947683283459a969046e1e02c127416e9c5a2cdbbd4559048efc25191d6"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x3c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xbd, 0x5, "e2fdb62166d9f10324f2e7fdba24260566768e8f1429e6fc0fcca5f9772f1ea9bb3f66c7a50e2eecee3c1ed402ecc987460c3f13a6b3bc958305529b3af1b195848252ec01c9d46ef2406bd1f7b8dfaa82cfbe72b341a98344f11e7f1b50e138d3d8037f1c6a3f738b54169528e59fbff41207c5d50c7d5d3d9b4b6173c79e37bd8ae13798957f0ec99b88c8d5730efe68e545d0dfd24f774e358bd1206a083d4b92b900a6bd0ba7ab23d76c07adb6284bc6d84d64f4b5af0d"}, @ETHTOOL_A_BITSET_BITS={0x14c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe6c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9aae}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[&(@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/,^\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x83f}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff7fff}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2aae}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5e5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ')!:-+-$!:#^\x91)!,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x37, 0x4, "58f3dc6ba4fdb73e85cb978728a9fc198aea10b440762bd086685b3453bd024271d804e13c2c1cffdf81cb3194e40970fc4d60"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r7}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0000400}}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c"], 0x44}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r6, @ANYBLOB="56060800000000002400128009000100626f6e640000000014000280050022"], 0x44}}, 0x40) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f00000007c0)={&(0x7f00000001c0)={0x5fc, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1d8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xd4, 0x5, "f7d2459d421d5fccc61a7dd7743ccc5731490968edd5aa59d57ff7496a3c702f2897c67f574ae1839d384c30f8f85a0b77d51288d5dd0270bcaf1ed9916ec53e1985475df5105d4f6a66405d70b426eeda72b1e33ac0f0a80046f60c86796c2cc1eab88019751bac7c6caf1fae29a95d592bb154db18bc56c22247d2208c101f2f2f9180fb4773c9a277929d5a4f27be20fbed07e8b9a117c25e218e89c05b84fb17706c52398c5cb5f05f58addfb41be3f74a3f0fa87dae93789974780b742da6b3f5edd8c54d6c332a2c1eb8eb5c91"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xeb, 0x4, "b078f7320d5c269a105256385b9ad5e3b2d224e19bba96d31e1290b885e2baf7639cc5ad89f32d8dfaef52bdd8bc5ef45bd38832df752d6cb09922b5e2a87b9075cafc19063d7d5f75330921f183a4fb64930483f1c69e619dae168a0190e880e9658e3ac162bd9d79590e7ca2585b8d6e76eba919ef2ab3a7dd4652e1240397769ff60a8aecb611e1d67c6a90cf7b679628565c6ff2dc6292c82f5bf9625a2beeb80335c3f0486ea1406ac667b7e0bfdbb59ae39e8c744cb568179d883734f39e3f5d1626e6a2ceeff947683283459a969046e1e02c127416e9c5a2cdbbd4559048efc25191d6"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x3c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xbd, 0x5, "e2fdb62166d9f10324f2e7fdba24260566768e8f1429e6fc0fcca5f9772f1ea9bb3f66c7a50e2eecee3c1ed402ecc987460c3f13a6b3bc958305529b3af1b195848252ec01c9d46ef2406bd1f7b8dfaa82cfbe72b341a98344f11e7f1b50e138d3d8037f1c6a3f738b54169528e59fbff41207c5d50c7d5d3d9b4b6173c79e37bd8ae13798957f0ec99b88c8d5730efe68e545d0dfd24f774e358bd1206a083d4b92b900a6bd0ba7ab23d76c07adb6284bc6d84d64f4b5af0d"}, @ETHTOOL_A_BITSET_BITS={0x14c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe6c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9aae}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[&(@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/,^\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x83f}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff7fff}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2aae}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5e5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ')!:-+-$!:#^\x91)!,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x37, 0x4, "58f3dc6ba4fdb73e85cb978728a9fc198aea10b440762bd086685b3453bd024271d804e13c2c1cffdf81cb3194e40970fc4d60"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r7}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0000400}}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}}, 0x0) (async) 3m37.891372489s ago: executing program 1 (id=4289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r2 = socket$kcm(0x29, 0x5, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3e, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112df000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000008, 0x8032, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m37.469886139s ago: executing program 1 (id=4293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)={'c', ' *:* ', 'r\x00'}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m36.698477846s ago: executing program 1 (id=4299): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e24, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}}, 0x0, 0x0, 0x19, 0x0, "110e183f51832ccb7998cada12653974d86b3533719aab7f480d5c6143a0d64643e0c04e63bd3222f888b2991d70331d7642232f621c577fce197012166b40fbcaeac6d05f4e7602ebac1bca71270f71"}, 0xd8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd2b, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 3m21.568288682s ago: executing program 33 (id=4299): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e24, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}}, 0x0, 0x0, 0x19, 0x0, "110e183f51832ccb7998cada12653974d86b3533719aab7f480d5c6143a0d64643e0c04e63bd3222f888b2991d70331d7642232f621c577fce197012166b40fbcaeac6d05f4e7602ebac1bca71270f71"}, 0xd8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd2b, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m35.845002222s ago: executing program 4 (id=4620): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) sendfile(r1, r0, 0x0, 0xf03a0005) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2m35.618069513s ago: executing program 4 (id=4621): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0221000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m35.571108442s ago: executing program 4 (id=4622): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x10, 0x110, 0xc}}], 0x10}, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000440)=@ethtool_channels={0x3d, 0x0, 0x2, 0x0, 0x4, 0x2, 0x2}}) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0xc7d, 0x9}}) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)={0x44, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x44}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x94}, 0x20000000) (async, rerun: 32) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (rerun: 32) 2m34.686010049s ago: executing program 4 (id=4627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000086080004400000002205000200890000003c0001800c00010062697477697365002c000280080003400000000208000140000000140800024000000012040005800c000480060001008a9500000900010073797a7000000000140000001100010000000000000000000700000a"], 0x110}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {0x0, 0x200, 0x4}, 0x2000, 0x6e6bb5, 0x2, 0x0, 0x1}}, 0xb8}}, 0x24000080) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 2m34.450249908s ago: executing program 4 (id=4629): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) (async) sendto$inet(r0, &(0x7f0000000600)="1234", 0x2, 0x0, 0x0, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (rerun: 32) write$cgroup_int(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000210"], 0x18}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) (async) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff85000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB='\a\x003'], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r8, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m30.87972529s ago: executing program 4 (id=4651): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x58, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x48, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c2"]}]}, 0x58}], 0x1}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000004", 0x1c, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0xf700, {[@fastopen={0x1e, 0x7, "5af306bfbc"}]}}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001e0001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x30}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x27, 0x301, 0x70bd25, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x24044010}, 0x404c000) 2m15.657696983s ago: executing program 34 (id=4651): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x58, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x48, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c2"]}]}, 0x58}], 0x1}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000004", 0x1c, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0xf700, {[@fastopen={0x1e, 0x7, "5af306bfbc"}]}}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001e0001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x30}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x27, 0x301, 0x70bd25, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x24044010}, 0x404c000) 4.748360885s ago: executing program 7 (id=5416): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x24}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61127900000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095"], 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x5c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x11, 0x1, '/dev/net/tun\x00'}, @NFTA_COMPAT_NAME={0x11, 0x1, '/dev/net/tun\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x20040044) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@getqdisc={0x4c, 0x26, 0x6, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0x9, 0xfff2}, {0x8, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x10) 4.14962322s ago: executing program 5 (id=5420): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x6, 0x9}, {0x3, 0x134}]}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={0xffffffffffffffff, r1}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001200)={&(0x7f0000001300), 0xc, &(0x7f0000001400)={&(0x7f0000001500)={0x60, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x60}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001100)={0x60, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000c40)={{r1, &(0x7f00000009c0)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, &(0x7f0000000a00)={@_ha_fsid={[0x6, 0x10001]}, {0x9, 0x0, 0x2, 0x6}}, 0x6, &(0x7f0000000a40), &(0x7f0000000a80)=0x24fd}, 0x2, &(0x7f0000000c00)=[{0x3, 0x9, &(0x7f0000000ac0)='team_slave_1\x00', &(0x7f0000000b00)="2f0741e606d7917745581e39367c8bb235f09e4d6bb1b4cb53957353a9cd892b4553805f2e61369410f1a0a257c0", 0x2e, 0x30}, {0x2, 0x4, &(0x7f0000000b40)='veth1_macvtap\x00', &(0x7f0000000b80)="15c205609d918eeed809a4dffa44f1a36461c164be807e0d615191600f632dbeeff39e6ea2378c435d017280b116210bbbfd7c093a4dd391c98bfb9f42f044a9d73a6716ac3c6a4b", 0x48, 0x10}]}) vmsplice(r7, &(0x7f0000000e80)=[{&(0x7f0000000cc0)="f2ea3edbe09768d22487cca0b81a909218c71a570210c3d76befad665ae8d77c6dd06fd2dee2b6561825c313f636e3f5dc3638f0", 0x34}, {&(0x7f0000000d00)="380ae18b7c4761dec5398ac93f05b35fae63fe42bd23a1e7edc0bcae601ef049bd4d9583c0947d16b72db9823631fa858b6f47a030fa6b6862622824be", 0x3d}, {&(0x7f0000000d40)="249915bd1895261f36ff88cddda3379a59afdbbb5e449f9c4b7d3ab4144ea4c13bbe92e0e8add768dad493bbdcf3be0ac576f61376bf1fe08f956497baf6d4a2f312095197572cccb64bf05f0e2d5dc0a43dc988cfc725c68e60bc61b921f91ada43319234d620676bb1712e04", 0x6d}, {&(0x7f0000000dc0)="e75cda44add4", 0x6}, {&(0x7f0000000e40)="969bafd49653e091dc291c7bae3458d3aac7", 0x12}], 0x5, 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x41}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x24}, 0x94) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0x1, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0x32}], "7bf354a4d44f873e"}}}}}}}, 0x0) 3.925982229s ago: executing program 7 (id=5423): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00'}) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'nicvf0\x00'}) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req={0xbc7c, 0x8, 0x2020, 0x5}, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) (async) pipe(0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x40, r3, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xa8a}, @broadcast, @device_b, @random="a7d1972e8434", {0xb, 0x3}}, 0x0, 0x3, 0x1e, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff689}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x32, 0x1}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) 3.535183659s ago: executing program 2 (id=5426): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8, 0x7f, 0x6, 0x1, 0x2}, 0x1, 0x1, 0x8001, 0x2, 0x53, 0x10, 0x14, 0x10, 0x7, 0x7a, {0x5b5, 0x4, 0x6, 0x8000, 0x8, 0xff}}}}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x24000000) 2.786007026s ago: executing program 5 (id=5427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x14, r1, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x77}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x1) 2.607653514s ago: executing program 7 (id=5428): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090e0000000000d0e4dccd60b6e15800000000000005000600000000000a000000000000000000000000000000040000000000000000000000000000000200010000000000000000040000000005000500000000000a00000000000000ff010000110000000000000000000001"], 0x70}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x240, 0xffffffff, 0x1a0, 0x0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fffffffffffffffffeffffff00"/28], 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r12, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r13, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="021695ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 2.432180222s ago: executing program 0 (id=5429): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 2.370631341s ago: executing program 5 (id=5430): r0 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 2.277780725s ago: executing program 2 (id=5432): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f0000000280)=r0}, 0x20) close(0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000002000), 0x4) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000009b40)={@loopback, @multicast1, 0x0, "e0ed43b9008423623755d3d37d95aaf383592ab9a4fedb2f5809a710447f5e02", 0xd8b7d5ea, 0xfffffff7, 0x1, 0x3ff}, 0x3c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r3) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="0b031260feffffff02005400f6086086dd4803008e15d62467ff55f90ebc0df150b1bcd642d7323bf9df2a97b5ff", 0x2e, 0x0, &(0x7f0000000140)={0x11, 0x3, r6}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@getqdisc={0x28, 0x26, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0xf}, {0xe, 0x5}, {0x5, 0xd}}, [{0x4}]}, 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024"], 0x108}}, 0x0) 2.125155371s ago: executing program 0 (id=5433): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@srh={0x2c, 0x0, 0x4, 0x0, 0x3, 0x0, 0x365}]}}}}}}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x226, r2}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r3, 0x4) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r1}, 0x18) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000009c0)={r7, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r7, 0x7}, 0x8) ioctl$XFS_IOC_SET_RESBLKS(r4, 0xc0105872, &(0x7f0000000200)={0xf, 0x2}) 1.973933007s ago: executing program 0 (id=5434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ipvlan1\x00', 0x8000}) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000001600), r5) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001580)={&(0x7f0000000480)={0x68, r6, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2b}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf9e}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}]}, 0x68}, 0x1, 0x0, 0x0, 0x54}, 0x8840) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) r7 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000001640)=0x0) (async, rerun: 64) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001680)=0x0) (async) r10 = getgid() setsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000016c0)={r8, r9, r10}, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r12 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0xf0000000}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYRES32=r13, @ANYBLOB="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"], 0x1008) sendmsg$nl_route_sched(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x3c, 0x2e, 0x10, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xb, 0x5}, {0x5, 0x10}, {0xf, 0x2}}, [{0x8}, {0x8, 0xb, 0x5e6}, {0x8, 0xb, 0x2}]}, 0x3c}}, 0x0) (async) recvmmsg(r12, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000005780)=""/4083, 0xff3}, {&(0x7f0000000080)=""/52}, {&(0x7f00000003c0)=""/26}], 0x2}, 0x1000}], 0x400000000000237, 0x10022, 0x0) 1.96703966s ago: executing program 2 (id=5436): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f00000003c0)={{0x8, @multicast2, 0x4e21, 0x1, 'nq\x00', 0x28, 0x3a6, 0x3}, {@private=0xa010300, 0xfffd, 0x2000, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000002500010328bd6e06fedbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x34, r3, 0x1, 0x70bd28, 0x25dfdc00, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r3, 0x6408c3621a02df19, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3cf81eb7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3e5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000081}, 0x4c814) 1.935810381s ago: executing program 5 (id=5437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000e00000004000e00bd780fbf5ddd968695184baaf57ef8edbcce9ff775d10cc69bc4d672b7c0fab562652891eba2af5c360d0000000000000000b815bd6183b74a84c120fde0d59a14f53c070a137f178640f12ca46c56dceaae7dec0c7f48d31f8f64020046d6c46443478e4a4d5ce0da3e2ed2b77c9f6211dd6e2bc20f05b04cf6ef1251071479361f2a1a7699dc45754dc9de079ee6ffc7666d5f91043e38c2ffff"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r2 = socket$inet6(0xa, 0x3, 0x7) sendto$inet6(r2, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18) readv(r0, &(0x7f0000000980)=[{&(0x7f00000017c0)=""/4122, 0x101a}, {0x0}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) accept$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x1c) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x54}}, 0x1) 1.769907977s ago: executing program 2 (id=5438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x200088c4}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) 1.481711383s ago: executing program 6 (id=5439): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e24, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x6e2bba}}, 0xb8}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) close(r1) socket$tipc(0x1e, 0x2, 0x0) 1.431232893s ago: executing program 2 (id=5440): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x52) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x130, 0x130, 0x130, 0x1f0, 0x130, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x8, 0xff}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x1d}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x1d}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x0, 