last executing test programs: 4m0.92257129s ago: executing program 0 (id=89): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket(0x1e, 0x3, 0x6) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}], 0x18}}], 0x1, 0x880) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async) r2 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x3, 'vcan0\x00', {0xfffff7b0}, 0x3}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) 4m0.899170252s ago: executing program 0 (id=94): ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e0018000280080001001000000004000580080003000300000008000500", @ANYRES32=r6, @ANYBLOB="bd4abf9d29c0ae286deda2a8e22959c03d2418625d1b81e12f0bac5ede799fe28fd572d32f24c2f2c572c6e15c05477759a946248ad40ea80376a26f269c0336f41e660b48a549990716792eb9116ead8b062235f2895b8ea051626c5a21cee96952fd0605dccd3c2240e8de05aaa2c0e145295c9cc9865373180aebb775a43599b0182403bfe5a9562e9ef6c5e40fafaf69f38ede0b2c3019049ac4fe73c6a34afe0a9243"], 0x50}}, 0x0) (async, rerun: 32) r7 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 32) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'gretap0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r7, 0x80047453, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001180)={0x0, "7919253a50e2dda592666de799051399"}) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f00000006c0)={0x8, 0x4, {0x0, @usage=0x7, r8, 0x0, 0x5, 0x1, 0x3, 0x7f, 0x0, @usage=0x61, 0x0, 0xffffffc0, [0x7, 0x5, 0x800, 0xdc2, 0xe, 0x8]}, {0xd, @usage, 0x0, 0xbc, 0x8, 0x3, 0x7, 0x0, 0x23, @usage=0x2, 0xff, 0x7, [0x4, 0xe0cd, 0x8, 0x5, 0x4]}, {0x5, @struct={0x8, 0x401}, r9, 0x7, 0xfffffffffffffbff, 0x5, 0x100, 0x7ff, 0xc, @usage, 0x61d, 0x4, [0x8001, 0x5, 0x7, 0x7, 0x0, 0x9]}, {0xffffffffffffffff, 0xaa}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 4m0.424017388s ago: executing program 0 (id=103): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000003d0007010000000000000000037c000004003080100001"], 0x3c}}, 0xc000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080d1}, 0x28000001) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r2, 0x100000000) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc020000000000000000000000000000000200000000000004010001010031"], 0x0) 3m59.920538193s ago: executing program 0 (id=110): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x6, 0x9]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000680)={0xc24f, 0xc, 0x200, 0x8}, &(0x7f00000006c0)=0x10) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x30, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x26000, 0x0) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x4305}, @val={0x3, 0x0, 0x2, 0xd, 0x800, 0x2}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @random="f950a35cbd94", @void, {@mpls_uc={0x8847, {[{0xa}, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x13, 0x0, 0x1}, {0x7054}, {0x7, 0x0, 0x1}], @llc={@snap={0xab, 0x0, "8d", "3564c2", 0x8809, "723efa6e2af2d48553db7edaa0c9d9a81da499653d18b1d45c3db0aa71842540071bb64e6945c0bd6a2dee107074bb49c004261aa92bd62ff0d70b1f810cb08a3fae71b262215244f279619ce0eb9c7c553a7e3703c78447df08dbffd102277d51ccceee57454c47e2d4d4eaa510eebe78d964689a5be8"}}}}}}}, 0xb3) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x6, 0x9]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000680)={0xc24f, 0xc, 0x200, 0x8}, &(0x7f00000006c0)=0x10) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_buf(r4, 0x29, 0x30, 0x0, &(0x7f0000000240)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x26000, 0x0) (async) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x4305}, @val={0x3, 0x0, 0x2, 0xd, 0x800, 0x2}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @random="f950a35cbd94", @void, {@mpls_uc={0x8847, {[{0xa}, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x13, 0x0, 0x1}, {0x7054}, {0x7, 0x0, 0x1}], @llc={@snap={0xab, 0x0, "8d", "3564c2", 0x8809, "723efa6e2af2d48553db7edaa0c9d9a81da499653d18b1d45c3db0aa71842540071bb64e6945c0bd6a2dee107074bb49c004261aa92bd62ff0d70b1f810cb08a3fae71b262215244f279619ce0eb9c7c553a7e3703c78447df08dbffd102277d51ccceee57454c47e2d4d4eaa510eebe78d964689a5be8"}}}}}}}, 0xb3) (async) 3m59.057350323s ago: executing program 0 (id=118): bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xf, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0x9, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES16=r1, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x2400c8c7}, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 3m58.461398836s ago: executing program 0 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00090000000000000000000201"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}]}}}]}, 0x3c}}, 0x0) 3m58.03563463s ago: executing program 32 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00090000000000000000000201"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}]}}}]}, 0x3c}}, 0x0) 1m26.863418204s ago: executing program 4 (id=1803): r0 = socket$inet(0x2, 0x4, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x1c, r2, 0x1c20df3d40b5e7, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000640)='./file0\x00', r6}, 0x18) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000000380)={0x80}) r7 = socket$inet(0x2, 0x2, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [{{0x254, 0x1, {{0x3, 0x7}, 0x0, 0x1a, 0x9, 0xfff9, 0x18, 'syz0\x00', "49bbb9639c4fb00af261bca3136e183128b88574b8e273e1ed9cdb8ecb18e56f", "4269677934fbbe862bd9fee44d3f9abde0b6a4781c2da4264d458f11a4575921", [{0x8, 0x7, {0x2, 0x3}}, {0x2, 0x5, {0x2, 0x7}}, {0x7, 0x9, {0x1, 0x2}}, {0x5e, 0x4, {0x2, 0x4}}, {0x8, 0xd4, {0x2, 0x1}}, {0x2, 0x0, {0x1, 0x4}}, {0x5, 0xbd36, {0x3, 0x8582}}, {0x5, 0x2, {0x1, 0x1}}, {0x6, 0x4, {0x0, 0x998}}, {0x1000, 0x4, {0x0, 0x2}}, {0x1000, 0x9f, {0x0, 0x1f227c1c}}, {0x0, 0x81, {0x3, 0x10000}}, {0x5, 0xfff7, {0x0, 0x80000000}}, {0x3ff, 0x7, {0x3, 0x1}}, {0xc, 0x83, {0x1, 0x1}}, {0xfff, 0xab, {0x0, 0x8}}, {0xb97, 0x2, {0x1, 0x7}}, {0x2, 0x2, {0x3, 0x5}}, {0x8, 0x3, {0x3, 0x3}}, {0x1, 0xff10, {0x3, 0x2}}, {0xbbd, 0x1db2, {0x2, 0x8}}, {0x9, 0xd5, {0x0, 0x101}}, {0x2000, 0x93a, {0x3, 0x7}}, {0x43, 0x2, {0x0, 0x4}}, {0x81, 0x2, {0x2, 0x7}}, {0x3, 0x9, {0x1, 0x4}}, {0x1b73, 0x4, {0x3, 0x2}}, {0x6, 0x7, {0x0, 0x4}}, {0x200, 0x921, {0x0, 0x2}}, {0x3, 0x1, {0x3, 0x29}}, {0x3, 0x40, {0x3, 0x2}}, {0x2, 0x8000}, {0x8, 0x88b, {0x0, 0x3}}, {0xc67, 0x6a, {0x2, 0x9}}, {0x400, 0xe3, {0x3, 0xffffffff}}, {0x2, 0x0, {0x2, 0x3}}, {0x80, 0x9, {0x3, 0x2}}, {0xf, 0x81, {0x3, 0x5}}, {0x3, 0x8, {0x0, 0x692c}}, {0x6, 0x4, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0xd0b}, 0x4, 0xa, 0xe, 0x1ff, 0xb, 'syz0\x00', "9619aa7d0cc5516f3cc7797e2ca28dac410955a92fad8568aaef34f392ee44d5", "52c392738eb4845e3a02ae81d7b083e5a2e01655e8b47cf4ed3692b35938d4fd", [{0x1, 0x5, {0x2, 0x1}}, {0x73fe, 0x7, {0x2, 0x6}}, {0xfffe, 0x84dc, {0x2, 0x6}}, {0x9c5b, 0x6, {0x3, 0x6}}, {0x510, 0x9, {0x3, 0x7}}, {0x7fff, 0xe1, {0x1}}, {0x0, 0xd7b, {0x1, 0x7}}, {0x2, 0xf340, {0x3, 0x8}}, {0x7, 0x0, {0x1, 0x4f9}}, {0xec, 0x2, {0x2, 0x8}}, {0x9, 0x3, {0x2, 0x6}}, {0x8000, 0x1695, {0x2, 0x6}}, {0x8e24, 0x33, {0x2, 0xc1}}, {0xcb5, 0x80, {0x2, 0xfffffff8}}, {0xf, 0x4, {0x3, 0x6}}, {0x5, 0xd08d, {0x0, 0x2}}, {0x3ff, 0x3, {0x0, 0xfffffff9}}, {0x760, 0xa, {0x1, 0x7}}, {0xf319, 0x7d32, {0x3, 0x98}}, {0xffff, 0x8, {0x0, 0x8001}}, {0x7, 0x80, {0x0, 0x1000}}, {0x574b, 0x7, {0x0, 0x8001}}, {0xed76, 0xfffa, {0x1, 0x8fa4}}, {0x4, 0x2, {0x0, 0x6}}, {0x7, 0x0, {0x1, 0x7}}, {0x8, 0x6, {0x2, 0xfffffff1}}, {0xc, 0xfffa, {0x1, 0x5}}, {0xfff7, 0x800, {0x1, 0x80000001}}, {0x5, 0x6, {0x3}}, {0x2, 0x7ff, {0x2, 0x10000}}, {0x4, 0x2, {0x2, 0x3}}, {0xa0, 0x8001, {0x1, 0x4}}, {0x8, 0x0, {0x0, 0x2}}, {0xd1, 0x1000, {0x1, 0x6}}, {0x7ff, 0x4000, {0x1, 0x7}}, {0xfd, 0x8, {0x3, 0x8}}, {0x9, 0x6ea4, {0x2, 0x7}}, {0x2, 0xa4, {0x1, 0x7f}}, {0x2, 0x10, {0x0, 0x8}}, {0x0, 0x5, {0x2, 0xc21}}]}}}, {{0x254, 0x1, {{0x2, 0xff}, 0x0, 0x6, 0x400, 0x6, 0x19, 'syz0\x00', "8ab19892973af2fa0657b1d1962d875b302be687f4951d4a0c63dfeadf1dce3b", "8446ece9b8be81202c3d14f6bc373aa6e4833313688e41c728bef0492ae4f2a8", [{0x78c, 0xb, {0x2, 0x4}}, {0xa41, 0xb1, {0x1, 0xfffffbff}}, {0xc5ec, 0xe00, {0x3}}, {0x5, 0x0, {0x5, 0x8cc}}, {0x1000, 0x8, {0x1, 0x1}}, {0xff, 0x7, {0x1, 0x10000}}, {0x6, 0x7, {0x3, 0x5}}, {0x7, 0x6, {0x2, 0xa}}, {0xf6, 0x1}, {0x1, 0xff, {0x2}}, {0x1, 0x5, {0x0, 0xe}}, {0x7fff, 0xfff7, {0x0, 0x100}}, {0x3, 0x2, {0x1, 0x4}}, {0x5, 0x8, {0x3, 0x7ab}}, {0x6, 0x3, {0x0, 0xb}}, {0x8000, 0x5, {0x0, 0x5}}, {0x7, 0xe, {0x0, 0x7}}, {0x3, 0x1000, {0x3, 0xf70}}, {0xbf48, 0x5, {0x1, 0x3ff}}, {0x1, 0xe7f, {0x0, 0x1}}, {0x7b9, 0x650a, {0x1, 0x90000000}}, {0x8, 0x8, {0x0, 0x200}}, {0x7ff, 0x1000, {0x2, 0x7}}, {0x80, 0x60, {0x0, 0x7fffffff}}, {0xff, 0x7f}, {0x4, 0x4, {0x2, 0x3}}, {0x4, 0x9, {0x1, 0x9}}, {0xadf2, 0x859, {0x3, 0x10}}, {0x1, 0x1e81, {0x2, 0x76}}, {0x8, 0x2, {0x2, 0x6}}, {0x1ff, 0x9, {0x2, 0x1}}, {0x3, 0x0, {0x2, 0x5}}, {0xfff4, 0xd9e8, {0x2, 0x8}}, {0xff, 0x6, {0x3, 0xbe000000}}, {0x8, 0x4, {0x3, 0x7}}, {0x9, 0x6, {0x2, 0x5}}, {0x8, 0x4, {0x0, 0x7ff}}, {0x7b, 0x79ea, {0x1, 0x29a2}}, {0x3, 0x1, {0x1, 0x9000000}}, {0x2, 0xe, {0x3, 0x178a}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r9 = socket(0x2, 0x2, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r9) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRESHEX=r8, @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) bind$unix(r9, &(0x7f0000000000)=@abs, 0x6e) (async) bind$inet(r7, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 1m26.676104608s ago: executing program 4 (id=1805): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001b000000bf0900000000000056090100000000002700000000000002180100002020782500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300000000000025000000060000009c2300a400000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1d, 0x4, "a9a5043aa87d6c238461417fb613f4b03ffa3ee34d5167cbf2"}]}, @ETHTOOL_A_LINKMODES_LANES={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x400c004) 1m26.462508781s ago: executing program 4 (id=1810): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private2, @in6=@private1}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c802}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c802}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x21c, 0x38, 0x301, 0x70bd25, 0x25dbdbfa, {0x2}, [@nested={0x111, 0x10c, 0x0, 0x1, [@generic="290270d05e70fae3a846d0a89c1181c608f152fd76e64487a0e43e1fbfcc42d5f5229eccf984fe00b347cec5df26bb33cc8eddb93b4701a29c5e25d7371f2b8698c31508b7022314aaa6dd51886910774dcc7cdd320697ec233f464586348fd2a4864af68778b149761d8fcfbdd290c5b61ce2b39e441607901e42fbd3ce118a6eae58fe43b356d7da1b990eea35ff750f3a3468da5fbd8884c7cebb2f1f46009c0c1c0efbdd588849f5aaf611e37d5d0695ddf672cfbbf420e187fee2026952a9b52bdd1fc7ba6cc41e3a7a0d56839004921b55ae14e919807fa200a880647da7fc5b971efd5c2d5c7196a6b94df5fe03a95aad2524ffa12f", @typed={0x14, 0x99, 0x0, 0x0, @ipv6=@private2}]}, @typed={0x14, 0xc7, 0x0, 0x0, @str='hash:ip,port,ip\x00'}, @nested={0xc0, 0x11, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0xcf, 0x0, 0x0, @uid=r3}, @typed={0x8, 0xbd, 0x0, 0x0, @u32=0x3}, @nested={0xa2, 0x2f, 0x0, 0x1, [@typed={0x8, 0x11d, 0x0, 0x0, @pid=r4}, @typed={0xb, 0x9b, 0x0, 0x0, @str='{(-:}@\x00'}, @nested={0x4, 0x39}, @nested={0x4, 0x13d}, @generic="b9f1087ad8713d8e084dfd22b532c76e834199628577fc28fd6f371b1d2e83e257a20ee7f8f3fd4bae4fd7fccb57dbd55aeadf894a9fc7cddd59484204f8df466c19ebf44f066a1c1d396af6f19958c935f97a6cf832fd8b8d1e51c4accb42d5fba7eb2649481808ef1a600ba40a3864fd3a79cebd11e3805d3e7ef9654a1a2b5a11"]}]}, @generic="6fc19fbec4deb3a9f5c3cc6505327c9bc9b5a07705c8d3", @typed={0x4, 0x7d}, @nested={0x4, 0x10}]}, 0x21c}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0xb}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="020f00000a000000000000000000000005000500000000000a00000000000000fc0200000000000000000000000000000000000000000000030006000000000002000000e000000100000000000000005161323fc747a5364c2d5ff5221e9b0613342171756cb984c8e9275e1ef4060d833227f5fecdc136aaa8747631b19d83850d737353670b2d031ad16136b6fe872a5bcb1af7e207cd2859f9becfa1afd18132272670063995b4c230bcd70fb0a436fd6cc384e8b0150c459b0be75494836d08490423dc0d"], 0x50}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2, 0x0, 0xffffffff}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2, 0x0, 0xffffffff}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r9, 0x111, 0x6, 0x0, &(0x7f0000000080)) 1m26.235599352s ago: executing program 4 (id=1813): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c0000000001010600000000141a0000020000001c0001800c00028005000100880000000c00028005000100000000004c001980080001020002000008000100200500000800020001000000080001000804000008000100000200000800020000000000080002001802000008000100000200000800010000020000"], 0x7c}}, 0x0) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async, rerun: 64) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="14000000000000000000e7ea4671000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x28010000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 32) r5 = socket$inet(0xa, 0x801, 0x84) (rerun: 32) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) listen(r5, 0x8) r6 = accept4(r2, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a8000088a8"], 0x0) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x12, &(0x7f0000000200)=0x6, 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000700)={r8}, &(0x7f0000000740)=0x8) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000000000)={r13, 0x4}, 0x8) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000000180)={r13, 0x2, 0x0, 0x6d5, 0xa}, &(0x7f00000001c0)=0x18) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2000000000000070}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) 1m26.02505913s ago: executing program 4 (id=1815): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x1d, r3, 0x1, {0x0, 0x0, 0x3}, 0xfe}, 0x18, &(0x7f0000000540)={&(0x7f0000000300)="bf714d53933b57118fc9183d504525d7c4d8a3e5359417207f0f9cfe5b73cce6e969104c0709ad6cba2206b83f613a13333c7019b411f8db4987ec44ecac3af4b1f4752284a4a1998543961b1bedf5b9c542180fb1425df3a376eaa4945564c71b29ff63b50bf1bab2376e701b32a483d29d6e11b5e6618bbb9493c256d45e36f5ecacba60ba385ed27a53c245394abe8867677ce69d663a5d86a0660fa7048ddb9605c4612af0b4d8d848080ab5666b44c334c1b21ae9dced8b165eba167811d982c34bf1bb3403d21dba21997f335c5ec79e453817e4fff9c8d74130bd22c2d7be0ea86b8e75db6d72bb53031b962a7c8521f947e4a70f", 0xf8}, 0x1, 0x0, 0x0, 0x24000020}, 0x8810) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f0000000580)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m25.041071949s ago: executing program 4 (id=1829): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000140)=0x1, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000dc0)='vxcan1\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/14], 0x0, 0xdb, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0x100005, 0x4}], 0x10, 0x380}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0xa0, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x434aef15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55d6ed40}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22da47d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b0f5eb9}]}]}]}, 0xa0}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x24}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r7 = socket(0x8, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000001068a00cfd0000000a5c000000060a09040000000000000000029b4be2ee000000300004802c000180e89a72c85231d4766d93efd01157da91796e756d67656e00001c0002800800e50700000000080003400000000208000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a22a64db9348bbe240c986fa387de4ca3bcaff756ec6d5e"], 0x84}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c0, 0x338, 0xf0, 0x338, 0x1b0, 0x338, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9d, 0x8, @remote, 0x4e22}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xf8, 0xf8}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffff00, 0xff000000, 'wlan1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x89, 0x0, 0x4683c792becd780c}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@icmp={{0x28}, {0xe, 'A&'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x12000, @private=0xa010102, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x2}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x8c, 0x3}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0xffffffff, 'batadv_slave_0\x00', 'vlan0\x00', {}, {0xff}, 0x1, 0x2, 0x40}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xc3e, 0x6, [0xc, 0x1c, 0x11, 0x14, 0x2b, 0x9, 0x11, 0xd, 0x26, 0x2c, 0x38, 0x27, 0x1e, 0x2c, 0x27, 0x2f], 0x1, 0xfeda, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 1m9.953535697s ago: executing program 33 (id=1829): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000140)=0x1, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000dc0)='vxcan1\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/14], 0x0, 0xdb, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0x100005, 0x4}], 0x10, 0x380}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0xa0, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x434aef15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55d6ed40}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22da47d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b0f5eb9}]}]}]}, 0xa0}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x24}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r7 = socket(0x8, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000001068a00cfd0000000a5c000000060a09040000000000000000029b4be2ee000000300004802c000180e89a72c85231d4766d93efd01157da91796e756d67656e00001c0002800800e50700000000080003400000000208000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a22a64db9348bbe240c986fa387de4ca3bcaff756ec6d5e"], 0x84}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c0, 0x338, 0xf0, 0x338, 0x1b0, 0x338, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9d, 0x8, @remote, 0x4e22}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xf8, 0xf8}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffff00, 0xff000000, 'wlan1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x89, 0x0, 0x4683c792becd780c}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@icmp={{0x28}, {0xe, 'A&'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x12000, @private=0xa010102, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x2}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x8c, 0x3}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0xffffffff, 'batadv_slave_0\x00', 'vlan0\x00', {}, {0xff}, 0x1, 0x2, 0x40}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xc3e, 0x6, [0xc, 0x1c, 0x11, 0x14, 0x2b, 0x9, 0x11, 0xd, 0x26, 0x2c, 0x38, 0x27, 0x1e, 0x2c, 0x27, 0x2f], 0x1, 0xfeda, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 3.980290769s ago: executing program 2 (id=2417): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket(0x25, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)=""/68, &(0x7f0000000080)=0x44) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x891b, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) socket(0x25, 0x1, 0x0) (async) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)=""/68, &(0x7f0000000080)=0x44) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x891b, 0x0) (async) 3.811869716s ago: executing program 2 (id=2421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x73}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x73}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) 3.594458401s ago: executing program 2 (id=2425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000025c0)="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", 0x4e5}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f026"}, {0x21, 0x7, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c883747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e8860"}]}}}}}}, 0x0) close(r1) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00', @link_local}) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) accept4$ax25(r5, 0x0, &(0x7f00000002c0), 0x80000) 2.993372084s ago: executing program 6 (id=2433): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xcf}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x2, r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x76, &(0x7f0000001100)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x3c, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "74cd7b", 0x0, 0x88, 0x0, @private1, @mcast1, [], "c6214c55d1055a616515f5a7"}}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(0x4) 2.790423931s ago: executing program 6 (id=2435): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000100035", 0x7}], 0x1}, 0x0) r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2.616124351s ago: executing program 6 (id=2438): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xffffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={r1, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, [0x100000000, 0x3, 0xfffffffffffffffa, 0x81, 0xa0, 0x7ff, 0x8000, 0x5, 0x7, 0x5, 0x6, 0x8001, 0x5, 0x0, 0x5463]}, &(0x7f0000000180)=0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xe, 'pim6reg0\x00'}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e20, @multicast1}}, 0x9, 0x5, 0xfe, 0x7, 0x0, 0x1000, 0x6}, 0x9c) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x80, 0x80, 0x8, 0xfffffbff, {{0x20, 0x4, 0x0, 0x1, 0x80, 0x66, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast, {[@cipso={0x86, 0xf, 0x3, [{0x0, 0x9, "a24754618ba680"}]}, @generic={0x7, 0x6, "26f07733"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xd1, 0x0, 0x5, [0x1, 0x7, 0x143]}, @cipso={0x86, 0x30, 0x3, [{0x5, 0x6, "05812b89"}, {0x2, 0x6, "652df832"}, {0x0, 0x10, "71a39cf7dc31fcc7b61c56dd0eb6"}, {0x6, 0x5, "8cabcd"}, {0x1, 0x9, "4d3ba08a126b69"}]}, @generic={0x89, 0x5, "613a9d"}, @ssrr={0x89, 0xb, 0x3a, [@multicast2, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000001980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001940)={&(0x7f0000000500)={0x142c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xf4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x78, 0x4, "58d81211c736dee6b39d7258a086a6b6a53fda9c391bcc2e80165f3c1a44d13612db40edf522874311f1dbd3b913a31a6a23c4fc0977f61c22f27750909e4aaf7cd42ed35bdd01711322d11b7d91bab0a0824f038967ee263fb90a2164750f281314ee3d9c9bdf48d9bd1820c93b2301e6cdd8aa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "da87ff693bb7df16834021c88bf76cc6c86f05fbdaa3167aaab163d8137d0fa6ce85a25ea029e51ac125a1f719ed717baf3607baa4392473"}, @ETHTOOL_A_BITSET_VALUE={0x35, 0x4, "85c693c5e002b244750c492e5c6160d9f7e381b78483d29555561ad7a4bcf0e3c3e81a684fe0230745efcd5935d1dd2405"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1224, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x17c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '#$]\'#\xb0--+)(,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaacf}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-!