last executing test programs: 5m36.598835368s ago: executing program 2 (id=2999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x10141) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 5m35.935973484s ago: executing program 2 (id=3003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}]}, 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000002c00070102000000ffdbdf25037c000008000180040000e1000600000000000000000000000000000000000076df87d6124d430f2ed8654f29d8d60eb5f1667ed9a1b98cf2d7ebd33218d00c887822d787ed64dfb6"], 0x30}, 0x1, 0x0, 0x0, 0x4000815}, 0xc050) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x33}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040000}, 0x4000000) 5m35.424125264s ago: executing program 2 (id=3006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @void}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) (async) write$tun(r0, &(0x7f0000000040)=ANY=[], 0xfdef) (async) r5 = socket(0x2000000015, 0x80005, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x7) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0xfc30) (async, rerun: 32) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10, 0x80800) close(r6) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) (async) setsockopt$inet6_mreq(r7, 0x29, 0x8, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) (async) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000000000000aaaaaabb86dd600000000000000000bbfe8000000000000000e73800000000aa00004e22ef24fc9a24aa78ed5f9b345a60aa857e7df51474dca762342dca4dada2a0a0d9223544aa6c817bba6e5a5a9299dac3fefc090a1b532072a07771fdcd8f6c9a8d513285a3e8f8fbdb5817b98e5cb62c29e01abced6d15", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @device_a, @from_mac=@device_b, {0x5, 0xd}, @value=@ver_80211n={0x0, 0x4, 0x3, 0x1}}, @delba={0x3, 0x2, {{0x0, 0x0, 0x2}, 0x1a, {0xbd, 0x6, @broadcast}}}}, 0x2a) 5m34.481532968s ago: executing program 2 (id=3010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000001000)={0x1a8, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x46, 0x1c}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xb, 0x5, 0x4, 0xdcd, 0x6, 0x5, 0x6, 0x3, 0x3, 0x7, 0x9, 0xc, 0x5, 0x40, 0x3, 0x400]}, @NL80211_ATTR_IE={0x136, 0x2a, [@preq={0x82, 0x7d, {{}, 0xa, 0x3, 0x84a5, @device_b, 0x98, @void, 0x3, 0x7ff, 0x9, [{{0x0, 0x0, 0x1}, @device_b, 0x96}, {{0x1, 0x0, 0x1}, @device_a, 0x1}, {{0x1}, @device_a, 0xaa}, {{0x0, 0x0, 0x1}, @device_a, 0x40000000}, {{0x1, 0x0, 0x1}, @broadcast, 0x3}, {{0x1}, @broadcast, 0x3d}, {{}, @device_b, 0x2}, {{}, @device_a, 0x6f86}, {{0x1, 0x0, 0x1}, @device_a, 0x1ba82e42}]}}, @perr={0x84, 0x95, {0x3, 0x9, [{{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0x16}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x2}, {{}, @broadcast, 0xffffffff, @void, 0x11}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x3f}, {{}, @device_a, 0x8, @void, 0xc}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0x41}, {{0x0, 0x1}, @device_b, 0x2, @value=@broadcast, 0x1f}, {{}, @broadcast, 0x3, @void, 0x3}, {{}, @device_b, 0x5}]}}, @ht={0x2d, 0x1a, {0x8, 0x3, 0x3, 0x0, {0x1cc, 0x1, 0x0, 0x5, 0x0, 0x0, 0x1, 0x2}, 0x0, 0x7, 0x7}}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x200, {0x78db, 0x3, 0x4, 0x5}}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10, {0x7f, 0x0, 0xfff}}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4010400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3fb, 0x10, 0x70bd27, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x200, 0x70bd2d, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffbd}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) getsockopt$inet_udp_int(r4, 0x11, 0x67, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)='syzkaller\x00', 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) 5m33.448836698s ago: executing program 2 (id=3016): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001600)={{r0, &(0x7f0000000080)='TAPC\x01', 0x20400, &(0x7f00000000c0)={@align=0x8, {0x4, 0xb, 0x4}}, 0x100, &(0x7f0000000100), &(0x7f0000000140)=0x7fffffff}, 0x4, &(0x7f0000001580)=[{0x1, 0x2, &(0x7f0000000180)='\b', &(0x7f00000008c0)="95f18d8d28e7eb3a841df3e7973804cd70597abfb99e41d1f457d7944eccf69301da906d7c7172861ef5c4c2d5c060fc477faf56942a48b8c39d1e9da261039d940dd6078d05594957e7bc9aaf139f78bcf2cbc137f7fb10ed89a5cf497586bcd770d54224aae61827b2911312638fae82e6f2dc7d05aa812ea09e5881b27058baa0e26fd54cf74175098704e3fe1a4e9c19809a387d2ba5f8ace6503900"/167, 0xa7}, {0x1, 0x8, &(0x7f0000000280)='!{N{/&}^].\x00', &(0x7f0000001680)="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", 0x1088, 0x10}, {0x3, 0x8, &(0x7f00000013c0)='\'@@\\)*.#)!%\\@*\x00', &(0x7f0000001400)="de7655335409bda38e0083ac29e8ee0c4e3eebf209199a0ba54889ee6ab63235bff0027089c4adca301031a72f5ef9d59734a7211ad300a117dd9c47b21d31115267e19951455af5462533e3bce77440caefde166b285323da0036e5d8cc6175d82bb18f7aa821efb4f39c9d2bdce1b9da46cc9a2f52bff3a2f16f65aac7a779913e2b45a0fd3ec9ccbe8a25aa0d7347c0fe33d3f487efe155ac6acfab1cf80716db6014a0442f94b1f65cf25967e77c31a827a081d558cbef1588", 0xbb, 0x18}, {0x3, 0xa, &(0x7f00000014c0)='TIPC\x00', &(0x7f0000001500)="7863762294b76e36cdcd4a2a74fbc2fbf59eea01540efdecf0cec7a9ecccea75b68a41801941b4863c04d7183212fdef1788cb7fd21daa2b7c4817fc6888d34f8e30cc048bb5d546d15ceda7ba464fbf3447b91c30b96838ac", 0x59, 0x20}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000050000000200000007000002bd000000", @ANYRES32=0x1, @ANYBLOB="02000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000008c0), 0x75, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0xfffffcf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0xc8}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="060000000400000008000000080000000000000010b56ece35e3d102562d9b103b5a2f0700c170200e57a7288b9784a295de82ce2a5d030cfeea7f8c7c58a8138b118aabb62ed51b8a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000375055f4dc7ada37000000000000f7ffffffffffffff0000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r6, @ANYBLOB="000700bdf000fcdbdf251300000008cffe5134a8000300e5674531a0460ea4c4efdda581845a37ff5aac57097b4bcc9e340f5000ffde472f22f5fc89ab39f3ca20e1039f4f84e5cef7441c234cbf02c0045709c19ce6e09c4b1a16b87e28fb91a224a680edec91c8199797ca98ddda165faf3d192163e1b4194a582a4ac4e32c0cb5ba8194bd6723f1a415d7a3c41b7c10954e6850", @ANYRES32=r7, @ANYBLOB="0c00990001000000010000000600ab004000000006001000150700000600ab00090000002400810005000100080000000500010081000000050001008100000005000200330000001000bd000400060001006f0b020068081d00ac00e644271a96b8766cb57d9ad6990666f8721b24a121623cf81400000014001180040002000400060004000200040002000e0013000186868586e0c8b6e006000006003600090000000800a40002000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x24040005) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r11, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) 5m32.119475222s ago: executing program 2 (id=3024): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x2000001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@bloom_filter={0x1e, 0x5, 0x9, 0x5, 0x80, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x47c2, 0xe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x9, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000100)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41100, 0x78, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000280)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001340)=[r5], &(0x7f0000001380)=[{0x2, 0x1, 0x7, 0x6}, {0x5, 0x3, 0x3, 0x9}, {0x4, 0x1, 0x9, 0x3}, {0x0, 0x4, 0xe, 0x3}, {0x0, 0x4, 0x1, 0xd}, {0x2, 0x2, 0xd}], 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r6 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x40106183, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001500)=@o_path={&(0x7f00000014c0)='./file0\x00', r5, 0x4000, r6}, 0x18) 5m16.814566103s ago: executing program 32 (id=3024): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x2000001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@bloom_filter={0x1e, 0x5, 0x9, 0x5, 0x80, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x47c2, 0xe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x9, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000100)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41100, 0x78, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000280)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001340)=[r5], &(0x7f0000001380)=[{0x2, 0x1, 0x7, 0x6}, {0x5, 0x3, 0x3, 0x9}, {0x4, 0x1, 0x9, 0x3}, {0x0, 0x4, 0xe, 0x3}, {0x0, 0x4, 0x1, 0xd}, {0x2, 0x2, 0xd}], 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r6 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x40106183, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001500)=@o_path={&(0x7f00000014c0)='./file0\x00', r5, 0x4000, r6}, 0x18) 4.157122541s ago: executing program 1 (id=4986): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e4af7f7d5a13e9b8bf39b1eb900020075"], 0x8) r1 = socket(0x1, 0x5, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r3, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000019700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, r5, 0x100, 0x70bd29, 0x25dfdc01, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}}, 0x40000) ioctl$sock_SIOCETHTOOL(r1, 0x89f7, &(0x7f00000010c0)={'bond0\x00', 0x0}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x48818}, 0x4000000) sendmmsg$inet(r7, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="7eaca9bcca81f2c0f9522dee17d2b24842621144254f80df0dad1f874851c702a6c7101eae46ea1083156feea86eb472c5c118e6944494bf52448bbab48a004aa33ac1a7f0ac376d699c06ef3223911bcdc29017073c5bc2efc4fc6dd20a", 0x6b}, {&(0x7f0000000800)="5e17d2ab8495311f152b4160fa4b28db27b16e05fca27897f7521a4d23ff7e63b74ce7835c776b320aef59180885d00b48b595b351fbe081e54139e4368e5a98de218cce026446d4cfeaec6a867b3c96a8eb8c05904673d031f8f76b7bddc5792f68cb9e000ff10c4ef46621ec67d84655186042b604c60d3032a3acbc165bd13cb29ce889513bd0755a716a8a70565d1c6fd314f0d7ee4051097a59aa2f953f6aa433732af1bdf88088cf70a54105701430d58c965832ef3cbddde612425fbe356713194ed5a5c7c680", 0xca}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0x6ec458c1ffb7f993) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$alg(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r8 = socket(0x15, 0x5, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@getspdinfo={0x14, 0x25, 0x631, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x80) getsockopt(r8, 0x200000000114, 0x271e, &(0x7f0000019740)=""/102398, &(0x7f0000000040)=0x18ffe) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r10, 0x29, 0x4e, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x194}}, 0x0) 4.068273612s ago: executing program 1 (id=4988): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x3, 0x58, [0x3e3, 0x9, 0xfa0, 0x6, 0x3, 0x9], 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000180)=""/88}, &(0x7f0000000280)=0x78) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000006006f4d7a20b9b66913b9b532bcd8bebcc9c217620fde2678f44ab60a069d7d4e7b0c169f7f5839d43f664630167506ba0080659b4fa92c0bddda1432232d04d9a1e52896c4666c73a0a59af27b7e5ab0fb7858e9196f89bb23b339f3a26deccbac2c4cc33ea78ed68533e608d47c7c4a98b7da31fe273a07fdc68eba929316e27a33cdd378d7afe833e233e39c684f3dbc590e1af1700dbe9fcfc1d493051ca94d8a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x89}}, {}, [], {{0x4, 0x1, 0xb, 0x8}, {0x4, 0x0, 0xa, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000002c0)={@remote, @remote}, 0x8) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x1010, r3, 0xd1963000) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x4}, 0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000180)={'veth0_to_batadv\x00', {0x2, 0x0, @multicast2=0xac14143c}}) socket$nl_xfrm(0x10, 0x3, 0x6) 2.985943502s ago: executing program 5 (id=5001): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x81, 0x7f7, 0x30, @empty, @loopback, 0x10, 0x7, 0x1000200, 0x9}}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}, 0xf5ffffff}], 0x1, 0x0) 2.696443939s ago: executing program 3 (id=5004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x870bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x18, 0x38, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x66, 0x0, 0x1, [@typed={0x9, 0x7e, 0x0, 0x0, @binary="ac66d0741d"}]}]}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x9, 0x0, 0x80000000, 0x7fffffff, 0x2000000000}, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.161062639s ago: executing program 1 (id=5008): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001}}) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x3f8, 0x604, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040000}, 0x400c000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0xa5}, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x11}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r3], 0x7c}}, 0x0) 2.070798302s ago: executing program 0 (id=5010): socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x7, 0xffffffff, 0xc, 0x7c6, 0xfdb1, 0xc, 0x200000000000200, 0x4}, 0x0, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000040)={0x7, 0xffffffff, 0xc, 0x7c6, 0xfdb1, 0xc, 0x200000000000200, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.978874427s ago: executing program 5 (id=5011): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5c}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x400}, 0x10}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB='[\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0xa0}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x11, &(0x7f0000000280)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x76}}, @call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) shutdown(r8, 0x1) getsockopt$bt_hci(r8, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.873904783s ago: executing program 1 (id=5012): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x479c, 0x4) (async) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 64) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.753541645s ago: executing program 4 (id=5014): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r3 = socket$kcm(0x21, 0x2, 0xa) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0xffe0}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0) setsockopt$inet_mreqsrc(r4, 0x0, 0x0, &(0x7f0000000240)={@empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1d, 0x5, 0x470, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r8, 0x4010744d, &(0x7f0000000080)=0x1fffff) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0xf, r7}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05f9ffffff0000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000006240002800c00014000000000000000030800044000000011c5"], 0xf8}}, 0x0) 1.629455923s ago: executing program 5 (id=5015): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.50510598s ago: executing program 4 (id=5016): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xe]}]}, 0x98}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.381705554s ago: executing program 3 (id=5017): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) 1.3732046s ago: executing program 0 (id=5018): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='{.(%[-*\'\x00', 0x103100, &(0x7f0000000040)={@_ha_fsid={[0xaa2, 0x6]}, {0x2, 0x6, 0x6, 0x1ff}}, 0x0, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x8}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x7fffffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$tipc(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x1}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000200)="14c473a42153a89bf209ae27d8e16b45a0ebf5ee8c2c48ae616f360b910d7b4025e61fbdb3a8670f97f09635fe30a4e68f847a497bdc900e8a99506fff6dc0da1d18983c98ffd04874899a74f8f0962c8f249a628f07af488edbb55c0546b6e66609454b76191fc289261a6b2844b4f12c3c922efb1c42ea59f67027b17298237327a0312b01de46698da520ddff0bf4b2f86867b35fa59fdf60c61e916ca6de8b7d186af90a", 0xa6}, {&(0x7f00000002c0)="b664bfbae31706d664150261b042f785b89b98191e38319f4a490a13fbf7171f8b39e368fd2a2d41da0d221017a0a7369641c0d83784c3bcd811c42710da2af9f14f29bac4eeacc8092994c756399e4098a0f39a7056f5391d6e82fb92e4a3462910698d4263ae1a533a7039d29f9ca2eee0c50aa031b8bbc73e14c5fe5b73c33f940eaa5fe7f7ace461bc33dc9784f73820d5037f3b84eaa34a5f186d", 0x9d}], 0x2, &(0x7f00000003c0)="0a7aacc806c1c3092b1dcd24d047284343293fc7b4c9379b332518aeefb3b0f30730430bef9f4dc7501313bd3d78f518a6d810978776af8f4cfad5a7fce63531bb532a447f45c7be095f4ed9ffe5a0803f49525e9058f44c5b90cfe4fd61b1d7a45327aea0da6413715ed604f6556beaf74b2403293065f02e587e3f21bae4", 0x7f, 0x4008005}, 0x800) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000540), 0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000580)) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000600)="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", 0xfc}], 0x1, &(0x7f0000000740)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}], 0x30}, 0x24040801) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000800)={'sit0\x00', &(0x7f00000007c0)={@remote, @dev={0xac, 0x14, 0x14, 0x2b}, 0xe, 0x6}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000840)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000008c0)={r3, 0x5a5f}, 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000a00)={r1, &(0x7f0000000900)='\x00', 0xc0000, &(0x7f0000000940)={@align=0xffff, {0x101, 0x8000, 0x7, 0x4}}, 0x3, &(0x7f0000000980)={@_ha_fsid}, &(0x7f00000009c0)=0xf}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r4, 0x47092000) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000a80)={'broute\x00', 0x0, 0x0, 0x0, [0x16, 0xffffffffffffff00, 0x5, 0x8, 0x0, 0xffffffffffffffff], 0x2, &(0x7f0000000a40), 0x0, [{}, {}]}, 0x98) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000b40)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@o_path={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x4000, r4}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000dc0)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0xb, &(0x7f0000000c40)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xfc32}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x1c}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4fe055dc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x8}, @cb_func={0x18, 0xa}], &(0x7f0000000cc0)='GPL\x00', 0x2, 0x79, &(0x7f0000000d00)=""/121, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x36, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x0, 0x0, 0xffffff83, 0x9}, 0x10, r6, r4, 0x2, &(0x7f0000000e00)=[r0, 0x1], &(0x7f0000000e40)=[{0x0, 0x2, 0x10, 0x1}, {0x2, 0x5, 0x3, 0x2}], 0x10, 0xfffffff8}, 0x94) r7 = accept4$unix(r0, &(0x7f0000000f40), &(0x7f0000000fc0)=0x6e, 0x800) sendmmsg$sock(r7, &(0x7f0000003c40)=[{{&(0x7f0000001000)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001080)="9689ac42d65f5930942fb4fc176b0eba27d7faecf896eb790e18cbed399561a938eaad549ee98d58b0b6a7f14cfeb1e49daa318681cab05ad77c5f2336852b8e65cae0779904155998b9584123ccbdcb35e1c759cf3216bef44e604cdb3ff44e2a8dbe32db6038a1b2ce96752fdea8707f0f19edaccac90dd1e426ee61deab15c1640dcb2d91a683f0adea389a0a1f7d9e05ee1d06bb1a9f3eff6ff8065cf0737fd290aacdeaa8c1f0a9fa01c9cc100db393997b53b7d23a33d557ea77", 0xbd}, {&(0x7f0000001140)="1719a05ba781057769736c59c1dc60b99de787a0f582b751122c5dd10220a69f899409149e17e0db4454ba8b227da4ebcc92f9b4e7fed7383adc835fe2fee75456f7f1eb0fd2df951277f368aa0a24e5131f260f8711a0c30edf5b3dd7fcbec0b099d1aa4878f6a74064f8e4b283d064e47f6162669d04eab65eb24b9522e58444679d13b89b1e8748150351da57a7f9fe43d823dd8849865fc1b03297e74a9ca06be2655c1f874e37e2c2e9232326bab745c3ed7baa1eb96c0c548e9c132dcfda5aad3e1488d97e3e8fd1f5678b0f", 0xcf}, {&(0x7f0000001240)="3b5730d262c654fef238b1cfc84bbb7af152ff083ec24b1c1d16caf51fc51b63090b297ca9a5e7be792b3c915ca19fd7c34e3090ebec051648f803d3a9aab2fa320fcef2e2999e6640ecf8997d0f4cbd971ffc60d95f99b5c94d0c5e95360b21ac52e8affbe220bbaabb45a790bc279c1bcd5fb27389a95e66eec568c3085d18fcd0912417a2", 0x86}, {&(0x7f0000001300)="04c38cab4fe5a6806370c0822cb46252ee9308ce8c30958094ef7114858edef41959dc47d24e50b065a4bfb57af2cc6bbade557039e2695d1963aa5e587d4765ecf3c3153d82ab85ae8236b9ddb514bdc79da6a172739a58dafb4798956703d0fb7e85cd5ea5659a62d60903cf7013fda18c4df8ca7a0be12f09c4e2b1fb9db2087b931a7441e9fdd45b462bfb7fac3f16056f9bfd2c83d3c18415c63311ac68f855be444a52d995e56b611e5c737e34a8", 0xb1}], 0x4, &(0x7f0000001400)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)="15089ccb793d9171eb8c1abc738855b44450c0186f8532eda65f0048ddb35737da21fe74a352979b8115a00273e0234649376d4775e6281195581233540f39a7572139a91eacd04d58da48691797fec81364480598647bf7f057762b4eb8c6aac731d3546dec434071d070b010f618a9285ca9bb0dbf22f9c7bd105294c45b66520c4445a053f2efd8fa60e8837f4fe9b1dd07c70000dbf3b92e225f92c372d23c32181e9aca274b2bc7feee8d5f228d18b8190cdb5da5cc8bbc2fdfd7fe500b3b680ee82fe00c64fe16d3958c1c7c79fb8f", 0xd2}, {&(0x7f00000015c0)="8f8a1b8a68c80cd0bc38b3db375ff7d9", 0x10}, {&(0x7f0000001600)="dc4ca3226c35e726f2f04916f632033bc9d139c251aabf63d296068ddaa61ad94c357c1f77c5c9c1ed7812a7f4f6e73658aa0546f905e5f7531c140f49ff711ef2bda7f94bb15c01e9d5540d429534313ae8558cfa0c5d339307ce8d43d6c087ab4a215f3fb3a46fb279cd8c92cea7b26d148504afbe27bbf0", 0x79}, {&(0x7f0000001680)="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", 0x1000}], 0x4, &(0x7f00000026c0)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002700)="ea5aeb222bfa83414b24bd560c1ab60071fce60b7a091da4", 0x18}, {&(0x7f0000002740)="55c92a872d", 0x5}, {&(0x7f0000002780)="b8ea4a88efa85ff85f4b3bebe651acd803f6b23809ae8eda7378ec68e96c854955c2cb458c8dbc8dc5f2a4a486c66718489bd1c4c2fb6cd634d848e34b0a50bf9ad2b2ac5d0d49bf167f1bcc4ed2e2fcc8cbf9898389c8274d1c0dbcfc6312adeeebd01f0e59402b5e20946951f42b47f6f9502942d1fec0a10a61b09b782cf3f2fe503fbf836fcf", 0x88}, {&(0x7f0000002840)="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", 0xfb}, {&(0x7f0000002940)="9b0ae602421e16a14ef040dfc7731627283cb762bd3dd375393c0ebbc004dce273b977e4b5c6aa383825cc729b930d4ba50efd9048571f730bab7e9254e8dcf7444f4a4541a9df6f9ab2e8ac74ddf64db4b9fecac8558691e9a3ab6cc43b62489d5a22611675ce0664fb442be5f28d7badefd282a8967251ac9454670dffef3f0661b53acdc0518e9d28643798de939d0013221b9a20b38fbf5d3711e3a1fb1e0d9cb7906247204846496f985e1a8bcf85716e717c6f49f580", 