last executing test programs: 3.483593056s ago: executing program 3 (id=2345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000580)={0x11, 0x0, {0x9, @struct={0x1, 0x7fffffff}, 0x0, 0x1f17, 0x9, 0xffffffffffffb78d, 0x4, 0x100, 0x0, @usage=0x7, 0xb9e, 0x5, [0xfffffffffffffffb, 0x8, 0xb16, 0x40, 0x7]}, {0x0, @struct={0x3f3f, 0x2}, 0x0, 0x8, 0x40, 0xfffffffffffffffe, 0xfc, 0x4, 0x1b, @usage, 0xc, 0x6, [0x0, 0xfffffffffffffffa, 0x81, 0x0, 0x5, 0x800]}, {0x1ff, @struct={0x7}, 0x0, 0x7, 0xacb, 0xfffffffffffffffe, 0xfffffffffffffff8, 0xf7c, 0x214, @usage=0x2, 0x3ff, 0x800, [0x4, 0x7fff, 0x1, 0x5, 0x0, 0x7f]}, {0x40, 0x401, 0x7}}) ioctl$BTRFS_IOC_DEV_REPLACE(r13, 0xca289435, &(0x7f0000001300)={0x3, 0xffffffffffffffff, @start={r14, 0x0, "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", "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"}, [0xf2, 0x5, 0xc2, 0x3, 0x62a, 0x1, 0x6, 0x2, 0x2, 0x0, 0xeee, 0x6, 0x9, 0x9, 0x1c8, 0x6, 0xd0, 0x5, 0xe0, 0x8, 0x2, 0x7, 0x7, 0x3, 0x9, 0x5a86, 0x8000000000000001, 0x6, 0x7, 0x7, 0x1, 0x3, 0x5, 0x9, 0xfe, 0x1, 0x6, 0x3bdf82ec, 0x80000001, 0x0, 0x5, 0x2, 0xd88, 0x0, 0x2, 0x3e66, 0x5, 0x9, 0x8001, 0xaeaa44c, 0x5, 0xe4, 0x81, 0x26, 0x7, 0x7fffffffffffffff, 0x800, 0xfffffffffffffffa, 0x10001, 0x3ff, 0x9b68, 0x3, 0x9, 0xc39]}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xd58}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0xffff}, {}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x2f, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x40054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x3a, 0x1, [{}]}}) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000804) 3.205159157s ago: executing program 3 (id=2349): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x1800) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) r4 = socket(0x10, 0x3, 0x0) connect$qrtr(r4, &(0x7f0000000100)={0x2a, 0x0, 0xfffffffe}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) 2.736642641s ago: executing program 0 (id=2357): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x7b8e, 0x4) unshare(0x20000400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x15, 0x0, &(0x7f0000000180)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x2c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x401}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @broadcast}}, [0x9, 0x5, 0xe64, 0x9, 0x5, 0x8001, 0x11, 0x2, 0x21c, 0x7, 0x7ff, 0x6, 0x0, 0x7, 0x1ad3]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r9}, &(0x7f0000000100)=0x8) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x3, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) getpeername$tipc(r10, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 2.733407429s ago: executing program 1 (id=2358): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c00000020060101000000002c000e000003797a31000000000500010007000000440007000000000000000040fe8000000000000000000000000000aa180014801400024020010000000000000000000000000000060004404e1f000005000700290000a44422e4182223fdaf3e6eb8158387625b6fe8c5f4bbcc010b1e8e03d1e9a0bf7e2b8b9f00cb0000a168388dd4"], 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0x40000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) write$ppp(r2, &(0x7f0000000300)="677607dad7a385d1065a8048b3226f7e145cd68592280cc9c20a5b5d", 0x1c) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4], 0x4c}}, 0x0) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) socket(0xa, 0x3, 0xff) (async) socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r7, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x20008000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket(0x28, 0x5, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r11], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.277351362s ago: executing program 4 (id=2360): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) sendto$packet(r2, &(0x7f0000000200)="00ffffff", 0x4, 0x8000, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x3, 0x6, @broadcast}, 0x14) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000025c0)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001700)='\\', 0x1}], 0x1}}, {{&(0x7f0000001ac0)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000002100)=[{&(0x7f0000001b00)=')', 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r4, 0x1) (async) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000380)="1a00000002800000", 0x8) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000100)}, 0x10) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x8000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xdf, &(0x7f0000000000)=""/223, 0x0, 0x43}, 0x94) (async) socket$netlink(0x10, 0x3, 0x1) 2.078863627s ago: executing program 4 (id=2362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r3, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002340)={'team0\x00', &(0x7f00000022c0)=@ethtool_link_settings={0x4c, 0xe76e, 0xc, 0x80, 0x0, 0x9, 0x53, 0x4, 0x1, 0x4, [0x218, 0x10000, 0x2, 0x8d3c, 0x1, 0x9, 0x1, 0x486]}}) sendmmsg$sock(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="f5af25bd7010000000000efcffff070003"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41040000015001001800128008000100677470000c00028008000100", @ANYRES32=r1, @ANYBLOB="07ff0a00", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0) 2.017082217s ago: executing program 3 (id=2363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, &(0x7f0000000100)) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x90, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb73e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008080}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x7, 0x48c1, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x7fffe, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0xe, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x808, 0x205, 0x1, 0xc}, 0x8, 0xffffffff, 0x5, 0x0, 0x9, 0x8, 0x49, 0xd, 0x1, 0x1, {0x7, 0x3, 0x1000, 0x101, 0xfffffffe, 0x401}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.948674739s ago: executing program 1 (id=2364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x2800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x77a, 0x61526514, 0x0, 0x4, 0x1, 0x2a, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r10, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r11, r9, 0x0, r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000001850000008600000085100000f9ffffff186700000b000000000000000000000018250000", @ANYRES32, @ANYBLOB="0000000001000080bc491000f0ffffff9500000000000000185a00000200000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000009000010c000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0xba, &(0x7f00000004c0)=""/186, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000600)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7, r8], &(0x7f00000009c0)=[{0x2, 0x4, 0x6, 0x1}, {0x5, 0x2, 0x7, 0x9}, {0x4, 0x3, 0xa, 0xc}, {0x1, 0x3, 0x4, 0x3}, {0x2, 0x1, 0x5, 0x9}, {0x4, 0x2, 0xe, 0x1}, {0x3, 0x5, 0xf, 0x7}], 0x10, 0x9}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r4], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001000030428bd70020000000000100000", @ANYRES32=0x0, @ANYBLOB="00000000010000008800128009000100766c616e0000000078000280640004800c000100008000007f0000000c000100f5000000020000000c00010001040000030000000c00010000000000800000000c000100b1a4ffff010000000c0001001ef0ffff070000000c00010006090000000000000c000100001000000700000006000100fc0f00000600050088a8000008000500", @ANYRES32=r13], 0xb8}}, 0x40488c4) 1.769325709s ago: executing program 2 (id=2366): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000480), &(0x7f00000014c0)=0x8) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000ff0700000000000031000000000900010073797a310000000014000380100000800c00018006000100ffd70000"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000010027bd70000009000002000000000000070000000014000200fe800000000000000000000000000101080018004e234e23"], 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) 1.532574828s ago: executing program 2 (id=2367): unshare(0xc000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0xa, 0x8, 0x100, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f00000001c0)) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000340)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x6, 0xffffffffffffffff}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0x18, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0xe}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @empty, 0xfffb}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x17, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x30}, 0x25, r6}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x61]}}, &(0x7f0000000f40)=""/4089, 0x2f, 0xff9, 0x1}, 0x28) 1.511813869s ago: executing program 3 (id=2368): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x100a, &(0x7f0000001e40)=""/4106, 0x0, 0xc}, 0x94) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000008000200095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.4198572s ago: executing program 0 (id=2369): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x5, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @remote}]}}]}, 0x58}}, 0x24044000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b"], 0x250}}, 0x2000c000) accept$ax25(r1, &(0x7f0000000080)={{0x3, @rose}, [@netrom, @remote, @bcast, @remote, @netrom, @bcast, @bcast, @bcast]}, &(0x7f0000000000)=0x48) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xbfffffff, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {0xa, 0xe}, {0xa, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) (async, rerun: 32) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r11, 0x891b, 0x0) (async) ioctl$TUNSETOWNER(r7, 0x400454cc, r10) 1.21263482s ago: executing program 2 (id=2370): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000080)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmmsg(r6, &(0x7f0000005b00)=[{{&(0x7f0000000200)=@nfc={0x27, r8, 0x1, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1}}, {{&(0x7f0000000580)=@llc={0x1a, 0x1, 0x40, 0x9, 0x6, 0x5, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x200}}, {{&(0x7f0000001c80)=@l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x101, 0x1}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001d00)="88b0eb63268c434bdef80b4c680c5ae84d013238faf2d7fbded2fc85796a1aed7bccaa7b93a68d5c8e38", 0x2a}], 0x1}}, {{&(0x7f0000001e00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x30, 0x0, {0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x9}}}, 0x80, &(0x7f0000002200)}}, {{&(0x7f0000002280)=@isdn={0x22, 0x6, 0x1, 0x23, 0x1}, 0x80, &(0x7f0000003900)=[{&(0x7f0000002300)="90833cbb37d4d29704718a0c7230e4ca902e60a2ba8596c6e02b4c13ad0000abc5801e8e1872dc7538f48e3cc05dfda3bdff8f189811bbaa10806f98fe90d07595be5db026286ab094f85b39d7d2883bc3ef59bfa22a95148bebdd896b42c8982465334718141e093b839bc0feb03ceb687f", 0x72}, {&(0x7f0000002380)="a269a89f9fcc8ac46937f716487f7ebc60c20fb8bb5488e147c61131e385e4fdb0f4c6f485a3ee8d8152105008fd87bc7562560abb4d8aab5b5abcf207db8ea42e6e63eeb4e2c2a2dd54f11b79b0549c156a45c2b61d14bb90379e7ee5879189a75e3f0d3e50562840dfa8e51e253420fefbfb9fe8ca7a27987782a1c1c07a98c48e4f10eb5b5f8bc8f74794fc33286614c6e32f3d", 0x95}, {&(0x7f0000002480)="d5cb44b85312669995e96f02c5bc0a763d3eca6329ca7f58aa35aa2e7444bfe99e811facde9a9730bd67ebc08f29c24ccf4d7e87c46ed31885ddfdf24ef2e9e491a80f62f8e6748160f15cfc17727f07a241a593432131fac8f8e352cc383601a5d535e35fbdb91b6861da08d33828b3c808bdbd1376d0e0aa18c02ae3e45dedf3bf6ae12cff870aa90c0d5e213ad8d07fd850ef10cebe5a1e0f6d8fd03774d8d6dcc85da73fee0bb7304166dee5a7c9e2e37cbe95dd11de083fea751a85f7ea", 0xc0}, {&(0x7f0000002580)="81b43bd28bb5e7f12afeaba30dde33eff76f5de0ad990e4f2a699012b206148d42716bc0d161299704c22013e95134a0d9c03d73ff84a3c09d78fdfab829ea0b7a9258cf7f01ef365e08e9cdc1061e609e51efafa6353be774a4b32fb0804f99202df79e9338d33c29c2f795ce9c15dce0b08ebdd2", 0x75}, {&(0x7f0000002600)="4fe7884ea89f7b90f82f2c7071cc94", 0xf}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000003640)="e3e8b66073d5641269c9346d71d05fbf2b35fc0b1c94dd07cfc664db49b6679a194198519d44ccd130ec785b641b8a4d8c28d70f7bc693dda3a69cde755c81153bde33d44140c47e9cf19429f5e8b80215dc38aa89306ab9ecd5c4a3b09b3a42687a337034e5960c028ddf3c70fdc49de7147e70e9327967659ece4521cf027492ad61791cd769c9311729af92cb4efca263b092cb3c3c711b7f2fdf201c237e24b8f89e3f601d2c276e2d0912896ac4a3bafd45eac4633ce57c150f38fb96c5d59df42a4027c467be33c8559aaa6189023ffba3ff4a507f7482c2af238298e6335a4c48da746132594defc3e8", 0xed}, {&(0x7f0000003740)="b9781e18c3b3b78ef6d9bd2177b96ec5f4562093bd8a9fb43df557bd08f46e326c401fb5e23097f9cde4995efaa53ee604f43fb687dd27b2189d98a72e6e4e6ea3fd25deb08a93ad1b7ca1cf0f909d2b6e9e170db86b156f72e40cb000b4a9a5c5aa82b5ea17a7b39d6a0c4f22ad166f260763488da1d95148ba6595ad0897470fce935d70d514d82d31584a955f27b1f802387a756fab3cd4abfd4739c4096f44346924343203e378c743c2b52dc7290bf7a375a41332ab9428eb60a2aa5e8647985c48db200ae517931638c3ce6f07b66427761bc8a4fa3958b6", 0xdb}, {&(0x7f0000003840)="00044fee65f99cfe798f4c79a95144d00ce412bb093c6b91a19db1a6d30ffef6cf0da8cd91acfe85e16b2961c7fcbb7882c85270c58ea63bfdd15618a1f313b3019076ac99a8350a7de8cc08e12d4f971bb5f87695293b11108dd877cbd4cb0a0d0262564a2893bae3819794b2084b4d2fe418d647099ff11321a28c8d7b0bf68b4f29117dd1d87d20816d41a5221380dd6ba9a8", 0x94}], 0x9, &(0x7f0000005d40)=ANY=[@ANYBLOB="b80000000000000001000000080000003da645c5a58dbc661facb4d9d011b440094c4ee2718973a4bad9454e7808ab65f8b19fd40df138ab6e30dd0544a22da60fcc000059cc9bfcddedc6017b08903d712d0c73f7d08736876c561c35d510a8952f0999079dd8959ee7bca27421afb42f9a79010445b77b5b24429797ba01d03d756b6e95d8bd1a9c0e7032a1ef83302a113a2937457d1a0c625461d054e9bb324a8d49a6bb36807831fffebb27fba0470000000000000030492ce191e9aa193b18f294bb42"], 0xb8}}, {{&(0x7f0000003a80)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x168a, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, 0x80, &(0x7f0000003b00), 0x0, &(0x7f0000003b40)=[{0xa0, 0x29, 0xfffffbff, "ead39b09d7cf9855cc9ec6a8e581530ecdac31ed272348f6f6162fd2235e687135e5d99b5d041dc146b054c41d9b8346aead87d0ba35eac1c266759d4d034b1b52f0ddca1f5578be33ef2189284d609eefd02df3c20dab4e0ae05d13e6c1dd56e4698c30cf7f6115d9e7ee79a49424fc9494d97965424a5a3dcb4265e75d39645954af4a7f54d104b5974f"}, {0x20, 0x112, 0xffff, "124045c7fbe5428530393b0d5f1403e9"}, {0xe8, 0x10b, 0x1, "cba43b1029cd4070084c8a1318b9884770b2602d84e5006d57a9aa6d44a79197edcbe8310ba8c93ef169869341808e3098174c4175e4cb5ad1e8d88f7751a7fe820e1d38f28f30158ec124bd52a1eee0bb9c659222052e8c2b769db30e87a64b1ed12a405ee473dac4793c9af402e15f327e9dcfe29e2b20acbaef67499e857cf451567bb3eb81c16451f5124f1b79b794d31c8c34e95520581ee597fd239e3d0dae382cc0c7d3e135aacadaed19fbc7b942ec1e291fe25e7d9553038378f8e9699b782879c36f963a8f4745aca5b4c47bb70c880f00cb88"}, {0x10, 0x108, 0x9ad7}], 0x1b8}}, {{&(0x7f0000003f00)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x80, &(0x7f0000004280), 0x0, &(0x7f0000004300)=[{0x10, 0x1c, 0x80000001}], 0x10}}, {{&(0x7f0000004400)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, &(0x7f0000004580)=[{&(0x7f0000004480)}], 0x1, &(0x7f00000045c0)=ANY=[@ANYBLOB="b8000000000000001201000003000000760fca3ab76e6ed464f3f19dd557cd89bf38aeb9db8fae42010ed6823a32fb96d5a4c124dd5426d62b07c07ea1615a9ffbea16f38450e0e20ae5439724d8ff887a0df3566d10e7c7bd6b846a3b1403927db8191250678e97b098bf1a40c5d39f76a4a81acb7bf5b431a98addcddc8190f299d85a108f0c05b433d0a8acba8d24b2e88da0b1368278310513b4fa6ffa0ccd386c43c6eeb9cfa60f831a40d0dedf4806b84eb6980000b8000000000000003a0000000100000031856e457bf324bd1c05e2b585843f35564c07769c1656fb2b0f8d8542bf3c30c6c4f234bcba222733c30373a0edbfbfc2c3d270952833eaa5f61ee0f9af144a9172828d9403c466b7152fb7b0ac53cb70f2c4e4d8a611f07585c08bfd84349ea8cfe90ce563775889facbd895386ec3f36052c758c723848073c34fbfa0e9ad974b7d8201e6846b066686e912d7b8b6ea07fee2f3deded2c2425cb996a9849796c4328a4bb7000020000000000000000b01000064f50000123673aa6a1bc8783d633e1f93847a642000000000000000120100000f000000e1a4928df2629f1d6998213963000000d800000000000000170100000000000081c1ffb0588d605708b00d4518a965bdbb5f464a1536c83bcb1dd0c603b2795e5e89c49617101c54345f1d55c44abbfd6c342f4fa966964f13c1fc40b1566f7214f06844fa2fa7cfc7d4ba238a6b0740451dbfcda09a87bccd7dac8384e7230a2784d71dae9dbf2b538d9f98f28c12b6a850cc42fe0cb9514564f08118c84e20753bc366f9933dd115dc89697ebec299c0d4a3776f0cd040878945b19586a5585a4e93dd75ee90a40ea644418017fccfaeaa30e092edf961478b94cd4e20b74c75f50f1e594b0000f0000000000000003a000000090000006eca18512ed630a2b6f239c50d837472d9ccf27df9c0a2a929f650c216fb8164c394f889eae8c44c954c62ecd61fa1955add299b7f1f2e57ef462da1e548bbbb4f6159bd159342a35a8b0c4d7589762c50fce3256573e4671f524ec1683fa960897ce5498173c00e77581d821f681d01e29ebe75db8027b219f82724abaffce07af17ba8af111f89a3966158f651d4b093743edbb483083d3f035e3561cdd155a9733cda2890a1d6f2f9eabadaa0cb3c0ca7cab2ddcdd0ed6968e5a8807fcbda683b85b713d1831ea21b1ec7d9af3c0380842d8dbb71fb41502f6815c5000000d8000000000000000100000000000080b783a7c59e3597a9f99a1d69eda2c52b92de136403505f250c8bbe8fef8d93c0efd35ed4a5cc44719d846946672c0b57ede42aa7b05123329c3162cc275e1c57f78adb876cb2ae8e5a71b3e922c1dfc3534bcd2b581c1b94bed66455288ba6f14d1505a344dc98f3f8bee295c39e308524cb1e49acea4e7ada5c83ed80dbceac9689d3"], 0x450}}], 0x8, 0x20001000) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x8800) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2507e1ffff130002001fe80000000000000000000000000001140003"], 0x44}, 0x1, 0x0, 0x0, 0xc0d4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000) 1.206085605s ago: executing program 1 (id=2371): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @dev}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_RT_PRIORITY={0x8}]}, 0x48}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) (async) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x2e08d, 0x418c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8006000) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x8) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="016a743534dcd1df1600050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async, rerun: 32) socket(0x22, 0x5, 0x80000001) (rerun: 32) 1.17675222s ago: executing program 3 (id=2372): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48084}, 0x880) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket(0x15, 0x5, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r7, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e0000001080002"], 0xa8}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x229aafd3}, @NFTA_HOOK_DEV={0x14, 0x3, 'caif0\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x14c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x95, 0x0, 0xfffffffe}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0xa1b92000) socket$rds(0x15, 0x5, 0x0) 1.101260804s ago: executing program 4 (id=2373): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @private=0x2}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x18}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'dummy0\x00', @multicast}) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r2, 0x3000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x100, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xd}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000004}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4845}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) r5 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000500)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="f5a7933a00"/17, 0x11}, {&(0x7f0000000000)="ee53abe2", 0x4}], 0x2, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400df0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff0800074000000001040006"], 0x98}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000140), 0x4) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000000001130500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc00000000000000000000000000000108000740000000002c00068014000500fe8000000000000000000000000000311400040020010000000000000000000000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x40095}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x6, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x40000) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 1.09072167s ago: executing program 0 (id=2374): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0x1}, {0xb, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0x0, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0x1}, {0xb, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0x0, 0x4) (async) 954.201489ms ago: executing program 2 (id=2375): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) write$cgroup_int(r0, &(0x7f0000000100)=0xe9, 0x12) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x3, 0x4) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000001c0)={0x4, 0x1, {0x2, @usage=0xfffffffffffffff0, 0x0, 0x4, 0x4, 0x8, 0x10001, 0x99, 0x40, @struct={0x7, 0xb7}, 0x0, 0x1f4b, [0x210e, 0x3, 0x5, 0x4000, 0x3, 0x8000]}, {0x0, @struct={0xffff, 0xd}, 0x0, 0x7, 0x4, 0x81, 0x1, 0x3, 0x491, @struct={0x6, 0x4}, 0x3, 0x1, [0x80000001, 0x10, 0xffffffffffffffff, 0x2, 0x80000001, 0x100000000]}, {0x10000, @struct={0xd45, 0x98}, 0x0, 0x0, 0x81, 0x2f31, 0x4, 0x0, 0x404, @usage=0xe, 0x6, 0x1, [0x10001, 0x6a, 0x80000000, 0x0, 0x2843, 0x4]}, {0x0, 0xd5d, 0x8000}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000005c0)={r2, 0x0, 0x8, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000a00)={0x6, 'ipvlan0\x00', {0xccb}, 0x6f17}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {0xe409e25493a00ab6, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r5, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040004}, 0x84) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000dc0), r4) sendmsg$NFC_CMD_LLC_SDREQ(r4, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x50, r8, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x34, 0x13, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [{0xd, 0x1, '\x88$][+.