&:{\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',\x05\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '){\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdd08}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-(^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-^}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x70, 0x5, "f5530a3731c9d140569bd0493bfff4b8ec5e66bb3242365871ffb602b20199a58eb2df3c2a629028fd389900e3f4746108ef2e0bc54e8216206675bdf68597789caf5a956ed3d50666266adfb5b96bacaa40142a4dc22a5443676a0053f998c74b9f0465474efb54d2893b2f"}, @ETHTOOL_A_BITSET_VALUE={0x2f, 0x4, "daeef327db7f96941cff4f390a59e580a9adc96f38870375b036fc96e1e2ca225c208ba984a531a583788b"}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x142c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r7 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) getsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f0000001ac0)={@initdev, @multicast1, @empty}, &(0x7f0000001b00)=0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) r10 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000001bc0), &(0x7f0000001c00)=0x10, 0x0) recvfrom$phonet(r10, &(0x7f0000001c40)=""/33, 0x21, 0x0, &(0x7f0000001c80)={0x23, 0x6, 0xa, 0x62}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001cc0)={r2, @in={{0x2, 0x4e22, @local}}, 0x1, 0xb, 0x4, 0xffff, 0x110, 0x5, 0x1}, &(0x7f0000001d80)=0x9c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001e40)={{0x1, 0xffffffffffffffff}, &(0x7f0000001dc0), &(0x7f0000001e00)='%ps \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001fc0)={r11, &(0x7f0000001e80)="f669b4d56fdffdbca174afab50ab6affec5871d50d2d441af2c4e08bc1ed2430bf3b0ea13cc67ff66cb55be57c706fe8790072face2ff8fa43d2c520bdb19a767fc4d0b6748e5f8c258fdaf3547f1215025479361b1459a6eb900503ab41ce9b5b38b2ec9544d80a86b7d68c228b790e84af11e6b70b2215f2501e2e5582f64fb953eaa56e0ae7898b28b0ce70bdbb783a0a69d15dbe870bf2867723361075d34f6d5d81fd7042cd95d7c72a7a493e51a88acc5540d675836dc4caff3d302b9c1f1060ba2ab93067cf106f2846d82688dcbb5c09a53b80", &(0x7f0000001f80)=""/22}, 0x20) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) r12 = socket$pppoe(0x18, 0x1, 0x0) sendto(r7, &(0x7f0000002000)="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", 0x1000, 0x10, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, r12, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x2, 0x4, 0x4, 0x1}}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003100)={{r11}, &(0x7f0000003080), &(0x7f00000030c0)='%ps \x00'}, 0x20) r13 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000003140)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f0000003180)={'c', ' *:* ', 'r\x00'}, 0x8) 2.549534461s ago: executing program 2 (id=2440): syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x154, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x124, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @broadcast}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @dev, @local}, &(0x7f00000004c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'pim6reg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1b0, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8814}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb8, r9, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x63}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x80}, @NL80211_ATTR_IE={0x83, 0x2a, [@random={0x76, 0x49, "f6bea9977e53211037d0c0b5f058d2a2aae1cb2af4b4028c9b131c6f645b513ebd5cdd06917e0bb700e6a0250b9c0d304a78a0ae16eef6bff464d3248695a831c0c74a9bab94603344"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x40}}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0xb, 0x30}}, @rann={0x7e, 0x15, {{0x0, 0x20}, 0x63, 0xf9, @broadcast, 0xda0, 0x3, 0x2}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x4020008) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}}, 0x4000010) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x0, 0x21, 0x1}, @float={0x1, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x61, 0x30, 0x0, 0x30, 0x0, 0xf]}}, &(0x7f0000000d40)=""/19, 0x3c, 0x13, 0x1, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x12, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x24000}, [@jmp={0x5, 0x1, 0xa, 0x2, 0x8, 0x3a}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0xb, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x4, 0x1, 0x0, r11}]}, &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x8b, &(0x7f0000000c40)=""/139, 0x41000, 0xc, '\x00', r2, 0x0, r12, 0x8, &(0x7f0000000dc0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000001080)={{'\x00', 0x1}, {0x9}, 0x44, 0x0, 0x0, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)="5b63d3e885c07811eb25d2109e760abffd49dc8065b4f0aeadbd08a64ff11767", 0x20, 0x0, &(0x7f0000000f80)={0x2, 0xae, {0x0, 0xc, 0x8e, "64ca8a17f52ad2211140f85931a10c0f219bc736af82f3d9ed52d4386209b049eeef00b4028348c1fa701aaf63b8220eff8b4c23ec2ac99e5a4d307b42b6eddaebf2ffae14bcef6bc9fd621faea9656079048104644387f30579775f957576c9606f744136d716179bd627d55af2d4b895d98f32a93235ad7c3bef5911143c26df20cfb67a1b9457f301d3a002a6", 0x13, "d3464b5e5432146b4079151809bbec91760b48"}, 0xe, "d73f87b5d516111e643d75af45be"}, 0xc8}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001180)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r14, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0x84, r15, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x8000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r13, 0x8982, &(0x7f0000001340)={0x3, 'batadv_slave_0\x00', {}, 0x7}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000d1}, 0x20000000) ioctl$FIOCLEX(r11, 0x5451) syz_genetlink_get_family_id$nl802154(&(0x7f00000014c0), r14) 2.463380092s ago: executing program 6 (id=2442): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x7, &(0x7f0000000000), 0xa0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) socket$inet(0x2, 0x6, 0x8) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r3}}}}]}, 0x38}}, 0x0) 1.960821877s ago: executing program 6 (id=2448): r0 = socket$isdn(0x22, 0x2, 0x2) close(r0) 1.910764058s ago: executing program 2 (id=2449): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000000b0102000000000100000003000000080002400000000008000340000000010b0001006d616e676c65"], 0x30}}, 0x20004084) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.748423283s ago: executing program 3 (id=2451): socketpair(0x1, 0x1, 0xfffffffe, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}) 1.746234354s ago: executing program 6 (id=2453): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="000000000000000000000000720145ac52a9a2a3e9be0000000000005b252198e4048debcf4460ef07734ec1763a0e8c8ed17c0aeca4e24d2b2ad5b08125c167e6cc93bbe17d85d6c189a52c5706e33f55350be7a23c209e2cd64400000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = socket$unix(0x1, 0x1, 0x0) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000080)="ec0f3b750618ebfb3329862df78885f3d59d8f607aa83c7db283e4a734489d3c4dc96da09378ae7b19f3ca9a51cbb9f6a18b61bbd4", 0x35}, {&(0x7f0000000240)="aa9678f585c9c71d743dc2fe626383ec06093b27f1d4b0e4b2b28780806037b5bbd5d58ce1e36312336837696ce9151ce9f785baef897d201a8f80d0b7d6d3ea82e9aa524485c9b5ae7e10d7107a67e3d828d97d543abe1578883bb3ee183a390a6edbdeee5ffcfd43a6458e6fd16582ed8211ac0f0e9b662b2baf504c31c8fc7d592da141ce92f93fe3a81a6c881d3950b80d4f42055505b571cfe9becfa2ffbb0986073e4b84b8d189e3b2ec4ba280830b4efd80e0a60d041adca718a233746c0d1c0f4259c049fe52c8ec7736", 0xce}, {&(0x7f00000000c0)="a845559834b451fe5371b0dcb945fa703ba473d534b52bdc01926cb80f7fdb83ca5c6c01dc1c", 0x26}, {&(0x7f0000000340)="932ae75794a1682dbe61ed1fbfe0399aa50b7813c66b2a50d42d8873a7012a7d7172d8923f23112df1851f5f111b3a5e8ad3c200d4a31ad5c7ff705f2cbb805420526d2e3b2a7d5a618f4cb60cd70d930bf6b32b399a195cab255127ca596626e3d0d8fe2cfe", 0x66}, {&(0x7f0000000180)="f505bc5d15a5a24197323bda071f14c1a231c3d9825cb5b096e81720cf22c6a22443592898053c67e4609e6f56677cc1295b", 0x32}, {&(0x7f0000000500)="637dce8da61838603e73838c567e0c9862cf8795529b1467e409b002919451714546e362c2107ef30002fdb4b4dfc1221e3866dd954d483180c2776ab611d4a6f24ed275616d44cacb05aad822c1c02b4a0834c1345f851320efdeb553dfb290da6c017b9e0db13de1b4cabe53add93ea7eb92420c458d86467b69f39a7d1dec8d67786dc04798eecd58d6e7e508a9941166f3788ac38e734c975ae80da553e6b9cabe047bfe7d8727ff7cfc470e9b7985edf4b3ca1caa551d48f5b2", 0xbc}, {&(0x7f00000005c0)="ad636e4ee0da98f9e330915130ef18443f97282546335bea3307eac123c9b5a00fc82c22c2f869f195ddf5a1a38695d50deb941e1c80fd3309c6a88191aec17a4328850c1fbb3489f24011cf06ae24b1383b7455de080dfb118918f0d8c7149485209e8375ad8dd51ed6bfe89f618d9195178ad5533428926b7611af0dc35046ec4dcd89b20f5d4ac68aad64b938480b13899b693ffe7fa79582d955edde77c6769c1af1f290d65f411da6f71c", 0xad}, {&(0x7f0000000740)="841abe1eedc6418e34492fb24a9efabbde588492abe540bafa93638aab4d5bc71b3f5553f0a41f9ebf9613ad6e1c9959a7e88216cf31d0bdfeaef10b301dc2d12fe74b367714fbda0052846b7ed9647760df1918dc0b5ebe1282dba9e3d21ae5e648087ac7f3a003233305bfdaa496196fbd089bfdd8737ffb60f86fe083dbd0db6d5300e5c2cd0d0c6ba5f41203b25156610be68c4bbc", 0x97}, {&(0x7f00000003c0)="2837cd47ba9887d6347cbf4af4cea24eeb36202d797e175e1f452ddd340baaaabb0df594242a3a276135b5b18894f53397621a633a10ee4ac721bd6a54f7b5311836f366ebe94b28b4b2ea517fb4b1424cd6bfb5c1056f9158280f5736dfe5080665ab6c", 0x64}, {&(0x7f0000000680)="4524af448ea53e434acea888b15348ddcbfe21e0fe44348e3747e3672a601cd917bf6128f82e713abc", 0x29}], 0xa) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) read(r3, &(0x7f0000000180)=""/115, 0x73) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa"], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007919a80000000000950000b200000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x7, 0x6361, 0x5, 0xf, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r6, {0x4}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0xe, 0x3, 0x6, 0x0, 0xf, 0xe, 0xa, 0x2, 0xd, 0x10, 0x5, 0x4, 0x2, 0xe, 0xb, 0xf], 0x0, [0x7, 0xffff, 0x8, 0x0, 0x0, 0x3, 0x3dd, 0x2, 0x1, 0x76d8, 0x8, 0x6, 0x7, 0x3, 0x81, 0x800], [0xffff, 0x5, 0x8, 0x2, 0x4, 0x3, 0x1, 0x5, 0x1000, 0x6, 0x2, 0x2, 0x81, 0x7b2, 0x2bba, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.720615137s ago: executing program 2 (id=2454): r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r3) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b00)={0x1c, r4, 0x911, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x4000) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x2, &(0x7f0000000140), 0x4) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c080000", @ANYRES16=r8, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c002000", @ANYRES16=r14, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c030000", @ANYRES16=r4, @ANYBLOB="000326bd7000fbdbdf251300000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="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"/640, @ANYRES32=r17, @ANYBLOB="d40013801c0000800900010073797a3000000000090001004d41524b000000001c000080100001005e2d24402b7b242023272d5e0500010028000000340000800a00010027245b3a2c2500000b00010074617267657400000900010073797a3000000000090001004d41524b000000001c0000800900010073797a3000000000050001005c000000040001003800008004000100090001004d41524b00000000060001007b3a000008000100403a7d5d08000100235e292e0900010073797a3000000000100000800900010073797a3200000000"], 0x38c}, 0x1, 0x0, 0x0, 0x91}, 0x4000810) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000060a0b040000000000000000020000003c000480380001800b000100746172676574000028000280090008000240000000020d000300a1784b8550b2b7ef0000000900010073797a300000000900020073797a3200000000140000001100010000000000080000000000000a00"], 0x90}}, 0x0) 1.610143017s ago: executing program 3 (id=2455): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x103, @empty, 0x20010}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000040)=""/91, 0x5b}, {&(0x7f0000000380)=""/149, 0x95}, {&(0x7f00000024c0)=""/4127, 0x101f}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000001140)=""/104, 0x68}, {&(0x7f0000002440)=""/78, 0x4e}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000e00)=""/198, 0xc6}, {&(0x7f00000011c0)=""/203, 0xcb}, {&(0x7f0000001000)=""/130, 0x82}], 0xc, 0x0, 0x0, 0xb00}, 0x40d40b70}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/123, 0x7b}, 0x7ff}], 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0xa6, 0x5}, 0x4) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x28}, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x103, @empty, 0x20010}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) socket(0x10, 0x803, 0x0) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000040)=""/91, 0x5b}, {&(0x7f0000000380)=""/149, 0x95}, {&(0x7f00000024c0)=""/4127, 0x101f}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000001140)=""/104, 0x68}, {&(0x7f0000002440)=""/78, 0x4e}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000e00)=""/198, 0xc6}, {&(0x7f00000011c0)=""/203, 0xcb}, {&(0x7f0000001000)=""/130, 0x82}], 0xc, 0x0, 0x0, 0xb00}, 0x40d40b70}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/123, 0x7b}, 0x7ff}], 0x2, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0xa6, 0x5}, 0x4) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x28}, 0x0) (async) close(r0) (async) 1.428279604s ago: executing program 3 (id=2458): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000000140)="989cdc29fb84a0e2aa93c580738767c298aef1f1f33b9fd5c2c2356dd29f8e7db5ae81b4d70d5c3bd2ccec2d7df8bc799caafa81178cdb34f0985369563fc91b8c101a30ba243dc909da4daad882e07f0c61343f68c41899f79661064d85610036fbf3fa1158c5896f5187395d9f6e3a09096f2a0000", 0x76}}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r2, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001580)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) r7 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001640)=0x0) r10 = getgid() r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) r13 = gettid() r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r12, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r13}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001680)={0x0, 0x0, 0x0}, &(0x7f00000016c0)=0xc) r16 = getuid() r17 = getgid() sendmsg$unix(r2, &(0x7f00000017c0)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000040)="57a4bbfc15677d116d6dd3447e636e317cee823c67294f6d308f51aa79d052d1453ebda932be8c4e08d34322bd9c24300d089aa1", 0x34}, {&(0x7f0000000500)="a5208cd2603b2ea7e98a9e103d93e9957fbee87571a68ad099686cc30bd17b8f026c11da699f14bd85659dba9427ea64abed20e60161a1c16636758a0a516b16b166d1ded2c4e4589e3d613330de75628e7b3824970c9ce01a91af0ff956cb7fbab1afb4e7447e8b8c0ba55822457e4bc093ecfaf4d003c8316cb3ad089e4817b9ee69bf6619f7f3b83393d68a4d0124985084b9441956ffc06a5316039e1f8754acce788e9e0bb1277ed55ddc82be0fdf584535adaf3298121897d3fe0f61ffcc9b24a96976ab9529b65ee7d808bdd783b558d0f247a4e76d2234d344afa2018eb7a874a86eddc90b8394ee13b2785f610fed8f5bac763a918f32608e21329e2cd0c7f5dae6d8319de5f1fa97cad59b59380f20ff5e35187ad482edcdb55582aaa22d1a1765ec0a6fa6d4c1899726a68b075e8ddae05cfa9b60cad5d2b5750256ab2c4629d29f17a57a556fab73147ed03a6658a0b2433b35ca3b9284648da656230c4c5c37efb45296d87bd9623338819e57a7015f829c38c56870c30f2321e5025e559967b5017cc0a8c24ff42cb66edecb494d8ccbd7be4a4d357f0c2c02d083d66e39a8a2d8e09e1a355afb94d9b41b2e633c0271e8e13850e4b860cb112c5696fa4b5ef815668767c54f56797d6b81b73313dc085f08a9d31b5c32ae58f6ecdac65ec56fc9486c2da8534e0013b95b5f8cd54f5d585eb939977341fd58b927c1b222e920ad778b273c6d5dc3c10f7a8de8ed2e05a289ed3e4a24e0e43f987d9597bd9750696f1f8f7f02343267f0177572987bd41e875d281129b3e694d61a580906ab322d3fda1d73089041c30b29ee4f04c6f7cf25ae15f757c772b99e5c0dc793cf5a2dc6d3da78256efa0d653f987df2e708891dbf5ae44d54f136a59279c146161c0802d67ffd97ad74ce0f06e860b63a281b37f24ab213ba0bdd1d3fbc9e0d31e56a151f7e7e14f56eba7d09a76d7ad689bd698fae148c257b4e8a63cf16a7ba8dfdf48691722937ab8ba419518bcb4f2629821a357064986e336cd4401d4c0bd0c0929c805e685e5647a87ba61fe0b5c52f339c82304673d654bf87d3ee2be10084d7331616193250dcb1fe5d6f62558132c60e5e254ccf5c8f5d3423f65f99c42f58e7d41653e1b868f4f14e87de617ebe8ca4f3d32ea536c11f998c1ee07544dfa21c4c3cc3a11247a3c3aab3b57de6c4bd723bac953a2e6e94d31fc935dcf794b416a8acc12d62ccf1ad7d0d25c8e7d50148c0a82d7bf0a4af9259b0e3def2772ff281e47b74fb7d3d042054a1a211b868cdab51b20db0ca793b4c11325552ce968c61f6262838db1884985d51516d1a3550b102e3a19cc4de8a5604a56a8bdb53420b8876bf5efcede20ad1752a56c6c35cf654814d58918e036eeaf28050a3e92adc8465914fdc12371e8da918e38e0bdfd1006a956027ca7fe9dfc8828da5ce4ed1dc2cdb4c8b6feeeb0ff09cc9e2bd2717cf76e5437d3348f9a8ce5a6be8ba2ed4ae7cc64cc810146737d367f8ccd82c0331480239af54ceb7ad4d4e2ac72ab94c46222fb9ef1c7e25626d3dcea299dbb4c07dc1facc6f6576cc9cd62b5d4fe5afa90958fb3ee821bb0cf83b7e8081f360cd8da66cfa4a86453ba4763257f491c7c3dd60e2e1bc2504f22bb8fc7ad55803aa976208d198960d26ffd4d051928640b3e1f4d0bbf4688b50d82925777dac83b9bd99e2d738254b2b2dab7f33ee10c9d771ddaf0104760848ecadf3a89bad2758dc68f5038f66a351e79232599c43598e01f51b6798766325251b9c879634ddf03f706f6c1ccfd62bbe8e83f8ae8a5ee5f5d850de3072ec64b65140f6357d625d02a729d6ef3f0492c97e9abe694e9a41062271e89684d3c4f7f484ed02ef9e3946eaf9b89c5031b443a3288b69598b6b909f49e22bfbee9862127e5d63acea93b9f9837977ef6d51436ec2a5d6aff2cdf2ce9dabcbccd5d9221e08f16cae0bfb7866e758730c181ba6bc6ad7685609b4af450e60eb980e249c2334befbe764f6691421017a4843e4686f979e962195c74caaaaab954349c3a3e5988ec3ce33d6ed1062658e1331c02dcfbed98d255845e61f65d485b63271f41480807cafb8f75261815e935d26eb27de25239b1c91a3ccd8e53307afba45f4f84b9b2647940c9bb2c095a2e488957b77e93214f72a0418774c88f0b42c277c2ba9b849608d4186929d2e69867692ce412d93394005d81d60a417b9fa107abc20445d1a60a31c8e5eb4ffec056ec54448986e18de7403cb96c70cf0bbdedbcc2632346b3a59f501f0c6146114dbb61befb84cab3589166e0684f36762ff5eed0d517fccee7f68b3364bd0f3c475a3338d06c31f415d88c2c52ef86ddb43eb829f8942046b8852b6e8f5622fa3465b72c7ea5f78482e872522043d80a0aab1223612317a4ae11388477619110c10e699ce42e87373773c2ee94f4b864a2029fbac503fcceef3e6eb5219af5bcaf1d7e7266b75124372965735433e83985051a42459fa7c9ec72905d4aa7ec915d5b919c449dd2267fb76006c6eb5fd2e3560bfa0ef66de97b1e89dfa4f85ae3cdf59d3fb5f97c81337fe1e3593a1a471cf6240c1eac8416099e2401363337d5c4bf80def79e1a074eea512aac54c764f2a94e0e0cf2ea2f6cfb3743a02e3dbc7e69c6a501fe1bfc91f4ece51cff7864e7991085be6edca0d928bbd98dc73336cf5c9dc87cbbace662f858b241fe255c7896d98b77a08b2be7ba473bc7ecb499e8f868fab2af29c8fd718f200cb205e1d3ca86df0244e0c63dbe880a99b7b2deef1ee20e4dbe9e06c18d4e126f242e5e6e53205a1c0af977f6eefa21642c2579f65c7e66584b996d6a2a22cf9b3054869ee8efa1ce5675d773adcaa7936bd86c77db8c13cc3ef1b116613d3af8040c113d8799eb1520dab553de98763d1fcc92fee63307d7a7d8c37dd980702ced43be1add46e547cdb46810a8a60a09427ffcb5df74165e585e4d30365ba26466be237a13ff0588ba02935808a57d23f6830ffe5a60cca13e326cdfae72bc1c3f39808ef63c8140868414c0ba6e16b7f387efde147d235ef1f2ed0e6b0eb62af956d43e7b1e921e4e61b7282bee43f230be7c48ccdb5302593e727c2463a3ac86f86277a5cadc2e0952cf585d809b8142d3539d45798263dd083957949ee049c03dd2d4cdffb7164a8d75fd5cb0a2df7e6065b8919bf0b64e0f0f40731b5d00faf9e9b8be8666fa888251e29598b215ce2a98ec46055e47b5eaf8cfe5ffeaeb7b75e31789feed46d3e3afd25ef5a4ac8914cd1fa7148e19ac68023926bd2d7ae5847e959ea1081bd466c801dc8ea21b2299f2db895fbdaca8f1fb91762bfa3de18c04f1d011b9a5f6124abfd083a65a41080b8f1bb043a36ad0724ac81f7c5883c96665fa446fb31f27bd8b698e27a4671307861c25f28abd07b794b29db750d24aa4d602109bdfd3080c7b227c34f952cf2b83bf4a16302855b0a179468a98b995a12586dae855fc889b6db36813d1ea3366cc4e5accca39f5f4b44532ad8b09b7caecadcb27f1307de162037e2cb78cf70d2f62866c62c330e07e560ef290f4cad8fc822d13a14179e6c987bed339c584e2d221a9391624518fd371b5a5741ba00e53732517a3387c18a757e089a2ae5a54f1f9884cabd4dab53d106154d8cae783203ff1309913146ef133482149a05f8adb03f50943b541d0e2249c29e27fa938dbbb2b1e04128065995c2dbf56165df3d08de3ddf8a7b738abfd1b7baa565245931906d5648e202450d33e4c9c2516b85ca9022c079bd295870bd9bb14f8252dd4cd017dc03f2518603abca709c0def0744a286ef42e204832c6d4d0abb776494f82c4d2c042bbadc946f67a712bc9840b96437c1698696849e07f84431b6ab25d08df9b435e4eb6af125bfaa112e995df69d11a19f41d8c5c60c999161e5135884e04a4bad47a591c5c99f1334f7103a5d7d53f7cdfc3f60b2d2b5b5a22280c989cfdc73278e3a9dd640d46e8476f4d53dcf588e4ab61d3bd46483a59e0812f12f1a0ae87295ad801edb330c349309024cc20b78e981254d20c80591c438a1839517aff91c60724668ae6a1e80d18857ee10972d3ff0b404b8947193adbf9758dcf7b3aa1dc479987a1a1c804cf2361eca7a72071dc90594b1e00a92210a3ac56fda12df07e53d47215adf4ddbeeb00b7347aae26b22ac69e8c24ea9885c5d0c09603ce650668e028b66d3f21a3c305550fc6783d90b50665d8b35efe4a922f8e4ff6069b3e45e4c1c81813fb5612e0de82fb5a585b15d3694cd9acdcfbc7cf97eff5a0fd21f098bec895c2fbe549e4f4d26444cd10851bd262d732bad8f0a68a80b03b3bf57b21b973410d458d98e45ae369c801386da7ef10019840a0124beb1f04f6c9629cc3e73b62ffb750edb091a96e1361b819c92e10e054359e223d2241efd209088eebec90dfca1ea1265c39e29a9113e355daa62c205acd981b6c0893f8acab5017a2a82c12f9b78520fb6f060c171f8c8174a9f8f67a82fc5253a1ede83033863b818c933f4a5981ab7eb04c06e4d3324f46091e3f906476e7b6bbd2428eb0a717b422cc4b8af0e689a65eb473fc662c4f14dd3432178573e9662e6bd53b065dc505e9a4155f841502eed8906c0d926dd3dce09b732d0c1083f7bddff0cb998d73860e25e3e37dabfc3c19b05ef9df1d7a235f83a9318a622e8977c9a5248788be4e62d8ed585e746cfc3cde0cd6c3956db51228f78418b04fe5fd2a8ead264fff1cca3b1ab2bb2a35e1b5cc392eeae6eee934b0d4791e0886760ea64e18f7ec113615c81223a3b691d80507815ca1ccfe8a1917fc39fc36adcef937b9dd19f78d334ea36318a22ce57f48fe2ced581d23c4f8e0566cda48b443ed1fb493406a6493626d39c9c3c38c771fd2a566d855eb1d9e0cfc5b9dd3a9d4c03b3b98baea66b5c0ffc027ad7d0c66a7c555268dbbe7634d79d58656fa6c0765d9ff15d8bdb5c6b67efc36d6a8e5d60dc58c471796a71023ea5d477027b159ec79be6c8be64255e29e9050ebe7213b2c388e177db444020233008c79437cccd21d8eb3f0480d92e9ccc2cae55d7783893e31d2c54c9f24272627eb92f0a3eb4c32d49815098a2f8d2a3ce2ea2b912e68e884d7083c236869a3e7e7ae72e9ddc1ab7d3650db7f9da1ca73c06e57fd8b4862eb1b397cf7e3a8fcfaccfc945d2c58c532bd522cfeb80d5a1531c7852b08a252ffbb0587af7c43403ba3b8b478c09e4df4f64fe4e10af05be01dbdc7f955ed4b33165b5a2392b452c16f67e600bec8ffa4ae7f5731c7ae7dd71afcc43fd3b76adc5f7c00b50cd1f14a8dcfb8e9050a90720086956e8f8f50639d1b87e5db1d71e10ea26a326fcfbcf98f2328fc87b3f605bfdd432833a35324a6d91ba671a5e36e919edb2c4b64222ef4c7d3addd1d6eb73ece957876ce5dbe017302e9db814619f4d04f5cead71be4484eceb395ef6e7948209a5278d84c75bbf0a5df7c8bb84076f5f8e66acb005749037e135efe69a41e647bb2318e5d8755939abf039e10954c53cb0edf214b0c0e328ce16544ed977293f7cb6abc86455941599099fa55abf642bfe200d104ee2de2076b1823210025faf49469a76e02e6cdfe962e9cc76cdfdd2ece15bbc4d4fe26343df7fc2b642b026c90395ad6766525f9be15b64a4c566b7de14adf9aa7c351aa83290b6137e6570943f3a03519fcbaa5282203278dca1daa5a577fe5bd4dd5cfcbd2ead2153169170da4ccf986bd42bfa", 