0xb9}], 0x5, &(0x7f0000002a80)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}, {{&(0x7f0000002ac0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neon\x00'}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002b40)="bb6d2be4781b043059b8a24ce29691ab8dbc8858bc0ca5ee46c8c80116a119", 0x1f}, {&(0x7f0000002b80)="492a14afa841881d88eca2f48635f39ad4c4e8c4c02ef5c127671c87f4bb45047d4e027f56f05301b8e854fa4e4d28868a9542f48a8a44ba059e6ec3c09783e851f8ef30b6daf662b49609583426b2c6f22de00f5ff2bb904e19c434ed5091148ae759f4eac271", 0x67}, {&(0x7f0000002c00)="c0da716b1b4390c4495be4cca2777969570a431f3e7b18b0ea6aa7b6dc7bcc171f3ae0b41c1524adad7aa06dcc0ff80772d39c9f0bd818800428f5cf330e61a2a797f052027fcf2e4de0623e438bed18a2800f7859fdd23eb67b20ef86cce2dd88622f91cd6ddd46dd2aa4f05684e49ff1a830d411aaa22ede3ac5060fc33ea872bc343c6c2a5b44c3592af9f4ee874c0d387bb1ee323818dc1769adde9943eb7c37d1a73e6a28d1809ad12c6852a33b844760069bf00ef681e431934b460b7964b79c5b9160521125e7ab87dab599c58a572712773607ab54e08e7a4f4f", 0xde}, {&(0x7f0000002d00)="ba0d4c6d361098b8c4338b0d21396391b18f4035840a1267489d08d187db124a840e1c9907ce25f13ff72de187d5e9cf00b938df316bb90000bea20976edb3a665c604231a5d8b6a614f5c7c86b4043cecac7c482961cabbab0ae8c5eb8303b2f066f088e7d05ccf4f6d3779137dfc549043642ff9cc83e84baa2b94c91dd6bc4decd4b3bc466f98d9dc376455d347d8cd8d15845be88a35b0ac4d86c9d6903446103ed301eaa990937593c660", 0xad}], 0x4, &(0x7f0000002e00)=[@mark={{0x14, 0x1, 0x24, 0xa}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x30}}, {{&(0x7f0000002e40)=@isdn={0x22, 0x1, 0x40, 0xf9, 0x4}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002ec0)="43ef0c4d9cb14724735e38f04356fa9dcf3f519b4c73115fe805d658c8bc45ca2d2918043f7d027b5b1c02b4ce008fc3b7f9ced5431851340ec7b4e5b4b66124476005bca8950edc5818e783da0949f2d6277693c9f9eff79a3e3f54211755d1a448304a2e99702ae41d4ee2bf6ac7aeae8b8b025c0e155c7766fd49ed74134cbb213b45be301cbd5d71135f423a5741d91b9dc67914044738a040f70512ce2950ba12df6b14f13ed6c5fc5fa8", 0xad}, {&(0x7f0000002f80)="dfcd184da30d3374e1006c2b4fcc6d30da408fb8b2", 0x15}, {&(0x7f0000002fc0)="81b982a92ba8089605d61d795d7fd04864d0e61c17eb81efd18662a8a12803f873c129f64cea2e153cbb24b85006c020c7b8bca35c252807c1d6842e98d7dc6aec647d9d9e9e1017d8e8df62d2815139cca432499be585d8d89445615e8b1c831b1d4243832400082358220cf3c6ca0fb3d7cdf0e707186cdb20a6ad6e8604ce6ce06ef24fdc88e1bf198d6d0e4cd19224b81e8274e900cad708bbc1d9d57253ae369ad1b473297ab850cf0b00c85ffb810b2fc519c6151b8e3c05da527a7cc31684b36b80fd0dcb11efac4967f794ae6fecb148e44d4cbe8976236f4e54274ecb47bcdafed337c06948e7f36741fec03f8ffe", 0xf3}, {&(0x7f00000030c0)="79bf169d6f21c490c1d9daa8049046ac58d791", 0x13}, {&(0x7f0000003100)="3f6635a9df2e35cad38c72c4", 0xc}, {&(0x7f0000003140)="e364e0828239cac16e03e847513f3fbddcbc1f245789b72658f0196e1761e7e6b9816ddd7c6db38c705fa294c1e19d0de8836b1eb4387a7901f9862946c88535662ba811867fdde2054b858e156c4d280cc2b067ed5a0fea5d434b8058ee981d3cb4700d7353fd3620da384dce0083ec9bac501139ba3c112fbc898accd1cb662a1f567045f15ca861d96f87cf0a28a30835ea345b59858f638dfa3d56a4d1550f880243bb1784c0fec6a88acc145d1148f3a4ae8a8aca696722e121552c17", 0xbf}], 0x6, &(0x7f0000003280)=[@mark={{0x14, 0x1, 0x24, 0x5f634c64}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3b9}}], 0x48}}, {{&(0x7f0000003300)=@pptp={0x18, 0x2, {0x2, @broadcast}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000003380)="c2274aa2a0cc30d9ec3840d8f1f10559f913f9cd6e5a3c5c23931af28e78042acd4be0dfd638f86828bb2279c2c680d211980c511e29f0ad5efa1d8517ce19ae2f4de4793589c7b5e2bf7cdadfdc3dccd36e017156bf19ef", 0x58}, {&(0x7f0000003400)="ba23a5aa011d2e1ce6fe93e5fbf1765765f9faf0cd74609bcff6c934c5a9dbae830637477160bd1313506d437491d42c10a09345023f0fa484b1847388bafd9e37daafcecda163b5b02d39ab71903ce923a643475e485f644f890293516e50799bc912878e0260aec7de48d652", 0x6d}, {&(0x7f0000003480)="e575a806df1466ecbb0a80cff7721b6bf8bdb844abc3e06eba85baa1b008f8a5e4d9e57652f8172ba1c1e2c2db91f9f827dc4f511acf5d2cd9a593deecd2eeef0e538b835a7450644f7df346ad9c02bcf44472ef12240a03a516d652d10a927fcc3b72c550e956c2044e258c1fb7f402df54c099b8937be0f345856bef6e9d8a1b61a8e2926d46eb549bf91a888ebd67816b", 0x92}, {&(0x7f0000003540)="a465979d7d95264f983ecea384f7311dc65e3edbc96373687e2a4119d4fde2381eb39f59abb3e9591d3292d4dcf750b588c1a4faccd2da21f1ff88b9810036dac321acb16d34ef913cf2771839d336f71369e9eb1659e2bdf80f1acc29f1c9d573b4ad8c5c4bb3fb3fc86064f80c5d08e7f1f9cb0393b9e4c666f4c8054fe054ad15e9d857b6d0e0302d577c287942cf7794acd4e4", 0x95}], 0x4}}, {{&(0x7f0000003640)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @local, 0x5}}, 0x80, &(0x7f0000003700)=[{&(0x7f00000036c0)="a8ea72af0c19340d2789ae76987097f53826cd265b665311675121affbf54b26bf", 0x21}], 0x1, &(0x7f0000003740)=[@timestamping={{0x14, 0x1, 0x25, 0xe54}}], 0x18}}, {{&(0x7f0000003780)=@in6={0xa, 0x4e22, 0x6, @mcast2, 0x1000}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003800)="bab8e88b20ccd306c1cf955973707e81a99d3206f7baf149e2b2315c1b8921fe69a63e1513c1cb9c23a1a403df54cff4d02a05bd829c6047533ab7a9a3f5a67f036d3bda849387bde16ed96895becd0948c592037186244d31aaad9bbde3d553262f4fe87efb54d3334f7513c619be3e350f83a45591115cd6ed4b669b407ebec5fb05493846084ab9f376955c4b52206351999b5dca3e8bdecf64322cf747e4322d44da0e", 0xa5}, {&(0x7f00000038c0)="4edf1dfa928d119c5d8552c9d23d483b48b085489912f84cef1f3a0dcabf81a8183ad0e75713f848731344b8f667670a10a31f8adfa01116f2d50ba66a9ca6541f65b5c3d5cee0991c9f7216adb492f4d1d96cdded0e61e49bc176bb06e8c030c6c15a7e885c0176f61e07657e67796f097ec3dacc6282a38cac4349dc4a8cfbdc627e6ccfe0d90b542baa8d3b9fe183912580f8c4790c6370b01e4b43ee8bcee4", 0xa1}, {&(0x7f0000003980)="52868814c5eec1d6d49e1c157a49f0448d1e53716ee0620f", 0x18}, {&(0x7f00000039c0)="bd8b004e3292ee019bb2640b194bf263d3fe75684910a951ddf2d5682e573fea2e8f69c2285debf5077f6af5d11b1368fa4941acf89592251641100307cf4c5c7b7e55e79e0662ef5a4d1b185b33f04d0eb168ab46ec5b6385500a11ae1585398703a8147e55f71ae03ee8ea3da084a4470e0c03d5373868a65d5dec9b6fc747983768204804216f89aa9eaaef4b7bae9b4e73b3fc762acb029b5c6f1c0d7babc9df5061f748379dd257ca435fe99c09681a38716797bc6a28ffa4949fd5165cb196d6a41f401f73eaf4ad5b3e3e28714bccc652d7fa", 0xd6}, {&(0x7f0000003ac0)="dca9f69c449e77c2c892c33d3fd9b7a1ff8624281fa0c65e1b0fdb2fbf542b42ccad7ae2a2a7a5dde50fa263b50c9ffc0fa1e75ac989e1b96fbc5d6abbb4ec6a42f0791edb178f8774a278489e", 0x4d}], 0x5, &(0x7f0000003bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x16ae}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x48}}], 0x8, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000003e40)={r0, r4}, 0xc) write$tun(r4, &(0x7f0000003e80)={@void, @val={0x3, 0x80, 0xb, 0x80, 0xd9c9, 0x9}, @eth={@remote, @random="621dfd7b6b6e", @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x3, 0x1, 0x1}}, {@generic={0x15, "6c55b66183bf523665c0ff54c5dbe47c90b0818928a6da0902ed4ec0a450d79348"}}}}, 0x41) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000004140)={'ip_vti0\x00', &(0x7f0000004080)={'tunl0\x00', 0x0, 0x0, 0x40, 0x4, 0x7ff, {{0x1c, 0x4, 0x3, 0x4, 0x70, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp_addr={0x44, 0xc, 0xc1, 0x1, 0x4, [{@private=0xa010101, 0x8}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4c, 0xcb, 0x3, 0x2, [{@multicast1, 0x2}, {@remote, 0x3}, {@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x8a}, {@multicast1, 0x9}, {@loopback, 0x4}, {@rand_addr=0x64010102, 0x5}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x7f}]}]}}}}}) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000004240)=@generic={&(0x7f0000004200)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000042c0)={0x14, 0x3, &(0x7f0000003f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5dd2}}, &(0x7f0000003f40)='syzkaller\x00', 0x9, 0xea, &(0x7f0000003f80)=""/234, 0x40f00, 0x54, '\x00', r8, @fallback=0x6, r4, 0x8, &(0x7f0000004180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000041c0)={0x4, 0x4, 0xe47, 0x1}, 0x10, r6, r9, 0x4, 0x0, &(0x7f0000004280)=[{0x4, 0x5, 0xc, 0x9}, {0x0, 0x4, 0xb, 0xc}, {0x4, 0x2, 0x4, 0x3}, {0x5, 0x3, 0xc, 0x2}]}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000004380), 0x400000, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000043c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r10, 0xf50f, 0x0) 1.208998066s ago: executing program 5 (id=5019): socket$nl_audit(0x10, 0x3, 0x9) (async) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbff, {0x1, 0x1, 0x1, 0x2}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x408c4}, 0x44) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept(r0, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) (async) r2 = accept(r0, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) accept(r0, &(0x7f0000000280)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, &(0x7f0000000300)=0x80) (async) r5 = accept(r0, &(0x7f0000000280)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, &(0x7f0000000300)=0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xea92}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000050}, 0x40000) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000000780)=[{{&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)=""/157, 0x9d}, {&(0x7f0000000600)=""/100, 0x64}, {&(0x7f0000000680)=""/94, 0x5e}], 0x3, &(0x7f0000000740)=""/26, 0x1a}}], 0x1, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000800), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000840)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000840)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r9, &(0x7f0000000900)={&(0x7f00000007c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r10, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000004) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r5) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r5) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000009c0)={0x0, @broadcast, @initdev}, &(0x7f0000000a00)=0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'veth0_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'veth0_to_bridge\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000a80)={@broadcast, @initdev}, &(0x7f0000000ac0)=0xc) (async) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000a80)={@broadcast, @initdev, 0x0}, &(0x7f0000000ac0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000b00)={'gre0\x00', 0x0, 0x7800, 0x8, 0x7f, 0x9ab7, {{0x1d, 0x4, 0x3, 0x3, 0x74, 0x64, 0x0, 0x80, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x16}, {[@timestamp_addr={0x44, 0x34, 0x80, 0x1, 0x0, [{@remote, 0x1}, {@loopback, 0x40}, {@private=0xa010101, 0xbbe}, {@loopback, 0xc0d}, {@broadcast, 0x6}, {@broadcast, 0x6}]}, @ssrr={0x89, 0xb, 0x74, [@local, @private=0xa010102]}, @lsrr={0x83, 0x1f, 0x8, [@private=0xa010100, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1e}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, r12, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008001}, 0x10) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, r12, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008001}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)=@ipv6_newaddrlabel={0x64, 0x48, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x9}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x44080}, 0x10) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000e40)) (async) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000e40)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)}, 0x20) r19 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001080)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000f80)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r18}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000001000)='syzkaller\x00', 0x3, 0x8, &(0x7f0000001040)=""/8, 0x41100, 0x6e, '\x00', r13, 0x1a, r19, 0x8, &(0x7f00000010c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2c1b6, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000001100)=[{0x0, 0x1, 0xd, 0xb}, {0x0, 0x3, 0xa, 0x6}, {0x1, 0x4, 0x6, 0x6}, {0x5, 0x1, 0xd, 0x2}, {0x3, 0x2, 0x0, 0x2}, {0x0, 0x5, 0xe, 0x6}], 0x10, 0x7}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000f80)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r18}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000001000)='syzkaller\x00', 0x3, 0x8, &(0x7f0000001040)=""/8, 0x41100, 0x6e, '\x00', r13, 0x1a, r19, 0x8, &(0x7f00000010c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2c1b6, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000001100)=[{0x0, 0x1, 0xd, 0xb}, {0x0, 0x3, 0xa, 0x6}, {0x1, 0x4, 0x6, 0x6}, {0x5, 0x1, 0xd, 0x2}, {0x3, 0x2, 0x0, 0x2}, {0x0, 0x5, 0xe, 0x6}], 0x10, 0x7}, 0x94) r20 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(r2, &(0x7f0000001240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) shutdown(r20, 0x1) 1.187661242s ago: executing program 4 (id=5020): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x568, 0x3c8, 0x12, 0x600, 0x0, 0x202, 0x498, 0x2e8, 0x2e8, 0x498, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x398, 0x3c8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3f, 0x0, [{0x8, 0xb, 0x7}, {0x1, 0x4, 0x80, 0x2}, {0x9, 0x4, 0xf8, 0xfffffff5}, {0x3, 0x8d, 0x5, 0xfffffc93}, {0x3, 0x0, 0x0, 0x4}, {0xa, 0x60, 0xee, 0xb}, {0x81, 0x0, 0xf3, 0x100}, {0x0, 0xff, 0x81, 0xed65}, {0x1bd4, 0x0, 0x6, 0xa}, {0x800, 0x1, 0xf1, 0x1}, {0x8000, 0x82, 0x9, 0x3}, {0x617, 0x9, 0xb9, 0x864}, {0x2, 0x5, 0x10, 0x1}, {0xdb8b, 0xb, 0x9, 0x2}, {0x8, 0x40, 0x8}, {0xfff1, 0x2, 0x5, 0x2}, {0x10, 0xc7, 0x2, 0x8}, {0x6, 0x0, 0xd, 0x80}, {0x95f1, 0x8, 0x2, 0x600000}, {0x1, 0x2f, 0xfb, 0x6}, {0x6, 0x4c, 0xfc, 0x80}, {0x4c24, 0x83, 0x7, 0xcbf4d91}, {0x3, 0x7, 0x9, 0xc9}, {0x3, 0x2, 0x7, 0x7fff}, {0x9, 0x6, 0x3, 0x6a9}, {0x3, 0x3, 0x10, 0x7}, {0x400, 0x1, 0x7, 0x8000}, {0x5a8a, 0x3, 0x5, 0x8}, {0x9d5, 0xff, 0xb, 0xedc6}, {0x9, 0xc, 0xfa, 0x1}, {0x2, 0x9, 0xae, 0xb478}, {0x5, 0x9, 0x0, 0x3}, {0x7fff, 0xd, 0x2, 0x9}, {0x1, 0x96, 0x5, 0xfffffffe}, {0x4, 0xeb, 0x10}, {0x8, 0x4, 0x0, 0x5}, {0x9, 0x0, 0xd, 0x4}, {0x6, 0xd6, 0xe, 0x3}, {0x5, 0xc, 0xc, 0x3}, {0x0, 0x6, 0x3, 0x3}, {0xd90, 0x2, 0x0, 0x1}, {0x2, 0xfd, 0x7f, 0x400000}, {0xaa0, 0xc, 0xff}, {0x7, 0x9, 0x1, 0xa6c}, {0x8, 0x9, 0x3, 0x5}, {0x7db0, 0xf6, 0x4, 0x6}, {0x7, 0x3, 0x8, 0xfffff6d9}, {0x8e35, 0x0, 0x5, 0x3ff}, {0xcfa6, 0x9, 0x9, 0x7}, {0x4be, 0x7, 0x1, 0x3ff}, {0x16bd, 0xff, 0xa, 0x47c}, {0xd8b, 0x3, 0x6, 0xd635}, {0x5, 0x3, 0x0, 0x6}, {0x2, 0x9, 0x5, 0x49}, {0x8, 0x3, 0x31, 0x3de}, {0xaa7, 0x0, 0xff, 0xfffffc4a}, {0x400, 0x81, 0xc, 0x1}, {0x1, 0x9, 0x4, 0x81}, {0x30, 0x6, 0x9, 0x6}, {0x8, 0x81, 0xd, 0x149}, {0x7f, 0x7, 0x3, 0x59b}, {0x9, 0x1d, 0x7, 0x3}, {0xf, 0x4d, 0x1, 0x6}, {0x6, 0x3, 0x1, 0xfffffffb}], {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000018000900f8ffffff000000001c140000fe000001000000000a00120002"], 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1.144129667s ago: executing program 3 (id=5021): socket$nl_netfilter(0x10, 0x3, 0xc) 1.033380271s ago: executing program 0 (id=5022): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0xffffffffffffffff}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r5, 0x0, 0x6, 0x0, &(0x7f0000000140)) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1.010636188s ago: executing program 5 (id=5023): pipe(0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async, rerun: 64) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) (rerun: 64) socket(0x3, 0x2, 0x5) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112d9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 857.018258ms ago: executing program 3 (id=5024): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r2, @ANYBLOB="20000100", @ANYBLOB="00001000e000030000010001000000"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "0900ba7fba623c83"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x7f, 0x1, @vifc_lcl_ifindex=r2, @empty}, 0x10) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000906010300000000000000000a00000124000880100007800900130073797a3000008008000140ac1414aa2400078018001480140002402001000000000000000000000000000106001d40000800"/92], 0x5c}, 0x1, 0x0, 0x0, 0x20040004}, 0x40010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000449201000000", @ANYBLOB="8b5dfa6eb0886f9cf571b520b3e493c8babf94664b2f859c55b51d922f7cb8f5435dbfde57f2db795cd219f71254099212a3a03ef29249a29e8d3bba9219e51f05d3a0fa89e86a50b44a416c9c8ba97109349a5a4a0b6509ac096e875def34e68541c53d4c45826cb5a144db5d9f25c5a1fc5105b411b8bfde600e4eaacf7ccf0d4393d6580c7b312584dbbbb98f02678dd17aec9d170568b1", @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000002000000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017004a9245"], 0x1c0}}, 0x0) 797.161755ms ago: executing program 4 (id=5025): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffff203a4098b605be1800000400"/36, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000950000000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) 689.458798ms ago: executing program 0 (id=5026): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x48, r0, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x48}}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf250a0000cdff0000010200010008000600000000000c0014008f988e090bc0ea3f"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f00000002c0), &(0x7f0000000200)=r6}, 0x20) 604.332784ms ago: executing program 3 (id=5027): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x9, 0x3}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x3a, 0x301, 0x50bd25, 0xfffffffc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x402464506e8b64b6}, 0x0) 529.409145ms ago: executing program 4 (id=5028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "32f824b5a8040034", "8b3de2aabceef22f419e59f3000000000400000000020000000000000000ff01", '\x00', '\x00\x00\x00-S\x00'}, 0x38) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@nested={0x20, 0xb, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xffffffffffffff00}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 489.764317ms ago: executing program 1 (id=5029): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 238.922707ms ago: executing program 5 (id=5030): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000002010100000000000045b80000000006fa06400000000004cbf911ccce06489b82f813"], 0x28}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f17", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r10 = syz_open_procfs$namespace(r7, &(0x7f0000001780)='ns/ipc\x00') r11 = getpid() sendmmsg$unix(r6, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r11, r8}}}, @rights={{0x18, 0x1, 0x1, [r10, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f0000001740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001700)={&(0x7f0000000600)={0x10d8, 0x1c, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@nested={0x10b3, 0x169, 0x0, 0x1, [@generic="ef5a229dc8b3717bfa96fe5ebd16ac94fef93bbcdb9aff27d4dc06889084ad8f000207c813236b4abb6992f299f4e30dd2f5b70bc05a3dbd8358186a85de8a72d209e6b6a87f45a6e86da35879d77a1532e56256d269a18f499c4cd59f7889005275565d0d31e3a2c9d176d7589b58e2bbf7550f9a51fc65e58c44aa9a6c7fa7bb9449cfbaeb357ec0e407354ec2a8b25cc211c661ac4da484fc7844d2ba223a62ecf0ca33b7e7", @generic="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", @nested={0x4, 0xcd}, @nested={0x4, 0x45}]}, @typed={0x8, 0x10c, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x27, 0x0, 0x0, @uid=r8}]}, 0x10d8}, 0x1, 0x0, 0x0, 0x4080800}, 0x404c084) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r14, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r14, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c840) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c840) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc71e16e819ce1f22}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xc0, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x3, 0x0, 0x0, {0x0, 0x6, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x0, 0x5, 0x8}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfffc}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}, @NL80211_ATTR_BSS_SELECT={0x50, 0xe3, 0x0, 0x1, {0x4c, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x3}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xe, 0x7f}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0xd1}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x8}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xfffffffb}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x8, {0xf0b7, 0x83, 0xec2a, 0x7f}}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="545d8fa02a7f"}, @NL80211_ATTR_PRIVACY={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000060}, 0x40800) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x848000000015, 0x805, 0x0) (async) r15 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r15, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) 173.769988ms ago: executing program 0 (id=5031): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000400001000000050007000000000008000900000000101400200000000000000000defffffeff0000000008000a000000000014001f0000000000000000000000000000000000060002000000000006001b004e20000005002100"], 0x6c}, 0x1, 0x620b}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x3, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)}}], 0x1, 0x44191) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000000)=']}@{%!]