-*)'}, {0xc, 0x1, '+.[[&\'\\,'}]}, {0x10, 0x0, 0x0, 0x1, [{0xb, 0x1, ']#&@#-.'}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x2000c000) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x50, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x50}, 0x1, 0x0, 0x0, 0x80080}, 0x4008011) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, r9, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000001180)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001200), r4) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000001400)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001240)={0x154, r10, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x34, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xb}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x10001}]}, @NL802154_ATTR_SEC_DEVICE={0x54, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x10}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}]}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}]}, 0x154}, 0x1, 0x0, 0x0, 0x24008000}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000001440)={"da123ed996bdff438620dda53f0a4fd6", 0x0, 0x0, {0xe5, 0x10000}, {0x7, 0x9}, 0x0, [0x9, 0x7fff, 0x5, 0x4, 0xffffffffffffffa6, 0x6, 0x4, 0x6, 0x9, 0x1, 0x4, 0x3ff, 0x2, 0x3ff, 0x8, 0x778c78c9]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001600)={{r0}, r11, 0x6, @inherit={0x90, &(0x7f0000001540)={0x0, 0x9, 0x2, 0x19c, {0x20, 0x7, 0x1, 0x0, 0xf99}, [0xffffffffffffffa9, 0x135b, 0x7, 0x1, 0xc3c, 0x40, 0x7f, 0x1000, 0xb3]}}, @devid=r2}) unshare(0x400) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) 950.880052ms ago: executing program 0 (id=2376): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000ffff00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000c08404001c00000018150000", @ANYRES32, @ANYBLOB="0000000000000000186a00000a0000000000000090de000018110000", @ANYRES32=0x1, @ANYBLOB="000000dfffffff00b7020000000000008500000086000000"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x67, &(0x7f0000000280)=""/103, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x2, 0x8001, 0x1}, 0x10, 0x2d521, 0xffffffffffffffff, 0x3, &(0x7f0000000400)=[0x1, 0x1, 0x1], &(0x7f0000000440)=[{0x1, 0x4, 0x2, 0xb}, {0x2, 0x4, 0x3, 0x2}, {0x2, 0x4, 0x3}], 0x10, 0x6}, 0x94) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r1, r2, 0x2b, 0x0, @void}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0x3b6, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x3b6, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000180)={0x24, @none={0x0, 0x1}}, 0x14) (async) connect$802154_dgram(r4, &(0x7f0000000180)={0x24, @none={0x0, 0x1}}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x7, 0x30}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x7, 0x30}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000003100000058007a801c000200579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a1c00020024cf4713299967bd15bf44cad1f4d266b29e2a4135a483c64cd3a84071cea6782c4612b21c0002007282cdb224050171ea757aea781d4160e9223cc0312d38d668007a801c0002005f3b5d542091777612684837dbc0ec47ea67acb692453dd20c0003005bd58c80a1143827140002009811fc13fbf66d28b02a7f7bff7ddc3414000100204183f74d05c885801d03a2488d3fd41400020032c5877eef25cfd5a4dd14ad077490051c007a800c000300b27375"], 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendto$inet(r7, 0x0, 0x0, 0x8004, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000180)="d70582685ec92928", 0x8, 0x800, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000340)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6077fd480051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281", 0x58}, {0x0}], 0x2, 0x0, 0x0, 0x4004844}], 0x1, 0x48840) 893.330503ms ago: executing program 1 (id=2377): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x4c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f0000000100013070000000000000000ffffffff000000000000000000000000ff010000000000000000000000000001000000000000000f0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000ff01000000000077c6e6ff000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001000000000000000000"], 0xf0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2c8, 0x130, 0x0, 0x148, 0x130, 0x148, 0x230, 0x240, 0x240, 0x230, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'gre0\x00', 'wlan1\x00', {0xff}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@multiport={{0x50}, {0x0, 0xf, [0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e22, 0x4e21, 0x4e23, 0x4e24, 0x4e20, 0x4e20, 0x4e22, 0x4e21, 0x4e22, 0x4e24, 0x4e22], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x5, 0x5, 0x8, 'netbios-ns\x00', {0x400}}}}, {{@ip={@private=0xa010102, @private=0xa010101, 0x100fffffe, 0x0, 'netdevsim0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x40, 0x3, 0x11}, 0x0, 0xc8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@addrtype={{0x30}, {0x80, 0x140}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x5, 0x5}, {0x0, 0x4, 0x7}, {0x5, 0x5, 0x1}, 0x0, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r9) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x102}, 0x20005090) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="360300000000000036702fc7b6088bbc00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000007000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b5090800000000007baaf0ff00000000be9800000000000004080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000046003e243da23c2eb13c00000000000076080000000000008500000085000000b700000000000000950000539f5fb471"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x22021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @multicast}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 770.889721ms ago: executing program 2 (id=2378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xac1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000940)=[{&(0x7f0000000040)="1333", 0x2}, {&(0x7f00000007c0)="90", 0x1}, {&(0x7f00000000c0)="008e777f9d", 0xfffffef0}], 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x216073cd09ebf819}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x15, 0x2e, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000400)='GPL\x00', 0x6, 0x14, &(0x7f00000004c0)=""/20, 0x0, 0x40, '\x00', r7, @sk_reuseport=0x27, r8, 0x8, &(0x7f00000008c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0xf, 0x800, 0x3143}, 0x10, 0x0, r4, 0x8, 0x0, &(0x7f0000000c80)=[{0x0, 0x2, 0xd, 0x5}, {0x4, 0x2, 0xf, 0x2}, {0x2, 0x4, 0x6, 0x7}, {0x0, 0x5, 0x9, 0xc}, {0x4, 0x4, 0x8, 0x9}, {0x3, 0x1, 0x4}, {0x5, 0x5ef5471a, 0x5, 0x6}, {0x3, 0x1, 0x1, 0x9}], 0x10, 0x800}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00', 0x19, 0x4, 0x750, [0x200000000dc0, 0x0, 0x0, 0x20000000111c, 0x2000000014e0], 0x0, &(0x7f0000000980), &(0x7f0000000dc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x29, 0x805, 'dvmrp1\x00', 'vcan0\x00', 'tunl0\x00', 'veth0_virt_wifi\x00', @remote, [0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x11e, 0x11e, 0x156, [@realm={{'realm\x00', 0x0, 0x10}, {{0x100, 0x8bfb}}}, @ip6={{'ip6\x00', 0x0, 0x50}, {{@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffff00, 0xff], 0x89, 0x4, 0x2, 0x30, 0x4e24, 0x4e22, 0x4e22, 0x4e23}}}], [], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffe}}}}, {0x0, 0x1, 0x8863, '\x00', 'erspan0\x00', 'batadv_slave_0\x00', 'geneve1\x00', @local, [0xff, 0x0, 0xff], @random="290dbd6d8aba", [0xff, 0x0, 0x0, 0xff], 0xa6, 0xa6, 0x1d6, [@mac={{'mac\x00', 0x0, 0x10}, {{@remote}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x5, 'system_u:object_r:restorecond_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x9, 0x0, 0x1922, 'veth0_vlan\x00', 'vlan0\x00', 'geneve1\x00', 'macvlan0\x00', @link_local, [0xff, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0x0, 0xff], 0x1c6, 0x22e, 0x266, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x2, 0x2}}}, @comment={{'comment\x00', 0x0, 0x100}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}, @snat={'snat\x00', 0x10, {{@link_local, 0x10}}}], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}}, {0x5, 0x0, 0x5d793d9a050023b3, 'ip_vti0\x00', 'nicvf0\x00', 'pim6reg0\x00', 'gre0\x00', @local, [0xff, 0x0, 0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff], 0xf6, 0xf6, 0x12e, [@time={{'time\x00', 0x0, 0x18}, {{0xfffffff0, 0x3, 0xba83, 0x32f1, 0x7fff, 0x6, 0x2}}}, @ip={{'ip\x00', 0x0, 0x20}, {{@multicast2, @private=0xa010102, 0x0, 0xffffffff, 0x2, 0x11, 0x8, 0x0, 0x4e22, 0x4e20, 0x4e23, 0x4e22}}}], [], @snat={'snat\x00', 0x10, {{@random="9253098d9d5e", 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}]}, 0x7c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x15, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r3}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x7b, &(0x7f0000000240)=""/123, 0x41000, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0x6, 0xb, 0x401}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[r6], &(0x7f0000000300)=[{0x5, 0x3, 0x8, 0xc}, {0x4, 0x3, 0xe, 0x7}, {0x4, 0x1, 0x6, 0x4}], 0x10, 0x3ff}, 0x94) 679.107285ms ago: executing program 4 (id=2379): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x400000000000007) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42486, 0x2021}, [@IFLA_NET_NS_FD={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 531.84041ms ago: executing program 1 (id=2380): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008afb66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0d748713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d954b70000000000008d1f606b381e4903b500000000000000000000004a2357ba5f6000de1cfa88b7165dcf4f2aaee86d4802000000000000008fdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c82bb6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f50b1e9b5d841ea55fe569bb7bf1e78191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce07300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca041bac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b39669500000000000000fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c8d0486cc6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bcb2c14521b8f326138a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a1459134d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa892c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8fa945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20b11884b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc000000000044a212ca6e96e5a5bcbb6eed37760c5f351131134963bd2f90a8e6f3b859b8e37fb346b72b8d7d03ed0fae55c5b2620c1d9a211b3de0f4c4c2f7e7935784a7d01c7978e2a74c9fee6ba00d61f3af18ad2b426a5d376416f45531e94d6554a7417cb721c2bfd383e3"], &(0x7f0000000040)='GPL\x00', 0x4, 0x5f9, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) unshare(0x22020400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f0000000080)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x200008c0}, 0x6008045) 457.254001ms ago: executing program 2 (id=2381): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601080000000000001900000000000500010006"], 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003840), 0x0, 0x20, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0x2, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x11}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x8810) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = gettid() r9 = gettid() r10 = getgid() sendmsg$netlink(r7, &(0x7f0000000580)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000b40)={0x594, 0x3e, 0x400, 0x70bd29, 0x25dfdbfd, "", [@nested={0x157, 0x9d, 0x0, 0x1, [@generic="3d96a588c5c4ad7d691272764610240af69c94527281", @typed={0x8, 0xd5, 0x0, 0x0, @pid=r8}, @generic="61644325f25f07e7ed79e6fdd3c8a3d806ded9d14df0eef48a922be248594ef823824e2e0bbbf845d4438edef964e4871ed7006fb0644c2aa036399a37a78d1a4ee1836be06aea718b095ce3b2ebca048099ed848471be3826062ee9bfdecea0b731563e63cab0479da6474651f02f", @generic="0af603a923224680f6eb18e7da0f41cd23d86a187247c278bd7325a99fab5056a1b3ab4489350a5d0b92434ad1063be40959a2c4bbe22f4aa215c5a41c981e0a00c3040db3fe4f4e68e0fa602d98a14fe5ef11ea00ca1f8b8a1209ec324637b9810d84169afc5d536de53d96e0d2921d8b4665bf8dab7e067ece5ef1639025b766ea39c85367767549d5a46a3ca8237b338a445e55d9c8e4de6feb98b22c3f31421dd14eec7fa423be0b4ed99ff0c732238b072856996fad0151c98b7a9af68a3a05", @nested={0x4, 0x6d}]}, @generic="7dcc08c615e2567115131dfcc475de4a773f35351c32faf266179a814675db1103adb1b4d4c66303ebaccb26d8c04958ef7061d0c2f3f9aead8713bce285d99e7995f5cfc8238185bf9629981123cad16059197de71fb5f6f12be1239e0e88ce5f579c3877dc0a9a3556d451046a2917f03a2793281d0c9a3760073d6fda744c300f6bfd6ac5a22d30dab827e59de324f46ce592fad5014e1e44b5010d02d829a93d36bef4b6aa46d769f02e52a0585d7261641923ba0177fda4863d058159dd4d69396d9b3ff8167301c31529d90b022cb796a33845bee0490fcbd1f93f6ce04764", @generic="3046d449e57e28b68ce0a1f51a9bcce07fd20c486520cc0c776076c677ed95bed62a05dd192f784e4caa854f2dd85fa1f82df8f979837f61089bd1a97f2622ae032fcebb0aefa15f1f462801f2a23b47ffa9ab5c3aa4efa827ef5413e8b5361351d1f313920e3293e2f48902c5c0960602bdb82d4cb07879948eab3c4acaa587440268e2bc3062bc8b930d401e8fc23ea6c5ca7904f78b825aa98ce1a181c43a6f645e8b664a6a007ad177f55431b1", @generic="bb150beafaf408764d3d67b4a80ab74827f7beef0557afb5846d3373401c0048ee90a8702b135cf9fa212e449463c6d0c71b193ca54805455deb016788bb041ff376a19a65650fc81dec2c81b52fc358c7cc7b56038b7b4df1f6e2613ca11c15846b29b8114641d3466082c51ad35f4e30fdabf645847361993f1adf640b07abce6f19c253f482d7efe4a406a04480671891aca6c2b1a3256d1f96fecb466c0e7ea75bfab7d482ab4d51578c11e9495172", @generic="9a79e32cf54fc2e7da6fb98d828531e4a662b2c572560b8bd5785c73d3cc4b4975ee58df06ea7180e6d78137687f7d3d76d7989c97baf2d36389a1a9b177442acf4cccb398fc437144b7331e12e59f232cefd9184a0cea24fad4fee670513fa3fb1dbfd9d6a656e59bc7c0ae3a53d9e28d14df7e15db0a6bea1c279a7e4465f974963c74ea3549c26cb1706108272357ab7fbc51756d56fed24d5e3250ce2fc87f024834bd8ad2be7c8b3111770c817c640663a5f72e2da156f24c63ecee5c580bb19e9e45a7c59ce9d4d5d64bd484e9fbc7de51", @typed={0x8, 0x93, 0x0, 0x0, @u32=0x7}, @nested={0x10b, 0x139, 0x0, 0x1, [@nested={0x4, 0x122}, @nested={0x4, 0xb5}, @typed={0x6, 0x146, 0x0, 0x0, @str=':\x00'}, @nested={0x4, 0xf}, @generic="f30c3815a02e6a2dcda6556d4d4fcbab7d8a29888511932fe9074ff2736f1e9d961ec09e895d2d1a63324d05eb1b33d3f63c", @typed={0x4, 0x97}, @generic="1b0fcc802afc92b714bd02b71d90ab6a162171fc6cdfc92991f6833c9f19a7edbf336bcdaa90e2f213823bf17ccf3fc9568bb70dfcdc16ceec6e718d5725513346ca9f077c33ff19475bb829bd87789671243e7ac934d4580936fb87d413bbe8122ba1", @generic="3b3bf4945e886c67ab99c074eb5affafa59cf165112932010c3c3cb06b00437ec3f694c06a9893fbf51c712f283178023fca2d2d7e60081a4f0e7a4f343a86ca1011ad821c37caf216fa84222d07f8ccdfec5346cf9d", @nested={0x4, 0x21}]}]}, 0x594}], 0x1, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r9, 0xee00, r10}}}], 0x20, 0x4008}, 0x805) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000340)="a80e34f91437b53fa7b107cf574c39946958ad0b3d4882d8c699fdfcc430fb28b48c929e7d303e9b4031ee9adc7a1a6f6b86", 0x32}, {&(0x7f00000004c0)="7c614f3dc80ada4189e20eabe218889bb492d1c31d968c8ae5f0b97f598ed21ea8dc95ce0936580b7011adc414bcbca9ee5282a992ae3d4ea1b014c5c389e99bdc30b2a643ee", 0x46}, {&(0x7f00000005c0)="14b6d6afa9e3666cbf463da7f08a2dd32efcff09db27e968905ca24abf16dccea22bc1d72fcb6406a622761095c64566ca7c3862b24b349d3acda29803e6b6b10ee6e7439792139ad310c9480332d766de50ea1dd11f69a743e1d4ff1a8201d3b94f7edc7fa2c7860f179fade10f3e82fd8ea7610dbb8d41a1eaf7e992c86f9fdcdeb3d42bb2f5309ff737651bd141db3c09a6182cd18f32f854c805df223389993f7f848b80017969", 0xa9}, {&(0x7f0000000680)="1382924d572dcda85e48ae62945aab0cb219976e322f2c6d3e1c44f2e77771aec476ba0bb374052e1fb8a143a151042feb411d6dd7043cbb4b0aa15d72322186173235223ffe1c36a213e2fa22994c499a2a714dbbf8707dec46711372a1d7e5beb7d991011decd1367ef72254d271df15aee0690e22915e", 0x78}, {&(0x7f0000000700)="940251d08ea4bfc6816b9490d20162cc7042e3d2e111d945095d5f3da2fb46472ab9abfdcaca7be9f57c3c1366a4a0ad63a94e60fd838afce8788bd207559b1180a1c7040106134ee1c00d954d79a7f83af9a825eb4f44bc9cea2c12076aab71573dbea59fb84176a55fc3f7a6e5a8019827e916bb42f56e39623456143e1ff0d09e0a4ade74f686e82f1d1b403a38", 0x8f}, {&(0x7f00000007c0)="d9d2c206fcc1b6580491564293b183b94e8146aeaba008d5b78f33e5e492b3a43bfe13069963d13d5b82392833ef578249020cfe428d5701405ceac68853243539cb1e82db62304af38aaed42044219662cb3ae477a58cbd267e6f3133c3d263b069e1bf0041bc9fac00055ad23289f318f0086ba093d1228e7c1f30b0f06b2ad15b06e6b02fd82f2fa94d8fab511ef2ec76811f5f7bf61d2322c68c962377dd60efeb6f8624feab53ebbd", 0xab}], 0x6) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x884) 457.016534ms ago: executing program 4 (id=2382): r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x0}, 0x94) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, r5, 0x331, 0x2000, 0x40080000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0x4c, 0x30, 0x2, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000010000400"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 377.676859ms ago: executing program 1 (id=2383): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x4, 0x8, @l2={'ib', 0x3a, 'ip6gre0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4088054}, 0x40080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040)=0x6de, 0x4) socket$netlink(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0) 333.45644ms ago: executing program 0 (id=2384): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x18, 0x41, 0x9, 0x70bd2a, 0x0, {0x3}, [@nested={0x4, 0x2c}]}, 0x18}}, 0x4004080) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x7, 0x10}, &(0x7f0000000140)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r2, 0x7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000071183f000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 171.457958ms ago: executing program 3 (id=2385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x60, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) splice(r6, 0x0, r7, 0x0, 0x7, 0xf) sendmsg$inet6(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)}, 0xc010) sendmsg$rds(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0) close(r5) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r4, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r3) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x54, r8, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "95dcb7cdc9aadd5a282df14767569485ac4588c028229191ee6c58faeea13256"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880140001801000108004000f8005000300000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 19.994058ms ago: executing program 0 (id=2386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000007200b5b3000000000000000007", @ANYRES32], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0xffff, 0xc4, 0x10}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x4, 0xd8, 0x65, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x1d, 0x80, 0x7, 0x0, 0x9, {[@mptcp=@remove_addr={0x1e, 0x59, 0x6, 0x0, "3bcc55e2fb4b662a463b24b28a4fafb428a89d60f9547d33690c48bf9581455479f14cea31faf5212327c508ed14d3cc9f1b20adaecc3b4c664e61295f92adc7b03928e6f24a8ee8e299effe97537d57096d808d21b4"}, @exp_fastopen={0xfe, 0x4}]}}, {"13d3b3875dfd9a3f6328f33f09ceec09986b30406704e2560f04592cb4869c77658fcb3eca004c77b183c5840dbb0fd30bcd067737d3f07dff1755aac0e628d921d141b089c15306c066b177aab800b1"}}}}, 0xe6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000007200b5b3000000000000000007", @ANYRES32], 0x18}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) (async) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0xffff, 