last executing test programs: 3.389952664s ago: executing program 0 (id=3858): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) listen(r2, 0x3) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) unshare(0x24020400) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}}}, 0x10) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b40), 0x0, 0x24044002) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0xc000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) accept$alg(r7, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1b, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 3.299742924s ago: executing program 4 (id=3859): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x3c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000100)="67acf7c8ff188befcc404b648473e4982733570ae921fb86d188c7113a8c98c9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f000027f000/0x4000)=nil, 0x4000, 0x200000e, 0x10, r0, 0x15826000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x4}, 0x20) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000005c0)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x718, 0x328, 0x580, 0x580, 0xd0, 0x328, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2001}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000300)=""/185) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200"], 0xfdef) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd0, 0x0, 0x0) 3.116266764s ago: executing program 0 (id=3862): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @local}, 0x14) close(0x3) r4 = accept(r0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x0) connect$unix(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8=r7], 0x0, 0x5b4230ff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739}, 0x94) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="581b0800", @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.902091083s ago: executing program 3 (id=3865): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c4000006800e9780000000004fd6dfeba13bddb7256b6"], 0x1c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x75f, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x9a, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x3, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r10, 0x0, 0xcc, &(0x7f00000000c0)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "2567a2cba4445c093fe1c104757fd7504aceef28ceab502a88b99d1735806300", 0x3, 0x24e4, 0x0, 0x401}, 0x3c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2.664105362s ago: executing program 2 (id=3867): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x10, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x4d, 0x0, "8ddbb51a3cfd954e41e8ccb2650fa60067fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71b43b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x81) syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8400", 0x28, 0x6, 0xbcdbf0dd7e1a3bc5, @remote, @mcast2, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8afb72d8398dcbac145121cd4e97f5f2"}]}}}}}}}}, 0x0) 2.610720779s ago: executing program 2 (id=3868): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x7) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=r6, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000500170000000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 2.609953846s ago: executing program 4 (id=3869): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x7) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=r7, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000500170000000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 2.455227882s ago: executing program 1 (id=3870): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) listen(r2, 0x3) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) unshare(0x24020400) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}}}, 0x10) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b40), 0x0, 0x24044002) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0xc000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) accept$alg(r7, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1b, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 1.996104624s ago: executing program 1 (id=3871): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) 1.995581055s ago: executing program 4 (id=3872): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502010000090001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000132ae57f60014001a8010000480"], 0x34}}, 0x0) 1.972467898s ago: executing program 2 (id=3873): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) listen(r2, 0x3) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) unshare(0x24020400) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}}}, 0x10) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b40), 0x0, 0x24044002) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0xc000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) accept$alg(r7, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1b, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 1.89258936s ago: executing program 3 (id=3874): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24000845}, 0x20) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e23, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x2b}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x4000003) 1.889585899s ago: executing program 4 (id=3875): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f00000000000000000001"], 0x122}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.79923051s ago: executing program 0 (id=3876): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000001c0), 0x1}], 0x4e}, 0x400c000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4000001) 1.786585039s ago: executing program 2 (id=3877): socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWSET={0xc0, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_EXPRESSIONS={0x64, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x19}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x13}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xac}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x1503, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xa8, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x70, 0x6, "3b2a863b06a23c95f188150b868b7f49145d09021940671fc935c3cc4acc8eaec4e6fcafe32406103ca768b40ad138e84aac8a0e400ab7bcc6d905812e1ab0ef7681755a2934de6d16afd93175a2f2a6cf1ef58fee357961a53c7460932105f6b2f3aa3d468622383b20c95f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2b4}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 1.680406816s ago: executing program 1 (id=3878): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040044}, 0x8080) 1.636560636s ago: executing program 3 (id=3879): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x3c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000100)="67acf7c8ff188befcc404b648473e4982733570ae921fb86d188c7113a8c98c9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f000027f000/0x4000)=nil, 0x4000, 0x200000e, 0x10, r0, 0x15826000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x4}, 0x20) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000005c0)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x718, 0x328, 0x580, 0x580, 0xd0, 0x328, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2001}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000300)=""/185) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200"], 0xfdef) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd0, 0x0, 0x0) 1.543967468s ago: executing program 0 (id=3880): r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r0], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$key(0xf, 0x3, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000040c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40088d5}], 0x1, 0x40) recvmmsg(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x1, 0x10000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x76, "66ff697e7de08adf542fe5baaf6fbded09794ef48ec08f1b4054c48b245c0692f6fbd4af09a9f913488d0a0ae5172763e223cc2ccdb50d99b566c43d45f87d91efe14b937a05edfc5da818ec35a7bd5ae58b71dab031f1bc607ba89ec1829bc557932dd752965049e50f36130652994249d4e8281429"}, &(0x7f0000000000)=0x7e) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r8, 0xf7, 0x3, [0x4, 0x3, 0x5]}, 0xe) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) 1.453332914s ago: executing program 4 (id=3881): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x7) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=r7, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000500170000000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.354650028s ago: executing program 1 (id=3882): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) listen(r2, 0x3) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) unshare(0x24020400) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}}}, 0x10) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b40), 0x0, 0x24044002) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0xc000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) accept$alg(r7, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1b, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 1.323561983s ago: executing program 3 (id=3883): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea454"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x7) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=r6, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000500170000000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.140525184s ago: executing program 0 (id=3884): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c4000006800e9780000000004fd6dfeba13bddb7256b6"], 0x1c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x75f, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x9a, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x3, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r10, 0x0, 0xcc, &(0x7f00000000c0)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "2567a2cba4445c093fe1c104757fd7504aceef28ceab502a88b99d1735806300", 0x3, 0x24e4, 0x0, 0x401}, 0x3c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 924.157572ms ago: executing program 1 (id=3885): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000005d00)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x3, 0x2, 0x0, 0x4}}, 0x80, 0x0}}], 0x1, 0x60000800) 781.408805ms ago: executing program 2 (id=3886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32) 722.598807ms ago: executing program 1 (id=3887): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @local}, 0x14) close(0x3) r4 = accept(r0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x0) connect$unix(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8=r7], 0x0, 0x5b4230ff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739}, 0x94) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="581b0800", @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 425.693301ms ago: executing program 3 (id=3888): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) unshare(0x24020400) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}}}, 0x10) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b40), 0x0, 0x24044002) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0xc000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) accept$alg(r7, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1b, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 243.899602ms ago: executing program 3 (id=3889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) 243.517696ms ago: executing program 4 (id=3890): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x9b11, r1, 0x10, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c1000000000000000", 0x56}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x24, 0x301, 0x0, 0x80, {0x11}, [@nested={0x4, 0x12f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="a739dfe54ad99ffa18c27526b51001fb4f778791377c"], 0x1c}}, 0x4000054) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) 173.380631ms ago: executing program 0 (id=3891): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r2, 0x431, 0x70bd2b, 0x3, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 0s ago: executing program 2 (id=3892): r0 = socket(0x25, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x2000a212}) kernel console output (not intermixed with test programs): 8.490114][T16807] bond0: entered promiscuous mode [ 548.512765][T16811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2817'. [ 548.519283][T16807] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 548.531468][T16811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2817'. [ 548.553074][T16807] bond0: left promiscuous mode [ 548.737933][T16805] 8021q: adding VLAN 0 to HW filter on device bond30 [ 548.789208][T16805] bridge0: port 7(bond30) entered blocking state [ 548.823639][T16805] bridge0: port 7(bond30) entered disabled state [ 548.847459][T16805] bond30: entered allmulticast mode [ 548.904998][T16805] bond30: entered promiscuous mode [ 551.445410][T16823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.665038][T16834] validate_nla: 5 callbacks suppressed [ 551.665058][T16834] netlink: 'syz.3.2822': attribute type 1 has an invalid length. [ 551.669666][T16829] netlink: 'syz.2.2823': attribute type 1 has an invalid length. [ 551.673027][T16834] netlink: 'syz.3.2822': attribute type 2 has an invalid length. [ 551.710014][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2823'. [ 551.739657][T16829] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2823'. [ 552.454057][T16857] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2827'. [ 552.480970][T16858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2828'. [ 552.569464][T16857] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2827'. [ 552.583013][T16860] netlink: 'syz.0.2827': attribute type 16 has an invalid length. [ 552.591917][T16860] netlink: 'syz.0.2827': attribute type 17 has an invalid length. [ 552.615069][T16857] netlink: 'syz.0.2827': attribute type 6 has an invalid length. [ 552.678003][T16857] netlink: 'syz.0.2827': attribute type 5 has an invalid length. [ 552.719751][T16857] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2827'. [ 552.794482][T16860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 553.031323][T16875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 553.636525][T16888] netlink: 'syz.3.2834': attribute type 39 has an invalid length. [ 554.690794][T16905] pim6reg1: entered promiscuous mode [ 554.734353][T16905] pim6reg1: entered allmulticast mode [ 554.943338][T16921] netlink: 'syz.4.2845': attribute type 4 has an invalid length. [ 555.465849][T16932] syzkaller0: entered promiscuous mode [ 555.471732][T16932] syzkaller0: entered allmulticast mode [ 555.523782][T16941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 558.369045][T16946] pim6reg1: entered promiscuous mode [ 558.378771][T16946] pim6reg1: entered allmulticast mode [ 558.395462][T16953] tipc: Enabling of bearer rejected, failed to enable media [ 558.626452][T16970] netlink: 'syz.2.2856': attribute type 1 has an invalid length. [ 558.677748][T16972] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2856'. [ 558.726598][T16972] batadv18: entered promiscuous mode [ 558.781225][T16972] batadv18: entered allmulticast mode [ 558.905668][T16982] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2856'. [ 559.249639][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2860'. [ 559.258817][T16991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2860'. [ 559.290347][T16991] netlink: 'syz.0.2860': attribute type 1 has an invalid length. [ 559.298777][T16991] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2860'. [ 559.383043][T16991] nbd: socks must be embedded in a SOCK_ITEM attr [ 559.390154][T16991] block nbd1: shutting down sockets [ 559.810458][T17010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 560.443899][T17026] netlink: 'syz.0.2871': attribute type 8 has an invalid length. [ 560.780450][T17030] 8021q: adding VLAN 0 to HW filter on device bond23 [ 560.814099][T17030] bridge0: port 8(bond23) entered blocking state [ 560.843325][T17030] bridge0: port 8(bond23) entered disabled state [ 560.865558][T17038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2873'. [ 560.878582][T17030] bond23: entered allmulticast mode [ 560.886539][T17038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2873'. [ 560.901666][T17030] bond23: entered promiscuous mode [ 560.907885][T17030] bridge0: port 8(bond23) entered blocking state [ 560.914641][T17030] bridge0: port 8(bond23) entered forwarding state [ 560.938391][T13727] bridge0: port 8(bond23) entered disabled state [ 