+&&X\x00', 0x4400, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x7]}, {0x6, 0x0, 0x81, 0x3}}, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x100}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x71d2e000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000001300)="a6e2976b", 0x4, 0x8841, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000013c0)=0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000}, 0x94) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r4, 0x0, 0x33, 0x0, &(0x7f0000000080)) (async) listen(r0, 0x100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000540)=ANY=[@ANYBLOB="e7a6d42184224bc1"], 0x8) (async) accept4(r0, 0x0, 0x0, 0x0) 173.219592ms ago: executing program 4 (id=5032): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x7, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x3, 0x34}, [@coaddr={0x14, 0xe, @in6=@private0}, @lifetime_val={0x24, 0x9, {0xfffffffffffffff2, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newtaction={0x68, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x7, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) 173.011182ms ago: executing program 1 (id=5033): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x8, @void}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000700000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x8, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x77}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 29.64895ms ago: executing program 3 (id=5034): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x3f, &(0x7f0000000600)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0x80}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r5, 0x7, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0da604ad59674c17d64e5995de4da1000000", @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000050005000100000005000600000000000800030001000000"], 0x2c}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0xffffffff, 0xf8, 0x1c0, 0xf8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@ip={@loopback, @multicast2, 0xffffffff, 0xff, 'rose0\x00', 'gre0\x00', {}, {0xff}, 0x33, 0x3, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x9, 0x6]}}, @common=@ah={{0x30}, {[0x3, 0xe], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @multicast2, 0x0, 0xffffff00, 'veth0_to_team\x00', 'gre0\x00', {0xff}, {}, 0x3ea4ee78567f2437, 0x3, 0x4}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x358], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x6, 0x3, 0x2, 0x4, 0x4, 0x2], 0x0, 0x3}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}]}, 0x4c}}, 0xeb64d656041b2f26) 0s ago: executing program 0 (id=5035): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x14) write$nci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="52000100a2f1c4f7d76e6dce0cf77c"], 0x5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) syz_emit_ethernet(0x2056, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x2020, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x200, "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"}, {0x0, 0x200, "a57f50efcc48763b0a8af3cf9d86f7e4c11e4cff500bd3941c41137b3166165daeb57e5b6263affa1faff7e34295c98cf2d3a63b6a918012980123d4a22db60e1104cfd91882adbf22ecbb0871722bcc6d10a421dd20a0198d179889616710d9fab21b7a7c072efc5ab2e99bd2b7c307d5501423c17d2e1a183a186077086894c860bf80c74c39223b2e25c0d3a1d0b1e16f11241a99ba55128e265b967d8dadce3e0c910221ca828ad6ce7a3d92e00a5104e5eb0c6d18ad39aa2d35e6c778994bbd0b06617574451d2a2f48028246f07cf649417902ee329cc4f6d3b6dd0bf91f072a6ddd73b9f6a5746a0cfe4db6ba03e782e5bfda0a212967de46d7c378753824d700e45eee8dc82e325fbf3773788b43383be21a9469dd4fefdd7f436d6f2c3cf3de6577fefc1885c38b98809f832afc4605157b113dd61e4ac0e40cb0b31a4b2a579c4d95442c02564704604aa47f0bf2928cdf9881663a70dd1fd490dd16698757789cba01eec35d6457ba077d278860ea3ed15906b0ea1cb90b20e532c4b552f6de8c4bc6b111f3ec4a259966c91ee6832d814c5dc30667a100c1c3d0c469131371efe7993324fa4a50c08c57f7f13aff64e3637906fc14c62ecc55a611d67b7c234a42790afdc89488da642a63e344ebca2ac02511a3106c753534871eb5017fb873ea8dd7c6021855e228f1838e5d79c4d632ab02c3b46df12782c6052c8222037c11e1b40ee4779f7b2efdd7512bfca3f83d892b0cd078c076412e02e541cb7278a6a86a91916daaf4cbde5064def62b2b67fd8798ebc1be714835d6c6983756a6183f346bbe17153ee4f303cf2d873926c71df52b65cf61bf28ef23d0fbbfda021aa20b5a090e6416b952fb6368d8634b31d642023e8ecb6d17b533a5e4c34dedcc78b5a8cd5f4fd5add8066bf0bc885e9ee4c7d5e696190034ab6a98f7fe06db416e497f0fd9142b8d30e1698af033120875b0ccae5bb2609a8709126cb60693e0be2bf098e77ef1d32bf626fa3cfa52655ab3225d3f9cf16f2c8b23630b38044cfc543764e40d46e715f62fd91c1973c8fc1cfd219996e28ff72f8f1f609b8f58bd81d03df2ffd232d3caeb188f901c2a4b8be244cb3e171479bae3588c72183e5ab45b54d2fa0766bd254c26bbcd60aa426d6164484bb5edebe57ad2bb6ae4220c72f2a5ea0f742b4c1c58ab581160c742a612b295db8eb31d17dbd011e527b38f4b288b2407d537b4335b0bded96e6bf7f1fb378952d186e68eef41ce506148495b068ed70f6bf041b279aaf93e5f2ba2960068b26c0088c72331c38d0a1ea2cbe61d1deaf664a4b4b65d2b83dd9e5ca8a9ba5d2fada409a49a69c1028ded14f7380d310515badec10f6afdaa885f9990a848aaa307632498e0481cd8c94618176ca70ea7653657384a71a6918d84621002bcd964a5d117ab7e0a434b0b010cfc2117487159233a87e9698e8443fe085fb996976bbe557843aa46683cd9d29534485476cca6a342785cffcf23b6323e4ffec4c7ca082e8e857226cbdf2eb7ee82086f7aba2a74a6717a43f496919c8f24cf27609611913b31789f7bafd523427c518b8951110a8c8b6f42d7730a23b1df9c1ca04c9b4803399974277d577f17d6898368e27d1eb0d64a6ce56dfab75ed0e247c74c4857a0c7084ab1019f579e5f0e55187ef051f38b9650b8fdb3d13b98f74bed7faa1f54c884b21c0585f8406802b2c9c14567f604080341244ebec456f9779cfc722d6f1167f32d4a9854d84f3876a8f978b43b2a04d004a537672ae0ec523d28a899e1c2d1426fac6ccff3ab901295ed903302f81508fa765d1376bcc9cf73fbd2f4aa43995520941824bd344f517d155d92806e69a482638e3f2d4857a69413bd15d0cd9bc00b0727032e928762a8d510ef4485b54c42e552f7b30a802908109dba6bd6009aa39025ea5a11f40d1960694365051c902e0bcbff6ece5e9557c8692583476ec7cf4a8c487d663bf1ee9a5302062885c030f4de01c28437eeccb4976b0a95511d2850521cc3d1c38832d7c173a3bd20b4a2c36267994571c0ebf40da46e0a6767629e25676187c18270f554e1d387249090f673f1f032633a3b1c93cc4d85f34ad292869708205c874eab67636f228b12ec6baac3f76e50a12814f9007c5e5bc75e0fc3d93311fe0a3d348c4d4e9820fcc64d4ac9779c66ed41439199d79d61d70b8864710aafcafad489b5b0b6b9ad9600a8f4b1b4657dfaf58578812a61b7867c4ca9a75699f0664efa49154e1a3f4152988b8914314e60c64da6279bc28ff8984ee65ef3d522c89b6233d74154408f1ee78e2e4914a88b79d7b5e1870f4b84cd08dd6034b723d461fd6bab9de0463dea867cca987b2a02bbf7c8e187794f519f5eabcd84cbf4b1a8f6283edc84d845b4baede14093f8231f4468fca51c5d9b6377e6a5e3ead1fb12fcfe992fdd4d3fda6cc1d646fda361ce0b3e581b6cfb4b0de8768bc779b6cc1cb83a43a298f1d9b7cc49e567eb6824d39603082b776c3d138cc3492305c469201866ec8c13af13c511e0ff722a5dec89e753e115d24b3d014c458b31794e2fae87aa889de0a0a3fc594729c8042767f647b625c21daddae198fdcc01eddb26f36e3ab3ab2e32bc2cb4b3d48743ec2d8ff7942bd81f5daeedbf677f35a444e44d5780a81fb1cb8a6ff6615d1bbca495c36d56de1adbaa6024370b4c63996625a0d66a3650f1b4cee75b480aa98b5eb8e81f133b7939a151451289ab5d1fded3d7cce70d663cc69136f1555fd704f5fcc245b19314dc1e7cd5daa447f335a111838887ce02c1ad8ba72f775574428028c37b2282e09ea51c8966b53f3c81ef92fb220d4580a02c2c3fecea3810ff678280b42444d9f3b51a2909e80db62b739afb950aa7c54b2b0e0076f45c8f94c6af5d2ebcd4f7f47a11b2ea78418633accde1ddc926683a62dc33753e35bd95b38a4b4154f70d912a733582f04f49258b75125eab25474d2f9a468c5cf43b518f033bed6eb61107f690cbf08de7e5864d2a611c44e2c4f81c24fc3888de1b9b918627def058458188d612d3686c0de6b7791e791d0c97c871aa0918e8c0b1e1935baa195894980777311a91039ea499f2acb231356156b87af4ead19b9edcac7fa4217ef383cff6345edf1d504934facc905ff51cf2e8546b3d646408ee5b9bc01ae9396a0fdd4e467a94848fab0d9716e1262f27c06327db8fa206314dbb6784aa89c40395bfd0f2cc8aeab96e0304b11079a8f200c9b13969d416eb29a1ae4e92de6491afc323e68f86e61bd8476090d8ac5bc7ecb24433557e73c1bf3f2a957bd92035e493648570c4a90106af7361d0438685f78ffe6be13f7f67583bb14a5f0c1666d69cb38a43260ad57ff9ffbbaf1ca1dafbcac11bbba1abef00114372d611b5fd5ab50f361d7042c3ba586acb3f0ed1668e38e625843059fc3070344dadc1d49edf2a45a3534306e5eaae8d0787c9e5cc03c3cac3a3e5ce658be291c781a3465d0d81b46768b35250d1422090cdfca12713349b80a355417a6c06d88f90fdb6d437cd92b5907470b06c87c2c161f05370ba00921d2ed6dc8f39376b50fe01396aa0f9057821a22cb18e6d993a5c7671d16ad1856229bde0499172f80173552a3c07dde82e0e43795ede5e42c0d21b6633947171ae8ebefd3c901ac7895354cedea88a5761bdbc34b2fd412ebc919de765b685bf90c55daee2110517f6e28467cb5eea451994ea288c1e83ae4c46f417bd2c21c8c28ab91b676414c0af18ded975d1ef44d2cda61aed7634bd1054b4dadb659418eb6993af78804f0cf4178162c97320635a5a0720a94656fcaa600c6cf9e52d59dfeadf9ffb203b3d914274389bde0bb95a8e9372b54b112fbb299de82921069dd863a03c306c6cd3a7b8acecfa6d95bd729277bdae8753bd52ad091bc36bff3f3cbfa85d30624d1b1d6c7a49e808c278c338c0d97b34d329180230369bc15873f962f23dca8d3bed3e5cdb6af4a16006e442460e2a7e8b3f896169721d245b492592734c67ba7a1f5caa0c857611e2b8ec43124ea8492831a9af827b8e41cf65e703c3ed816e65c5d94555a07c2486778b1ab0171ce615b6276f8a7767941024afedabd5512dcdd2412aaa86c6814f08574871d5f4afc5a4985b74a5c528162399514167d92ca0c938ea74eabf6ec91a89af1394b527f4b1dd379d065959728b4499d96e78e4f7a05bb77673439699b79d06f4b51ff420f6edade34e34669f2675fc3a8373c68e8306cdde9a42de303cbb49a563f689d63813b58a137b3354ba41a2ec73ee1fbca06b1381a8fbedb0a3937fc68d47dfef55a2e751474cabd3851ba80625645dc59aaabc498e441c75bfdbacb4430f0caecbba3afd027d293de1a93983c07b30561ad087173da9eab611d99a0224b9ee7c3b814dfe7d3f76a300e6c21fa287dfb57830aae8ed1c88464887892f747cee07a02250b7270b4ea9e8a049fbfaa88fdf17297c9ac77e457c3e33f3660ab4af6f8da55c91de1a38f2fe961646ad650e764ef8ed29524e4f8077e05585f3651b5b5c5ad5d2d9a1442e59e0e65df6a5bb3eea93619f6864449f8c202fc2668dfc9343e650ce349f645e5b4257215b1a34b5cf0fcc87592024aa72f31b1627faa7849fd8bba8baffd6f61ca64ff81ee44696cb4f941853879b96ae1549c295ba441b6601777f7b8d2847908d721fc1ae831d81981720ec2558652d14af1bbc71758d81c447a472af4aba4e237ce9e5af7ce055836627f87012e6af7321f73248ceeea8c8daa2daa9a92af3d181f73386060a9aa7fc96e68601ee6638a69b9bd75a08cd7a61e184ae75fc3faa79c7fa01b7db45fcfdbaabc96c548e2ae658257834cf687893eeb7ebda8ea2d1a63fcdc42fcfcc37b1e107effdf0de42a964eef78e4020fe7a68b8941eb5677ba3430762cae134a2b0764ffd28bbba7490fd7addbb72655a1ed907fd74684e79cc0513945aced46e91d694b5ef6db6a4b42c150adfd84d2a83714c81374744c33483f0549a71bd894ca56728c9f17fcbbae3ae45d8f77303ec9b71adf926db48efb73b7ab1e4771d78ebc21127e0e49682283fb6ce7a0b2e7b665453c47edb294e338e83fff9934ea3e2e750e0877697c9dfdf6f85b4f30b0e79a22bc4cd28515f95e551046f59bc4a829ec75a4cbd72970f3f13765cac82f843e39259870a0e3fccfff89cf5b38ac4ef25a12435d8ec5fbcd606b0829680fa0037d4064efec8aea7d356cf4f9ff08fd098a1a2eb673cd3caf8bc406a5019352e217e92fdd6a1624cebceac0670cbe7688440db663cf1aa17bff5696b038559d8829da7105c036f8aa60abcd39ce2f4e5574c7ab39c41e0d6bac303e77331006ff0cda8ee03ccea629224812ed03a54d6c09c01af289a4928e80bb0f7cb935c2546ab5722d16529b1896984c38bd5a25500b64c86460b0a5545370df5cac7ebac8b277083233cb7de42736b9e89d7b6d58679fe3671f740762d36089ed14ff65de2bd47fc2ec590e7c326055003882361003dc273e27114f54f296d6b70d13bc510c70feada309259bec230f7f4c3a2e5683bf8869bba29fc3d75851db9fb2f369f705b725854d5456b52e60606fca7f2704abab6c11fbfe1efa144781779936a7941cc95bde9340751ffc7db124cb01cb5236cf8367d3cfd2346d77a80d2ac6b16fa3d1b10b5b8a41977d1af67013f05a1eff1363b435c9503dad9254b2fd1abd131da1c844381ae9ae993d01f2512085eeebd8730"}, {0x1, 0x1, "a22d4ba30d6b"}]}}}}}}, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x2, 0x0, @loopback}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0xfffffff9}, 0x2, 0xa, 0x40, 0x4, 0x1, 'syz0\x00', "a8ade9db18a9e1d93ee4ab381d1f2d57bf24d5a049b3e40ba20d8b981ce6931f", "af7af1d3b3c3ad33171d5f3ebe5ecc5d874c3a06e44c3142a7af088e33b5cb39", [{0x5, 0xb, {0x0, 0x4d}}, {0x7, 0x5, {0x3, 0x8}}, {0x3, 0x6, {0x3, 0x7ff}}, {0x3, 0x1fa0, {0x0, 0xff}}, {0x401, 0x5, {0x0, 0x5}}, {0x2, 0xfffc, {0x0, 0x1}}, {0x4, 0x9dc, {0x2, 0x7}}, {0x5, 0x400, {0x2, 0xfffffff9}}, {0xfffc, 0x1, {0x0, 0x800}}, {0xfff7, 0x10, {0x3, 0x6}}, {0x7df, 0x7, {0x0, 0x2d}}, {0x6, 0x9, {0x0, 0xffffffff}}, {0x4, 0x0, {0x3, 0xfffff000}}, {0x400, 0x1, {0x3}}, {0x0, 0x9, {0x3, 0xe}}, {0x0, 0xf, {0x1, 0x565}}, {0x81c, 0x1, {0x1, 0x2c}}, {0x6072, 0x7fff, {0x1, 0x3}}, {0x5, 0x3, {0x2, 0x3}}, {0x5, 0x9, {0x2, 0x4}}, {0xb9, 0xfffb, {0x1, 0x7}}, {0x0, 0x5, {0x3, 0x81}}, {0x5, 0x5, {0x0, 0xd65}}, {0x9, 0x6c01, {0x0, 0x5}}, {0x7, 0xa, {0x1, 0x7bd6}}, {0x6, 0x2, {0x1, 0xc600000}}, {0xfffa, 0x2, {0x0, 0x8}}, {0x2, 0xbe}, {0x6, 0x8c, {0x4, 0x5}}, {0x5, 0x5, {0x3, 0x3}}, {0x3, 0x1, {0x3, 0x3}}, {0xd29e, 0x3, {0x3, 0x1ff}}, {0x1e70, 0x5, {0x3, 0xfffffbff}}, {0x7, 0x6, {0x2, 0xff}}, {0x3, 0xc6b, {0x0, 0xf}}, {0xc, 0x5, {0x3, 0x3}}, {0x2, 0x1, {0x1, 0x9}}, {0x3, 0x0, {0x1, 0x9}}, {0x0, 0x7a8, {0x0, 0x6}}, {0x0, 0xfffa, {0x3, 0xa8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x20004c00) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002400), r7) pipe(&(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002100)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000023c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002380)={&(0x7f0000002140)=@dellink={0x208, 0x11, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, 0x8000, 0x5000}, [@IFLA_VF_PORTS={0x80, 0x18, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a42e4c9453d92cf1f1b0ab7d0923da3d"}, @IFLA_PORT_PROFILE={0x15, 0x2, '/dev/virtual_nci\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x9b}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "ddd33a6d751a01c5d22bdb89ca6bea21"}, @IFLA_PORT_PROFILE={0xe, 0x2, '[-:]-$.%%\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "57e0843e6072e373ed7139c994b10b62"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}]}]}, @IFLA_IFALIASn={0x4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_VFINFO_LIST={0x158, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x9e}}]}, {0xb0, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x10, 0x97f, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x45, 0xff}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @local}}, @IFLA_VF_MAC={0x28, 0x1, {0x3, @remote}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffff9, 0x13}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x74, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x400}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x80000000, 0x9}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x10000, 0xdc}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0xd8}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x2a7}}, @IFLA_VF_VLAN={0x10, 0x2, {0xf, 0x3bf, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x39, 0xd}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x400}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x1, 0x6, 0x40}}, @IFLA_VF_RATE={0x10, 0x6, {0x800, 0xf, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x7f}}, @IFLA_VF_RATE={0x10, 0x6, {0x42, 0x7fff}}]}]}, @IFLA_PHYS_PORT_ID={0x4}]}, 0x208}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc050) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "8000", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(0x3) kernel console output (not intermixed with test programs): tover after parsing attributes in process `syz.0.3187'. [ 465.353681][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.386385][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.402150][T18001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3187'. [ 465.560723][T17394] veth0_vlan: entered promiscuous mode [ 465.649220][T18007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3189'. [ 465.666543][T18007] veth1_to_team: entered promiscuous mode [ 465.675989][T18007] gretap0: entered promiscuous mode [ 465.682707][T18007] hsr1: entered promiscuous mode [ 465.699292][T17394] veth1_vlan: entered promiscuous mode [ 465.922219][T17394] veth0_macvtap: entered promiscuous mode [ 465.958360][T17394] veth1_macvtap: entered promiscuous mode [ 466.010667][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 466.125379][T17394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.225560][T17394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.370080][ T1356] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.387279][T18012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3191'. [ 466.427545][ T1356] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.465366][ T1356] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.649794][ T1356] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.774055][T18024] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3194'. [ 466.825653][T18024] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 467.337773][T10791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.402624][T10791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.759214][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 467.777694][T10791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.850022][T10791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.436976][T18040] syzkaller1: entered promiscuous mode [ 468.468703][T18040] syzkaller1: entered allmulticast mode [ 468.820312][T18069] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3203'. [ 469.006758][T18071] netlink: 'syz.3.3204': attribute type 1 has an invalid length. [ 469.153567][T18078] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 469.774111][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 469.795580][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 469.811061][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 469.834051][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 469.855314][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 470.142438][T18100] netlink: 'syz.4.3209': attribute type 10 has an invalid length. [ 470.181355][T18100] ipvlan0: entered allmulticast mode [ 470.236195][T18100] veth0_vlan: entered allmulticast mode [ 470.309697][T18100] team0: Device ipvlan0 failed to register rx_handler [ 470.433233][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 472.000631][ T5640] Bluetooth: hci5: command tx timeout [ 472.201865][T18140] netlink: 'syz.0.3221': attribute type 1 has an invalid length. [ 472.385707][T18138] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 472.396505][T18138] bond1: option packets_per_slave: allowed values 0 - 65535 [ 472.417327][T18138] bond1 (unregistering): Released all slaves [ 472.504696][T18140] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 473.062412][ T29] audit: type=1804 audit(1779581459.844:11): pid=18159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3223" name="/newroot/4/cgroup.controllers" dev="tmpfs" ino=39 res=1 errno=0 [ 473.105117][T18164] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ1 [ 473.143254][T18164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.155277][ T29] audit: type=1800 audit(1779581459.844:12): pid=18159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3223" name="cgroup.controllers" dev="tmpfs" ino=39 res=0 errno=0 [ 473.902686][T18175] sctp: [Deprecated]: syz.3.3228 (pid 18175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.902686][T18175] Use struct sctp_sack_info instead [ 473.929023][T18177] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 474.021501][T18177] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 474.080222][ T5640] Bluetooth: hci5: command tx timeout [ 474.742286][T18180] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 474.766959][T18180] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 475.376995][T18212] netlink: 'syz.5.3238': attribute type 21 has an invalid length. [ 475.624788][T10789] tipc: Subscription rejected, illegal request [ 475.633674][T18212] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3238'. [ 475.673779][T18211] netlink: 'syz.4.3237': attribute type 29 has an invalid length. [ 476.159884][ T5640] Bluetooth: hci5: command tx timeout [ 476.744706][T18248] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 476.759085][ T6531] IPVS: starting estimator thread 0... [ 476.869526][T18252] IPVS: using max 41 ests per chain, 98400 per kthread [ 477.377212][T18264] gtp3: entered allmulticast mode [ 477.537649][T18267] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3249'. [ 477.613539][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 478.113721][T18277] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3251'. [ 478.235065][T18277] sctp: [Deprecated]: syz.0.3251 (pid 18277) Use of int in maxseg socket option. [ 478.235065][T18277] Use struct sctp_assoc_value instead [ 478.266300][ T5640] Bluetooth: hci5: command tx timeout [ 478.490634][T18282] syzkaller0: entered promiscuous mode [ 478.517050][T18282] syzkaller0: entered allmulticast mode [ 478.626009][T18285] netlink: 'syz.3.3252': attribute type 3 has an invalid length. [ 478.692253][T18285] netlink: 'syz.3.3252': attribute type 1 has an invalid length. [ 478.736133][T18285] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3252'. [ 480.154572][T18083] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.182431][T18083] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.197508][T18320] netlink: 'syz.5.3258': attribute type 1 has an invalid length. [ 480.217944][T18083] bridge_slave_0: entered allmulticast mode [ 480.242664][T18324] netlink: 'syz.5.3258': attribute type 1 has an invalid length. [ 480.263364][T18083] bridge_slave_0: entered promiscuous mode [ 480.441179][T18315] vxcan3: entered promiscuous mode [ 480.474926][T18315] vxcan3: entered allmulticast mode [ 480.555345][T18083] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.591849][T18083] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.622026][T18083] bridge_slave_1: entered allmulticast mode [ 480.663975][T18083] bridge_slave_1: entered promiscuous mode [ 481.246444][T18083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.341398][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3263'. [ 481.376635][T18083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.962213][T18083] team0: Port device team_slave_0 added [ 482.046369][T18083] team0: Port device team_slave_1 added [ 482.311832][T18360] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 482.312349][T18083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.375268][T18083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.410880][T18360] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 482.456431][T18083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.496417][T18083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.505494][T18083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.610030][T18083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.634789][T18364] netlink: 'syz.0.3266': attribute type 12 has an invalid length. [ 