last executing test programs: 2m7.586406788s ago: executing program 2 (id=619): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x2) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r3, 0x4}, 0x8) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r7, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async, rerun: 32) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4050}, 0x4000004) (async) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000380)) (rerun: 32) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES8=r9, @ANYRESOCT=r12], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x440c4) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=@newchain={0x2618, 0x64, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x6, 0xb}, {0xfff3, 0x5}, {0x0, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x2}, @TCA_FLOW_MASK={0x8, 0x6, 0x1}, @TCA_FLOW_ACT={0x4}]}}, @filter_kind_options=@f_fw={{0x7}, {0x256c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_FW_ACT={0x1e64, 0x4, [@m_pedit={0x1df4, 0x1a, 0x0, 0x0, {{0xa}, {0x1d1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xc, 0xca, 0x0, 0x0, 0x1000}, 0x9, 0xd, [{0x800, 0x7f, 0x1, 0x3, 0x401, 0x81}, {0x9, 0xfffffff2, 0xfffffff8, 0xb65, 0xfff, 0x4}, {0x3, 0x6, 0x4, 0x7, 0x1}, {0x3, 0xa, 0x6, 0xc0000000, 0xffff8000, 0x4}, {0x907b, 0x7, 0xffffff7f, 0x165, 0x6, 0x6a7a290}]}, [{0x6, 0x6, 0xcc7, 0x7f, 0xe, 0x7}, {0x3, 0x6f3c, 0x4c4b, 0x116, 0x1, 0x10000}, {0x395e73be, 0xfffffff9, 0x800, 0x7, 0xe, 0x6}, {0x1, 0x7, 0xfffffffa, 0xb369, 0x10, 0x81}, {0x9, 0xfffffffb, 0x9, 0xa, 0x2, 0x3}, {0x6, 0x5, 0xefc, 0x8, 0x80000000, 0x6}, {0x6, 0x2, 0x7e6, 0x32bc, 0x401, 0x3}, {0x4, 0xa5d3, 0x80000001, 0x8000, 0x0, 0x80000000}, {0x7, 0x3, 0x5, 0x4, 0x9, 0x4}, {0x2, 0xb, 0x1, 0x7f, 0x0, 0x4}, {0x2, 0x265d, 0x0, 0xf, 0xa07, 0x4}, {0x8, 0x1, 0x9, 0x1, 0x9, 0x9}, {0x6, 0x80000000, 0x4db2, 0x8, 0x3, 0x10001}, {0xa, 0x80000001, 0x2, 0x3, 0x101, 0x71}, {0xa95c, 0x8, 0x400, 0x2, 0x6, 0x10001}, {0x2, 0x10000, 0x1, 0x2, 0x4, 0x5}, {0x1, 0x7fff, 0x8, 0x9, 0x21a83fc6, 0xfcf}, {0xfffffa68, 0xa7, 0x401, 0x6, 0x5847, 0x6}, {0xfffffffb, 