0x8}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback, 0x200}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f00000001c0)) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000b40)=[{&(0x7f0000000400)="9cab9a40", 0x4}, {&(0x7f0000000000)='v', 0x1}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)="04", 0x1}, {&(0x7f0000000080)="cb", 0x1}, {&(0x7f00000011c0)="b4", 0x1}, {&(0x7f0000000340)='G', 0x1}, {&(0x7f0000004140)="b7ea", 0x2}, {&(0x7f0000000780)="d5", 0x1}, {&(0x7f0000000180)="eda4b1", 0x3}, {&(0x7f0000000500)="ad3ef52c10", 0x5}, {&(0x7f0000000380)="97", 0x1}, {&(0x7f0000000200)="c5", 0x1}, {&(0x7f00000040c0)="e5", 0x1}, {&(0x7f00000005c0)="c24602", 0x3}, {&(0x7f0000000a40)="94", 0x1}], 0x10, 0x3) close(r4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48c8}, 0x4011) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000640), r0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r5, 0x4, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x5, 0x0, r3, 0xe7, '\x00', 0x0, r3, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x27, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000055ad0170511526e49239000018110000cf44c97606fecc7442e4104f893474b56cb14babcee5ba96f41102a3b48decb62e2ca40e31eee51ecd235bb923b5608e748cbe2505ba8b6181ecc5514e1ae1482148e5ba78fb0a3b09fb6c9fe9d3b71394905d9d531bce9567dc342233d56dab3eaa35eafb7517602897e2a1868dde09df476b9f069962d512903800002f40745d05e782ac4f8970e2720ad2c9723e4710199ac39379f740f722db3ef39a31cf1a718f7be7bfbe89bb76f802dd467094565ec2286dd9ad4ae45a5c36ffca57c287a4e1fda5270eb4e666d29d54f0713f3f7a655f14f631f79aad55853f", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800006b0c00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000183100000300000000000000000000009500000000000000057a100000000000184500000000000000000000000000008510000005000000180000000900000000000000cd518c3a1840000004000008000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000185400000d0000000000000000000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.31848305s ago: executing program 7 (id=5441): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 1.317139372s ago: executing program 6 (id=5442): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$AUDIT_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x716, 0x70bd27, 0x25dfdbfc, {0x0, 0x8, 0x2, 0x0, 0x0, 0x7aa6, 0x4, 0x8, 0x0, 0x7, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x1000}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r4, 0x5, 0x1, 0xc34}, &(0x7f0000000280)=0x10) 1.105565099s ago: executing program 5 (id=5443): syz_emit_ethernet(0x68, &(0x7f0000000d80)=ANY=[@ANYBLOB="0180c200005a00650000f32f9078e0000001e00000010c20880b0000000100080c0008000d0086dd080088be000000001305270e01000000fffffff9080022eb0000000f250002000000fffffff70008a2630800655800000001"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000d8bf79dbad1abac40000000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000300"/28], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r2 = socket$pptp(0x18, 0x1, 0x2) accept4(r2, 0x0, 0x0, 0x800) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xe24, 0x0, @empty, 0x80002}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c0007800500150000000000050005000a00000005000100070000000500040000000000090002fb8d199f8df55f0073797a310000000011000300686173683a69702c6d61726b00000000"], 0x58}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, '\x00', "836f2a0ca76b11243f8102013814870c", "01a6d2d9", "fb4277862f9cd02a"}, 0x28) sendmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000540)=@caif=@rfm, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/17, 0x11}, {&(0x7f00000006c0)=""/132, 0x84}, {&(0x7f0000000780)=""/157, 0x9d}], 0x3, &(0x7f0000000880)=""/183, 0xb7}, 0xffffffff}, {{&(0x7f0000000940)=@tipc, 0xffffffffffffff24, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/234, 0xea}, {&(0x7f0000000280)=""/52, 0x34}], 0x2, &(0x7f0000000600)=""/124, 0x7c}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000bc0)=""/20, 0x14}, {&(0x7f0000000c00)=""/105, 0x69}], 0x2}, 0x10}], 0x3, 0x20, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffb}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000500)=@req3={0x0, 0x7, 0x2, 0xfffff0bb, 0x51, 0x0, 0xfff}, 0x1c) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r5, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) close(0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) 1.093213112s ago: executing program 0 (id=5444): setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x1, @mcast2, 0xffff}], 0x1c) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) (async) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f) 970.305941ms ago: executing program 2 (id=5445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000180)=""/215, 0xd7, 0x10000, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x48d, 0x4) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="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", 0xff6a}], 0x1}}], 0x1, 0x34001401) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9a}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x78}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10006}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4090}, 0x10) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000480)={@remote, 0x2, r3}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc051}, 0x4050) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x3a, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a300", 0x0, 0x33, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, [@dstopts={0x4}], '\v\v'}}}}}}}, 0x0) (async) close(r8) (async) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1001}}}}}}}, 0x0) 969.891765ms ago: executing program 6 (id=5446): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) sendto$packet(r1, &(0x7f0000000100)='\x00', 0x1, 0x4045080, &(0x7f00000000c0)={0x11, 0x1c, r2, 0x1, 0x18, 0x6, @remote}, 0x14) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000040)=',-}+\\-^}$,@]@,]!`\x00', 0x600081, &(0x7f0000000140)={@align=0xfff, {0x9, 0x21, 0xb, 0x2}}, 0x8, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x800}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f00000007c0), 0x4) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000240)=0x400) 961.408098ms ago: executing program 7 (id=5447): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x2, 0xbabd}, 0x1c) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x30, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x6c}}, 0x8000002) 837.93967ms ago: executing program 0 (id=5448): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0x25dfdbfe}, 0x14}}, 0x80) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010001b1d00070000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c0000080002800400130008000400070000000c00240069d0d385efc6b62708000400010100"], 0x54}}, 0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0xd0, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0xac, 0x19, "981a322579787624be7c592ee45c12afd9706caca31e99aa646abc3c424fbd961daa6b6e5a5c070f9ddc095e1def846505f295a2f95aa5e79b2fd120ee50a3e3e92ad150ac57f84d4849bbb25c3b836f6258637a3ec38adeafb623a79552cb9c8c8b8b914a12b452f017d9d35ff8db13e3c758ad12b2124c8f5b0f41d82d9d4dd159fb87f2a5d4d5828fffde68915ed2dc7ea8f6deea835d888be66adff3d1c3c6cce08b66d157a0"}, @NFC_ATTR_SE_INDEX={0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0xb81875a0acdec7f6) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0xfffffffffffffd87, &(0x7f0000000140)={&(0x7f0000001ac0)={0x1c, 0x1e, 0x1, 0x20000002, 0x400, {0x1}, [@nested={0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000340)={0x0, 0x3, 0x8000000000000001, 0x5}) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x10c, r7, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0xdc, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19362eb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59f1e0e0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6950bcc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39673067}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31878fed}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4742f0cd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e295048}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56f9e889}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64c2ddd3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x198a5348}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5759ee8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000300)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x5}, @generic={0x79, 0x1, 0xa, 0xfff8}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 698.505687ms ago: executing program 6 (id=5449): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x39, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) 554.857013ms ago: executing program 6 (id=5450): r0 = socket(0x10, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xfffffffffffffdea}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x5c}}, 0x40010) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104f000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64) getsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}}, 0x0) 525.860011ms ago: executing program 7 (id=5451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010102}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x54}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x3}, 0x18}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x5, @empty, 0xa2c9}}, 0x4, 0xfff, 0x2, 0x10000, 0x91b}, &(0x7f0000000340)=0x98) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r3, 0x2}, 0x8) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) 94.135071ms ago: executing program 6 (id=5452): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x51, 0xb619, '.\x00'}}) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200007ffee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) 10.584185ms ago: executing program 0 (id=5453): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000000)='Z%G}', 0x4}], 0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000003100)=ANY=[], 0x10448) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000000000, 0x40}}, 0x40) 0s ago: executing program 5 (id=5454): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={r7, 0x2}, &(0x7f0000001100)=0x8) getsockopt$inet_int(r2, 0x0, 0x14, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0) kernel console output (not intermixed with test programs): attributes in process `syz.1.3616'. [ 721.891237][T21469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3616'. [ 721.891277][T21469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3616'. [ 722.408183][T21488] : entered promiscuous mode [ 723.490056][T21522] validate_nla: 3 callbacks suppressed [ 723.490080][T21522] netlink: 'syz.1.3630': attribute type 1 has an invalid length. [ 723.578916][T21524] tipc: Enabled bearer , priority 0 [ 723.714744][T21529] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3631'. [ 723.768860][T21529] tipc: Enabling of bearer rejected, already enabled [ 723.861949][T21533] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3631'. [ 723.869921][T21526] netlink: 212308 bytes leftover after parsing attributes in process `syz.4.3632'. [ 723.911470][T21526] openvswitch: netlink: Message has 512 unknown bytes. [ 723.919418][T21527] openvswitch: netlink: Message has 512 unknown bytes. [ 723.969655][T21534] syzkaller0: entered promiscuous mode [ 723.969678][T21534] syzkaller0: entered allmulticast mode [ 724.767139][T21554] mac80211_hwsim hwsim26 ÿ: renamed from wlan1 (while UP) [ 725.147215][T21573] __nla_validate_parse: 1 callbacks suppressed [ 725.147239][T21573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3641'. [ 725.394912][T21576] netlink: 199812 bytes leftover after parsing attributes in process `syz.5.3643'. [ 725.645516][T21589] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3645'. [ 725.922238][T21598] netlink: 'syz.4.3648': attribute type 1 has an invalid length. [ 726.010768][T21598] bond2: entered promiscuous mode [ 726.011224][T21598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 726.179237][T21597] bond2: (slave bridge1): making interface the new active one [ 726.179264][T21597] bridge1: entered promiscuous mode [ 726.180375][T21597] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 726.312016][T21598] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 726.663748][T21625] netlink: 'syz.4.3653': attribute type 1 has an invalid length. [ 726.663774][T21625] netlink: 'syz.4.3653': attribute type 3 has an invalid length. [ 726.663788][T21625] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3653'. [ 727.436258][T21651] netlink: Setting conntrack mark requires 'commit' flag. [ 727.436298][T21651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.947119][T21664] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3664'. [ 727.949603][T21664] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3664'. [ 728.141662][T21670] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3667'. [ 728.143796][T21669] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3667'. [ 728.233365][T21670] 0·: renamed from hsr0 (while UP) [ 728.240377][T21670] 0·: entered allmulticast mode [ 728.240401][T21670] hsr_slave_0: entered allmulticast mode [ 728.240417][T21670] hsr_slave_1: entered allmulticast mode [ 728.265901][T21670] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 728.266074][T21669] 1·: renamed from c0· (while UP) [ 728.269379][T21669] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 728.981470][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 729.074783][T21681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3671'. [ 729.320294][T21688] wg1 speed is unknown, defaulting to 1000 [ 729.937402][T21717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3679'. [ 729.955302][T21711] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 729.957792][T21716] netlink: 'syz.4.3680': attribute type 3 has an invalid length. [ 730.122610][T21717] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.261317][ T4934] Bluetooth: hci4: command 0x0406 tx timeout [ 730.320148][T21720] __nla_validate_parse: 1 callbacks suppressed [ 730.320172][T21720] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3681'. [ 730.548580][T21717] bridge_slave_1 (unregistering): left allmulticast mode [ 730.548940][T21717] bridge_slave_1 (unregistering): left promiscuous mode [ 730.552346][T21717] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.649463][T21688] wg0 speed is unknown, defaulting to 1000 [ 730.719186][T21720] batadv0: entered promiscuous mode [ 730.898676][T21720] macsec1: entered promiscuous mode [ 730.913200][T21720] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 730.988595][T21720] batadv0: left promiscuous mode [ 731.070339][T21731] can: request_module (can-proto-0) failed. [ 731.310314][T21738] syzkaller1: entered promiscuous mode [ 731.310338][T21738] syzkaller1: entered allmulticast mode [ 731.561028][T21745] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3686'. [ 731.769608][T21750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3687'. [ 731.968387][T21760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3687'. [ 732.736018][T21771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3692'. [ 733.053672][T21776] xt_socket: unknown flags 0x8 [ 733.117947][T21776] netlink: 'syz.0.3694': attribute type 11 has an invalid length. [ 733.117973][T21776] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.3694'. [ 733.887301][T21794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3702'. [ 734.178766][T21802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3703'. [ 734.192915][T21794] bond2: option xmit_hash_policy: invalid value (64) [ 734.219908][T21794] bond2 (unregistering): Released all slaves [ 734.368608][T21802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3703'. [ 734.373189][T21802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3703'. [ 736.940570][T21857] __nla_validate_parse: 62 callbacks suppressed [ 736.940594][T21857] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3712'. [ 736.940629][T21857] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3712'. [ 737.370714][T21866] wg1 speed is unknown, defaulting to 1000 [ 738.130709][T21886] netlink: 'syz.2.3720': attribute type 11 has an invalid length. [ 738.148102][T21890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3722'. [ 738.294870][T21894] netlink: 'syz.2.3720': attribute type 11 has an invalid length. [ 739.319495][T21927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3729'. [ 739.344246][T21927] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3729'. [ 739.399004][T21935] siw: device registration error -23 [ 739.775546][T21942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3733'. [ 739.776322][T21942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3733'. [ 740.225325][T21946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3735'. [ 740.352210][T21729] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 740.541588][T21964] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 740.541882][T21964] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 740.917416][T21978] sit1: entered promiscuous mode [ 740.917440][T21978] sit1: entered allmulticast mode [ 741.279999][T21984] IPVS: length: 8 != 1152 [ 741.505030][T21988] batadv_slave_0: entered promiscuous mode [ 741.524835][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 741.536520][T21990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.688822][T21992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3745'. [ 741.829754][T21990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.945451][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 741.946320][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 741.946554][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 741.948027][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 741.948246][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 741.950228][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 741.950488][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 741.955328][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 741.955554][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 741.957001][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 742.252718][T22004] Cannot find add_set index 4 as target [ 742.315124][T21729] IPVS: starting estimator thread 0... [ 742.401508][T22013] IPVS: using max 26 ests per chain, 62400 per kthread [ 743.150609][T22030] netlink: 'syz.0.3755': attribute type 21 has an invalid length. [ 744.060135][T22033] syzkaller0: entered promiscuous mode [ 744.060166][T22033] syzkaller0: entered allmulticast mode [ 744.245247][T22054] bridge_slave_0: left allmulticast mode [ 744.245277][T22054] bridge_slave_0: left promiscuous mode [ 744.245549][T22054] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.288934][T22054] bond0: (slave bond_slave_0): Releasing backup interface [ 744.323500][T22054] bond0: (slave bond_slave_1): Releasing backup interface [ 744.453314][T22054] team0: Port device team_slave_0 removed [ 744.486350][T22054] team0: Port