561.142916][T17045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2877'. [ 561.224960][T17045] sch_tbf: burst 5 is lower than device bridge24 mtu (1514) ! [ 561.705963][T17063] syz_tun: entered allmulticast mode [ 561.733522][T17063] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2883'. [ 561.901249][T17061] syz_tun: left allmulticast mode [ 562.095582][T17069] netlink: 'syz.2.2885': attribute type 1 has an invalid length. [ 562.115667][T17069] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2885'. [ 562.441366][T17076] syzkaller0: entered promiscuous mode [ 562.447005][T17076] syzkaller0: entered allmulticast mode [ 565.861579][T17085] bond0: entered promiscuous mode [ 565.867544][T17085] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 565.877832][T17085] bond0: left promiscuous mode [ 565.963183][T17111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 566.226184][T17117] syzkaller0: entered promiscuous mode [ 566.248903][T17117] syzkaller0: entered allmulticast mode [ 566.524683][T17142] __nla_validate_parse: 3 callbacks suppressed [ 566.524702][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'. [ 567.558368][T17149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2902'. [ 569.386699][T17136] netlink: 'syz.0.2899': attribute type 1 has an invalid length. [ 569.394972][T17136] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.2899'. [ 569.583258][T17156] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2903'. [ 570.218353][T17181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2910'. [ 570.337284][T17184] sch_tbf: burst 5 is lower than device bridge25 mtu (1514) ! [ 570.645385][T17190] netlink: 'syz.2.2913': attribute type 1 has an invalid length. [ 570.668929][T17190] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2913'. [ 570.755884][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2913'. [ 570.846784][T17200] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2915'. [ 570.856353][T17200] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2915'. [ 570.865986][T17200] netlink: 'syz.4.2915': attribute type 6 has an invalid length. [ 570.881008][T17200] netlink: 'syz.4.2915': attribute type 5 has an invalid length. [ 570.914497][T17200] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2915'. [ 570.959267][T17200] netlink: 'syz.4.2915': attribute type 16 has an invalid length. [ 570.982775][T17200] netlink: 'syz.4.2915': attribute type 17 has an invalid length. [ 571.010383][ T5925] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 571.019641][T17203] bond3: (slave batadv1): Releasing active interface [ 571.041238][T17203] bond4: left allmulticast mode [ 571.046161][T17203] bond4: left promiscuous mode [ 571.052132][T17203] bridge0: port 1(bond4) entered disabled state [ 571.087724][T17203] bond5: (slave batadv2): Releasing active interface [ 571.132817][T17203] bond6: (slave batadv3): Releasing active interface [ 571.152359][T17206] netlink: 'syz.1.2918': attribute type 2 has an invalid length. [ 571.161264][T17206] netlink: 'syz.1.2918': attribute type 8 has an invalid length. [ 571.204170][T17203] bond7: (slave batadv4): Releasing active interface [ 571.242256][T17203] bond8: (slave batadv5): Releasing active interface [ 571.291588][T17203] bond9: left allmulticast mode [ 571.307224][T17203] bond9: left promiscuous mode [ 571.331678][T17203] bridge0: port 2(bond9) entered disabled state [ 571.372206][T17203] bond10: (slave batadv6): Releasing active interface [ 571.440747][T17203] bond11: (slave batadv7): Releasing active interface [ 571.490913][T17203] bond12: (slave batadv8): Releasing active interface [ 571.531313][T17203] bond13: (slave batadv9): Releasing active interface [ 571.578297][T17203] bond14: left allmulticast mode [ 571.590071][T17203] bond14: left promiscuous mode [ 571.595400][T17203] bridge0: port 3(bond14) entered disabled state [ 571.616944][T17203] bond15: left allmulticast mode [ 571.625798][T17203] bond15: left promiscuous mode [ 571.642080][T17203] bridge0: port 4(bond15) entered disabled state [ 571.670777][T17203] bond16: (slave batadv10): Releasing active interface [ 571.695671][T17203] bond17: (slave batadv11): Releasing active interface [ 571.722848][T17203] bond18: left allmulticast mode [ 571.732275][T17203] bond18: left promiscuous mode [ 571.737502][T17203] bridge0: port 5(bond18) entered disabled state [ 571.785515][T17200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 571.830211][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 572.105872][T17217] tipc: Enabled bearer , priority 0 [ 572.284951][T17212] tipc: Resetting bearer [ 572.430894][T17236] netlink: 'syz.0.2924': attribute type 12 has an invalid length. [ 572.438770][T17236] __nla_validate_parse: 1 callbacks suppressed [ 572.438785][T17236] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2924'. [ 572.482385][T17209] tipc: Resetting bearer [ 572.557744][T17241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2925'. [ 575.349671][T17209] tipc: Disabling bearer [ 575.642963][T17259] ipt_rpfilter: unknown options [ 575.817508][T17266] netlink: 'syz.0.2931': attribute type 10 has an invalid length. [ 575.832606][T17266] veth0_vlan: left promiscuous mode [ 575.842826][T17266] veth0_vlan: entered promiscuous mode [ 575.852283][T17266] team0: Device veth0_vlan failed to register rx_handler [ 576.105938][T17270] vlan3: entered promiscuous mode [ 576.160147][T17270] vlan2: entered promiscuous mode [ 576.165607][T17270] erspan0: entered promiscuous mode [ 576.255511][T17275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 576.275639][T17274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2934'. [ 576.418840][T17280] bond2: (slave gretap1): Releasing backup interface [ 576.494812][T17280] bond5: (slave batadv2): Releasing active interface [ 576.533530][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'. [ 576.551611][T17280] bond6: (slave batadv3): Releasing active interface [ 576.600671][T17280] bond7: (slave batadv4): Releasing active interface [ 576.768294][T17280] bond8: (slave batadv5): Releasing active interface [ 576.796558][T17280] bond9: left allmulticast mode [ 576.806712][T17280] bond9: left promiscuous mode [ 576.816185][T17280] bridge0: port 1(bond9) entered disabled state [ 576.841187][T17280] bond10: (slave batadv6): Releasing active interface [ 576.881887][T17280] bond11: (slave batadv7): Releasing active interface [ 576.907866][T17280] bond12: (slave batadv8): Releasing active interface [ 576.932824][T17280] bond13: left allmulticast mode [ 576.937991][T17280] bond13: left promiscuous mode [ 576.948749][T17280] bridge0: port 2(bond13) entered disabled state [ 576.965178][T17280] bond15: left allmulticast mode [ 576.978714][T17280] bond15: left promiscuous mode [ 576.984563][T17280] bridge0: port 3(bond15) entered disabled state [ 577.008998][T17280] bond17: (slave batadv9): Releasing active interface [ 577.053248][T17280] bond18: left allmulticast mode [ 577.064197][T17298] netlink: 'syz.0.2939': attribute type 142 has an invalid length. [ 577.072594][T17280] bond18: left promiscuous mode [ 577.077986][T17280] bridge0: port 4(bond18) entered disabled state [ 577.222173][T17292] macsec2: entered promiscuous mode [ 577.227536][T17292] team0: entered promiscuous mode [ 577.293565][T17292] team0: left promiscuous mode [ 577.413512][T17300] bond0: entered promiscuous mode [ 577.418631][T17300] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 577.453038][T17300] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 577.541186][T17300] bond0: left promiscuous mode [ 577.556683][T17300] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 577.904207][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2944'. [ 577.920877][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2944'. [ 578.193778][T17326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2948'. [ 581.693843][T17343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.413144][T17360] bond0: entered promiscuous mode [ 582.419072][T17360] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 582.487691][T17360] bond0: left promiscuous mode [ 582.698187][T17365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2960'. [ 582.728444][T17365] sctp: [Deprecated]: syz.1.2960 (pid 17365) Use of int in maxseg socket option. [ 582.728444][T17365] Use struct sctp_assoc_value instead [ 582.862028][T17369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2962'. [ 582.960848][T17369] vlan2: entered promiscuous mode [ 583.814738][T17404] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2968'. [ 583.824638][T17404] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2968'. [ 583.834378][T17404] netlink: 'syz.0.2968': attribute type 6 has an invalid length. [ 583.856959][T17404] netlink: 'syz.0.2968': attribute type 5 has an invalid length. [ 583.907902][T17406] netlink: 'syz.0.2968': attribute type 16 has an invalid length. [ 583.944255][T17404] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2968'. [ 583.982063][T17406] netlink: 'syz.0.2968': attribute type 17 has an invalid length. [ 584.094922][T17406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.590347][T17421] bond0: (slave wlan1): Releasing backup interface [ 585.240769][T17421] bond1: (slave batadv1): Releasing active interface [ 585.450079][T17421] bond2: left allmulticast mode [ 585.497740][T17421] bond2: left promiscuous mode [ 585.557962][T17421] bridge0: port 1(bond2) entered disabled state [ 585.584765][T17421] bond3: (slave batadv2): Releasing active interface [ 585.627207][T17421] bond4: left allmulticast mode [ 585.643494][T17421] bond4: left promiscuous mode [ 585.648957][T17421] bridge0: port 2(bond4) entered disabled state [ 585.666858][T17421] bond5: (slave batadv3): Releasing active interface [ 585.692904][T17421] bond6: (slave batadv4): Releasing active interface [ 585.724338][T17421] bond7: (slave batadv5): Releasing active interface [ 585.767065][T17421] bond8: (slave batadv6): Releasing active interface [ 585.791356][T17421] bond9: left allmulticast mode [ 585.796305][T17421] bond9: left promiscuous mode [ 585.810711][T17421] bridge0: port 3(bond9) entered disabled state [ 585.831025][T17421] bond10: (slave batadv7): Releasing active interface [ 585.863881][T17421] bond11: left allmulticast mode [ 585.882125][T17421] bond11: left promiscuous mode [ 585.887308][T17421] bridge0: port 4(bond11) entered disabled state [ 585.920460][T17421] bond12: (slave batadv8): Releasing active interface [ 585.949259][T17421] bond13: left allmulticast mode [ 585.959817][T17421] bond13: left promiscuous mode [ 585.965661][T17421] bridge0: port 5(bond13) entered disabled state [ 585.993022][T17421] bond14: (slave batadv9): Releasing active interface [ 586.023142][T17421] bond15: left allmulticast mode [ 586.028153][T17421] bond15: left promiscuous mode [ 586.060237][T17421] bridge0: port 6(bond15) entered disabled state [ 586.230538][ T24] syz1: Port: 1 Link DOWN [ 586.643045][T17469] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2982'. [ 587.072005][T17469] bond0 (unregistering): Released all slaves [ 587.510757][T17477] bridge0: port 1(veth0_to_bridge) entered blocking state [ 587.518369][T17477] bridge0: port 1(veth0_to_bridge) entered disabled state [ 587.541879][T17477] veth0_to_bridge: entered allmulticast mode [ 587.588896][T17481] netlink: 'syz.3.2985': attribute type 10 has an invalid length. [ 587.615262][T17477] veth0_to_bridge: entered promiscuous mode [ 587.647446][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2986'. [ 587.955663][T17493] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2987'. [ 587.965128][T17493] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2987'. [ 587.974705][T17493] netlink: 'syz.0.2987': attribute type 6 has an invalid length. [ 587.983454][T17493] netlink: 'syz.0.2987': attribute type 5 has an invalid length. [ 587.993604][T17493] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2987'. [ 588.081100][T17496] netlink: 'syz.0.2987': attribute type 16 has an invalid length. [ 588.109682][T17496] netlink: 'syz.0.2987': attribute type 17 has an invalid length. [ 588.172991][T17496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.162342][T17508] tipc: Resetting bearer [ 589.360256][T17508] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 589.384379][T17499] lo speed is unknown, defaulting to 1000 [ 589.394273][T17499] lo speed is unknown, defaulting to 1000 [ 589.413339][T17499] lo speed is unknown, defaulting to 1000 [ 589.507127][T17499] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 589.596666][T17522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2994'. [ 589.608779][T17499] lo speed is unknown, defaulting to 1000 [ 589.670347][T17499] lo speed is unknown, defaulting to 1000 [ 589.721303][T17499] lo speed is unknown, defaulting to 1000 [ 589.737905][T17522] bridge35: port 1(ip6gretap1) entered blocking state [ 589.765558][T17522] bridge35: port 1(ip6gretap1) entered disabled state [ 589.774530][T17522] ip6gretap1: entered allmulticast mode [ 589.782827][T17522] ip6gretap1: entered promiscuous mode [ 589.799481][T17499] lo speed is unknown, defaulting to 1000 [ 589.817962][T17528] SET target dimension over the limit! [ 589.850732][T17499] lo speed is unknown, defaulting to 1000 [ 589.858590][T17499] lo speed is unknown, defaulting to 1000 [ 589.898530][T17522] veth3: entered promiscuous mode [ 589.920651][T17522] bridge35: port 2(veth3) entered blocking state [ 589.949753][T17522] bridge35: port 2(veth3) entered disabled state [ 589.956947][T17522] veth3: entered allmulticast mode [ 589.973956][T17525] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2995'. [ 590.027881][T17533] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2996'. [ 590.037386][T17533] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2996'. [ 590.046518][T17533] netlink: 'syz.3.2996': attribute type 6 has an invalid length. [ 590.102611][T17534] netlink: 'syz.3.2996': attribute type 16 has an invalid length. [ 590.111786][T17534] netlink: 'syz.3.2996': attribute type 17 has an invalid length. [ 590.121208][T17533] netlink: 'syz.3.2996': attribute type 5 has an invalid length. [ 590.139648][T17533] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2996'. [ 590.205629][T10472] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 590.249794][T17534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.789152][T17541] syzkaller1: entered promiscuous mode [ 590.795320][T17541] syzkaller1: entered allmulticast mode [ 590.861146][T17540] lo speed is unknown, defaulting to 1000 [ 591.191575][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 591.227948][T17568] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3001'. [ 591.631674][T17581] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3002'. [ 591.711028][T17581] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3002'. [ 591.759013][T17581] netlink: 'syz.3.3002': attribute type 6 has an invalid length. [ 591.847209][T17588] netlink: 'syz.3.3002': attribute type 16 has an invalid length. [ 591.869786][T17581] netlink: 'syz.3.3002': attribute type 5 has an invalid length. [ 591.887769][T17588] netlink: 'syz.3.3002': attribute type 17 has an invalid length. [ 591.950746][T17581] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3002'. [ 592.194921][T17588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.224312][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 592.501898][T17598] gretap0: entered promiscuous mode [ 592.544073][T17598] batman_adv: batadv0: Adding interface: macvlan0 [ 592.590545][T17598] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.650179][T17598] batman_adv: batadv0: Interface activated: macvlan0 [ 593.055981][T17618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'. [ 593.195197][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 593.204126][T17611] syzkaller1: entered promiscuous mode [ 593.216729][T17611] syzkaller1: entered allmulticast mode [ 593.742263][ T30] audit: type=1107 audit(1750930008.949:20): pid=17627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1Žd»¥]:xJÐP@cd$JnyãÒOº^øDØ#z' [ 594.157944][T17644] pim6reg: entered allmulticast mode [ 594.616666][T17658] __nla_validate_parse: 1 callbacks suppressed [ 594.616686][T17658] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3018'. [ 594.645776][T17658] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3018'. [ 594.669499][T17658] netlink: 'syz.4.3018': attribute type 6 has an invalid length. [ 594.698947][T17659] netlink: 'syz.3.3019': attribute type 7 has an invalid length. [ 594.729235][T17658] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3018'. [ 594.761722][T17661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 