482.826396][T18364] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 483.063684][T18378] netlink: 'syz.4.3268': attribute type 11 has an invalid length. [ 483.120303][T18083] hsr_slave_0: entered promiscuous mode [ 483.134560][T18083] hsr_slave_1: entered promiscuous mode [ 483.150352][T18083] debugfs: 'hsr0' already exists in 'hsr' [ 483.159267][T18083] Cannot create hsr debugfs directory [ 483.181773][T18379] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.193080][T18379] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.211590][T18382] netlink: 'syz.3.3270': attribute type 1 has an invalid length. [ 483.586737][T18384] bond17: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 483.701425][T18389] netlink: 'syz.0.3272': attribute type 12 has an invalid length. [ 483.717318][T18389] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.3272'. [ 483.871794][T18382] veth7: entered promiscuous mode [ 483.896442][T18382] bond17: (slave veth7): Enslaving as a backup interface with a down link [ 484.296309][T18403] 8021q: VLANs not supported on sit0 [ 484.946019][T18413] bond1: entered promiscuous mode [ 484.970903][T18413] bond1: entered allmulticast mode [ 485.013727][T18413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 486.069938][T18454] openvswitch: netlink: Geneve opt len 73 is not a multiple of 4. [ 486.102810][T18083] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.119031][T18083] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 486.134197][T18083] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.437642][T18083] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.512124][T18083] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 486.553076][T18083] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.192121][T18488] vlan3: entered promiscuous mode [ 487.198111][T18488] hsr0: entered promiscuous mode [ 487.248010][T18488] vlan3: entered allmulticast mode [ 487.256210][T18488] hsr0: entered allmulticast mode [ 487.263449][T18488] hsr_slave_0: entered allmulticast mode [ 487.288772][T18488] hsr_slave_1: entered allmulticast mode [ 487.577051][T18083] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.614698][T18083] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 487.638030][T18083] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.842708][T18083] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.854572][T18083] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 487.866594][T18083] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.590147][T18476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.713680][T18083] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 489.842105][T18083] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.867075][T18083] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 489.942680][T18083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.977543][T18083] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 490.031698][ T29] audit: type=1804 audit(1779581476.814:13): pid=18507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3296" name="/newroot/19/cgroup.controllers" dev="tmpfs" ino=115 res=1 errno=0 [ 490.099604][T18083] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.121200][T18083] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 490.142047][ T29] audit: type=1800 audit(1779581476.834:14): pid=18507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3296" name="cgroup.controllers" dev="tmpfs" ino=115 res=0 errno=0 [ 490.187421][T18083] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.251101][T18509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3297'. [ 490.280975][T18509] tc_dump_action: action bad kind [ 490.889919][T18539] syzkaller1: entered promiscuous mode [ 490.932653][T18539] syzkaller1: entered allmulticast mode [ 491.500317][T18555] IPv6: Can't replace route, no match found [ 491.505682][T18083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.536457][T18555] IPv6: Can't replace route, no match found [ 491.678803][T18083] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.757085][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.765245][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.928735][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.936956][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.810204][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3314'. [ 493.888983][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3314'. [ 494.459939][T18614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3316'. [ 494.513715][T18614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3316'. [ 494.633095][T18613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3316'. [ 494.686022][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3316'. [ 494.804085][ T5640] block nbd3: Receive control failed (result -32) [ 496.063229][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3324'. [ 496.153798][T18659] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3324'. [ 496.255167][T18083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.261615][T18658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3324'. [ 496.362021][T18658] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3324'. [ 496.658934][T18670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3327'. [ 496.703474][T18083] veth0_vlan: entered promiscuous mode [ 496.715498][T18670] netlink: 'syz.3.3327': attribute type 5 has an invalid length. [ 496.731080][T18083] veth1_vlan: entered promiscuous mode [ 496.769857][T18670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3327'. [ 497.317292][T18083] veth0_macvtap: entered promiscuous mode [ 497.336036][T18679] batadv_slave_1: entered promiscuous mode [ 497.356093][T18687] 8021q: VLANs not supported on ipvlan0 [ 497.383755][T18083] veth1_macvtap: entered promiscuous mode [ 497.470856][T18687] batadv_slave_1: left promiscuous mode [ 497.526112][T18083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.608484][T18083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.737831][ T1168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.789169][ T1168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.826134][ T1168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.863429][ T1168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.966848][T18698] tipc: Enabling of bearer rejected, media not registered [ 498.880982][T18714] bond18: entered promiscuous mode [ 498.917874][T18714] bond18: entered allmulticast mode [ 498.940386][T18714] 8021q: adding VLAN 0 to HW filter on device bond18 [ 499.023019][T18725] tipc: Enabling of bearer rejected, failed to enable media [ 499.070442][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.117393][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.126676][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 499.135876][T18725] IPVS: set_ctl: invalid protocol: 92 172.20.20.24:20002 [ 499.430404][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.475400][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.125629][T18749] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3348'. [ 500.442639][T18757] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 500.485667][T18757] syzkaller1: entered promiscuous mode [ 500.550285][T18757] syzkaller1: entered allmulticast mode [ 501.358113][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3354'. [ 501.693326][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.738733][T18791] netlink: 212320 bytes leftover after parsing attributes in process `syz.1.3356'. [ 501.992296][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 502.009106][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 502.024826][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 502.040204][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 502.057427][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 502.081493][T18798] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 502.207615][T18799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3359'. [ 502.269283][T18799] openvswitch: netlink: Unknown nsh attribute 0 [ 502.925219][T18808] vcan0: entered allmulticast mode [ 503.103228][T18822] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3365'. [ 503.711020][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3370'. [ 503.768950][T18834] tipc: Started in network mode [ 503.806743][T18834] tipc: Node identity be320362b9c5, cluster identity 4711 [ 503.851830][T18834] tipc: Enabled bearer , priority 0 [ 503.879025][T18846] netlink: 'syz.5.3371': attribute type 58 has an invalid length. [ 503.950229][T18834] syzkaller0: MTU too low for tipc bearer [ 503.986151][T18846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3371'. [ 504.001152][T18834] tipc: Disabling bearer [ 504.158642][ T5640] Bluetooth: hci1: command tx timeout [ 504.685970][T18857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3372'. [ 504.925807][T18862] openvswitch: netlink: IP tunnel dst address not specified [ 504.975479][T18862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.036192][T18867] netlink: 404 bytes leftover after parsing attributes in process `syz.4.3374'. [ 505.081154][T18867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3374'. [ 505.136870][T18867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3374'. [ 506.239640][ T5640] Bluetooth: hci1: command tx timeout [ 506.272699][T18898] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 506.287442][T18898] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 506.738744][T18907] __nla_validate_parse: 2 callbacks suppressed [ 506.738781][T18907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3385'. [ 506.833613][T18907] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3385'. [ 506.898001][T18914] netlink: 'syz.0.3388': attribute type 24 has an invalid length. [ 506.907906][T18907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3385'. [ 506.924126][T18915] netlink: 'syz.0.3388': attribute type 24 has an invalid length. [ 506.936573][T18907] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3385'. [ 506.947649][T18914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3388'. [ 507.000738][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3388'. [ 507.028678][T18907] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3385'. [ 507.424529][T18925] netlink: zone id is out of range [ 507.461828][T18930] netlink: zone id is out of range [ 507.464091][T18925] netlink: zone id is out of range [ 507.485863][T18925] netlink: zone id is out of range [ 507.503540][T18925] netlink: zone id is out of range [ 507.554526][T18930] netlink: zone id is out of range [ 507.592569][ T29] audit: type=1804 audit(1779581494.374:15): pid=18929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3393" name="/newroot/40/cgroup.controllers" dev="tmpfs" ino=222 res=1 errno=0 [ 507.617857][T18925] netlink: zone id is out of range [ 507.623042][T18925] netlink: zone id is out of range [ 507.657749][T18930] netlink: zone id is out of range [ 507.686784][T18925] netlink: zone id is out of range [ 507.709656][ T29] audit: type=1800 audit(1779581494.414:16): pid=18929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3393" name="cgroup.controllers" dev="tmpfs" ino=222 res=0 errno=0 [ 508.319492][ T5640] Bluetooth: hci1: command tx timeout [ 508.374374][T18953] netlink: 'syz.1.3398': attribute type 21 has an invalid length. [ 508.468852][T18958] Cannot find set identified by id 0 to match [ 508.485568][T18953] netlink: 'syz.1.3398': attribute type 1 has an invalid length. [ 508.814821][T18962] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 508.997281][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3404'. [ 509.040899][T18969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3404'. [ 509.105485][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3403'. [ 510.175694][T19009] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 510.398509][ T5640] Bluetooth: hci1: command tx timeout [ 511.389770][T18795] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.427687][T18795] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.485951][T18795] bridge_slave_0: entered allmulticast mode [ 511.519285][T18795] bridge_slave_0: entered promiscuous mode [ 511.553903][T18795] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.603727][T18795] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.636295][T18795] bridge_slave_1: entered allmulticast mode [ 511.718645][T18795] bridge_slave_1: entered promiscuous mode [ 512.021396][T19061] netlink: 'syz.1.3419': attribute type 5 has an invalid length. [ 512.074092][T19061] __nla_validate_parse: 2 callbacks suppressed [ 512.074228][T19061] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3419'. [ 512.102734][T18795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.218835][T18795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.697331][T18795] team0: Port device team_slave_0 added [ 512.755073][T18795] team0: Port device team_slave_1 added [ 513.220581][T18795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.266464][T18795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.356578][T18795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.460349][T18795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.496302][T18795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.578847][T18795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.084596][T18795] hsr_slave_0: entered promiscuous mode [ 514.113012][T18795] hsr_slave_1: entered promiscuous mode [ 514.154246][T18795] debugfs: 'hsr0' already exists in 'hsr' [ 514.173109][T18795] Cannot create hsr debugfs directory [ 514.762511][T18795] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.781996][T18795] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.961966][T18795] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.975520][T18795] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.098266][T18795] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.111534][T18795] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.315627][T18795] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.342860][T18795] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.328422][T19095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.405198][T18795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 516.505512][T18795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 516.562490][T18795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 516.638686][T18795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.664906][T18795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 516.748940][T18795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 516.839692][T18795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 516.887103][T18795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.135424][T10787] gretap0: left allmulticast mode [ 517.150758][T10787] gretap0: left promiscuous mode [ 517.151621][T19165] netlink: 'syz.4.3439': attribute type 1 has an invalid length. [ 517.167415][T10787] bridge0: port 3(gretap0) entered disabled state [ 517.186148][T10787] bridge_slave_1: left allmulticast mode [ 517.211681][T10787] bridge_slave_1: left promiscuous mode [ 517.232977][T10787] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.266463][T10787] bridge_slave_0: left allmulticast mode [ 517.283714][T10787] bridge_slave_0: left promiscuous mode [ 517.306451][T10787] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.613620][T19180] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3441'. [ 517.686536][T19177] netlink: 'syz.5.3441': attribute type 1 has an invalid length. [ 517.747907][T19177] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3441'. [ 517.797593][T19177] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3441'. [ 517.825077][T19177] netlink: 658 bytes leftover after parsing attributes in process `syz.5.3441'. [ 517.877542][T19188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3442'. [ 517.957925][T19190] netlink: 'syz.0.3442': attribute type 11 has an invalid length. [ 518.005110][T19190] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3442'. [ 519.092644][T10787] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 519.928025][T10787] bond2 (unregistering): (slave gretap1): Releasing active interface [ 519.997771][T10787] bond17 (unregistering): (slave gretap3): Releasing backup interface [ 520.573249][T10787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.593505][T10787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.615455][T10787] bond0 (unregistering): (slave team0): Releasing backup interface [ 520.630235][T10787] bond0 (unregistering): Released all slaves [ 520.657442][T10787] bond1 (unregistering): Released all slaves [ 520.695911][T10787] bond2 (unregistering): Released all slaves [ 520.732506][T10787] bond3 (unregistering): Released all slaves [ 520.774434][T10787] bond4 (unregistering): Released all slaves [ 520.799579][T10787] bond5 (unregistering): (slave veth3): Releasing active interface [ 520.812074][T10787] veth0_to_bond: entered promiscuous mode [ 520.837017][T10787] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 520.854915][T10787] bond5 (unregistering): Released all slaves [ 520.897639][T10787] bond6 (unregistering): Released all slaves [ 520.941676][T10787] bond7 (unregistering): Released all slaves [ 520.986441][T10787] bond8 (unregistering): Released all slaves [ 521.032417][T10787] bond9 (unregistering): (slave lo): Releasing backup interface [ 521.044084][T10787] bond9 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 521.063511][T10787] bond9 (unregistering): Released all slaves [ 521.102869][T10787] bond10 (unregistering): Released all slaves [ 521.147664][T10787] bond11 (unregistering): Released all slaves [ 521.170268][T10787] bond12 (unregistering): Released all slaves [ 521.236232][T10787] bond13 (unregistering): Released all slaves [ 521.272387][T10787] bond14 (unregistering): Released all slaves [ 521.327925][T10787] bond15 (unregistering): Released all slaves [ 521.376560][T10787] bond16 (unregistering): Released all slaves [ 521.417182][T10787] bond17 (unregistering): Released all slaves [ 521.449630][T10787] bond18 (unregistering): Released all slaves [ 521.495960][T19165] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 521.760689][T19237] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3446'. [ 521.803561][T19214] syz_tun: entered allmulticast mode [ 521.844617][T19212] syzkaller0: entered promiscuous mode [ 521.851108][T19212] syzkaller0: entered allmulticast mode [ 521.923801][T10787] : left promiscuous mode [ 522.524774][T19250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3447'. [ 522.653001][T10787] tipc: Disabling bearer [ 522.677542][T10787] tipc: Left network mode [ 522.883855][T10787] IPVS: stopping master sync thread 13239 ... [ 522.947703][T10787] IPVS: stopping backup sync thread 12929 ... [ 523.282231][T18795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.650626][T18795] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.972123][ T9427] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.980158][ T9427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.162666][ T9427] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.170827][ T9427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.777577][T19292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3459'. [ 524.852726][T19290] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 525.261934][T19302] pim6reg: entered allmulticast mode [ 525.349727][T19308] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 525.990910][T19319] netlink: 'syz.4.3465': attribute type 1 has an invalid length. [ 526.049865][T19321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3467'. [ 526.617888][T19331] gretap1: entered promiscuous mode [ 526.655571][T19331] gretap1: entered allmulticast mode [ 526.735042][T19331] team0: Port device gretap1 added [ 528.771201][T19384] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3477'. [ 528.917064][T19387] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3479'. [ 529.529707][T19400] netlink: 'syz.5.3481': attribute type 21 has an invalid length. [ 529.614840][T19400] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3481'. [ 529.824660][T19407] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3483'. [ 529.913535][T19407] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3483'. [ 530.283723][T19418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3486'. [ 530.525620][T19409] bond12 (unregistering): Released all slaves [ 530.840166][T18795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.023550][T10787] hsr_slave_0: left promiscuous mode [ 531.070172][T10787] hsr_slave_1: left promiscuous mode [ 531.108095][T10787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.153113][T10787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.183029][T10787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.209217][T10787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.357334][T10787] veth1_macvtap: left allmulticast mode [ 531.366549][T10787] veth0_vlan: left allmulticast mode [ 531.372586][T10787] veth1_macvtap: left promiscuous mode [ 531.379476][T10787] veth1_vlan: left promiscuous mode [ 531.919684][T19454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3492'. [ 531.948649][T19454] net_ratelimit: 1648 callbacks suppressed [ 531.948682][T19454] openvswitch: netlink: Flow actions attr not present in new flow. [ 532.430949][T10787] pim6reg (unregistering): left allmulticast mode [ 532.696340][T10787] team0 (unregistering): Port device team_slave_1 removed [ 532.716096][T10787] team0 (unregistering): Port device team_slave_0 removed [ 533.154264][T19464] netlink: 'syz.1.3493': attribute type 9 has an invalid length. [ 533.176674][T19465] netlink: 'syz.0.3494': attribute type 1 has an invalid length. [ 533.196077][T19465] netlink: 'syz.0.3494': attribute type 1 has an invalid length. [ 533.247877][T18795] veth0_vlan: entered promiscuous mode [ 533.302918][T18795] veth1_vlan: entered promiscuous mode [ 533.404093][T18795] veth0_macvtap: entered promiscuous mode [ 533.494326][T18795] veth1_macvtap: entered promiscuous mode [ 533.579326][T19479] netlink: 'syz.5.3497': attribute type 142 has an invalid length. [ 533.664600][T10787] IPVS: stop unused estimator thread 0... [ 533.695075][T18795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.733941][T19482] netlink: 'syz.1.3496': attribute type 1 has an invalid length. [ 533.745695][T19479] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3497'. [ 533.901707][T18795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.974067][T10791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.004422][T10791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.071394][T10789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.131356][T10789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.597727][ T9427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.650562][ T9427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.795960][ T9427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.844671][ T9427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.992762][T19531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3509'. [ 535.276249][T19542] x_tables: duplicate underflow at hook 1 [ 535.823410][T19564] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3519'. [ 536.035130][T19568] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 536.054366][T19568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 536.068856][T19568] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 536.094443][T19568] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 536.103198][T19568] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 536.213522][T19577] Bluetooth: MGMT ver 1.23 [ 536.280480][T19577] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3521'. [ 536.507397][T19586] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 536.606860][T19587] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 536.611237][T19586] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 536.710742][T19586] gretap1: entered promiscuous mode [ 536.723971][T19586] gretap1: entered allmulticast mode [ 536.761502][T19595] macsec1: entered promiscuous mode [ 537.640376][T19617] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3529'. [ 537.677704][T19617] netlink: 'syz.4.3529': attribute type 10 has an invalid length. [ 537.701073][T19617] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3529'. [ 538.159226][T19568] Bluetooth: hci3: command tx timeout [ 538.458879][T19656] netlink: 'syz.5.3536': attribute type 32 has an invalid length. [ 538.493151][T19656] netlink: 776 bytes leftover after parsing attributes in process `syz.5.3536'. [ 538.847411][T19673] netlink: 'syz.5.3539': attribute type 58 has an invalid length. [ 538.908423][T19673] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3539'. [ 539.025374][T19681] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3542'. [ 539.322454][T19690] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3544'. [ 539.370617][T19690] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.378047][T19690] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.437906][T19692] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3544'. [ 539.599585][T19568] Bluetooth: hci4: command 0x0406 tx timeout [ 540.182887][T19720] __nla_validate_parse: 1 callbacks suppressed [ 540.182906][T19720] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3553'. [ 540.240611][ T5640] Bluetooth: hci3: command tx timeout [ 540.345978][T19722] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3552'. [ 540.424992][T19729] ipt_REJECT: TCP_RESET invalid for non-tcp [ 540.425749][T19730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.824842][T19748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3559'. [ 541.093701][T19756] netlink: 'syz.3.3561': attribute type 1 has an invalid length. [ 541.224360][T19756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3561'. [ 541.809564][ T29] audit: type=1107 audit(1779581528.594:17): pid=19772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 542.092413][T19567] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.117250][T19787] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 542.130480][T19567] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.154279][T19567] bridge_slave_0: entered allmulticast mode [ 542.175796][T19567] bridge_slave_0: entered promiscuous mode [ 542.213978][T19567] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.219096][T19787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3568'. [ 542.237353][T19567] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.264725][T19567] bridge_slave_1: entered allmulticast mode [ 542.295425][T19567] bridge_slave_1: entered promiscuous mode [ 542.318553][ T5640] Bluetooth: hci3: command tx timeout [ 542.576423][T19567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.706037][T19567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.807860][T19815] openvswitch: netlink: Missing key (keys=40, expected=100) [ 542.984845][T19567] team0: Port device team_slave_0 added [ 543.006780][T19567] team0: Port device team_slave_1 added [ 543.159249][T19567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.175209][T19567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.220381][T19567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.239895][T19831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3578'. [ 543.292558][T19567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.322628][T19567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.444977][T19567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.507382][T19836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3581'. [ 543.535497][T19836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3581'. [ 543.767560][T19846] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3584'. [ 543.796848][T19846] xt_cgroup: invalid path, errno=-2 [ 543.821066][T19567] hsr_slave_0: entered promiscuous mode [ 543.837279][T19846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.855219][T19567] hsr_slave_1: entered promiscuous mode [ 543.874185][T19567] debugfs: 'hsr0' already exists in 'hsr' [ 543.900775][T19567] Cannot create hsr debugfs directory [ 544.401589][ T5640] Bluetooth: hci3: command tx timeout [ 544.682607][T19876] ieee802154 phy1 wpan1: encryption failed: -22 [ 544.707683][T19889] netlink: 576 bytes leftover after parsing attributes in process `syz.3.3588'. [ 545.323419][T19567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.361312][T19567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.376442][T19567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 545.650043][T19908] syzkaller1: entered promiscuous mode [ 545.684824][T19908] syzkaller1: entered allmulticast mode [ 545.887361][T19930] __nla_validate_parse: 2 callbacks suppressed [ 545.887398][T19930] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3597'. [ 546.022056][T19567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.051285][T19567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.066134][T19936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3597'. [ 546.082632][T19567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 546.106305][T19932] netlink: 'syz.1.3598': attribute type 4 has an invalid length. [ 546.147095][T19941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3600'. [ 546.201248][T19936] team1: entered promiscuous mode [ 546.236123][T19936] team1: entered allmulticast mode [ 546.362058][T19567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.374145][T19567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.391673][T19567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 546.391905][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026752c00: rx timeout, send abort [ 546.583366][T19949] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3602'. [ 546.886422][T19567] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.925021][T19968] x_tables: duplicate underflow at hook 2 [ 546.928860][T19567] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.963876][T19567] netdevsim netdevsim0  (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 546.994204][T19972] openvswitch: netlink: Key type 30 is not supported [ 547.057292][T19969] tc_dump_action: action bad kind [ 548.035729][T20011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.048749][T19567] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 548.091182][T20011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.103328][T19567] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 548.152786][T20010] netlink: 'syz.1.3615': attribute type 1 has an invalid length. [ 548.168917][T19567] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 548.179129][T20010] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3615'. [ 548.204693][T19567] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 548.230062][T19567] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 548.237687][T20010] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3615'. [ 548.249567][T20006] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 548.261410][T19567] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 548.286376][T20010] netlink: 'syz.1.3615': attribute type 1 has an invalid length. [ 548.318316][T20010] netlink: 634 bytes leftover after parsing attributes in process `syz.1.3615'. [ 548.333609][T19567] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 548.370418][T19567] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 548.869124][T20039] netlink: 'syz.3.3621': attribute type 1 has an invalid length. [ 548.897063][T19567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.053468][T20039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 549.174521][T20052] sctp: [Deprecated]: syz.1.3622 (pid 20052) Use of int in max_burst socket option deprecated. [ 549.174521][T20052] Use struct sctp_assoc_value instead [ 549.383585][T20048] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 549.405438][T20048] bond1: (slave batadv1): making interface the new active one [ 549.423815][T20048] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 549.434165][T20049] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3622'. [ 549.466324][T20049] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3622'. [ 549.597879][T19567] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.655807][T10783] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.663051][T10783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.763425][T10783] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.770664][T10783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.996684][T20058] syzkaller0: entered promiscuous mode [ 550.009639][T20058] syzkaller0: entered allmulticast mode [ 550.067812][T20077] veth5: entered promiscuous mode [ 550.074128][T20077] veth5: entered allmulticast mode [ 550.572139][T20094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3630'. [ 551.908350][T20124] __nla_validate_parse: 2 callbacks suppressed [ 551.908392][T20124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3634'. [ 551.926938][T20124] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3634'. [ 551.938045][T20124] netlink: 'syz.5.3634': attribute type 5 has an invalid length. [ 555.088857][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3639'. [ 555.148372][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3639'. [ 555.186213][T20141] tipc: Started in network mode [ 555.213865][T20141] tipc: Node identity 7f, cluster identity 4711 [ 555.251734][T20144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3639'. [ 555.259035][T20141] tipc: Node number set to 127 [ 555.392413][T20154] netlink: zone id is out of range [ 555.414172][T20154] netlink: del zone limit has 4 unknown bytes [ 555.673071][T20150] syzkaller1: entered promiscuous mode [ 555.685749][T20150] syzkaller1: entered allmulticast mode [ 556.259878][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3643'. [ 556.879800][T20198] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3646'. [ 557.134709][T20203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3647'. [ 557.204842][T19567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.367775][T19567] veth0_vlan: entered promiscuous mode [ 557.424511][T19567] veth1_vlan: entered promiscuous mode [ 557.546669][T19567] veth0_macvtap: entered promiscuous mode [ 557.578941][T19567] veth1_macvtap: entered promiscuous mode [ 557.627996][T19567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.673853][T19567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.728062][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.763401][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.821529][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.851852][T20217] xt_cluster: node mask cannot exceed total number of nodes [ 557.868501][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.296522][T20232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3655'. [ 558.342927][T10783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.391473][T10783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.490025][T20238] netlink: zone id is out of range [ 558.523928][T20238] netlink: zone id is out of range [ 558.561082][T20238] netlink: zone id is out of range [ 558.604837][T20238] netlink: zone id is out of range [ 558.625233][T10785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.643019][T20238] netlink: zone id is out of range [ 558.665515][T10785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.677024][T20238] netlink: zone id is out of range [ 558.684999][T20244] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3657'. [ 558.694956][T20238] netlink: zone id is out of range [ 558.694970][T20238] netlink: zone id is out of range [ 559.603770][T20277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3665'. [ 560.142661][T20295] xfrm0 speed is unknown, defaulting to 1000 [ 560.267326][T20295] xfrm0 speed is unknown, defaulting to 1000 [ 560.336213][T20295] xfrm0 speed is unknown, defaulting to 1000 [ 560.882949][T20313] syzkaller0: entered promiscuous mode [ 560.917539][T20313] syzkaller0: entered allmulticast mode [ 561.219902][T20327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3676'. [ 561.335995][T20327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3676'. [ 561.403072][T20295] infiniband syz1: set down [ 561.422117][T20295] infiniband syz1: added xfrm0 [ 561.495625][T20295] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 561.511160][T20295] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 561.531838][ T6531] xfrm0 speed is unknown, defaulting to 1000 [ 561.551199][T20295] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 561.592199][T20335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3677'. [ 561.644078][T20295] RDS/IB: syz1: added [ 561.667443][T20295] smc: adding ib device syz1 with port count 1 [ 561.685012][T20295] smc: ib device syz1 port 1 has no pnetid [ 561.705212][ T6531] xfrm0 speed is unknown, defaulting to 1000 [ 561.724624][T20295] xfrm0 speed is unknown, defaulting to 1000 [ 561.831611][T20343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3679'. [ 561.877971][T20343] net_ratelimit: 5 callbacks suppressed [ 561.877989][T20343] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 561.911724][T20344] netlink: 'syz.0.3678': attribute type 32 has an invalid length. [ 561.949217][T20344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3678'. [ 562.233496][T20344] bond1: Setting coupled_control to off (0) [ 562.274059][T20361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3678'. [ 562.351490][T20355] netlink: 'syz.0.3678': attribute type 11 has an invalid length. [ 562.366462][T20363] xt_hashlimit: size too large, truncated to 1048576 [ 562.434979][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3678'. [ 562.454607][T20364] xt_hashlimit: size too large, truncated to 1048576 [ 563.125155][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.194971][T20295] xfrm0 speed is unknown, defaulting to 1000 [ 564.236031][T20415] x_tables: duplicate entry at hook 3 [ 564.274936][T20416] x_tables: duplicate entry at hook 3 [ 564.447229][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3696'. [ 564.556180][T20424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3697'. [ 564.578370][T20295] xfrm0 speed is unknown, defaulting to 1000 [ 564.924239][T20428] syzkaller0: entered promiscuous mode [ 564.940286][T20428] syzkaller0: entered allmulticast mode [ 564.976196][T20428] syzkaller1: entered promiscuous mode [ 564.999786][T20428] syzkaller1: entered allmulticast mode [ 566.013974][T20295] xfrm0 speed is unknown, defaulting to 1000 [ 566.494117][T20464] netlink: 'syz.0.3710': attribute type 1 has an invalid length. [ 566.575667][T20464] openvswitch: netlink: Multiple metadata blocks provided [ 566.857837][T20478] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3713'. [ 567.106841][T20295] xfrm0 speed is unknown, defaulting to 1000 [ 567.644331][T20497] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3719'. [ 567.756725][T20499] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 567.864843][T20493] sit0: entered promiscuous mode [ 567.989390][T20493] netlink: 'syz.0.3716': attribute type 1 has an invalid length. [ 568.054475][T20493] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3716'. [ 568.085108][T20516] netlink: 'syz.5.3722': attribute type 4 has an invalid length. [ 568.413781][T20295] xfrm0 speed is unknown, defaulting to 1000 [ 568.494345][T20524] ipt_REJECT: TCP_RESET invalid for non-tcp [ 568.748044][T20528] Bluetooth: MGMT ver 1.23 [ 568.776698][T20528] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3728'. [ 568.975005][T20530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3729'. [ 569.025684][T20532] syzkaller0: entered promiscuous mode [ 569.047619][T20532] syzkaller0: entered allmulticast mode [ 569.369733][T20295] xfrm0 speed is unknown, defaulting to 1000 [ 569.482054][T20541] sock: sock_timestamping_bind_phc: sock not bind to device [ 569.543257][T20544] openvswitch: netlink: IP tunnel dst address not specified [ 569.985680][T20555] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3734'. [ 570.310759][T20560] syzkaller1: entered promiscuous mode [ 570.344379][T20560] syzkaller1: entered allmulticast mode [ 571.329440][T20594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3745'. [ 571.512355][T20596] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3746'. [ 573.433491][T20565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.812174][T20615] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3751'. [ 574.225840][T20634] Cannot find set identified by id 1 to match [ 574.323442][T20638] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3758'. [ 574.427009][T20643] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3760'. [ 574.588799][T20649] netlink: 'syz.0.3763': attribute type 1 has an invalid length. [ 574.750997][T20657] netlink: 'syz.4.3765': attribute type 1 has an invalid length. [ 575.023701][T20657] bond1: entered promiscuous mode [ 575.046698][T20657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.177819][T20661] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 575.205701][T20661] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 575.263900][T20661] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 575.991179][T20699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3770'. [ 576.027383][T20699] SET target dimension over the limit! [ 576.254046][T20635] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 576.266045][T20635] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 576.299322][T20714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3773'. [ 576.587520][T20723] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3776'. [ 576.595995][T20635] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 576.613228][T20635] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 576.633121][T20723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3776'. [ 576.662988][T20723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3776'. [ 576.737530][T20727] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3777'. [ 576.763957][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 577.159592][T20635] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 577.195494][T20635] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 577.565500][T20635] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 577.594601][T20635] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 577.750078][T20635] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 577.762035][T20635] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 578.367345][T20781] 8021q: VLANs not supported on wg2 [ 578.455792][T20792] veth0: entered promiscuous mode [ 578.511463][T20791] veth0: left promiscuous mode [ 578.711046][T20797] xt_policy: output policy not valid in PREROUTING and INPUT [ 578.927239][T20810] __nla_validate_parse: 2 callbacks suppressed [ 578.927260][T20810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3793'. [ 578.958736][T20811] erspan0: entered allmulticast mode [ 578.989578][T20810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3793'. [ 579.012734][T20813] netlink: 'syz.0.3793': attribute type 21 has an invalid length. [ 579.609971][T20838] tipc: Enabling of bearer rejected, failed to enable media [ 579.887633][T20854] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3804'. [ 579.949167][T20854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3804'. [ 579.984856][T20854] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3804'. [ 580.034664][T20854] netlink: 'syz.1.3804': attribute type 3 has an invalid length. [ 580.064838][T20854] netlink: 'syz.1.3804': attribute type 2 has an invalid length. [ 