device team_slave_1 removed [ 744.498775][T22054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.498798][T22054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.530160][T22054] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 744.578400][T22062] tipc: Enabled bearer , priority 0 [ 744.854980][T21728] tipc: Resetting bearer [ 745.126933][T22071] syzkaller1: entered allmulticast mode [ 745.147353][T22075] openvswitch: netlink: Flow actions attr not present in new flow. [ 745.397807][T22082] macsec0: entered promiscuous mode [ 745.397830][T22082] bridge0: entered promiscuous mode [ 745.398044][T22082] macsec0: entered allmulticast mode [ 745.398058][T22082] bridge0: entered allmulticast mode [ 745.432337][T22082] bridge0: port 1(macsec0) entered blocking state [ 745.432489][T22082] bridge0: port 1(macsec0) entered disabled state [ 745.563028][T22082] bridge0: left allmulticast mode [ 745.563055][T22082] bridge0: left promiscuous mode [ 745.745331][T15152] tipc: Node number set to 4269801488 [ 745.828338][T22096] netlink: 'syz.1.3770': attribute type 1 has an invalid length. [ 745.957121][T22096] tipc: Resetting bearer [ 746.325759][T22096] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 747.435480][T22134] netlink: 'syz.0.3778': attribute type 1 has an invalid length. [ 747.547738][T22133] __nla_validate_parse: 61 callbacks suppressed [ 747.547764][T22133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3778'. [ 747.676096][T11030] IPVS: starting estimator thread 0... [ 747.718503][T22145] xt_hashlimit: size too large, truncated to 1048576 [ 747.761341][T22147] IPVS: using max 25 ests per chain, 60000 per kthread [ 748.458058][T22159] sch_tbf: peakrate 5 is lower than or equals to rate 5 ! [ 748.476843][T22160] sch_tbf: peakrate 5 is lower than or equals to rate 5 ! [ 748.811607][T22159] syzkaller0: entered promiscuous mode [ 748.811897][T22159] syzkaller0: entered allmulticast mode [ 748.816803][T22184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3785'. [ 749.827670][T22197] netlink: 'syz.1.3792': attribute type 32 has an invalid length. [ 750.044773][T22209] netlink: 'syz.1.3792': attribute type 32 has an invalid length. [ 752.892129][T21728] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 754.328703][T22227] netlink: 'syz.4.3794': attribute type 8 has an invalid length. [ 754.328726][T22227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3794'. [ 754.330710][T22227] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.333561][T22227] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.585526][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 755.797487][T22261] erspan0: entered promiscuous mode [ 756.036053][T22265] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3806'. [ 756.103109][T22281] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3809'. [ 756.119483][T22277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3808'. [ 756.288661][T22287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3808'. [ 756.384879][T22286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3811'. [ 756.388283][T22286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3811'. [ 757.121632][T22299] syzkaller0: entered promiscuous mode [ 757.121658][T22299] syzkaller0: entered allmulticast mode [ 757.192611][T22299] tipc: Enabled bearer , priority 0 [ 757.259330][T22299] tipc: Resetting bearer [ 757.309872][T22297] tipc: Resetting bearer [ 757.505676][T22297] tipc: Disabling bearer [ 757.562731][T22316] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3815'. [ 758.365360][T22324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3817'. [ 758.782735][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3822'. [ 758.818571][T22339] netlink: 'syz.0.3821': attribute type 10 has an invalid length. [ 758.820246][T22339] bridge0: port 3(veth0) entered disabled state [ 758.820576][T22339] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.996533][T22339] bridge0: port 3(veth0) entered blocking state [ 758.996681][T22339] bridge0: port 3(veth0) entered forwarding state [ 758.997003][T22339] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.997117][T22339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.997369][T22339] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.997494][T22339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.032071][T22339] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 759.736362][T22365] Bluetooth: MGMT ver 1.23 [ 760.576642][T22382] sit1: entered promiscuous mode [ 760.576960][T22382] sit1: entered allmulticast mode [ 760.903463][T22392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3837'. [ 761.951448][T22417] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 762.728001][T22430] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 763.264109][T22439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3849'. [ 764.845760][T22471] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3857'. [ 765.066491][T22484] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3859'. [ 765.497150][T22489] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3861'. [ 765.497187][T22489] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 765.510730][T22489] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3861'. [ 765.671604][T22497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3860'. [ 766.335097][T22508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3864'. [ 766.386295][T22512] netlink: 'syz.0.3865': attribute type 1 has an invalid length. [ 766.600519][T22517] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3865'. [ 766.600547][T22517] netlink: 'syz.0.3865': attribute type 9 has an invalid length. [ 766.888746][T22523] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3867'. [ 767.092983][T22523] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3867'. [ 767.553159][T22539] netlink: 'syz.2.3871': attribute type 3 has an invalid length. [ 767.865301][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 767.964224][T22534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3870'. [ 768.268351][T11033] vlan6: left allmulticast mode [ 768.268374][T11033] geneve0: left allmulticast mode [ 768.268394][T11033] vlan6: left promiscuous mode [ 768.268406][T11033] geneve0: left promiscuous mode [ 768.269955][T11033] bridge0: port 3(vlan6) entered disabled state [ 768.375712][T11033] bridge_slave_1: left allmulticast mode [ 768.375741][T11033] bridge_slave_1: left promiscuous mode [ 768.377445][T11033] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.413913][T22558] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 768.424382][T11033] bridge_slave_0: left allmulticast mode [ 768.424412][T11033] bridge_slave_0: left promiscuous mode [ 768.456453][T11033] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.557605][T22558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3875'. [ 769.784703][ T4934] Bluetooth: hci1: command 0x0406 tx timeout [ 769.785410][T22548] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 770.869271][T11033] bond14 (unregistering): (slave gretap2): Releasing backup interface [ 771.256773][T11033] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 771.432161][T11033] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 771.432192][T11033] bridge2 (unregistering): left promiscuous mode [ 771.432210][T11033] bridge2 (unregistering): left allmulticast mode [ 771.480242][T11033] bond7 (unregistering): (slave bridge3): Releasing active interface [ 771.570002][T11033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.570441][T11033] bond_slave_0: left allmulticast mode [ 771.595714][T11033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.596570][T11033] bond_slave_1: left allmulticast mode [ 771.599348][T11033] bond0 (unregistering): Released all slaves [ 771.654239][T11033] bond1 (unregistering): Released all slaves [ 771.683395][T11033] bond2 (unregistering): Released all slaves [ 771.718077][T11033] bond3 (unregistering): Released all slaves [ 771.755132][T11033] bond4 (unregistering): Released all slaves [ 771.779126][T11033] bond5 (unregistering): Released all slaves [ 771.808887][T11033] bond6 (unregistering): Released all slaves [ 771.878085][T11033] bond7 (unregistering): Released all slaves [ 771.907000][T11033] bond8 (unregistering): Released all slaves [ 771.938644][T11033] bond9 (unregistering): Released all slaves [ 771.973421][T11033] bond10 (unregistering): Released all slaves [ 772.004651][T11033] bond11 (unregistering): Released all slaves [ 772.048126][T11033] bond12 (unregistering): Released all slaves [ 772.086242][T11033] bond13 (unregistering): Released all slaves [ 772.116958][T11033] bond14 (unregistering): Released all slaves [ 772.154922][T11033] bond15 (unregistering): Released all slaves [ 772.297305][ T5717] wg1 speed is unknown, defaulting to 1000 [ 772.297346][ T5717] syz2: Port: 1 Link DOWN [ 772.298027][ T5717] wg1 speed is unknown, defaulting to 1000 [ 772.298079][ T5733] wg0 speed is unknown, defaulting to 1000 [ 772.298117][ T5733] syz0: Port: 1 Link DOWN [ 772.403213][T21726] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 772.751229][T11033] : left promiscuous mode [ 772.930755][T22590] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3882'. [ 773.094344][T22599] netlink: NAT attribute has 5 unknown bytes [ 773.094384][T22599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.185753][T22600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3882'. [ 773.319580][T22586] bond2 (unregistering): Released all slaves [ 773.577113][T11033] tipc: Disabling bearer [ 773.609501][T11033] tipc: Left network mode [ 773.704493][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3883'. [ 773.704958][ T5733] team_slave_0: entered promiscuous mode [ 773.704996][ T5733] team_slave_1: entered promiscuous mode [ 774.297274][T22614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3887'. [ 774.380467][T22622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3887'. [ 774.617977][T22623] syzkaller0: entered promiscuous mode [ 774.618242][T22623] syzkaller0: entered allmulticast mode [ 774.996477][T22633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3889'. [ 775.253009][T22642] netlink: 'syz.4.3891': attribute type 11 has an invalid length. [ 775.253039][T22642] netlink: 'syz.4.3891': attribute type 4 has an invalid length. [ 775.253054][T22642] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3891'. [ 775.954950][T22661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3898'. [ 775.954984][T22661] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3898'. [ 775.994888][T22659] IPVS: length: 239 != 24 [ 776.125114][T22665] openvswitch: netlink: Missing valid actions attribute. [ 776.721625][T22684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3902'. [ 776.898426][T22680] netlink: 'syz.4.3902': attribute type 5 has an invalid length. [ 778.097869][T22724] __nla_validate_parse: 1 callbacks suppressed [ 778.097894][T22724] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3912'. [ 778.709216][T22741] netlink: 'syz.5.3917': attribute type 1 has an invalid length. [ 778.709240][T22741] netlink: 'syz.5.3917': attribute type 2 has an invalid length. [ 778.709683][T22740] netlink: 'syz.5.3917': attribute type 1 has an invalid length. [ 778.709699][T22740] netlink: 'syz.5.3917': attribute type 2 has an invalid length. [ 779.246646][T11033] hsr_slave_0: left promiscuous mode [ 779.252671][T11033] hsr_slave_1: left promiscuous mode [ 779.267759][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3921'. [ 779.441587][T11033] veth0_macvtap: left promiscuous mode [ 780.127896][T22785] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3925'. [ 780.545990][T11033] team0 (unregistering): Port device team_slave_1 removed [ 780.679275][T11033] team0 (unregistering): Port device team_slave_0 removed [ 780.914844][ T145] smc: removing ib device syz2 [ 780.977957][ T145] smbdirect: ib_dev[syz2] removed [ 781.036293][ T50] smbdirect: ib_dev[syz0] removed [ 781.368188][T11033] smc: removing net device team0 with user defined pnetid SYZ2 [ 781.570512][T22778] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3924'. [ 782.197400][ T4934] Bluetooth: hci5: unexpected event for opcode 0x203d [ 782.346693][T22813] macsec1: entered promiscuous mode [ 782.680536][T22817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3934'. [ 783.344620][T22834] batadv_slave_0: entered promiscuous mode [ 783.382405][T22834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3939'. [ 783.382547][T22834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.510167][T22838] openvswitch: netlink: Missing key (keys=40, expected=100) [ 783.569616][T22834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.923315][T21728] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 784.387092][T22860] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 784.975587][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3944'. [ 785.129368][T22889] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3944'. [ 787.579854][T22942] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3958'. [ 787.607147][T22942] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3958'. [ 787.967901][T22952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 788.810146][T22976] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.3966'. [ 788.810266][T22976] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 788.887912][T22976] 0ªX¹¦Dö»: entered allmulticast mode [ 789.369352][T22945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3959'. [ 789.369389][T22945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3959'. [ 789.467820][T22990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3970'. [ 789.589957][T22991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3969'. [ 789.589999][T22991] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3969'. [ 789.651591][T22991] nft_compat: unsupported protocol 0 [ 790.011816][T22996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3971'. [ 790.652712][T23005] IPVS: length: 24 != 696 [ 790.963969][T23018] openvswitch: netlink: Key type 153 is out of range max 32 [ 791.128395][T23026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3981'. [ 791.128424][T23026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3981'. [ 791.146939][T23029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3980'. [ 791.185367][T23034] netlink: 'syz.4.3981': attribute type 4 has an invalid length. [ 791.618619][T23030] nbd: nbd64 already in use [ 791.699334][T23026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.767786][T23026] bond3: (slave bond0): making interface the new active one [ 791.847216][T23026] bond3: (slave bond0): Enslaving as an active interface with an up link [ 791.908347][T23034] .`: renamed from bond0 (while UP) [ 792.075065][T22228] udevd[22228]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 792.185758][T23057] geneve0: entered allmulticast mode [ 792.376928][T23063] netlink: 'syz.1.3987': attribute type 1 has an invalid length. [ 792.704957][T11033] IPVS: stop unused estimator thread 0... [ 793.156009][T23083] mac80211_hwsim hwsim40 syzkaller0: left promiscuous mode [ 793.156087][T23083] mac80211_hwsim hwsim40 syzkaller0: left allmulticast mode [ 793.975235][T23119] __nla_validate_parse: 5 callbacks suppressed [ 793.975257][T23119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4002'. [ 795.072258][T23140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4007'. [ 795.073173][T23140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4007'. [ 795.131903][T23142] netlink: 'syz.1.4008': attribute type 1 has an invalid length. [ 795.651877][T23165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4012'. [ 795.729803][T23168] netlink: 'syz.0.4014': attribute type 23 has an invalid length. [ 795.926417][T23178] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4015'. [ 796.920534][T23195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4021'. [ 797.664263][T23215] veth5: entered promiscuous mode [ 797.667121][T23215] veth5: entered allmulticast mode [ 798.413848][T23242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4033'. [ 798.454037][T23246] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4034'. [ 798.462500][T23247] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4034'. [ 798.598397][T23252] openvswitch: netlink: IP tunnel dst address not specified [ 798.598434][T23252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.804817][T23257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4037'. [ 798.965226][T23263] ip_vti0: entered promiscuous mode [ 798.983009][T23263] __nla_validate_parse: 1 callbacks suppressed [ 798.983032][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4038'. [ 799.061496][T23265] netlink: 'syz.1.4040': attribute type 1 has an invalid length. [ 799.061520][T23265] netlink: 'syz.1.4040': attribute type 2 has an invalid length. [ 799.061532][T23265] netlink: 'syz.1.4040': attribute type 3 has an invalid length. [ 799.061545][T23265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4040'. [ 799.347482][T23274] netlink: 'syz.5.4041': attribute type 1 has an invalid length. [ 799.459696][T23275] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4041'. [ 799.596540][T23277] bond5: (slave gretap3): making interface the new active one [ 799.598898][T23277] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 799.631486][T23275] 8021q: adding VLAN 0 to HW filter on device bond5 [ 799.774844][T23291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.823765][T23294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.954053][T23286] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 800.486633][T23302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4050'. [ 800.942525][T23323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4054'. [ 800.945012][T23325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4054'. [ 800.994332][T23314] netlink: 'syz.0.4052': attribute type 10 has an invalid length. [ 801.092360][T23323] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4054'. [ 801.258272][T23314] team0: Device veth0_macvtap failed to register rx_handler [ 801.953567][T23344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4056'. [ 801.953614][T23344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4056'. [ 803.059550][T23379] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4068'. [ 804.023501][T23410] xt_CT: You must specify a L4 protocol and not use inversions on it [ 804.040153][T23418] __nla_validate_parse: 66 callbacks suppressed [ 804.040177][T23418] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4078'. [ 804.341177][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 804.576339][T23433] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 805.336562][T23447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4081'. [ 805.340082][T23450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4081'. [ 805.713213][T23467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4087'. [ 805.713240][T23467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4087'. [ 806.595104][T23495] syzkaller0: left promiscuous mode [ 806.595130][T23495] syzkaller0: left allmulticast mode [ 806.950376][T23503] xt_l2tp: missing protocol rule (udp|l2tpip) [ 806.957154][T23503] xt_socket: unknown flags 0xc [ 807.339901][T23516] syzkaller0: entered promiscuous mode [ 807.339927][T23516] syzkaller0: entered allmulticast mode [ 807.508726][T23518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4100'. [ 807.526856][T23522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4100'. [ 807.626378][T23518] netlink: 'syz.5.4100': attribute type 1 has an invalid length. [ 807.924679][T23539] ipt_rpfilter: unknown options [ 808.036308][T23518] 8021q: adding VLAN 0 to HW filter on device bond6 [ 808.893302][T23567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4112'. [ 808.893340][T23567] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4112'. [ 809.013909][T23573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4112'. [ 809.062454][T21726] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.062523][T21726] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.062556][T21726] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.062587][T21726] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.252360][T23578] netlink: 'syz.5.4113': attribute type 12 has an invalid length. [ 809.528873][T23583] netlink: 'syz.5.4116': attribute type 1 has an invalid length. [ 809.838389][T23588] __nla_validate_parse: 5 callbacks suppressed [ 809.838413][T23588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4118'. [ 809.838431][T23588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4118'. [ 809.952088][T23597] netlink: 'syz.2.4118': attribute type 10 has an invalid length. [ 809.998144][T23588] bond2: entered allmulticast mode [ 809.998623][T23588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 810.994880][T23631] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4127'. [ 811.455085][T23636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4128'. [ 813.133987][T23688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4143'. [ 814.688102][T23730] syzkaller1: entered promiscuous mode [ 814.688128][T23730] syzkaller1: entered allmulticast mode [ 814.722598][T23740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4156'. [ 814.722631][T23740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4156'. [ 814.722651][T23740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4156'. [ 814.836206][T23740] netlink: 'syz.4.4156': attribute type 1 has an invalid length. [ 814.876296][T23740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.053519][ T145] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 815.693485][T23740] bond0: (slave syz_tun): Enslaving as a backup interface with an up link [ 815.844222][T23724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 816.396012][T23772] netlink: 'syz.4.4164': attribute type 10 has an invalid length. [ 816.397932][T23772] veth1_macvtap: left promiscuous mode [ 816.469389][T23772] veth1_macvtap: entered promiscuous mode [ 816.495698][T23772] .`: (slave macsec0): Enslaving as an active interface with an up link [ 816.589023][T23775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4167'. [ 816.747331][T23777] veth0: entered promiscuous mode [ 817.119042][T23776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4167'. [ 817.416447][T23774] veth0: left promiscuous mode [ 817.610277][T23802] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4170'. [ 817.832800][T23799] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4172'. [ 818.449636][T23829] netlink: 'syz.2.4177': attribute type 1 has an invalid length. [ 818.449660][T23829] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.4177'. [ 818.514277][T23833] xt_l2tp: unknown flags: 43 [ 818.514877][T23833] netlink: 'syz.1.4180': attribute type 4 has an invalid length. [ 818.928611][T23844] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4183'. [ 818.929141][T23844] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4183'. [ 818.937566][T23844] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4183'. [ 818.937909][T23844] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4183'. [ 819.022331][T23844] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4183'. [ 819.206061][T23849] bond3: Removing last arp target with arp_interval on [ 821.704543][T23936] __nla_validate_parse: 37 callbacks suppressed [ 821.704567][T23936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4210'. [ 822.303079][T23951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4214'. [ 823.389350][T21729] IPVS: starting estimator thread 0... [ 823.473182][T23981] IPVS: using max 26 ests per chain, 62400 per kthread [ 823.638735][T23989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4223'. [ 823.787187][T23989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4223'. [ 823.787495][T23989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4223'. [ 823.828385][T23989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4223'. [ 823.829506][T23985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4223'. [ 823.830022][T23989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4223'. [ 823.830251][T23989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4223'. [ 823.830561][T23989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4223'. [ 824.544031][T24012] netlink: 'syz.1.4229': attribute type 9 has an invalid length. [ 825.579096][T24048] netlink: 'syz.5.4234': attribute type 5 has an invalid length. [ 826.756987][T24076] ip6tnl1: entered promiscuous mode [ 826.757011][T24076] ip6tnl1: entered allmulticast mode [ 826.777327][T24079] __nla_validate_parse: 61 callbacks suppressed [ 826.777347][T24079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4241'. [ 827.617438][T24098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4248'. [ 828.059527][T24112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4249'. [ 829.043641][T24139] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4259'. [ 830.006394][T24150] netlink: 'syz.2.4262': attribute type 11 has an invalid length. [ 830.006419][T24150] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.4262'. [ 830.185175][T24155] bond4: option min_links: invalid value (18446744073709551614) [ 830.185202][T24155] bond4: option min_links: allowed values 0 - 2147483647 [ 830.186939][T24155] bond4 (unregistering): Released all slaves [ 830.216044][T24162] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 830.385187][T24162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4265'. [ 830.586496][T24180] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4265'. [ 830.586851][T24181] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4265'. [ 830.676065][T24185] netlink: 'syz.5.4267': attribute type 1 has an invalid length. [ 830.845970][T24156] bond4: option min_links: invalid value (18446744073709551614) [ 830.845998][T24156] bond4: option min_links: allowed values 0 - 2147483647 [ 830.853870][T24156] bond4 (unregistering): Released all slaves [ 831.481385][T24206] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 833.344091][T24190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 833.803053][T24241] netlink: 'syz.4.4278': attribute type 2 has an invalid length. [ 833.859888][T24247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4277'. [ 834.163074][T24255] netlink: 'syz.4.4281': attribute type 7 has an invalid length. [ 834.226512][T24258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4283'. [ 834.304834][T24258] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 834.308391][T24258] bond4 (unregistering): Released all slaves [ 834.618541][T24274] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4286'. [ 834.699273][T24276] netlink: 'syz.2.4287': attribute type 9 has an invalid length. [ 835.979093][T24323] netlink: 'syz.0.4301': attribute type 13 has an invalid length. [ 836.347901][T11036] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 836.775048][T24347] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.4305'. [ 836.984796][T24352] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.4305'. [ 837.258185][T24362] xt_limit: Overflow, try lower: 536871034/127 [ 837.359072][T24365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 837.437513][T24362] 8021q: adding VLAN 0 to HW filter on device bond5 [ 837.438217][T24362] bridge0: port 1(bond5) entered blocking state [ 837.438344][T24362] bridge0: port 1(bond5) entered disabled state [ 837.438483][T24362] bond5: entered allmulticast mode [ 837.450220][T24362] bond5: entered promiscuous mode [ 837.704078][T24376] IPVS: Unknown mcast interface: caif0 [ 838.647425][T24405] batadv_slave_0: entered promiscuous mode [ 838.874572][T24405] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 838.875529][T24408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4317'. [ 838.875654][T24408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.095892][T24408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.821472][T24443] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4325'. [ 843.389051][T24438] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.389103][T24438] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.810148][T24459] netlink: 'syz.0.4333': attribute type 11 has an invalid length. [ 843.810174][T24459] netlink: 'syz.0.4333': attribute type 4 has an invalid length. [ 843.810189][T24459] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4333'. [ 843.810478][T24438] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.810510][T24438] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.059674][T24438] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.059714][T24438] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.169359][T24471] syz_tun: entered allmulticast mode [ 844.240392][T24475] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4336'. [ 844.289931][T24438] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.289970][T24438] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.314834][T24479] SET target dimension over the limit! [ 844.316638][T24479] openvswitch: netlink: Flow key attr not present in new flow. [ 844.339486][T24479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4338'. [ 844.367249][T24479] SET target dimension over the limit! [ 844.396481][T24481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4338'. [ 844.465189][T24470] syz_tun: left allmulticast mode [ 844.692777][T24491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4341'. [ 844.751831][T11033] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.751868][T11033] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.764803][T24492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4340'. [ 844.811538][T11033] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.811574][T11033] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.945681][T21729] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.945719][T21729] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.021439][T11033] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.021475][T11033] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.235155][T24505] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4344'. [ 845.324316][T24513] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4346'. [ 845.369785][T24512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4345'. [ 845.405250][T24517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4347'. [ 845.587808][T24521] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4347'. [ 845.823786][T24534] netlink: Only one type of NAT may be specified [ 845.823825][T24534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.072315][T11036] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 848.256072][T24513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 848.866244][T24543] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 848.873692][T24543] bond7 (unregistering): Released all slaves [ 849.296054][T24565] __nla_validate_parse: 9 callbacks suppressed [ 849.296091][T24565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4355'. [ 849.411940][T24568] syzkaller0: entered promiscuous mode [ 849.411965][T24568] syzkaller0: entered allmulticast mode [ 849.699621][T24582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4361'. [ 849.699653][T24582] netlink: 'syz.2.4361': attribute type 3 has an invalid length. [ 849.699670][T24582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4361'. [ 849.699929][T24582] netlink: 'syz.2.4361': attribute type 3 has an invalid length. [ 849.728291][T24582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4361'. [ 849.729288][T24585] IPv6: NLM_F_CREATE should be specified when creating new route [ 849.754869][T24582] pim6reg: entered allmulticast mode [ 849.979477][T24591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 849.979498][T24591] IPv6: NLM_F_CREATE should be set when creating new route [ 850.059995][T24594] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 850.339765][T24601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4367'. [ 850.344476][T24601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4367'. [ 850.642948][T24606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4369'. [ 850.644266][T24614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4371'. [ 851.119285][T24629] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 851.127204][T24627] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4377'. [ 851.127657][T24629] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 851.803008][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 851.819078][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 851.837508][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 851.858097][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 851.869138][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 852.005589][T24650] Bluetooth: MGMT ver 1.23 [ 852.547707][T24655] block nbd2: not configured, cannot reconfigure [ 852.561343][T24659] netlink: 'syz.5.4385': attribute type 1 has an invalid length. [ 852.655009][T24659] 8021q: adding VLAN 0 to HW filter on device bond7 [ 852.762911][T24667] bond7: (slave veth0_to_bond): making interface the new active one [ 852.783995][T24667] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 852.881044][T24667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4385'. [ 853.096726][T24677] netlink: Failed to add %pB helper -22 [ 853.096788][T24677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 853.178423][T24677] netlink: Failed to add %pB helper -22 [ 853.178486][T24677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 853.308252][T24677] netlink: Failed to add %pB helper -22 [ 853.308316][T24677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 853.407265][T24677] netlink: Failed to add %pB helper -22 [ 853.703299][T24694] Bluetooth: hci0: unsupported parameter 5161 [ 853.703323][T24694] Bluetooth: hci0: unsupported parameter 8192 [ 853.703336][T24694] Bluetooth: hci0: unsupported parameter 5161 [ 853.703349][T24694] Bluetooth: hci0: unsupported parameter 8192 [ 853.941469][ T4934] Bluetooth: hci0: command tx timeout [ 854.455651][T24717] __nla_validate_parse: 4 callbacks suppressed [ 854.455673][T24717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4396'. [ 854.503496][T24717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4396'. [ 854.791029][T24730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4399'. [ 855.364861][T24753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4404'. [ 855.589682][T24756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4405'. [ 855.610290][T24756] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4405'. [ 855.610326][T24756] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4405'. [ 855.638245][T24641] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.638361][T24641] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.638561][T24641] bridge_slave_0: entered allmulticast mode [ 855.659128][T24641] bridge_slave_0: entered promiscuous mode [ 855.766253][T24641] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.766424][T24641] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.766618][T24641] bridge_slave_1: entered allmulticast mode [ 855.801967][T24641] bridge_slave_1: entered promiscuous mode [ 855.914351][T24641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.945214][T24641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.021836][ T4934] Bluetooth: hci0: command tx timeout [ 856.144448][T24767] netlink: 'syz.4.4407': attribute type 1 has an invalid length. [ 856.308213][T24767] bond4: entered promiscuous mode [ 856.308666][T24767] 8021q: adding VLAN 0 to HW filter on device bond4 [ 856.328547][T24641] team0: Port device team_slave_0 added [ 856.338315][T24641] team0: Port device team_slave_1 added [ 856.364193][T24767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4407'. [ 856.364230][T24767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4407'. [ 856.421225][T24771] lo: entered promiscuous mode [ 856.466886][T24771] net_ratelimit: 8 callbacks suppressed [ 856.466909][T24771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 856.630803][T24767] ip6gretap0: entered promiscuous mode [ 856.635155][T24767] syz_tun: entered promiscuous mode [ 856.636382][T24767] syz_tun: left promiscuous mode [ 856.655350][T24767] ip6gretap0: left promiscuous mode [ 856.739754][T24641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.739773][T24641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.739799][T24641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.797004][T24641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.797023][T24641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.797048][T24641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.928591][T24641] hsr_slave_0: entered promiscuous mode [ 857.940133][T24641] hsr_slave_1: entered promiscuous mode [ 857.952524][T24641] debugfs: 'hsr0' already exists in 'hsr' [ 857.952549][T24641] Cannot create hsr debugfs directory [ 857.961756][T24802] netlink: 'syz.2.4420': attribute type 1 has an invalid length. [ 857.972060][T24807] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4421'. [ 858.103343][ T4934] Bluetooth: hci0: command tx timeout [ 858.203274][T24820] netlink: 'syz.4.4424': attribute type 4 has an invalid length. [ 858.257006][T24825] netlink: 'syz.4.4424': attribute type 4 has an invalid length. [ 858.364205][T24802] bridge1: entered promiscuous mode [ 858.378870][T24802] bond6: (slave bridge1): making interface the new active one [ 858.379911][T24802] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 858.413606][T24818] bridge2: entered promiscuous mode [ 858.417738][T24818] bond6: (slave bridge2): Enslaving as a backup interface with an up link [ 858.654781][T24831] netlink: 'syz.2.4425': attribute type 5 has an invalid length. [ 859.951634][T24857] __nla_validate_parse: 5 callbacks suppressed [ 859.951656][T24857] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4431'. [ 860.181036][ T5619] Bluetooth: hci0: command tx timeout [ 860.788621][T24860] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4432'. [ 860.789696][T24860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4432'. [ 861.833955][T24869] syz_tun: entered allmulticast mode [ 862.048218][T24834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 