0x1000}, {&(0x7f0000000200)="96cde05c860c640afaec27a72e076bce18c297c0580fd4b2449cc61d43a45a2629534fab5f8b5e0a3d4050bdf0a5fa5706be2b286061359c352caf13494c16b6ba580ded7aa76532583e5e3b1ffcbf64a14cc5d484ec9095b51333024a93f878c8121c2b88dc4649eda0099105781111cd49584516de89be415e15baa007aa386c06cbf331bf280e461e849e544dcdcdeedb10fccdf6f2b1df7d8498325d400b80808522e5", 0xa5}, {&(0x7f00000002c0)="f55a159b7cc67da0a0dbdbb4ccc7fd03f95334613bf865ae736ada80a50393655a362f9832606dae8f79e735a25ee94f4dc7f487ca3258c0b1c4d6df6758743ebd8d2b12375b67ff81dcdbefeb55ab35ff37b05cf25a92e2de8609b9ca9b1f79e68eea3537e691c0ef7dc2537901f3417baab86ba56a7d18931082a310262fe95b209855ae934e614731bda694588164430ef8cf1aa27c1968f0e5cf4e5c5d0534285f3fdcc58b7611b82d4070b5dc987dc6cf18a2395bf64dbb3978993a2eb38402906de01b6ae4ecb4fc74b2f5c2212904d0372fbe8c73b1", 0xd9}, {&(0x7f00000003c0)="13c3504702c54a00f3fffd91ccef0f701abf43ef6a0528e2961c0951d45e3a9e637aa6f82570b466cd2244db4c66c84145fdb5b94e4e94c08bb6a887f565188ba2bedcadc3dc7c037890463f269d", 0x4e}], 0x5, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {r3, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xee01, r15}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r16, r17}}}], 0xb8, 0x20018054}, 0x10) 998.971191ms ago: executing program 5 (id=2465): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x30, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @opaque="65ef83f7775bcf0ddbfa95cc714fe4297b681bd9ed5d1e6f7716fdc67a6967d9817f39d296d8f845"}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getpeername$packet(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab", 0x80}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$packet(0x11, 0xa, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x66, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x30, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @opaque="65ef83f7775bcf0ddbfa95cc714fe4297b681bd9ed5d1e6f7716fdc67a6967d9817f39d296d8f845"}}}}}}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) getpeername$packet(r4, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (async) writev(r5, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab", 0x80}], 0x2) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (async) 828.027397ms ago: executing program 5 (id=2466): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000000008000100ac141400040008"], 0x2c}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendto(r0, &(0x7f0000000280)="a0db9acdc22debba2fbd08f7089566cade9a7765e7e3fb41383a262e489a9a6553b0e887f52c353e0ce4fe30d50f6a123f622b5f70e8bd4a705846784a2b5510f920374cf62d4de7139edc7bdf842ac6895554aa662c56a70261f2418576349199098036e52fd402cf0dcf6ec0665add647269", 0x73, 0x4000081, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = socket(0x1d, 0x2, 0x6) sendmmsg$unix(r4, &(0x7f000000a5c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$pppoe(r4, &(0x7f0000000240)={0x18, 0x0, {0x3, @multicast, 'syz_tun\x00'}}, 0x1e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfffb, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071922f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 763.637993ms ago: executing program 1 (id=2467): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@getspdinfo={0x14, 0x25, 0x20, 0x70bd26, 0x25dfdbf9, 0xc2, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 706.865274ms ago: executing program 5 (id=2468): socket(0x11, 0x800000003, 0x0) 608.139438ms ago: executing program 5 (id=2469): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) pipe(&(0x7f0000000540)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0x178, 0xa, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x233bba13}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x16389118}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x64}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x59}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'geneve1\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa8}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7e4}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x2daf}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x8000}, 0x4044081) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000030404000000fedbff2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900010069706970000000001400028008000100", @ANYRES32=r3, @ANYBLOB="08000300ec"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvmsg$kcm(r4, &(0x7f0000000400)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f00000004c0)=""/65, 0x41}], 0x2}, 0x0) 607.342542ms ago: executing program 1 (id=2470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r0, &(0x7f0000000380)="075fdaf9"}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a0000080002800400728014000700000100"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 517.979392ms ago: executing program 5 (id=2471): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x80) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket(0x29, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x810, r0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010100000000000000000100000008000d00", @ANYRES32, @ANYBLOB="0800020000000000080001"], 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000180)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110770000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 497.755361ms ago: executing program 3 (id=2472): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000100"/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x0, @vsock={0x28, 0x0, 0x2710, @local}, @can={0x1d, r6}, @hci={0x1f, 0x2, 0x4}, 0x0, 0x0, 0x0, 0x0, 0xfffd, &(0x7f0000000300)='virt_wifi0\x00', 0x80, 0x3, 0x6}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r5, 0xd, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0]}, 0x40) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x10000004}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18}, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r8, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x11}}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc01000010000000180000000000000000000000000000009500"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000480)={'wg2\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 444.312464ms ago: executing program 1 (id=2473): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccce"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r2, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}]}, 0x28}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 395.907159ms ago: executing program 3 (id=2474): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x1000001}}, 0x2e) 329.442373ms ago: executing program 1 (id=2475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006140)=@delchain={0x2c, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}}, 0x0) 220.210314ms ago: executing program 3 (id=2476): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfffb, 0x5, 0x1, 0x4000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3a54ea9ee82cf14f3a4cc523ee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d335f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c96af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf7af8ea5b4bd9593f73c6c95dd6d59483763debf02ea36803976b6cc145338e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d4800800", 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) recvmmsg(r4, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000380)=""/185, 0xb9}], 0x1}, 0xb}], 0x1, 0x40012163, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001900010002000f00000001001c140000fe00000100000000140013000000fea22255b36d2a6f2096c248b30c"], 0x30}}, 0x0) 162.383791ms ago: executing program 1 (id=2477): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x802, 0x0, 0x4}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x802, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) 122.102599ms ago: executing program 5 (id=2478): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf252600000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c00038008000a00"], 0x38}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000000)={r9, 0x9}, &(0x7f0000000080)=0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000005}, 0x8090) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x90, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1fe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x1, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}, @IPSET_ATTR_TYPENAME={0x43, 0x3, 'hash:net\x00'}]}, 0x90}}, 0x81) r12 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f00000001c0)=0x1, 0x4) splice(r5, 0x0, r12, 0x0, 0x10d00, 0xf) r13 = socket(0x10, 0x80003, 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r14, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmmsg$inet(r14, &(0x7f0000001340)=[{{&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}}], 0x1, 0x20000014) r15 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7f}}}]}, 0x3c}}, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000280)=0x100) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 0s ago: executing program 1 (id=2479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'nicvf0\x00', {0x2, 0x0, @initdev}}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r2, 0x11a, 0x2, &(0x7f0000000380)=0x304, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0xe4db}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_STATUS={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x4041}, 0x4040040) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000180)=0x40) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x134, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xae}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xc1e7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0x134}}, 0x0) kernel console output (not intermixed with test programs): ered disabled state [ 120.711201][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.946921][ T7019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.989312][ T7034] netlink: 'syz.5.258': attribute type 32 has an invalid length. [ 122.059099][ T7070] __nla_validate_parse: 2 callbacks suppressed [ 122.059120][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.270'. [ 122.091486][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.270'. [ 122.104543][ T7075] netlink: 'syz.1.272': attribute type 1 has an invalid length. [ 122.401376][ T7075] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.484785][ T7090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.563408][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 122.605754][ T7106] netlink: 'syz.4.280': attribute type 32 has an invalid length. [ 122.615519][ T7106] netlink: 60 bytes leftover after parsing attributes in process `syz.4.280'. [ 122.727810][ T7104] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 122.775466][ T7104] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 122.785384][ T7104] gretap1: entered promiscuous mode [ 122.792079][ T7104] gretap1: entered allmulticast mode [ 122.862764][ T7116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.078406][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.283'. [ 123.237774][ T7127] gretap1: left allmulticast mode [ 123.244545][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.283'. [ 123.404271][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 123.456698][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 123.556184][ T7141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.287'. [ 123.668668][ T7145] netlink: 28 bytes leftover after parsing attributes in process `syz.5.288'. [ 123.693745][ T7145] netlink: 'syz.5.288': attribute type 7 has an invalid length. [ 123.788054][ T7145] netlink: 'syz.5.288': attribute type 8 has an invalid length. [ 123.854725][ T7157] sock: sock_timestamping_bind_phc: sock not bind to device [ 123.904382][ T7157] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 124.379013][ T7182] vxcan1 speed is unknown, defaulting to 1000 [ 124.596781][ T7182] vxcan1 speed is unknown, defaulting to 1000 [ 124.648956][ T7182] vxcan1 speed is unknown, defaulting to 1000 [ 125.469327][ T7199] sctp: [Deprecated]: syz.4.305 (pid 7199) Use of int in max_burst socket option. [ 125.469327][ T7199] Use struct sctp_assoc_value instead [ 125.586206][ T7182] infiniband syz2: set active [ 125.592652][ T928] vxcan1 speed is unknown, defaulting to 1000 [ 125.633125][ T7182] infiniband syz2: added vxcan1 [ 125.655643][ T7182] syz2: rxe_create_cq: returned err = -12 [ 125.696265][ T7182] infiniband syz2: Couldn't create ib_mad CQ [ 125.731254][ T7232] netlink: 'syz.3.312': attribute type 1 has an invalid length. [ 125.741417][ T7182] infiniband syz2: Couldn't open port 1 [ 125.943136][ T7182] RDS/IB: syz2: added [ 125.975213][ T7182] smc: adding ib device syz2 with port count 1 [ 126.033077][ T7182] smc: ib device syz2 port 1 has pnetid [ 126.063847][ T5956] vxcan1 speed is unknown, defaulting to 1000 [ 126.100591][ T7182] vxcan1 speed is unknown, defaulting to 1000 [ 126.341521][ T7251] nft_compat: unsupported protocol 5 [ 126.706438][ T7259] v: renamed from dummy0 (while UP) [ 126.715152][ T30] audit: type=1107 audit(1755227027.628:2): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 126.914389][ T7270] bridge_slave_0: left allmulticast mode [ 126.945694][ T7270] bridge_slave_0: left promiscuous mode [ 126.958037][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.982195][ T7270] bridge_slave_1: left allmulticast mode [ 126.991716][ T7270] bridge_slave_1: left promiscuous mode [ 127.034184][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.099449][ T7270] bond0: (slave bond_slave_0): Releasing backup interface [ 127.187538][ T7270] bond0: (slave bond_slave_1): Releasing backup interface [ 127.252920][ T7270] team0: Port device team_slave_0 removed [ 127.296226][ T7270] team0: Port device team_slave_1 removed [ 127.320823][ T7270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.376518][ T7270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.392590][ T7270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.401671][ T7270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.477387][ T7285] syzkaller0: entered promiscuous mode [ 127.502149][ T7285] syzkaller0: entered allmulticast mode [ 127.525520][ T7298] __nla_validate_parse: 15 callbacks suppressed [ 127.525542][ T7298] netlink: 104 bytes leftover after parsing attributes in process `syz.4.328'. [ 127.534604][ T7182] vxcan1 speed is unknown, defaulting to 1000 [ 127.548079][ T7295] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 127.923889][ T7310] tipc: Enabling of bearer rejected, failed to enable media [ 128.106689][ T7316] netlink: 16 bytes leftover after parsing attributes in process `syz.4.333'. [ 128.139857][ T7319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.334'. [ 128.363139][ T7327] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.333'. [ 129.115138][ T7182] vxcan1 speed is unknown, defaulting to 1000 [ 129.306978][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 129.371762][ T7370] netlink: 2 bytes leftover after parsing attributes in process `syz.3.342'. [ 129.529342][ T7375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.345'. [ 129.799295][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.346'. [ 130.225751][ T7398] FAULT_INJECTION: forcing a failure. [ 130.225751][ T7398] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.298524][ T7398] CPU: 1 UID: 0 PID: 7398 Comm: syz.4.349 Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 130.298556][ T7398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.298567][ T7398] Call Trace: [ 130.298575][ T7398] [ 130.298584][ T7398] dump_stack_lvl+0x189/0x250 [ 130.298614][ T7398] ? __pfx____ratelimit+0x10/0x10 [ 130.298639][ T7398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.298662][ T7398] ? __pfx__printk+0x10/0x10 [ 130.298690][ T7398] ? __might_fault+0xb0/0x130 [ 130.298731][ T7398] should_fail_ex+0x414/0x560 [ 130.298766][ T7398] _copy_from_user+0x2d/0xb0 [ 130.298786][ T7398] do_sock_getsockopt+0x17d/0x450 [ 130.298818][ T7398] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 130.298845][ T7398] ? write_ibpb+0x30/0x40 [ 130.298869][ T7398] ? __fget_files+0x3a0/0x420 [ 130.298897][ T7398] ? __fget_files+0x2a/0x420 [ 130.298934][ T7398] __x64_sys_getsockopt+0x1a5/0x250 [ 130.298960][ T7398] ? write_ibpb+0x30/0x40 [ 130.298986][ T7398] ? write_ibpb+0x30/0x40 [ 130.299014][ T7398] do_syscall_64+0xfa/0x3b0 [ 130.299043][ T7398] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.299064][ T7398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.299082][ T7398] ? clear_bhb_loop+0x60/0xb0 [ 130.299106][ T7398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.299125][ T7398] RIP: 0033:0x7f0782f8ebe9 [ 130.299142][ T7398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.299157][ T7398] RSP: 002b:00007f0783df1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 130.299178][ T7398] RAX: ffffffffffffffda RBX: 00007f07831b5fa0 RCX: 00007f0782f8ebe9 [ 130.299192][ T7398] RDX: 0000000000000072 RSI: 0000000000000084 RDI: 0000000000000003 [ 130.299203][ T7398] RBP: 00007f0783df1090 R08: 0000200000000180 R09: 0000000000000000 [ 130.299215][ T7398] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 130.299227][ T7398] R13: 00007f07831b6038 R14: 00007f07831b5fa0 R15: 00007ffd32987f58 [ 130.299260][ T7398] [ 130.682367][ T7405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.794484][ T7412] Bluetooth: MGMT ver 1.23 [ 130.925375][ T7182] vxcan1 speed is unknown, defaulting to 1000 [ 131.177570][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 131.352946][ T7434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.356'. [ 131.504202][ T7429] netlink: 'syz.5.357': attribute type 1 has an invalid length. [ 131.909455][ T7436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.932412][ T7436] bond1: (slave bond2): making interface the new active one [ 131.955206][ T7436] bond1: (slave bond2): Enslaving as an active interface with an up link [ 132.093369][ T7439] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 132.122645][ T7444] IPv6: sit1: Disabled Multicast RS [ 132.129893][ T7444] sit1: entered allmulticast mode [ 132.180874][ T7441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.207916][ T7182] vxcan1 speed is unknown, defaulting to 1000 [ 132.616040][ T7479] netlink: 'syz.2.369': attribute type 1 has an invalid length. [ 132.657602][ T7479] netlink: 'syz.2.369': attribute type 2 has an invalid length. [ 132.665765][ T7479] netlink: 'syz.2.369': attribute type 1 has an invalid length. [ 132.698349][ T7486] tc_dump_action: action bad kind [ 133.005910][ T7494] __nla_validate_parse: 1 callbacks suppressed [ 133.005932][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 133.016321][ T7497] FAULT_INJECTION: forcing a failure. [ 133.016321][ T7497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.077186][ T7497] CPU: 1 UID: 0 PID: 7497 Comm: syz.2.372 Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 133.077216][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.077227][ T7497] Call Trace: [ 133.077235][ T7497] [ 133.077244][ T7497] dump_stack_lvl+0x189/0x250 [ 133.077274][ T7497] ? __pfx____ratelimit+0x10/0x10 [ 133.077299][ T7497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.077322][ T7497] ? __pfx__printk+0x10/0x10 [ 133.077363][ T7497] should_fail_ex+0x414/0x560 [ 133.077392][ T7497] _copy_to_user+0x31/0xb0 [ 133.077416][ T7497] simple_read_from_buffer+0xe1/0x170 [ 133.077450][ T7497] proc_fail_nth_read+0x1b3/0x220 [ 133.077476][ T7497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.077500][ T7497] ? rw_verify_area+0x2a6/0x4d0 [ 133.077523][ T7497] ? __lock_acquire+0xab9/0xd20 [ 133.077548][ T7497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.077571][ T7497] vfs_read+0x200/0x980 [ 133.077595][ T7497] ? fdget_pos+0x247/0x320 [ 133.077615][ T7497] ? __pfx___mutex_lock+0x10/0x10 [ 133.077641][ T7497] ? __pfx_vfs_read+0x10/0x10 [ 133.077667][ T7497] ? __fget_files+0x2a/0x420 [ 133.077700][ T7497] ? __fget_files+0x3a0/0x420 [ 133.077736][ T7497] ? __fget_files+0x2a/0x420 [ 133.077775][ T7497] ksys_read+0x145/0x250 [ 133.077804][ T7497] ? __pfx_ksys_read+0x10/0x10 [ 133.077825][ T7497] ? fput+0xa0/0xd0 [ 133.077850][ T7497] ? do_syscall_64+0xbe/0x3b0 [ 133.077880][ T7497] do_syscall_64+0xfa/0x3b0 [ 133.077902][ T7497] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.077925][ T7497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.077944][ T7497] ? clear_bhb_loop+0x60/0xb0 [ 133.077970][ T7497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.077986][ T7497] RIP: 0033:0x7fd52098d5fc [ 133.078004][ T7497] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 133.078019][ T7497] RSP: 002b:00007fd51ebf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.078039][ T7497] RAX: ffffffffffffffda RBX: 00007fd520bb5fa0 RCX: 00007fd52098d5fc [ 133.078053][ T7497] RDX: 000000000000000f RSI: 00007fd51ebf60a0 RDI: 0000000000000004 [ 133.078065][ T7497] RBP: 00007fd51ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 133.078077][ T7497] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 133.078089][ T7497] R13: 00007fd520bb6038 R14: 00007fd520bb5fa0 R15: 00007ffc154338f8 [ 133.078124][ T7497] [ 133.375424][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.434606][ T7501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.374'. [ 133.564371][ T7507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.376'. [ 133.630937][ T7510] netlink: 12 bytes leftover after parsing attributes in process `syz.5.375'. [ 133.977816][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.375'. [ 134.104033][ T7532] netlink: 44 bytes leftover after parsing attributes in process `syz.4.381'. [ 134.127320][ T7536] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 134.375647][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.383'. [ 134.771067][ T7553] vxcan1 speed is unknown, defaulting to 1000 [ 134.815883][ T5956] IPVS: starting estimator thread 0... [ 134.825248][ T7560] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 134.865588][ T7545] "syz.3.382" (7545) uses obsolete ecb(arc4) skcipher [ 134.967324][ T7562] IPVS: using max 23 ests per chain, 55200 per kthread [ 135.008505][ T7566] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.216037][ T7579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.389'. [ 135.266113][ T7579] netlink: 32 bytes leftover after parsing attributes in process `syz.1.389'. [ 135.337846][ T7579] gretap1: entered promiscuous mode [ 135.357253][ T7579] gretap1: entered allmulticast mode [ 136.570251][ T7612] netlink: 96 bytes leftover after parsing attributes in process `syz.4.396'. [ 137.124915][ T7644] netlink: 'syz.2.406': attribute type 1 has an invalid length. [ 137.239736][ T7644] gretap2: entered promiscuous mode [ 137.315391][ T7644] bond2: (slave gretap2): making interface the new active one [ 137.395367][ T7644] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 137.431874][ T7652] macvlan0: entered promiscuous mode [ 137.459742][ T7652] macvlan0: entered allmulticast mode [ 137.481906][ T7652] bond2: entered promiscuous mode [ 137.512412][ T7652] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 137.539070][ T7652] bond2: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 137.568115][ T7652] bond2: left promiscuous mode [ 137.984606][ T7685] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 138.044220][ T7682] tipc: Started in network mode [ 138.056650][ T7682] tipc: Node identity 429926f97794, cluster identity 4711 [ 138.093457][ T7682] tipc: Enabled bearer , priority 0 [ 138.149723][ T7683] syzkaller0: entered promiscuous mode [ 138.195575][ T7683] syzkaller0: entered allmulticast mode [ 138.313475][ T7682] tipc: Resetting bearer [ 138.366059][ T7680] tipc: Resetting bearer [ 138.452838][ T7680] tipc: Disabling bearer [ 138.466539][ T7697] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component [ 138.843803][ T7716] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 138.862032][ T7715] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 138.971463][ T7718] netlink: 'syz.1.424': attribute type 11 has an invalid length. [ 139.003520][ T7718] __nla_validate_parse: 1 callbacks suppressed [ 139.003541][ T7718] netlink: 224 bytes leftover after parsing attributes in process `syz.1.424'. [ 139.038074][ T7721] netlink: 56 bytes leftover after parsing attributes in process `syz.4.425'. [ 139.346335][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 139.365954][ T7728] vxcan1: tx drop: invalid da for name 0x0000000000000014 [ 139.555980][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 139.774840][ T7742] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 140.691665][ T7761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.437'. [ 141.075229][ T7778] netlink: 52 bytes leftover after parsing attributes in process `syz.1.444'. [ 141.143703][ T7783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.446'. [ 141.607006][ T7798] netlink: 48 bytes leftover after parsing attributes in process `syz.4.450'. [ 141.636502][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.645527][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.009235][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 142.080466][ T7805] bridge_slave_1: left allmulticast mode [ 142.117381][ T7805] bridge_slave_1: left promiscuous mode [ 142.120515][ T7812] netlink: 'syz.5.452': attribute type 1 has an invalid length. [ 142.123328][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.188218][ T7814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.454'. [ 142.206361][ T7805] bridge_slave_0: left allmulticast mode [ 142.221740][ T7805] bridge_slave_0: left promiscuous mode [ 142.229539][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.666746][ T7834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.748814][ T7840] netlink: 'syz.3.461': attribute type 1 has an invalid length. [ 142.778014][ T7840] netlink: 'syz.3.461': attribute type 4 has an invalid length. [ 142.973289][ T7847] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 142.998373][ T7847] gretap3: entered promiscuous mode [ 143.003793][ T7847] gretap3: entered allmulticast mode [ 143.622119][ T7881] openvswitch: netlink: Unknown key attributes 2 [ 143.638817][ T7884] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 143.656831][ T7885] Bluetooth: MGMT ver 1.23 [ 144.014532][ T7896] netlink: 'syz.3.481': attribute type 39 has an invalid length. [ 144.034854][ T7898] __nla_validate_parse: 11 callbacks suppressed [ 144.034875][ T7898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.480'. [ 144.322444][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 144.332685][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 144.370630][ T7918] netlink: 'syz.1.486': attribute type 5 has an invalid length. [ 144.393029][ T7919] netlink: 'syz.1.486': attribute type 5 has an invalid length. [ 144.405912][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.486'. [ 144.413336][ T7919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.486'. [ 144.482082][ T7924] netlink: 'syz.2.488': attribute type 2 has an invalid length. [ 145.811169][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 145.820495][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 145.829397][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 145.862274][ T7928] syzkaller0: entered promiscuous mode [ 145.868791][ T7928] syzkaller0: entered allmulticast mode [ 146.001681][ T7944] netlink: 144 bytes leftover after parsing attributes in process `syz.4.492'. [ 146.036119][ T7943] netlink: 144 bytes leftover after parsing attributes in process `syz.4.492'. [ 146.449950][ T7964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.306312][ T7979] vxcan1 speed is unknown, defaulting to 1000 [ 148.612863][ T8034] bond0: (slave bond1): Error -95 calling ndo_bpf [ 148.737815][ T8034] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 148.906373][ T8036] nbd: must specify a device to reconfigure [ 149.143328][ T8045] netlink: 'syz.3.520': attribute type 21 has an invalid length. [ 149.198904][ T8045] netlink: 'syz.3.520': attribute type 6 has an invalid length. [ 149.208920][ T8045] __nla_validate_parse: 4 callbacks suppressed [ 149.208940][ T8045] netlink: 132 bytes leftover after parsing attributes in process `syz.3.520'. [ 149.306109][ T8051] netlink: 'syz.4.521': attribute type 7 has an invalid length. [ 149.338971][ T8051] netlink: 140 bytes leftover after parsing attributes in process `syz.4.521'. [ 149.623405][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 149.958542][ T8080] netlink: 100 bytes leftover after parsing attributes in process `syz.3.531'. [ 150.883261][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 150.925822][ T8123] bridge_slave_1: left allmulticast mode [ 150.943809][ T8123] bridge_slave_1: left promiscuous mode [ 150.980018][ T8123] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.049656][ T8123] bridge_slave_0: left allmulticast mode [ 151.055477][ T8123] bridge_slave_0: left promiscuous mode [ 151.062048][ T8123] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.104675][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.542'. [ 151.587329][ T8150] netlink: 'syz.5.547': attribute type 1 has an invalid length. [ 151.848031][ T8157] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 152.506867][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.557'. [ 152.655625][ T8186] netlink: 64 bytes leftover after parsing attributes in process `syz.5.557'. [ 153.033465][ T8199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.188964][ T8206] tc_dump_action: action bad kind [ 153.268349][ T8208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.569'. [ 153.279586][ T8212] openvswitch: netlink: Missing key (keys=40, expected=100) [ 153.304777][ T8213] IPVS: Error joining to the multicast group [ 153.495607][ T8220] nbd: must specify a size in bytes for the device [ 153.536407][ T8219] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 153.637552][ T8222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.574'. [ 154.194455][ T8256] netlink: 'syz.4.583': attribute type 23 has an invalid length. [ 154.346131][ T8271] __nla_validate_parse: 66 callbacks suppressed [ 154.346191][ T8271] netlink: 60 bytes leftover after parsing attributes in process `syz.2.584'. [ 154.631493][ T8282] tipc: Started in network mode [ 154.636534][ T8282] tipc: Node identity 92a6cb0659b7, cluster identity 4711 [ 154.674164][ T8282] tipc: Enabled bearer , priority 0 [ 154.832273][ T8302] netlink: 'syz.4.594': attribute type 10 has an invalid length. [ 154.989760][ T8282] tipc: Disabling bearer [ 155.096965][ T8302] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 155.467518][ T8319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.599'. [ 155.478187][ T8318] netlink: 308 bytes leftover after parsing attributes in process `syz.1.597'. [ 155.961039][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.607'. [ 156.177385][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 156.253066][ T8361] netlink: 'syz.3.610': attribute type 1 has an invalid length. [ 156.282732][ T8360] tipc: Started in network mode [ 156.294025][ T8360] tipc: Node identity 46755a9d9b56, cluster identity 4711 [ 156.302025][ T8360] tipc: Enabled bearer , priority 0 [ 156.333635][ T8364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.610'. [ 156.367696][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 156.429185][ T8361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.441155][ T8360] team0: entered allmulticast mode [ 156.451966][ T8371] nbd: couldn't find a device at index -373156329 [ 156.454507][ T8360] team_slave_0: entered allmulticast mode [ 156.464710][ T8360] team_slave_1: entered allmulticast mode [ 156.496453][ T8374] netlink: 'syz.1.612': attribute type 16 has an invalid length. [ 156.499132][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.514485][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.553526][ T8374] netlink: 'syz.1.612': attribute type 17 has an invalid length. [ 156.571133][ T8377] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.611'. [ 156.651237][ T8376] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 156.658769][ T24] IPVS: starting estimator thread 0... [ 156.676842][ T8357] tipc: Disabling bearer [ 156.696598][ T5919] vxcan1 speed is unknown, defaulting to 1000 [ 156.747232][ T8381] IPVS: using max 24 ests per chain, 57600 per kthread [ 156.806142][ T8374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.912519][ T8385] netlink: 44 bytes leftover after parsing attributes in process `syz.4.616'. [ 156.973286][ T8385] netlink: 43 bytes leftover after parsing attributes in process `syz.4.616'. [ 157.002993][ T8385] netlink: 'syz.4.616': attribute type 5 has an invalid length. [ 157.207707][ T8398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.465419][ T8408] IPv6: sit1: Disabled Multicast RS [ 157.507120][ T8408] sit1: entered allmulticast mode [ 158.990990][ T8451] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 159.443036][ T8471] __nla_validate_parse: 8 callbacks suppressed [ 159.443056][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.637'. [ 159.482267][ T8467] netlink: 'syz.1.636': attribute type 1 has an invalid length. [ 159.524537][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.637'. [ 159.702142][ T8476] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 160.011279][ T8491] team0: Device vti0 is of different type [ 160.055093][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 160.093476][ T8496] team_slave_0: entered promiscuous mode [ 160.099691][ T8496] team_slave_1: entered promiscuous mode [ 160.121969][ T8496] macsec1: entered promiscuous mode [ 160.148857][ T8496] team0: entered promiscuous mode [ 160.154870][ T8496] macsec1: entered allmulticast mode [ 160.176030][ T8496] team0: entered allmulticast mode [ 160.202520][ T8496] team_slave_0: entered allmulticast mode [ 160.219450][ T8496] team_slave_1: entered allmulticast mode [ 160.234272][ T8496] team0: Device macsec1 is already an upper device of the team interface [ 160.282324][ T8496] team0: left allmulticast mode [ 160.295972][ T8496] team_slave_0: left allmulticast mode [ 160.349990][ T8496] team_slave_1: left allmulticast mode [ 160.367363][ T8496] team0: left promiscuous mode [ 160.380320][ T8496] team_slave_0: left promiscuous mode [ 160.385917][ T8496] team_slave_1: left promiscuous mode [ 160.391667][ T8508] netlink: 'syz.5.648': attribute type 10 has an invalid length. [ 160.549678][ T8508] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 160.824784][ T8526] netlink: 'syz.2.651': attribute type 83 has an invalid length. [ 160.835118][ T8526] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 160.885854][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.5.654'. [ 160.916489][ T8531] netlink: 80 bytes leftover after parsing attributes in process `syz.4.655'. [ 161.159308][ T8536] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 161.201873][ T8536] bond3: (slave vcan0): Error -95 calling set_mac_address [ 161.318954][ T8552] netlink: 48 bytes leftover after parsing attributes in process `syz.4.661'. [ 163.160050][ T8561] netlink: 36 bytes leftover after parsing attributes in process `syz.5.664'. [ 163.680400][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 163.695615][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 163.914231][ T8576] netlink: 284 bytes leftover after parsing attributes in process `syz.3.670'. [ 164.448370][ T8600] netlink: 44 bytes leftover after parsing attributes in process `syz.1.675'. [ 164.457811][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 164.854225][ T8621] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 165.030862][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 165.134248][ T8648] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 165.384351][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'. [ 165.522342][ T8664] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.593387][ T8671] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.604647][ T8671] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 165.618484][ T8671] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 165.916527][ T8693] syzkaller1: entered promiscuous mode [ 165.925225][ T8693] syzkaller1: entered allmulticast mode [ 166.134640][ T8698] can: request_module (can-proto-4) failed. [ 166.331312][ T8708] netlink: 112 bytes leftover after parsing attributes in process `syz.5.705'. [ 166.359627][ T8708] nbd: must specify a size in bytes for the device [ 166.408220][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'. [ 166.803574][ T8737] netlink: 'syz.5.713': attribute type 1 has an invalid length. [ 167.060171][ T8745] raw_sendmsg: syz.3.715 forgot to set AF_INET. Fix it! [ 167.088541][ T13] wlan1: Trigger new scan to find an IBSS to join [ 167.426302][ T8739] bond4 (unregistering): Released all slaves [ 167.468379][ T8763] netlink: 'syz.3.721': attribute type 1 has an invalid length. [ 167.481464][ T8763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.721'. [ 167.502777][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 167.543334][ T8771] netlink: 64 bytes leftover after parsing attributes in process `syz.2.720'. [ 167.553995][ T8771] netlink: 64 bytes leftover after parsing attributes in process `syz.2.720'. [ 167.726393][ T8763] syzkaller0: entered promiscuous mode [ 167.747827][ T8763] syzkaller0: entered allmulticast mode [ 168.198188][ T8799] : renamed from hsr0 (while UP) [ 168.473918][ T8814] netlink: 'syz.4.734': attribute type 10 has an invalid length. [ 168.693685][ T8814] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 169.492590][ T8872] bond0: (slave bond_slave_1): Releasing backup interface [ 169.830018][ T8866] __nla_validate_parse: 4 callbacks suppressed [ 169.830034][ T8866] netlink: 260 bytes leftover after parsing attributes in process `syz.3.744'. [ 169.986897][ T8875] netlink: 256 bytes leftover after parsing attributes in process `syz.1.746'. [ 170.022398][ T8875] netlink: 'syz.1.746': attribute type 9 has an invalid length. [ 170.039662][ T8876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.747'. [ 170.127576][ T49] wlan1: Trigger new scan to find an IBSS to join [ 170.264457][ T8882] netlink: 20 bytes leftover after parsing attributes in process `syz.4.749'. [ 170.285882][ T8882] netlink: 20 bytes leftover after parsing attributes in process `syz.4.749'. [ 170.309449][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.5.751'. [ 170.548869][ T8894] netlink: 20 bytes leftover after parsing attributes in process `syz.5.751'. [ 170.939099][ T8926] tipc: Enabled bearer , priority 0 [ 170.993948][ T8926] syzkaller0: entered promiscuous mode [ 171.037264][ T8926] syzkaller0: entered allmulticast mode [ 171.063144][ T8926] tipc: Resetting bearer [ 171.128322][ T8925] tipc: Resetting bearer [ 171.136619][ T8933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.761'. [ 171.185591][ T8925] tipc: Disabling bearer [ 171.585429][ T8955] bridge_slave_0: left allmulticast mode [ 171.601930][ T8955] bridge_slave_0: left promiscuous mode [ 171.618431][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.644952][ T8955] bridge_slave_1: left allmulticast mode [ 171.668759][ T8955] bridge_slave_1: left promiscuous mode [ 171.674643][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.754635][ T8955] bond0: (slave bond_slave_0): Releasing backup interface [ 171.784194][ T8955] bond0: (slave bond_slave_1): Releasing backup interface [ 171.834809][ T8955] team0: Port device team_slave_0 removed [ 171.863389][ T8955] team0: Port device team_slave_1 removed [ 171.874696][ T8955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.882619][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.893522][ T8955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.904529][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.971968][ T8955] bond3: (slave ip6gretap2): Releasing backup interface [ 172.105326][ T8975] netlink: 24 bytes leftover after parsing attributes in process `syz.5.773'. [ 172.126445][ T8975] netlink: 24 bytes leftover after parsing attributes in process `syz.5.773'. [ 172.371176][ T8992] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 172.435725][ T8997] netlink: 'syz.5.778': attribute type 10 has an invalid length. [ 172.672678][ T9007] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.893295][ T9018] tipc: Started in network mode [ 172.917218][ T9018] tipc: Node identity faa5754d828d, cluster identity 4711 [ 172.925208][ T9018] tipc: Enabled bearer , priority 0 [ 172.975823][ T9030] syzkaller0: entered promiscuous mode [ 173.007811][ T9030] syzkaller0: entered allmulticast mode [ 173.066785][ T9018] tipc: Resetting bearer [ 173.092687][ T36] wlan1: Trigger new scan to find an IBSS to join [ 173.216293][ T9017] tipc: Resetting bearer [ 173.260458][ T9017] tipc: Disabling bearer [ 174.062538][ T49] wlan1: Creating new IBSS network, BSSID ba:2e:74:bb:e6:92 [ 174.184024][ T9042] team0 (unregistering): Port device team_slave_0 removed [ 174.243269][ T9042] team0 (unregistering): Port device team_slave_1 removed [ 174.373923][ T9067] netem: change failed [ 174.612861][ T9088] sctp: [Deprecated]: syz.4.802 (pid 9088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.612861][ T9088] Use struct sctp_sack_info instead [ 175.091932][ T9101] macvlan2: entered promiscuous mode [ 175.113685][ T9101] macvlan2: entered allmulticast mode [ 175.596044][ T9128] __nla_validate_parse: 37 callbacks suppressed [ 175.596067][ T9128] netlink: 830 bytes leftover after parsing attributes in process `syz.4.812'. [ 175.777734][ T9139] netlink: 'syz.3.814': attribute type 1 has an invalid length. [ 176.045304][ T9159] syzkaller1: entered promiscuous mode [ 176.065031][ T9159] syzkaller1: entered allmulticast mode [ 176.181597][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 176.255920][ T9163] bridge4: entered allmulticast mode [ 176.541553][ T9174] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.686789][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.712239][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.892650][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.829'. [ 177.211693][ T9201] nbd: device at index 5 is going down [ 177.229816][ T9216] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 177.289341][ T9201] netlink: 68 bytes leftover after parsing attributes in process `syz.5.830'. [ 177.384614][ T9222] netlink: 'syz.5.830': attribute type 13 has an invalid length. [ 177.391372][ T9216] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.429654][ T5927] udevd[5927]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 177.448509][ T9198] netlink: 'syz.5.830': attribute type 13 has an invalid length. [ 177.624151][ T9218] bond3: (slave veth3): Enslaving as an active interface with a down link [ 177.794199][ T9198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.855654][ T9220] bond3: (slave veth0_to_bond): making interface the new active one [ 177.866688][ T9220] veth0_to_bond: entered promiscuous mode [ 177.873369][ T9220] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 178.281749][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 178.308374][ T9248] netlink: 'syz.3.843': attribute type 14 has an invalid length. [ 178.374280][ T9258] netlink: 'syz.2.845': attribute type 32 has an invalid length. [ 178.386940][ T9258] netlink: 60 bytes leftover after parsing attributes in process `syz.2.845'. [ 178.673077][ T9268] tipc: Enabled bearer , priority 0 [ 178.704493][ T9268] syzkaller0: entered promiscuous mode [ 178.731301][ T9268] syzkaller0: entered allmulticast mode [ 178.774716][ T9274] netlink: 'syz.1.847': attribute type 1 has an invalid length. [ 178.800314][ T9274] netlink: 'syz.1.847': attribute type 1 has an invalid length. [ 178.874235][ T9282] tipc: Resetting bearer [ 179.035497][ T9267] tipc: Resetting bearer [ 179.094830][ T9267] tipc: Disabling bearer [ 179.558056][ T9310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.857'. [ 179.599810][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.854'. [ 179.785287][ T9319] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20004 [ 179.816450][ T9319] 8021q: VLANs not supported on ip_vti0 [ 180.175931][ T9306] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 180.179200][ T9330] netlink: 'syz.4.861': attribute type 2 has an invalid length. [ 180.237222][ T9330] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.861'. [ 180.266942][ T9330] nbd: must specify a device to reconfigure [ 180.349901][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.864'. [ 180.731965][ T9358] netlink: 'syz.1.870': attribute type 29 has an invalid length. [ 180.790768][ T9358] netlink: 'syz.1.870': attribute type 29 has an invalid length. [ 180.891050][ T9358] __nla_validate_parse: 1 callbacks suppressed [ 180.891069][ T9358] netlink: 32 bytes leftover after parsing attributes in process `syz.1.870'. [ 180.940657][ T9358] netlink: 500 bytes leftover after parsing attributes in process `syz.1.870'. [ 181.219440][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.876'. [ 181.271828][ T9376] netlink: 60 bytes leftover after parsing attributes in process `syz.5.876'. [ 181.307838][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.876'. [ 181.320229][ T9376] netlink: 60 bytes leftover after parsing attributes in process `syz.5.876'. [ 181.327541][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.880'. [ 181.336881][ T9376] netlink: 104 bytes leftover after parsing attributes in process `syz.5.876'. [ 181.487388][ T5873] Bluetooth: hci4: command 0x0401 tx timeout [ 181.523806][ T9401] netlink: 36 bytes leftover after parsing attributes in process `syz.3.882'. [ 181.582669][ T8645] IPVS: starting estimator thread 0... [ 181.589880][ T9405] tipc: Enabled bearer , priority 0 [ 181.613370][ T9405] syzkaller0: entered promiscuous mode [ 181.620314][ T9405] syzkaller0: entered allmulticast mode [ 181.679867][ T9405] tipc: Resetting bearer [ 181.698368][ T9405] tipc: Enabling of bearer rejected, already enabled [ 181.707290][ T9406] IPVS: using max 25 ests per chain, 60000 per kthread [ 181.720938][ T9409] netlink: 'syz.4.885': attribute type 11 has an invalid length. [ 181.773745][ T9409] netlink: 'syz.4.885': attribute type 11 has an invalid length. [ 181.835124][ T9405] tipc: Resetting bearer [ 181.872394][ T9405] tipc: Disabling bearer [ 182.029504][ T9431] IPv6: Can't replace route, no match found [ 182.088630][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.890'. [ 182.806714][ T9469] tipc: Enabled bearer , priority 0 [ 182.845645][ T9460] tipc: Resetting bearer [ 182.949713][ T9470] syzkaller0: entered promiscuous mode [ 182.961462][ T9470] syzkaller0: entered allmulticast mode [ 183.019664][ T9474] validate_nla: 46 callbacks suppressed [ 183.019741][ T9479] netlink: 'syz.1.900': attribute type 6 has an invalid length. [ 183.019756][ T9474] netlink: 'syz.1.900': attribute type 6 has an invalid length. [ 183.059765][ T9459] tipc: Resetting bearer [ 183.083448][ T9459] tipc: Disabling bearer [ 183.632093][ T9499] hsr_slave_0 (unregistering): left promiscuous mode [ 183.753530][ T9510] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.903911][ T9521] geneve2: entered promiscuous mode [ 183.950105][ T9510] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.099863][ T9510] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.177739][ T9536] netlink: 'syz.4.915': attribute type 11 has an invalid length. [ 185.058647][ T9510] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.263570][ T9558] netem: change failed [ 185.532707][ T78] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.647288][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.783288][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.930363][ T6867] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.940912][ T9583] IPVS: set_ctl: invalid protocol: 282 172.30.0.2:20002 [ 186.168057][ T9595] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 186.265279][ T9598] tipc: Enabled bearer , priority 0 [ 186.285373][ T9594] syzkaller0: entered promiscuous mode [ 186.308860][ T9594] syzkaller0: entered allmulticast mode [ 186.397005][ T9594] tipc: Resetting bearer [ 186.465313][ T9592] tipc: Resetting bearer [ 186.509623][ T9592] tipc: Disabling bearer [ 186.527792][ T5876] Bluetooth: hci1: command 0x0405 tx timeout [ 186.783700][ T9613] IPv6: sit1: Disabled Multicast RS [ 186.799178][ T9613] sit1: entered allmulticast mode [ 186.812949][ T9619] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 186.905974][ T9625] netlink: 'syz.4.938': attribute type 4 has an invalid length. [ 187.044226][ T8640] IPVS: starting estimator thread 0... [ 187.137435][ T9635] IPVS: using max 22 ests per chain, 52800 per kthread [ 187.209254][ T9637] pimreg3: entered allmulticast mode [ 187.303444][ T9643] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 187.742633][ T9652] __nla_validate_parse: 4 callbacks suppressed [ 187.742654][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.948'. [ 187.789879][ T9650] vlan2: entered promiscuous mode [ 187.802003][ T9659] netlink: 'syz.5.947': attribute type 1 has an invalid length. [ 187.814816][ T9650] bridge0: entered promiscuous mode [ 187.906388][ T9663] netlink: 516 bytes leftover after parsing attributes in process `syz.2.950'. [ 188.005345][ T9659] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.113291][ T9660] bond4: (slave veth3): Enslaving as an active interface with a down link [ 188.141463][ T9664] bond4: (slave veth0_to_bond): making interface the new active one [ 188.169004][ T9664] veth0_to_bond: entered promiscuous mode [ 188.175420][ T9664] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 188.312660][ T9668] bond4: (slave veth5): Enslaving as an active interface with a down link [ 188.318954][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 188.336588][ T9671] tipc: Enabled bearer , priority 0 [ 188.396517][ T9667] tipc: Resetting bearer [ 188.463509][ T9672] syzkaller0: entered promiscuous mode [ 188.472557][ T9672] syzkaller0: entered allmulticast mode [ 188.545291][ T5873] Bluetooth: hci1: link tx timeout [ 188.551827][ T5873] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.577862][ T9666] tipc: Resetting bearer [ 188.622217][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 188.668309][ T9666] tipc: Disabling bearer [ 188.705087][ T9688] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 188.726811][ T9688] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 188.747499][ T9688] gretap1: entered promiscuous mode [ 188.752769][ T9688] gretap1: entered allmulticast mode [ 188.821481][ T9697] netlink: 24 bytes leftover after parsing attributes in process `syz.5.960'. [ 188.927837][ T9700] netlink: 32 bytes leftover after parsing attributes in process `syz.5.960'. [ 189.046165][ T9710] netlink: 'syz.4.963': attribute type 58 has an invalid length. [ 189.068459][ T9712] netlink: 'syz.5.964': attribute type 1 has an invalid length. [ 189.131727][ T9710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.963'. [ 189.176766][ T9716] netlink: 'syz.4.963': attribute type 58 has an invalid length. [ 189.224067][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.963'. [ 189.313668][ T9721] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 189.346707][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.964'. [ 189.363164][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.5.964'. [ 189.453868][ T9712] veth7: entered promiscuous mode [ 189.475854][ T9712] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 189.540206][ T3495] veth0_to_bond: left promiscuous mode [ 189.808616][ T9747] netlink: 'syz.1.970': attribute type 9 has an invalid length. [ 190.520569][ T9788] netlink: 'syz.4.982': attribute type 4 has an invalid length. [ 190.551129][ T9786] netlink: 'syz.5.983': attribute type 2 has an invalid length. [ 190.578950][ T9786] netlink: 'syz.5.983': attribute type 8 has an invalid length. [ 190.593773][ T9788] wlan1: mtu less than device minimum [ 190.608318][ T5873] Bluetooth: hci1: command 0x0405 tx timeout [ 190.612585][ T9799] netlink: 'syz.4.982': attribute type 1 has an invalid length. [ 191.078895][ T9819] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 191.113257][ T9819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.671561][ T9843] netlink: 'syz.1.996': attribute type 1 has an invalid length. [ 191.689820][ T9847] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 193.100258][ T9908] __nla_validate_parse: 80 callbacks suppressed [ 193.100278][ T9908] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1016'. [ 193.135302][ T9910] netlink: 'syz.4.1015': attribute type 11 has an invalid length. [ 193.144288][ T9910] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1015'. [ 193.165671][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 193.392127][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1019'. [ 193.535630][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 193.577744][ T9924] chnl_net:caif_netlink_parms(): no params data found [ 193.581858][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1024'. [ 193.927854][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1028'. [ 194.535846][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.681454][ T9984] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1039'. [ 194.707888][ T9987] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1038'. [ 194.832447][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 195.388313][T10011] netlink: 'syz.3.1047': attribute type 58 has an invalid length. [ 195.443358][T10011] syz.3.1047 (10011) used greatest stack depth: 17896 bytes left [ 195.590229][T10021] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.766950][T10035] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.885914][T10037] openvswitch: netlink: Unknown nsh attribute 0 [ 195.937620][T10037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.990988][T10043] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 196.010289][T10043] netlink: 'syz.2.1056': attribute type 3 has an invalid length. [ 196.366085][T10058] bridge_slave_1: left allmulticast mode [ 196.385533][T10058] bridge_slave_1: left promiscuous mode [ 196.396903][T10058] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.425882][T10058] bridge_slave_0: left allmulticast mode [ 196.443257][T10058] bridge_slave_0: left promiscuous mode [ 196.468846][T10058] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.342800][T10099] netlink: 'syz.2.1074': attribute type 21 has an invalid length. [ 197.384062][T10099] netlink: 'syz.2.1074': attribute type 5 has an invalid length. [ 197.471966][T10107] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 197.667489][T10113] netlink: 'syz.2.1079': attribute type 3 has an invalid length. [ 197.758688][T10119] : entered promiscuous mode [ 197.835131][T10125] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 197.908324][T10127] netlink: 'syz.5.1085': attribute type 6 has an invalid length. [ 198.475375][T10149] netlink: 'syz.4.1092': attribute type 1 has an invalid length. [ 198.493373][T10149] netlink: 'syz.4.1092': attribute type 3 has an invalid length. [ 198.497386][T10151] __nla_validate_parse: 16 callbacks suppressed [ 198.497402][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1095'. [ 198.502160][T10149] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1092'. [ 198.799585][T10166] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1097'. [ 199.114551][T10183] openvswitch: netlink: Flow key attr not present in new flow. [ 199.259202][T10185] IPVS: Unknown mcast interface: vcan0 [ 199.411017][ T9791] veth0_to_bond: left promiscuous mode [ 199.544873][T10209] trusted_key: syz.4.1113 sent an empty control message without MSG_MORE. [ 199.662348][T10213] tipc: Started in network mode [ 199.700087][T10213] tipc: Node identity 7a3840c7c346, cluster identity 4711 [ 199.736486][T10213] tipc: Enabled bearer , priority 0 [ 199.780454][T10220] syzkaller0: entered promiscuous mode [ 199.808928][T10220] syzkaller0: entered allmulticast mode [ 199.854309][T10213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.363713][T10205] tipc: Resetting bearer [ 200.434948][T10240] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 200.500506][T10205] tipc: Disabling bearer [ 200.659743][T10240] bond6: (slave bridge1): making interface the new active one [ 200.682190][T10240] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 200.971092][T10272] netlink: 'syz.3.1126': attribute type 39 has an invalid length. [ 201.065634][T10279] netlink: 'syz.4.1127': attribute type 10 has an invalid length. [ 201.101277][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1127'. [ 201.215381][T10287] netlink: 'syz.1.1129': attribute type 3 has an invalid length. [ 201.225977][T10283] bond3: entered allmulticast mode [ 201.260188][T10283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.330307][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 201.507884][T10300] netlink: 'syz.1.1132': attribute type 11 has an invalid length. [ 201.565782][T10300] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1132'. [ 201.691725][T10304] tipc: Enabling of bearer rejected, failed to enable media [ 201.970457][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 202.069168][T10316] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1135'. [ 202.277962][T10319] netlink: 4632 bytes leftover after parsing attributes in process `syz.2.1137'. [ 202.307251][T10319] ksmbd: Unknown IPC event: 8, ignore. [ 202.504468][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 202.597710][T10336] netlink: 'syz.3.1143': attribute type 32 has an invalid length. [ 202.846007][T10341] 8021q: adding VLAN 0 to HW filter on device bond7 [ 202.892587][T10353] vlan3: entered allmulticast mode [ 202.928654][T10353] bond7: entered allmulticast mode [ 203.154849][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068b68000: rx timeout, send abort [ 203.429802][T10374] netlink: 'syz.2.1153': attribute type 23 has an invalid length. [ 203.655090][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068b6b000: rx timeout, send abort [ 203.663840][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068b68000: abort rx timeout. Force session deactivation [ 203.699249][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888068b6b000: connection exists (fe ff). last cmd: 20 [ 203.949501][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068b68800: rx timeout, send abort [ 203.990240][T10402] __nla_validate_parse: 3 callbacks suppressed [ 203.990261][T10402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1162'. [ 204.026773][T10402] xfrm1: entered promiscuous mode [ 204.032187][T10402] xfrm1: entered allmulticast mode [ 204.393793][T10422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.458134][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068b68800: abort rx timeout. Force session deactivation [ 204.488725][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888068b6b000: connection exists (fe ff). last cmd: 20 [ 204.589554][T10434] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 204.655216][T10437] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1172'. [ 204.666972][T10438] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1172'. [ 204.728103][T10440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.738591][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab65c00: rx timeout, send abort [ 204.773622][T10440] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 204.805504][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1174'. [ 204.996105][T10446] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1176'. [ 205.251560][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab65c00: abort rx timeout. Force session deactivation [ 205.286235][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888068b6b000: connection exists (fe ff). last cmd: 20 [ 205.536132][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028dc4800: rx timeout, send abort [ 206.276559][T10514] netlink: 'syz.4.1194': attribute type 39 has an invalid length. [ 206.342267][T10517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1193'. [ 206.663011][T10530] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1197'. [ 206.863732][T10544] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1200'. [ 206.900672][T10544] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1200'. [ 206.919797][T10544] netlink: 'syz.5.1200': attribute type 4 has an invalid length. [ 207.353951][T10568] netlink: 'syz.5.1210': attribute type 10 has an invalid length. [ 207.384999][T10568] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 207.591395][T10584] netlink: 'syz.1.1213': attribute type 1 has an invalid length. [ 207.905346][T10601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1217'. [ 208.644986][T10639] netlink: 'syz.1.1230': attribute type 4 has an invalid length. [ 208.868673][T10648] sctp: [Deprecated]: syz.4.1233 (pid 10648) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.868673][T10648] Use struct sctp_sack_info instead [ 209.416353][T10665] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 209.601953][T10668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.636133][T10671] __nla_validate_parse: 4 callbacks suppressed [ 209.636154][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 209.655740][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 209.666184][T10671] netlink: 'syz.3.1236': attribute type 14 has an invalid length. [ 209.693835][T10671] netlink: 'syz.3.1236': attribute type 13 has an invalid length. [ 209.970694][T10682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1242'. [ 210.504371][T10702] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 210.720662][T10704] sit0: entered promiscuous mode [ 210.762594][T10704] netlink: 'syz.3.1252': attribute type 1 has an invalid length. [ 210.774048][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'. [ 210.811262][T10704] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1252'. [ 210.821116][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'. [ 210.842094][T10722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1254'. [ 211.066164][T10722] team0: Mode "loalbalance" not found [ 211.155993][T10733] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1259'. [ 211.191567][T10733] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1259'. [ 211.225315][T10733] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1259'. [ 211.300043][T10737] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 211.315048][T10737] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 211.337770][T10737] gretap2: entered promiscuous mode [ 211.362431][T10737] gretap2: entered allmulticast mode [ 