580.090793][T20854] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3804'. [ 580.134081][T20866] openvswitch: netlink: EtherType 50a is less than min 600 [ 580.871016][T20896] nbd: must specify a size in bytes for the device [ 580.890100][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3812'. [ 580.905512][T20890] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3813'. [ 580.914924][T20887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3812'. [ 580.928749][T20890] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3813'. [ 581.588424][T20931] netlink: 'syz.1.3823': attribute type 21 has an invalid length. [ 582.075504][T20934] syzkaller0: entered promiscuous mode [ 582.096701][T20934] syzkaller0: entered allmulticast mode [ 582.503455][T20979] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20003 [ 586.190110][T20974] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 586.506083][T21021] veth3: entered allmulticast mode [ 586.542085][T21029] netlink: 'syz.4.3837': attribute type 1 has an invalid length. [ 586.601086][T21035] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 586.622555][T21038] __nla_validate_parse: 3 callbacks suppressed [ 586.622574][T21038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3837'. [ 586.692955][T21038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3837'. [ 586.723726][T21045] xt_hashlimit: size too large, truncated to 1048576 [ 586.932772][T21029] bond2: entered promiscuous mode [ 586.971735][T21029] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.060506][T21047] tipc: Enabling of bearer rejected, failed to enable media [ 587.151890][T21051] bond2: (slave bridge2): making interface the new active one [ 587.171605][T21060] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3842'. [ 587.172151][T21051] bridge2: entered promiscuous mode [ 587.208062][T21051] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 587.262762][T21055] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.293416][T21055] bridge_slave_0 (unregistering): left allmulticast mode [ 587.362530][T21055] bridge_slave_0 (unregistering): left promiscuous mode [ 587.408999][T21055] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.545794][T21060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.593328][T21060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.652257][T21060] bond0 (unregistering): Released all slaves [ 587.841856][T21076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3845'. [ 588.084703][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3848'. [ 588.685692][T21120] netlink: 'syz.4.3855': attribute type 1 has an invalid length. [ 588.702911][T21119] Bluetooth: MGMT ver 1.23 [ 589.323493][T21147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3863'. [ 589.633024][T21157] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3867'. [ 589.767574][T21157] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 589.795306][T21160] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 590.230851][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3871'. [ 590.474463][T21195] macvtap1: entered promiscuous mode [ 590.495212][T21195] team0: entered promiscuous mode [ 590.517189][T21195] team_slave_0: entered promiscuous mode [ 590.536812][T21195] team_slave_1: entered promiscuous mode [ 590.545192][T21195] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 590.562017][T21195] team0: Device macvtap1 is already an upper device of the team interface [ 590.573173][T21195] team0: left promiscuous mode [ 590.659315][ T42] team_slave_0: left promiscuous mode [ 590.664822][ T42] team_slave_1: left promiscuous mode [ 590.974763][T21199] syzkaller0: entered promiscuous mode [ 590.988655][T21199] syzkaller0: entered allmulticast mode [ 591.056290][T21217] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3880'. [ 591.513487][T21238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.539345][T21238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3883'. [ 595.485097][T21247] netlink: 'syz.3.3886': attribute type 1 has an invalid length. [ 595.525170][T21253] xt_hashlimit: overflow, rate too high: 0 [ 595.612296][T21257] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 595.708237][T21261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.001286][T21279] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3896'. [ 596.001327][T21276] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3896'. [ 596.054284][T21276] openvswitch: netlink: Flow key attr not present in new flow. [ 596.137613][T21279] openvswitch: netlink: Flow key attr not present in new flow. [ 596.267414][T21292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3897'. [ 596.555432][T21296] netlink: 'syz.5.3899': attribute type 1 has an invalid length. [ 596.714124][T21296] 8021q: adding VLAN 0 to HW filter on device bond3 [ 596.909702][T21303] vlan2: entered allmulticast mode [ 596.932991][T21303] bond3: entered allmulticast mode [ 597.090594][T21312] bond3: (slave geneve2): making interface the new active one [ 597.112944][T21312] geneve2: entered allmulticast mode [ 597.144818][T21312] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 597.677651][T21337] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 598.032207][T21351] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3909'. [ 598.615308][T21380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3917'. [ 598.628371][T21380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3917'. [ 598.672953][T21378] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3916'. [ 599.147090][T21400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3921'. [ 599.522854][T21404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.847294][ T6540] IPVS: starting estimator thread 0... [ 599.885149][T21426] netlink: 'syz.3.3924': attribute type 1 has an invalid length. [ 599.948880][T21424] IPVS: using max 29 ests per chain, 69600 per kthread [ 600.110011][T21438] ieee802154 phy1 wpan1: encryption failed: -22 [ 601.270388][T21426] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 601.533218][T21452] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3928'. [ 601.655788][T21461] netlink: 'syz.3.3929': attribute type 1 has an invalid length. [ 601.685233][T21461] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3929'. [ 602.133915][T21481] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.3934'. [ 602.432847][T21494] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3937'. [ 602.525830][T21494] TCP: TCP_TX_DELAY enabled [ 603.524474][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3947'. [ 603.573293][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3947'. [ 604.006190][T21545] "syz.3.3947" (21545) uses obsolete ecb(arc4) skcipher [ 604.606743][T21598] tipc: Failed to remove unknown binding: 66,1,1/0:2198425674/2198425676 [ 604.650242][T21598] tipc: Failed to remove unknown binding: 66,1,1/0:2198425674/2198425676 [ 604.905084][T21609] netlink: 'syz.3.3963': attribute type 1 has an invalid length. [ 604.993341][T21609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'. [ 605.053793][T21609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3963'. [ 605.353642][T21626] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3966'. [ 605.390055][T21619] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 605.421905][T21619] bond3 (unregistering): Released all slaves [ 605.669501][T21644] tipc: Enabling of bearer rejected, failed to enable media [ 605.715174][T21650] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3973'. [ 605.749513][T21649] IPv6: NLM_F_CREATE should be specified when creating new route [ 605.939376][T21659] netlink: 'syz.0.3975': attribute type 5 has an invalid length. [ 606.683850][T21691] netlink: 'syz.5.3983': attribute type 1 has an invalid length. [ 606.899783][T21709] __nla_validate_parse: 1 callbacks suppressed [ 606.899802][T21709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3988'. [ 606.953541][T21710] netlink: 'syz.0.3989': attribute type 21 has an invalid length. [ 607.344146][T21710] syz_tun: entered allmulticast mode [ 607.464655][T21710] pim6reg: entered allmulticast mode [ 607.533984][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3993'. [ 607.638979][T21740] netlink: 'syz.5.3994': attribute type 1 has an invalid length. [ 607.673340][T21710] veth5: entered allmulticast mode [ 607.880029][T21742] bond5: (slave geneve3): making interface the new active one [ 607.893849][T21742] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 607.918709][T10787] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 607.973873][T10787] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 608.012478][T10787] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 608.207722][T21765] netlink: 'syz.5.3999': attribute type 4 has an invalid length. [ 608.393765][T21753] netem: change failed [ 608.419274][T10787] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 609.202216][T21801] netlink: 'syz.1.4011': attribute type 10 has an invalid length. [ 609.283491][T21796] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 609.330936][T21801] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.413772][T21801] bond0: (slave team0): Enslaving as an active interface with an up link [ 609.575649][T21815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4016'. [ 609.604920][T21816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4016'. [ 609.692346][T21822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4018'. [ 610.145168][T21841] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4025'. [ 610.294153][T21848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4026'. [ 610.323589][T21848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.367787][T21854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4026'. [ 610.426842][T21848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.721074][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4033'. [ 610.893835][T21851] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 610.914418][T21851] syzkaller0: entered promiscuous mode [ 610.920980][T21851] syzkaller0: entered allmulticast mode [ 611.157654][T21871] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4035'. [ 611.370898][T21889] syzkaller1: entered promiscuous mode [ 611.386773][T21889] syzkaller1: entered allmulticast mode [ 611.496837][T21898] ip6t_rpfilter: unknown options [ 612.174533][T21936] __nla_validate_parse: 4 callbacks suppressed [ 612.174553][T21936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4053'. [ 612.368696][T21942] netlink: 'syz.0.4055': attribute type 1 has an invalid length. [ 612.466681][T21942] bond2: entered promiscuous mode [ 612.472914][T21942] 8021q: adding VLAN 0 to HW filter on device bond2 [ 612.492452][T21940] syzkaller1: entered allmulticast mode [ 612.937523][T21957] syzkaller1: entered promiscuous mode [ 612.965734][T21957] syzkaller1: entered allmulticast mode [ 613.007328][T21967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4061'. [ 613.462357][T21980] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 613.582130][T21983] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4066'. [ 613.852362][T21983] pim6reg1: entered promiscuous mode [ 613.876352][T21983] pim6reg1: entered allmulticast mode [ 614.022609][T22004] netlink: 'syz.1.4072': attribute type 1 has an invalid length. [ 614.132439][T22004] 8021q: adding VLAN 0 to HW filter on device bond5 [ 614.161958][T22007] netem: incorrect gi model size [ 614.175994][T22007] netem: change failed [ 614.207495][T22011] bond5: (slave gretap1): making interface the new active one [ 614.227398][T22011] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 614.233997][T22018] netlink: 'syz.0.4076': attribute type 1 has an invalid length. [ 614.326794][T22012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4074'. [ 614.352431][T22019] netlink: 'syz.3.4075': attribute type 1 has an invalid length. [ 614.647481][T22009] syzkaller0: entered promiscuous mode [ 614.664637][T22009] syzkaller0: entered allmulticast mode [ 614.725759][T22022] bond3: (slave gretap1): making interface the new active one [ 614.740746][T22022] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 614.833221][T22012] 8021q: adding VLAN 0 to HW filter on device bond3 [ 614.888808][T22025] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 614.910931][T22028] bond2: (slave gretap2): making interface the new active one [ 614.920068][T22028] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 614.936494][T22018] macvlan2: entered promiscuous mode [ 614.942266][T22018] macvlan2: entered allmulticast mode [ 614.948723][T22018] bond3: entered promiscuous mode [ 614.953951][T22018] gretap1: entered promiscuous mode [ 614.961437][T22018] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 614.969861][T22018] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 614.986486][T22018] bond3: left promiscuous mode [ 614.991598][T22018] gretap1: left promiscuous mode [ 615.093852][ T6546] IPVS: starting estimator thread 0... [ 615.190592][T22055] IPVS: using max 35 ests per chain, 84000 per kthread [ 615.382158][T22066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4083'. [ 619.604877][T22085] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4089'. [ 619.745296][T22087] xt_l2tp: v2 doesn't support IP mode [ 619.769497][T22087] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.4091'. [ 619.994293][T22099] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 620.161215][ T29] audit: type=1804 audit(1779581606.934:18): pid=22104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4096" name="/newroot/169/cgroup.controllers" dev="tmpfs" ino=876 res=1 errno=0 [ 620.195137][ T29] audit: type=1800 audit(1779581606.944:19): pid=22104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4096" name="cgroup.controllers" dev="tmpfs" ino=876 res=0 errno=0 [ 621.062077][T22131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4104'. [ 621.176605][T22076] xfrm0 speed is unknown, defaulting to 1000 [ 621.464868][T22144] xt_socket: unknown flags 0x8 [ 621.531846][T22147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4111'. [ 621.595425][T22147] 8021q: adding VLAN 0 to HW filter on device bond3 [ 621.651542][T22147] team0: Device gtp0 is up. Set it down before adding it as a team port [ 621.674391][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4111'. [ 621.961312][T22155] bond3 (unregistering): Released all slaves [ 622.013752][T22167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4115'. [ 622.220427][T22173] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4117'. [ 622.296135][T22177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4118'. [ 622.321427][T22177] xt_hashlimit: size too large, truncated to 1048576 [ 622.375784][T22179] –: renamed from vxcan1 (while UP) [ 623.000678][T22188] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4123'. [ 623.065676][T22188] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4123'. [ 623.901615][T22212] bond0: entered promiscuous mode [ 623.923416][T22212] bond_slave_0: entered promiscuous mode [ 623.940761][T22212] bond_slave_1: entered promiscuous mode [ 623.984046][T22212] bond0: left promiscuous mode [ 623.994033][T22212] bond_slave_0: left promiscuous mode [ 624.021427][T22212] bond_slave_1: left promiscuous mode [ 624.249729][T22222] xt_hashlimit: size too large, truncated to 1048576 [ 624.562399][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.605537][T22228] bridge_slave_0 (unregistering): left allmulticast mode [ 624.636961][T22228] bridge_slave_0 (unregistering): left promiscuous mode [ 624.660583][T22228] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.834717][T22238] __nla_validate_parse: 1 callbacks suppressed [ 624.834738][T22238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4134'. [ 624.973945][T22246] xt_hashlimit: size too large, truncated to 1048576 [ 625.057389][T22244] xt_hashlimit: size too large, truncated to 1048576 [ 625.451707][T22266] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 626.284146][T22298] openvswitch: netlink: Flow key attribute not present in set flow. [ 626.355709][T22296] veth0_macvtap: entered allmulticast mode [ 626.380661][T22296] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 626.604665][T22305] netlink: 'syz.5.4151': attribute type 1 has an invalid length. [ 626.714259][T22310] syzkaller0: entered promiscuous mode [ 626.730991][T22310] syzkaller0: entered allmulticast mode [ 626.866006][T22317] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4155'. [ 626.932628][T22320] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4156'. [ 626.960398][T22320] netlink: Conntrack attr has 3 unknown bytes [ 627.733202][T22350] netlink: 'syz.3.4162': attribute type 20 has an invalid length. [ 627.781271][T22350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4162'. [ 627.996164][T22343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4162'. [ 628.034783][T10783] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 628.050494][T22358] netlink: 'syz.1.4165': attribute type 1 has an invalid length. [ 628.067751][T10783] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.076507][T22358] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4165'. [ 628.094099][T20684] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.119473][T22343] team0: Cannot enslave team device to itself [ 628.138496][T20684] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.173590][T22343] team0: Cannot enslave team device to itself [ 628.251335][T22364] openvswitch: netlink: Missing key (keys=40, expected=100) [ 628.358782][T22365] veth5: entered allmulticast mode [ 628.819193][T22383] syzkaller0: entered promiscuous mode [ 628.833569][T22383] syzkaller0: entered allmulticast mode [ 628.962836][T22389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4172'. [ 629.000149][T22389] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4172'. [ 629.335492][T22404] xt_TPROXY: Can be used only with -p tcp or -p udp [ 629.434638][T22408] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4180'. [ 629.475636][T22408] netlink: 'syz.5.4180': attribute type 1 has an invalid length. [ 629.504633][T22408] netlink: 216 bytes leftover after parsing attributes in process `syz.5.4180'. [ 656.313797][T22446] netlink: 'syz.5.4188': attribute type 11 has an invalid length. [ 656.502161][T22458] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 656.535419][T22459] netlink: 'syz.4.4195': attribute type 1 has an invalid length. [ 656.740060][T22463] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 656.751148][T22463] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 656.776975][T22463] bond5: (slave ip6gre1): making interface the new active one [ 656.786653][T22463] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 657.172752][T22483] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 657.456199][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4201'. [ 657.474743][T22495] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4202'. [ 657.731739][T22498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4201'. [ 657.824097][T22506] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4205'. [ 657.956049][T22509] ipt_ECN: cannot use operation on non-tcp rule [ 658.074020][T22515] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 658.933092][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4221'. [ 658.999754][T22546] netlink: 'syz.3.4221': attribute type 1 has an invalid length. [ 659.104020][T22546] netlink: 'syz.3.4221': attribute type 2 has an invalid length. [ 659.503843][T22566] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 659.576603][T22574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4225'. [ 659.578295][T22566] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 659.617837][T22566] gretap3: entered promiscuous mode [ 659.637423][T22566] gretap3: entered allmulticast mode [ 659.724398][T22580] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4229'. [ 659.828805][T22577] netlink: 'syz.1.4219': attribute type 2 has an invalid length. [ 660.661396][T22597] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4235'. [ 662.115849][T22648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4245'. [ 662.284932][T22656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4247'. [ 662.537644][T22662] netlink: 'syz.4.4248': attribute type 1 has an invalid length. [ 662.573046][T22662] netlink: 'syz.4.4248': attribute type 2 has an invalid length. [ 662.626943][T22667] netlink: 'syz.4.4248': attribute type 1 has an invalid length. [ 662.652191][T22665] netlink: 'syz.1.4249': attribute type 2 has an invalid length. [ 662.666822][T22667] netlink: 'syz.4.4248': attribute type 2 has an invalid length. [ 662.669824][T22669] netlink: 'syz.3.4250': attribute type 1 has an invalid length. [ 662.678947][T22665] netlink: 'syz.1.4249': attribute type 2 has an invalid length. [ 662.755400][T22669] 8021q: adding VLAN 0 to HW filter on device bond3 [ 662.962161][T22669] vlan2: entered promiscuous mode [ 662.990380][T22669] bond3: entered promiscuous mode [ 663.015554][T22669] vlan2: entered allmulticast mode [ 663.046933][T22669] bond3: entered allmulticast mode [ 663.140155][T22685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 663.213963][T22679] bond3: (slave bridge2): making interface the new active one [ 663.283070][T22679] bridge2: entered promiscuous mode [ 663.418671][T22679] bridge2: entered allmulticast mode [ 663.498567][T22679] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 663.896653][T22705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4258'. [ 663.942717][T22705] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4258'. [ 664.278880][T22716] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4259'. [ 664.323209][T22718] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4261'. [ 664.442437][T22721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4263'. [ 664.528647][T22721] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 