0x0, 0x8001, 0x80000000, 0x80, 0x2}, {0x6, 0x2, 0x4efafcdb, 0x8, 0x5, 0x3ff}, {0x3, 0x80000001, 0x0, 0x7ff, 0x100}, {0x8, 0x5ea80000, 0xf, 0x8, 0x4}, {0xa, 0x8, 0xfffffffc, 0xe270, 0x40, 0xff}, {0x800, 0xfffffffb, 0x7, 0x0, 0x4, 0xe}, {0x1, 0x7fffffff, 0x1, 0x6b, 0x279, 0xff}, {0xffff, 0x7146447b, 0x0, 0xfff, 0x1, 0xdbed}, {0x46a, 0x1824, 0x86ba, 0xff, 0xa, 0xafb}, {0x2, 0x1, 0xc20, 0xf98, 0x8, 0x47}, {0x0, 0x72, 0x9, 0x0, 0x2e7c, 0x10001}, {0x3, 0x77e1, 0x40, 0xf38dd1b, 0x0, 0x4}, {0x2, 0xd840, 0x59db, 0x9, 0x0, 0x7adb}, {0x81, 0x3, 0x80000001, 0x5, 0x5, 0x7}, {0x7, 0x10000, 0x1, 0x8000, 0x5, 0x3}, {0x1, 0x7, 0x8, 0x3, 0x80000000, 0x1}, {0x1, 0x8, 0x2, 0x4, 0x2, 0x6}, {0x2, 0x4, 0x3, 0x0, 0x100, 0x5f07}, {0x3, 0xd76, 0x599ceebb, 0x5, 0x3, 0x9}, {0x0, 0x4, 0x1, 0x8, 0x7, 0xa46}, {0x5, 0x1, 0x9, 0x9, 0xa, 0x8}, {0x5, 0x0, 0x7ff, 0x8, 0x1000, 0x7}, {0x5, 0x8d3, 0x9, 0x9, 0xb010, 0x3}, {0x1, 0x6, 0x5, 0x1, 0x4, 0x40}, {0x5, 0x80000000, 0xab, 0x9, 0x7, 0x3ff}, {0x2, 0x2, 0x0, 0x9, 0xd, 0xffffffff}, {0x4, 0xf7, 0xfffffff9, 0xfffffffb, 0x4, 0x687}, {0x81, 0x40000, 0x72a3, 0x4, 0x8000, 0xfff}, {0x5, 0x3, 0x6, 0x5, 0x0, 0x2}, {0x7fff, 0x3, 0x0, 0x800, 0x7fff, 0x200}, {0x7, 0x3, 0x3, 0x3, 0xf68, 0x7fff}, {0x2, 0x6, 0x80000001, 0x800, 0x6, 0x2}, {0xc6, 0x6, 0x3, 0xc, 0x4, 0x100}, {0x8, 0x4, 0x2f94, 0x7, 0x7, 0x3}, {0x4cb, 0xa, 0x3, 0x6, 0x4, 0x8000}, {0x48d, 0x4811, 0x0, 0x7, 0x3c21, 0x94}, {0x1f7, 0x9, 0x7, 0x6, 0x1, 0x6}, {0x0, 0x7, 0x4, 0x7fffffff, 0x81, 0x81}, {0x0, 0x7f, 0x945, 0x0, 0xffffffff, 0x7}, {0x2, 0x80000000, 0x0, 0x22fd, 0x1}, {0x6, 0x1000, 0x4, 0x4, 0x1, 0x7}, {0x5, 0x8, 0x4, 0xff, 0xe01da1f, 0x7}, {0x4, 0xde, 0x15b5fcb3, 0x8, 0x7fffffff, 0x5}, {0x80000001, 0x100, 0x4, 0x3, 0xad85, 0x7}, {0x1, 0x8, 0x0, 0x3, 0x9, 0x8}, {0x9, 0x9a, 0x2, 0x6, 0xfffffe00, 0x9}, {0x6, 0x8, 0x1, 0xf1f9, 0xfffff000, 0x8344}, {0x3, 0x3, 0xd6, 0x81, 0xf3f, 0x29}, {0x9, 0xfffffffd, 0x3, 0xc0, 0x7, 0x2}, {0x1, 0x4, 0x2, 0x2, 0xdd5f, 0x97e}, {0x750, 0x9, 0x2, 0x400, 0x4, 0x7}, {0x10, 0x1ff, 0x7, 0x1b, 0x3, 0xc38d}, {0x6, 0x4, 0x9, 0x5, 0x5, 0xd969}, {0x7, 0x7f, 0x8, 0xfffffffb, 