211.398879][T10743] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 211.406591][T10743] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 211.677612][T10750] tipc: Enabled bearer , priority 0 [ 211.749870][T10750] sock: sock_timestamping_bind_phc: sock not bind to device [ 211.759083][T10750] syzkaller0: entered promiscuous mode [ 211.764687][T10750] syzkaller0: entered allmulticast mode [ 211.862268][T10749] tipc: Resetting bearer [ 211.959276][T10749] tipc: Disabling bearer [ 211.972433][ T5870] Bluetooth: hci4: command 0x0401 tx timeout [ 211.982039][ T5864] Bluetooth: hci3: command 0x0406 tx timeout [ 211.983305][ T5879] Bluetooth: hci0: command 0x0401 tx timeout [ 211.989130][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 212.684274][T10792] netlink: 'syz.1.1277': attribute type 11 has an invalid length. [ 212.820666][T10795] netlink: 'syz.3.1278': attribute type 2 has an invalid length. [ 213.005248][T10805] netlink: 'syz.1.1281': attribute type 7 has an invalid length. [ 213.118411][T10808] netlink: 'syz.5.1282': attribute type 2 has an invalid length. [ 213.601384][ T9783] tipc: Subscription rejected, illegal request [ 213.836909][T10839] netlink: 'syz.4.1292': attribute type 1 has an invalid length. [ 213.845890][T10839] netlink: 'syz.4.1292': attribute type 2 has an invalid length. [ 213.855799][T10839] netlink: 'syz.4.1292': attribute type 1 has an invalid length. [ 213.865308][T10839] netlink: 'syz.4.1292': attribute type 2 has an invalid length. [ 214.343850][T10879] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 214.598773][T10894] openvswitch: netlink: Flow key attr not present in new flow. [ 215.069615][T10916] netlink: 'syz.3.1314': attribute type 1 has an invalid length. [ 215.078278][T10916] nbd: error processing sock list [ 215.085646][T10916] block nbd1: shutting down sockets [ 215.209441][ T5232] udevd[5232]: worker [5927] terminated by signal 33 (Unknown signal 33) [ 215.237577][ T5232] udevd[5232]: worker [5927] failed while handling '/devices/virtual/block/loop4' [ 215.335083][T10933] __nla_validate_parse: 11 callbacks suppressed [ 215.335105][T10933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1319'. [ 215.344129][T10932] netlink: 808 bytes leftover after parsing attributes in process `syz.2.1317'. [ 215.360330][T10933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1319'. [ 215.394283][T10933] gretap0: entered promiscuous mode [ 215.422881][T10933] gretap0: left promiscuous mode [ 215.444342][T10940] netlink: 'syz.5.1320': attribute type 13 has an invalid length. [ 215.636918][T10948] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1324'. [ 216.110546][T10967] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1331'. [ 216.157569][T10967] netem: invalid attributes len -24 [ 216.162833][T10967] netem: change failed [ 216.241771][T10977] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.270451][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 216.334173][T10977] netlink: 'syz.3.1337': attribute type 1 has an invalid length. [ 216.473540][T10990] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 216.511847][T10989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.603667][T10997] pim6reg1: entered promiscuous mode [ 216.615293][T10989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.645003][T10997] pim6reg1: entered allmulticast mode [ 216.719144][T10998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.811527][T11008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1343'. [ 217.071549][T11023] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1349'. [ 217.345971][T11035] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1351'. [ 217.391925][T11038] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1352'. [ 218.605046][T11089] validate_nla: 6 callbacks suppressed [ 218.605066][T11089] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 218.870792][T11108] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 219.093846][T11120] syzkaller0: entered promiscuous mode [ 219.099980][T11120] syzkaller0: entered allmulticast mode [ 219.165192][T11123] blkio.reset_stats is deprecated [ 219.603711][T11139] Set syz1 is full, maxelem 1038 reached [ 219.696405][T11142] netem: change failed [ 220.219265][T11167] netlink: 'syz.1.1394': attribute type 21 has an invalid length. [ 220.276658][T11168] netlink: 'syz.1.1394': attribute type 21 has an invalid length. [ 220.303936][T11168] netlink: 'syz.1.1394': attribute type 1 has an invalid length. [ 220.383562][T11167] netlink: 'syz.1.1394': attribute type 1 has an invalid length. [ 220.583140][T11188] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 220.695239][T11197] __nla_validate_parse: 12 callbacks suppressed [ 220.695261][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'. [ 220.795839][T11200] netlink: 'syz.5.1402': attribute type 13 has an invalid length. [ 220.821817][T11202] netlink: 'syz.2.1403': attribute type 1 has an invalid length. [ 220.892199][T11207] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 220.905024][T11202] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.072184][T11202] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.081034][T11202] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 221.118002][T11202] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 221.173028][T11206] veth7: entered promiscuous mode [ 221.191884][T11206] bond5: (slave veth7): Enslaving as an active interface with a down link [ 221.240385][T11216] vlan0: entered allmulticast mode [ 221.246147][T11216] bond5: entered allmulticast mode [ 221.975569][ T9779] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 221.995863][T11260] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1414'. [ 222.055614][T11263] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1417'. [ 222.344619][T11274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1421'. [ 222.503115][T11283] 8021q: adding VLAN 0 to HW filter on device bond6 [ 222.514716][T11283] bond0: (slave bond6): Enslaving as an active interface with an up link [ 222.598578][T11287] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 222.879378][T11301] netlink: 'syz.5.1430': attribute type 1 has an invalid length. [ 222.918557][T11301] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1430'. [ 222.984575][T11305] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1431'. [ 223.030279][T11308] netlink: 'syz.1.1431': attribute type 9 has an invalid length. [ 223.088888][T11308] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.1431'. [ 223.209160][T11310] netlink: 'syz.3.1432': attribute type 2 has an invalid length. [ 223.276410][T11313] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1434'. [ 223.900863][T11337] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1442'. [ 224.025486][T11339] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 224.203770][T11337] validate_nla: 1 callbacks suppressed [ 224.203790][T11337] netlink: 'syz.1.1442': attribute type 1 has an invalid length. [ 224.262813][T11356] tipc: Enabled bearer , priority 0 [ 224.308063][T11354] tipc: Disabling bearer [ 224.818254][T11387] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1457'. [ 224.988383][T11387] vxcan1 speed is unknown, defaulting to 1000 [ 226.049167][T11435] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 226.066093][T11436] netlink: 'syz.3.1469': attribute type 1 has an invalid length. [ 226.311430][T11436] 8021q: adding VLAN 0 to HW filter on device bond6 [ 226.420715][T11449] netlink: 'syz.1.1473': attribute type 12 has an invalid length. [ 226.640396][T11459] __nla_validate_parse: 1 callbacks suppressed [ 226.640418][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1475'. [ 227.151415][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 227.184169][T11477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1482'. [ 227.212211][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1483'. [ 227.221926][T11477] geneve2: entered promiscuous mode [ 227.222082][T11482] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 227.230110][T11477] geneve2: entered allmulticast mode [ 227.751213][T11508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1494'. [ 227.792179][T11508] xfrm0: mtu less than device minimum [ 227.803294][T11508] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1494'. [ 227.991906][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1497'. [ 228.014195][T11525] dvmrp0: entered allmulticast mode [ 228.221815][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1499'. [ 228.413803][T11544] netlink: 'syz.1.1502': attribute type 7 has an invalid length. [ 228.465064][T11547] smc: net device erspan0 applied user defined pnetid SYZ0 [ 228.472343][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1502'. [ 228.476858][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1502'. [ 228.742941][T11557] sctp: [Deprecated]: syz.5.1508 (pid 11557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.742941][T11557] Use struct sctp_sack_info instead [ 228.944114][T11571] netlink: 'syz.2.1512': attribute type 11 has an invalid length. [ 230.717744][T11581] netlink: 'syz.3.1518': attribute type 11 has an invalid length. [ 230.739141][T11581] netlink: 'syz.3.1518': attribute type 4 has an invalid length. [ 230.862172][T11591] netlink: 'syz.5.1521': attribute type 1 has an invalid length. [ 230.864271][T11592] veth0: entered promiscuous mode [ 230.950615][T11579] veth0: left promiscuous mode [ 231.253115][T11608] vxcan1 speed is unknown, defaulting to 1000 [ 232.362212][T11661] __nla_validate_parse: 4 callbacks suppressed [ 232.362232][T11661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1538'. [ 232.412221][T11661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1538'. [ 232.444771][T11663] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1539'. [ 232.691926][T11671] sit1: entered promiscuous mode [ 232.707713][T11671] sit1: entered allmulticast mode [ 232.870274][T11678] team0: Device vti0 is up. Set it down before adding it as a team port [ 232.952808][T11683] netlink: 'syz.5.1542': attribute type 1 has an invalid length. [ 232.997183][T11683] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1542'. [ 233.164590][T11689] netlink: 'syz.3.1545': attribute type 2 has an invalid length. [ 233.225943][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1547'. [ 233.562558][T11718] sctp: [Deprecated]: syz.5.1553 (pid 11718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.562558][T11718] Use struct sctp_sack_info instead [ 233.669740][T11723] netlink: 666 bytes leftover after parsing attributes in process `syz.5.1556'. [ 233.712031][T11720] pim6reg527: entered allmulticast mode [ 233.840269][T11731] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 233.888673][T11691] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 234.034143][T11736] netlink: 212404 bytes leftover after parsing attributes in process `syz.3.1560'. [ 234.043277][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1562'. [ 234.095665][T11729] syzkaller1: entered promiscuous mode [ 234.108188][T11729] syzkaller1: entered allmulticast mode [ 234.176293][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1563'. [ 234.200383][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1563'. [ 234.215481][T11745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.301193][T11749] bond0: Device is already in use. [ 234.550384][T11762] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.559626][T11762] bond0: (slave bond5): Enslaving as an active interface with an up link [ 235.167516][ T5867] Bluetooth: hci2: command 0x0406 tx timeout [ 235.576256][T11793] tipc: Enabled bearer , priority 0 [ 235.601089][T11793] syzkaller0: entered promiscuous mode [ 235.612686][T11793] syzkaller0: entered allmulticast mode [ 235.677833][T11789] syzkaller0: entered promiscuous mode [ 235.688011][T11789] syzkaller0: entered allmulticast mode [ 235.826189][T11804] netlink: 'syz.2.1583': attribute type 2 has an invalid length. [ 236.719360][ T928] tipc: Node number set to 2015917389 [ 237.500539][T11790] tipc: Resetting bearer [ 237.585462][T11790] tipc: Disabling bearer [ 237.620680][T11816] bridge3: entered promiscuous mode [ 237.626086][T11816] bridge3: entered allmulticast mode [ 237.660262][T11824] __nla_validate_parse: 2 callbacks suppressed [ 237.660283][T11824] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1586'. [ 237.698428][T11824] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1586'. [ 237.724687][T11824] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1586'. [ 237.778525][T11825] nbd1: detected capacity change from 0 to 127 [ 237.793730][ T5867] block nbd1: Receive control failed (result -32) [ 237.814559][ T6470] block nbd1: Dead connection, failed to find a fallback [ 237.857566][ T6470] block nbd1: shutting down sockets [ 237.863399][ T6470] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.896050][ T6470] Buffer I/O error on dev nbd1, logical block 0, async page read [ 237.923543][ T6470] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.965355][ T6470] Buffer I/O error on dev nbd1, logical block 1, async page read [ 238.012233][ T6470] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.045617][ T6470] Buffer I/O error on dev nbd1, logical block 2, async page read [ 238.081763][ T6470] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.098661][ T6470] Buffer I/O error on dev nbd1, logical block 3, async page read [ 238.106824][ T6470] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.120298][ T6470] Buffer I/O error on dev nbd1, logical block 0, async page read [ 238.151693][T11847] netlink: 'syz.2.1595': attribute type 10 has an invalid length. [ 238.169282][ T6470] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.193841][T11845] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 238.201847][ T6470] Buffer I/O error on dev nbd1, logical block 1, async page read [ 238.222263][ T6470] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.277695][ T6470] Buffer I/O error on dev nbd1, logical block 2, async page read [ 238.286286][T11847] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 238.290501][ T6470] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.327866][ T6470] Buffer I/O error on dev nbd1, logical block 3, async page read [ 238.333306][T11847] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 238.335986][ T6470] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.378091][ T6470] Buffer I/O error on dev nbd1, logical block 0, async page read [ 238.415669][ T6470] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.454521][ T6470] Buffer I/O error on dev nbd1, logical block 1, async page read [ 238.482166][ T6470] ldm_validate_partition_table(): Disk read failed. [ 238.503437][ T6470] Dev nbd1: unable to read RDB block 0 [ 238.560625][ T6470] nbd1: unable to read partition table [ 238.604329][ T6470] ldm_validate_partition_table(): Disk read failed. [ 238.629621][ T6470] Dev nbd1: unable to read RDB block 0 [ 238.649281][ T6470] nbd1: unable to read partition table [ 238.812406][T11871] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1604'. [ 238.906704][T11879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1604'. [ 238.910114][T11878] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1607'. [ 238.945177][T11875] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1606'. [ 239.148315][T11886] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1609'. [ 239.179452][T11886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1609'. [ 239.211928][T11886] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1609'. [ 239.278147][T11886] netlink: 'syz.1.1609': attribute type 2 has an invalid length. [ 239.335975][T11895] netlink: 'syz.4.1614': attribute type 23 has an invalid length. [ 239.502010][T11906] netlink: 'syz.5.1617': attribute type 1 has an invalid length. [ 239.517087][T11906] netlink: 'syz.5.1617': attribute type 1 has an invalid length. [ 239.876159][T11913] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 239.982553][T11915] syzkaller1: entered promiscuous mode [ 240.027317][T11915] syzkaller1: entered allmulticast mode [ 240.053618][T11931] netlink: 'syz.4.1623': attribute type 1 has an invalid length. [ 240.062442][T11937] netlink: 'syz.2.1625': attribute type 21 has an invalid length. [ 240.158525][T11934] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 240.162003][T11935] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 240.694530][T11967] macsec2: entered promiscuous mode [ 240.749519][T11967] macsec2: entered allmulticast mode [ 240.986727][T11980] dvmrp1: entered allmulticast mode [ 242.242558][T12055] netlink: 'syz.2.1651': attribute type 4 has an invalid length. [ 242.288851][T12055] wlan1: mtu less than device minimum [ 242.602325][T12065] tipc: Enabled bearer , priority 0 [ 242.656348][T12065] syzkaller0: entered promiscuous mode [ 242.689457][T12065] syzkaller0: entered allmulticast mode [ 242.727741][T12065] tipc: Resetting bearer [ 242.732672][T12072] __nla_validate_parse: 11 callbacks suppressed [ 242.732691][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1657'. [ 242.771385][T12064] tipc: Resetting bearer [ 242.831344][T12064] tipc: Disabling bearer [ 243.696413][T12112] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1666'. [ 243.790816][T12112] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1666'. [ 244.154066][T12121] vxcan1 speed is unknown, defaulting to 1000 [ 244.982186][T12125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1669'. [ 246.002175][T12216] tipc: Enabled bearer , priority 0 [ 246.080924][T12227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1690'. [ 246.269547][T12216] tipc: Disabling bearer [ 246.293949][T12239] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1693'. [ 246.545370][T12249] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1691'. [ 246.618003][T12249] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1691'. [ 246.847670][T12262] netlink: 'syz.3.1697': attribute type 1 has an invalid length. [ 246.930022][T12249] gretap2: entered promiscuous mode [ 246.966231][T12249] gretap2: entered allmulticast mode [ 247.015697][T12264] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 247.143122][T12274] netlink: 'syz.5.1699': attribute type 21 has an invalid length. [ 247.152936][T12274] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1699'. [ 247.290561][T12247] syzkaller0: entered promiscuous mode [ 247.296305][T12247] syzkaller0: entered allmulticast mode [ 247.514651][T12282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1701'. [ 249.185913][T12274] netlink: 'syz.5.1699': attribute type 5 has an invalid length. [ 249.194681][T12274] __nla_validate_parse: 1 callbacks suppressed [ 249.194701][T12274] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1699'. [ 249.276006][T12282] pimreg: entered allmulticast mode [ 249.454708][T12299] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 249.610975][T12310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.965860][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1713'. [ 250.413017][T12351] openvswitch: netlink: Missing key (keys=40, expected=100) [ 250.650939][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1722'. [ 250.801199][T12377] tipc: Enabling of bearer rejected, failed to enable media [ 250.886542][T12377] veth0: entered promiscuous mode [ 250.906525][T12377] veth0: left promiscuous mode [ 251.178178][T12389] tipc: Enabled bearer , priority 0 [ 251.223002][T12389] syzkaller0: entered promiscuous mode [ 251.256408][T12389] syzkaller0: entered allmulticast mode [ 251.342767][T12389] tipc: Resetting bearer [ 251.366317][T12389] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1729'. [ 251.383251][T12389] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1729'. [ 251.394251][T12399] syzkaller1: entered promiscuous mode [ 251.408657][T12399] syzkaller1: entered allmulticast mode [ 251.421001][T12387] tipc: Resetting bearer [ 251.421954][T12399] netlink: 'syz.4.1732': attribute type 28 has an invalid length. [ 251.436729][T12399] netlink: 'syz.4.1732': attribute type 3 has an invalid length. [ 251.452036][T12399] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1732'. [ 251.464766][T12399] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1732'. [ 251.490963][T12387] tipc: Disabling bearer [ 251.508625][T12399] netlink: 'syz.4.1732': attribute type 10 has an invalid length. [ 251.516733][T12399] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1732'. [ 251.553743][T12399] geneve0: entered allmulticast mode [ 251.568879][T12399] team0: Port device geneve0 added [ 252.231272][T12435] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1745'. [ 252.273793][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1745'. [ 252.302229][T12435] openvswitch: netlink: Flow actions attr not present in new flow. [ 252.796190][T12454] pim6reg: entered allmulticast mode [ 253.344681][T12478] pimreg: entered allmulticast mode [ 253.456747][T12485] dvmrp0: left allmulticast mode [ 253.464392][T12485] dvmrp1: left allmulticast mode [ 253.470403][T12485] pimreg: left allmulticast mode [ 253.502694][T12483] TCP: TCP_TX_DELAY enabled [ 253.642736][T12489] v: renamed from dummy0 (while UP) [ 253.933198][ T928] IPVS: starting estimator thread 0... [ 254.023262][T12501] netlink: 'syz.2.1764': attribute type 10 has an invalid length. [ 254.102646][T12503] IPVS: using max 26 ests per chain, 62400 per kthread [ 254.232057][T12508] bond0: (slave bond_slave_0): Releasing backup interface [ 254.264752][T12508] team0: Port device team_slave_0 removed [ 254.307979][T12508] team0: Port device team_slave_1 removed [ 