594.881587][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3020'. [ 594.902121][T17664] macsec1: entered allmulticast mode [ 594.907556][T17664] veth0: entered allmulticast mode [ 594.924297][T17664] veth0: left allmulticast mode [ 595.386627][T17671] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 595.492592][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3024'. [ 595.515334][T17678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3024'. [ 595.696927][T17681] vlan0: entered promiscuous mode [ 595.729785][T17681] vlan0: entered allmulticast mode [ 595.738111][T17681] hsr_slave_1: entered allmulticast mode [ 595.820604][ T30] audit: type=1107 audit(1750930011.029:21): pid=17682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1Žd»¥]:xJÐP@cd$JnyãÒOº^øDØ#z' [ 596.424899][T17696] validate_nla: 3 callbacks suppressed [ 596.424918][T17696] netlink: 'syz.2.3030': attribute type 11 has an invalid length. [ 596.631461][T17698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.900076][T17708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3033'. [ 596.911845][T17704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3032'. [ 596.956565][T17710] sch_tbf: burst 5 is lower than device bridge25 mtu (1514) ! [ 597.121063][T17715] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3034'. [ 597.130320][T17715] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3034'. [ 597.139313][T17715] netlink: 'syz.1.3034': attribute type 6 has an invalid length. [ 597.179602][T17715] netlink: 'syz.1.3034': attribute type 5 has an invalid length. [ 597.190980][T17714] batadv18: entered promiscuous mode [ 597.196377][T17714] batadv18: entered allmulticast mode [ 597.275472][T17715] netlink: 'syz.1.3034': attribute type 16 has an invalid length. [ 597.311962][T17715] netlink: 'syz.1.3034': attribute type 17 has an invalid length. [ 597.512265][T17715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 597.903540][T17731] netlink: 'syz.3.3037': attribute type 10 has an invalid length. [ 598.216925][T17736] Bluetooth: MGMT ver 1.23 [ 598.287968][T17739] sch_tbf: burst 5 is lower than device bridge23 mtu (1514) ! [ 598.767514][ T30] audit: type=1107 audit(1750930013.979:22): pid=17741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1Žd»¥]:xJÐP@cd$JnyãÒOº^øDØ#z' [ 599.809649][T17765] geneve3: entered promiscuous mode [ 599.814928][T17765] geneve3: entered allmulticast mode [ 599.936628][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 32875 - 0 [ 599.951992][T17770] __nla_validate_parse: 7 callbacks suppressed [ 599.952015][T17770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3048'. [ 599.956923][ T12] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 54257 - 0 [ 600.024521][T17773] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3048'. [ 600.027307][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 32875 - 0 [ 600.044513][ T12] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 54257 - 0 [ 600.052908][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 32875 - 0 [ 600.061726][ T12] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 54257 - 0 [ 600.181284][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 32875 - 0 [ 600.215544][ T12] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 54257 - 0 [ 600.237705][T17770] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3048'. [ 600.295664][T17773] batadv18: entered promiscuous mode [ 600.327184][T17773] batadv18: entered allmulticast mode [ 600.358609][T17786] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3049'. [ 600.367984][T17786] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3049'. [ 600.392968][T17786] netlink: 'syz.1.3049': attribute type 6 has an invalid length. [ 600.404815][T17786] netlink: 'syz.1.3049': attribute type 5 has an invalid length. [ 600.424153][T17786] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3049'. [ 600.534610][T17786] netlink: 'syz.1.3049': attribute type 16 has an invalid length. [ 600.543190][T17786] netlink: 'syz.1.3049': attribute type 17 has an invalid length. [ 600.601322][T17756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3044'. [ 601.268742][T17777] bond5: left promiscuous mode [ 601.297319][T17777] batadv2: left promiscuous mode [ 601.309724][T17777] batadv2: left allmulticast mode [ 601.407409][T17777] bond6: left promiscuous mode [ 601.429320][T17777] batadv3: left promiscuous mode [ 601.438796][T17777] batadv3: left allmulticast mode [ 601.499157][T17777] bond7: left promiscuous mode [ 601.530016][T17777] batadv4: left promiscuous mode [ 601.535022][T17777] batadv4: left allmulticast mode [ 601.564845][T17777] bond8: left promiscuous mode [ 601.600036][T17777] batadv5: left promiscuous mode [ 601.618239][T17777] batadv5: left allmulticast mode [ 601.670950][T17777] bond10: left promiscuous mode [ 601.691396][T17777] batadv6: left promiscuous mode [ 601.709560][T17777] batadv6: left allmulticast mode [ 601.721684][T17777] bond11: left promiscuous mode [ 601.757309][T17777] batadv7: left promiscuous mode [ 601.769837][T17777] batadv7: left allmulticast mode [ 601.780401][T17777] bond12: left promiscuous mode [ 601.810474][T17777] batadv8: left promiscuous mode [ 601.815511][T17777] batadv8: left allmulticast mode [ 601.841104][T17777] bond13: left promiscuous mode [ 601.871864][T17777] batadv9: left promiscuous mode [ 601.876890][T17777] batadv9: left allmulticast mode [ 601.977751][T17777] bond16: left promiscuous mode [ 602.018855][T17777] batadv10: left promiscuous mode [ 602.039614][T17777] batadv10: left allmulticast mode [ 602.086916][T17777] bond17: left promiscuous mode [ 602.107965][T17777] batadv11: left promiscuous mode [ 602.119464][T17777] batadv11: left allmulticast mode [ 602.155672][T17777] bond19: left promiscuous mode [ 602.169299][T17777] batadv12: left promiscuous mode [ 602.179586][T17777] batadv12: left allmulticast mode [ 602.197084][T17645] Set syz1 is full, maxelem 65536 reached [ 602.220268][T17777] bond20: left promiscuous mode [ 602.250503][T17777] batadv13: left promiscuous mode [ 602.255709][T17777] batadv13: left allmulticast mode [ 602.377399][T17786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.614701][T17792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.655455][T17792] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.727966][T17792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.974890][ T30] audit: type=1107 audit(1750930018.189:23): pid=17797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1Žd»¥]:xJÐP@cd$JnyãÒOº^øDØ#z' [ 603.741943][T17834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3057'. [ 603.759869][T17831] veth0: entered promiscuous mode [ 603.965453][T17841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3061'. [ 604.043733][T17845] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3061'. [ 604.065548][T17834] veth0 (unregistering): left promiscuous mode [ 604.927796][T17837] tipc: Resetting bearer [ 604.928596][T17868] netlink: 'syz.4.3063': attribute type 6 has an invalid length. [ 604.942416][T17868] netlink: 'syz.4.3063': attribute type 5 has an invalid length. [ 605.013070][T17869] netlink: 'syz.4.3063': attribute type 16 has an invalid length. [ 605.021868][T17869] netlink: 'syz.4.3063': attribute type 17 has an invalid length. [ 605.132910][T17837] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 605.171936][T17845] batadv14: entered promiscuous mode [ 605.182715][T17845] batadv14: entered allmulticast mode [ 605.382775][T17869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.570783][T17878] IPVS: set_ctl: invalid protocol: 58 172.30.0.2:20003 [ 605.662605][T17885] __nla_validate_parse: 4 callbacks suppressed [ 605.662627][T17885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3066'. [ 605.762097][ T30] audit: type=1107 audit(1750930020.969:24): pid=17880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1Žd»¥]:xJÐP@cd$JnyãÒOº^øDØ#z' [ 605.801900][T17891] C: renamed from team_slave_0 [ 605.834468][T17891] netlink: 'syz.4.3069': attribute type 8 has an invalid length. [ 605.857251][T17891] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 606.108052][T17899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3070'. [ 606.303277][ T5991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.314779][ T5991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.338630][T17905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.510299][T17910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3073'. [ 606.551257][T17910] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3073'. [ 606.585244][T17910] batadv12: entered promiscuous mode [ 606.611604][T17910] batadv12: entered allmulticast mode [ 606.766894][T17910] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3073'. [ 606.780200][T17912] netlink: 'syz.3.3074': attribute type 303 has an invalid length. [ 606.792707][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3074'. [ 607.137340][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3077'. [ 607.263833][T17929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3078'. [ 607.361175][T17933] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3078'. [ 607.410328][T17933] batadv14: entered promiscuous mode [ 607.415670][T17933] batadv14: entered allmulticast mode [ 607.512142][T17937] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3079'. [ 607.531812][T17937] netlink: 'syz.4.3079': attribute type 6 has an invalid length. [ 607.604759][T17937] netlink: 'syz.4.3079': attribute type 5 has an invalid length. [ 607.656151][T17941] netlink: 'syz.4.3079': attribute type 16 has an invalid length. [ 607.709990][T17941] netlink: 'syz.4.3079': attribute type 17 has an invalid length. [ 607.756969][T17941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 608.902299][T17972] xt_CT: No such helper "snmp" [ 609.494830][T17985] openvswitch: netlink: Missing key (keys=40, expected=80) [ 609.730789][T17991] sch_tbf: burst 5 is lower than device bridge24 mtu (1514) ! [ 609.974179][T18000] bond0: (slave wlan1): Releasing backup interface [ 609.994902][T18000] bond4: (slave batadv2): Releasing active interface [ 610.030498][T18000] bond5: (slave batadv3): Releasing active interface [ 610.090134][T18000] bond6: (slave batadv4): Releasing active interface [ 610.140297][T18000] bond7: left allmulticast mode [ 610.159567][T18000] bond7: left promiscuous mode [ 610.172410][T18000] bridge0: port 1(bond7) entered disabled state [ 610.222670][T18000] bond8: (slave batadv5): Releasing active interface [ 610.308280][T18000] bond9: (slave batadv6): Releasing active interface [ 610.329099][T18009] xt_bpf: check failed: parse error [ 610.368955][T18000] bond10: (slave batadv7): Releasing active interface [ 610.410177][T18000] bond11: (slave batadv8): Releasing active interface [ 610.438616][T18000] bond12: left allmulticast mode [ 610.445482][T18000] bond12: left promiscuous mode [ 610.451278][T18000] bridge0: port 2(bond12) entered disabled state [ 610.550939][T18009] validate_nla: 1 callbacks suppressed [ 610.550960][T18009] netlink: 'syz.2.3090': attribute type 8 has an invalid length. [ 610.568158][T18000] bond13: left allmulticast mode [ 610.579500][T18000] bond13: left promiscuous mode [ 610.584635][T18000] bridge0: port 3(bond13) entered disabled state [ 610.655053][T18000] bond15: left allmulticast mode [ 610.660908][T18000] bond15: left promiscuous mode [ 610.670623][T18000] bridge0: port 4(bond15) entered disabled state [ 610.694895][T18000] bond16: (slave batadv9): Releasing active interface [ 610.763168][T18000] bond17: left allmulticast mode [ 610.768175][T18000] bond17: left promiscuous mode [ 610.775737][T18000] bridge0: port 5(bond17) entered disabled state [ 610.802236][T18000] bond18: left allmulticast mode [ 610.810407][T18000] bond18: left promiscuous mode [ 610.822178][T18000] bridge0: port 6(bond18) entered disabled state [ 610.848678][T18000] bond19: left allmulticast mode [ 610.858128][T18000] bond19: left promiscuous mode [ 610.864857][T18000] bridge0: port 7(bond19) entered disabled state [ 610.874443][T18000] bond23: left promiscuous mode [ 610.921847][T18000] bond21: (slave batadv10): Releasing active interface [ 610.961981][T18000] bond22: (slave batadv11): Releasing active interface [ 610.963714][T18013] __nla_validate_parse: 7 callbacks suppressed [ 610.963736][T18013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3091'. [ 610.997790][T18000] bond23: left allmulticast mode [ 611.003271][T18000] bridge0: port 8(bond23) entered disabled state [ 611.015039][T18000] ip6gretap1: left allmulticast mode [ 611.023183][T18000] ip6gretap1: left promiscuous mode [ 611.028652][T18000] bridge35: port 1(ip6gretap1) entered disabled state [ 611.039180][T18000] veth3: left allmulticast mode [ 611.044475][T18000] bridge35: port 2(veth3) entered disabled state [ 611.061932][T18015] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3091'. [ 611.247132][T18019] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3091'. [ 611.381639][T18015] batadv10: entered promiscuous mode [ 611.386995][T18015] batadv10: entered allmulticast mode [ 611.545162][T18028] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3092'. [ 611.554843][T18028] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3092'. [ 611.564198][T18028] netlink: 'syz.1.3092': attribute type 6 has an invalid length. [ 611.572278][T18028] netlink: 'syz.1.3092': attribute type 5 has an invalid length. [ 611.584936][T18028] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3092'. [ 611.654085][T18028] netlink: 'syz.1.3092': attribute type 16 has an invalid length. [ 611.673911][T18028] netlink: 'syz.1.3092': attribute type 17 has an invalid length. [ 611.902960][T18028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.974204][T18040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3095'. [ 612.007644][T18040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3095'. [ 612.310631][T18044] netlink: 'syz.3.3095': attribute type 4 has an invalid length. [ 612.329692][T18040] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 612.367989][T18040] netlink: 'syz.3.3095': attribute type 4 has an invalid length. [ 612.551078][T18050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3097'. [ 612.764803][T18057] sctp: [Deprecated]: syz.2.3099 (pid 18057) Use of int in max_burst socket option deprecated. [ 612.764803][T18057] Use struct sctp_assoc_value instead [ 612.830108][T18054] vlan2: entered promiscuous mode [ 612.845517][T18054] bond0: entered promiscuous mode [ 613.117984][T18068] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3103'. [ 613.179825][T18070] batadv10: entered promiscuous mode [ 613.185248][T18070] batadv10: entered allmulticast mode [ 613.483750][T18067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.508732][T18072] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 613.885121][T18094] batadv10: entered promiscuous mode [ 613.891214][T18094] batadv10: entered allmulticast mode [ 613.904493][T18096] netlink: 'syz.4.3106': attribute type 6 has an invalid length. [ 613.912838][T18096] netlink: 'syz.4.3106': attribute type 5 has an invalid length. [ 613.924877][T18096] netlink: 'syz.4.3106': attribute type 16 has an invalid length. [ 613.960069][T18096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 614.648063][T18090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.699800][T18108] bridge36: port 1(team0) entered blocking state [ 614.758101][T18108] bridge36: port 1(team0) entered disabled state [ 614.792156][T18108] team0: entered allmulticast mode [ 614.800875][T18108] team0: left allmulticast mode [ 614.933853][T18118] sctp: [Deprecated]: syz.1.3110 (pid 18118) Use of struct sctp_assoc_value in delayed_ack socket option. [ 614.933853][T18118] Use struct sctp_sack_info instead [ 615.491811][T18114] bond1: left promiscuous mode [ 615.516002][T18114] batadv1: left promiscuous mode [ 615.527066][T18114] batadv1: left allmulticast mode [ 615.546314][T18114] bond3: left promiscuous mode [ 615.564943][T18114] batadv2: left promiscuous mode [ 615.583255][T18114] batadv2: left allmulticast mode [ 615.622543][T18114] bond5: left promiscuous mode [ 615.632864][T18114] batadv3: left promiscuous mode [ 615.638260][T18114] batadv3: left allmulticast mode [ 615.646358][T18114] bond6: left promiscuous mode [ 615.675688][T18114] batadv4: left promiscuous mode [ 615.682330][T18114] batadv4: left allmulticast mode [ 615.709122][T18114] bond7: left promiscuous mode [ 615.732589][T18114] batadv5: left promiscuous mode [ 615.743179][T18114] batadv5: left allmulticast mode [ 615.791971][T18114] bond8: left promiscuous mode [ 615.807271][T18114] batadv6: left promiscuous mode [ 615.827327][T18114] batadv6: left