862.078740][T24868] syz_tun: left allmulticast mode [ 862.108257][T24641] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 862.150315][T24641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 862.159000][T24641] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 862.284369][T24641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 862.285352][T24641] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 862.290105][T24641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 862.316055][T24641] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 862.330027][T24641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 862.527046][T24883] ip_tables: iptables: counters copy to user failed while replacing table [ 862.855388][T24641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.216899][T24641] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.468586][T11033] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.468705][T11033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.569354][T11033] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.569474][T11033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.093747][T24918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4447'. [ 864.371740][T24911] tipc: Started in network mode [ 864.371773][T24911] tipc: Node identity 1af2b9c6d29, cluster identity 4711 [ 864.371953][T24911] tipc: Enabled bearer , priority 0 [ 864.378405][T24911] syzkaller0: entered promiscuous mode [ 864.378428][T24911] syzkaller0: entered allmulticast mode [ 864.988410][T24935] netlink: 'syz.5.4450': attribute type 3 has an invalid length. [ 865.019181][T24935] netlink: 'syz.5.4450': attribute type 11 has an invalid length. [ 865.145411][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 865.365340][T24948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4453'. [ 865.491644][ T5786] tipc: Node number set to 3361913286 [ 865.688553][T24968] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 865.926305][T24979] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 865.926463][T24979] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 866.237464][T24641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.529522][T24989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 866.693856][T24996] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 867.158732][T25002] syzkaller0: left promiscuous mode [ 867.158759][T25002] syzkaller0: left allmulticast mode [ 868.054792][T24641] veth0_vlan: entered promiscuous mode [ 868.097425][T24641] veth1_vlan: entered promiscuous mode [ 868.314482][T24641] veth0_macvtap: entered promiscuous mode [ 868.342593][T21728] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 868.395867][T24641] veth1_macvtap: entered promiscuous mode [ 868.427201][T25037] netlink: 'syz.5.4466': attribute type 1 has an invalid length. [ 868.511806][T24641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.551888][T24641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.730903][T21728] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.730959][T21728] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.730997][T21728] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.731032][T21728] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.828241][T25044] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4468'. [ 868.994641][T25047] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4468'. [ 869.057091][T25052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4470'. [ 869.057117][T25052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4470'. [ 869.303802][T11030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.303825][T11030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.616149][T25064] syzkaller0: entered promiscuous mode [ 869.616422][T25064] syzkaller0: entered allmulticast mode [ 869.652567][T25073] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4472'. [ 869.774946][T11030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.774970][T11030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.084553][T25085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4476'. [ 870.087167][T25084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4475'. [ 870.313371][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4474'. [ 870.353764][T25083] netlink: 'syz.5.4474': attribute type 2 has an invalid length. [ 870.353791][T25083] netlink: 'syz.5.4474': attribute type 8 has an invalid length. [ 870.353804][T25083] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4474'. [ 870.596157][T25100] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4477'. [ 870.603736][T25097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 870.633519][T25098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4477'. [ 870.733157][T25103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 870.797896][T25107] netlink: 'syz.5.4480': attribute type 21 has an invalid length. [ 870.797924][T25107] IPv6: NLM_F_CREATE should be specified when creating new route [ 871.192894][T25118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4483'. [ 871.463049][T25132] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4485'. [ 871.889757][T25150] netlink: 'syz.0.4489': attribute type 1 has an invalid length. [ 871.957543][T25144] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4488'. [ 872.544230][T25151] bond3: (slave geneve2): making interface the new active one [ 872.589870][T25151] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 872.604457][T11030] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 872.629685][T11036] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 872.645106][T11033] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 872.657856][T21728] netdevsim netdevsim0 : set [1, 1] type 2 family 0 port 20004 - 0 [ 872.676610][T25144] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4488'. [ 872.676816][T25144] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4488'. [ 872.677016][T25144] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4488'. [ 872.677211][T25144] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4488'. [ 872.677445][T25144] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4488'. [ 873.571695][T25189] netlink: 'syz.0.4492': attribute type 4 has an invalid length. [ 873.635112][T25189] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 873.663517][T25180] netlink: 'syz.2.4493': attribute type 2 has an invalid length. [ 876.441303][T25261] __nla_validate_parse: 5 callbacks suppressed [ 876.441326][T25261] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4510'. [ 876.941120][T25269] netlink: 'syz.2.4512': attribute type 4 has an invalid length. [ 876.998474][ T145] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 877.455573][T25283] netlink: 'syz.2.4515': attribute type 1 has an invalid length. [ 877.455597][T25283] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.4515'. [ 877.753624][T25293] netlink: 'syz.4.4516': attribute type 1 has an invalid length. [ 878.306358][T25306] netlink: 'syz.6.4520': attribute type 1 has an invalid length. [ 878.358873][T25306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4520'. [ 878.439651][T25308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4521'. [ 878.655046][T25308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4521'. [ 878.655209][T25308] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4521'. [ 878.767553][T25319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4524'. [ 878.975382][T25321] netlink: 'syz.5.4525': attribute type 23 has an invalid length. [ 879.732709][T25354] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4534'. [ 879.732743][T25354] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4534'. [ 879.890534][T25359] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4536'. [ 879.982994][T25350] syzkaller1: entered promiscuous mode [ 879.983018][T25350] syzkaller1: entered allmulticast mode [ 880.527480][T25369] netlink: 'syz.0.4538': attribute type 22 has an invalid length. [ 880.527740][T25369] netlink: 'syz.0.4538': attribute type 22 has an invalid length. [ 880.763112][T25380] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 882.879531][T25442] __nla_validate_parse: 5 callbacks suppressed [ 882.879555][T25442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4559'. [ 883.204425][T25451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4560'. [ 883.587662][T25466] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 883.621240][ T4934] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 883.623737][ T5619] Bluetooth: hci0: command 0x0405 tx timeout [ 883.934991][T25481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4571'. [ 883.935833][T25481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4571'. [ 884.203430][T25489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4570'. [ 884.203458][T25489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4570'. [ 884.313842][T25492] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4572'. [ 884.313871][T25492] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4572'. [ 884.897224][T25505] netlink: 'syz.4.4576': attribute type 2 has an invalid length. [ 885.821795][ T1169] bridge_slave_1: left promiscuous mode [ 885.822025][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.854526][ T1169] bridge_slave_0: left allmulticast mode [ 885.854552][ T1169] bridge_slave_0: left promiscuous mode [ 885.854789][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.194257][ T1169] pim6reg: left allmulticast mode [ 886.235953][ T1169] pimreg: left allmulticast mode [ 886.236089][ T1169] dvmrp8: left allmulticast mode [ 888.922638][ T1169] bond1 (unregistering): Released all slaves [ 888.970446][ T1169] bond2 (unregistering): Released all slaves [ 889.216555][ T1169] bond3 (unregistering): (slave veth3): Releasing active interface [ 889.217125][ T1169] batadv1: entered promiscuous mode [ 889.305685][ T1169] bond3 (unregistering): (slave batadv1): Releasing active interface [ 889.305716][ T1169] batadv1: left promiscuous mode [ 889.389721][ T1169] bond3 (unregistering): Released all slaves [ 889.599282][ T1169] bond4 (unregistering): Released all slaves [ 889.726695][ T1169] bond5 (unregistering): Released all slaves [ 889.846187][ T1169] bond6 (unregistering): Released all slaves [ 889.964719][ T1169] bond7 (unregistering): Released all slaves [ 890.044530][ T1169] bond0 (unregistering): Released all slaves [ 890.066781][ T1169] bond8 (unregistering): Released all slaves [ 890.098725][ T1169] bond9 (unregistering): (slave wireguard0): Releasing backup interface [ 890.098754][ T1169] wireguard0: left promiscuous mode [ 890.128820][ T1169] bond9 (unregistering): Released all slaves [ 890.433953][ T1169] : left promiscuous mode [ 890.728506][ T1169] tipc: Left network mode [ 890.808247][T25564] netlink: 'syz.0.4594': attribute type 1 has an invalid length. [ 891.285339][T25579] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4596'. [ 891.316031][T25580] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 891.316899][T25581] netlink: 'syz.6.4596': attribute type 21 has an invalid length. [ 891.670453][T25581] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4596'. [ 892.479430][T25610] netlink: 'syz.2.4602': attribute type 11 has an invalid length. [ 893.698149][T25633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 893.776371][T25630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 893.879982][T25633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.194237][ T1169] hsr_slave_0: left promiscuous mode [ 894.248680][ T1169] veth1_macvtap: left promiscuous mode [ 894.249918][ T1169] veth0_macvtap: left promiscuous mode [ 894.250050][ T1169] veth1_vlan: left promiscuous mode [ 894.250124][ T1169] veth0_vlan: left promiscuous mode [ 894.538507][T25652] netlink: 'syz.4.4612': attribute type 1 has an invalid length. [ 894.645667][T25653] netlink: 'syz.4.4612': attribute type 1 has an invalid length. [ 894.722131][T25659] ip_tables: iptables: counters copy to user failed while replacing table [ 895.039318][T25664] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4614'. [ 895.096891][T25665] netlink: 'syz.5.4614': attribute type 4 has an invalid length. [ 895.142895][T25665] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4614'. [ 895.646365][T25674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.648370][T25674] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4608'. [ 895.723729][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 896.085898][ T1169] team0 (unregistering): Port device dummy0 removed [ 896.602406][T25698] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 896.698307][ T1169] IPVS: stop unused estimator thread 0... [ 897.187525][T25713] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.187563][T25713] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.211004][T25650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 897.231984][T25673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 897.525896][T25715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4623'. [ 898.078932][T25737] IPv6: NLM_F_CREATE should be specified when creating new route [ 899.468180][T25779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4636'. [ 899.468211][T25779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4636'. [ 899.868012][T25793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4640'. [ 899.959820][T25798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4640'. [ 900.040384][T25793] bond1 (unregistering): Released all slaves [ 900.225314][T25792] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4639'. [ 900.537089][T25813] netlink: NAT attribute has 1 unknown bytes [ 900.537131][T25813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 900.630940][T25800] bond1 (unregistering): Released all slaves [ 900.828580][T25743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4629'. [ 900.903996][ T5279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 900.905792][T25744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4629'. [ 900.905985][T25748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4629'. [ 901.009663][T25825] netlink: 'syz.5.4644': attribute type 9 has an invalid length. [ 901.082693][T25826] ip_tables: iptables: counters copy to user failed while replacing table [ 901.287641][T25828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4645'. [ 901.287699][T25828] IPv6: Can't replace route, no match found [ 901.310364][T25828] netlink: NAT attribute has 1 unknown bytes [ 901.310402][T25828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 902.114201][T25858] atomic_op ffff88802653b1e0 conn xmit_atomic 0000000000000000 [ 902.177450][T25861] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 902.902983][T25885] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 902.903024][T25885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 902.941196][T25885] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 902.941234][T25885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 903.588745][T25908] __nla_validate_parse: 2 callbacks suppressed [ 903.588771][T25908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4667'. [ 903.857439][T25908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4667'. [ 904.169751][T25922] netlink: 'syz.2.4670': attribute type 1 has an invalid length. [ 904.297966][T25927] netlink: 'syz.5.4671': attribute type 83 has an invalid length. [ 904.347399][T25930] netlink: 'syz.5.4671': attribute type 83 has an invalid length. [ 907.923419][T11037] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 908.724719][T25925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4672'. [ 909.031880][T25951] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4676'. [ 909.484178][T25967] ip_tables: iptables: counters copy to user failed while replacing table [ 909.594178][T25973] ip6t_srh: unknown srh match flags 4000 [ 909.726726][T25973] netlink: 'syz.5.4683': attribute type 2 has an invalid length. [ 910.846318][T26007] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4690'. [ 911.284588][T26015] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 911.329245][T26019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4693'. [ 911.329272][T26019] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4693'. [ 911.329297][T26019] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4693'. [ 911.416259][T26019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4693'. [ 911.416285][T26019] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4693'. [ 911.416310][T26019] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4693'. [ 911.439884][T21726] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.440116][T21726] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.440153][T21726] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.440186][T21726] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.488578][T26024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4695'. [ 911.499982][T26024] lo: entered promiscuous mode [ 911.516934][T26024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 911.972473][T26036] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 911.972757][T26036] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 912.007107][T26036] tipc: Started in network mode [ 912.007142][T26036] tipc: Node identity 080211000001, cluster identity 4711 [ 912.008868][T26036] tipc: Enabled bearer , priority 0 [ 912.304927][T26050] netlink: 'syz.2.4703': attribute type 97 has an invalid length. [ 912.304958][T26050] netlink: 'syz.2.4703': attribute type 97 has an invalid length. [ 912.417335][T26056] netlink: 'syz.0.4705': attribute type 24 has an invalid length. [ 913.001728][T15154] tipc: Node number set to 134418688 [ 913.889676][T26102] __nla_validate_parse: 2 callbacks suppressed [ 913.889699][T26102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4717'. [ 913.934096][T26102] vlan2: entered promiscuous mode [ 913.934121][T26102] erspan0: entered promiscuous mode [ 914.565809][T26116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4721'. [ 914.610336][T26117] Cannot find add_set index 0 as target [ 914.610478][T26117] Cannot find add_set index 0 as target [ 914.615282][T26117] Cannot find add_set index 0 as target [ 914.615405][T26117] Cannot find add_set index 0 as target [ 914.615506][T26117] Cannot find add_set index 0 as target [ 914.615608][T26117] Cannot find add_set index 0 as target [ 914.615708][T26117] Cannot find add_set index 0 as target [ 914.615807][T26117] Cannot find add_set index 0 as target [ 914.615905][T26117] Cannot find add_set index 0 as target [ 914.616014][T26117] Cannot find add_set index 0 as target [ 914.889447][T26126] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4724'. [ 915.029359][T26129] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4725'. [ 915.029396][T26129] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 916.864303][T26190] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 916.937623][T26193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4740'. [ 916.939614][T26186] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 917.041275][T26193] bridge0: port 4(batadv2) entered blocking