254.321444][T12508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.350451][T12508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.396454][T12508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.419486][T12508] bond0: (slave wlan1): Releasing backup interface [ 254.433403][T12508] bond2: (slave gretap2): Releasing active interface [ 254.451540][T12508] bond5: (slave veth7): Releasing active interface [ 254.491003][T12522] bond_slave_0: mtu less than device minimum [ 254.519873][T12531] __nla_validate_parse: 3 callbacks suppressed [ 254.519894][T12531] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1770'. [ 254.703280][T12538] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1772'. [ 255.015907][T12556] bond10: entered promiscuous mode [ 255.022319][T12556] bond10: entered allmulticast mode [ 255.036997][T12556] 8021q: adding VLAN 0 to HW filter on device bond10 [ 255.100360][T12566] netlink: 'syz.3.1781': attribute type 10 has an invalid length. [ 255.118365][T12566] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 255.303625][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1785'. [ 255.356959][T12574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1785'. [ 255.367106][T12578] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 255.614033][T12589] bond6: (slave bridge1): Releasing active interface [ 255.645883][T12590] sctp: [Deprecated]: syz.3.1789 (pid 12590) Use of int in maxseg socket option. [ 255.645883][T12590] Use struct sctp_assoc_value instead [ 255.987900][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.071621][T12621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1796'. [ 256.093798][T12621] bond0: entered promiscuous mode [ 256.117433][T12621] bond_slave_0: entered promiscuous mode [ 256.126109][T12621] bond_slave_1: entered promiscuous mode [ 256.148005][T12621] bond1: entered promiscuous mode [ 256.156976][T12621] bridge_slave_1: entered promiscuous mode [ 256.163825][T12621] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 256.171976][T12621] bond5: entered promiscuous mode [ 256.194385][T12621] bond0: left promiscuous mode [ 256.200429][T12621] bond_slave_0: left promiscuous mode [ 256.209010][T12621] bond_slave_1: left promiscuous mode [ 256.214936][T12621] bond1: left promiscuous mode [ 256.227190][T12621] bridge_slave_1: left promiscuous mode [ 256.239981][T12621] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 256.253037][T12621] bond5: left promiscuous mode [ 256.749112][ T3495] bond0: (slave wlan1): link status definitely down, disabling slave [ 256.774092][ T3495] bond0: (slave bond6): link status definitely down, disabling slave [ 256.791488][ T3495] bond0: now running without any active interface! [ 256.816487][T12655] netlink: 'syz.3.1806': attribute type 7 has an invalid length. [ 256.824959][T12655] netlink: 'syz.3.1806': attribute type 8 has an invalid length. [ 257.093591][T12673] syzkaller1: entered promiscuous mode [ 257.105984][T12673] syzkaller1: entered allmulticast mode [ 257.509834][T12691] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1817'. [ 257.851819][T12712] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1822'. [ 257.864066][T12712] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1822'. [ 257.873348][T12712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.979275][T12714] netlink: 'syz.5.1823': attribute type 10 has an invalid length. [ 257.995927][T12716] netlink: 'syz.2.1824': attribute type 10 has an invalid length. [ 258.014695][T12716] team0: Device veth1_macvtap failed to register rx_handler [ 258.074498][T12718] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20001 [ 258.533211][T12730] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 258.672428][T12733] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.838893][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1829'. [ 258.848963][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1832'. [ 258.875370][T12733] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.954879][T12738] vxcan1 speed is unknown, defaulting to 1000 [ 259.261958][T12733] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.556883][T12733] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.914367][ T9785] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.983792][ T1058] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.052762][ T1058] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.063613][T12773] C: renamed from lo (while UP) [ 260.116648][T12774] __nla_validate_parse: 1 callbacks suppressed [ 260.116669][T12774] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1840'. [ 260.259459][ T9779] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.631196][T12801] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1847'. [ 260.662070][T12804] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1847'. [ 260.904493][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 261.163132][T12828] netlink: 'syz.5.1856': attribute type 1 has an invalid length. [ 261.192527][T12830] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.1854'. [ 261.215750][T12830] netlink: 'syz.3.1854': attribute type 10 has an invalid length. [ 261.260146][T12828] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1856'. [ 261.273233][T12828] 8021q: adding VLAN 0 to HW filter on device bond8 [ 261.321973][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1856'. [ 261.373035][T12828] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1856'. [ 261.614949][T12852] delete_channel: no stack [ 261.622984][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1860'. [ 261.633288][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 261.704297][T12857] netlink: 'syz.3.1865': attribute type 32 has an invalid length. [ 262.718500][T12905] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 262.732562][T12908] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 262.752991][T12908] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 262.871320][T12911] netlink: 'syz.3.1881': attribute type 32 has an invalid length. [ 262.959576][T12920] netlink: 'syz.5.1884': attribute type 21 has an invalid length. [ 263.011420][T12921] "syz.5.1884" (12921) uses obsolete ecb(arc4) skcipher [ 263.023647][ T1156] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.047485][T12920] netlink: 'syz.5.1884': attribute type 21 has an invalid length. [ 263.056999][T12927] netlink: 'syz.1.1886': attribute type 1 has an invalid length. [ 263.062332][ T1156] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.075615][ T1156] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.140513][ T1156] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.176526][T12935] netlink: 'syz.5.1887': attribute type 1 has an invalid length. [ 263.187949][T12935] netlink: 'syz.5.1887': attribute type 2 has an invalid length. [ 263.199251][T12935] netlink: 'syz.5.1887': attribute type 1 has an invalid length. [ 263.214488][T12930] 8021q: adding VLAN 0 to HW filter on device bond12 [ 263.226644][T12930] bond11: (slave bond12): making interface the new active one [ 263.236556][T12930] bond11: (slave bond12): Enslaving as an active interface with an up link [ 263.275934][T12927] bond11: (slave gretap2): Enslaving as a backup interface with an up link [ 263.296101][T12936] 8021q: adding VLAN 0 to HW filter on device bond11 [ 263.340615][T12938] vlan0: entered promiscuous mode [ 263.360662][T12938] vlan0: entered allmulticast mode [ 263.375451][T12938] hsr_slave_1: entered allmulticast mode [ 264.046547][T12966] veth7: entered promiscuous mode [ 264.748911][T13003] 8021q: VLANs not supported on ip6_vti0 [ 265.124858][T13018] __nla_validate_parse: 23 callbacks suppressed [ 265.124880][T13018] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1911'. [ 265.151459][T13021] IPVS: set_ctl: invalid protocol: 98 172.20.20.50:20004 [ 265.182029][T13021] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 265.241650][T13021] mac80211_hwsim hwsim14 wlan1: left allmulticast mode [ 265.270289][T13027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1913'. [ 265.295446][T13029] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1914'. [ 265.542136][T13044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1919'. [ 265.570775][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 265.598617][T13047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1920'. [ 265.652736][T13051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1922'. [ 265.656723][T13048] bridge6: entered allmulticast mode [ 265.665536][T13052] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1922'. [ 265.875520][T13064] syzkaller0: entered promiscuous mode [ 265.883219][T13064] syzkaller0: entered allmulticast mode [ 266.020345][T13074] tipc: Enabled bearer , priority 0 [ 266.030720][T13074] syzkaller0: entered promiscuous mode [ 266.036725][T13074] syzkaller0: entered allmulticast mode [ 266.050645][T13074] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 266.118304][T13074] tipc: Resetting bearer [ 266.127661][T13073] tipc: Resetting bearer [ 266.135361][T13078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.184568][T13073] tipc: Disabling bearer [ 266.211895][T13080] tipc: Enabled bearer , priority 0 [ 266.235180][T13080] syzkaller0: entered promiscuous mode [ 266.254421][T13080] syzkaller0: entered allmulticast mode [ 266.301887][T13080] tipc: Resetting bearer [ 266.314360][T13079] tipc: Resetting bearer [ 266.339666][T13079] tipc: Disabling bearer [ 266.593016][T13097] validate_nla: 9 callbacks suppressed [ 266.593036][T13097] netlink: 'syz.5.1937': attribute type 11 has an invalid length. [ 267.139881][T13129] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 267.784789][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1952'. [ 268.214823][T13183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1956'. [ 269.289529][T13226] vxcan1 speed is unknown, defaulting to 1000 [ 269.928772][T13244] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 269.991896][T13244] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 270.244059][T13255] __nla_validate_parse: 3 callbacks suppressed [ 270.244080][T13255] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1976'. [ 270.274488][T13256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1975'. [ 270.542611][T13264] syzkaller0: entered promiscuous mode [ 270.551899][T13264] syzkaller0: entered allmulticast mode [ 270.642598][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1980'. [ 270.814640][T13273] netlink: 'syz.3.1980': attribute type 1 has an invalid length. [ 271.423630][T13275] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1981'. [ 272.482571][T13281] veth0: entered promiscuous mode [ 272.494889][T13280] veth0: left promiscuous mode [ 272.583486][T13286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1985'. [ 272.628282][T13286] nbd: must specify a device to reconfigure [ 272.934106][T13293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1989'. [ 272.945938][T13294] xt_socket: unknown flags 0x50 [ 273.195201][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'. [ 273.372000][T13313] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 273.645880][T13320] vxcan1 speed is unknown, defaulting to 1000 [ 273.851066][T13330] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2003'. [ 274.308112][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2008'. [ 274.452405][T13349] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2000'. [ 274.618885][ T5876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.629325][ T5876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.640640][ T5876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.649207][ T5876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.656956][ T5876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.889836][T13354] vxcan1 speed is unknown, defaulting to 1000 [ 275.074033][T13369] sch_fq: defrate 0 ignored. [ 275.248990][T13374] syzkaller1: entered promiscuous mode [ 275.267215][T13374] syzkaller1: entered allmulticast mode [ 275.519437][T13382] netlink: 'syz.3.2018': attribute type 1 has an invalid length. [ 275.539579][T13388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.556596][T13388] __nla_validate_parse: 1 callbacks suppressed [ 275.556614][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'. [ 275.805737][T13382] 8021q: adding VLAN 0 to HW filter on device bond7 [ 275.850436][T13400] netlink: 'syz.5.2024': attribute type 1 has an invalid length. [ 275.880357][T13400] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2024'. [ 275.911400][T13386] bond7: (slave wlan0): Enslaving as an active interface with a down link [ 275.970195][T13400] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 275.979932][T13400] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 276.194895][T13417] netlink: 'syz.5.2028': attribute type 10 has an invalid length. [ 276.229630][T13416] netlink: 'syz.1.2027': attribute type 1 has an invalid length. [ 276.251705][T13422] netlink: 'syz.2.2030': attribute type 16 has an invalid length. [ 276.260476][T13422] netlink: 'syz.2.2030': attribute type 3 has an invalid length. [ 276.269921][T13422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2030'. [ 276.417486][T13427] netlink: 'syz.3.2032': attribute type 1 has an invalid length. [ 276.518181][T13422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2030'. [ 276.587952][T13427] 8021q: adding VLAN 0 to HW filter on device bond8 [ 276.613883][T13434] bond8: (slave gretap1): making interface the new active one [ 276.623191][T13434] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 276.716500][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2036'. [ 276.733393][T13445] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 276.767394][ T5876] Bluetooth: hci5: command tx timeout [ 276.822493][T13445] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 276.869902][T13445] gretap4: entered promiscuous mode [ 276.875295][T13445] gretap4: entered allmulticast mode [ 276.921482][T13354] chnl_net:caif_netlink_parms(): no params data found [ 277.012826][T13457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2039'. [ 277.239380][T13354] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.257578][T13354] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.282782][T13354] bridge_slave_0: entered allmulticast mode [ 277.301184][T13354] bridge_slave_0: entered promiscuous mode [ 277.311096][T13354] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.319060][T13354] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.326341][T13354] bridge_slave_1: entered allmulticast mode [ 277.335387][T13354] bridge_slave_1: entered promiscuous mode [ 277.478298][T13470] !: renamed from bond_slave_0 [ 277.495300][T13468] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2043'. [ 277.530034][T13354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.552890][T13354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.577757][T13472] netlink: 'syz.3.2043': attribute type 12 has an invalid length. [ 277.595869][T13472] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2043'. [ 277.614543][T13477] IPv6: Can't replace route, no match found [ 277.790308][T13354] team0: Port device team_slave_0 added [ 277.845357][T13354] team0: Port device team_slave_1 added [ 278.020957][T13354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.029102][T13354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.072506][T13354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.169942][T13354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.182077][T13354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.214420][T13354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.241832][T13496] veth0: entered promiscuous mode [ 278.415714][T13354] hsr_slave_0: entered promiscuous mode [ 278.423137][T13354] hsr_slave_1: entered promiscuous mode [ 278.432666][T13354] debugfs: 'hsr0' already exists in 'hsr' [ 278.443174][T13354] Cannot create hsr debugfs directory [ 278.851428][ T5876] Bluetooth: hci5: command tx timeout [ 278.971615][T13495] veth0: left promiscuous mode [ 279.088753][T13354] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 279.144084][T13354] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 279.157464][T13538] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2062'. [ 279.198514][T13354] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 279.272387][T13354] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 279.503470][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2067'. [ 279.758920][T13354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.812710][T13572] netlink: 'syz.3.2072': attribute type 1 has an invalid length. [ 279.943498][T13572] 8021q: adding VLAN 0 to HW filter on device bond9 [ 279.977984][T13354] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.990123][T13585] netlink: 'syz.5.2074': attribute type 39 has an invalid length. [ 280.060275][T13584] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 280.113410][ T9783] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.120785][ T9783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.163901][T13586] vxcan1 speed is unknown, defaulting to 1000 [ 280.179765][ T6867] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.187163][ T6867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.769499][T13354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.933458][T13618] netlink: 'syz.1.2082': attribute type 7 has an invalid length. [ 280.943479][ T5876] Bluetooth: hci5: command tx timeout [ 281.181477][T13624] vxcan1 speed is unknown, defaulting to 1000 [ 281.705579][T13354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.166445][T13354] veth0_vlan: entered promiscuous mode [ 282.179938][T13354] veth1_vlan: entered promiscuous mode [ 282.241909][T13354] veth0_macvtap: entered promiscuous mode [ 282.254497][T13354] veth1_macvtap: entered promiscuous mode [ 282.285085][T13354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.306566][T13354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.341931][ T9778] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.354988][ T9778] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.371748][ T9778] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.382094][ T9778] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.524398][ T9783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.533146][ T9783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.562152][ T9783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.570278][ T9783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.007430][ T5876] Bluetooth: hci5: command tx timeout [ 313.954286][T13661] __nla_validate_parse: 1 callbacks suppressed [ 313.954309][T13661] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2088'. [ 314.033377][T13666] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2092'. [ 314.545909][T13703] netlink: 'syz.6.2102': attribute type 30 has an invalid length. [ 314.736510][T13716] tipc: Enabled bearer , priority 0 [ 314.751024][T13716] syzkaller0: entered promiscuous mode [ 314.756629][T13716] syzkaller0: entered allmulticast mode [ 314.833957][T13708] tipc: Enabling of bearer rejected, already enabled [ 314.906310][T13708] tipc: Resetting bearer [ 314.953632][T13708] tipc: Disabling bearer [ 315.023122][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2108'. [ 315.193913][T13737] netlink: 'syz.5.2110': attribute type 6 has an invalid length. [ 315.206061][T13738] netlink: 'syz.3.2111': attribute type 1 has an invalid length. [ 315.232575][T13738] netlink: 'syz.3.2111': attribute type 4 has an invalid length. [ 315.241361][T13738] netlink: 9422 bytes leftover after parsing attributes in process `syz.3.2111'. [ 315.242399][T13742] netlink: 'syz.6.2113': attribute type 3 has an invalid length. [ 315.317237][T13741] vlan3: entered allmulticast mode [ 315.332652][T13741] bond0: entered allmulticast mode [ 315.374957][T13749] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2115'. [ 315.392426][T13745] ip6erspan0: entered promiscuous mode [ 315.412263][T13749] netlink: 1956 bytes leftover after parsing attributes in process `syz.5.2115'. [ 315.714609][T13765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2121'. [ 315.922955][T13765] tipc: Enabling of bearer rejected, failed to enable media [ 316.311573][T13781] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 316.428138][T13785] nbd2: detected capacity change from 0 to 127 [ 316.455223][ T5876] block nbd2: Receive control failed (result -32) [ 316.475146][T13798] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2131'. [ 316.488177][T13758] block nbd2: Dead connection, failed to find a fallback [ 316.506265][T13758] block nbd2: shutting down sockets [ 316.526524][T13758] blk_print_req_error: 138 callbacks suppressed [ 316.526544][T13758] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.545342][T13758] buffer_io_error: 138 callbacks suppressed [ 316.545361][T13758] Buffer I/O error on dev nbd2, logical block 0, async page read [ 316.558249][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'. [ 316.582047][T13758] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.601867][T13758] Buffer I/O error on dev nbd2, logical block 1, async page read [ 316.614292][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2130'. [ 316.641100][T13758] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.655256][T13801] netlink: 'syz.2.2130': attribute type 14 has an invalid length. [ 316.666279][T13758] Buffer I/O error on dev nbd2, logical block 2, async page read [ 316.676182][T13801] netlink: 'syz.2.2130': attribute type 13 has an invalid length. [ 316.692315][T13758] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.760465][T13758] Buffer