allmulticast mode [ 615.867039][T18114] bond10: left promiscuous mode [ 615.883848][T18114] batadv7: left promiscuous mode [ 615.899805][T18114] batadv7: left allmulticast mode [ 615.968890][T18114] bond12: left promiscuous mode [ 615.990353][T18114] batadv8: left promiscuous mode [ 615.995516][T18114] batadv8: left allmulticast mode [ 616.014225][T18114] geneve2: left promiscuous mode [ 616.050422][T18114] batadv0: left promiscuous mode [ 616.066335][T18114] batadv0: left allmulticast mode [ 616.090903][T18114] bond14: left promiscuous mode [ 616.105742][T18114] batadv9: left promiscuous mode [ 616.133370][T18114] batadv9: left allmulticast mode [ 616.231575][T18135] __nla_validate_parse: 16 callbacks suppressed [ 616.231600][T18135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3115'. [ 616.250660][T18114] geneve3: left promiscuous mode [ 616.266036][T18114] geneve3: left allmulticast mode [ 616.281922][T18114] batadv10: left promiscuous mode [ 616.289322][T18136] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3115'. [ 616.297410][T18114] batadv10: left allmulticast mode [ 616.326254][T18120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 616.388495][T18125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 616.422082][ T6176] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.442232][ T6176] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 32875 - 0 [ 616.490768][ T6176] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 54257 - 0 [ 616.518581][ T6176] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.542711][T18142] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3115'. [ 616.559593][ T6176] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 32875 - 0 [ 616.568209][ T6176] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 54257 - 0 [ 616.645762][T18136] batadv12: entered promiscuous mode [ 616.683348][T18136] batadv12: entered allmulticast mode [ 616.770797][ T6176] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.804940][ T6176] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 32875 - 0 [ 616.820274][T18150] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3118'. [ 616.848110][ T6176] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 54257 - 0 [ 616.869249][ T6176] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.888163][ T6176] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 32875 - 0 [ 616.913626][ T6176] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 54257 - 0 [ 617.052718][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3120'. [ 617.063076][T18149] bond19: entered promiscuous mode [ 617.081023][T18149] 8021q: adding VLAN 0 to HW filter on device bond19 [ 617.108385][T18157] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3120'. [ 617.124233][T18162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3119'. [ 617.141420][T18161] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3118'. [ 617.194197][T18157] batadv18: entered promiscuous mode [ 617.245495][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3121'. [ 617.268298][T18157] batadv18: entered allmulticast mode [ 617.373228][T18150] batadv10: entered promiscuous mode [ 617.379280][T18157] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3120'. [ 617.408785][T18150] batadv10: entered allmulticast mode [ 617.422335][T18150] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 617.443378][T18174] validate_nla: 6 callbacks suppressed [ 617.443399][T18174] netlink: 'syz.0.3121': attribute type 8 has an invalid length. [ 617.455890][T18150] bond19: (slave batadv10): Enslaving as an active interface with an up link [ 617.916635][T18181] netlink: 'syz.1.3122': attribute type 6 has an invalid length. [ 617.924683][T18181] netlink: 'syz.1.3122': attribute type 5 has an invalid length. [ 617.935617][T18181] netlink: 'syz.1.3122': attribute type 16 has an invalid length. [ 617.943659][T18181] netlink: 'syz.1.3122': attribute type 17 has an invalid length. [ 618.061034][T18181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 618.194859][T18190] netlink: 'syz.3.3126': attribute type 1 has an invalid length. [ 618.207316][T18190] netlink: 'syz.3.3126': attribute type 2 has an invalid length. [ 618.312471][T18191] vlan2: entered promiscuous mode [ 618.760128][T18200] 8021q: adding VLAN 0 to HW filter on device bond31 [ 618.788392][T18200] bridge0: port 8(bond31) entered blocking state [ 618.795836][T18200] bridge0: port 8(bond31) entered disabled state [ 618.804305][T18209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.814624][T18200] bond31: entered allmulticast mode [ 618.837859][T18200] bond31: entered promiscuous mode [ 618.924932][T18196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.025930][T18207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.257162][T18211] bond0: entered promiscuous mode [ 619.284096][T18211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.455709][T18213] batadv11: entered promiscuous mode [ 619.469943][T18213] batadv11: entered allmulticast mode [ 619.487343][T18213] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 619.526642][T18213] bond0: (slave batadv11): Enslaving as an active interface with an up link [ 620.079195][T18231] batadv12: entered promiscuous mode [ 620.118501][T18231] batadv12: entered allmulticast mode [ 620.232621][T18235] sch_tbf: burst 5 is lower than device bridge26 mtu (1514) ! [ 620.806669][T18253] netlink: 'syz.3.3142': attribute type 6 has an invalid length. [ 620.825083][T18253] netlink: 'syz.3.3142': attribute type 5 has an invalid length. [ 620.864183][T18253] netlink: 'syz.3.3142': attribute type 16 has an invalid length. [ 620.983220][T18253] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.997549][T18253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 621.142506][T18254] tipc: Resetting bearer [ 621.200350][T18254] bond8: left promiscuous mode [ 621.219946][T18254] batadv2: left promiscuous mode [ 621.225141][T18254] batadv2: left allmulticast mode [ 621.296323][T18254] bond9: left promiscuous mode [ 621.318832][T18254] batadv3: left promiscuous mode [ 621.340588][T18254] batadv3: left allmulticast mode [ 621.365226][T18254] bond10: left promiscuous mode [ 621.390004][T18254] batadv4: left promiscuous mode [ 621.396179][T18254] batadv4: left allmulticast mode [ 621.445226][T18254] bond12: left promiscuous mode [ 621.469826][T18254] batadv5: left promiscuous mode [ 621.480012][T18254] batadv5: left allmulticast mode [ 621.496973][T18254] batadv6: left promiscuous mode [ 621.508428][T18254] batadv6: left allmulticast mode [ 621.542368][T18254] bond13: left promiscuous mode [ 621.551579][T18254] batadv7: left promiscuous mode [ 621.556653][T18254] batadv7: left allmulticast mode [ 621.597828][T18254] bond14: left promiscuous mode [ 621.613442][T18254] batadv8: left promiscuous mode [ 621.629126][T18254] batadv8: left allmulticast mode [ 621.717567][T18254] bond15: left promiscuous mode [ 621.760058][T18254] batadv9: left promiscuous mode [ 621.775377][T18254] batadv9: left allmulticast mode [ 621.782999][T18269] __nla_validate_parse: 19 callbacks suppressed [ 621.783020][T18269] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3147'. [ 621.885376][T18254] bond17: left promiscuous mode [ 621.913890][T18254] batadv10: left promiscuous mode [ 621.959534][T18254] batadv10: left allmulticast mode [ 622.011795][T18277] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3147'. [ 622.035933][T18254] bond18: left promiscuous mode [ 622.054073][T18254] batadv11: left promiscuous mode [ 622.059167][T18254] batadv11: left allmulticast mode [ 622.088904][T18254] bond19: left promiscuous mode [ 622.102224][T18280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3150'. [ 622.136085][T18254] batadv12: left promiscuous mode [ 622.142204][T18254] batadv12: left allmulticast mode [ 622.182506][T18254] bond20: left promiscuous mode [ 622.202745][T18254] batadv13: left promiscuous mode [ 622.212779][T18254] batadv13: left allmulticast mode [ 622.239595][T18254] bond21: left promiscuous mode [ 622.249059][T18254] batadv14: left promiscuous mode [ 622.255268][T18254] batadv14: left allmulticast mode [ 622.273788][T18254] bond22: left promiscuous mode [ 622.297134][T18254] bond23: left promiscuous mode [ 622.311515][T18254] batadv15: left promiscuous mode [ 622.327113][T18254] batadv15: left allmulticast mode [ 622.404268][T18254] bond28: left promiscuous mode [ 622.423964][T18254] batadv16: left promiscuous mode [ 622.429052][T18254] batadv16: left allmulticast mode [ 622.448543][T18254] bond29: left promiscuous mode [ 622.462513][T18254] batadv17: left promiscuous mode [ 622.478032][T18254] batadv17: left allmulticast mode [ 622.502327][T18254] vlan0: left promiscuous mode [ 622.507347][T18254] vlan0: left allmulticast mode [ 622.519951][T18254] hsr_slave_1: left allmulticast mode [ 622.527306][T18254] batadv18: left promiscuous mode [ 622.533602][T18254] batadv18: left allmulticast mode [ 622.561573][T18267] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR [ 622.577524][T18269] batadv14: entered promiscuous mode [ 622.608855][T18269] batadv14: entered allmulticast mode [ 622.722105][T18282] sch_tbf: burst 5 is lower than device bridge37 mtu (1514) ! [ 622.830676][ T5898] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 623.233052][T18307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3157'. [ 623.461849][T18315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.491651][T18315] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.562289][T18315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 623.625605][ T1106] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 623.671161][T17867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 624.125993][T18325] validate_nla: 3 callbacks suppressed [ 624.126015][T18325] netlink: 'syz.0.3162': attribute type 4 has an invalid length. [ 624.323332][T18333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3165'. [ 624.674435][T18340] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3166'. [ 624.684169][T18340] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3166'. [ 624.694030][T18340] netlink: 'syz.1.3166': attribute type 6 has an invalid length. [ 624.722293][T18340] netlink: 'syz.1.3166': attribute type 5 has an invalid length. [ 624.750161][T18340] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3166'. [ 624.862507][ T1118] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 624.874908][T18339] netlink: 'syz.1.3166': attribute type 16 has an invalid length. [ 624.882108][ T1118] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 624.889452][T18339] netlink: 'syz.1.3166': attribute type 17 has an invalid length. [ 624.958224][T18339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 625.479875][T18358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3174'. [ 625.489033][T18358] IPv6: Can't replace route, no match found [ 625.526467][T18359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3173'. [ 625.910161][ T5889] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 625.950734][T18369] bridge29: entered promiscuous mode [ 626.005300][T18369] bridge29: entered allmulticast mode [ 626.867288][T18392] siw: device registration error -23 [ 627.232320][T18371] infiniband syz1: set down [ 627.289970][T18371] infiniband syz1: added macvlan1 [ 627.296261][T18371] syz1: rxe_create_cq: returned err = -12 [ 627.340387][T18371] infiniband syz1: Couldn't create ib_mad CQ [ 627.363735][T18371] infiniband syz1: Couldn't open port 1 [ 627.394399][T18410] __nla_validate_parse: 6 callbacks suppressed [ 627.394419][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3190'. [ 627.478295][T18371] RDS/IB: syz1: added [ 627.516421][T18371] smc: adding ib device syz1 with port count 1 [ 627.550430][T18371] smc: ib device syz1 port 1 has pnetid [ 628.160140][T18435] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3201'. [ 628.181801][T18435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3201'. [ 628.220092][T18435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3201'. [ 628.325613][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'. [ 629.109642][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 629.590937][T18431] batadv_slave_1: left promiscuous mode [ 629.714394][T18431] bond5: left promiscuous mode [ 629.727325][T18431] batadv2: left promiscuous mode [ 629.740164][T18431] batadv2: left allmulticast mode [ 629.756656][T18431] bond6: left promiscuous mode [ 629.771676][T18431] batadv3: left promiscuous mode [ 629.787030][T18431] batadv3: left allmulticast mode [ 629.798196][T18431] bond7: left promiscuous mode [ 629.811167][T18431] batadv4: left promiscuous mode [ 629.826417][T18431] batadv4: left allmulticast mode [ 629.838108][T18431] ipvlan0: left promiscuous mode [ 629.867195][T18431] bond8: left promiscuous mode [ 629.881415][T18431] batadv5: left promiscuous mode [ 629.886496][T18431] batadv5: left allmulticast mode [ 629.927617][T18431] bond10: left promiscuous mode [ 629.950867][T18431] batadv6: left promiscuous mode [ 629.963694][T18431] batadv6: left allmulticast mode [ 629.974913][T18431] bond11: left promiscuous mode [ 629.993866][T18431] batadv7: left promiscuous mode [ 629.998892][T18431] batadv7: left allmulticast mode [ 630.015204][T18431] bond12: left promiscuous mode [ 630.037956][T18431] batadv8: left promiscuous mode [ 630.044295][T18431] batadv8: left allmulticast mode [ 630.061225][T18431] bond14: left promiscuous mode [ 630.183148][T18431] bond17: left promiscuous mode [ 630.198121][T18431] batadv9: left promiscuous mode [ 630.203684][T18431] batadv9: left allmulticast mode [ 630.209099][T18431] batadv0: left promiscuous mode [ 630.219807][T18431] batadv0: left allmulticast mode [ 630.277670][T18431] batman_adv: batadv0: Interface deactivated: macvlan0 [ 630.383518][T18431] bond19: left promiscuous mode [ 630.408782][T18431] batadv10: left promiscuous mode [ 630.418902][T18431] batadv10: left allmulticast mode [ 630.452660][T18449] 8021q: VLANs not supported on vcan0 [ 630.705629][T18465] openvswitch: netlink: Message has 1 unknown bytes. [ 630.709532][T18466] netlink: 'syz.4.3210': attribute type 9 has an invalid length. [ 630.989783][T17867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 631.000096][T18469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 631.233483][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3218'. [ 631.300697][T17867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 631.410356][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3219'. [ 631.550242][T18491] netlink: 'syz.0.3221': attribute type 1 has an invalid length. [ 631.558118][T18491] netlink: 'syz.0.3221': attribute type 2 has an invalid length. [ 632.830404][T18515] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 633.212338][T18530] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3232'. [ 633.223488][T18530] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3232'. [ 633.256636][T18530] netlink: 'syz.0.3232': attribute type 6 has an invalid length. [ 633.317711][T18530] netlink: 'syz.0.3232': attribute type 5 has an invalid length. [ 633.369498][T18530] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3232'. [ 633.541329][T18517] netlink: 'syz.0.3232': attribute type 16 has an invalid length. [ 633.550558][T18517] netlink: 'syz.0.3232': attribute type 17 has an invalid length. [ 633.730246][T18517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.747543][T18517] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.786459][T18517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 634.630529][T18551] netlink: 'syz.0.3236': attribute type 1 has an invalid length. [ 634.638398][T18551] netlink: 'syz.0.3236': attribute type 2 has an invalid length. [ 634.726350][T18553] netlink: 'syz.2.3237': attribute type 12 has an invalid length. [ 634.893012][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3238'. [ 635.338759][T18566] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3239'. [ 635.348403][T18566] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3239'. [ 635.359481][T18566] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3239'. [ 635.559712][T18568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 635.809000][T18577] validate_nla: 4 callbacks suppressed [ 635.809023][T18577] netlink: 'syz.0.3244': attribute type 1 has an invalid length. [ 635.876559][T18581] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3244'. [ 636.032512][T18577] bond24: entered promiscuous mode [ 636.050410][T18577] 8021q: adding VLAN 0 to HW filter on device bond24 [ 636.062308][T18584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3246'. [ 636.107273][T18588] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 