state [ 917.042787][T26193] bridge0: port 4(batadv2) entered disabled state [ 917.042993][T26193] batadv2: entered allmulticast mode [ 917.057361][T26193] batadv2: entered promiscuous mode [ 917.076806][T26194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4742'. [ 917.463092][ T145] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 917.463114][ T145] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 917.537271][T26207] ip_tables: iptables: counters copy to user failed while replacing table [ 917.570487][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 917.578238][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 917.581287][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 917.599031][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 917.601861][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 918.042896][T26220] team0: Device xfrm0 is of different type [ 918.549891][T26238] Unknown options in mask 4 [ 918.974861][T26246] netlink: 'syz.6.4756': attribute type 1 has an invalid length. [ 919.085860][T26243] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4756'. [ 919.192519][T26249] bond1: (slave veth0_to_bond): making interface the new active one [ 919.209311][T26249] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 919.254038][T26243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 919.701126][ T4934] Bluetooth: hci6: command tx timeout [ 920.039768][T26281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4765'. [ 920.278980][T26283] bond8: entered promiscuous mode [ 920.649883][T26305] sctp: [Deprecated]: syz.0.4767 (pid 26305) Use of int in max_burst socket option deprecated. [ 920.649883][T26305] Use struct sctp_assoc_value instead [ 920.695162][T26308] netlink: 'syz.5.4766': attribute type 10 has an invalid length. [ 920.812370][T26314] netlink: 'syz.5.4766': attribute type 10 has an invalid length. [ 920.852832][T26308] bond0 (unregistering): left promiscuous mode [ 920.852857][T26308] bond_slave_0: left promiscuous mode [ 920.853101][T26308] bond_slave_1: left promiscuous mode [ 920.868700][T26308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.934199][T26308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.947528][T26308] bond0 (unregistering): Released all slaves [ 921.013118][T26303] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.013313][T26303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.177955][T26206] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.178104][T26206] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.178253][T26206] bridge_slave_0: entered allmulticast mode [ 921.186647][T26206] bridge_slave_0: entered promiscuous mode [ 921.197679][T26206] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.199445][T26206] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.199586][T26206] bridge_slave_1: entered allmulticast mode [ 921.208424][T26206] bridge_slave_1: entered promiscuous mode [ 921.460388][T26206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.527186][T26206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.564438][ T145] bond7: (slave veth0_to_bond): link status definitely down, disabling slave [ 921.572474][T26328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 921.576219][T26326] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 921.643759][ T145] bond7: now running without any active interface! [ 921.706755][T26323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4771'. [ 921.779748][T26332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4773'. [ 921.779775][T26332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4773'. [ 921.790051][ T4934] Bluetooth: hci6: command tx timeout [ 921.804701][T26206] team0: Port device team_slave_0 added [ 921.836311][T26206] team0: Port device team_slave_1 added [ 922.061880][T26206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.061899][T26206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.061924][T26206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.079008][T26206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.079023][T26206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.079046][T26206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.217592][T26346] netlink: 292 bytes leftover after parsing attributes in process `syz.2.4777'. [ 922.217621][T26346] netlink: 292 bytes leftover after parsing attributes in process `syz.2.4777'. [ 922.288481][T26206] hsr_slave_0: entered promiscuous mode [ 922.298572][T26206] hsr_slave_1: entered promiscuous mode [ 922.307379][T26206] debugfs: 'hsr0' already exists in 'hsr' [ 922.307402][T26206] Cannot create hsr debugfs directory [ 922.412410][T26348] netlink: 'syz.0.4775': attribute type 5 has an invalid length. [ 922.479609][T26349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4775'. [ 922.908510][T26353] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4779'. [ 922.929011][T26353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4779'. [ 923.861165][ T4934] Bluetooth: hci6: command tx timeout [ 924.696185][T26206] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 924.779535][T26206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 924.803361][T26206] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 924.867306][T26206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 924.880986][T26206] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 924.914044][T26404] __nla_validate_parse: 1 callbacks suppressed [ 924.914067][T26404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4793'. [ 925.005302][T26206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 925.762181][T26404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 925.797952][T26404] 8021q: adding VLAN 0 to HW filter on device bond2 [ 925.817796][T26404] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 925.847955][T26404] 8021q: adding VLAN 0 to HW filter on device bond3 [ 925.903389][T26404] bridge0: port 4(batadv2) entered blocking state [ 925.903619][T26404] bridge0: port 4(batadv2) entered forwarding state [ 925.903938][T26404] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 925.905154][T26206] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 925.910457][T26413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4795'. [ 925.950846][ T4934] Bluetooth: hci6: command tx timeout [ 926.019601][T26206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 926.123457][T26407] ip6erspan0: entered allmulticast mode [ 926.384794][T26413] bond0: option xmit_hash_policy: invalid value (64) [ 926.405297][T26413] bond0 (unregistering): Released all slaves [ 926.899646][T26439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4800'. [ 926.899672][T26439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4800'. [ 926.899696][T26439] netlink: 'syz.2.4800': attribute type 15 has an invalid length. [ 927.092539][T26444] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4802'. [ 927.098390][T26447] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 927.207376][T26441] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 927.252176][T11037] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 927.308169][T26206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.310252][T21726] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 927.310301][T21726] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 927.354608][T26444] team0: Device gtp1 is up. Set it down before adding it as a team port [ 927.705837][T26206] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.769127][T11037] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.769246][T11037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.784338][T26455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4806'. [ 927.785344][T26456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4806'. [ 927.876640][T26462] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 927.896843][T26455] ip6gre1: entered promiscuous mode [ 927.896866][T26455] ip6gre1: entered allmulticast mode [ 927.939103][T26455] SET target dimension over the limit! [ 927.947332][T21727] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 927.995930][T26468] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20004 [ 928.241879][T11030] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.242000][T11030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.945054][T26494] netlink: 'syz.0.4813': attribute type 21 has an invalid length. [ 928.945084][T26494] IPv6: NLM_F_CREATE should be specified when creating new route [ 928.945776][T26494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 928.945790][T26494] IPv6: NLM_F_CREATE should be set when creating new route [ 928.945840][T26494] IPv6: NLM_F_CREATE should be set when creating new route [ 928.945867][T26494] IPv6: NLM_F_CREATE should be set when creating new route [ 929.043597][T26494] netlink: 'syz.0.4813': attribute type 1 has an invalid length. [ 929.043624][T26494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4813'. [ 929.332651][T26507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4815'. [ 929.365580][T26507] netlink: 'syz.2.4815': attribute type 1 has an invalid length. [ 929.574698][T26507] bond9: entered promiscuous mode [ 929.575223][T26507] 8021q: adding VLAN 0 to HW filter on device bond9 [ 929.972796][T26522] openvswitch: netlink: Flow key attr not present in new flow. [ 929.999932][T26522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4819'. [ 930.000080][T26522] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4819'. [ 930.201915][T26528] sock: sock_timestamping_bind_phc: sock not bind to device [ 930.309988][T26534] x_tables: duplicate underflow at hook 2 [ 930.564464][T26539] netlink: NAT attribute has 1 unknown bytes [ 930.564502][T26539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.643562][T26206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.491857][T26569] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4829'. [ 931.880102][T26206] veth0_vlan: entered promiscuous mode [ 932.002539][T26206] veth1_vlan: entered promiscuous mode [ 932.129180][T26599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4834'. [ 932.246594][T26599] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4834'. [ 932.385399][T26206] veth0_macvtap: entered promiscuous mode [ 932.427614][T26206] veth1_macvtap: entered promiscuous mode [ 932.522240][T26206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.565670][T26206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.630514][T26609] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4837'. [ 932.630539][T26609] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 932.645619][T26609] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4837'. [ 932.645642][T26609] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 932.648427][T26609] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4837'. [ 932.648448][T26609] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 932.648668][T26609] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4837'. [ 932.648682][T26609] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 932.648893][T26609] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4837'. [ 932.648908][T26609] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 932.649190][T26609] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 932.649429][T26609] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 932.649651][T26609] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 932.753301][T11036] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.754987][T11030] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.755296][T11030] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.764951][T11036] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.925284][T26627] ip_tables: iptables: counters copy to user failed while replacing table [ 934.424532][T26591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 934.803452][T21727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.803470][T21727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.052067][T21727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.052090][T21727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.111608][T11036] IPVS: starting estimator thread 0... [ 935.201760][T26650] IPVS: using max 25 ests per chain, 60000 per kthread [ 935.364770][T26655] __nla_validate_parse: 3 callbacks suppressed [ 935.364792][T26655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4845'. [ 935.416050][T26658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4846'. [ 935.456614][T26658] netlink: 'syz.2.4846': attribute type 1 has an invalid length. [ 935.596016][T26664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4847'. [ 935.600259][T26658] bond10: entered promiscuous mode [ 935.610057][T26658] 8021q: adding VLAN 0 to HW filter on device bond10 [ 935.959257][T26668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4848'. [ 935.969508][T26674] veth1_to_bond: entered allmulticast mode [ 935.994092][T26666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4848'. [ 935.999776][T26674] veth1_to_bond: left allmulticast mode [ 936.483397][T26702] ip_tables: iptables: counters copy to user failed while replacing table [ 936.511993][T26692] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 936.517107][T26692] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 936.894861][T26719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4860'. [ 936.918379][T26719] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4860'. [ 936.934313][T26720] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4860'. [ 937.108730][T26725] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4861'. [ 937.142848][T26725] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4861'. [ 938.156864][T26745] netlink: 'syz.6.4863': attribute type 1 has an invalid length. [ 938.196997][T26745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 938.212424][T26745] netlink: 'syz.6.4863': attribute type 10 has an invalid length. [ 938.241883][T26745] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.244529][T26745] bond0: (slave team0): Enslaving as an active interface with an up link [ 938.299681][T26745] bond2: (slave geneve2): making interface the new active one [ 938.317544][T26745] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 938.950350][T11036] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 939.370168][T26697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 940.008957][T26774] netlink: 'syz.7.4872': attribute type 12 has an invalid length. [ 940.008985][T26774] netlink: 'syz.7.4872': attribute type 29 has an invalid length. [ 940.536952][T26779] __nla_validate_parse: 26 callbacks suppressed [ 940.536978][T26779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4873'. [ 940.634969][T26779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4873'. [ 941.810049][T26822] net_ratelimit: 1 callbacks suppressed [ 941.810070][T26822] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 942.578833][T26826] xt_CT: No such helper "pptp" [ 943.732038][T26880] geneve3: entered promiscuous mode [ 943.784809][T26880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4889'. [ 943.784834][T26880] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4889'. [ 943.923683][T26885] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4891'. [ 944.352426][T26839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4883'. [ 944.428269][T26896] netlink: 'syz.2.4892': attribute type 1 has an invalid length. [ 944.456565][T26898] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4894'. [ 944.513456][T26896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4892'. [ 944.676533][T26898] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4894'. [ 944.678950][T26906] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4894'. [ 945.255797][T26931] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.290102][T26931] bridge_slave_1 (unregistering): left allmulticast mode [ 945.290133][T26931] bridge_slave_1 (unregistering): left promiscuous mode [ 945.290246][T26931] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.586682][T26931] __nla_validate_parse: 6 callbacks suppressed [ 945.586704][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4897'. [ 945.587991][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4897'. [ 945.589244][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4897'. [ 945.590491][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4897'. [ 945.593097][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4897'. [ 945.594221][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4897'. [ 945.595555][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4897'. [ 945.596742][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4897'. [ 945.597872][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4897'. [ 945.599055][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4897'. [ 945.852658][T26943] netlink: 'syz.5.4902': attribute type 21 has an invalid length. [ 945.908162][T26943] netlink: 'syz.5.4902': attribute type 5 has an invalid length. [ 945.970044][T26941] sctp: [Deprecated]: syz.5.4902 (pid 26941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 945.970044][T26941] Use struct sctp_sack_info instead [ 946.438552][T26962] netlink: 'syz.7.4907': attribute type 1 has an invalid length. [ 946.998480][T26975] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 947.127661][T26977] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 947.697325][T27008] netlink: 'syz.7.4917': attribute type 1 has an invalid length. [ 948.296952][T27022] netlink: 'syz.7.4922': attribute type 32 has an invalid length. [ 948.523413][T27029] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 949.577121][T27067] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 949.601149][T27067] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 949.823909][T27074] tc_dump_action: action bad kind [ 949.878334][T27078] netlink: 'syz.2.4938': attribute type 16 has an invalid length. [ 951.275465][T27103] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 951.358964][T27103] bond12 (unregistering): Released all slaves [ 951.571392][T27126] Bluetooth: hci0: unsupported parameter 5134 [ 951.571419][T27126] Bluetooth: hci0: unsupported parameter 8192 [ 951.571432][T27126] Bluetooth: hci0: unsupported parameter 5134 [ 951.571444][T27126] Bluetooth: hci0: unsupported parameter 8192 [ 952.289958][T27141] __nla_validate_parse: 36 callbacks suppressed [ 952.289981][T27141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4953'. [ 952.312252][T27140] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4955'. [ 952.354956][T27146] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4955'. [ 952.404153][T27141] netlink: 'syz.5.4953': attribute type 1 has an invalid length. [ 952.404179][T27141] netlink: 'syz.5.4953': attribute type 2 has an invalid length. [ 953.477971][T27164] netlink: 'syz.2.4960': attribute type 1 has an invalid length. [ 953.479206][T27164] netlink: 'syz.2.4960': attribute type 1 has an invalid length. [ 953.480369][T27164] netlink: 'syz.2.4960': attribute type 1 has an invalid length. [ 953.481813][T27164] netlink: 'syz.2.4960': attribute type 1 has an invalid length. [ 