I/O error on dev nbd2, logical block 3, async page read [ 316.772771][T13758] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.802341][T13758] Buffer I/O error on dev nbd2, logical block 0, async page read [ 316.823436][T13758] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.857658][T13758] Buffer I/O error on dev nbd2, logical block 1, async page read [ 316.886112][T13758] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.911897][T13758] Buffer I/O error on dev nbd2, logical block 2, async page read [ 316.943617][T13758] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.974345][T13758] Buffer I/O error on dev nbd2, logical block 3, async page read [ 317.004946][T13758] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 317.027719][T13758] Buffer I/O error on dev nbd2, logical block 0, async page read [ 317.036002][T13758] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 317.066053][T13758] Buffer I/O error on dev nbd2, logical block 1, async page read [ 317.094098][T13758] ldm_validate_partition_table(): Disk read failed. [ 317.120782][T13758] Dev nbd2: unable to read RDB block 0 [ 317.140624][T13758] nbd2: unable to read partition table [ 317.180335][T13758] ldm_validate_partition_table(): Disk read failed. [ 317.213317][T13758] Dev nbd2: unable to read RDB block 0 [ 317.262199][T13758] nbd2: unable to read partition table [ 317.416054][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.859122][T13856] dvmrp1: entered allmulticast mode [ 318.400944][T13884] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvy:{y܌w}z [ 319.264428][T13924] netlink: 'syz.6.2158': attribute type 1 has an invalid length. [ 319.307835][T13924] netlink: 'syz.6.2158': attribute type 1 has an invalid length. [ 319.852560][T13960] syzkaller1: entered promiscuous mode [ 319.876359][T13960] syzkaller1: entered allmulticast mode [ 320.015288][T13956] vxcan1 speed is unknown, defaulting to 1000 [ 320.196359][T13976] __nla_validate_parse: 2 callbacks suppressed [ 320.196379][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2174'. [ 320.253190][T13976] dvmrp0: entered allmulticast mode [ 320.481150][T13986] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2176'. [ 320.502770][T13986] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2176'. [ 320.524801][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2176'. [ 320.543703][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2176'. [ 320.618838][T13991] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 320.646776][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2176'. [ 320.657768][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2176'. [ 320.711958][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2178'. [ 320.788850][T13961] vxcan1 speed is unknown, defaulting to 1000 [ 320.848573][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2176'. [ 320.860539][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2176'. [ 321.284359][T14010] netlink: 'syz.3.2183': attribute type 21 has an invalid length. [ 321.359934][T14013] netlink: 'syz.2.2185': attribute type 14 has an invalid length. [ 321.378899][T14013] netlink: 'syz.2.2185': attribute type 14 has an invalid length. [ 321.439617][T14014] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 321.449764][T14014] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (149) [ 321.512598][T14017] netlink: 'syz.3.2186': attribute type 10 has an invalid length. [ 321.542808][T14017] veth0_macvtap: left promiscuous mode [ 321.572314][T14020] netlink: 'syz.2.2187': attribute type 1 has an invalid length. [ 321.582232][T14020] netlink: 'syz.2.2187': attribute type 1 has an invalid length. [ 321.604567][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059222400: rx timeout, send abort [ 321.613783][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888059222400: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 321.614117][T14020] netlink: 'syz.2.2187': attribute type 1 has an invalid length. [ 321.655531][T14020] netlink: 'syz.2.2187': attribute type 2 has an invalid length. [ 322.171693][ T5919] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 0/1 [ 322.237769][ T5919] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 322.524326][T14051] IPVS: set_ctl: invalid protocol: 43 172.30.0.3:20000 [ 322.586285][T14051] ip6_vti0: entered promiscuous mode [ 322.591947][T14051] ip6_vti0: entered allmulticast mode [ 322.718268][T14046] vxcan1 speed is unknown, defaulting to 1000 [ 323.598066][T14090] netlink: 'syz.6.2205': attribute type 15 has an invalid length. [ 323.622126][ T9779] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.622438][T14090] netlink: 'syz.6.2205': attribute type 15 has an invalid length. [ 323.640459][ T9785] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.726094][ T9785] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.756522][ T9785] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.668485][T14129] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 325.185519][T14162] sctp: [Deprecated]: syz.5.2229 (pid 14162) Use of int in maxseg socket option. [ 325.185519][T14162] Use struct sctp_assoc_value instead [ 325.216282][T14162] sctp: [Deprecated]: syz.5.2229 (pid 14162) Use of int in maxseg socket option. [ 325.216282][T14162] Use struct sctp_assoc_value instead [ 325.240055][T14162] sctp: [Deprecated]: syz.5.2229 (pid 14162) Use of int in maxseg socket option. [ 325.240055][T14162] Use struct sctp_assoc_value instead [ 325.247718][ T5876] Bluetooth: hci5: command tx timeout [ 325.255271][T14162] sctp: [Deprecated]: syz.5.2229 (pid 14162) Use of int in maxseg socket option. [ 325.255271][T14162] Use struct sctp_assoc_value instead [ 325.291485][T14162] sctp: [Deprecated]: syz.5.2229 (pid 14162) Use of int in maxseg socket option. [ 325.291485][T14162] Use struct sctp_assoc_value instead [ 325.309099][T14162] sctp: [Deprecated]: syz.5.2229 (pid 14162) Use of int in maxseg socket option. [ 325.309099][T14162] Use struct sctp_assoc_value instead [ 325.333954][T14162] sctp: [Deprecated]: syz.5.2229 (pid 14162) Use of int in maxseg socket option. [ 325.333954][T14162] Use struct sctp_assoc_value instead [ 325.360239][T14162] sctp: [Deprecated]: syz.5.2229 (pid 14162) Use of int in maxseg socket option. [ 325.360239][T14162] Use struct sctp_assoc_value instead [ 325.394810][T14162] sctp: [Deprecated]: syz.5.2229 (pid 14162) Use of int in maxseg socket option. [ 325.394810][T14162] Use struct sctp_assoc_value instead [ 325.466378][T14162] sctp: [Deprecated]: syz.5.2229 (pid 14162) Use of int in maxseg socket option. [ 325.466378][T14162] Use struct sctp_assoc_value instead [ 325.599552][T14168] syzkaller0: entered promiscuous mode [ 325.605228][T14168] syzkaller0: entered allmulticast mode [ 326.102608][T14196] +: renamed from syzkaller0 [ 326.476985][T14228] __nla_validate_parse: 24 callbacks suppressed [ 326.494783][T14228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2245'. [ 326.539924][T14230] dvmrp0: entered allmulticast mode [ 326.572185][T14223] dvmrp0: left allmulticast mode [ 326.581611][T14223] dvmrp1: left allmulticast mode [ 326.677989][T14237] validate_nla: 1 callbacks suppressed [ 326.678010][T14237] netlink: 'syz.1.2247': attribute type 75 has an invalid length. [ 326.773436][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2248'. [ 326.874760][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2248'. [ 327.146434][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2251'. [ 327.153252][T14265] netlink: 'syz.6.2254': attribute type 32 has an invalid length. [ 327.182599][T14265] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2254'. [ 327.533446][T14276] pim6reg: entered allmulticast mode [ 327.566504][T14282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.573886][T14282] IPv6: NLM_F_CREATE should be set when creating new route [ 327.611032][T14276] pim6reg: left allmulticast mode [ 327.636562][T14284] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2258'. [ 327.685162][T14284] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2258'. [ 328.079565][T14304] ip6gre1: entered allmulticast mode [ 328.334631][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2266'. [ 328.402973][T14316] sctp: [Deprecated]: syz.6.2265 (pid 14316) Use of int in max_burst socket option deprecated. [ 328.402973][T14316] Use struct sctp_assoc_value instead [ 328.450878][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2266'. [ 328.521624][T14333] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2269'. [ 328.925743][T14345] IPVS: Scheduler module ip_vs_sip not found [ 328.952270][T14333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.966571][T14333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.981304][T14333] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 328.991778][T14333] bond0 (unregistering): Released all slaves [ 329.111146][T14351] netlink: 'syz.1.2275': attribute type 32 has an invalid length. [ 329.324477][T14360] netlink: 'syz.2.2278': attribute type 10 has an invalid length. [ 329.342317][T14362] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 329.406435][T14360] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 330.584146][T14417] vxcan1 speed is unknown, defaulting to 1000 [ 330.706965][T14425] netlink: 'syz.1.2300': attribute type 1 has an invalid length. [ 330.794472][T14425] netlink: 'syz.1.2300': attribute type 1 has an invalid length. [ 330.825933][T14425] netlink: 'syz.1.2300': attribute type 2 has an invalid length. [ 331.361325][T14455] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.872431][T14472] __nla_validate_parse: 8 callbacks suppressed [ 331.872451][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2315'. [ 332.153758][T14482] block nbd1: NBD_DISCONNECT [ 332.159031][T14482] block nbd1: Send disconnect failed -32 [ 332.460844][T14495] vxcan1: tx drop: invalid da for name 0x0000000000000014 [ 332.476810][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2323'. [ 332.584722][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2323'. [ 332.616807][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2323'. [ 332.689046][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2323'. [ 333.053181][T14527] openvswitch: netlink: IPv6 tunnel dst address is zero [ 333.134077][T14527] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2328'. [ 333.228752][T14530] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 333.298015][T14532] netlink: 'syz.5.2331': attribute type 1 has an invalid length. [ 333.329882][T14538] netlink: 'syz.6.2330': attribute type 1 has an invalid length. [ 333.337836][T14538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.468397][T14538] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2330'. [ 333.560298][T14549] pim6reg1: entered promiscuous mode [ 333.606859][T14549] pim6reg1: entered allmulticast mode [ 333.630489][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2335'. [ 334.172799][T14570] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.2343'. [ 334.197935][T14575] netlink: 'syz.6.2344': attribute type 32 has an invalid length. [ 334.245925][T14575] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2344'. [ 334.687575][T14600] ipvlan0: entered allmulticast mode [ 334.709189][T14600] bond0: entered allmulticast mode [ 334.737545][T14600] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 334.745336][T14600] bond6: entered allmulticast mode [ 334.905811][T14609] veth0: entered promiscuous mode [ 335.711579][ T30] audit: type=1107 audit(1755227236.628:3): pid=14646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='VW_5*hsbg#ak1QՍjr_ {1`1GYd94'2z18$ u1$YOv3B=*d#c8,FXF^P}.Y`}%:>U4"3$/ 1/G^*P`G)' [ 335.755349][T14654] netlink: 'syz.3.2367': attribute type 32 has an invalid length. [ 336.108098][T14677] netlink: 'syz.2.2372': attribute type 29 has an invalid length. [ 336.152202][T14681] netlink: 'syz.2.2372': attribute type 29 has an invalid length. [ 336.393552][T14685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.984656][T14735] netlink: 'syz.2.2386': attribute type 11 has an invalid length. [ 336.993141][T14735] __nla_validate_parse: 7 callbacks suppressed [ 336.993160][T14735] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2386'. [ 337.182733][T14735] C: renamed from team_slave_0 [ 337.191353][T14735] netlink: 'syz.2.2386': attribute type 1 has an invalid length. [ 337.199782][T14735] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 337.432464][T14749] netlink: 'syz.6.2390': attribute type 32 has an invalid length. [ 337.470625][T14749] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2390'. [ 338.003185][T14777] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2398'. [ 338.206707][T14788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2402'. [ 338.429722][T14793] tipc: Enabled bearer , priority 0 [ 338.445933][T14793] syzkaller0: entered promiscuous mode [ 338.454850][T14800] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 338.467450][T14793] syzkaller0: entered allmulticast mode [ 338.550044][T14800] 8021q: adding VLAN 0 to HW filter on device bond7 [ 338.614739][T14793] tipc: Resetting bearer [ 338.622252][T14800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2405'. [ 338.694878][T14790] tipc: Resetting bearer [ 338.788444][T14816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2409'. [ 338.805722][T14790] tipc: Disabling bearer [ 339.037981][T14829] netlink: 'syz.3.2412': attribute type 4 has an invalid length. [ 339.046735][T14830] netlink: 'syz.3.2412': attribute type 4 has an invalid length. [ 339.263021][T14835] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2413'. [ 339.735740][T14862] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2420'. [ 339.777714][T14862] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2420'. [ 340.042648][T14885] syzkaller0: refused to change device tx_queue_len [ 340.103272][T14893] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2428'. [ 340.672214][T14917] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 340.682426][T14917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.810137][T14916] veth1: entered allmulticast mode [ 341.326224][T14952] sctp: [Deprecated]: syz.1.2445 (pid 14952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.326224][T14952] Use struct sctp_sack_info instead [ 341.332913][T14951] erspan0: entered promiscuous mode [ 341.372041][T14951] gretap0: entered promiscuous mode [ 341.404622][T14951] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 341.417908][T14951] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 341.724859][T14970] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 342.014084][T14994] ieee802154 phy0 wpan0: encryption failed: -90 [ 342.034221][T14992] netlink: 'syz.5.2457': attribute type 1 has an invalid length. [ 342.079803][T14996] veth0_virt_wifi: renamed from vlan0 (while UP) [ 342.106452][T14996] veth0_vlan: left promiscuous mode [ 342.143060][T14998] __nla_validate_parse: 12 callbacks suppressed [ 342.143083][T14998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2459'. [ 342.270950][T15001] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2459'. [ 342.559970][T15015] 8021q: adding VLAN 0 to HW filter on device bond13 [ 342.570732][T15015] team0: Failed to send port change of device bond13 via netlink (err -105) [ 342.580430][T15015] team0: Failed to send options change via netlink (err -105) [ 342.588251][T15015] team0: Port device bond13 added [ 342.613407][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2466'. [ 342.681544][T14983] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 342.699463][T14983] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 342.756068][T14983] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 342.778263][T14983] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 342.803597][T14983] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.815677][T14983] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 342.833720][T14983] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 342.835854][T15031] netlink: 'syz.1.2470': attribute type 7 has an invalid length. [ 342.844457][T14983] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 343.077744][T15033] bond9: entered allmulticast mode [ 343.083658][T15033] 8021q: adding VLAN 0 to HW filter on device bond9 [ 343.091958][T15033] bridge0: port 1(bond9) entered blocking state [ 343.102745][T15033] bridge0: port 1(bond9) entered disabled state [ 343.108767][T15042] netlink: 'syz.5.2471': attribute type 13 has an invalid length. [ 343.113278][T15033] bond9: entered promiscuous mode [ 343.201753][T14983] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 343.211522][T14983] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 343.324682][T15052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2476'. [ 343.350361][T14983] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 343.365332][T14983] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 343.388818][T15054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2478'. [ 343.402801][T14501] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 343.414732][T14501] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 343.423160][T14501] CPU: 1 UID: 0 PID: 14501 Comm: kbnepd bnep0 Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 343.435056][T14501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.445115][T14501] RIP: 0010:klist_del+0x49/0x110 [ 343.450083][T14501] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 d9 2f b4 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 bb 2f b4 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 343.469784][T14501] RSP: 0018:ffffc90003b5f768 EFLAGS: 00010202 [ 343.475853][T14501] RAX: 000000000000000b RBX: ffff8880591b4460 RCX: ffff8880448b1e00 [ 343.483825][T14501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 343.491886][T14501] RBP: ffffc90003b5f890 R08: ffff888078ff8e13 R09: 1ffff1100f1ff1c2 [ 343.499945][T14501] R10: dffffc0000000000 R11: ffffed100f1ff1c3 R12: dffffc0000000000 [ 343.508089][T14501] R13: 1ffff1100b23688c R14: 0000000000000000 R15: ffff888075122750 [ 343.516061][T14501] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 343.524991][T14501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.531586][T14501] CR2: 000000110c2b4682 CR3: 000000007db32000 CR4: 00000000003526f0 [ 343.539669][T14501] Call Trace: [ 343.542949][T14501] [ 343.545882][T14501] device_del+0x280/0x8e0 [ 343.550265][T14501] ? _raw_spin_unlock_irq+0x2e/0x50 [ 343.555471][T14501] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 343.561636][T14501] ? __pfx_device_del+0x10/0x10 [ 343.566496][T14501] ? netdev_unregister_kobject+0x344/0x450 [ 343.572304][T14501] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 343.578730][T14501] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 343.585495][T14501] ? rtnl_net_dev_lock+0x257/0x2f0 [ 343.590624][T14501] unregister_netdevice_queue+0x33c/0x380 [ 343.596345][T14501] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 343.602597][T14501] ? rtnl_net_dev_lock+0x36/0x2f0 [ 343.607651][T14501] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 343.612769][T14501] unregister_netdev+0x1f/0x60 [ 343.617534][T14501] bnep_session+0x294d/0x2b40 [ 343.622588][T14501] ? rcu_is_watching+0x15/0xb0 [ 343.627357][T14501] ? trace_sched_exit_tp+0x36/0x110 [ 343.632567][T14501] ? __lock_acquire+0xab9/0xd20 [ 343.637438][T14501] ? __pfx_bnep_session+0x10/0x10 [ 343.642565][T14501] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 343.648464][T14501] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 343.654969][T14501] ? __pfx_woken_wake_function+0x10/0x10 [ 343.660608][T14501] ? __kthread_parkme+0x7b/0x200 [ 343.665547][T14501] ? __kthread_parkme+0x1a1/0x200 [ 343.670572][T14501] kthread+0x70e/0x8a0 [ 343.674644][T14501] ? __pfx_bnep_session+0x10/0x10 [ 343.679700][T14501] ? __pfx_kthread+0x10/0x10 [ 343.684295][T14501] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.689497][T14501] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.694715][T14501] ? __pfx_kthread+0x10/0x10 [ 343.699744][T14501] ret_from_fork+0x3fc/0x770 [ 343.704426][T14501] ? __pfx_ret_from_fork+0x10/0x10 [ 343.709540][T14501] ? __switch_to_asm+0x39/0x70 [ 343.714307][T14501] ? __switch_to_asm+0x33/0x70 [ 343.719533][T14501] ? __pfx_kthread+0x10/0x10 [ 343.724125][T14501] ret_from_fork_asm+0x1a/0x30 [ 343.728904][T14501] [ 343.731939][T14501] Modules linked in: [ 343.737291][T14501] ---[ end trace 0000000000000000 ]--- [ 343.744177][T14501] RIP: 0010:klist_del+0x49/0x110 [ 343.750359][T14501] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 d9 2f b4 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 bb 2f b4 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 343.762557][T15057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.770264][T14501] RSP: 0018:ffffc90003b5f768 EFLAGS: 00010202 [ 343.785621][T14501] RAX: 000000000000000b RBX: ffff8880591b4460 RCX: ffff8880448b1e00 [ 343.794057][T14501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 343.802376][T14501] RBP: ffffc90003b5f890 R08: ffff888078ff8e13 R09: 1ffff1100f1ff1c2 [ 343.810572][T14501] R10: dffffc0000000000 R11: ffffed100f1ff1c3 R12: dffffc0000000000 [ 343.818658][T14501] R13: 1ffff1100b23688c R14: 0000000000000000 R15: ffff888075122750 [ 343.826930][T14501] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 343.836724][T14501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.843652][T14501] CR2: 00005555900d15c8 CR3: 000000006a5b4000 CR4: 00000000003526f0 [ 343.851864][T14501] Kernel panic - not syncing: Fatal exception [ 343.858301][T14501] Kernel Offset: disabled [ 343.862633][T14501] Rebooting in 86400 seconds..