665.028808][T22749] openvswitch: netlink: IP tunnel dst address not specified [ 665.216871][T22745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4268'. [ 665.301959][T22745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4268'. [ 665.984583][T22780] netlink: 'syz.5.4276': attribute type 21 has an invalid length. [ 666.092849][T22783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4276'. [ 666.332656][T22780] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 666.385771][T22780] bond8 (unregistering): Released all slaves [ 666.408743][T22796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4281'. [ 666.541102][T22783] erspan0: entered promiscuous mode [ 666.623376][T22794] IPVS: Error connecting to the multicast addr [ 666.671909][T22802] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 666.839534][T22817] netlink: 'syz.1.4287': attribute type 49 has an invalid length. [ 666.911948][T22804] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 667.334110][T22834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4292'. [ 667.401606][T22826] bond6: (slave gre0): Device is not bonding slave [ 667.473828][T22826] bond6: option active_slave: invalid value (gre0) [ 667.604376][T22826] bond6 (unregistering): Released all slaves [ 667.666071][T22835] netlink: 'syz.0.4289': attribute type 12 has an invalid length. [ 667.688377][T22835] netlink: 'syz.0.4289': attribute type 29 has an invalid length. [ 667.697719][T22835] netlink: 'syz.0.4289': attribute type 1 has an invalid length. [ 667.720228][T22835] netlink: 'syz.0.4289': attribute type 2 has an invalid length. [ 667.886123][T22853] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 668.452048][T22868] netlink: 'syz.4.4300': attribute type 1 has an invalid length. [ 668.552486][T22873] netlink: 'syz.1.4301': attribute type 32 has an invalid length. [ 668.558753][T22868] 8021q: adding VLAN 0 to HW filter on device bond6 [ 668.615099][T22873] netlink: 'syz.1.4301': attribute type 5 has an invalid length. [ 668.758725][T22882] netlink: 'syz.5.4306': attribute type 1 has an invalid length. [ 668.907425][T22895] ip6t_srh: unknown srh invflags 4000 [ 668.921645][T22895] xt_TCPMSS: Only works on TCP SYN packets [ 669.009989][T22886] bond8: (slave gretap3): making interface the new active one [ 669.021007][T22886] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 669.152438][T22882] macvlan2: entered promiscuous mode [ 669.158003][T22882] macvlan2: entered allmulticast mode [ 669.166110][T22882] bond8: entered promiscuous mode [ 669.171493][T22882] gretap3: entered promiscuous mode [ 669.177726][T22882] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 669.200832][T22882] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 669.243271][T22882] bond8: left promiscuous mode [ 669.250258][T22882] gretap3: left promiscuous mode [ 669.480169][T22913] netlink: 'syz.4.4311': attribute type 10 has an invalid length. [ 669.573957][T22915] xt_hashlimit: size too large, truncated to 1048576 [ 669.614908][T22917] __nla_validate_parse: 8 callbacks suppressed [ 669.614927][T22917] netlink: 15 bytes leftover after parsing attributes in process `syz.1.4313'. [ 669.975633][T22934] netlink: 'syz.4.4318': attribute type 1 has an invalid length. [ 669.985194][T22934] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4318'. [ 670.064257][T22936] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4318'. [ 670.067988][T22924] syzkaller0: entered promiscuous mode [ 670.092310][T22924] syzkaller0: entered allmulticast mode [ 670.102383][T22939] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:19999 [ 670.670379][T22963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4326'. [ 670.919556][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c88f800: rx timeout, send abort [ 671.432169][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c88fc00: rx timeout, send abort [ 671.440548][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c88f800: abort rx timeout. Force session deactivation [ 671.945185][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c88fc00: abort rx timeout. Force session deactivation [ 675.034198][T22969] xt_hashlimit: size too large, truncated to 1048576 [ 675.131129][T22974] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4328'. [ 675.786940][T22995] xt_CT: You must specify a L4 protocol and not use inversions on it [ 679.293278][T23014] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4339'. [ 679.711871][T23025] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4342'. [ 679.886971][T23028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4342'. [ 679.912465][T23028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4342'. [ 680.527722][T23038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4344'. [ 680.653026][T23046] sctp: [Deprecated]: syz.4.4348 (pid 23046) Use of int in max_burst socket option. [ 680.653026][T23046] Use struct sctp_assoc_value instead [ 680.953067][T23055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4350'. [ 680.997192][T23055] macvlan2: entered promiscuous mode [ 681.235982][T23071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4356'. [ 681.257070][T23069] ip6tnl1: entered allmulticast mode [ 681.299622][T23072] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4355'. [ 681.377037][T23074] tipc: Enabling of bearer rejected, failed to enable media [ 681.416570][T23075] tipc: Enabling of bearer rejected, failed to enable media [ 681.440992][T23074] syzkaller0: entered promiscuous mode [ 681.450051][T23080] tls_set_device_offload_rx: netdev not found [ 681.470493][T23074] syzkaller0: entered allmulticast mode [ 681.499150][T23074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4357'. [ 681.499608][T23036] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.4345:23036 [ 681.522723][T23074] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4357'. [ 681.555141][T23074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4357'. [ 681.595498][T23074] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4357'. [ 681.626786][T23074] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4357'. [ 681.823861][T23087] bond4 (unregistering): Released all slaves [ 681.976925][T23086] veth9: entered allmulticast mode [ 682.215718][T23103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4362'. [ 682.314502][T23112] xt_hashlimit: size too large, truncated to 1048576 [ 682.327858][T23114] validate_nla: 1 callbacks suppressed [ 682.327876][T23114] netlink: 'syz.4.4366': attribute type 9 has an invalid length. [ 682.542264][T23121] openvswitch: netlink: Flow key attr not present in new flow. [ 683.100648][T23146] netlink: 'syz.3.4373': attribute type 9 has an invalid length. [ 683.626496][T23170] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.037255][T23188] macvtap1: entered promiscuous mode [ 684.057988][T23188] macvtap1: entered allmulticast mode [ 684.090984][T23188] veth1_vlan: entered allmulticast mode [ 684.499644][T23210] netlink: 'syz.1.4389': attribute type 1 has an invalid length. [ 684.691552][T23210] 8021q: adding VLAN 0 to HW filter on device bond6 [ 684.844826][T23217] syzkaller0: entered promiscuous mode [ 684.861196][T23217] syzkaller0: entered allmulticast mode [ 686.015047][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.180507][T23234] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.187799][T23234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.198568][T23234] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.205770][T23234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.759290][T23258] netlink: 'syz.4.4400': attribute type 11 has an invalid length. [ 689.784723][T23258] __nla_validate_parse: 6 callbacks suppressed [ 689.784742][T23258] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4400'. [ 690.354861][T23292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4409'. [ 690.646626][T23301] sctp: [Deprecated]: syz.0.4411 (pid 23301) Use of int in maxseg socket option. [ 690.646626][T23301] Use struct sctp_assoc_value instead [ 690.785690][T23309] netlink: 'syz.5.4414': attribute type 5 has an invalid length. [ 691.300425][T23320] bond9: entered promiscuous mode [ 691.318754][T23320] bond9: entered allmulticast mode [ 691.336270][T23320] 8021q: adding VLAN 0 to HW filter on device bond9 [ 691.377660][T23331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4422'. [ 691.632359][T23336] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.4426'. [ 691.666651][T23339] netlink: 'syz.3.4424': attribute type 1 has an invalid length. [ 691.681072][T23339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4424'. [ 691.742227][T23341] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.4427'. [ 691.786168][T23341] netlink: Unknown conntrack attr (type=2304, max=9) [ 691.887980][T23341] macvtap1: entered promiscuous mode [ 691.894131][T23341] macvtap1: entered allmulticast mode [ 691.900237][T23341] veth1_vlan: entered allmulticast mode [ 691.912646][T23339] syzkaller0: entered promiscuous mode [ 691.938735][T23339] syzkaller0: entered allmulticast mode [ 692.082774][T23350] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4430'. [ 692.257450][T23358] bond0: (slave bond_slave_1): Releasing backup interface [ 692.308210][T23358] netlink: 'syz.4.4434': attribute type 1 has an invalid length. [ 692.455320][T23358] bond7: entered promiscuous mode [ 692.476627][T23358] 8021q: adding VLAN 0 to HW filter on device bond7 [ 692.545999][T23367] 8021q: adding VLAN 0 to HW filter on device bond7 [ 692.555491][T23373] netlink: 'syz.0.4435': attribute type 9 has an invalid length. [ 692.565480][T23367] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 692.583435][T23367] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 692.612594][T23367] bond7: (slave vcan1): making interface the new active one [ 692.634503][T23367] vcan1: entered promiscuous mode [ 692.649502][T23367] bond7: (slave vcan1): Enslaving as an active interface with an up link [ 692.870028][T23387] xt_hashlimit: max too large, truncated to 1048576 [ 692.992163][T23393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4443'. [ 693.167611][T23396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4444'. [ 693.292337][T23397] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 693.315621][T23397] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 693.367515][T23403] macvlan3: entered promiscuous mode [ 693.373159][T23403] macvlan3: entered allmulticast mode [ 693.382384][T23403] bond7: (slave macvlan3): Error -98 calling set_mac_address [ 693.411114][T23396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4444'. [ 694.015085][T23443] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20001 [ 694.752559][T23462] netlink: 'syz.4.4464': attribute type 13 has an invalid length. [ 694.817335][T23470] __nla_validate_parse: 4 callbacks suppressed [ 694.817353][T23470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4464'. [ 694.851736][T23465] netlink: 'syz.1.4465': attribute type 3 has an invalid length. [ 694.865556][T23462] gretap0: refused to change device tx_queue_len [ 694.876607][T23462] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 695.335701][T23487] syzkaller0: entered promiscuous mode [ 695.370414][T23487] syzkaller0: entered allmulticast mode [ 695.403282][T23483] syzkaller0: entered promiscuous mode [ 695.425730][T23483] syzkaller0: entered allmulticast mode [ 695.437424][T23498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4474'. [ 695.687016][T23503] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.4475'. [ 695.916083][T23515] netlink: 404 bytes leftover after parsing attributes in process `syz.0.4478'. [ 696.280560][T23527] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4481'. [ 696.355106][T23523] bond5: Unable to set down delay as MII monitoring is disabled [ 696.427862][T23523] bond5 (unregistering): Released all slaves [ 696.783817][T23542] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 697.034300][T23550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4488'. [ 697.224605][T23550] 8021q: adding VLAN 0 to HW filter on device bond8 [ 697.305931][T23560] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4490'. [ 697.585949][T23550] 8021q: adding VLAN 0 to HW filter on device bond9 [ 697.646677][T23550] bond8: (slave bond9): Enslaving as an active interface with an up link [ 697.936061][T23580] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4493'. [ 697.961704][T23582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4493'. [ 698.190652][T23585] openvswitch: netlink: EtherType 0 is less than min 600 [ 698.383841][T23596] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4496'. [ 698.710649][T23601] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 699.147949][T23611] erspan0: left allmulticast mode [ 699.312541][T23611] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.320464][T23611] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.426219][T23611] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 699.544836][T23520] xfrm0 speed is unknown, defaulting to 1000 [ 699.919032][T23659] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 699.970177][T23658] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 700.027000][T23659] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 700.231167][T23671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4511'. [ 700.328320][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4511'. [ 700.647612][T23690] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4516'. [ 700.896524][T23703] tc_dump_action: action bad kind [ 701.038706][T23710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4521'. [ 701.247082][T23716] syzkaller1: entered promiscuous mode [ 701.272879][T23716] syzkaller1: entered allmulticast mode [ 701.315581][T23718] xt_hl: Unknown TTL match mode: 255 [ 701.380395][T23718] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4523'. [ 701.401828][T23714] syzkaller0: entered promiscuous mode [ 701.415667][T23714] syzkaller0: entered allmulticast mode [ 701.425876][T23718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4523'. [ 701.442049][T23714] TC_ACT_REPEAT abuse ? [ 701.480409][T23718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4523'. [ 702.112234][T23741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4529'. [ 702.139440][T23741] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4529'. [ 702.604309][T23755] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4533'. [ 703.044831][T23771] netlink: 'syz.1.4537': attribute type 5 has an invalid length. [ 703.474807][T23789] netlink: 'syz.5.4543': attribute type 1 has an invalid length. [ 703.485019][T23789] nbd: nbd0 already in use [ 703.507132][T23789] netlink: 'syz.5.4543': attribute type 58 has an invalid length. [ 704.034519][T23810] syzkaller0: entered promiscuous mode [ 704.071357][T23810] syzkaller0: entered allmulticast mode [ 704.121484][T23811] netlink: 'syz.4.4551': attribute type 1 has an invalid length. [ 704.145340][T23811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.470906][T23831] netlink: 'syz.0.4555': attribute type 1 has an invalid length. [ 705.220004][T23862] tipc: Enabled bearer , priority 0 [ 705.249682][T23862] syzkaller0: entered promiscuous mode [ 705.262239][T23862] syzkaller0: entered allmulticast mode [ 705.283642][T23862] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 705.399795][T23862] tipc: Resetting bearer [ 705.435008][T23862] __nla_validate_parse: 13 callbacks suppressed [ 705.435028][T23862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4562'. [ 705.505125][T23861] tipc: Resetting bearer [ 705.586992][T23875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4566'. [ 705.650623][T23861] tipc: Disabling bearer [ 705.697073][T23880] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4569'. [ 705.766653][T23882] netem: change failed [ 705.784024][T23883] netem: change failed [ 706.023606][T23894] sctp: [Deprecated]: syz.4.4571 (pid 23894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 706.023606][T23894] Use struct sctp_sack_info instead [ 706.058866][T23890] vlan2: entered allmulticast mode [ 706.127437][T23899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4573'. [ 706.171776][T23895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.539718][T23921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 706.570279][T23913] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 706.688910][T23925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4580'. [ 707.012201][T23931] bond10: Unable to set up delay as MII monitoring is disabled [ 707.026288][T23931] bond10 (unregistering): Released all slaves [ 707.335960][T23957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4593'. [ 707.372087][T23961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4593'. [ 707.373613][T23956] tipc: Enabling of bearer rejected, failed to enable media [ 707.513839][T23963] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.4594'. [ 707.589597][T23966] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4595'. [ 707.881259][T23974] netlink: 'syz.3.4599': attribute type 1 has an invalid length. [ 707.908375][T23974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4599'. [ 708.044231][T23981] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 708.439325][T23994] bond10 (unregistering): Released all slaves [ 708.525081][T24005] xt_TCPMSS: Only works on TCP SYN packets [ 708.562119][T23999] pimreg25: entered allmulticast mode [ 708.904479][T24015] vlan0: entered promiscuous mode [ 708.944032][T24024] netlink: 'syz.0.4616': attribute type 1 has an invalid length. [ 708.987327][T24024] netlink: 'syz.0.4616': attribute type 2 has an invalid length. [ 709.462812][T24046] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 709.499943][T24046] tipc: Started in network mode [ 709.525005][T24046] tipc: Node identity 8a0eee3a8cb8, cluster identity 4711 [ 709.556071][T24046] tipc: Enabled bearer , priority 0 [ 709.633961][T24055] SET target dimension over the limit! [ 709.668886][T24056] sctp: [Deprecated]: syz.4.4625 (pid 24056) Use of int in max_burst socket option. [ 709.668886][T24056] Use struct sctp_assoc_value instead [ 709.703020][T24050] syzkaller0: entered promiscuous mode [ 709.713847][T24050] syzkaller0: entered allmulticast mode [ 709.720434][T24050] tipc: Resetting bearer [ 709.727774][T24048] syzkaller0: entered promiscuous mode [ 709.735789][T24048] syzkaller0: entered allmulticast mode [ 709.835464][T24045] tipc: Resetting bearer [ 714.226296][T24045] tipc: Disabling bearer [ 714.258599][T24074] netlink: 'syz.1.4630': attribute type 2 has an invalid length. [ 714.267916][T24074] netlink: 'syz.1.4630': attribute type 2 has an invalid length. [ 714.299764][T24073] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 714.377782][T24073] bond10: (slave lo): Enslaving as an active interface with an up link [ 714.448971][T24073] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 714.511662][T23640] tipc: Node number set to 112651834 [ 714.972418][T24112] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 715.538661][T24136] netlink: 'syz.4.4644': attribute type 39 has an invalid length. [ 715.804650][T24146] __nla_validate_parse: 9 callbacks suppressed [ 715.804686][T24146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4645'. [ 716.046813][T24153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4648'. [ 716.260339][T24165] netlink: 'syz.4.4649': attribute type 16 has an invalid length. [ 716.277709][T24165] netlink: 'syz.4.4649': attribute type 17 has an invalid length. [ 716.368728][T24164] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.384240][T24164] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.488972][T24172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4654'. [ 716.602890][T24183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4656'. [ 716.641475][T24165] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.649472][T24165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.667832][T24165] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.675132][T24165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.711748][T24165] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 716.753599][T24169] netlink: 'syz.0.4652': attribute type 2 has an invalid length. [ 716.793295][T24178] lo: entered promiscuous mode [ 716.821668][T24178] tunl0: entered promiscuous mode [ 716.850606][T24178] gre0: entered promiscuous mode [ 716.875645][T24178] gretap0: entered promiscuous mode [ 716.904862][T24178] erspan0: entered promiscuous mode [ 716.927177][T24178] ip_vti0: entered promiscuous mode [ 717.022231][T24192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4659'. [ 717.041467][T24194] sctp: [Deprecated]: syz.0.4658 (pid 24194) Use of int in max_burst socket option. [ 717.041467][T24194] Use struct sctp_assoc_value instead [ 717.083224][T24192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4659'. [ 717.113498][T24192] netlink: 'syz.3.4659': attribute type 12 has an invalid length. [ 717.137815][T24192] netlink: 'syz.3.4659': attribute type 11 has an invalid length. [ 717.675328][T24219] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 717.693138][T24215] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.870436][T24224] Unsupported ieee802154 address type: 0 [ 717.942661][T24228] netlink: 'syz.3.4671': attribute type 1 has an invalid length. [ 717.980184][T24228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4671'. [ 718.040803][T24234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4674'. [ 718.053810][T24234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4674'. [ 718.426774][T24248] netlink: 'syz.4.4679': attribute type 1 has an invalid length. [ 718.600752][T24248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4679'. [ 718.634893][T24248] 8021q: adding VLAN 0 to HW filter on device bond11 [ 720.193840][T24086] udevd[24086]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 