0xc4, 0x10}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x4, 0xd8, 0x65, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x1d, 0x80, 0x7, 0x0, 0x9, {[@mptcp=@remove_addr={0x1e, 0x59, 0x6, 0x0, "3bcc55e2fb4b662a463b24b28a4fafb428a89d60f9547d33690c48bf9581455479f14cea31faf5212327c508ed14d3cc9f1b20adaecc3b4c664e61295f92adc7b03928e6f24a8ee8e299effe97537d57096d808d21b4"}, @exp_fastopen={0xfe, 0x4}]}}, {"13d3b3875dfd9a3f6328f33f09ceec09986b30406704e2560f04592cb4869c77658fcb3eca004c77b183c5840dbb0fd30bcd067737d3f07dff1755aac0e628d921d141b089c15306c066b177aab800b1"}}}}, 0xe6) (async) 0s ago: executing program 4 (id=2387): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f00000000c0)=0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20030000130000042abd7000fcdbdf2507000000", @ANYRES32, @ANYBLOB="002000000204000014000300767863616e31000000000000000000005c"], 0x320}}, 0x2040000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000a36400000000000000008500000053000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff000000009cf0ad82338bee97512e1029139cb6b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000005580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000f80)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r4, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xf225, 0x0, 0x1, 0x5, '\x00', 0x0, r3, 0x3, 0x2, 0x2000002}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000580)}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x6, 0x4010913, r9, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r9, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x10, r9, 0x2000) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$OCFS2_IOC_GROUP_ADD(r3, 0x40186f02, &(0x7f0000000c00)={0x4, 0xfffffff7, 0x7f, 0x7}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x2e, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @generic={0x6, 0xc, 0x2, 0x9, 0xfff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}}, @jmp={0x5, 0x0, 0x6, 0x9, 0x3, 0x20, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x46}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0x9f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd3b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x5, 0xa6, &(0x7f00000007c0)=""/166, 0x41100, 0x0, '\x00', r11, 0x0, r12, 0x8, &(0x7f00000008c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x4, 0xfe1c, 0x7}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000940)=[{0x2, 0x2, 0x5, 0xa}, {0x1, 0x1, 0x8, 0xc}, {0x5, 0x1, 0x7, 0x3}, {0x0, 0x5, 0x4, 0x8}, {0x5, 0x5, 0x0, 0x6}, {0x4, 0x1, 0x0, 0xa}, {0x0, 0x1, 0xc, 0xb}, {0x3, 0x3, 0x5, 0x5}, {0x5, 0x3, 0x3, 0x3}], 0x10, 0x8}, 0x94) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f00000004c0)={0x0, 0x29, &(0x7f00000003c0)={&(0x7f0000000c40)={0x160, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0xed, 0xc, "7284249eab24b60515b01b1bda6b0ac9ebef0fe01eb992428e1fab15e8160adac42effb7591e7df21ed53294df4c4c07bb71c5a038534708c6ef6075993a467389bae2cff3467a25494f60ae150e2fcc5d8d8ccdc0ed55368bc9307d85f55d88ec8afdcc365fd0a48b4b80577187b2a1cb282aa7dde38b088f0bf2b90d7ddbb8991193c919c52146f6de7a4fbd6dfe695760cf5babdb0bd141d96684205e08f7a4eddaef864ecdeec3a33e0703a723316efeb89c86737ab80cd806983c7c82e1610d09636b62fe4a99ebbd2e500ef5936cc3aea4a92410a9dcf9c22bdfc03d0d0e08fa49ce3efde434"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x173c}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff7f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x48}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb836}]}]}, 0x160}}, 0x44060) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.1.339'. [ 124.143247][ T7313] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.274609][ T7313] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.361611][ T7333] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.391011][ T7333] xt_policy: output policy not valid in PREROUTING and INPUT [ 124.415647][ T7336] netlink: 'syz.1.343': attribute type 10 has an invalid length. [ 124.423861][ T6402] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.461170][ T6402] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.621435][ T6402] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.675541][ T6402] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.872398][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 124.910471][ T7352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.346'. [ 124.954534][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 124.968440][ T7358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.346'. [ 125.066618][ T7361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.348'. [ 125.236256][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 125.287871][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 125.300911][ T7369] geneve1: entered allmulticast mode [ 125.641421][ T7389] lo speed is unknown, defaulting to 1000 [ 125.676497][ T7391] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 125.761292][ T7394] xt_HMARK: spi-set and port-set can't be combined [ 126.083280][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'. [ 126.102779][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 126.223876][ T7405] ip6tnl1: entered allmulticast mode [ 126.942585][ T7436] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 126.970940][ T7436] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 127.006558][ T7436] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 127.035366][ T7436] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 127.064236][ T7436] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 127.098738][ T7436] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 127.139065][ T7436] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 127.155478][ T7436] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 127.289299][ T7450] IPVS: set_ctl: invalid protocol: 39555 229.182.219.106:43509 [ 127.685139][ T7477] openvswitch: netlink: Missing valid actions attribute. [ 127.715502][ T7477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.899198][ T7483] Cannot find del_set index 0 as target [ 128.173664][ T7489] bond1 (unregistering): Released all slaves [ 128.187636][ T7500] validate_nla: 40 callbacks suppressed [ 128.187657][ T7500] netlink: 'syz.3.381': attribute type 1 has an invalid length. [ 128.432190][ T7506] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 128.447233][ T7506] tipc: Resetting bearer [ 128.493013][ T7506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.509219][ T7503] lo speed is unknown, defaulting to 1000 [ 128.731867][ T7517] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 129.311319][ T7537] __nla_validate_parse: 15 callbacks suppressed [ 129.311341][ T7537] netlink: 356 bytes leftover after parsing attributes in process `syz.3.392'. [ 129.354076][ T7539] netlink: 356 bytes leftover after parsing attributes in process `syz.3.392'. [ 129.523455][ T7535] team0: Port device veth3 added [ 129.611468][ T7551] xt_bpf: check failed: parse error [ 129.625391][ T6407] tipc: Resetting bearer [ 129.629495][ T7551] siw: device registration error -23 [ 130.271498][ T7573] tipc: Enabling of bearer rejected, already enabled [ 130.280541][ T7574] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 130.288559][ T7574] tipc: Resetting bearer [ 130.393312][ T7578] netlink: 'syz.3.401': attribute type 4 has an invalid length. [ 130.633568][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 130.707572][ T7589] netlink: 43 bytes leftover after parsing attributes in process `syz.4.405'. [ 130.755141][ T7589] IPv6: sit1: Disabled Multicast RS [ 130.782213][ T7589] sit1: entered allmulticast mode [ 131.133428][ T7609] netlink: 248 bytes leftover after parsing attributes in process `syz.1.411'. [ 131.201635][ T7609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.411'. [ 131.526531][ T7628] syzkaller0: entered promiscuous mode [ 131.532453][ T7628] syzkaller0: entered allmulticast mode [ 131.571173][ T7632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.417'. [ 131.680261][ T7632] netlink: 400 bytes leftover after parsing attributes in process `syz.2.417'. [ 131.699110][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.417'. [ 131.721797][ T7632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.417'. [ 131.771745][ T7638] SET target dimension over the limit! [ 132.030930][ T7649] netlink: 'syz.2.421': attribute type 10 has an invalid length. [ 132.053255][ T7651] xt_ecn: cannot match TCP bits for non-tcp packets [ 132.058081][ T7643] bond0: option all_slaves_active: invalid value (13) [ 132.069662][ T7643] bond0 (unregistering): Released all slaves [ 132.108482][ T7649] .`: (slave wlan1): Enslaving as an active interface with an up link [ 132.176984][ T7657] netlink: 'syz.1.424': attribute type 1 has an invalid length. [ 132.202023][ T7658] netlink: 'syz.1.424': attribute type 1 has an invalid length. [ 132.599983][ T7681] Cannot find del_set index 0 as target [ 132.701329][ T7687] SET target dimension over the limit! [ 132.756243][ T7690] netlink: 'syz.0.435': attribute type 7 has an invalid length. [ 132.771529][ T7690] netlink: 'syz.0.435': attribute type 8 has an invalid length. [ 132.825944][ T7692] syzkaller1: entered promiscuous mode [ 132.832362][ T7692] syzkaller1: entered allmulticast mode [ 132.855316][ T7697] tls_set_device_offload: netdev not found [ 132.862667][ T7690] erspan0: entered promiscuous mode [ 132.879436][ T7690] gretap0: entered promiscuous mode [ 132.894207][ T7690] erspan0: left promiscuous mode [ 132.905758][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.916422][ T1298] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 132.931329][ T7690] gretap0: left promiscuous mode [ 133.043604][ T7706] xt_ecn: cannot match TCP bits for non-tcp packets [ 133.206132][ T7708] tipc: Started in network mode [ 133.212560][ T7708] tipc: Node identity 4e2ffec88c59, cluster identity 4711 [ 133.220066][ T7708] tipc: Enabled bearer , priority 0 [ 133.326524][ T7708] syzkaller0: entered promiscuous mode [ 133.333011][ T7708] syzkaller0: entered allmulticast mode [ 133.339283][ T7708] tipc: Resetting bearer [ 133.360560][ T7708] netlink: 'syz.2.440': attribute type 27 has an invalid length. [ 133.465661][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.471746][ T7721] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 133.473402][ T7708] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.613164][ T7708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.637328][ T7708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.795393][ T7708] geneve2: left promiscuous mode [ 133.805204][ T7708] ip6tnl1: left allmulticast mode [ 133.824373][ T7708] tipc: Resetting bearer [ 133.891401][ T7708] syzkaller0: left promiscuous mode [ 133.896788][ T7708] syzkaller0: left allmulticast mode [ 133.933052][ T7722] lo: entered promiscuous mode [ 133.941502][ T7722] lo: entered allmulticast mode [ 133.963199][ T7722] tunl0: entered promiscuous mode [ 133.977619][ T7722] tunl0: entered allmulticast mode [ 134.001742][ T7722] gre0: entered promiscuous mode [ 134.007013][ T7722] gre0: entered allmulticast mode [ 134.017968][ T7722] gretap0: entered promiscuous mode [ 134.074346][ T7751] Cannot find del_set index 0 as target [ 134.081191][ T7722] gretap0: entered allmulticast mode [ 134.091074][ T7722] erspan0: entered promiscuous mode [ 134.100382][ T7722] erspan0: entered allmulticast mode [ 134.109460][ T7722] ip_vti0: entered promiscuous mode [ 134.127124][ T7722] ip_vti0: entered allmulticast mode [ 134.151201][ T7722] ip6_vti0: entered promiscuous mode [ 134.160014][ T7722] ip6_vti0: entered allmulticast mode [ 134.167705][ T7722] sit0: entered promiscuous mode [ 134.173680][ T7722] sit0: entered allmulticast mode [ 134.228162][ T7722] ip6tnl0: entered promiscuous mode [ 134.259355][ T7722] ip6tnl0: entered allmulticast mode [ 134.324097][ T7722] ip6gre0: entered promiscuous mode [ 134.332621][ T7722] ip6gre0: entered allmulticast mode [ 134.350374][ T7722] syz_tun: entered promiscuous mode [ 134.365984][ T7722] syz_tun: entered allmulticast mode [ 134.387481][ T7722] bridge0: entered promiscuous mode [ 134.406547][ T7722] bridge0: entered allmulticast mode [ 134.426837][ T7722] vcan0: entered promiscuous mode [ 134.435742][ T7722] vcan0: entered allmulticast mode [ 134.452013][ T7722] .`: entered promiscuous mode [ 134.456994][ T7722] bond_slave_0: entered promiscuous mode [ 134.487677][ T7722] bond_slave_1: entered promiscuous mode [ 134.502146][ T7722] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 134.524488][ T7722] .`: entered allmulticast mode [ 134.538357][ T7722] bond_slave_0: entered allmulticast mode [ 134.557584][ T7722] bond_slave_1: entered allmulticast mode [ 134.575811][ T7722] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 134.595169][ T7722] 8021q: adding VLAN 0 to HW filter on device .` [ 134.611190][ T7722] team0: entered promiscuous mode [ 134.624775][ T7722] team_slave_0: entered promiscuous mode [ 134.639688][ T7722] team_slave_1: entered promiscuous mode [ 134.653996][ T7722] team0: entered allmulticast mode [ 134.659619][ T7722] team_slave_0: entered allmulticast mode [ 134.697653][ T7722] team_slave_1: entered allmulticast mode [ 134.707267][ T7722] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.715922][ T7722] dummy0: entered promiscuous mode [ 134.741651][ T7722] dummy0: entered allmulticast mode [ 134.773445][ T7722] nlmon0: entered promiscuous mode [ 134.778860][ T7722] nlmon0: entered allmulticast mode [ 134.788035][ T7722] caif0: entered promiscuous mode [ 134.793538][ T7722] caif0: entered allmulticast mode [ 134.798850][ T7722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.817164][ T6402] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.828397][ T7738] tipc: Node number set to 3262578376 [ 134.879404][ T7756] syzkaller1: entered promiscuous mode [ 134.889481][ T7756] syzkaller1: entered allmulticast mode [ 136.110874][ T7707] tipc: Disabling bearer [ 136.119710][ T6402] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.129351][ T6402] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.229946][ T6402] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.393938][ T7791] __nla_validate_parse: 10 callbacks suppressed [ 136.393961][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 136.652925][ T7805] Cannot find del_set index 0 as target [ 136.682460][ T7795] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.690721][ T7795] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.313812][ T7795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.372997][ T7795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.710632][ T7828] xt_TCPMSS: Only works on TCP SYN packets [ 137.893363][ T7841] netlink: 'syz.4.468': attribute type 1 has an invalid length. [ 137.914516][ T7841] netlink: 224 bytes leftover after parsing attributes in process `syz.4.468'. [ 137.928201][ T7845] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 137.936314][ T7845] netlink: 36 bytes leftover after parsing attributes in process `syz.1.471'. [ 138.515275][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 138.547768][ T7865] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 138.548101][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 138.611247][ T7863] syzkaller0: entered promiscuous mode [ 138.629006][ T7863] syzkaller0: entered allmulticast mode [ 138.885208][ T7874] netlink: 68 bytes leftover after parsing attributes in process `syz.0.479'. [ 139.091352][ T7887] netlink: 17 bytes leftover after parsing attributes in process `syz.4.482'. [ 139.404944][ T7904] syzkaller1: entered promiscuous mode [ 139.441427][ T7904] syzkaller1: entered allmulticast mode [ 139.999129][ T7938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.495'. [ 140.032536][ T7923] netlink: 'syz.4.490': attribute type 16 has an invalid length. [ 140.042214][ T7923] netlink: 'syz.4.490': attribute type 17 has an invalid length. [ 140.065154][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 140.075502][ T7941] netlink: 132 bytes leftover after parsing attributes in process `syz.1.494'. [ 140.108389][ T7923] tipc: Resetting bearer [ 140.373734][ T7950] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 140.485419][ T7954] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 140.882710][ T7967] netlink: 'syz.3.502': attribute type 1 has an invalid length. [ 141.474037][ T7988] __nla_validate_parse: 9 callbacks suppressed [ 141.474058][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 141.713053][ T8003] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.512'. [ 142.127848][ T8025] nbd: must specify a size in bytes for the device [ 142.479074][ T8042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.524'. [ 142.740524][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 142.926285][ T8070] syzkaller0: entered promiscuous mode [ 142.935375][ T8070] syzkaller0: entered allmulticast mode [ 143.433379][ T8087] dummy0: mtu less than device minimum [ 143.681081][ T8097] veth0_to_team: entered promiscuous mode [ 143.683082][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 143.686903][ T8097] veth0_to_team: entered allmulticast mode [ 143.712709][ T8099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.537'. [ 143.888424][ T8097] Set syz1 is full, maxelem 6117 reached [ 144.100196][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.541'. [ 144.145850][ T8111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.542'. [ 144.171933][ T8113] netlink: 56 bytes leftover after parsing attributes in process `syz.0.541'. [ 144.210347][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.541'. [ 144.219590][ T8113] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 144.342407][ T8118] vlan0: entered allmulticast mode [ 144.364922][ T8118] bond3: entered allmulticast mode [ 144.416022][ T8107] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 144.434014][ T8121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.725196][ T8141] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 144.745910][ T8139] netlink: 'syz.2.552': attribute type 32 has an invalid length. [ 145.027395][ T8155] netlink: 'syz.0.558': attribute type 13 has an invalid length. [ 145.057407][ T8155] netlink: 'syz.0.558': attribute type 17 has an invalid length. [ 145.195132][ T8155] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.202451][ T8155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.210194][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.217377][ T8155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.242067][ T8155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.324824][ T8170] netlink: 'syz.4.562': attribute type 10 has an invalid length. [ 145.333728][ T8170] team0: entered promiscuous mode [ 145.339046][ T8170] veth3: entered promiscuous mode [ 145.359563][ T8170] team0: entered allmulticast mode [ 145.378329][ T8170] veth3: entered allmulticast mode [ 145.400472][ T8170] bridge0: port 1(team0) entered blocking state [ 145.407760][ T8170] bridge0: port 1(team0) entered disabled state [ 145.728475][ T8183] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 145.917403][ T8189] bond1: (slave gretap1): making interface the new active one [ 145.927315][ T8189] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 145.957201][ T8191] tipc: Enabled bearer , priority 0 [ 145.992362][ T8195] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 146.009448][ T8195] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 146.024123][ T8195] tipc: Resetting bearer [ 146.053132][ T8191] tipc: Resetting bearer [ 146.125088][ T8202] netlink: 'syz.1.572': attribute type 1 has an invalid length. [ 146.306422][ T8202] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.326401][ T8217] SET target dimension over the limit! [ 146.388595][ T8207] bond4: (slave veth5): Enslaving as an active interface with a down link [ 146.551634][ T6399] tipc: Resetting bearer [ 146.699467][ T8222] netlink: 'syz.2.578': attribute type 6 has an invalid length. [ 146.729511][ T8222] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.951171][ T8234] tipc: Enabling of bearer rejected, already enabled [ 146.987048][ T8237] netlink: 'syz.0.581': attribute type 1 has an invalid length. [ 147.076724][ T8237] __nla_validate_parse: 12 callbacks suppressed [ 147.076747][ T8237] netlink: 1008 bytes leftover after parsing attributes in process `syz.0.581'. [ 147.215011][ T8245] netlink: 24 bytes leftover after parsing attributes in process `syz.4.583'. [ 147.592224][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.586'. [ 147.646071][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.586'. [ 