0xe, 0x3}, {0x2, 0x6, 0xbc78, 0x80000000, 0x6, 0x4}, {0x0, 0x6, 0xb, 0x9, 0x34, 0x1}, {0x9, 0x2, 0x6, 0x8000, 0x1, 0x6b8}, {0x0, 0x2, 0x2, 0xffff, 0x24, 0x3ad1}, {0x4, 0x0, 0x3, 0x8, 0x7ff, 0x7}, {0xa13, 0x1, 0x9, 0xf36, 0x5, 0x6}, {0x9, 0x9, 0xe9c9, 0xa64a, 0xffff2117, 0xfffffff9}, {0x8, 0x3, 0x8, 0x2451, 0x400, 0x91c}, {0x1, 0x8, 0xa81, 0x6, 0x8, 0xa}, {0x3, 0x6, 0x100, 0x7, 0xffff0d1d, 0xfffffff9}, {0x2, 0xb4, 0x0, 0x682, 0x1, 0x3}, {0x3, 0x0, 0x7, 0x0, 0x9, 0xfffffff5}, {0x595, 0x2, 0x0, 0x4, 0x37c, 0x6}, {0x7, 0x3f7, 0xffff, 0x200, 0x4, 0x9}, {0x1, 0x8, 0x8, 0x91, 0xffffffff, 0x6}, {0x6, 0x6, 0x4, 0x80, 0x1, 0x8}, {0x3, 0x48, 0x3, 0x5, 0x2, 0x7}, {0x1, 0xbb, 0x172, 0x3, 0x7, 0x7fff}, {0x9, 0xd, 0x7, 0xed0, 0x4924, 0x5}, {0x4, 0x7fffffff, 0x8, 0x5, 0xfffffffc, 0x1}, {0x9, 0x5, 0x500, 0x8, 0xd}, {0x800, 0x1442, 0x40, 0x800100, 0x6, 0xb}, {0x4, 0x2, 0x8a9, 0xc0, 0x800, 0x208d19ef}, {0xfffffff9, 0x208, 0x7fffffff, 0x4, 0x10001, 0xfffff459}, {0x1, 0x3, 0x3, 0x85ea, 0x10000, 0x6}, {0x5, 0x5, 0x0, 0x2, 0x4, 0x3e}, {0x17f6, 0x25, 0x101, 0x1000, 0xffff0001, 0x7}, {0x800, 0x10000, 0xbbaa, 0x7, 0x0, 0x3}, {0xfffffff8, 0xe, 0xe, 0x3, 0x4, 0x3}, {0x6, 0x7ff, 0x64bca0fa, 0x0, 0x5e, 0x5}, {0xffc00000, 0x6, 0x2, 0xe, 0x6, 0x91c1}, {0x8, 0x40, 0x449, 0xffffffff, 0xb39, 0x1000}, {0x6, 0x401, 0x8, 0x80000000, 0x7, 0x8}, {0xffff8001, 0xe3, 0x7, 0x1, 0x8, 0x9}, {0x7, 0xfffffff9, 0x8000, 0x7fff, 0x8001, 0x77}, {0x6, 0xd, 0x1, 0x4, 0x8, 0x1000}, {0x3, 0x81, 0x9e, 0xd, 0x1000, 0xa}, {0x7fffffff, 0x3b52, 0x1, 0x3, 0x4, 0x81}, {0x1, 0x6, 0x6, 0x8, 0x400, 0x6}, {0x7fff, 0x80000001, 0x6, 0x7f, 0xfffff686, 0xb}, {0xcb05, 0x40, 0x180000, 0x1, 0x0, 0x7ff}, {0x5, 0x5, 0x5, 0x1ff, 0x0, 0xa}, {0x0, 0x1ff, 0x4, 0x2, 0x2, 0xb}, {0x2, 0x6, 0x3ff, 0x4, 0x6b9, 0x2}, {0x8001, 0x4, 0x2, 0x1, 0x5, 0x51}, {0x30d1, 0x4, 0x0, 0x2, 0x4e, 0x2}, {0x6, 0x80000001, 0x1, 0x4, 0x1000, 0x6}, {0x8, 0x3, 0xa, 0x3, 0x40, 0x6}, {0x3, 0x2, 0x6, 0x4, 0x35ac4a74, 0xfffffff8}, {0x5, 0xffff, 0x200, 0x9, 0x5, 0x6}, {0x7, 0xd, 0x5, 0x5, 0x1, 0xffff}, {0x353f, 0x6, 0x52c0, 0x3, 0x7, 0x2}, {0x3, 0xcdaf, 0x9, 0x100, 0x6, 