953.482924][T27164] netlink: 'syz.2.4960': attribute type 1 has an invalid length. [ 953.484018][T27164] netlink: 'syz.2.4960': attribute type 1 has an invalid length. [ 953.485139][T27164] netlink: 'syz.2.4960': attribute type 1 has an invalid length. [ 953.659354][T27176] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4966'. [ 954.036458][T27190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4964'. [ 954.408815][T27195] xt_nat: multiple ranges no longer supported [ 954.724081][T27209] geneve3: entered promiscuous mode [ 954.760885][T21726] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 45225 - 0 [ 954.760937][T21726] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 45225 - 0 [ 954.760982][T21726] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 45225 - 0 [ 954.761016][T21726] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 45225 - 0 [ 955.387107][T27222] veth0: entered promiscuous mode [ 955.838041][T27231] validate_nla: 28 callbacks suppressed [ 955.838071][T27231] netlink: 'syz.2.4979': attribute type 3 has an invalid length. [ 955.838086][T27231] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4979'. [ 955.884732][T27230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4978'. [ 955.884769][T27230] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 955.919744][T27235] ip_tables: iptables: counters copy to user failed while replacing table [ 956.087841][T27242] netlink: 'syz.7.4980': attribute type 10 has an invalid length. [ 956.172071][T27216] veth0: left promiscuous mode [ 956.455554][T27242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 956.499160][T27242] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 956.566314][T27249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4983'. [ 956.568983][T27249] netlink: 'syz.6.4983': attribute type 7 has an invalid length. [ 956.673832][T27254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4984'. [ 957.208479][T27264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4985'. [ 957.431075][T27278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4986'. [ 958.747257][T27307] Cannot find add_set index 0 as target [ 958.784805][T27307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4997'. [ 958.803701][T27305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4995'. [ 958.805252][T27305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4995'. [ 958.805507][T27305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4995'. [ 959.268340][T27326] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 959.268709][T27326] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 959.269073][T27326] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 959.269412][T27326] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 959.314885][T27326] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 959.315264][T27326] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 959.315608][T27326] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 959.315939][T27326] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 959.599910][T27337] netlink: 'syz.5.5005': attribute type 2 has an invalid length. [ 959.792779][T27342] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5006'. [ 959.866765][T27334] bond0: option resend_igmp: invalid value (32767) [ 959.866792][T27334] bond0: option resend_igmp: allowed values 0 - 255 [ 959.875720][T27334] bond0 (unregistering): Released all slaves [ 960.309949][T27352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5009'. [ 960.360296][T27353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5009'. [ 960.643178][T27350] mac80211_hwsim hwsim40 syzkaller0: left promiscuous mode [ 960.643209][T27350] mac80211_hwsim hwsim40 syzkaller0: left allmulticast mode [ 960.702837][T27368] netlink: 'syz.5.5010': attribute type 1 has an invalid length. [ 960.762645][T27366] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5012'. [ 960.839655][T27368] block nbd296: server does not support multiple connections per device. [ 960.839977][T27368] block nbd296: shutting down sockets [ 960.955388][T27373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5011'. [ 961.623542][ T5619] Bluetooth: hci6: command 0x0405 tx timeout [ 963.546584][T27368] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 967.063259][T27410] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5021'. [ 967.113251][T27410] erspan0: entered promiscuous mode [ 967.269161][T27419] net_ratelimit: 12 callbacks suppressed [ 967.269184][T27419] openvswitch: netlink: Key type 30 is not supported [ 967.388554][T27412] netlink: 'syz.2.5019': attribute type 2 has an invalid length. [ 967.388578][T27412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5019'. [ 967.397298][T27421] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5023'. [ 967.488453][T27412] : entered promiscuous mode [ 967.857482][T27433] netlink: 'syz.6.5028': attribute type 3 has an invalid length. [ 967.857510][T27433] netlink: 'syz.6.5028': attribute type 1 has an invalid length. [ 967.917375][T27437] x_tables: duplicate underflow at hook 3 [ 967.957157][T27438] Bluetooth: MGMT ver 1.23 [ 968.279689][T27449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5033'. [ 968.794314][T27477] IPv6: NLM_F_CREATE should be specified when creating new route [ 968.795292][T27477] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5038'. [ 968.839440][T27482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5038'. [ 969.262191][T27490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5041'. [ 969.342724][T27494] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5044'. [ 969.342756][T27494] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5044'. [ 969.343407][T27490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5041'. [ 969.549212][T27504] netlink: 'syz.0.5041': attribute type 1 has an invalid length. [ 969.563257][T27506] batadv_slave_0: entered promiscuous mode [ 969.595929][T27506] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 969.603856][T27506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.631463][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 969.977365][T21729] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 970.135689][T27506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.335598][T27522] netlink: 'syz.5.5049': attribute type 3 has an invalid length. [ 970.354424][T27522] syzkaller0: entered promiscuous mode [ 970.354458][T27522] syzkaller0: entered allmulticast mode [ 970.541747][T27522] tipc: Enabled bearer , priority 0 [ 971.784343][ T4934] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 971.794518][ T4934] Bluetooth: hci2: command 0x0406 tx timeout [ 972.107822][T27566] __nla_validate_parse: 10 callbacks suppressed [ 972.107845][T27566] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5064'. [ 972.260014][T27573] syzkaller0: left promiscuous mode [ 972.260037][T27573] syzkaller0: left allmulticast mode [ 972.574858][T27582] gretap0: entered promiscuous mode [ 972.576762][T27582] vlan0: entered promiscuous mode [ 972.902925][T27597] netlink: 'syz.2.5071': attribute type 28 has an invalid length. [ 972.902951][T27597] netlink: 'syz.2.5071': attribute type 3 has an invalid length. [ 972.902964][T27597] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5071'. [ 972.953717][T27595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5072'. [ 973.066848][T27605] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5071'. [ 973.106400][T27600] bond3: entered promiscuous mode [ 973.106425][T27600] bond3: entered allmulticast mode [ 973.136644][T27609] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5071'. [ 973.164841][T27605] 0ªX¹¦Dö»: entered promiscuous mode [ 973.164868][T27605] 0ªX¹¦Dö»: left allmulticast mode [ 973.304072][T27609] 0ªî{X¹¦: renamed from 00ªX¹¦Dö» [ 973.361196][T27609] 0ªî{X¹¦: left promiscuous mode [ 973.361222][T27609] 0ªî{X¹¦: entered allmulticast mode [ 973.394529][T27609] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 974.335700][T27626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5078'. [ 974.464462][T27632] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5080'. [ 974.886754][T27647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5084'. [ 974.944397][T27643] ovs-dp0: entered promiscuous mode [ 974.965864][T27653] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5087'. [ 975.046120][T27657] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5086'. [ 975.440366][T27666] netlink: 'syz.7.5090': attribute type 2 has an invalid length. [ 975.667773][ T4934] Bluetooth: hci1: ACL packet too small [ 975.716204][T27669] xt_CT: No such helper "netbios-ns" [ 976.598206][T27690] can: request_module (can-proto-0) failed. [ 978.451319][T27738] __nla_validate_parse: 5 callbacks suppressed [ 978.451344][T27738] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5111'. [ 978.949469][T27749] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5115'. [ 980.209822][T27777] team0: Device xfrm0 is of different type [ 980.412349][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5124'. [ 981.917495][T27821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 981.996896][T27822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 982.107032][T27827] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5134'. [ 982.458556][T27831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 982.936348][ T4934] Bluetooth: hci3: unexpected event for opcode 0x0005 [ 982.949651][T27839] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5138'. [ 983.215602][T27851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5141'. [ 983.251086][T27851] macvlan2: entered promiscuous mode [ 983.253464][T27851] macvlan2: entered allmulticast mode [ 983.349028][T27852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.384505][T27857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.416625][T27862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 983.825108][T27869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5146'. [ 985.052526][T27898] netlink: 3080 bytes leftover after parsing attributes in process `syz.2.5149'. [ 985.052553][T27898] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.5149'. [ 985.087757][T27898] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 985.177256][T27898] veth0: mtu less than device minimum [ 985.284140][T27900] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5151'. [ 985.414183][T27910] netlink: 'syz.5.5155': attribute type 1 has an invalid length. [ 985.414213][T27910] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5155'. [ 985.414228][T27910] NCSI netlink: No device for ifindex 0 [ 985.417596][T27908] netlink: 'syz.0.5153': attribute type 2 has an invalid length. [ 985.420407][T27908] netlink: 'syz.0.5153': attribute type 2 has an invalid length. [ 985.420426][T27908] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.5153'. [ 985.490670][T27908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 985.522467][T27908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5153'. [ 985.832653][T27921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5157'. [ 986.017666][T27930] Cannot find add_set index 0 as target [ 986.041547][T11037] IPVS: starting estimator thread 0... [ 986.064002][T27937] Cannot find add_set index 0 as target [ 986.202861][T27932] IPVS: using max 27 ests per chain, 64800 per kthread [ 986.820332][T27946] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5163'. [ 986.901318][T27966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5168'. [ 987.835544][T27998] block nbd0: not configured, cannot reconfigure [ 987.836644][T27998] netlink: 'syz.0.5177': attribute type 11 has an invalid length. [ 988.321983][T28008] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 988.395648][T28015] xt_connbytes: Forcing CT accounting to be enabled [ 989.389910][T28043] tipc: Resetting bearer [ 989.599677][T28052] __nla_validate_parse: 5 callbacks suppressed [ 989.599701][T28052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5187'. [ 989.599729][T28052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5187'. [ 989.680142][T28053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5187'. [ 989.680180][T28053] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5187'. [ 989.852028][T28043] tipc: Disabling bearer [ 990.856583][T28085] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 990.856928][T28085] syzkaller1: linktype set to 823 [ 990.882095][T28079] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 991.329293][T28107] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5200'. [ 991.552681][T28105] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5199'. [ 991.859834][T28115] Cannot find map_set index 2 as target [ 991.977071][T28115] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5202'. [ 992.114102][T28127] netlink: 'syz.7.5207': attribute type 1 has an invalid length. [ 992.114128][T28127] nbd: error processing sock list [ 992.204517][T28127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5207'. [ 992.308709][T28131] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 992.726824][T28141] sctp: [Deprecated]: syz.6.5209 (pid 28141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 992.726824][T28141] Use struct sctp_sack_info instead [ 992.728911][T28141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5209'. [ 992.746850][T28138] ip_tables: iptables: counters copy to user failed while replacing table [ 992.867853][T28144] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5212'. [ 993.177349][T28144] hsr_slave_1 (unregistering): left promiscuous mode [ 1000.903271][T21729] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1018.483757][T28170] __nla_validate_parse: 1 callbacks suppressed [ 1018.483777][T28170] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5218'. [ 1018.868855][T28184] netlink: 'syz.2.5219': attribute type 17 has an invalid length. [ 1018.868882][T28184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5219'. [ 1018.868916][T28184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5219'. [ 1019.219927][T28184] erspan0: entered promiscuous mode [ 1019.232963][T28196] sctp: [Deprecated]: syz.5.5222 (pid 28196) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1019.232963][T28196] Use struct sctp_sack_info instead [ 1019.237604][T28194] netlink: 'syz.5.5222': attribute type 10 has an invalid length. [ 1019.237626][T28184] 0ªî{X¹¦: entered promiscuous mode [ 1019.407692][T28204] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5222'. [ 1019.470180][T28206] netlink: 'syz.7.5225': attribute type 1 has an invalid length. [ 1019.528729][T28194] team0: Port device dummy0 added [ 1019.573892][T28204] team0: Port device dummy0 removed [ 1019.635275][T28211] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5225'. [ 1019.798834][T28216] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5225'. [ 1019.894241][T28216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1020.032788][T28206] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5225'. [ 1020.156712][T28206] bond1: (slave bridge1): making interface the new active one [ 1020.159920][T28206] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1020.396983][T28227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1020.613412][T28249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5232'. [ 1020.634802][T28249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5232'. [ 1020.636432][T28249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5232'. [ 1020.978683][T28259] xt_hashlimit: size too large, truncated to 1048576 [ 1021.079086][ T4934] Bluetooth: hci0: unexpected event for opcode 0x203d [ 1022.767861][T28312] openvswitch: netlink: Message has 8 unknown bytes. [ 1023.127392][T28321] ip_tables: iptables: counters copy to user failed while replacing table [ 1024.213275][T28353] netlink: 'syz.0.5256': attribute type 10 has an invalid length. [ 1024.259608][T28353] team0: Device veth0_macvtap failed to register rx_handler [ 1024.462678][ T4934] Bluetooth: hci6: unexpected event 0x3b length: 11 > 10 [ 1024.567465][T28364] __nla_validate_parse: 5 callbacks suppressed [ 1024.567488][T28364] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5260'. [ 1024.567510][T28364] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5260'. [ 1024.739180][T28370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5261'. [ 1024.739222][T28370] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5261'. [ 1025.391181][T28386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5266'. [ 1025.768935][T28400] netlink: 144 bytes leftover after parsing attributes in process `syz.6.5273'. [ 1025.939415][T28409] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5275'. [ 1026.174524][T28413] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1026.175256][T28413] team0: Device ipvlan3 is already an upper device of the team interface [ 1026.275914][T28418] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1026.276451][T28418] team0: Device ipvlan3 is already an upper device of the team interface [ 1026.708678][T28435] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5283'. [ 1026.765613][T28437] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 1026.765753][T28437] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 1027.799857][T28468] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5291'. [ 1027.833454][T28468] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5291'. [ 1028.093621][T28458] netlink: 'syz.5.5288': attribute type 5 has an invalid length. [ 1028.150909][T28458] geneve0: entered promiscuous mode [ 1028.151424][T28458] geneve0: entered allmulticast mode [ 1028.231419][T21729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1028.250582][T11033] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 256 - 0 [ 1028.250641][T11033] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1028.250674][T11033] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1028.250706][T11033] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1029.531389][T28520] mac80211_hwsim hwsim40 syzkaller0: left promiscuous mode [ 1029.531430][T28520] mac80211_hwsim hwsim40 syzkaller0: left allmulticast mode [ 1029.721305][T28533] IPv6: NLM_F_CREATE should be specified when creating new route [ 1030.322196][T28551] __nla_validate_parse: 6 callbacks suppressed [ 1030.322219][T28551] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5306'. [ 1030.728883][T28545] bond6 (unregistering): Released all slaves [ 1031.731306][T28592] netlink: 'syz.0.5315': attribute type 64 has an invalid length. [ 1031.731628][T28592] bridge0: port 4(batadv2) entered disabled state [ 1031.731843][T28592] bridge0: port 3(veth0) entered disabled state [ 1031.732512][T28592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.733048][T28592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.791128][T28596] netlink: 'syz.0.5315': attribute type 64 has an invalid length. [ 1031.832161][T21728] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1031.881615][T28597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5314'. [ 1032.082582][T28606] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5317'. [ 1033.218401][T28632] netlink: 'syz.7.5322': attribute type 12 has an invalid