148.366806][ T8273] team0: Port device dummy0 added [ 148.543833][ T8292] netlink: 56 bytes leftover after parsing attributes in process `syz.4.593'. [ 148.784966][ T8292] xt_CT: No such helper "syz1" [ 149.316577][ T8318] netlink: 16 bytes leftover after parsing attributes in process `syz.3.600'. [ 149.399752][ T8318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.600'. [ 149.409743][ T8318] netlink: 11 bytes leftover after parsing attributes in process `syz.3.600'. [ 149.664309][ T8329] validate_nla: 1 callbacks suppressed [ 149.664332][ T8329] netlink: 'syz.4.603': attribute type 33 has an invalid length. [ 149.694062][ T8329] netlink: 152 bytes leftover after parsing attributes in process `syz.4.603'. [ 149.793886][ T8327] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 149.835034][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 149.836138][ T8327] bond2 (unregistering): Released all slaves [ 149.886887][ T8329] `: renamed from team0 (while UP) [ 149.939662][ T8333] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 149.987783][ T8333] bond1 (unregistering): Released all slaves [ 150.432589][ T8352] netlink: 'syz.4.611': attribute type 3 has an invalid length. [ 150.741957][ T8372] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 151.043363][ T8383] Bluetooth: MGMT ver 1.23 [ 151.080343][ T8383] openvswitch: netlink: Flow key attr not present in new flow. [ 151.837795][ T7743] IPVS: starting estimator thread 0... [ 151.845657][ T8413] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001 [ 151.949948][ T8426] IPVS: using max 26 ests per chain, 62400 per kthread [ 152.124540][ T8415] syz.3.626 (8415) used greatest stack depth: 17472 bytes left [ 152.312262][ T8439] __nla_validate_parse: 8 callbacks suppressed [ 152.312283][ T8439] netlink: 56 bytes leftover after parsing attributes in process `syz.4.631'. [ 152.805760][ T8461] xt_hashlimit: max too large, truncated to 1048576 [ 152.823327][ T8460] xt_hashlimit: max too large, truncated to 1048576 [ 152.823366][ T8461] xt_hashlimit: overflow, try lower: 18446744073709551608/8 [ 152.862283][ T8460] xt_hashlimit: overflow, try lower: 18446744073709551608/8 [ 153.141516][ T5830] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 153.146173][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 153.259927][ T30] audit: type=1107 audit(1773537940.491:2): pid=8473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-ó˜8«Fmц¸Ì#–uÜ:‡lО<âVc‰uT)¢’ ð%›¬"qv¨aÁ0*ÝŽ¹´Ëý16ƒõ¾û{’Ž^8Ã9‚åÜžåTË–iîÁ&6É—ÆíµÍæk°F`ƒýLhÒÒb")Üi…ŠÛm†÷OÊ^ž¬ÞüóEËŸ&›—ÀwUOÜ"NmGÑĪóÏ­ÅÛãfœ[ñ‘øøÊ=yíÛòN\[\ro›î[o|UI' [ 153.261679][ T8476] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 153.356894][ T8476] netlink: 96 bytes leftover after parsing attributes in process `syz.1.642'. [ 153.392673][ T8476] netlink: 1 bytes leftover after parsing attributes in process `syz.1.642'. [ 153.405252][ T8484] netlink: 'syz.2.643': attribute type 21 has an invalid length. [ 153.439890][ T8484] netlink: 128 bytes leftover after parsing attributes in process `syz.2.643'. [ 153.455294][ T8476] netlink: 658 bytes leftover after parsing attributes in process `syz.1.642'. [ 153.489355][ T8484] netlink: 3 bytes leftover after parsing attributes in process `syz.2.643'. [ 153.609146][ T8495] netlink: 132 bytes leftover after parsing attributes in process `syz.2.645'. [ 153.631135][ T8496] netlink: 132 bytes leftover after parsing attributes in process `syz.2.645'. [ 153.640895][ T8495] netlink: 132 bytes leftover after parsing attributes in process `syz.2.645'. [ 153.651576][ T8496] netlink: 132 bytes leftover after parsing attributes in process `syz.2.645'. [ 154.637938][ T8503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.646628][ T8503] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 154.750393][ T8503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.756449][ T8503] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 154.832059][ T8503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.838042][ T8503] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 154.863367][ T8503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.872342][ T8503] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 154.899156][ T8503] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 154.921067][ T8503] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 155.097019][ T8503] tipc: Resetting bearer [ 155.190919][ T8503] tipc: Resetting bearer [ 155.318236][ T8561] netlink: 'syz.3.664': attribute type 4 has an invalid length. [ 155.493414][ T8569] tipc: Can't bind to reserved service type 2 [ 155.961502][ T8587] vlan2: entered allmulticast mode [ 155.985170][ T8587] bridge_slave_0: entered allmulticast mode [ 156.005254][ T8587] bridge0: port 2(vlan2) entered blocking state [ 156.021863][ T8587] bridge0: port 2(vlan2) entered disabled state [ 156.042438][ T8587] vlan2: entered promiscuous mode [ 156.049955][ T8587] bridge_slave_0: entered promiscuous mode [ 156.286268][ T8597] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20003 [ 156.835193][ T8629] netlink: 'syz.2.687': attribute type 15 has an invalid length. [ 157.217875][ T8652] netlink: 'syz.4.691': attribute type 1 has an invalid length. [ 157.544295][ T8670] netlink: 'syz.2.696': attribute type 10 has an invalid length. [ 157.598789][ T8670] __nla_validate_parse: 135 callbacks suppressed [ 157.598810][ T8670] netlink: 40 bytes leftover after parsing attributes in process `syz.2.696'. [ 157.678489][ T8670] dummy0: left allmulticast mode [ 157.715339][ T8670] bridge0: port 3(dummy0) entered blocking state [ 157.752589][ T8670] bridge0: port 3(dummy0) entered disabled state [ 157.759359][ T8679] netlink: 72 bytes leftover after parsing attributes in process `syz.3.699'. [ 157.785874][ T8670] dummy0: entered allmulticast mode [ 157.816960][ T8670] bridge0: port 3(dummy0) entered blocking state [ 157.823724][ T8670] bridge0: port 3(dummy0) entered forwarding state [ 157.855928][ T8682] netlink: 'syz.0.700': attribute type 1 has an invalid length. [ 157.984251][ T8691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.703'. [ 158.087476][ T8697] netlink: 'syz.2.704': attribute type 21 has an invalid length. [ 158.123618][ T8697] netlink: 132 bytes leftover after parsing attributes in process `syz.2.704'. [ 158.166947][ T8702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.706'. [ 158.183282][ T8702] netlink: 84 bytes leftover after parsing attributes in process `syz.0.706'. [ 158.331056][ T8710] netlink: 'syz.2.708': attribute type 1 has an invalid length. [ 158.355722][ T8710] netlink: 96 bytes leftover after parsing attributes in process `syz.2.708'. [ 158.366204][ T8710] netlink: 1 bytes leftover after parsing attributes in process `syz.2.708'. [ 158.376166][ T8710] netlink: 658 bytes leftover after parsing attributes in process `syz.2.708'. [ 158.428007][ T8719] xt_l2tp: wrong L2TP version: 0 [ 158.590160][ T8723] netlink: 'syz.0.712': attribute type 10 has an invalid length. [ 159.045214][ T8723] syz_tun: entered promiscuous mode [ 159.081229][ T8723] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 159.160586][ T8728] syzkaller1: entered promiscuous mode [ 159.179940][ T8728] syzkaller1: entered allmulticast mode [ 159.495985][ T8746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.715'. [ 159.512780][ T8746] ip6gre2: entered promiscuous mode [ 159.513421][ T8740] delete_channel: no stack [ 159.518029][ T8746] ip6gre2: entered allmulticast mode [ 160.016845][ T8764] netlink: 'syz.1.722': attribute type 4 has an invalid length. [ 160.063983][ T8764] netlink: 'syz.1.722': attribute type 4 has an invalid length. [ 160.316097][ T8779] ip6gre1: entered promiscuous mode [ 160.366468][ T8779] ip6gre1: entered allmulticast mode [ 160.773613][ T8803] validate_nla: 1 callbacks suppressed [ 160.773634][ T8803] netlink: 'syz.3.735': attribute type 10 has an invalid length. [ 160.855240][ T8803] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 161.318799][ T8837] xt_hashlimit: size too large, truncated to 1048576 [ 161.434334][ T8822] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.505888][ T8848] netlink: 'syz.1.744': attribute type 2 has an invalid length. [ 162.058554][ T8822] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.195433][ T8822] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.343959][ T8822] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.455572][ T57] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.479475][ T6407] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.503461][ T6407] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.531277][ T6407] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.749144][ T8889] __nla_validate_parse: 6 callbacks suppressed [ 162.749165][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 162.940331][ T8900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.758'. [ 163.129703][ T8912] veth1_to_hsr: entered promiscuous mode [ 163.136501][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'. [ 163.151751][ T8912] veth1_to_hsr (unregistering): left promiscuous mode [ 163.282885][ T8915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.762'. [ 163.324703][ T8912] hsr_slave_1 (unregistering): left promiscuous mode [ 163.466331][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 163.509911][ T5887] IPVS: starting estimator thread 0... [ 163.547341][ T8930] hsr_slave_0: left promiscuous mode [ 163.610080][ T8934] IPVS: using max 26 ests per chain, 62400 per kthread [ 163.701105][ T8930] hsr_slave_1: left promiscuous mode [ 164.287747][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.768'. [ 164.298839][ T8949] lo: left promiscuous mode [ 164.303699][ T8949] lo: left allmulticast mode [ 164.309378][ T8949] tunl0: left promiscuous mode [ 164.314884][ T8949] tunl0: left allmulticast mode [ 164.340253][ T8949] gre0: left promiscuous mode [ 164.345341][ T8949] gre0: left allmulticast mode [ 164.351378][ T8949] gretap0: left promiscuous mode [ 164.356639][ T8949] gretap0: left allmulticast mode [ 164.364209][ T8949] erspan0: left promiscuous mode [ 164.369469][ T8949] erspan0: left allmulticast mode [ 164.376025][ T8949] ip_vti0: left promiscuous mode [ 164.381665][ T8949] ip_vti0: left allmulticast mode [ 164.387562][ T8949] ip6_vti0: left promiscuous mode [ 164.393125][ T8949] ip6_vti0: left allmulticast mode [ 164.400700][ T8949] sit0: left promiscuous mode [ 164.405612][ T8949] sit0: left allmulticast mode [ 164.411842][ T8949] ip6tnl0: left promiscuous mode [ 164.417052][ T8949] ip6tnl0: left allmulticast mode [ 164.423465][ T8949] ip6gre0: left promiscuous mode [ 164.428760][ T8949] ip6gre0: left allmulticast mode [ 164.435216][ T8949] syz_tun: left promiscuous mode [ 164.449949][ T8949] syz_tun: left allmulticast mode [ 164.457019][ T8949] bridge0: left promiscuous mode [ 164.467774][ T8949] bridge0: left allmulticast mode [ 164.478746][ T8949] vcan0: left promiscuous mode [ 164.491570][ T8949] vcan0: left allmulticast mode [ 164.497268][ T8949] .`: left promiscuous mode [ 164.503496][ T8949] bond_slave_0: left promiscuous mode [ 164.509418][ T8949] bond_slave_1: left promiscuous mode [ 164.516223][ T8949] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 164.530899][ T8949] .`: left allmulticast mode [ 164.540231][ T8949] bond_slave_0: left allmulticast mode [ 164.556998][ T8949] bond_slave_1: left allmulticast mode [ 164.569918][ T8949] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 164.585703][ T8949] team0: left promiscuous mode [ 164.602969][ T8949] team_slave_0: left promiscuous mode [ 164.615804][ T8949] team_slave_1: left promiscuous mode [ 164.622934][ T8949] team0: left allmulticast mode [ 164.629411][ T8949] team_slave_0: left allmulticast mode [ 164.637297][ T8949] team_slave_1: left allmulticast mode [ 164.647239][ T8949] nlmon0: left promiscuous mode [ 164.652395][ T8949] nlmon0: left allmulticast mode [ 164.659030][ T8949] caif0: left promiscuous mode [ 164.664080][ T8949] caif0: left allmulticast mode [ 164.669294][ T8949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.839664][ T8962] bridge0: entered allmulticast mode [ 164.879107][ T8962] vlan2: left promiscuous mode [ 164.888439][ T8962] bridge_slave_0: left promiscuous mode [ 164.896216][ T8962] bridge0: port 2(vlan2) entered disabled state [ 164.916605][ T8962] bridge0: port 1(`) entered disabled state [ 164.958956][ T8967] netlink: 'syz.2.776': attribute type 8 has an invalid length. [ 165.206524][ T8976] netlink: 52 bytes leftover after parsing attributes in process `syz.4.778'. [ 165.309449][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 166.033212][ T9009] team0: Port device veth3 added [ 166.372947][ T9023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.790'. [ 166.492648][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.790'. [ 166.673957][ T9035] syzkaller0: entered promiscuous mode [ 166.695603][ T9035] syzkaller0: entered allmulticast mode [ 166.716934][ T9035] tc action pedit offset must be on 32 bit boundaries [ 166.776873][ T9037] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.857561][ T9043] netlink: 'syz.1.796': attribute type 4 has an invalid length. [ 166.920534][ T9042] netlink: 'syz.1.796': attribute type 4 has an invalid length. [ 167.016876][ T9037] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.205265][ T9037] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.286036][ T9060] bridge0: entered promiscuous mode [ 167.344915][ T9037] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.376318][ T9065] trusted_key: syz.2.804 sent an empty control message without MSG_MORE. [ 167.658509][ T9079] netlink: 'syz.3.808': attribute type 1 has an invalid length. [ 167.697620][ T6407] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.765682][ T6407] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.813068][ T9088] __nla_validate_parse: 4 callbacks suppressed [ 167.813090][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 167.912545][ T6407] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.957805][ T6399] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.182289][ T9103] netlink: 'syz.1.814': attribute type 13 has an invalid length. [ 168.305708][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 168.496725][ T9120] IPVS: length: 199 != 8 [ 168.521792][ T9113] bond5: option lp_interval: invalid value (0) [ 168.539942][ T9113] bond5: option lp_interval: allowed values 1 - 2147483647 [ 168.565945][ T9127] netlink: 'syz.4.820': attribute type 1 has an invalid length. [ 168.575506][ T9113] bond5 (unregistering): Released all slaves [ 168.582109][ T9127] netlink: 36 bytes leftover after parsing attributes in process `syz.4.820'. [ 168.624064][ T9120] netlink: 'syz.4.820': attribute type 39 has an invalid length. [ 168.678496][ T9127] netlink: 228 bytes leftover after parsing attributes in process `syz.4.820'. [ 168.693760][ T9136] sctp: [Deprecated]: syz.0.823 (pid 9136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.693760][ T9136] Use struct sctp_sack_info instead [ 168.741026][ T9127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.820'. [ 168.746006][ T9136] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.823'. [ 168.760963][ T9136] openvswitch: netlink: Missing key (keys=40, expected=100) [ 169.027117][ T9150] netlink: 'syz.4.826': attribute type 4 has an invalid length. [ 169.041224][ T9151] netlink: 'syz.2.825': attribute type 1 has an invalid length. [ 169.141996][ T9159] netlink: 'syz.1.828': attribute type 1 has an invalid length. [ 169.172917][ T9160] netlink: 'syz.4.829': attribute type 1 has an invalid length. [ 169.189655][ T9151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.215639][ T9157] bond0: (slave geneve3): making interface the new active one [ 169.250931][ T9157] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 169.304452][ T9167] IPv6: Can't replace route, no match found [ 169.335398][ T9167] IPv6: Can't replace route, no match found [ 169.358651][ T9160] bond1: entered promiscuous mode [ 169.368980][ T9160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.377499][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.423401][ T9166] xt_CT: No such helper "netbios-ns" [ 169.424012][ T9170] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001 [ 169.436008][ T7735] IPVS: starting estimator thread 0... [ 169.455920][ T9163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.490770][ T9163] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 169.517484][ T9163] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 169.530180][ T9174] IPVS: using max 49 ests per chain, 117600 per kthread [ 169.585224][ T9163] bond1: (slave wireguard0): making interface the new active one [ 169.612156][ T9163] wireguard0: entered promiscuous mode [ 169.620850][ T9163] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 169.651625][ T9167] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 169.676178][ T9167] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 169.685640][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.702628][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.712839][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.746843][ T9186] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 170.523046][ T9220] sctp: [Deprecated]: syz.0.845 (pid 9220) Use of int in maxseg socket option. [ 170.523046][ T9220] Use struct sctp_assoc_value instead [ 170.576822][ T9216] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 170.620078][ T9223] SET target dimension over the limit! [ 170.784901][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 170.921247][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 170.948109][ T1107] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.971730][ T1107] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.997665][ T1107] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.006833][ T1107] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.042305][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.850'. [ 171.081471][ T9236] lo speed is unknown, defaulting to 1000 [ 171.103520][ T9236] lo speed is unknown, defaulting to 1000 [ 171.112729][ T9236] lo speed is unknown, defaulting to 1000 [ 171.144570][ T9236] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 171.188963][ T9236] lo speed is unknown, defaulting to 1000 [ 171.208825][ T9236] lo speed is unknown, defaulting to 1000 [ 171.228448][ T9236] lo speed is unknown, defaulting to 1000 [ 171.253509][ T9236] lo speed is unknown, defaulting to 1000 [ 171.268726][ T9236] lo speed is unknown, defaulting to 1000 [ 171.526475][ T9242] ip6gretap0: entered promiscuous mode [ 171.536384][ T9245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.853'. [ 171.796339][ T9251] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 172.493485][ T9293] syzkaller0: entered promiscuous mode [ 172.499698][ T9293] syzkaller0: entered allmulticast mode [ 172.799535][ T9300] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.946719][ T9312] validate_nla: 2 callbacks suppressed [ 172.946741][ T9312] netlink: 'syz.0.873': attribute type 30 has an invalid length. [ 172.994809][ T9300] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.015447][ T9315] __nla_validate_parse: 1 callbacks suppressed [ 173.015468][ T9315] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.875'. [ 173.032578][ T9312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.873'. [ 173.050016][ T9313] syzkaller0: entered promiscuous mode [ 173.056006][ T9313] syzkaller0: entered allmulticast mode [ 173.128595][ T9312] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 173.178210][ T9312] bond4 (unregistering): Released all slaves [ 173.247073][ T9300] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.278280][ T9321] SET target dimension over the limit! [ 173.359864][ T9319] tipc: Started in network mode [ 173.364806][ T9319] tipc: Node identity 8edf7577ed0e, cluster identity 4711 [ 173.401719][ T9319] tipc: Enabled bearer , priority 0 [ 173.420400][ T9311] tipc: Resetting bearer [ 173.511538][ T9311] tipc: Disabling bearer [ 173.602120][ T9300] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.855540][ T1107] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.903621][ T1107] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.971964][ T1107] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.012468][ T1107] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.190312][ T9351] netlink: 'syz.0.886': attribute type 16 has an invalid length. [ 174.241400][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 174.276170][ T9362] block nbd0: not configured, cannot