0xac}, {0x10, 0x6, 0x6, 0x9, 0x7, 0x6}, {0x4, 0x75880000, 0x8, 0x80000000, 0xb5e3, 0xebe}, {0xfff, 0x9, 0x401, 0x3, 0xfffffff7, 0x3}], [{0x1, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {}, {}, {0x2, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x2}, {0x3}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x3}, {0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x1}, {0x4}, {0x2}, {0x2}, {0x6}, {0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5}, {0x1}, {0x5, 0x1}, {0x2, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x3, 0x3, 0xffffffffffffffff, 0x3, 0x6}, 0x2, 0x2, [{0x7, 0xf6e, 0x80, 0x9, 0x1ff, 0xf}, {0x5, 0xff, 0x10000, 0xb2e1, 0x4, 0x9203}, {0xffffffb1, 0x0, 0x0, 0x1, 0x1, 0x5}, {0xd, 0xffffffff, 0x7fff, 0x2, 0x8568, 0x1}]}, [{0x2, 0x1ff80000, 0x4, 0x200, 0xffffffff, 0x15926cd4}, {0x75dd, 0x9, 0x1, 0xf, 0x1, 0xa16}, {0x2, 0x0, 0x2, 0x3, 0x9, 0xc}, {0x0, 0xfffffffd, 0x8, 0x6b, 0x3, 0x9}, {0x7, 0x4, 0x7ff, 0x2, 0x8, 0x1b8}, {0x0, 0x1, 0x5, 0xd320, 0x4, 0xff800}, {0xff, 0x5f, 0x0, 0x800, 0x80000001, 0x5}, {0x0, 0x8001, 0x10001, 0x88b, 0x2, 0x6}, {0x5, 0x4, 0x8000, 0x5, 0x0, 0x2}, {0x2, 0x40, 0x6, 0x7c, 0x8, 0xffffffff}, {0x3, 0x8, 0x325, 0xfffffff0, 0x9, 0x1}, {0x3, 0x8, 0x5, 0x4, 0x64c1, 0x7fffffff}, {0x7, 0x100, 0x0, 0x2, 0x5, 0x6}, {0x8, 0x1, 0x9, 0x8001, 0x7, 0x6}, {0x5, 0x66, 0xffffffff, 0x4, 0x0, 0xc}, {0x8, 0x8, 0x7, 0x101, 0x3, 0x3}, {0x81, 0x3, 0x1, 0x4, 0x5, 0x5}, {0x2, 0x3ff, 0x9, 0x8, 0x100, 0x2}, {0xd3, 0xfffffffb, 0x3, 0xd7, 0x8, 0x5}, {0x2, 0x1, 0x8, 0x4, 0x4, 0x7}, {0x0, 0x100, 0x9, 0x2, 0x68}, {0x2, 0xfffffe01, 0x100, 0x10, 0x5, 0x1000}, {0x1, 0x9, 0x9, 0x5, 0x2, 0x666}, {0x7, 0x2, 0x2, 0x8, 0x2020, 0x8}, {0x7, 0x80000001, 0xfffffba4, 0x9, 0x10000, 0x8}, {0x9, 0x8, 0x4, 0x1, 0x68099374, 0x7}, {0xf6, 0x200, 0x0, 0x1, 0x0, 0x7}, {0xffffffdb, 0x6, 0x0, 0x2, 0x0, 0x66d3}, {0x2, 0x2, 0xffffffff, 0xceef, 0x7fff, 0x2}, {0x6, 0x67f7d70b, 0x7fffffff, 0xf5a2, 0x1, 0x40000000}, {0x1, 0x3, 0x100000, 0x58496fde, 0xd, 0x620}, {0x4, 0x100000, 0x7, 0x8, 0x4, 0xe}, {0xfffffffd, 0x4, 0x8, 0xfffffffd, 0xfff, 0xffffffff}, {0x1, 0x86c, 0x0, 0x3, 