length. [ 1033.599967][T28640] netlink: 27 bytes leftover after parsing attributes in process `syz.6.5326'. [ 1034.177309][T28661] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5332'. [ 1034.328281][T28666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5333'. [ 1034.328318][T28666] netlink: 'syz.2.5333': attribute type 6 has an invalid length. [ 1034.328332][T28666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5333'. [ 1034.518522][T28666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5333'. [ 1034.518559][T28666] netlink: 'syz.2.5333': attribute type 6 has an invalid length. [ 1034.518573][T28666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5333'. [ 1034.551564][ T145] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1034.553155][T21726] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1034.553328][T21726] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1034.553378][T21726] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1034.693288][T28672] syzkaller0: entered promiscuous mode [ 1034.693312][T28672] syzkaller0: entered allmulticast mode [ 1034.830403][T28670] netlink: 'syz.6.5336': attribute type 2 has an invalid length. [ 1034.865916][T28670] lo: entered promiscuous mode [ 1034.892299][T28670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1035.636218][T28697] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1036.370427][T28715] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1036.616412][T28716] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1036.657010][T28716] bond2: (slave lo): Enslaving as an active interface with an up link [ 1036.723541][T28716] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1037.970504][T28689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1038.607326][T28753] netlink: Unknown NAT attribute (type=2049, max=9) [ 1038.607375][T28753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1038.854244][ T4934] Bluetooth: hci5: connection err: -111 [ 1038.968723][T28771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5359'. [ 1039.102283][T28773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5360'. [ 1039.572656][T28796] netlink: 'syz.2.5367': attribute type 39 has an invalid length. [ 1039.636473][T28792] netlink: 'syz.7.5365': attribute type 1 has an invalid length. [ 1039.775692][T28797] bond13: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1039.798497][T28797] bond13 (unregistering): Released all slaves [ 1039.904576][T28810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5369'. [ 1040.097432][T28792] bond3: entered promiscuous mode [ 1040.100477][T28792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1040.252271][T28801] ipvlan2: entered allmulticast mode [ 1040.252295][T28801] bond3: entered allmulticast mode [ 1040.298257][T28804] ipvlan3: entered allmulticast mode [ 1040.376457][T28815] bond3: (slave bridge3): making interface the new active one [ 1040.376484][T28815] bridge3: entered promiscuous mode [ 1040.376662][T28815] bridge3: entered allmulticast mode [ 1040.407805][T28815] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1040.469748][T28839] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1040.700480][T28851] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5375'. [ 1040.734068][T28851] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.5375'. [ 1040.784311][T28854] netlink: 12951 bytes leftover after parsing attributes in process `syz.0.5375'. [ 1040.864308][T28852] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1041.080671][T28853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.083904][T28853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.084044][T28853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.313111][T28778] Bluetooth: hci6: command 0x0405 tx timeout [ 1041.313158][T28778] Bluetooth: hci0: command 0x0405 tx timeout [ 1043.246262][T28839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1043.249033][T28890] netlink: 'syz.0.5380': attribute type 1 has an invalid length. [ 1044.638037][T28953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5390'. [ 1045.343110][T28968] netlink: 'syz.7.5395': attribute type 1 has an invalid length. [ 1045.343137][T28968] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5395'. [ 1045.344430][T28970] netlink: 'syz.7.5395': attribute type 1 has an invalid length. [ 1045.344449][T28970] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5395'. [ 1045.677695][T28979] netlink: 'syz.7.5398': attribute type 15 has an invalid length. [ 1045.677719][T28979] netlink: 'syz.7.5398': attribute type 7 has an invalid length. [ 1045.711904][T28983] netlink: 'syz.7.5398': attribute type 15 has an invalid length. [ 1045.711930][T28983] netlink: 'syz.7.5398': attribute type 7 has an invalid length. [ 1047.522383][T29049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1047.687294][T29053] vlan0: entered allmulticast mode [ 1047.687320][T29053] veth1_virt_wifi: entered allmulticast mode [ 1047.927455][T29063] batadv_slave_0: entered promiscuous mode [ 1047.930333][T29063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5415'. [ 1047.930470][T29063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.079612][T29063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.186568][T29068] netlink: 'syz.7.5416': attribute type 25 has an invalid length. [ 1048.400382][T29073] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5418'. [ 1048.417022][T29073] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5418'. [ 1048.417058][T29073] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5418'. [ 1049.246147][T29086] bridge4: entered allmulticast mode [ 1049.495272][T29108] ip_tables: iptables: counters copy to user failed while replacing table [ 1049.527997][T29113] netlink: 'syz.2.5426': attribute type 1 has an invalid length. [ 1050.346498][T29131] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1050.516363][T29135] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5432'. [ 1050.672714][T29139] tipc: New replicast peer: 255.255.255.255 [ 1050.678502][T29139] tipc: Enabled bearer , priority 10 [ 1050.985721][T29123] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1050.985865][T29123] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1051.619826][T29167] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5443'. [ 1051.918684][T29172] vlan2: entered allmulticast mode [ 1051.918711][T29172] bond0: entered allmulticast mode [ 1051.918725][T29172] bond_slave_0: entered allmulticast mode [ 1051.918742][T29172] bond_slave_1: entered allmulticast mode [ 1051.918877][T29172] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 1052.004970][T29185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5445'. [ 1052.131731][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5450'. [ 1052.131951][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5450'. [ 1052.132151][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5450'. [ 1052.132448][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5450'. [ 1052.132665][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5450'. [ 1052.135372][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5450'. [ 1052.135590][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5450'. [ 1052.610046][T29201] netlink: 'syz.6.5452': attribute type 6 has an invalid length. [ 1052.663098][ T31] INFO: task syz.4.4651:25854 blocked for more than 143 seconds. [ 1052.663125][ T31] Not tainted syzkaller #0 [ 1052.663136][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1052.663146][ T31] task:syz.4.4651 state:D stack:26112 pid:25854 tgid:25851 ppid:20032 task_flags:0x400140 flags:0x00080002 [ 1052.663203][ T31] Call Trace: [ 1052.663211][ T31] [ 1052.663226][ T31] __schedule+0x17db/0x58f0 [ 1052.663400][ T31] ? __pfx___schedule+0x10/0x10 [ 1052.663438][ T31] ? schedule+0x90/0x2b0 [ 1052.663467][ T31] schedule+0x164/0x2b0 [ 1052.663495][ T31] schedule_preempt_disabled+0x13/0x30 [ 1052.663518][ T31] __mutex_lock+0x7c1/0x1550 [ 1052.663545][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1052.663574][ T31] ? nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 1052.663682][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1052.663718][ T31] ? net_generic+0x1e/0x240 [ 1052.663739][ T31] ? net_generic+0x1e/0x240 [ 1052.663769][ T31] nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 1052.663806][ T31] ? rcu_is_watching+0x16/0xb0 [ 1052.663833][ T31] ? trace_kmalloc+0x2a/0xf0 [ 1052.663855][ T31] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 1052.663879][ T31] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 1052.663902][ T31] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 1052.663922][ T31] ? netlink_dump+0x1e7/0xee0 [ 1052.664009][ T31] ? netlink_dump+0x1e7/0xee0 [ 1052.664045][ T31] genl_dumpit+0x10b/0x1b0 [ 1052.664087][ T31] netlink_dump+0x711/0xee0 [ 1052.664130][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 1052.664169][ T31] ? genl_start+0x497/0x6d0 [ 1052.664195][ T31] __netlink_dump_start+0x589/0x7b0 [ 1052.664234][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1052.664264][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1052.664297][ T31] ? __pfx_genl_start+0x10/0x10 [ 1052.664319][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 1052.664340][ T31] ? __pfx_genl_done+0x10/0x10 [ 1052.664369][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1052.664388][ T31] ? security_capable+0x7e/0x2c0 [ 1052.664459][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 1052.664492][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1052.664547][ T31] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 1052.664591][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1052.664623][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1052.664659][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1052.664706][ T31] ? down_read+0x2be/0x330 [ 1052.664738][ T31] genl_rcv+0x28/0x40 [ 1052.664761][ T31] netlink_unicast+0x7bd/0x940 [ 1052.664802][ T31] netlink_sendmsg+0x813/0xb40 [ 1052.664836][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.664866][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 1052.664893][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.664913][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1052.664966][ T31] ____sys_sendmsg+0x54e/0x850 [ 1052.665001][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1052.665040][ T31] ? import_iovec+0x73/0xa0 [ 1052.665112][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1052.665139][ T31] ? __lock_acquire+0x747/0x2de0 [ 1052.665181][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1052.665214][ T31] ? futex_wake+0x51b/0x5f0 [ 1052.665284][ T31] ? __fget_files+0x2a/0x420 [ 1052.665329][ T31] ? __fget_files+0x3a2/0x420 [ 1052.665368][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1052.665401][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1052.665453][ T31] do_syscall_64+0x166/0x520 [ 1052.665478][ T31] ? trace_irq_disable+0x3b/0x140 [ 1052.665500][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.665524][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1052.665549][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.665570][ T31] RIP: 0033:0x7fe2bdf9e159 [ 1052.665590][ T31] RSP: 002b:00007fe2bede0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1052.665613][ T31] RAX: ffffffffffffffda RBX: 00007fe2be225fa0 RCX: 00007fe2bdf9e159 [ 1052.665628][ T31] RDX: 000000000404c000 RSI: 0000200000000180 RDI: 000000000000000b [ 1052.665641][ T31] RBP: 00007fe2be03506b R08: 0000000000000000 R09: 0000000000000000 [ 1052.665662][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.665674][ T31] R13: 00007fe2be226038 R14: 00007fe2be225fa0 R15: 00007ffeb99b13d8 [ 1052.665710][ T31] [ 1052.665748][ T31] [ 1052.665748][ T31] Showing all locks held in the system: [ 1052.665770][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 1052.665837][ T31] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1052.665977][ T31] locks held by klogd/4973: 1, last CPU#1: [ 1052.665991][ T31] #0: ffff8880b8728298 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x466/0xa10 [ 1052.666048][ T31] locks held by getty/5375: 2, on CPU#1: [ 1052.666062][ T31] #0: ffff88802e1e00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1052.666196][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1052.666266][ T31] locks held by kworker/u8:11/21729: 3, last CPU#0: [ 1052.666281][ T31] #0: ffff88803251d140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1052.666355][ T31] #1: ffffc9000d587c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1052.666411][ T31] #2: ffff888054d269c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 1052.666526][ T31] locks held by syz.1.4299/24324: 2, on CPU#0: [ 1052.666541][ T31] #0: ffffffff902c5cc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1052.666590][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1052.666668][ T31] locks held by syz.4.4651/25854: 3, on CPU#0: [ 1052.666681][ T31] #0: ffffffff902c5cc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1052.666729][ T31] #1: ffff88804e3316e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 1052.666784][ T31] #2: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 1052.666839][ T31] locks held by syz.2.5445/29188: 2, last CPU#1: [ 1052.666854][ T31] #0: ffff88802a657678 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1052.666925][ T31] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1052.666982][ T31] locks held by syz.7.5451/29192: 1, on CPU#0: [ 1052.666996][ T31] #0: ffffffff8ed62bb8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1052.667048][ T31] locks held by syz.6.5452/29199: 2, last CPU#0: [ 1052.667062][ T31] #0: ffff88804ae05cf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1052.667114][ T31] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1052.667167][ T31] [ 1052.667172][ T31] ============================================= [ 1052.667172][ T31] [ 1052.667182][ T31] NMI backtrace for cpu 0 [ 1052.667195][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1052.667215][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1052.667226][ T31] Call Trace: [ 1052.667234][ T31] [ 1052.667242][ T31] dump_stack_lvl+0xe8/0x150 [ 1052.667271][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1052.667378][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1052.667421][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1052.667446][ T31] sys_info+0x135/0x170 [ 1052.667472][ T31] watchdog+0xfd7/0x1030 [ 1052.667501][ T31] ? watchdog+0x1c7/0x1030 [ 1052.667527][ T31] kthread+0x38b/0x480 [ 1052.667548][ T31] ? __pfx_watchdog+0x10/0x10 [ 1052.667565][ T31] ? __pfx_kthread+0x10/0x10 [ 1052.667586][ T31] ret_from_fork+0x514/0xb70 [ 1052.667610][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1052.667629][ T31] ? __switch_to+0xc89/0x1420 [ 1052.667688][ T31] ? __pfx_kthread+0x10/0x10 [ 1052.667712][ T31] ret_from_fork_asm+0x1a/0x30 [ 1052.667760][ T31] [ 1052.667769][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1052.667797][ C1] NMI backtrace for cpu 1 [ 1052.667812][ C1] CPU: 1 UID: 0 PID: 29204 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1052.667833][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1052.667843][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4f/0x80 [ 1052.667873][ C1] Code: 01 00 0f 81 fe 00 01 00 00 40 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 3c 17 00 00 00 74 2c 8b 91 10 17 00 00 <83> fa 02 75 21 48 8b 91 18 17 00 00 48 8b 32 48 8d 7e 01 8b 89 14 [ 1052.667889][ C1] RSP: 0000:ffffc900041bf800 EFLAGS: 00000246 [ 1052.667905][ C1] RAX: ffffffff82246518 RBX: ffffea00004b7000 RCX: ffff888036b01f40 [ 1052.667919][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffea00004b7008 [ 1052.667931][ C1] RBP: ffffea00004b7030 R08: 00007f4998f58000 R09: 1ffffd4000096e00 [ 1052.667944][ C1] R10: dffffc0000000000 R11: fffff94000096e01 R12: 0000000000000001 [ 1052.667956][ C1] R13: ffff8880759488c0 R14: ffffea00004b7000 R15: dffffc0000000000 [ 1052.667969][ C1] FS: 0000555590731500(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000 [ 1052.667984][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1052.667997][ C1] CR2: 00007f4998f5e110 CR3: 000000007a152000 CR4: 00000000003526f0 [ 1052.668015][ C1] Call Trace: [ 1052.668022][ C1] [ 1052.668028][ C1] folio_add_file_rmap_ptes+0x178/0xc80 [ 1052.668055][ C1] set_pte_range+0x4e2/0x840 [ 1052.668083][ C1] filemap_map_pages+0xe67/0x2170 [ 1052.668118][ C1] ? filemap_map_pages+0x1d1/0x2170 [ 1052.668146][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1052.668177][ C1] ? lock_acquire+0x115/0x350 [ 1052.668197][ C1] ? lock_acquire+0x115/0x350 [ 1052.668215][ C1] ? do_pte_missing+0x140c/0x34b0 [ 1052.668231][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1052.668254][ C1] ? do_pte_missing+0x140c/0x34b0 [ 1052.668271][ C1] do_pte_missing+0x20ae/0x34b0 [ 1052.668294][ C1] ? handle_mm_fault+0xf1/0x3750 [ 1052.668319][ C1] handle_mm_fault+0x1a53/0x3750 [ 1052.668346][ C1] ? handle_mm_fault+0xf1/0x3750 [ 1052.668374][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1052.668395][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 1052.668433][ C1] do_user_addr_fault+0xa4f/0x1340 [ 1052.668456][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 1052.668474][ C1] exc_page_fault+0x6a/0xc0 [ 1052.668497][ C1] asm_exc_page_fault+0x26/0x30 [ 1052.668514][ C1] RIP: 0033:0x7f4998f5e110 [ 1052.668534][ C1] Code: Unable to access opcode bytes at 0x7f4998f5e0e6. [ 1052.668543][ C1] RSP: 002b:00007ffc6b840298 EFLAGS: 00010206 [ 1052.668558][ C1] RAX: 0000000000000000 RBX: 00007ffc6b8402b0 RCX: 00007f4998fc6c0c [ 1052.668569][ C1] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 00007f4999d58060 [ 1052.668581][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 1052.668592][ C1] R10: 00005555907317d0 R11: 0000000000000246 R12: 0000000000000001 [ 1052.668603][ C1] R13: 00000000000927c0 R14: 0000000000100e1c R15: 00007ffc6b840490 [ 1052.668624][ C1] [ 1052.668793][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1053.720575][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1053.729709][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1053.739781][ T31] Call Trace: [ 1053.743067][ T31] [ 1053.746005][ T31] vpanic+0x56d/0xa60 [ 1053.750038][ T31] ? __pfx_vpanic+0x10/0x10 [ 1053.754582][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 1053.760145][ T31] panic+0xc5/0xd0 [ 1053.763966][ T31] ? __pfx_panic+0x10/0x10 [ 1053.768398][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 1053.773520][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1053.779704][ T31] watchdog+0x1030/0x1030 [ 1053.784048][ T31] ? watchdog+0x1c7/0x1030 [ 1053.788480][ T31] kthread+0x38b/0x480 [ 1053.792555][ T31] ? __pfx_watchdog+0x10/0x10 [ 1053.797237][ T31] ? __pfx_kthread+0x10/0x10 [ 1053.801838][ T31] ret_from_fork+0x514/0xb70 [ 1053.806454][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1053.812005][ T31] ? __switch_to+0xc89/0x1420 [ 1053.816695][ T31] ? __pfx_kthread+0x10/0x10 [ 1053.821288][ T31] ret_from_fork_asm+0x1a/0x30 [ 1053.826076][ T31] [ 1053.829241][ T31] Kernel Offset: disabled [ 1053.833578][ T31] Rebooting in 86400 seconds..