reconfigure [ 174.284225][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 174.311351][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 174.332094][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 174.357060][ T9362] netlink: 'syz.4.888': attribute type 14 has an invalid length. [ 174.393635][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.889'. [ 174.802812][ T9351] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.810482][ T9351] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.354514][ T9351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.386124][ T9351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.923057][ T9360] netlink: 92 bytes leftover after parsing attributes in process `syz.2.887'. [ 175.982775][ T6407] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.998320][ T6407] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.047052][ T6407] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.103500][ T6407] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.136411][ T9396] netlink: 220 bytes leftover after parsing attributes in process `syz.0.892'. [ 176.191831][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.892'. [ 176.707934][ T9415] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 177.085697][ T9417] vlan3: entered allmulticast mode [ 177.092973][ T9417] bond0: entered allmulticast mode [ 177.213888][ T9418] bond0 (unregistering): Released all slaves [ 177.610432][ T9432] bond2: option broadcast_neighbor: invalid value (30) [ 177.631754][ T9432] bond2 (unregistering): Released all slaves [ 177.838085][ T9440] syz_tun: entered allmulticast mode [ 177.868146][ T9439] syz_tun: left allmulticast mode [ 178.167878][ T9457] __nla_validate_parse: 4 callbacks suppressed [ 178.167899][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 178.220278][ T9457] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 178.227744][ T9457] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 178.454541][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'. [ 178.463721][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 178.665094][ T9483] netlink: 20 bytes leftover after parsing attributes in process `syz.2.916'. [ 178.988553][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 179.030122][ T9493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.919'. [ 179.262558][ T6014] udevd[6014]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 179.375679][ T9507] netlink: 'syz.1.923': attribute type 1 has an invalid length. [ 179.409122][ T9507] netlink: 96 bytes leftover after parsing attributes in process `syz.1.923'. [ 179.418637][ T9507] netlink: 1 bytes leftover after parsing attributes in process `syz.1.923'. [ 179.672186][ T9520] netlink: 'syz.1.926': attribute type 9 has an invalid length. [ 179.724208][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'. [ 180.196592][ T9524] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 180.244959][ T9532] syzkaller1: entered promiscuous mode [ 180.260565][ T9532] syzkaller1: entered allmulticast mode [ 180.358045][ T9550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.932'. [ 180.958240][ T9580] geneve4: entered promiscuous mode [ 181.011112][ T9580] geneve4: entered allmulticast mode [ 181.280237][ T9597] netlink: 'syz.3.942': attribute type 15 has an invalid length. [ 181.411692][ T9601] netlink: 'syz.2.944': attribute type 1 has an invalid length. [ 181.433267][ T9601] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 181.656151][ T9613] openvswitch: netlink: Key type 91 is out of range max 32 [ 182.126829][ T9633] lo speed is unknown, defaulting to 1000 [ 182.319532][ T9646] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.442369][ T9653] netlink: 'syz.0.957': attribute type 11 has an invalid length. [ 182.452009][ T9647] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.615932][ T9660] netlink: 'syz.2.959': attribute type 1 has an invalid length. [ 182.624704][ T9658] netlink: 'syz.2.959': attribute type 1 has an invalid length. [ 183.066690][ T9671] bridge_slave_1: left allmulticast mode [ 183.072819][ T9671] bridge_slave_1: left promiscuous mode [ 183.090893][ T9671] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.127787][ T9671] bridge3: port 1(bridge_slave_1) entered blocking state [ 183.140059][ T9671] bridge3: port 1(bridge_slave_1) entered disabled state [ 183.147308][ T9671] bridge_slave_1: entered allmulticast mode [ 183.182674][ T9671] bridge_slave_1: entered promiscuous mode [ 183.189893][ T9671] bridge3: port 1(bridge_slave_1) entered blocking state [ 183.197686][ T9671] bridge3: port 1(bridge_slave_1) entered forwarding state [ 183.888290][ T9688] batadv_slave_1: entered promiscuous mode [ 183.985352][ T9691] __nla_validate_parse: 6 callbacks suppressed [ 183.985376][ T9691] netlink: 41 bytes leftover after parsing attributes in process `syz.0.967'. [ 184.057108][ T9691] netlink: 140 bytes leftover after parsing attributes in process `syz.0.967'. [ 184.088653][ T9691] netlink: 41 bytes leftover after parsing attributes in process `syz.0.967'. [ 184.314076][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 184.467358][ T9685] batadv_slave_1: left promiscuous mode [ 184.491670][ T6418] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.520846][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 184.527033][ T6418] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.530023][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 184.538764][ T6418] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.642085][ T6418] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.917280][ T9724] netlink: 'syz.4.976': attribute type 27 has an invalid length. [ 184.937795][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 185.014239][ T9728] team0 (unregistering): Port device team_slave_0 removed [ 185.032114][ T9728] team0 (unregistering): Port device team_slave_1 removed [ 185.293980][ T9743] netlink: 16 bytes leftover after parsing attributes in process `syz.3.981'. [ 185.508569][ T9748] tipc: Failed to remove unknown binding: 66,0,0/0:188493007/188493008 [ 185.518352][ T9748] tipc: Failed to remove unknown binding: 66,0,0/0:188493007/188493008 [ 185.571095][ T9724] `: left promiscuous mode [ 185.578423][ T9724] veth3: left promiscuous mode [ 185.598585][ T9724] `: left allmulticast mode [ 185.604145][ T9724] veth3: left allmulticast mode [ 186.662434][ T9724] geneve1: left allmulticast mode [ 186.693566][ T9724] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 186.695243][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'. [ 186.709853][ T9724] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 186.742537][ T9724] sit1: left allmulticast mode [ 186.777557][ T9724] vlan2: left allmulticast mode [ 186.793521][ T9724] bridge_slave_0: left allmulticast mode [ 186.804004][ T9724] bridge0: left promiscuous mode [ 186.812173][ T9724] bond1: left promiscuous mode [ 186.817087][ T9724] wireguard0: left promiscuous mode [ 186.893366][ T9389] lo speed is unknown, defaulting to 1000 [ 186.899368][ T9389] syz2: Port: 1 Link DOWN [ 186.924773][ T9765] netlink: 52 bytes leftover after parsing attributes in process `syz.1.986'. [ 186.949333][ T9737] 8021q: adding VLAN 0 to HW filter on device ` [ 186.961036][ T9737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.025827][ T9748] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.052881][ T6399] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.063399][ T6399] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.073062][ T24] lo speed is unknown, defaulting to 1000 [ 187.080198][ T24] syz2: Port: 1 Link ACTIVE [ 187.110504][ T6399] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.139963][ T6399] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.255757][ T9748] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.263385][ T9771] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20003 [ 187.381839][ T9748] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.575507][ T9748] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.703469][ T6407] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.762253][ T6407] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.802721][ T6407] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.856148][ T6418] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.052954][ T9814] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20000 [ 188.297323][ T9828] netlink: 'syz.1.1003': attribute type 3 has an invalid length. [ 188.381119][ T9828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.439278][ T9829] lo speed is unknown, defaulting to 1000 [ 190.073522][ T9872] __nla_validate_parse: 4 callbacks suppressed [ 190.073554][ T9872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1012'. [ 190.299814][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 190.705873][ T9870] bridge0: port 3(dummy0) entered disabled state [ 190.818972][ T9870] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 190.827847][ T9870] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 190.875073][ T9870] geneve4: left promiscuous mode [ 190.888388][ T9870] geneve4: left allmulticast mode [ 190.924542][ T49] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.939599][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.960397][ T49] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.990456][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.012824][ T49] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.057395][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.158024][ T49] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.182663][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.443389][ T9923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1026'. [ 191.647653][ T9923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.748595][ T9920] lo speed is unknown, defaulting to 1000 [ 192.113841][ T9951] netlink: 'syz.0.1031': attribute type 2 has an invalid length. [ 192.137750][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'. [ 192.607512][ T9972] SET target dimension over the limit! [ 192.622663][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 192.875227][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 193.558564][T10009] Bluetooth: MGMT ver 1.23 [ 193.882661][T10016] syzkaller0: entered promiscuous mode [ 193.917701][T10016] syzkaller0: entered allmulticast mode [ 194.088008][T10022] can: request_module (can-proto-0) failed. [ 194.193978][T10029] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 194.251051][T10029] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 194.278886][T10029] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 194.348719][ T1298] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 194.534010][ T30] audit: type=1800 audit(1773537981.781:3): pid=10036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1052" name="memory.events" dev="tmpfs" ino=1154 res=0 errno=0 [ 194.945244][T10051] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1057'. [ 195.340652][T10067] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1062'. [ 195.388636][T10073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1064'. [ 195.392087][T10072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1063'. [ 195.398898][T10073] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1064'. [ 195.416478][T10073] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1064'. [ 195.431284][T10073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.638003][T10087] netlink: 'syz.4.1067': attribute type 39 has an invalid length. [ 195.924554][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807fb8d800: rx timeout, send abort [ 195.934808][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807fb8d800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 195.979437][T10097] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1072'. [ 196.161794][T10101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 196.720790][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1085'. [ 196.818576][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1085'. [ 196.844746][T10135] wg1: entered promiscuous mode [ 196.854712][T10135] wg1: entered allmulticast mode [ 196.896802][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1085'. [ 196.967546][T10141] lo speed is unknown, defaulting to 1000 [ 197.564961][T10185] SET target dimension over the limit! [ 198.047698][T10190] "syz.2.1095" (10190) uses obsolete ecb(arc4) skcipher [ 198.308181][T10227] sctp: [Deprecated]: syz.3.1104 (pid 10227) Use of int in maxseg socket option. [ 198.308181][T10227] Use struct sctp_assoc_value instead [ 198.387544][T10234] netlink: 'syz.4.1105': attribute type 30 has an invalid length. [ 198.560644][T10248] x_tables: duplicate underflow at hook 1 [ 199.115241][T10276] tipc: Enabling of bearer rejected, failed to enable media [ 199.291293][T10280] netlink: 'syz.4.1117': attribute type 10 has an invalid length. [ 199.395055][T10280] `: Port device dummy0 added [ 199.474179][T10297] dvmrp0: entered allmulticast mode [ 199.880709][ T7742] IPVS: starting estimator thread 0... [ 199.980190][T10317] IPVS: using max 25 ests per chain, 60000 per kthread [ 200.022099][T10321] netlink: 'syz.1.1126': attribute type 9 has an invalid length. [ 200.348581][T10337] netlink: 'syz.0.1128': attribute type 1 has an invalid length. [ 200.374589][T10335] lo speed is unknown, defaulting to 1000 [ 200.400055][T10337] __nla_validate_parse: 109 callbacks suppressed [ 200.400079][T10337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1128'. [ 200.489951][T10332] lo speed is unknown, defaulting to 1000 [ 200.539549][T10337] team0: Port device dummy0 removed [ 200.931230][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 200.955266][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 201.641732][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 201.657319][ T5909] lo speed is unknown, defaulting to 1000 [ 201.663590][ T5909] syz2: Port: 1 Link DOWN [ 201.698374][T10378] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 201.760313][ T1646] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 201.932822][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 202.123339][ T7742] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 202.202156][T10407] team0: entered promiscuous mode [ 202.207255][T10407] team_slave_0: entered promiscuous mode [ 202.250670][T10407] team_slave_1: entered promiscuous mode [ 202.271872][T10407] veth3: entered promiscuous mode [ 202.282841][T10411] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 202.980743][ T6399] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 202.989556][ T6399] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 203.170204][ T1646] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 203.557868][T10465] syzkaller0: entered promiscuous mode [ 203.575159][T10465] syzkaller0: entered allmulticast mode [ 203.634669][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 203.645557][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'. [ 203.726054][T10471] vlan0: entered promiscuous mode [ 203.741435][T10471] bridge0: entered promiscuous mode [ 203.801434][T10463] macvlan0: entered promiscuous mode [ 203.807165][T10463] macvlan0: entered allmulticast mode [ 203.821046][T10463] veth1_to_batadv: entered allmulticast mode [ 203.977003][T10482] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1157'. [ 204.060324][T10487] ip6t_REJECT: ECHOREPLY is not supported [ 204.109189][T10490] SET target dimension over the limit! [ 204.432769][T10513] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.510088][T10515] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.860598][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1168'. [ 204.914861][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1168'. [ 204.943505][T10525] pim6reg1: entered promiscuous mode [ 204.949246][T10525] pim6reg1: entered allmulticast mode [ 205.821513][T10567] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1180'. [ 205.852189][T10567] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1180'. [ 205.880095][T10567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.991331][T10579] bridge4: entered promiscuous mode [ 206.261274][T10586] bond2: entered promiscuous mode [ 206.281894][T10586] bond2: entered allmulticast mode [ 206.288697][T10586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.391302][T10602] lo speed is unknown, defaulting to 1000 [ 206.416495][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 206.501367][T10606] sit1: entered allmulticast mode [ 206.605326][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'. [ 206.654999][T10611] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1195'. [ 206.820414][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 207.278392][T10628] netlink: 644 bytes leftover after parsing attributes in process `syz.4.1199'. [ 207.664787][T10642] lo speed is unknown, defaulting to 1000 [ 207.727698][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 208.457174][T10672] batadv0: entered promiscuous mode [ 208.482467][T10672] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 208.516763][T10674] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 208.531705][T10674] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 208.594078][T10674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.113480][T10694] lo speed is unknown, defaulting to 1000 [ 209.133581][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 209.614065][T10716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1229'. [ 209.635175][T10716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1229'. [ 209.675573][T10719] netlink: 'syz.1.1230': attribute type 29 has an invalid length. [ 209.685019][T10719] netlink: 'syz.1.1230': attribute type 29 has an invalid length. [ 209.732477][T10719] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 210.574967][T10749] lo speed is unknown, defaulting to 1000 [ 210.932540][T10763] __nla_validate_parse: 9 callbacks suppressed [ 210.932563][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 210.951914][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 210.999479][T10756] lo speed is unknown, defaulting to 1000 [ 211.039061][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1243'. [ 211.323067][T10777] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1246'. [ 211.385303][T10777] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1246'. [ 211.420924][T10777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.508091][T10785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1245'. [ 212.516429][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 212.584792][T10806] lo speed is unknown, defaulting to 1000 [ 212.745451][T10815] netlink: 'syz.0.1257': attribute type 3 has an invalid length. [ 212.753601][T10815] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1257'. [ 212.843435][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1256'. [ 212.860909][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1258'. [ 213.463619][T10845] netlink: 'syz.4.1264': attribute type 2 has an invalid length. [ 213.694159][T10864] lo speed is unknown, defaulting to 1000 [ 214.687719][T10904] lo speed is unknown, defaulting to 1000 [ 214.821910][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 214.862693][T10913] lo speed is unknown, defaulting to 1000 [ 214.869391][T10919] netlink: 'syz.3.1283': attribute type 1 has an invalid length. [ 214.972911][T10920] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.982719][T10920] bond3: (slave bond4): making interface the new active one [ 214.992415][T10920] bond3: (slave bond4): Enslaving as an active interface with an up link [ 215.002847][T10924] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 215.003346][T10921] lo speed is unknown, defaulting to 1000 [ 215.204842][T10932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.245003][T10932] netlink: 'syz.3.1284': attribute type 9 has an invalid length. [ 215.272794][T10936] syzkaller0: entered promiscuous mode [ 215.278619][T10936] syzkaller0: entered allmulticast mode [ 215.438713][T10945] sctp: [Deprecated]: syz.2.1287 (pid 10945) Use of int in max_burst socket option. [ 215.438713][T10945] Use struct sctp_assoc_value instead [ 215.456182][T10946] sctp: [Deprecated]: syz.2.1287 (pid 10946) Use of int in max_burst socket option. [ 215.456182][T10946] Use struct sctp_assoc_value instead [ 216.195025][T10975] __nla_validate_parse: 18 callbacks suppressed [ 216.195048][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 216.292941][T10974] syzkaller0: entered promiscuous mode [ 216.298557][T10974] syzkaller0: entered