720.425989][T24327] tc_dump_action: action bad kind [ 720.444464][T24329] netlink: 'syz.0.4700': attribute type 3 has an invalid length. [ 720.466931][T24329] netlink: 'syz.0.4700': attribute type 1 has an invalid length. [ 720.735537][T24341] veth0: entered promiscuous mode [ 720.882473][T24341] netlink: 'syz.4.4706': attribute type 10 has an invalid length. [ 720.920866][T24341] team0: Device ipvlan0 failed to register rx_handler [ 720.949907][T24338] veth0: left promiscuous mode [ 720.960811][T24353] syzkaller0: entered promiscuous mode [ 720.968292][T24353] syzkaller0: entered allmulticast mode [ 721.181303][T24361] netlink: 'syz.5.4710': attribute type 1 has an invalid length. [ 721.366718][T24366] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 721.430102][T24366] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 721.474829][T24366] bond10: (slave ip6gre2): making interface the new active one [ 721.513639][T24366] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 722.145115][T24397] ieee802154 phy1 wpan1: encryption failed: -22 [ 722.152300][T24397] ieee802154 phy1 wpan1: encryption failed: -22 [ 722.159575][T24398] __nla_validate_parse: 8 callbacks suppressed [ 722.159589][T24398] netlink: 352 bytes leftover after parsing attributes in process `syz.5.4720'. [ 722.222986][T24395] netlink: 352 bytes leftover after parsing attributes in process `syz.5.4720'. [ 722.550764][T24411] netlink: 'syz.4.4725': attribute type 2 has an invalid length. [ 722.567151][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4725'. [ 722.607662][T24413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4726'. [ 723.031953][T24435] netlink: 'syz.3.4731': attribute type 1 has an invalid length. [ 723.046969][T24435] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.4731'. [ 723.371304][T24460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4736'. [ 723.581069][T24465] netlink: 'syz.5.4738': attribute type 11 has an invalid length. [ 723.600024][T24465] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4738'. [ 723.638399][T24465] netlink: 'syz.5.4738': attribute type 62 has an invalid length. [ 723.854945][T24473] sctp: [Deprecated]: syz.4.4741 (pid 24473) Use of int in maxseg socket option. [ 723.854945][T24473] Use struct sctp_assoc_value instead [ 723.885692][T24474] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 724.003920][T24480] netlink: 'syz.4.4741': attribute type 2 has an invalid length. [ 724.012567][T24476] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 724.044479][T24480] netlink: 'syz.4.4741': attribute type 2 has an invalid length. [ 724.076756][T23641] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 724.204512][T24491] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4746'. [ 724.223580][T24491] tipc: Invalid UDP bearer configuration [ 724.223638][T24491] tipc: Enabling of bearer rejected, failed to enable media [ 724.260492][T24491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4746'. [ 724.491541][T24491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4746'. [ 724.522779][T24503] macvlan0: entered promiscuous mode [ 724.749499][T24514] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 724.763346][T24514] bond11: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 724.782854][T24514] bond11: (slave vxcan3): making interface the new active one [ 724.816951][T24514] bond11: (slave vxcan3): Enslaving as an active interface with an up link [ 725.121260][T24539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.160190][T24530] sch_tbf: burst 11 is lower than device batadv_slave_0 mtu (1514) ! [ 725.216252][T24535] bond8: (slave bridge5): Enslaving as a backup interface with an up link [ 725.252545][T24541] macvlan3: entered promiscuous mode [ 725.264632][T24541] macvlan3: entered allmulticast mode [ 725.283318][T24541] bond8: entered promiscuous mode [ 725.295668][T24541] bridge5: entered promiscuous mode [ 725.320040][T24541] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 725.361014][T24541] bond8: left promiscuous mode [ 725.374522][T24541] bridge5: left promiscuous mode [ 725.874941][T24560] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 725.892511][T24560] bond9 (unregistering): Released all slaves [ 726.567246][T24595] syzkaller1: entered promiscuous mode [ 726.590409][T24595] syzkaller1: entered allmulticast mode [ 727.324762][T24619] __nla_validate_parse: 5 callbacks suppressed [ 727.324811][T24619] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4773'. [ 727.401205][T24622] validate_nla: 2 callbacks suppressed [ 727.401241][T24622] netlink: 'syz.0.4775': attribute type 3 has an invalid length. [ 727.441338][T24625] sctp: [Deprecated]: syz.5.4773 (pid 24625) Use of int in max_burst socket option deprecated. [ 727.441338][T24625] Use struct sctp_assoc_value instead [ 727.855984][T24641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4780'. [ 728.050933][T24641] hsr_slave_1 (unregistering): left promiscuous mode [ 728.227356][T24651] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.372375][T24663] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4784'. [ 728.714476][T24672] syzkaller0: entered promiscuous mode [ 728.731625][T24672] syzkaller0: entered allmulticast mode [ 728.773025][T24674] bridge4: entered promiscuous mode [ 728.787064][T24674] bridge4: entered allmulticast mode [ 729.002146][T24684] netlink: 'syz.4.4793': attribute type 49 has an invalid length. [ 729.108769][T24682] netlink: 808 bytes leftover after parsing attributes in process `syz.5.4792'. [ 729.301005][T24694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4794'. [ 729.437917][T23641] IPVS: starting estimator thread 0... [ 729.441561][T24700] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4796'. [ 729.482624][T24700] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4796'. [ 729.540697][T24701] IPVS: using max 29 ests per chain, 69600 per kthread [ 729.753057][T24710] batman_adv: batadv0: Adding interface: dummy0 [ 729.770764][T24710] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.800582][T24710] batman_adv: batadv0: Interface activated: dummy0 [ 729.980354][T24721] netlink: 'syz.0.4802': attribute type 1 has an invalid length. [ 729.989708][T24721] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4802'. [ 729.996438][T24716] batadv0: mtu less than device minimum [ 730.018323][T24716] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 730.023564][T24721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4802'. [ 730.033179][T24716] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 730.055128][T24716] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 730.069118][T24716] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 730.082585][T24716] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 730.096541][T24716] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 730.109532][T24716] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 730.122862][T24716] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 730.137215][T24716] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 730.457071][T24725] syzkaller0: entered promiscuous mode [ 730.487778][T24725] syzkaller0: entered allmulticast mode [ 730.532613][T24741] netlink: 'syz.3.4807': attribute type 1 has an invalid length. [ 730.541525][T24740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4806'. [ 730.631236][T24741] 8021q: adding VLAN 0 to HW filter on device bond4 [ 731.252055][T24771] netlink: 'syz.0.4814': attribute type 9 has an invalid length. [ 731.312926][T24779] netlink: 'syz.3.4812': attribute type 1 has an invalid length. [ 735.257557][T24779] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 735.535673][T24792] netlink: 'syz.5.4820': attribute type 1 has an invalid length. [ 735.606333][T24792] __nla_validate_parse: 5 callbacks suppressed [ 735.606353][T24792] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4820'. [ 735.637955][T24796] ieee802154 phy1 wpan1: encryption failed: -22 [ 735.685002][T24802] ieee802154 phy1 wpan1: encryption failed: -22 [ 735.865719][T24809] netlink: 'syz.5.4824': attribute type 1 has an invalid length. [ 736.662878][T24846] netlink: 'syz.3.4835': attribute type 4 has an invalid length. [ 736.687761][T24849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4836'. [ 737.442211][T24873] tls_set_device_offload: netdev not found [ 737.674289][T24883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4847'. [ 737.922766][T24890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4847'. [ 737.929289][T24896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4852'. [ 738.092186][T24901] ip6t_rpfilter: unknown options [ 738.159026][T24901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4853'. [ 738.217588][T24901] netlink: 'syz.3.4853': attribute type 7 has an invalid length. [ 738.240421][T24901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4853'. [ 738.750574][T24935] syzkaller1: entered promiscuous mode [ 738.765346][T24935] syzkaller1: entered allmulticast mode [ 739.004412][T24945] netlink: 'syz.3.4863': attribute type 2 has an invalid length. [ 739.034333][T24945] netlink: 'syz.3.4863': attribute type 2 has an invalid length. [ 739.126599][T24949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4866'. [ 739.425452][T24957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4869'. [ 739.452656][T24957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4869'. [ 739.492303][T24966] netlink: 'syz.4.4872': attribute type 10 has an invalid length. [ 739.566818][T24969] bridge6: entered promiscuous mode [ 739.574686][T24969] bridge6: entered allmulticast mode [ 739.714983][T24966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 739.747205][T24966] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 739.901517][T24981] netlink: 'syz.3.4875': attribute type 3 has an invalid length. [ 740.130254][T24990] netlink: 'syz.5.4878': attribute type 3 has an invalid length. [ 740.162728][T24990] netlink: 'syz.5.4878': attribute type 3 has an invalid length. [ 740.701984][T25015] __nla_validate_parse: 11 callbacks suppressed [ 740.702002][T25015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4887'. [ 740.763512][T25015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4887'. [ 741.085718][T25033] team0: Port device gretap3 added [ 741.234825][T25045] sctp: [Deprecated]: syz.4.4894 (pid 25045) Use of int in maxseg socket option. [ 741.234825][T25045] Use struct sctp_assoc_value instead [ 741.406005][T25053] IPv6: sit1: Disabled Multicast RS [ 741.480934][T25053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4896'. [ 741.906199][T25083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4903'. [ 742.147503][T25088] bridge6: entered promiscuous mode [ 742.167464][T25088] bridge6: entered allmulticast mode [ 742.193399][T25088] team0: Port device bridge6 added [ 742.215265][T25087] geneve1: entered allmulticast mode [ 742.264416][T25088] bridge0: port 3(team0) entered blocking state [ 742.292963][T25088] bridge0: port 3(team0) entered disabled state [ 742.307095][T25088] team0: entered allmulticast mode [ 742.314346][T25099] net_ratelimit: 10 callbacks suppressed [ 742.314393][T25099] openvswitch: netlink: Key 26 has unexpected len 0 expected 16 [ 742.334450][T25088] team_slave_0: entered allmulticast mode [ 742.347071][T25088] team_slave_1: entered allmulticast mode [ 742.426167][T25101] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4910'. [ 742.444822][T25088] team0: entered promiscuous mode [ 742.472967][T25088] team_slave_0: entered promiscuous mode [ 742.505144][T25088] team_slave_1: entered promiscuous mode [ 742.664503][T25106] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4912'. [ 742.674814][T25109] tipc: Enabling of bearer rejected, failed to enable media [ 742.771655][T25111] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4915'. [ 743.207161][T25132] netlink: 'syz.3.4921': attribute type 1 has an invalid length. [ 743.363942][T25132] 8021q: adding VLAN 0 to HW filter on device bond5 [ 743.406715][T25139] vlan3: entered allmulticast mode [ 743.413254][T25139] bond5: entered allmulticast mode [ 743.476877][T25152] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4923'. [ 743.495409][T25151] netlink: 'syz.1.4925': attribute type 1 has an invalid length. [ 743.501882][T25152] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4923'. [ 744.061415][T25175] syzkaller0: entered promiscuous mode [ 744.077304][T25175] syzkaller0: entered allmulticast mode [ 744.217672][T25175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4931'. [ 744.394756][T25182] vcan2: entered promiscuous mode [ 744.441198][T25182] vcan2: entered allmulticast mode [ 744.482563][T25192] bond0: (slave bond_slave_1): Releasing backup interface [ 744.519951][T25195] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 745.360639][T25231] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 745.543150][T25242] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 745.650897][T25244] tipc: Started in network mode [ 745.672488][T25244] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 745.714318][T25244] tipc: Enabled bearer , priority 24 [ 745.723496][T25251] netlink: 'syz.1.4953': attribute type 1 has an invalid length. [ 745.739381][T25251] netlink: 'syz.1.4953': attribute type 4 has an invalid length. [ 745.751099][T25251] __nla_validate_parse: 6 callbacks suppressed [ 745.751117][T25251] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4953'. [ 745.758782][T25256] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 745.759360][T25257] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4956'. [ 745.762010][T25256] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4956'. [ 745.814956][T25258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4953'. [ 746.119660][T25266] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4960'. [ 746.473113][T25287] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 746.509512][T25288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4967'. [ 746.825002][T25303] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4972'. [ 746.830826][T25302] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4972'. [ 746.834893][T23640] tipc: Node number set to 10005162 [ 746.864725][T25303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4972'. [ 746.944228][T25302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4972'. [ 747.242358][T25321] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 747.266465][T25321] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 747.431573][T25327] netlink: 'syz.1.4978': attribute type 10 has an invalid length. [ 747.443932][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.511780][T25327] ipvlan0: entered allmulticast mode [ 747.547640][T25327] veth0_vlan: entered allmulticast mode [ 747.584716][T25327] team0: Device ipvlan0 failed to register rx_handler [ 748.501323][T25377] netlink: 'syz.3.4995': attribute type 24 has an invalid length. [ 748.824979][T25391] syzkaller1: entered promiscuous mode [ 748.852718][T25395] netlink: 'syz.4.4999': attribute type 142 has an invalid length. [ 748.871494][T25391] syzkaller1: entered allmulticast mode [ 749.624665][T25418] netlink: 'syz.3.5004': attribute type 1 has an invalid length. [ 750.022047][T25425] netlink: 'syz.1.5008': attribute type 44 has an invalid length. [ 750.266838][T25435] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 751.015012][T25464] xt_bpf: check failed: parse error [ 751.052598][T25464] __nla_validate_parse: 5 callbacks suppressed [ 751.052619][T25464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5020'. [ 751.114962][T25468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5022'. [ 751.323993][T25477] IPVS: length: 24 != 1560 [ 751.336257][T25478] lo: entered allmulticast mode [ 751.353856][T25478] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5024'. [ 751.623845][T25484] netlink: 'syz.3.5027': attribute type 9 has an invalid length. [ 751.704210][T25488] tls_set_device_offload_rx: netdev not found [ 751.734748][T25488] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 751.984501][T25499] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5032'. [ 752.013159][T25501] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5030'. [ 752.026037][T25499] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5032'. [ 752.081092][T25499] netlink: 'syz.4.5032': attribute type 6 has an invalid length. [ 752.106471][T25499] netlink: 'syz.4.5032': attribute type 5 has an invalid length. [ 752.134448][T25499] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5032'. [ 752.151529][T25501] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] SMP KASAN PTI [ 752.163459][T25501] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 752.171903][T25501] CPU: 0 UID: 0 PID: 25501 Comm: syz.5.5030 Not tainted syzkaller #0 PREEMPT(full) [ 752.181449][T25501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 752.191521][T25501] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 752.197427][T25501] Code: 52 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 57 e1 bd f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 3a e1 bd f8 4d 8b 1f 4c 89 f7 89 [ 752.217032][T25501] RSP: 0018:ffffc9000382f0a8 EFLAGS: 00010202 [ 752.223104][T25501] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff88802e423d80 [ 752.231075][T25501] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88805d5baa40 [ 752.239042][T25501] RBP: 0000000000000002 R08: ffff8880326e002b R09: 1ffff110064dc005 [ 752.247007][T25501] R10: dffffc0000000000 R11: ffffed10064dc006 R12: dffffc0000000000 [ 752.254973][T25501] R13: dffffc0000000000 R14: ffff88805d5baa40 R15: 0000000000000068 [ 752.262953][T25501] FS: 00007efcab3396c0(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 752.272059][T25501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.278634][T25501] CR2: 00007f6d16e4f0d7 CR3: 000000007fce2000 CR4: 00000000003526f0 [ 752.286610][T25501] Call Trace: [ 752.289900][T25501] [ 752.292821][T25501] udp_tunnel_sock_release+0x6f/0x80 [ 752.298189][T25501] rxe_net_del+0x121/0x2e0 [ 752.302683][T25501] rxe_dellink+0x15/0x20 [ 752.306916][T25501] nldev_dellink+0x304/0x3d0 [ 752.311556][T25501] ? __pfx_nldev_dellink+0x10/0x10 [ 752.316784][T25501] ? apparmor_capable+0x126/0x170 [ 752.321873][T25501] ? bpf_lsm_capable+0x9/0x20 [ 752.326548][T25501] ? security_capable+0x7e/0x2c0 [ 752.331593][T25501] ? __pfx_nldev_dellink+0x10/0x10 [ 752.336709][T25501] rdma_nl_rcv+0x6d1/0xa10 [ 752.341185][T25501] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 752.346152][T25501] ? netlink_deliver_tap+0x2e/0x1b0 [ 752.351465][T25501] ? netlink_deliver_tap+0x2e/0x1b0 [ 752.357013][T25501] netlink_unicast+0x75c/0x8e0 [ 752.361791][T25501] netlink_sendmsg+0x813/0xb40 [ 752.366574][T25501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.371870][T25501] ? aa_sock_msg_perm+0xf1/0x1b0 [ 752.376885][T25501] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 752.382175][T25501] ____sys_sendmsg+0x972/0x9f0 [ 752.386991][T25501] ? __might_fault+0xaf/0x130 [ 752.391695][T25501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.396982][T25501] ? import_iovec+0x73/0xa0 [ 752.401548][T25501] ___sys_sendmsg+0x2a5/0x360 [ 752.406655][T25501] ? __lock_acquire+0x6b5/0x2cf0 [ 752.411683][T25501] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.416974][T25501] ? futex_wait+0x2a2/0x390 [ 752.421490][T25501] ? __fget_files+0x2a/0x420 [ 752.426087][T25501] ? __fget_files+0x3a0/0x420 [ 752.430781][T25501] __x64_sys_sendmsg+0x1bd/0x2a0 [ 752.435730][T25501] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 752.441189][T25501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.447344][T25501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.453401][T25501] do_syscall_64+0x15f/0xf80 [ 752.458103][T25501] ? clear_bhb_loop+0x40/0x90 [ 752.462775][T25501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.468740][T25501] RIP: 0033:0x7efcaa39ce59 [ 752.473232][T25501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.493001][T25501] RSP: 002b:00007efcab339028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.501408][T25501] RAX: ffffffffffffffda RBX: 00007efcaa615fa0 RCX: 00007efcaa39ce59 [ 752.509373][T25501] RDX: 0000000020004018 RSI: 00002000000005c0 RDI: 0000000000000005 [ 752.517331][T25501] RBP: 00007efcaa432d6f R08: 0000000000000000 R09: 0000000000000000 [ 752.525394][T25501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.533361][T25501] R13: 00007efcaa616038 R14: 00007efcaa615fa0 R15: 00007ffe44b77ec8 [ 752.541419][T25501] [ 752.544453][T25501] Modules linked in: [ 752.572392][T25501] ---[ end trace 0000000000000000 ]--- [ 752.596009][T25506] x_tables: duplicate underflow at hook 2 [ 752.618793][T25501] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 752.627426][T25501] Code: 52 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 57 e1 bd f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 3a e1 bd f8 4d 8b 1f 4c 89 f7 89 [ 752.634546][T25502] smc: removing ib device syz1 [ 752.655603][T25501] RSP: 0018:ffffc9000382f0a8 EFLAGS: 00010202 [ 752.662524][T25501] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff88802e423d80 [ 752.676315][T25501] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88805d5baa40 [ 752.685158][T25501] RBP: 0000000000000002 R08: ffff8880326e002b R09: 1ffff110064dc005 [ 752.694364][T25501] R10: dffffc0000000000 R11: ffffed10064dc006 R12: dffffc0000000000 [ 752.704136][T25501] R13: dffffc0000000000 R14: ffff88805d5baa40 R15: 0000000000000068 [ 752.713085][T25501] FS: 00007efcab3396c0(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 752.723591][T25501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.731694][T25501] CR2: 000055fc1dd07168 CR3: 000000007fce2000 CR4: 00000000003526f0 [ 752.740666][T25501] Kernel panic - not syncing: Fatal exception [ 752.747208][T25501] Kernel Offset: disabled [ 752.751523][T25501] Rebooting in 86400 seconds..