636.146496][T18585] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3244'. [ 636.176637][T18581] batadv0: entered promiscuous mode [ 636.198789][T18581] batadv0: entered allmulticast mode [ 636.251690][T18581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.307565][T18581] bond24: (slave batadv0): Enslaving as an active interface with an up link [ 636.510452][T18589] sch_tbf: burst 5 is lower than device bridge29 mtu (1514) ! [ 636.563995][T18596] sch_tbf: burst 5 is lower than device bridge23 mtu (1514) ! [ 637.167083][T18620] netlink: 'syz.1.3258': attribute type 6 has an invalid length. [ 637.192256][T18620] netlink: 'syz.1.3258': attribute type 5 has an invalid length. [ 637.233033][T18620] netlink: 'syz.1.3258': attribute type 16 has an invalid length. [ 637.270612][T18620] netlink: 'syz.1.3258': attribute type 17 has an invalid length. [ 637.322076][T18620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 637.541623][T18633] sch_tbf: burst 5 is lower than device bridge24 mtu (1514) ! [ 637.659151][T18642] netlink: 'syz.0.3267': attribute type 1 has an invalid length. [ 637.673774][T18642] netlink: 'syz.0.3267': attribute type 2 has an invalid length. [ 637.702175][T18643] netlink: 'syz.4.3266': attribute type 6 has an invalid length. [ 637.710048][T18643] netlink: 'syz.4.3266': attribute type 5 has an invalid length. [ 637.720514][T18643] netlink: 'syz.4.3266': attribute type 16 has an invalid length. [ 637.736945][T18643] gretap0: left promiscuous mode [ 637.805813][T18643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.000654][T18647] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 638.389583][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 638.613152][T18671] __nla_validate_parse: 10 callbacks suppressed [ 638.613172][T18671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3275'. [ 638.631300][T18671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3275'. [ 638.679443][T18671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3275'. [ 638.750825][T18671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3275'. [ 638.903308][T18677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 639.594496][T18705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3290'. [ 640.773046][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3301'. [ 640.783146][T18735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3303'. [ 640.909973][T18736] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3302'. [ 640.918987][T18736] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3302'. [ 640.929152][T18736] validate_nla: 3 callbacks suppressed [ 640.929168][T18736] netlink: 'syz.3.3302': attribute type 6 has an invalid length. [ 640.940570][T18740] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3303'. [ 640.982922][T18736] netlink: 'syz.3.3302': attribute type 5 has an invalid length. [ 641.043664][T18736] netlink: 'syz.3.3302': attribute type 16 has an invalid length. [ 641.053438][T18736] netlink: 'syz.3.3302': attribute type 17 has an invalid length. [ 641.152055][T18736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 641.179879][T17867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 641.272718][T17867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 641.281538][T18748] bond32: entered promiscuous mode [ 641.288377][T18748] 8021q: adding VLAN 0 to HW filter on device bond32 [ 641.370170][T18753] batadv19: entered promiscuous mode [ 641.375739][T18753] batadv19: entered allmulticast mode [ 641.386344][T18753] 8021q: adding VLAN 0 to HW filter on device batadv19 [ 641.444998][T18753] bond32: (slave batadv19): Enslaving as an active interface with an up link [ 641.519842][T18761] netlink: 'syz.0.3305': attribute type 6 has an invalid length. [ 641.536741][T18761] netlink: 'syz.0.3305': attribute type 5 has an invalid length. [ 641.613299][T18764] netlink: 'syz.0.3305': attribute type 16 has an invalid length. [ 641.621723][T18764] netlink: 'syz.0.3305': attribute type 17 has an invalid length. [ 641.717664][T18764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 642.588028][T18793] bond0: entered promiscuous mode [ 642.622116][T18793] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 642.670677][T18793] team0: Port device macvlan0 added [ 643.802366][T18840] __nla_validate_parse: 10 callbacks suppressed [ 643.802388][T18840] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3333'. [ 644.031366][T18823] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 644.346441][T18856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 644.756710][T18871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3345'. [ 644.778259][T18871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3345'. [ 645.002778][T18883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3350'. [ 645.024900][T18885] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3348'. [ 645.118500][T18886] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3351'. [ 645.473442][T18900] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3352'. [ 645.482890][T18900] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3352'. [ 645.492476][T18900] netlink: 'syz.0.3352': attribute type 6 has an invalid length. [ 645.539827][T18900] netlink: 'syz.0.3352': attribute type 5 has an invalid length. [ 645.589395][T18900] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3352'. [ 645.621518][T18890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 645.631806][T18906] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 645.733002][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3354'. [ 646.298415][T18925] sch_tbf: burst 5 is lower than device bridge30 mtu (1514) ! [ 646.663574][T18938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 646.775296][T18939] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 647.121052][T18953] validate_nla: 3 callbacks suppressed [ 647.121073][T18953] netlink: 'syz.2.3372': attribute type 1 has an invalid length. [ 647.317459][T18960] netlink: 'syz.4.3373': attribute type 303 has an invalid length. [ 647.711528][T18964] sch_tbf: burst 5 is lower than device bridge38 mtu (1514) ! [ 647.894520][T18971] batadv20: entered promiscuous mode [ 647.934659][T18971] batadv20: entered allmulticast mode [ 648.507043][T19001] netlink: 'syz.2.3387': attribute type 1 has an invalid length. [ 648.703971][T19010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 649.436153][T19025] __nla_validate_parse: 13 callbacks suppressed [ 649.436176][T19025] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3397'. [ 649.512557][T19025] batadv14: entered promiscuous mode [ 649.517899][T19025] batadv14: entered allmulticast mode [ 649.724548][T19025] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3397'. [ 649.898578][T19041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3402'. [ 650.039500][T19047] sch_tbf: burst 5 is lower than device bridge26 mtu (1514) ! [ 650.183237][T19056] netlink: 'syz.3.3406': attribute type 1 has an invalid length. [ 650.183386][T19054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3404'. [ 650.200247][T19056] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.3406'. [ 650.221947][T19054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3404'. [ 650.274447][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 650.394331][T19064] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3407'. [ 650.404051][T19064] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3407'. [ 650.413543][T19064] netlink: 'syz.1.3407': attribute type 6 has an invalid length. [ 650.422368][T19064] netlink: 'syz.1.3407': attribute type 5 has an invalid length. [ 650.434614][T19064] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3407'. [ 650.455579][T19064] netlink: 'syz.1.3407': attribute type 16 has an invalid length. [ 650.463821][T19064] netlink: 'syz.1.3407': attribute type 17 has an invalid length. [ 650.585361][T19064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 650.850410][T19073] netlink: 'syz.2.3410': attribute type 303 has an invalid length. [ 650.992036][T19078] netlink: 'syz.0.3412': attribute type 1 has an invalid length. [ 651.144363][T19078] bond25: entered promiscuous mode [ 651.150862][T19078] 8021q: adding VLAN 0 to HW filter on device bond25 [ 651.178285][T19081] batadv12: entered promiscuous mode [ 651.184384][T19081] batadv12: entered allmulticast mode [ 651.195039][T19081] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 651.206942][T19081] bond25: (slave batadv12): Enslaving as an active interface with an up link [ 651.413424][T19090] batadv13: entered promiscuous mode [ 651.418770][T19090] batadv13: entered allmulticast mode [ 651.547056][T19094] tun0: tun_chr_ioctl cmd 35108 [ 652.526961][T19127] validate_nla: 1 callbacks suppressed [ 652.526981][T19127] netlink: 'syz.3.3426': attribute type 6 has an invalid length. [ 652.559619][T19127] netlink: 'syz.3.3426': attribute type 5 has an invalid length. [ 652.587333][T19127] netlink: 'syz.3.3426': attribute type 16 has an invalid length. [ 652.595476][T19127] netlink: 'syz.3.3426': attribute type 17 has an invalid length. [ 652.610011][T19130] netlink: 'syz.1.3427': attribute type 303 has an invalid length. [ 652.626021][T19127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 652.642651][T10472] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 652.744743][T19135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 652.994152][T19138] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 653.085534][ T5920] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 653.331169][T19142] batadv11: entered promiscuous mode [ 653.344208][T19142] batadv11: entered allmulticast mode [ 653.446046][T19145] netlink: 'syz.1.3434': attribute type 1 has an invalid length. [ 654.108344][T19168] batadv20: entered promiscuous mode [ 654.129875][T19168] batadv20: entered allmulticast mode [ 654.229736][T19176] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 654.399930][T19183] netlink: 'syz.0.3444': attribute type 303 has an invalid length. [ 654.482926][T19183] __nla_validate_parse: 20 callbacks suppressed [ 654.482946][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3444'. [ 654.737299][T19192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3447'. [ 654.771175][T19188] 8021q: adding VLAN 0 to HW filter on device bond21 [ 654.773101][T19192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3447'. [ 654.802061][T19188] bridge0: port 2(bond21) entered blocking state [ 654.807477][T19196] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3449'. [ 654.818471][T19188] bridge0: port 2(bond21) entered disabled state [ 654.825483][T19188] bond21: entered allmulticast mode [ 654.834201][T19188] bond21: entered promiscuous mode [ 654.841063][T19188] bridge0: port 2(bond21) entered blocking state [ 654.847710][T19188] bridge0: port 2(bond21) entered forwarding state [ 654.957608][T19196] batadv20: entered promiscuous mode [ 654.990568][T19196] batadv20: entered allmulticast mode [ 655.026298][T19204] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3448'. [ 655.038589][T19204] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3448'. [ 655.048392][T19204] netlink: 'syz.4.3448': attribute type 6 has an invalid length. [ 655.057804][T19204] netlink: 'syz.4.3448': attribute type 5 has an invalid length. [ 655.067517][T19200] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3449'. [ 655.077266][T19204] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3448'. [ 655.104861][ T1106] bridge0: port 2(bond21) entered disabled state [ 655.155091][T19199] netlink: 'syz.4.3448': attribute type 16 has an invalid length. [ 655.254869][T19199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 655.350462][T19213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 655.366882][ T5920] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 655.579658][ T5920] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 655.751333][T19221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3456'. [ 655.841231][T19224] sch_tbf: burst 5 is lower than device bridge39 mtu (1514) ! [ 655.947438][T19227] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 655.962144][T19227] syzkaller1: linktype set to 776 [ 656.431991][T19242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.525006][T19247] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3466'. [ 656.797487][T19251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.813450][T17867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 656.898535][T19256] 8021q: adding VLAN 0 to HW filter on device bond26 [ 656.920868][T19256] bridge0: port 1(bond26) entered blocking state [ 656.927463][T19256] bridge0: port 1(bond26) entered disabled state [ 656.939408][T19256] bond26: entered allmulticast mode [ 656.948603][T19256] bridge0: port 1(bond26) entered blocking state [ 656.949557][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 656.955183][T19256] bridge0: port 1(bond26) entered forwarding state [ 657.034615][ T1106] bridge0: port 1(bond26) entered disabled state [ 657.049603][T17867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 657.082197][T19261] sch_tbf: burst 5 is lower than device bridge27 mtu (1514) ! [ 657.323167][T19265] batadv13: entered promiscuous mode [ 657.353943][T19265] batadv13: entered allmulticast mode [ 658.011823][T19287] tipc: Enabling of bearer rejected, already enabled [ 658.391719][T19300] 8021q: adding VLAN 0 to HW filter on device bond16 [ 658.440236][T19300] bridge0: port 1(bond16) entered blocking state [ 658.446945][T19300] bridge0: port 1(bond16) entered disabled state [ 658.453927][T19300] bond16: entered allmulticast mode [ 658.462786][T19300] bond16: entered promiscuous mode [ 658.624285][T19312] validate_nla: 1 callbacks suppressed [ 658.624306][T19312] netlink: 'syz.3.3484': attribute type 1 has an invalid length. [ 658.656666][T19312] netlink: 'syz.3.3484': attribute type 2 has an invalid length. [ 658.803369][T19315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 659.097569][T19328] netlink: 'syz.1.3490': attribute type 1 has an invalid length. [ 659.117984][T19328] netlink: 'syz.1.3490': attribute type 2 has an invalid length. [ 659.472742][T19336] batadv14: entered promiscuous mode [ 659.493030][T19336] batadv14: entered allmulticast mode [ 659.650428][T19342] __nla_validate_parse: 14 callbacks suppressed [ 659.650449][T19342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3498'. [ 659.704615][T19339] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3495'. [ 660.116796][T19353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 660.159118][T19358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3503'. [ 660.287774][T19367] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3502'. [ 660.297168][T19367] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3502'. [ 660.307666][T19367] netlink: 'syz.2.3502': attribute type 6 has an invalid length. [ 660.319927][T19367] netlink: 'syz.2.3502': attribute type 5 has an invalid length. [ 660.339025][T19365] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3503'. [ 660.368164][T19367] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3502'. [ 660.377439][T19370] netlink: 'syz.2.3502': attribute type 16 has an invalid length. [ 660.414397][T19370] netlink: 'syz.2.3502': attribute type 17 has an invalid length. [ 660.553628][T19370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 660.685303][T19378] netlink: 'syz.1.3505': attribute type 1 has an invalid length. [ 660.696954][T19378] netlink: 'syz.1.3505': attribute type 2 has an invalid length. [ 660.797237][T19384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3507'. [ 660.879852][T19385] sch_tbf: burst 5 is lower than device bridge40 mtu (1514) ! [ 661.014037][T19388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3510'. [ 661.137284][T19391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3511'. [ 661.194542][T19394] batadv11: entered promiscuous mode [ 661.203975][T19394] batadv11: entered allmulticast mode [ 661.563806][T19406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 661.656445][T19411] 8021q: adding VLAN 0 to HW filter on device bond27 [ 661.664888][T19411] bridge0: port 2(bond27) entered blocking state [ 661.676686][T19411] bridge0: port 2(bond27) entered disabled state [ 661.684403][T19411] bond27: entered allmulticast mode [ 661.692634][T19411] bond27: entered promiscuous mode [ 661.698043][T19411] bond26: entered promiscuous mode [ 661.705097][T19411] bridge0: port 2(bond27) entered blocking state [ 661.711644][T19411] bridge0: port 2(bond27) entered forwarding state [ 661.877749][ T6176] bridge0: port 2(bond27) entered disabled state [ 662.152197][T19427] sch_tbf: burst 5 is lower than device