allmulticast mode [ 216.392068][T10980] lo speed is unknown, defaulting to 1000 [ 216.402326][T10990] netlink: 'syz.3.1298': attribute type 12 has an invalid length. [ 216.410635][T10990] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1298'. [ 216.435680][T10978] lo speed is unknown, defaulting to 1000 [ 216.722348][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1301'. [ 216.934739][T11008] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 216.947303][T11008] bond3 (unregistering): Released all slaves [ 217.117012][T11012] 8021q: VLANs not supported on ip6_vti0 [ 217.238569][T11021] tipc: Enabling of bearer rejected, failed to enable media [ 217.383149][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1307'. [ 218.353388][T11075] lo speed is unknown, defaulting to 1000 [ 218.360617][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1320'. [ 218.414874][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 218.839522][T11110] pim6reg1: entered promiscuous mode [ 218.858325][T11110] pim6reg1: entered allmulticast mode [ 219.427252][T11126] lo speed is unknown, defaulting to 1000 [ 219.445681][T11139] pim6reg: tun_chr_ioctl cmd 1074812117 [ 219.538169][T11144] netlink: 'syz.2.1335': attribute type 1 has an invalid length. [ 219.617710][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'. [ 219.661456][T11149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1336'. [ 219.683914][T11144] bond3: entered promiscuous mode [ 219.710320][T11144] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.838447][T11142] bond3: (slave bridge6): making interface the new active one [ 219.847542][T11142] bridge6: entered promiscuous mode [ 219.870387][T11144] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1335'. [ 219.898292][T11142] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 219.908248][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1335'. [ 220.022001][T11172] netlink: 'syz.1.1341': attribute type 1 has an invalid length. [ 220.098339][T11174] gre0: entered promiscuous mode [ 220.120446][T11174] gre0: entered allmulticast mode [ 220.204749][T11179] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 220.491557][T11193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.966218][T11216] sctp: [Deprecated]: syz.4.1355 (pid 11216) Use of int in maxseg socket option. [ 220.966218][T11216] Use struct sctp_assoc_value instead [ 221.447055][T11235] batman_adv: batadv0: Adding interface: macsec1 [ 221.463473][T11235] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.490997][T11235] batman_adv: batadv0: Interface activated: macsec1 [ 221.642789][T11238] lo speed is unknown, defaulting to 1000 [ 222.027933][T11262] __nla_validate_parse: 4 callbacks suppressed [ 222.027953][T11262] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1364'. [ 222.148600][T11253] lo speed is unknown, defaulting to 1000 [ 222.359510][T11267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1365'. [ 222.374100][T11276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1369'. [ 222.383608][T11276] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1369'. [ 222.654663][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1371'. [ 222.666507][T11282] netlink: 'syz.1.1370': attribute type 4 has an invalid length. [ 222.688201][T11281] netlink: 'syz.3.1371': attribute type 2 has an invalid length. [ 222.721909][T11281] !©9: entered promiscuous mode [ 222.730564][T11281] netlink: 'syz.3.1371': attribute type 2 has an invalid length. [ 222.738859][T11281] !©9: left promiscuous mode [ 222.990926][T11293] netlink: zone id is out of range [ 222.996611][T11293] netlink: zone id is out of range [ 223.001234][T11297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1375'. [ 223.047451][T11299] netlink: 'syz.0.1374': attribute type 1 has an invalid length. [ 223.075085][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'. [ 223.091379][T11293] netlink: zone id is out of range [ 223.096551][T11293] netlink: zone id is out of range [ 223.210304][T11293] netlink: zone id is out of range [ 223.215477][T11293] netlink: zone id is out of range [ 223.262228][T11293] netlink: zone id is out of range [ 223.285715][T11293] netlink: zone id is out of range [ 223.300841][T11293] netlink: zone id is out of range [ 223.303962][T11310] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1378'. [ 223.315665][T11295] lo speed is unknown, defaulting to 1000 [ 224.242499][T11346] lo speed is unknown, defaulting to 1000 [ 224.362125][T11326] sctp: [Deprecated]: syz.2.1384 (pid 11326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.362125][T11326] Use struct sctp_sack_info instead [ 224.380466][T11326] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1384'. [ 224.391227][T11326] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1384'. [ 224.656757][T11364] lo speed is unknown, defaulting to 1000 [ 225.776698][T11416] lo speed is unknown, defaulting to 1000 [ 226.016332][T11432] lo speed is unknown, defaulting to 1000 [ 226.501086][T11444] lo speed is unknown, defaulting to 1000 [ 226.675976][T11450] netlink: 'syz.2.1414': attribute type 15 has an invalid length. [ 226.842785][T11457] netlink: 'syz.3.1417': attribute type 11 has an invalid length. [ 226.868362][T11459] sock: sock_timestamping_bind_phc: sock not bind to device [ 226.880408][T11461] lo speed is unknown, defaulting to 1000 [ 227.188569][T11473] net_ratelimit: 9 callbacks suppressed [ 227.188588][T11473] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 227.220188][T11473] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 228.131160][T11509] netlink: 'syz.2.1428': attribute type 1 has an invalid length. [ 228.138942][T11509] __nla_validate_parse: 8 callbacks suppressed [ 228.138955][T11509] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1428'. [ 228.183865][T11511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1430'. [ 228.479539][T11514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1430'. [ 228.790334][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 228.799724][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1432'. [ 228.838893][T11526] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.087383][T11543] netlink: 'syz.3.1438': attribute type 2 has an invalid length. [ 229.113610][T11543] netlink: 'syz.3.1438': attribute type 2 has an invalid length. [ 229.357302][T11551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.359652][T11552] batadv_slave_0: entered promiscuous mode [ 229.392534][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 229.495324][T11550] batadv_slave_0: left promiscuous mode [ 229.633784][T11561] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 229.684490][T11561] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1445'. [ 230.024409][T11580] tipc: Enabling of bearer rejected, failed to enable media [ 230.083423][T11585] syz.1.1452 uses old SIOCAX25GETINFO [ 230.182204][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 230.222773][T11578] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 230.302290][T11590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1454'. [ 230.485550][T11600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1456'. [ 230.598537][T11606] tun0: tun_chr_ioctl cmd 1074025675 [ 230.604632][T11606] tun0: persist enabled [ 230.609548][T11606] tun0: tun_chr_ioctl cmd 1074025675 [ 230.615363][T11606] tun0: persist enabled [ 230.620955][T11606] tun0: tun_chr_ioctl cmd 2148036234 [ 230.630505][T11606] tun0: tun_chr_ioctl cmd 1074025673 [ 231.223016][T11630] xt_HMARK: proto mask must be zero with L3 mode [ 231.316617][ T5486] veth1_macvtap: left promiscuous mode [ 231.502831][T11634] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 231.534330][T11637] lo speed is unknown, defaulting to 1000 [ 232.018088][T11663] sch_fq: defrate 4294967293 ignored. [ 232.188437][T11669] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.678929][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1476'. [ 232.902191][T11700] lo speed is unknown, defaulting to 1000 [ 233.077623][T11719] netlink: 'syz.0.1481': attribute type 1 has an invalid length. [ 233.211594][T11723] __nla_validate_parse: 2 callbacks suppressed [ 233.211614][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 233.230226][T11723] openvswitch: netlink: Missing key (keys=40, expected=80) [ 233.276486][T11724] bond5: (slave bridge5): making interface the new active one [ 233.295638][T11724] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 233.494184][T11737] netlink: 'syz.4.1485': attribute type 1 has an invalid length. [ 233.508710][T11737] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1485'. [ 233.521971][T11744] netlink: 'syz.2.1486': attribute type 3 has an invalid length. [ 233.530493][T11737] netlink: 'syz.4.1485': attribute type 1 has an invalid length. [ 233.549436][T11737] netlink: 'syz.4.1485': attribute type 8 has an invalid length. [ 233.577205][T11737] netlink: 606 bytes leftover after parsing attributes in process `syz.4.1485'. [ 233.747546][T11754] SET target dimension over the limit! [ 233.756309][T11756] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1490'. [ 233.774499][T11757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1487'. [ 233.816544][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1487'. [ 234.055796][T11771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1494'. [ 234.094547][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'. [ 234.094953][T11771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1494'. [ 234.119999][T11769] lo speed is unknown, defaulting to 1000 [ 234.316096][T11780] bond4 (unregistering): Released all slaves [ 234.621507][T11797] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.1500'. [ 235.114115][T11824] bond5: option arp_interval: invalid value (18446744073709551615) [ 235.160698][T11824] bond5: option arp_interval: allowed values 0 - 2147483647 [ 235.178937][T11824] bond5 (unregistering): Released all slaves [ 235.681341][T11849] lo speed is unknown, defaulting to 1000 [ 236.157399][T11883] xt_TPROXY: Can be used only with -p tcp or -p udp [ 236.217200][T11883] netlink: 'syz.0.1525': attribute type 3 has an invalid length. [ 236.237952][T11883] netlink: 'syz.0.1525': attribute type 1 has an invalid length. [ 236.246110][T11883] NCSI netlink: No device for ifindex 808464432 [ 236.782649][T11917] lo speed is unknown, defaulting to 1000 [ 237.035232][T11935] netlink: 'syz.4.1538': attribute type 2 has an invalid length. [ 237.197456][T11944] netlink: 'syz.4.1538': attribute type 1 has an invalid length. [ 237.231029][T11944] netlink: 'syz.4.1538': attribute type 2 has an invalid length. [ 237.620507][ T7739] page_pool_release_retry() stalled pool shutdown: id 41, 1 inflight 60 sec [ 237.737035][T11976] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 237.796289][T11969] syzkaller0: entered promiscuous mode [ 237.802059][T11969] syzkaller0: entered allmulticast mode [ 239.325134][T11973] __nla_validate_parse: 12 callbacks suppressed [ 239.325157][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 239.349218][T11980] lo speed is unknown, defaulting to 1000 [ 239.449623][T11987] syzkaller0: entered promiscuous mode [ 239.469707][T11987] syzkaller0: entered allmulticast mode [ 239.503590][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1553'. [ 239.886564][T12020] validate_nla: 5 callbacks suppressed [ 239.886587][T12020] netlink: 'syz.0.1562': attribute type 4 has an invalid length. [ 239.901538][T12020] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1562'. [ 241.194424][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1561'. [ 241.242769][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.266488][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.277896][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.286689][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.712066][T12046] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 241.886529][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1573'. [ 242.202340][T12073] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1580'. [ 242.217577][T12073] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1580'. [ 242.331148][T12084] netlink: 'syz.1.1583': attribute type 15 has an invalid length. [ 242.349645][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1582'. [ 242.498148][T12090] x_tables: duplicate underflow at hook 3 [ 242.527393][T12092] lo speed is unknown, defaulting to 1000 [ 242.627180][T12095] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1586'. [ 242.932876][T12111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 243.387920][T12131] lo speed is unknown, defaulting to 1000 [ 243.589593][T12150] netlink: 'syz.2.1600': attribute type 1 has an invalid length. [ 243.604190][T12150] netlink: 'syz.2.1600': attribute type 2 has an invalid length. [ 243.723824][T12154] lo speed is unknown, defaulting to 1000 [ 244.427312][T12199] __nla_validate_parse: 5 callbacks suppressed [ 244.427334][T12199] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1608'. [ 244.488549][T12199] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1608'. [ 245.117611][T12234] lo speed is unknown, defaulting to 1000 [ 245.306679][T12251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1616'. [ 245.357895][T12245] lo speed is unknown, defaulting to 1000 [ 245.366629][T12251] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1616'. [ 245.413278][T12255] nbd: socks must be embedded in a SOCK_ITEM attr [ 245.421403][T12255] block nbd0: shutting down sockets [ 245.806972][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1619'. [ 246.081116][T12288] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 246.187887][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 246.358692][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'. [ 246.568095][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'. [ 246.610162][T12318] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1627'. [ 246.773745][T12326] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1627'. [ 246.848913][T12325] lo speed is unknown, defaulting to 1000 [ 247.314402][T12338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.375851][T12342] lo speed is unknown, defaulting to 1000 [ 247.750352][T12353] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 248.001384][T12361] batman_adv: batadv0: Adding interface: macsec2 [ 248.008040][T12361] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 248.052822][T12361] batman_adv: batadv0: Interface activated: macsec2 [ 248.158139][T12371] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.233275][T12376] tipc: Enabled bearer , priority 0 [ 248.241778][T12376] syzkaller0: entered promiscuous mode [ 248.247328][T12376] syzkaller0: entered allmulticast mode [ 248.268755][T12376] tipc: Resetting bearer [ 248.315141][T12375] tipc: Resetting bearer [ 248.404418][T12375] tipc: Disabling bearer [ 248.753029][T12387] syzkaller0: entered promiscuous mode [ 248.758573][T12387] syzkaller0: entered allmulticast mode [ 248.858981][T12392] lo speed is unknown, defaulting to 1000 [ 249.083963][T12400] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20000 [ 249.407892][T12409] vlan0: entered promiscuous mode [ 249.413295][T12409] syz_tun: entered promiscuous mode [ 249.498757][T12410] netlink: 'syz.0.1648': attribute type 13 has an invalid length. [ 249.708194][T12430] netlink: 'syz.1.1652': attribute type 1 has an invalid length. [ 249.789143][T12434] bond6: (slave dummy0): making interface the new active one [ 249.797936][T12434] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 249.811107][T12430] __nla_validate_parse: 6 callbacks suppressed [ 249.811129][T12430] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1652'. [ 249.863090][T12430] bond6: (slave dummy0): Releasing active interface [ 250.071174][T12445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.119906][T12445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.145063][T12445] hsr0: entered promiscuous mode [ 250.151399][T12445] hsr0: entered allmulticast mode [ 250.157029][T12445] hsr_slave_0: entered allmulticast mode [ 250.163817][T12445] hsr_slave_1: entered allmulticast mode [ 250.273406][T12447] lo speed is unknown, defaulting to 1000 [ 250.616241][T12453] netlink: 'syz.0.1658': attribute type 1 has an invalid length. [ 251.244970][ T51] block nbd0: Receive control failed (result -32) [ 251.347460][T12468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1661'. [ 251.691017][T12478] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1663'. [ 251.787688][T12475] lo speed is unknown, defaulting to 1000 [ 251.886863][T12482] 8021q: VLANs not supported on lo [ 252.347194][T12500] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 252.634171][T12504] lo speed is unknown, defaulting to 1000 [ 252.682382][T12515] netlink: 'syz.3.1674': attribute type 1 has an invalid length. [ 252.701284][T12515] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1674'. [ 252.720703][T12515] netlink: 658 bytes leftover after parsing attributes in process `syz.3.1674'. [ 252.777587][T12515] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1674'. [ 253.489303][T12558] netlink: 'syz.1.1685': attribute type 3 has an invalid length. [ 253.576304][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1685'. [ 253.799428][T12568] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 253.810717][T12566] ipt_REJECT: TCP_RESET invalid for non-tcp [ 253.858000][T12568] bond5: entered promiscuous mode [ 253.866131][T12568] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.988167][T12568] bond5: (slave bridge5): making interface the new active one [ 254.023120][T12568] bridge5: entered promiscuous mode [ 254.030418][T12578] netlink: 'syz.0.1690': attribute type 1 has an invalid length. [ 254.039276][T12568] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 254.537760][T12578] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 254.650135][T12583] lo speed is unknown, defaulting to 1000 [ 255.026499][T12598] lo speed is unknown, defaulting to 1000 [ 255.374165][T12623] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1699'. [ 255.789692][ T1298] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 256.074961][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'. [ 256.096052][T12633] bpq0: entered promiscuous mode [ 256.564887][T12646] netlink: 'syz.1.1707': attribute type 1 has an invalid length. [ 256.937165][T12652] lo speed is unknown, defaulting to 1000 [ 257.410295][T12667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1711'. [ 257.577099][T12670] netlink: 'syz.2.1713': attribute type 1 has an invalid length. [ 258.452720][T12704] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 258.519151][T12709] lo speed is unknown, defaulting to 1000 [ 259.835057][T12750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1733'. [ 259.844542][T12750] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1733'. [ 260.011372][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1734'. [ 260.153562][T12757] lo speed is unknown, defaulting to 1000 [ 260.330765][T12770] tc_dump_action: action bad kind [ 260.478331][T12764] lo speed is unknown, defaulting to 1000 [ 261.019434][T12794] netlink: 'syz.0.1744': attribute type 2 has an invalid length. [ 261.036784][T12794] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1744'. [ 261.520346][T12809] syzkaller1: entered promiscuous mode [ 261.545624][T12809] syzkaller1: entered allmulticast mode [ 261.586317][T12814] SET target dimension over the limit! [ 261.723827][T12804] tipc: Enabled bearer , priority 0 [ 261.731424][T12804] syzkaller0: entered promiscuous mode [ 261.736936][T12804] syzkaller0: entered allmulticast mode [ 261.760029][T12801] tipc: Resetting bearer [ 261.841137][T12801] tipc: Disabling bearer [ 261.888870][T12822] openvswitch: netlink: Duplicate or invalid key (type 0). [ 261.894241][T12824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1753'. [ 261.910972][T12822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.088669][T12834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1756'. [ 262.314369][T12845] SET target dimension over the limit! [ 262.466457][T12852] netlink: 'syz.2.1764': attribute type 10 has an invalid length. [ 262.487788][T12852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.528005][T12852] .`: (slave batadv0): Enslaving as an active interface with an up link [ 262.611377][T12852] bond1: (slave .`): Releasing active interface [ 262.635259][T12852] wlan1: mtu less than device minimum [ 262.673394][T12852] dummy0: left allmulticast mode [ 262.678405][T12852] dummy0: left promiscuous mode [ 262.684498][T12852] bridge0: port 3(dummy0) entered disabled state [ 262.700980][T12864] x_tables: duplicate underflow at hook 3 [ 262.711787][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1768'. [ 262.752470][T12852] .`: (slave batadv0): Releasing backup interface [ 262.770595][T12852] bridge_slave_0: left allmulticast mode [ 262.774466][T12868] netlink: 'syz.1.1770': attribute type 11 has an invalid length. [ 262.776541][T12852] bridge_slave_0: left promiscuous mode [ 262.784586][T12868] netlink: 'syz.1.1770': attribute type 11 has an invalid length. [ 262.799156][T12852] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.825244][T12852] bridge_slave_1: left allmulticast mode [ 262.831312][T12852] bridge_slave_1: left promiscuous mode [ 262.837277][T12852] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.843029][T12868] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1770'. [ 262.862908][T12852] .`: (slave bond_slave_0): Releasing backup interface [ 262.873349][T12852] .`: (slave bond_slave_1): Releasing backup interface [ 262.882500][T12852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.891073][T12852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.903469][T12852] .`: (slave wlan1): Releasing backup interface [ 262.916733][T12852] bond0: (slave geneve3): Releasing active interface [ 262.935079][T12852] bond3: (slave bridge6): Releasing backup interface [ 262.942563][T12852] bridge6: left promiscuous mode [ 263.084968][T12878] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1773'. [ 263.319925][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1780'. [ 263.346277][T12899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1780'. [ 263.395062][T12902] syzkaller1: entered promiscuous mode [ 263.402269][T12902] syzkaller1: entered allmulticast mode [ 263.413566][T12903] lo speed is unknown, defaulting to 1000 [ 263.447276][T12905] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 263.595113][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1781'. [ 263.786187][T12919] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.883745][T12919] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.947341][T12921] syzkaller1: entered allmulticast mode [ 263.988414][T12919] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.102227][T12919] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.214226][T12938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1788'. [ 264.400795][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.495221][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.536182][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.631117][ T6418] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.892451][T12970] sctp: [Deprecated]: syz.2.1799 (pid 12970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.892451][T12970] Use struct sctp_sack_info instead [ 265.005598][T12983] bridge6: entered promiscuous mode [ 265.013811][T12983] bridge6: entered allmulticast mode [ 265.044444][T12983] veth0_to_team: left promiscuous mode [ 265.050055][T12983] veth0_to_team: left allmulticast mode [ 265.122350][T12983] bond2: left promiscuous mode [ 265.127954][T12983] ip6gre1: left promiscuous mode [ 265.137453][T12983] ip6gre1: left allmulticast mode [ 265.179357][T12983] ip6gre2: left promiscuous mode [ 265.192898][T12983] ip6gre2: left allmulticast mode [ 265.276154][T12983] batman_adv: batadv0: Interface deactivated: macsec1 [ 265.338962][T12983] vlan0: left promiscuous mode [ 265.358453][T12983] syz_tun: left promiscuous mode [ 265.376950][T12983] bridge6: left promiscuous mode [ 265.390855][T12983] bridge6: left allmulticast mode [ 265.396651][ T49] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.406793][ T49] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.421737][ T49] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.431738][ T49] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.746819][T13010] tipc: Resetting bearer [ 265.772130][ T5887] lo speed is unknown, defaulting to 1000 [ 266.078087][T13020] syzkaller0: entered allmulticast mode [ 266.120531][T13020] syzkaller0 (unregistering): left allmulticast mode [ 266.177211][T13026] tipc: Enabled bearer , priority 0 [ 266.185716][T13023] xt_cgroup: path and classid specified [ 266.211003][T13026] syzkaller0: entered promiscuous mode [ 266.217065][T13026] syzkaller0: entered allmulticast mode [ 266.268011][T13026] tipc: Resetting bearer [ 266.311357][T13025] tipc: Resetting bearer [ 266.347774][T13025] tipc: Disabling bearer [ 266.360697][T13032] netlink: 'syz.0.1816': attribute type 9 has an invalid length. [ 266.369477][T13032] netlink: 'syz.0.1816': attribute type 11 has an invalid length. [ 266.378471][T13032] netlink: 'syz.0.1816': attribute type 12 has an invalid length. [ 266.388182][T13032] __nla_validate_parse: 35 callbacks suppressed [ 266.388200][T13032] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.1816'. [ 266.407337][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1816'. [ 266.445250][ T9389] lo speed is unknown, defaulting to 1000 [ 266.673706][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 266.704484][T13051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'. [ 266.769582][T13052] lo speed is unknown, defaulting to 1000 [ 267.327066][T13074] x_tables: duplicate underflow at hook 2 [ 267.602766][T13087] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1828'. [ 267.766062][T13093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1830'. [ 267.994885][T13109] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1832'. [ 268.067254][T13115] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1831'. [ 268.135924][T13115] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1831'. [ 268.171514][T13117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1834'. [ 268.193703][T13107] netlink: 'syz.1.1831': attribute type 12 has an invalid length. [ 269.568010][T13144] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.700465][T13144] bridge3: port 1(bridge_slave_1) entered disabled state [ 269.771809][T13144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.810816][T13144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.043113][T13144] batman_adv: batadv0: Interface deactivated: macsec2 [ 270.091528][ T6426] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.100250][ T6426] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.140654][ T6426] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.170091][ T6426] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.341263][T13214] batadv_slave_0: entered promiscuous mode [ 271.376211][T13214] batadv_slave_0: left promiscuous mode [ 271.401147][T13218] netlink: 'syz.3.1859': attribute type 21 has an invalid length. [ 271.409800][T13218] __nla_validate_parse: 5 callbacks suppressed [ 271.409818][T13218] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1859'. [ 271.448373][T13218] netlink: 'syz.3.1859': attribute type 4 has an invalid length. [ 271.475704][T13221] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 271.505149][T13218] netlink: 'syz.3.1859': attribute type 5 has an invalid length. [ 271.532733][T13218] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1859'. [ 271.992711][T13246] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1865'. [ 272.036860][T13246] netlink: 'syz.1.1865': attribute type 1 has an invalid length. [ 272.058696][T13246] bridge0: entered promiscuous mode [ 272.064223][T13246] bridge0: entered allmulticast mode [ 272.251274][T13252] pim6reg: entered allmulticast mode [ 272.258443][T13252] pim6reg: left allmulticast mode [ 273.048372][T13263] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1869'. [ 273.074665][T13263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1869'. [ 273.565191][T13286] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1875'. [ 273.644492][T13286] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 273.800178][T13299] openvswitch: netlink: Flow key attr not present in new flow. [ 273.846454][T13283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.865398][T13301] netlink: 'syz.1.1879': attribute type 13 has an invalid length. [ 273.911204][T13304] siw: device registration error -23 [ 273.932383][ T6418] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.941226][T13301] netlink: 'syz.1.1879': attribute type 13 has an invalid length. [ 273.953243][ T6418] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.991745][ T6418] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.003735][ T6418] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.015223][T13304] : renamed from bond_slave_0 [ 274.038836][T13304] syzkaller0: entered promiscuous mode [ 274.054919][T13304] syzkaller0: entered allmulticast mode [ 274.444301][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'. [ 274.467383][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 274.929137][T13342] SET target dimension over the limit! [ 275.090461][T13348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1893'. [ 275.442520][T13364] IPv6: Can't replace route, no match found [ 275.830639][T13379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.889643][T13383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.049339][T13391] netlink: 'syz.1.1905': attribute type 3 has an invalid length. [ 276.066492][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'. [ 276.105027][T13394] netlink: 'syz.1.1905': attribute type 1 has an invalid length. [ 276.113283][T13394] netlink: 'syz.1.1905': attribute type 2 has an invalid length. [ 276.703074][T13431] xt_cgroup: xt_cgroup: no path or classid specified [ 276.718770][T13428] netlink: 'syz.4.1916': attribute type 1 has an invalid length. [ 276.718929][T13433] SET target dimension over the limit! [ 276.834589][T13441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1916'. [ 276.864105][T13441] 8021q: adding VLAN 0 to HW filter on device bond5 [ 277.146576][T13451] can: request_module (can-proto-5) failed. [ 277.212376][T13448] syzkaller0: entered promiscuous mode [ 277.224716][T13448] syzkaller0: entered allmulticast mode [ 277.255491][T13458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.816411][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'. [ 279.085156][T13462] pimreg: entered allmulticast mode [ 279.099207][T13469] macsec1: entered allmulticast mode [ 279.105500][T13469] dummy0: entered allmulticast mode [ 279.121049][T13469] dummy0: left allmulticast mode [ 279.180809][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 279.375524][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'. [ 279.410281][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1935'. [ 279.470713][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1935'. [ 279.781467][T13524] sctp: [Deprecated]: syz.4.1943 (pid 13524) Use of int in maxseg socket option. [ 279.781467][T13524] Use struct sctp_assoc_value instead [ 280.388347][T13540] can: request_module (can-proto-0) failed. [ 281.036581][T13578] sctp: [Deprecated]: syz.0.1959 (pid 13578) Use of int in max_burst socket option. [ 281.036581][T13578] Use struct sctp_assoc_value instead [ 281.280876][T13584] batman_adv: batadv0: Adding interface: macvtap1 [ 281.291875][T13584] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 281.315729][T13584] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 281.349518][T13592] C: renamed from team_slave_0 [ 281.361915][T13592] netlink: 'syz.0.1964': attribute type 4 has an invalid length. [ 281.385276][T13592] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1964'. [ 281.398981][T13584] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1961'. [ 281.408686][T13592] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 281.468197][T13599] netlink: 'syz.3.1965': attribute type 1 has an invalid length. [ 281.503078][T13599] bond7: entered promiscuous mode [ 281.508572][T13599] bond7: entered allmulticast mode [ 281.533644][T13599] 8021q: adding VLAN 0 to HW filter on device bond7 [ 281.639430][T13602] erspan1: entered allmulticast mode [ 281.713633][T13602] bond7: (slave erspan1): making interface the new active one [ 281.766254][T13602] erspan1: entered promiscuous mode [ 281.775620][T13602] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 281.835982][T13608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.182484][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1973'. [ 282.279317][T13649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1978'. [ 282.312829][T13653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1980'. [ 282.532516][T13670] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1983'. [ 282.561189][T13670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1983'. [ 282.583381][T13670] openvswitch: netlink: Flow key attr not present in new flow. [ 282.946869][T13681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1987'. [ 283.010671][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'. [ 283.233881][T13693] netlink: 'syz.2.1990': attribute type 4 has an invalid length. [ 283.242733][T13693] netlink: 'syz.2.1990': attribute type 1 has an invalid length. [ 283.251703][T13693] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1990'. [ 283.270481][T13693] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1990'. [ 283.416290][T13699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1992'. [ 283.440975][T13699] xt_hashlimit: size too large, truncated to 1048576 [ 283.990622][T13728] netlink: 'syz.1.2000': attribute type 5 has an invalid length. [ 284.051029][T13732] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 284.272339][T13744] 8021q: VLANs not supported on caif0 [ 284.304367][T13746] netlink: 'syz.4.2004': attribute type 64 has an invalid length. [ 284.748277][T13770] sit0: entered allmulticast mode [ 284.876474][T13776] openvswitch: netlink: Actions may not be safe on all matching packets [ 285.028145][T13783] netlink: 'syz.0.2015': attribute type 1 has an invalid length. [ 285.065806][T13783] bond6: entered promiscuous mode [ 285.071561][T13783] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.119469][T13787] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.129071][T13787] bond6: (slave bond7): making interface the new active one [ 285.137060][T13787] bond7: entered promiscuous mode [ 285.143718][T13787] bond6: (slave bond7): Enslaving as an active interface with an up link [ 285.413671][T13801] xt_CT: No such helper "snmp_trap" [ 285.417900][T13803] lo speed is unknown, defaulting to 1000 [ 285.947299][T13816] lo speed is unknown, defaulting to 1000 [ 285.962669][T13815] netlink: 'syz.0.2024': attribute type 10 has an invalid length. [ 285.988669][T13815] bond0: entered promiscuous mode [ 285.995443][T13815] bond_slave_0: entered promiscuous mode [ 286.002228][T13815] bond_slave_1: entered promiscuous mode [ 286.009641][T13815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.017261][T13815] bridge0: port 3(bond0) entered blocking state [ 286.024732][T13815] bridge0: port 3(bond0) entered disabled state [ 286.033260][T13815] bond0: entered allmulticast mode [ 286.038513][T13815] bond_slave_0: entered allmulticast mode [ 286.044867][T13815] bond_slave_1: entered allmulticast mode [ 286.051299][T13815] syz_tun: entered allmulticast mode [ 286.090846][T13829] Cannot find del_set index 0 as target [ 286.172653][T13824] lo speed is unknown, defaulting to 1000 [ 286.292054][T13828] 8021q: adding VLAN 0 to HW filter on device ` [ 286.307109][T13828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.339191][ T5887] lo speed is unknown, defaulting to 1000 [ 286.367954][ T5887] syz2: Port: 1 Link ACTIVE [ 286.615989][T13826] syzkaller0: entered promiscuous mode [ 286.624149][T13826] syzkaller0: entered allmulticast mode [ 287.306761][T13877] bpq0: left promiscuous mode [ 287.336658][T13877] __nla_validate_parse: 10 callbacks suppressed [ 287.336680][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2040'. [ 287.457804][T13884] netlink: 'syz.3.2043': attribute type 10 has an invalid length. [ 287.970461][T13907] lo speed is unknown, defaulting to 1000 [ 287.976503][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2049'. [ 288.025490][T13911] netlink: 'syz.4.2049': attribute type 11 has an invalid length. [ 288.036073][T13911] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.2049'. [ 288.198783][T13921] netlink: 'syz.4.2053': attribute type 30 has an invalid length. [ 288.387100][T13929] smc: net device wlan0 applied user defined pnetid SYZ0 [ 288.669352][T13937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2059'. [ 288.884089][T13949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.265175][T13968] netlink: 'syz.0.2068': attribute type 27 has an invalid length. [ 289.279947][T13968] netlink: 'syz.0.2068': attribute type 1 has an invalid length. [ 289.287797][T13966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2067'. [ 289.322118][T13968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2068'. [ 289.330813][T13974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2070'. [ 289.343986][T13975] netlink: 'syz.4.2071': attribute type 11 has an invalid length. [ 289.355452][T13966] Bluetooth: MGMT ver 1.23 [ 289.361349][T13975] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2071'. [ 289.372098][T13966] Bluetooth: hci1: too big key_count value 59393 [ 289.388845][T13975] netlink: 'syz.4.2071': attribute type 11 has an invalid length. [ 289.461001][T13975] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2071'. [ 289.564400][T13988] netlink: 'syz.1.2073': attribute type 21 has an invalid length. [ 289.650529][T13988] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2073'. [ 289.659674][T13988] netlink: 'syz.1.2073': attribute type 5 has an invalid length. [ 289.684432][T13993] tipc: Enabling of bearer rejected, already enabled [ 289.716544][T13984] syzkaller1: entered promiscuous mode [ 289.732034][T13984] syzkaller1: entered allmulticast mode [ 290.081236][T14011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.264491][T14015] lo speed is unknown, defaulting to 1000 [ 291.085956][T14065] macsec2: entered allmulticast mode [ 291.092698][T14065] dummy0: entered allmulticast mode [ 291.092832][T14068] ip6t_rpfilter: unknown options [ 291.104388][T14065] dummy0: left allmulticast mode [ 291.129131][T14064] macsec2: entered allmulticast mode [ 291.135177][T14064] dummy0: entered allmulticast mode [ 291.157389][T14064] dummy0: left allmulticast mode [ 291.187564][T14077] netem: incorrect ge model size [ 291.503388][T14082] pim6reg1: entered promiscuous mode [ 291.508892][T14082] pim6reg1: entered allmulticast mode [ 291.661515][T14100] netlink: 'syz.0.2105': attribute type 11 has an invalid length. [ 292.115480][T14117] 8021q: adding VLAN 0 to HW filter on device bond8 [ 292.126831][T14119] mac80211_hwsim hwsim31 wlan1: Device is already in use. [ 292.417967][T14136] __nla_validate_parse: 6 callbacks suppressed [ 292.417991][T14136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2115'. [ 292.482919][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2115'. [ 292.651813][T14148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2118'. [ 292.704413][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2119'. [ 293.107366][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2124'. [ 293.148175][T14167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2125'. [ 293.308479][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 293.337424][T14174] openvswitch: netlink: IP tunnel dst address not specified [ 293.407724][T14172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 293.795519][T14201] netlink: 'syz.1.2132': attribute type 1 has an invalid length. [ 293.824444][T14201] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2132'. [ 293.933407][ T6411] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.942298][ T6411] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.986931][ T6411] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.007428][ T6411] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.071787][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2134'. [ 294.285946][T14209] 8021q: adding VLAN 0 to HW filter on device bond9 [ 294.303207][T14211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2135'. [ 294.341474][T14212] macsec1: entered promiscuous mode [ 294.352649][T14212] bond9: entered promiscuous mode [ 294.456708][T14212] bond9: left promiscuous mode [ 294.744568][T14218] macsec1: entered promiscuous mode [ 294.750221][T14218] bridge0: entered promiscuous mode [ 295.037416][T14234] No such timeout policy "syz1" [ 295.067712][T14234] macsec0: entered promiscuous mode [ 295.073881][T14234] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 295.119026][T14236] lo speed is unknown, defaulting to 1000 [ 295.269630][T14240] xt_CT: No such helper "syz1" [ 295.312867][T14245] netlink: 'syz.1.2141': attribute type 13 has an invalid length. [ 296.316041][T14279] netlink: 'syz.2.2150': attribute type 3 has an invalid length. [ 296.406479][T14281] netlink: 'syz.1.2151': attribute type 1 has an invalid length. [ 297.322284][T14308] bridge_slave_0 (unregistering): left allmulticast mode [ 297.338381][T14308] bridge_slave_0 (unregistering): left promiscuous mode [ 297.357229][T14308] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.549382][T14318] netlink: 'syz.1.2161': attribute type 10 has an invalid length. [ 297.586943][T14318] bridge0: left promiscuous mode [ 297.625105][T14318] bridge0: left allmulticast mode [ 297.697786][T14325] __nla_validate_parse: 8 callbacks suppressed [ 297.697806][T14325] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2163'. [ 297.904136][T14336] netlink: 'syz.4.2163': attribute type 11 has an invalid length. [ 297.912282][T14336] netlink: 'syz.4.2163': attribute type 23 has an invalid length. [ 297.921110][T14336] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2163'. [ 298.062022][T14339] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 298.760147][T14338] netdevsim0: renamed from batadv0 [ 299.152185][T14338] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 299.209556][T14340] gretap1: entered promiscuous mode [ 299.591484][T14352] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2168'. [ 299.672232][T14349] lo speed is unknown, defaulting to 1000 [ 299.923503][T14357] siw: device registration error -23 [ 300.074468][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2172'. [ 300.658166][T14378] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2175'. [ 300.741245][T14381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.819199][T14384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2175'. [ 300.948429][T14230] Set syz1 is full, maxelem 65536 reached [ 301.656937][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2184'. [ 301.801492][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2187'. [ 301.900266][T14427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2189'. [ 302.026057][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2191'. [ 302.080339][T14427] 8021q: adding VLAN 0 to HW filter on device bond5 [ 302.792667][T14472] __nla_validate_parse: 2 callbacks suppressed [ 302.792689][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2202'. [ 303.062822][T14492] netlink: 'syz.3.2205': attribute type 1 has an invalid length. [ 303.243531][T14499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2208'. [ 303.264596][T14499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2208'. [ 303.495214][T14505] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2210'. [ 303.575147][T14509] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 303.775542][T14505] .