bridge31 mtu (1514) ! [ 662.563866][T19448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 662.627347][T19447] batadv13: entered promiscuous mode [ 662.633518][T19447] batadv13: entered allmulticast mode [ 662.911188][T19462] batadv13: entered promiscuous mode [ 662.920326][T19462] batadv13: entered allmulticast mode [ 663.031796][T19463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 663.554089][T19476] 8021q: adding VLAN 0 to HW filter on device bond28 [ 663.604035][T19476] bridge0: port 3(bond28) entered blocking state [ 663.647980][T19476] bridge0: port 3(bond28) entered disabled state [ 663.680958][T19476] bond28: entered allmulticast mode [ 663.702470][T19476] bond28: entered promiscuous mode [ 663.717813][T19476] bridge0: port 3(bond28) entered blocking state [ 663.724381][T19476] bridge0: port 3(bond28) entered forwarding state [ 663.731171][T19493] validate_nla: 4 callbacks suppressed [ 663.731189][T19493] netlink: 'syz.3.3533': attribute type 6 has an invalid length. [ 663.782392][T19493] netlink: 'syz.3.3533': attribute type 5 has an invalid length. [ 663.817043][ T6176] bridge0: port 3(bond28) entered disabled state [ 663.838087][T19489] netlink: 'syz.3.3533': attribute type 16 has an invalid length. [ 663.846219][T19489] netlink: 'syz.3.3533': attribute type 17 has an invalid length. [ 663.891619][T19489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 663.910059][T10472] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 663.984009][T19499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 664.419681][T10472] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 664.852003][T19524] netlink: 'syz.1.3543': attribute type 1 has an invalid length. [ 664.860118][T19524] netlink: 'syz.1.3543': attribute type 2 has an invalid length. [ 664.890143][T19525] __nla_validate_parse: 24 callbacks suppressed [ 664.890165][T19525] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3544'. [ 664.906679][T19525] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3544'. [ 664.916806][T19525] netlink: 'syz.3.3544': attribute type 6 has an invalid length. [ 664.939489][T19525] netlink: 'syz.3.3544': attribute type 5 has an invalid length. [ 664.968015][T19526] netlink: 'syz.3.3544': attribute type 16 has an invalid length. [ 664.976035][T19526] netlink: 'syz.3.3544': attribute type 17 has an invalid length. [ 664.979711][T19525] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3544'. [ 665.010049][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 665.037820][T19526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 665.853840][T19542] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3549'. [ 666.000821][T19547] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3551'. [ 666.082741][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 666.225486][T19551] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3551'. [ 666.338069][T19554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3552'. [ 666.620608][T19557] sch_tbf: burst 5 is lower than device bridge25 mtu (1514) ! [ 666.782213][T19558] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3553'. [ 666.830064][T19558] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3553'. [ 666.873286][T19558] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3553'. [ 666.950467][T19568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 668.433491][T19622] vlan2: entered promiscuous mode [ 668.554844][T19625] batadv13: entered promiscuous mode [ 668.609412][T19625] batadv13: entered allmulticast mode [ 668.977119][T19631] validate_nla: 8 callbacks suppressed [ 668.977165][T19631] netlink: 'syz.3.3569': attribute type 1 has an invalid length. [ 669.095635][T19640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 669.283653][T19645] netlink: 'syz.2.3572': attribute type 6 has an invalid length. [ 669.291823][T19645] netlink: 'syz.2.3572': attribute type 5 has an invalid length. [ 669.302362][T19645] netlink: 'syz.2.3572': attribute type 16 has an invalid length. [ 669.310271][T19645] netlink: 'syz.2.3572': attribute type 17 has an invalid length. [ 669.390071][T19645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.166737][T19660] __nla_validate_parse: 18 callbacks suppressed [ 670.166762][T19660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3579'. [ 670.376254][T19669] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3579'. [ 670.455540][T19668] 8021q: VLANs not supported on vcan0 [ 670.488048][T19671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.507268][T17867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 670.542559][T19670] netlink: 'syz.4.3582': attribute type 2 has an invalid length. [ 670.608130][T19675] netlink: 'syz.1.3583': attribute type 1 has an invalid length. [ 670.629991][T17867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 670.637990][T19675] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.3583'. [ 670.685076][T19675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3583'. [ 670.848241][T19683] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3585'. [ 670.869742][T19683] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3585'. [ 670.878884][T19683] netlink: 'syz.2.3585': attribute type 6 has an invalid length. [ 670.907355][T19683] netlink: 'syz.2.3585': attribute type 5 has an invalid length. [ 670.935006][T19683] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3585'. [ 670.973197][T19683] netlink: 'syz.2.3585': attribute type 16 has an invalid length. [ 671.000452][T19687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3588'. [ 671.043289][T19683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 671.102393][T19685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3587'. [ 671.134890][T19690] sch_tbf: burst 5 is lower than device bridge26 mtu (1514) ! [ 671.488893][T19704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3591'. [ 671.609610][T19707] sch_tbf: burst 5 is lower than device bridge27 mtu (1514) ! [ 671.803808][T19712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 672.873362][T19733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 672.973253][T19740] batadv20: entered promiscuous mode [ 672.978610][T19740] batadv20: entered allmulticast mode [ 673.125868][T19745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 673.353664][T19755] sch_tbf: burst 5 is lower than device bridge32 mtu (1514) ! [ 674.242684][T19775] validate_nla: 12 callbacks suppressed [ 674.242706][T19775] netlink: 'syz.3.3612': attribute type 1 has an invalid length. [ 674.294857][T19776] batadv11: entered promiscuous mode [ 674.306323][T19776] batadv11: entered allmulticast mode [ 674.859780][T19788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 674.928709][T19792] batadv11: entered promiscuous mode [ 674.962342][T19792] batadv11: entered allmulticast mode [ 675.353708][T19807] __nla_validate_parse: 27 callbacks suppressed [ 675.353728][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3620'. [ 675.381332][T19808] netlink: 'syz.1.3619': attribute type 303 has an invalid length. [ 675.438685][T19801] sch_tbf: burst 5 is lower than device bridge28 mtu (1514) ! [ 675.494634][T19808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3619'. [ 675.966389][T19821] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3623'. [ 675.984113][T19820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3625'. [ 676.009690][T19820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3625'. [ 676.028978][T19821] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3623'. [ 676.076062][T19824] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3626'. [ 676.089173][T19821] netlink: 'syz.4.3623': attribute type 6 has an invalid length. [ 676.099911][T19821] netlink: 'syz.4.3623': attribute type 5 has an invalid length. [ 676.108571][T19821] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3623'. [ 676.133228][T19825] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3624'. [ 676.143580][T19825] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3624'. [ 676.153223][T19821] netlink: 'syz.4.3623': attribute type 16 has an invalid length. [ 676.153248][T19821] netlink: 'syz.4.3623': attribute type 17 has an invalid length. [ 676.180019][T19825] netlink: 'syz.2.3624': attribute type 6 has an invalid length. [ 676.199276][T19825] netlink: 'syz.2.3624': attribute type 5 has an invalid length. [ 676.222090][T19821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 676.247913][T19824] batadv13: entered promiscuous mode [ 676.257135][T19825] netlink: 'syz.2.3624': attribute type 16 has an invalid length. [ 676.265680][T19825] netlink: 'syz.2.3624': attribute type 17 has an invalid length. [ 676.275505][T19824] batadv13: entered allmulticast mode [ 676.418443][T19825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 676.926900][T19848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 676.944457][T10472] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 677.202797][T10472] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 677.570662][T19863] sch_tbf: burst 5 is lower than device bridge41 mtu (1514) ! [ 677.901145][T19870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 678.341554][T19882] sch_tbf: burst 5 is lower than device bridge27 mtu (1514) ! [ 678.469836][T19886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 679.889686][T19914] sch_tbf: burst 5 is lower than device bridge42 mtu (1514) ! [ 680.386044][T19916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 680.446367][T19920] __nla_validate_parse: 17 callbacks suppressed [ 680.446390][T19920] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3650'. [ 680.462737][T19920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3650'. [ 680.567303][T19923] validate_nla: 1 callbacks suppressed [ 680.567325][T19923] netlink: 'syz.0.3649': attribute type 303 has an invalid length. [ 680.716893][T19928] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3651'. [ 680.733997][T19928] batadv20: entered promiscuous mode [ 680.740039][T19928] batadv20: entered allmulticast mode [ 680.955784][T19928] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3651'. [ 681.381558][T19950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 681.756487][T19955] netlink: 5636 bytes leftover after parsing attributes in process `syz.3.3658'. [ 681.838562][T19958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3658'. [ 681.903032][T19960] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3659'. [ 681.912759][T19960] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3659'. [ 681.922111][T19960] netlink: 'syz.2.3659': attribute type 6 has an invalid length. [ 681.930251][T19960] netlink: 'syz.2.3659': attribute type 5 has an invalid length. [ 681.946240][T19960] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3659'. [ 681.975341][T19960] netlink: 'syz.2.3659': attribute type 16 has an invalid length. [ 681.983945][T19960] netlink: 'syz.2.3659': attribute type 17 has an invalid length. [ 682.021907][T19960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 682.176220][T19963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3660'. [ 682.458378][T19968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 682.817701][T19980] batadv20: entered promiscuous mode [ 682.824170][T19980] batadv20: entered allmulticast mode [ 683.004107][T19987] netlink: 'syz.4.3666': attribute type 6 has an invalid length. [ 683.024354][T19987] netlink: 'syz.4.3666': attribute type 5 has an invalid length. [ 683.065610][T19993] netlink: 'syz.4.3666': attribute type 16 has an invalid length. [ 683.088453][T19993] netlink: 'syz.4.3666': attribute type 17 has an invalid length. [ 683.179121][T19993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 683.486120][T20008] netlink: 'syz.2.3672': attribute type 15 has an invalid length. [ 683.848214][T20014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 684.948540][T20032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 685.067218][T20036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 685.434209][T20045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 685.725432][T20050] validate_nla: 8 callbacks suppressed [ 685.725452][T20050] netlink: 'syz.0.3683': attribute type 15 has an invalid length. [ 685.749631][T20050] __nla_validate_parse: 18 callbacks suppressed [ 685.749652][T20050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3683'. [ 686.145919][T20060] netlink: 'syz.1.3687': attribute type 1 has an invalid length. [ 686.170623][T20060] netlink: 'syz.1.3687': attribute type 2 has an invalid length. [ 686.221314][T20062] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.3688'. [ 686.253580][T20062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3688'. [ 686.498233][T20072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 686.752816][T20074] 8021q: adding VLAN 0 to HW filter on device bond33 [ 686.761564][T20074] bridge0: port 9(bond33) entered blocking state [ 686.768125][T20074] bridge0: port 9(bond33) entered disabled state [ 686.775469][T20074] bond33: entered allmulticast mode [ 686.783659][T20074] bond33: entered promiscuous mode [ 686.810947][T20074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3692'. [ 686.823553][T20074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3692'. [ 687.061423][T20083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 687.119226][T20088] netlink: 'syz.2.3695': attribute type 29 has an invalid length. [ 687.153797][T20088] netlink: 'syz.2.3695': attribute type 29 has an invalid length. [ 687.163313][T20088] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3695'. [ 687.168598][T20089] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3694'. [ 687.199518][T20089] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3694'. [ 687.215288][T20089] netlink: 'syz.1.3694': attribute type 6 has an invalid length. [ 687.239834][T20089] netlink: 'syz.1.3694': attribute type 5 has an invalid length. [ 687.287829][T20090] netlink: 'syz.1.3694': attribute type 16 has an invalid length. [ 687.289416][T20089] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3694'. [ 687.319573][T20092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3696'. [ 687.409970][T20090] netlink: 'syz.1.3694': attribute type 17 has an invalid length. [ 687.454589][T20090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 687.502482][T20098] netlink: 'syz.2.3697': attribute type 6 has an invalid length. [ 687.529228][T20098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 687.550437][T20100] sch_tbf: burst 5 is lower than device bridge43 mtu (1514) ! [ 687.895567][T20109] sch_tbf: burst 5 is lower than device bridge28 mtu (1514) ! [ 688.071036][T20103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 688.843197][T20137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 689.130220][T20144] sch_tbf: burst 5 is lower than device bridge29 mtu (1514) ! [ 689.490999][T20155] sch_tbf: burst 5 is lower than device bridge33 mtu (1514) ! [ 689.526683][T20154] 8021q: VLANs not supported on vcan0 [ 689.595191][T20157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 690.065325][T20171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 691.040598][T20182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 691.042570][T20141] syz.3.3707: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 691.063989][T20185] __nla_validate_parse: 17 callbacks suppressed [ 691.064011][T20185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3722'. [ 691.095730][T20141] ,cpuset=/,mems_allowed=0-1 [ 691.101274][T20141] CPU: 0 UID: 0 PID: 20141 Comm: syz.3.3707 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 691.101304][T20141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 691.101326][T20141] Call Trace: [ 691.101339][T20141] [ 691.101350][T20141] dump_stack_lvl+0x189/0x250 [ 691.101393][T20141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 691.101427][T20141] ? __pfx__printk+0x10/0x10 [ 691.101452][T20141] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 691.101475][T20141] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 691.101507][T20141] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 691.101535][T20141] warn_alloc+0x214/0x310 [ 691.101567][T20141] ? __pfx_warn_alloc+0x10/0x10 [ 691.101602][T20141] ? __get_vm_area_node+0x28f/0x300 [ 691.101625][T20141] ? __do_replace+0xb4/0xaa0 [ 691.101649][T20141] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 691.101671][T20141] ? stack_depot_save_flags+0x40/0x900 [ 691.101723][T20141] ? translate_table+0x1b4d/0x1f90 [ 691.101759][T20141] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 691.101793][T20141] ? __do_replace+0xb4/0xaa0 [ 691.101814][T20141] vzalloc_noprof+0xb2/0xf0 [ 691.101838][T20141] ? __do_replace+0xb4/0xaa0 [ 691.101858][T20141] __do_replace+0xb4/0xaa0 [ 691.101881][T20141] ? __pfx_translate_table+0x10/0x10 [ 691.101919][T20141] ? __pfx___do_replace+0x10/0x10 [ 691.101947][T20141] ? _copy_from_user+0x94/0xb0 [ 691.101973][T20141] do_arpt_set_ctl+0xa2a/0xf10 [ 691.101997][T20141] ? __mutex_trylock_common+0x153/0x260 [ 691.102023][T20141] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 691.102060][T20141] ? rcu_is_watching+0x15/0xb0 [ 691.102109][T20141] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 691.102141][T20141] ? __pfx___mutex_lock+0x10/0x10 [ 691.102167][T20141] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 691.102193][T20141] ? aa_sk_perm+0x81e/0x950 [ 691.102223][T20141] ? __pfx_aa_sk_perm+0x10/0x10 [ 691.102256][T20141] nf_setsockopt+0x26c/0x290 [ 691.102290][T20141] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 691.102320][T20141] do_sock_setsockopt+0x257/0x3e0 [ 691.102354][T20141] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 691.102390][T20141] ? __fget_files+0x2a/0x420 [ 691.102422][T20141] __x64_sys_setsockopt+0x18b/0x220 [ 691.102457][T20141] do_syscall_64+0xfa/0x3b0 [ 691.102481][T20141] ? lockdep_hardirqs_on+0x9c/0x150 [ 691.102514][T20141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.102533][T20141] ? clear_bhb_loop+0x60/0xb0 [ 691.102557][T20141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.102582][T20141] RIP: 0033:0x7fa37e58e929 [ 691.102603][T20141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.102622][T20141] RSP: 002b:00007fa37f31f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 691.102645][T20141] RAX: ffffffffffffffda RBX: 00007fa37e7b6080 RCX: 00007fa37e58e929 [ 691.102661][T20141] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 691.102675][T20141] RBP: 00007fa37e610b39 R08: 0000000000000068 R09: 0000000000000000 [ 691.102689][T20141] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 691.102702][T20141] R13: 0000000000000000 R14: 00007fa37e7b6080 R15: 00007fff84b97ed8 [ 691.102737][T20141] [ 691.102750][T20141] Mem-Info: [ 691.225893][T20185] sch_tbf: burst 5 is lower than device bridge34 mtu (1514) ! [ 691.234593][T20141] active_anon:8482 inactive_anon:0 isolated_anon:0 [ 691.234593][T20141] active_file:1481 inactive_file:40092 isolated_file:0 [ 691.234593][T20141] unevictable:768 dirty:228 writeback:0 [ 691.234593][T20141] slab_reclaimable:12007 slab_unreclaimable:202562 [ 691.234593][T20141] mapped:33395 shmem:4267 pagetables:1146 [ 691.234593][T20141] sec_pagetables:0 bounce:0 [ 691.234593][T20141] kernel_misc_reclaimable:0 [ 691.234593][T20141] free:1211703 free_pcp:18425 free_cma:0 [ 691.320815][T20188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3724'. [ 691.336567][T20141] Node 0 active_anon:33928kB inactive_anon:0kB active_file:5924kB inactive_file:160164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133580kB dirty:912kB writeback:0kB shmem:15532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15816kB pagetables:4440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 691.343936][T20191] validate_nla: 17 callbacks suppressed [ 691.343958][T20191] netlink: 'syz.4.3723': attribute type 1 has an invalid length. [ 691.351085][T20141] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 691.380246][T20191] netlink: 'syz.4.3723': attribute type 2 has an invalid length. [ 691.386380][T20141] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 691.656664][T20194] 8021q: VLANs not supported on vcan0 [ 691.672300][T20141] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 691.688374][T20141] Node 0 DMA32 free:926644kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33480kB inactive_anon:0kB active_file:5924kB inactive_file:158324kB unevictable:1536kB writepending:912kB present:3129332kB managed:2560944kB mlocked:0kB bounce:0kB free_pcp:61068kB local_pcp:29804kB free_cma:0kB [ 691.755710][T20198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3726'. [ 691.766067][T20141] lowmem_reserve[]: 0 0 1 1 1 [ 691.773635][T20141] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 691.814518][T20197] netlink: 'syz.1.3727': attribute type 1 has an invalid length. [ 691.840695][T20197] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.3727'. [ 691.850724][T20141] lowmem_reserve[]: 0 0 0 0 0 [ 691.856865][T20141] Node 1 Normal free:3905204kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12548kB local_pcp:8928kB free_cma:0kB [ 691.871414][T20199] sch_tbf: burst 5 is lower than device bridge44 mtu (1514) ! [ 691.963660][T20202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3727'. [ 691.965723][T20141] lowmem_reserve[]: 0 0 0 0 0 [ 692.004342][T20141] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 692.083877][T20141] Node 0 DMA32: 196*4kB (UME) 305*8kB (UME) 158*16kB (UME) 188*32kB (UM) 56*64kB (UM) 23*128kB (UM) 66*256kB (UM) 52*512kB (UME) 64*1024kB (U) 8*2048kB (UM) 192*4096kB (UM) = 930168kB [ 692.157833][T20209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3729'. [ 692.189471][T20141] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 692.202145][T20206] netlink: 'syz.4.3729': attribute type 1 has an invalid length. [ 692.221952][T20206] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.3729'. [ 692.259398][T20141] Node 1 Normal: 207*4kB (UME) 49*8kB (UME) 35*16kB (UME) 182*32kB (UME) 76*64kB (UME) 26*128kB (UME) 7*256kB (UME) 3*512kB (UM) 1*1024kB (M) 1*2048kB (E) 948*4096kB (M) = 3905204kB [ 692.334808][T20141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 692.372588][T20141] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 692.403461][T20141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 692.437067][T20141] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 692.478451][T20141] 46630 total pagecache pages [ 692.489490][T20141] 0 pages in swap cache [ 692.493704][T20141] Free swap = 124996kB [ 692.497870][T20141] Total swap = 124996kB [ 692.532183][T20141] 2097051 pages RAM [ 692.536052][T20141] 0 pages HighMem/MovableOnly [ 692.558855][T20141] 424709 pages reserved [ 692.563665][T20216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 692.568997][T20141] 0 pages cma reserved [ 693.073978][T20221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3734'. [ 693.430108][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 693.559888][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3736'. [ 693.680913][T20232] 8021q: VLANs not supported on vcan0 [ 693.778540][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3739'. [ 693.796467][T20234] batadv13: entered promiscuous mode [ 693.809461][T20234] batadv13: entered allmulticast mode [ 694.977215][T20251] netlink: 'syz.1.3743': attribute type 1 has an invalid length. [ 695.229031][T20256] netlink: 'syz.2.3744': attribute type 6 has an invalid length. [ 695.237733][T20256] netlink: 'syz.2.3744': attribute type 5 has an invalid length. [ 695.250233][T20256] netlink: 'syz.2.3744': attribute type 16 has an invalid length. [ 695.258211][T20256] netlink: 'syz.2.3744': attribute type 17 has an invalid length. [ 695.340152][T20256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 695.614520][T20260] 8021q: adding VLAN 0 to HW filter on device bond22 [ 695.651328][T20260] bridge0: port 3(bond22) entered blocking state [ 695.673674][T20260] bridge0: port 3(bond22) entered disabled state [ 695.680535][T20260] bond22: entered allmulticast mode [ 695.694954][T20260] bond22: entered promiscuous mode [ 695.703007][T20260] bridge0: port 3(bond22) entered blocking state [ 695.709533][T20260] bridge0: port 3(bond22) entered forwarding state [ 695.786447][T17444] bridge0: port 3(bond22) entered disabled state [ 696.132801][T20270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 696.805482][T20285] __nla_validate_parse: 7 callbacks suppressed [ 696.805502][T20285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3754'. [ 696.822844][T20285] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3754'. [ 696.879849][T20285] batadv11: entered promiscuous mode [ 696.897619][T20285] batadv11: entered allmulticast mode [ 697.104384][T20285] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3754'. [ 697.232966][T20299] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3755'. [ 697.283866][T20299] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3755'. [ 697.336284][T20299] netlink: 'syz.0.3755': attribute type 6 has an invalid length. [ 697.339763][T20289] netlink: 'syz.0.3755': attribute type 16 has an invalid length. [ 697.404556][T20299] netlink: 'syz.0.3755': attribute type 5 has an invalid length. [ 697.449633][T20289] netlink: 'syz.0.3755': attribute type 17 has an invalid length. [ 697.468750][T20299] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3755'. [ 697.544601][T20289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 697.573520][T20306] netlink: 'syz.1.3757': attribute type 1 has an invalid length. [ 697.609377][T20306] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.3757'. [ 697.644264][T20306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3757'. [ 697.730406][T20305] 8021q: adding VLAN 0 to HW filter on device bond23 [ 697.750425][T20305] bridge0: port 4(bond23) entered blocking state [ 697.757159][T20305] bridge0: port 4(bond23) entered disabled state [ 697.764404][T20305] bond23: entered allmulticast mode [ 697.772874][T20305] bond23: entered promiscuous mode [ 697.778853][T20305] bridge0: port 4(bond23) entered blocking state [ 697.785443][T20305] bridge0: port 4(bond23) entered forwarding state [ 698.001995][ T12] bridge0: port 4(bond23) entered disabled state [ 698.194227][T20325] netlink: 'syz.3.3761': attribute type 1 has an invalid length. [ 698.214440][T20325] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.3761'. [ 698.252845][T20328] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3760'. [ 698.270797][T20328] netlink: 'syz.0.3760': attribute type 6 has an invalid length. [ 698.278575][T20328] netlink: 'syz.0.3760': attribute type 5 has an invalid length. [ 698.350524][T20328] netlink: 'syz.0.3760': attribute type 16 has an invalid length. [ 698.358564][T20328] netlink: 'syz.0.3760': attribute type 17 has an invalid length. [ 698.401647][T20328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 699.211327][T10472] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 699.235819][T20347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 699.822804][T20357] 8021q: adding VLAN 0 to HW filter on device bond20 [ 699.836106][T20357] bridge0: port 1(bond20) entered blocking state [ 699.862064][T20357] bridge0: port 1(bond20) entered disabled state [ 699.868722][T20357] bond20: entered allmulticast mode [ 699.892990][T20357] bond20: entered promiscuous mode [ 700.150301][ T5920] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 700.582261][T20378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 700.609704][ T5920] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 700.702105][T20381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 700.795968][T20385] sch_tbf: burst 5 is lower than device bridge30 mtu (1514) ! [ 700.893042][ T5920] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 701.527711][T20393] 8021q: adding VLAN 0 to HW filter on device bond21 [ 701.542320][T20393] bridge0: port 2(bond21) entered blocking state [ 701.549216][T20393] bridge0: port 2(bond21) entered disabled state [ 701.556460][T20393] bond21: entered allmulticast mode [ 701.579293][T20393] bond21: entered promiscuous mode [ 701.782580][T20411] sch_tbf: burst 5 is lower than device bridge45 mtu (1514) ! [ 701.980853][T20416] __nla_validate_parse: 20 callbacks suppressed [ 701.980874][T20416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3789'. [ 702.515785][T20432] validate_nla: 13 callbacks suppressed [ 702.515807][T20432] netlink: 'syz.4.3792': attribute type 1 has an invalid length. [ 702.562011][T20432] netlink: 'syz.4.3792': attribute type 2 has an invalid length. [ 702.584937][T20437] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3793'. [ 702.594616][T20437] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3793'. [ 702.622161][T20437] netlink: 'syz.2.3793': attribute type 6 has an invalid length. [ 702.642686][T20434] netlink: 'syz.2.3793': attribute type 16 has an invalid length. [ 702.649581][T20437] netlink: 'syz.2.3793': attribute type 5 has an invalid length. [ 702.658350][T20437] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3793'. [ 702.686830][T20439] netlink: 'syz.1.3794': attribute type 1 has an invalid length. [ 702.689380][T20434] netlink: 'syz.2.3793': attribute type 17 has an invalid length. [ 702.696036][T20439] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.3794'. [ 702.733865][T20439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3794'. [ 702.809055][T20434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 703.112763][T20453] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3795'. [ 703.121982][T20453] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3795'. [ 703.131736][T20453] netlink: 'syz.0.3795': attribute type 6 has an invalid length. [ 703.158026][T20453] netlink: 'syz.0.3795': attribute type 5 has an invalid length. [ 703.222221][T20453] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3795'. [ 703.267681][T20442] netlink: 'syz.0.3795': attribute type 16 has an invalid length. [ 703.313259][T20442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 703.565052][T20464] 8021q: adding VLAN 0 to HW filter on device bond34 [ 703.574104][T20464] bridge0: port 10(bond34) entered blocking state [ 703.581592][T20464] bridge0: port 10(bond34) entered disabled state [ 703.588470][T20464] bond34: entered allmulticast mode [ 703.597837][T20464] bond34: entered promiscuous mode [ 703.876699][T20471] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.3801'. [ 704.057864][T20481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 704.227407][T20486] batadv14: entered promiscuous mode [ 704.233922][T20486] batadv14: entered allmulticast mode [ 704.431399][T20489] IPVS: Scheduler module ip_vs_sip not found [ 704.739209][T20506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 704.802407][T20511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 705.134730][T20520] 8021q: adding VLAN 0 to HW filter on device bond22 [ 705.143664][T20520] bridge0: port 3(bond22) entered blocking state [ 705.150682][T20520] bridge0: port 3(bond22) entered disabled state [ 705.158682][T20520] bond22: entered allmulticast mode [ 705.172462][T20520] bond22: entered promiscuous mode [ 705.452798][T20532] sch_tbf: burst 5 is lower than device bridge31 mtu (1514) ! [ 705.800945][T20542] bond24: entered promiscuous mode [ 705.806698][T20542] 8021q: adding VLAN 0 to HW filter on device bond24 [ 706.197485][T20565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 706.756248][T20579] 8021q: adding VLAN 0 to HW filter on device bond25 [ 706.824726][T20579] bridge0: port 5(bond25) entered blocking state [ 706.873722][T20579] bridge0: port 5(bond25) entered disabled state [ 706.899912][T20579] bond25: entered allmulticast mode [ 706.907990][T20579] bond25: entered promiscuous mode [ 706.931799][T20579] bridge0: port 5(bond25) entered blocking state [ 706.938310][T20579] bridge0: port 5(bond25) entered forwarding state [ 706.997999][T17444] bridge0: port 5(bond25) entered disabled state [ 707.039169][T20578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 707.083270][T20594] __nla_validate_parse: 27 callbacks suppressed [ 707.083290][T20594] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3830'. [ 707.099080][T20594] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3830'. [ 707.108670][T20594] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3830'. [ 707.168295][T20594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 707.870570][T20602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3832'. [ 707.981882][T20606] sch_tbf: burst 5 is lower than device bridge46 mtu (1514) ! [ 708.267436][T20615] validate_nla: 27 callbacks suppressed [ 708.267457][T20615] netlink: 'syz.0.3838': attribute type 1 has an invalid length. [ 708.294473][T20617] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3839'. [ 708.385305][T20615] bond29: entered promiscuous mode [ 708.420734][T20623] netlink: 'syz.3.3837': attribute type 1 has an invalid length. [ 708.428514][T20623] netlink: 'syz.3.3837': attribute type 2 has an invalid length. [ 708.474709][T20626] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3838'. [ 708.485256][T20615] 8021q: adding VLAN 0 to HW filter on device bond29 [ 708.521307][T20617] batadv13: entered promiscuous mode [ 708.543387][T20617] batadv13: entered allmulticast mode [ 708.574505][T20628] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3839'. [ 