` (unregistering): Released all slaves [ 303.808143][T14510] tipc: New replicast peer: 255.255.255.255 [ 303.881005][T14510] tipc: Enabled bearer , priority 10 [ 304.025110][T14521] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2214'. [ 304.096491][T14527] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2216'. [ 304.575201][T14547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 304.585039][T14547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 305.220518][T14572] netlink: 'syz.0.2225': attribute type 1 has an invalid length. [ 305.350819][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2227'. [ 305.422021][T14572] bond10: entered promiscuous mode [ 305.427978][T14572] 8021q: adding VLAN 0 to HW filter on device bond10 [ 305.770767][T14581] 8021q: adding VLAN 0 to HW filter on device bond9 [ 305.856496][T14572] syzkaller1: entered promiscuous mode [ 305.862745][T14572] syzkaller1: entered allmulticast mode [ 306.100362][T14614] netlink: 'syz.1.2233': attribute type 2 has an invalid length. [ 306.118553][T14615] netlink: 'syz.1.2233': attribute type 2 has an invalid length. [ 306.551512][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2238'. [ 307.142859][T14662] syzkaller0: entered promiscuous mode [ 307.148416][T14662] syzkaller0: entered allmulticast mode [ 308.502680][T14710] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 308.508970][T14710] syzkaller1: linktype set to 768 [ 308.983477][T14721] __nla_validate_parse: 3 callbacks suppressed [ 308.983501][T14721] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2255'. [ 309.000519][T14721] ksmbd: Unknown IPC event: 1, ignore. [ 310.933514][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 310.963352][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 311.003239][T14765] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.032580][T14765] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.047259][T14765] bridge_slave_0: entered allmulticast mode [ 311.062086][T14765] bridge_slave_0: entered promiscuous mode [ 311.520152][T14785] syzkaller1: entered promiscuous mode [ 311.525785][T14785] syzkaller1: entered allmulticast mode [ 311.546551][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2273'. [ 311.607673][T14787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.619406][T14788] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20004 [ 311.747585][T14785] bond7 (unregistering): Released all slaves [ 311.990047][T14803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.008444][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2275'. [ 312.084191][T14803] sctp: [Deprecated]: syz.1.2278 (pid 14803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.084191][T14803] Use struct sctp_sack_info instead [ 312.333684][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2282'. [ 312.716591][T14829] syzkaller1: entered promiscuous mode [ 312.722654][T14829] syzkaller1: entered allmulticast mode [ 313.081403][T14840] netlink: 'syz.1.2290': attribute type 1 has an invalid length. [ 313.173350][T14844] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 313.272916][T14848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2292'. [ 313.274351][T14849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2292'. [ 313.413155][T14848] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2292'. [ 313.422792][T14848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2292'. [ 313.798642][T14866] netlink: 'syz.4.2297': attribute type 61 has an invalid length. [ 313.818664][T14866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.885830][T14866] netlink: 'syz.4.2297': attribute type 12 has an invalid length. [ 314.137952][T14876] tipc: Enabling of bearer rejected, already enabled [ 314.346772][T14881] bridge7: entered promiscuous mode [ 314.681830][T14895] netlink: 'syz.2.2308': attribute type 11 has an invalid length. [ 314.690099][T14895] netlink: 'syz.2.2308': attribute type 23 has an invalid length. [ 314.698117][T14895] __nla_validate_parse: 13 callbacks suppressed [ 314.698133][T14895] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2308'. [ 314.994136][T14914] batadv_slave_1: entered promiscuous mode [ 315.013400][T14915] netlink: 'syz.0.2312': attribute type 1 has an invalid length. [ 315.031550][T14914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2313'. [ 315.054597][T14914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.070321][T14914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.093910][T14914] bond0 (unregistering): Released all slaves [ 315.192664][T14913] batadv_slave_1: left promiscuous mode [ 315.214534][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2314'. [ 315.225523][T14921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2315'. [ 315.236779][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'. [ 315.248755][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'. [ 315.315696][T14928] xt_limit: Overflow, try lower: 268435456/134217728 [ 315.337310][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2316'. [ 315.356234][T14921] xt_limit: Overflow, try lower: 268435456/134217728 [ 315.368640][T14934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2317'. [ 315.399081][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2316'. [ 315.632672][T14945] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2319'. [ 315.654351][T14944] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 315.695701][T14944] syzkaller1: linktype set to 825 [ 316.140512][T14970] netlink: 'syz.1.2325': attribute type 4 has an invalid length. [ 316.209111][T14975] ip6t_srh: unknown srh match flags 4000 [ 316.224922][T14976] netlink: 'syz.1.2325': attribute type 4 has an invalid length. [ 316.285349][T14978] openvswitch: netlink: Flow key attr not present in new flow. [ 316.322759][T14974] tipc: Enabling of bearer rejected, failed to enable media [ 316.850380][T15003] netlink: 'syz.1.2335': attribute type 11 has an invalid length. [ 317.228093][ T1298] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 317.503707][T15028] netlink: 'syz.4.2342': attribute type 2 has an invalid length. [ 317.512016][T15028] netlink: 'syz.4.2342': attribute type 2 has an invalid length. [ 317.826563][T15037] netlink: 'syz.3.2345': attribute type 1 has an invalid length. [ 318.014945][T15010] delete_channel: no stack [ 318.376727][T15054] netlink: 'syz.3.2349': attribute type 16 has an invalid length. [ 318.412943][T15054] netlink: 'syz.3.2349': attribute type 17 has an invalid length. [ 318.494340][T15073] vlan1: entered allmulticast mode [ 318.525496][T15073] bridge_slave_0: entered allmulticast mode [ 318.738808][T15054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.750975][T15054] team0: left promiscuous mode [ 318.756140][T15054] team_slave_0: left promiscuous mode [ 318.779465][T15054] team_slave_1: left promiscuous mode [ 318.793608][T15054] veth3: left promiscuous mode [ 318.811573][T15054] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.833488][T15054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.891353][ T57] bond0: (slave 30): link status definitely down, disabling slave [ 318.920280][ T57] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 319.030651][T15094] sctp: [Deprecated]: syz.2.2361 (pid 15094) Use of int in max_burst socket option. [ 319.030651][T15094] Use struct sctp_assoc_value instead [ 319.315957][T15102] tipc: Enabled bearer , priority 0 [ 319.361542][T15102] syzkaller0: entered promiscuous mode [ 319.431281][T15102] syzkaller0: entered allmulticast mode [ 319.477209][T15102] tipc: Resetting bearer [ 319.503311][T15101] tipc: Resetting bearer [ 319.560429][T15101] tipc: Disabling bearer [ 319.778247][T15119] netlink: 'syz.3.2368': attribute type 1 has an invalid length. [ 319.868698][T15119] bond8: entered promiscuous mode [ 319.890285][T15119] 8021q: adding VLAN 0 to HW filter on device bond8 [ 319.909341][T15123] __nla_validate_parse: 12 callbacks suppressed [ 319.909361][T15123] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2369'. [ 319.925342][T15126] bond8: (slave bridge7): making interface the new active one [ 319.933985][T15126] bridge7: entered promiscuous mode [ 319.941842][T15126] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 319.962131][T15123] netlink: 'syz.0.2369': attribute type 9 has an invalid length. [ 319.970370][T15123] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2369'. [ 319.980190][T15123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2369'. [ 320.092568][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2370'. [ 320.143421][T15137] netlink: 'syz.1.2371': attribute type 11 has an invalid length. [ 320.205315][T15142] dummy0: entered promiscuous mode [ 320.212135][T15147] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2372'. [ 320.221255][T15142] dummy0: entered allmulticast mode [ 320.221333][T15147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2372'. [ 320.252347][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2373'. [ 320.274741][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2373'. [ 320.376422][T15153] bond0: option ad_select: invalid value (34) [ 320.384680][T15153] bond0 (unregistering): Released all slaves [ 320.548637][T15158] xt_CT: No such helper "netbios-ns" [ 320.571130][T15164] netlink: 556 bytes leftover after parsing attributes in process `syz.2.2378'. [ 320.803096][T15171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2381'. [ 320.934115][T15179] netlink: 'syz.2.2381': attribute type 1 has an invalid length. [ 321.176363][T15195] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 321.183661][ T6426] [ 321.189112][ T6426] ============================================ [ 321.195279][ T6426] WARNING: possible recursive locking detected [ 321.201464][ T6426] syzkaller #0 Not tainted [ 321.205986][ T6426] -------------------------------------------- [ 321.212161][ T6426] kworker/u8:19/6426 is trying to acquire lock: [ 321.218419][ T6426] ffff888026baa958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 321.228318][ T6426] [ 321.228318][ T6426] but task is already holding lock: [ 321.235784][ T6426] ffff88805ab44558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 321.245813][ T6426] [ 321.245813][ T6426] other info that might help us debug this: [ 321.254565][ T6426] Possible unsafe locking scenario: [ 321.254565][ T6426] [ 321.262186][ T6426] CPU0 [ 321.265467][ T6426] ---- [ 321.268747][ T6426] lock(&qdisc_xmit_lock_key#4); [ 321.273865][ T6426] lock(&qdisc_xmit_lock_key#4); [ 321.278986][ T6426] [ 321.278986][ T6426] *** DEADLOCK *** [ 321.278986][ T6426] [ 321.287566][ T6426] May be due to missing lock nesting notation [ 321.287566][ T6426] [ 321.295882][ T6426] 11 locks held by kworker/u8:19/6426: [ 321.301607][ T6426] #0: ffff88807a625948 ((wq_completion)bond7){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 321.312980][ T6426] #1: ffffc9001b697c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 321.326238][ T6426] #2: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 321.337418][ T6426] #3: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28b/0x3870 [ 321.347531][ T6426] #4: ffff88805cc63228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x114b/0x3870 [ 321.360519][ T6426] #5: ffff88805ab44558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 321.370832][ T6426] #6: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 321.379725][ T6426] #7: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 321.389571][ T6426] #8: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 321.398372][ T6426] #9: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28b/0x3870 [ 321.408297][ T6426] #10: ffff88805b725228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x114b/0x3870 [ 321.421298][ T6426] [ 321.421298][ T6426] stack backtrace: [ 321.427289][ T6426] CPU: 1 UID: 0 PID: 6426 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 321.427308][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.427320][ T6426] Workqueue: bond7 bond_alb_monitor [ 321.427338][ T6426] Call Trace: [ 321.427346][ T6426] [ 321.427354][ T6426] dump_stack_lvl+0xe8/0x150 [ 321.427377][ T6426] print_deadlock_bug+0x279/0x290 [ 321.427401][ T6426] __lock_acquire+0x253f/0x2cf0 [ 321.427421][ T6426] ? skb_network_protocol+0x23d/0x3f0 [ 321.427438][ T6426] ? netif_skb_features+0x9bc/0xe40 [ 321.427453][ T6426] ? ret_from_fork_asm+0x1a/0x30 [ 321.427483][ T6426] ? validate_xmit_skb+0xc5f/0x14a0 [ 321.427500][ T6426] lock_acquire+0xf0/0x2e0 [ 321.427518][ T6426] ? sch_direct_xmit+0x15f/0x4c0 [ 321.427540][ T6426] _raw_spin_lock+0x2e/0x40 [ 321.427559][ T6426] ? sch_direct_xmit+0x15f/0x4c0 [ 321.427576][ T6426] sch_direct_xmit+0x15f/0x4c0 [ 321.427597][ T6426] ? __pfx_sch_direct_xmit+0x10/0x10 [ 321.427615][ T6426] ? arp_create+0x150/0xa00 [ 321.427635][ T6426] ? arp_send_dst+0xa7/0x2a0 [ 321.427658][ T6426] __dev_queue_xmit+0x1b20/0x3870 [ 321.427678][ T6426] ? __dev_queue_xmit+0x28b/0x3870 [ 321.427696][ T6426] ? arpt_do_table+0x261/0x1ec0 [ 321.427716][ T6426] ? __pfx___dev_queue_xmit+0x10/0x10 [ 321.427736][ T6426] ? __pfx_arpt_do_table+0x10/0x10 [ 321.427754][ T6426] ? trace_kmem_cache_alloc+0x29/0xf0 [ 321.427775][ T6426] ? NF_HOOK+0xa2/0x3c0 [ 321.427797][ T6426] NF_HOOK+0x33a/0x3c0 [ 321.427818][ T6426] ? __pfx_arp_xmit_finish+0x10/0x10 [ 321.427839][ T6426] ? NF_HOOK+0xa2/0x3c0 [ 321.427859][ T6426] ? __pfx_NF_HOOK+0x10/0x10 [ 321.427880][ T6426] ? __pfx_arp_xmit_finish+0x10/0x10 [ 321.427905][ T6426] arp_xmit+0x16c/0x270 [ 321.427925][ T6426] ? arp_xmit+0x23/0x270 [ 321.427946][ T6426] arp_solicit+0xbe0/0xe40 [ 321.427970][ T6426] ? arp_solicit+0x119/0xe40 [ 321.427991][ T6426] ? __pfx_arp_solicit+0x10/0x10 [ 321.428014][ T6426] ? __neigh_event_send+0xe9d/0x1530 [ 321.428035][ T6426] ? __pfx_arp_solicit+0x10/0x10 [ 321.428056][ T6426] __neigh_event_send+0xf05/0x1530 [ 321.428080][ T6426] neigh_resolve_output+0x198/0x750 [ 321.428101][ T6426] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 321.428119][ T6426] ? ip_finish_output2+0x3c2/0x1070 [ 321.428131][ T6426] ip_finish_output2+0xca9/0x1070 [ 321.428145][ T6426] ? ip_skb_dst_mtu+0x80b/0xa50 [ 321.428168][ T6426] ? ip_finish_output+0x40e/0x530 [ 321.428191][ T6426] ip_output+0x29f/0x450 [ 321.428212][ T6426] ? ip_output+0x5b/0x450 [ 321.428233][ T6426] iptunnel_xmit+0x61d/0xb50 [ 321.428254][ T6426] ip_tunnel_xmit+0x193a/0x1f20 [ 321.428283][ T6426] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 321.428306][ T6426] ? __pfx_gre_build_header+0x10/0x10 [ 321.428327][ T6426] ? kmem_cache_free+0x187/0x630 [ 321.428342][ T6426] ? pskb_expand_head+0x4bb/0x1320 [ 321.428360][ T6426] __gre_xmit+0x19e/0x240 [ 321.428380][ T6426] ? __pfx___gre_xmit+0x10/0x10 [ 321.428416][ T6426] erspan_xmit+0xa81/0x1670 [ 321.428442][ T6426] ? __pfx_erspan_xmit+0x10/0x10 [ 321.428471][ T6426] dev_hard_start_xmit+0x2d8/0x870 [ 321.428492][ T6426] sch_direct_xmit+0x251/0x4c0 [ 321.428513][ T6426] ? __pfx_sch_direct_xmit+0x10/0x10 [ 321.428532][ T6426] ? kthread+0x320/0x470 [ 321.428544][ T6426] ? ret_from_fork+0x51e/0xb90 [ 321.428566][ T6426] __dev_queue_xmit+0x1b20/0x3870 [ 321.428586][ T6426] ? __dev_queue_xmit+0x28b/0x3870 [ 321.428605][ T6426] ? __pfx___dev_queue_xmit+0x10/0x10 [ 321.428622][ T6426] ? rcu_is_watching+0x15/0xb0 [ 321.428642][ T6426] ? trace_kmem_cache_alloc+0x29/0xf0 [ 321.428658][ T6426] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 321.428679][ T6426] ? alb_send_lp_vid+0x14e/0x550 [ 321.428696][ T6426] alb_send_lp_vid+0x348/0x550 [ 321.428715][ T6426] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 321.428731][ T6426] ? __lock_acquire+0x6b5/0x2cf0 [ 321.428754][ T6426] alb_send_learning_packets+0x12c/0x300 [ 321.428770][ T6426] ? register_lock_class+0x31/0x2e0 [ 321.428789][ T6426] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 321.428809][ T6426] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 321.428832][ T6426] bond_alb_monitor+0x3d5/0x17e0 [ 321.428849][ T6426] ? bond_alb_monitor+0xf8/0x17e0 [ 321.428864][ T6426] ? __pfx_bond_alb_monitor+0x10/0x10 [ 321.428880][ T6426] ? process_scheduled_works+0xa25/0x1830 [ 321.428899][ T6426] ? process_scheduled_works+0xa25/0x1830 [ 321.428919][ T6426] process_scheduled_works+0xb02/0x1830 [ 321.428947][ T6426] ? __pfx_process_scheduled_works+0x10/0x10 [ 321.428968][ T6426] ? assign_work+0x3d5/0x5e0 [ 321.428988][ T6426] worker_thread+0xa50/0xfc0 [ 321.429017][ T6426] kthread+0x388/0x470 [ 321.429030][ T6426] ? __pfx_worker_thread+0x10/0x10 [ 321.429049][ T6426] ? __pfx_kthread+0x10/0x10 [ 321.429063][ T6426] ret_from_fork+0x51e/0xb90 [ 321.429082][ T6426] ? __pfx_ret_from_fork+0x10/0x10 [ 321.429101][ T6426] ? __switch_to+0xc7d/0x1450 [ 321.429117][ T6426] ? __pfx_kthread+0x10/0x10 [ 321.429131][ T6426] ret_from_fork_asm+0x1a/0x30 [ 321.429159][ T6426] [ 322.040446][T15206] openvswitch: netlink: IP tunnel dst address not specified [ 322.048983][T15206] netlink: 'syz.3.2385': attribute type 13 has an invalid length. [ 322.057188][T15206] netlink: 'syz.3.2385': attribute type 17 has an invalid length. [ 322.131032][T15179] macvlan0: entered promiscuous mode [ 322.136435][T15179] macvlan0: entered allmulticast mode [ 322.143069][T15179] bond7: (slave macvlan0): Opening slave failed [ 322.252887][T15206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.264110][T15206] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.273367][T15206] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 322.282344][T15206] caif:caif_disconnect_client(): nothing to disconnect [ 322.289280][T15206] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 322.298137][T15206] chnl_net:chnl_net_open(): state disconnected [ 322.304684][T15206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.