709.230476][T20641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3842'. [ 709.363381][T20649] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3840'. [ 709.373003][T20649] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3840'. [ 709.412601][T20649] netlink: 'syz.0.3840': attribute type 6 has an invalid length. [ 709.424236][T20649] netlink: 'syz.0.3840': attribute type 5 has an invalid length. [ 709.496679][T20636] 8021q: adding VLAN 0 to HW filter on device bond17 [ 709.507394][T20636] bridge0: port 2(bond17) entered blocking state [ 709.511957][T20649] netlink: 'syz.0.3840': attribute type 16 has an invalid length. [ 709.518283][T20636] bridge0: port 2(bond17) entered disabled state [ 709.528441][T20649] netlink: 'syz.0.3840': attribute type 17 has an invalid length. [ 709.528999][T20636] bond17: entered allmulticast mode [ 709.545016][T20636] bond17: entered promiscuous mode [ 709.564868][T20646] sch_tbf: burst 5 is lower than device bridge28 mtu (1514) ! [ 709.645478][T20649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 709.983490][T20666] netlink: 'syz.1.3845': attribute type 6 has an invalid length. [ 709.991678][T20666] netlink: 'syz.1.3845': attribute type 5 has an invalid length. [ 710.008898][T20666] netlink: 'syz.1.3845': attribute type 16 has an invalid length. [ 710.021684][T20667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 710.039902][ T5898] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 710.069091][T20666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 710.484851][T20676] syzkaller1: entered promiscuous mode [ 710.491466][T20676] syzkaller1: entered allmulticast mode [ 710.597882][T20680] batadv13: entered promiscuous mode [ 710.608987][T20680] batadv13: entered allmulticast mode [ 710.869726][ T5898] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 711.067318][T20691] 8021q: adding VLAN 0 to HW filter on device bond18 [ 711.077239][T20691] bridge0: port 3(bond18) entered blocking state [ 711.084670][T20691] bridge0: port 3(bond18) entered disabled state [ 711.091843][T20691] bond18: entered allmulticast mode [ 711.103148][T20691] bond18: entered promiscuous mode [ 711.344185][T20707] syzkaller1: entered promiscuous mode [ 711.360361][T20707] syzkaller1: entered allmulticast mode [ 711.870044][ T5920] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 711.939932][T20723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 712.001982][T20729] bond23: entered promiscuous mode [ 712.008547][T20729] 8021q: adding VLAN 0 to HW filter on device bond23 [ 712.051757][T20728] batadv20: entered promiscuous mode [ 712.057120][T20728] batadv20: entered allmulticast mode [ 712.142791][T20736] __nla_validate_parse: 14 callbacks suppressed [ 712.142814][T20736] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3869'. [ 712.236008][T20738] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3870'. [ 712.256526][T20728] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3868'. [ 712.791526][ T5920] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 713.258741][T20777] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3882'. [ 713.292005][T20774] bond24: entered promiscuous mode [ 713.300222][T20780] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3883'. [ 713.308997][T20774] 8021q: adding VLAN 0 to HW filter on device bond24 [ 713.407879][T20780] batadv14: entered promiscuous mode [ 713.419586][T20780] batadv14: entered allmulticast mode [ 713.494352][T20790] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3881'. [ 713.547275][T20791] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3883'. [ 713.679855][T20802] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3884'. [ 713.739572][T20802] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3884'. [ 713.812949][T20802] validate_nla: 13 callbacks suppressed [ 713.812970][T20802] netlink: 'syz.0.3884': attribute type 6 has an invalid length. [ 713.871476][T20784] netlink: 'syz.0.3884': attribute type 16 has an invalid length. [ 713.880378][T20784] netlink: 'syz.0.3884': attribute type 17 has an invalid length. [ 713.890241][T20802] netlink: 'syz.0.3884': attribute type 5 has an invalid length. [ 713.898014][T20802] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3884'. [ 713.955895][T20784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 714.465412][T20820] ================================================================== [ 714.473540][T20820] BUG: KASAN: slab-out-of-bounds in pause_parse_request+0x40/0x160 [ 714.481476][T20820] Read of size 8 at addr ffff8880402b8b30 by task syz.0.3891/20820 [ 714.489405][T20820] [ 714.491757][T20820] CPU: 1 UID: 0 PID: 20820 Comm: syz.0.3891 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 714.491787][T20820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 714.491801][T20820] Call Trace: [ 714.491811][T20820] [ 714.491821][T20820] dump_stack_lvl+0x189/0x250 [ 714.491858][T20820] ? __virt_addr_valid+0x1c8/0x5c0 [ 714.491880][T20820] ? rcu_is_watching+0x15/0xb0 [ 714.491912][T20820] ? __kasan_check_byte+0x12/0x40 [ 714.491935][T20820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 714.491967][T20820] ? rcu_is_watching+0x15/0xb0 [ 714.491999][T20820] ? lock_release+0x4b/0x3e0 [ 714.492032][T20820] ? __virt_addr_valid+0x1c8/0x5c0 [ 714.492060][T20820] ? __virt_addr_valid+0x4a5/0x5c0 [ 714.492083][T20820] print_report+0xd2/0x2b0 [ 714.492112][T20820] ? pause_parse_request+0x40/0x160 [ 714.492137][T20820] kasan_report+0x118/0x150 [ 714.492160][T20820] ? pause_parse_request+0x40/0x160 [ 714.492190][T20820] ? __pfx_pause_parse_request+0x10/0x10 [ 714.492214][T20820] pause_parse_request+0x40/0x160 [ 714.492240][T20820] ? __pfx_pause_parse_request+0x10/0x10 [ 714.492263][T20820] ethnl_default_set_doit+0x2c1/0xa40 [ 714.492294][T20820] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 714.492322][T20820] genl_family_rcv_msg_doit+0x215/0x300 [ 714.492346][T20820] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 714.492374][T20820] ? bpf_lsm_capable+0x9/0x20 [ 714.492393][T20820] ? security_capable+0x7e/0x2e0 [ 714.492423][T20820] genl_rcv_msg+0x60e/0x790 [ 714.492445][T20820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 714.492462][T20820] ? ref_tracker_free+0x63a/0x7d0 [ 714.492490][T20820] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 714.492520][T20820] ? __pfx_ref_tracker_free+0x10/0x10 [ 714.492555][T20820] netlink_rcv_skb+0x205/0x470 [ 714.492581][T20820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 714.492599][T20820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 714.492634][T20820] ? down_read+0x1ad/0x2e0 [ 714.492663][T20820] genl_rcv+0x28/0x40 [ 714.492692][T20820] netlink_unicast+0x758/0x8d0 [ 714.492721][T20820] netlink_sendmsg+0x805/0xb30 [ 714.492751][T20820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 714.492780][T20820] ? aa_sock_msg_perm+0x94/0x160 [ 714.492806][T20820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 714.492832][T20820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 714.492861][T20820] __sock_sendmsg+0x21c/0x270 [ 714.492886][T20820] ____sys_sendmsg+0x505/0x830 [ 714.492922][T20820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 714.492960][T20820] ? import_iovec+0x74/0xa0 [ 714.492983][T20820] ___sys_sendmsg+0x21f/0x2a0 [ 714.493015][T20820] ? __pfx____sys_sendmsg+0x10/0x10 [ 714.493080][T20820] ? __fget_files+0x2a/0x420 [ 714.493105][T20820] ? __fget_files+0x3a0/0x420 [ 714.493135][T20820] __x64_sys_sendmsg+0x19b/0x260 [ 714.493170][T20820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 714.493208][T20820] ? rcu_is_watching+0x15/0xb0 [ 714.493243][T20820] ? do_syscall_64+0xbe/0x3b0 [ 714.493273][T20820] do_syscall_64+0xfa/0x3b0 [ 714.493298][T20820] ? lockdep_hardirqs_on+0x9c/0x150 [ 714.493323][T20820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.493345][T20820] ? clear_bhb_loop+0x60/0xb0 [ 714.493370][T20820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.493392][T20820] RIP: 0033:0x7fc3e1d8e929 [ 714.493413][T20820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.493432][T20820] RSP: 002b:00007fc3e2b57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.493456][T20820] RAX: ffffffffffffffda RBX: 00007fc3e1fb5fa0 RCX: 00007fc3e1d8e929 [ 714.493473][T20820] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 714.493488][T20820] RBP: 00007fc3e1e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 714.493502][T20820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.493516][T20820] R13: 0000000000000000 R14: 00007fc3e1fb5fa0 R15: 00007ffe16b64da8 [ 714.493542][T20820] [ 714.493551][T20820] [ 714.878602][T20820] Allocated by task 20820: [ 714.883018][T20820] kasan_save_track+0x3e/0x80 [ 714.887718][T20820] __kasan_kmalloc+0x93/0xb0 [ 714.892309][T20820] __kmalloc_noprof+0x27a/0x4f0 [ 714.897163][T20820] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 714.903292][T20820] genl_family_rcv_msg_doit+0xb8/0x300 [ 714.908805][T20820] genl_rcv_msg+0x60e/0x790 [ 714.913344][T20820] netlink_rcv_skb+0x205/0x470 [ 714.918122][T20820] genl_rcv+0x28/0x40 [ 714.922138][T20820] netlink_unicast+0x758/0x8d0 [ 714.926927][T20820] netlink_sendmsg+0x805/0xb30 [ 714.931703][T20820] __sock_sendmsg+0x21c/0x270 [ 714.936384][T20820] ____sys_sendmsg+0x505/0x830 [ 714.941169][T20820] ___sys_sendmsg+0x21f/0x2a0 [ 714.945857][T20820] __x64_sys_sendmsg+0x19b/0x260 [ 714.950804][T20820] do_syscall_64+0xfa/0x3b0 [ 714.955322][T20820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.961219][T20820] [ 714.963540][T20820] The buggy address belongs to the object at ffff8880402b8b00 [ 714.963540][T20820] which belongs to the cache kmalloc-64 of size 64 [ 714.977419][T20820] The buggy address is located 8 bytes to the right of [ 714.977419][T20820] allocated 40-byte region [ffff8880402b8b00, ffff8880402b8b28) [ 714.991909][T20820] [ 714.994255][T20820] The buggy address belongs to the physical page: [ 715.000680][T20820] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x402b8 [ 715.009453][T20820] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 715.016993][T20820] page_type: f5(slab) [ 715.020977][T20820] raw: 00fff00000000000 ffff88801a4418c0 ffffea0001545fc0 dead000000000005 [ 715.029564][T20820] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 715.038141][T20820] page dumped because: kasan: bad access detected [ 715.044584][T20820] page_owner tracks the page as allocated [ 715.050306][T20820] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 17645, tgid 17642 (syz.0.3016), ts 601470092147, free_ts 591495265839 [ 715.069764][T20820] post_alloc_hook+0x240/0x2a0 [ 715.074539][T20820] get_page_from_freelist+0x21e4/0x22c0 [ 715.080087][T20820] __alloc_frozen_pages_noprof+0x181/0x370 [ 715.085898][T20820] alloc_pages_mpol+0x232/0x4a0 [ 715.090748][T20820] allocate_slab+0x8a/0x3b0 [ 715.095368][T20820] ___slab_alloc+0xbfc/0x1480 [ 715.100070][T20820] __kmalloc_noprof+0x305/0x4f0 [ 715.104934][T20820] hash_netport4_resize+0xa82/0x1b60 [ 715.110247][T20820] call_ad+0x44e/0xb00 [ 715.114338][T20820] ip_set_ad+0x791/0x930 [ 715.118582][T20820] nfnetlink_rcv_msg+0xb4a/0x1130 [ 715.123639][T20820] netlink_rcv_skb+0x205/0x470 [ 715.128411][T20820] nfnetlink_rcv+0x26a/0x2520 [ 715.133090][T20820] netlink_unicast+0x758/0x8d0 [ 715.137865][T20820] netlink_sendmsg+0x805/0xb30 [ 715.142646][T20820] __sock_sendmsg+0x21c/0x270 [ 715.147416][T20820] page last free pid 17559 tgid 17545 stack trace: [ 715.153919][T20820] __free_frozen_pages+0xc71/0xe70 [ 715.159039][T20820] packet_set_ring+0x1899/0x2380 [ 715.164012][T20820] packet_setsockopt+0xc5a/0x12c0 [ 715.169069][T20820] do_sock_setsockopt+0x257/0x3e0 [ 715.174116][T20820] __x64_sys_setsockopt+0x18b/0x220 [ 715.179325][T20820] do_syscall_64+0xfa/0x3b0 [ 715.183841][T20820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.189736][T20820] [ 715.192060][T20820] Memory state around the buggy address: [ 715.197690][T20820] ffff8880402b8a00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 715.205748][T20820] ffff8880402b8a80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 715.213805][T20820] >ffff8880402b8b00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 715.221863][T20820] ^ [ 715.227496][T20820] ffff8880402b8b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 715.235567][T20820] ffff8880402b8c00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 715.243624][T20820] ================================================================== [ 715.279512][T20820] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 715.286750][T20820] CPU: 0 UID: 0 PID: 20820 Comm: syz.0.3891 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 715.298831][T20820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 715.308904][T20820] Call Trace: [ 715.312206][T20820] [ 715.315153][T20820] dump_stack_lvl+0x99/0x250 [ 715.319789][T20820] ? __asan_memcpy+0x40/0x70 [ 715.324412][T20820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 715.329639][T20820] ? __pfx__printk+0x10/0x10 [ 715.334259][T20820] panic+0x2db/0x790 [ 715.338384][T20820] ? __pfx_panic+0x10/0x10 [ 715.342924][T20820] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 715.348842][T20820] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 715.355279][T20820] ? print_memory_metadata+0x314/0x400 [ 715.360776][T20820] ? pause_parse_request+0x40/0x160 [ 715.365997][T20820] check_panic_on_warn+0x89/0xb0 [ 715.370968][T20820] ? pause_parse_request+0x40/0x160 [ 715.376200][T20820] end_report+0x78/0x160 [ 715.380466][T20820] kasan_report+0x129/0x150 [ 715.384990][T20820] ? pause_parse_request+0x40/0x160 [ 715.390212][T20820] ? __pfx_pause_parse_request+0x10/0x10 [ 715.395866][T20820] pause_parse_request+0x40/0x160 [ 715.400911][T20820] ? __pfx_pause_parse_request+0x10/0x10 [ 715.406561][T20820] ethnl_default_set_doit+0x2c1/0xa40 [ 715.411954][T20820] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 715.418304][T20820] genl_family_rcv_msg_doit+0x215/0x300 [ 715.423958][T20820] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 715.430059][T20820] ? bpf_lsm_capable+0x9/0x20 [ 715.434758][T20820] ? security_capable+0x7e/0x2e0 [ 715.439732][T20820] genl_rcv_msg+0x60e/0x790 [ 715.444256][T20820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 715.449295][T20820] ? ref_tracker_free+0x63a/0x7d0 [ 715.454345][T20820] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 715.460267][T20820] ? __pfx_ref_tracker_free+0x10/0x10 [ 715.465679][T20820] netlink_rcv_skb+0x205/0x470 [ 715.470472][T20820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 715.475515][T20820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 715.480834][T20820] ? down_read+0x1ad/0x2e0 [ 715.485279][T20820] genl_rcv+0x28/0x40 [ 715.489285][T20820] netlink_unicast+0x758/0x8d0 [ 715.494072][T20820] netlink_sendmsg+0x805/0xb30 [ 715.498866][T20820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.504176][T20820] ? aa_sock_msg_perm+0x94/0x160 [ 715.509136][T20820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 715.514449][T20820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.519767][T20820] __sock_sendmsg+0x21c/0x270 [ 715.524478][T20820] ____sys_sendmsg+0x505/0x830 [ 715.529283][T20820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 715.534597][T20820] ? import_iovec+0x74/0xa0 [ 715.539197][T20820] ___sys_sendmsg+0x21f/0x2a0 [ 715.543932][T20820] ? __pfx____sys_sendmsg+0x10/0x10 [ 715.549252][T20820] ? __fget_files+0x2a/0x420 [ 715.553850][T20820] ? __fget_files+0x3a0/0x420 [ 715.558538][T20820] __x64_sys_sendmsg+0x19b/0x260 [ 715.563489][T20820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 715.568965][T20820] ? rcu_is_watching+0x15/0xb0 [ 715.573751][T20820] ? do_syscall_64+0xbe/0x3b0 [ 715.578435][T20820] do_syscall_64+0xfa/0x3b0 [ 715.582945][T20820] ? lockdep_hardirqs_on+0x9c/0x150 [ 715.588153][T20820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.594226][T20820] ? clear_bhb_loop+0x60/0xb0 [ 715.598912][T20820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.604810][T20820] RIP: 0033:0x7fc3e1d8e929 [ 715.609240][T20820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.629117][T20820] RSP: 002b:00007fc3e2b57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.637541][T20820] RAX: ffffffffffffffda RBX: 00007fc3e1fb5fa0 RCX: 00007fc3e1d8e929 [ 715.645519][T20820] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 715.653496][T20820] RBP: 00007fc3e1e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 715.661468][T20820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.669449][T20820] R13: 0000000000000000 R14: 00007fc3e1fb5fa0 R15: 00007ffe16b64da8 [ 715.677436][T20820] [ 715.680715][T20820] Kernel Offset: disabled [ 715.685041][T20820] Rebooting in 86400 seconds..