0x0, 0x7ed}, {0x0, 0x1ff, 0x5, 0x8, 0x50, 0x8}, {0x5, 0x10000, 0x80, 0x5, 0x1, 0x4}, {0x9, 0x6, 0xd, 0xfffeffff, 0x8, 0xb}, {0x9, 0x100, 0x100, 0x9, 0x7, 0x40000000}, {0x0, 0xa, 0x0, 0x4, 0x64, 0x9}, {0x1, 0xb78, 0x7ff, 0x8, 0x7f, 0x8000}, {0x80000000, 0x4, 0x80000000, 0x9, 0x4b, 0x2}, {0x5, 0x8, 0x7, 0x5, 0x8, 0x9}, {0x0, 0x100, 0x10, 0x3, 0x2, 0x4}, {0x3, 0x3, 0x5, 0x0, 0xd6d, 0x9}, {0x5b7, 0x200, 0x5, 0xc, 0x8, 0x2}, {0x4, 0xda, 0x8, 0x10001, 0xfff, 0x4}, {0xffff7fff, 0x0, 0x7, 0x8, 0x1ff, 0x7}, {0x2, 0x5, 0x0, 0x2, 0x8000, 0x4}, {0x80000001, 0x6, 0xfffffff7, 0xff, 0x9, 0x2}, {0x8, 0x1, 0x907, 0x400, 0xb0, 0x5}, {0x4, 0x74b, 0x7, 0x8, 0x7ff, 0x7}, {0x6, 0xac8, 0xffffffff, 0x3ff, 0x770, 0x81}, {0x7fffffff, 0xe27, 0x9, 0x0, 0x2, 0x1}, {0x10001, 0xffffff2f, 0x6, 0x81, 0x3}, {0x7, 0x6, 0xffffffff, 0x2, 0x9, 0x7}, {0x7, 0xc, 0x7ffd, 0x8000, 0x7, 0x7}, {0x200000, 0x7, 0x0, 0x8, 0x1, 0x1}, {0xffffffff, 0x4, 0x6531, 0x3, 0x18000000, 0x4}, {0x9, 0x8, 0x3, 0xe0, 0x7, 0x1}, {0x4, 0x9, 0x7, 0x9, 0xe, 0x8}, {0x2, 0x0, 0xe, 0x9, 0x9, 0x4}, {0x1bd0, 0x70, 0xfffffe00, 0xf16c, 0x3, 0xc728}, {0x1b5bc606, 0x4, 0x2, 0x8, 0x2, 0x9}, {0x1, 0x4, 0x1, 0x714, 0x4, 0x10000}, {0x3ff, 0xb3f5, 0x1, 0x2, 0xa277, 0xfffffffc}, {0x8, 0xae0b, 0x4, 0xbe5, 0x9, 0x7}, {0xffff, 0x2, 0x0, 0x4, 0x7, 0x7}, {0x5, 0x1, 0x4, 0x200, 0x6bbb, 0x1}, {0x659773ce, 0x0, 0xfffffff7, 0x9, 0x4c, 0x2}, {0x5, 0x4, 0x806, 0xfdd1, 0x7, 0x81}, {0x2, 0x7, 0x0, 0x86743b5f, 0x1000, 0xfff}, {0x89, 0x8, 0x8, 0x0, 0x5}, {0x2cd, 0x6, 0x8, 0xfff, 0x3, 0xbb10}, {0x8, 0x5, 0x2, 0x4f6a, 0x1, 0x3}, {0x10, 0x6, 0x400, 0x4ace, 0xfff, 0x50}, {0x2e8f, 0x81, 0x9, 0x372a, 0x1, 0xcc8a}, {0x8, 0x7, 0x8, 0x6, 0x2, 0xfc65}, {0x5, 0x8, 0x9, 0x8, 0xffff, 0x7}, {0x4, 0x5, 0x401, 0x7, 0x4, 0x8}, {0x1ff, 0x4bb3, 0x3, 0xffff8866, 0x3, 0x6}, {0x7ff, 0x3, 0xe, 0x0, 0x2, 0x2}, {0x10, 0x8, 0xfd, 0x9, 0x10000, 0x9}, {0x401, 0x6, 0xffffffac, 0xffffffff, 0x7f, 0x4}, {0x150, 0x2, 0x5, 0x9, 0x66d24dff, 0x3ff}, {0x9, 0x5800, 0xdc4, 0x2, 0x2}, {0x5, 0x4, 0x98, 0x4, 0x100000, 0x800}, {0x7f, 0x5, 0xffffff0e, 0x5, 0x401}, {0x8, 0x2, 0x5, 0xe, 0x1, 0x1000}, {0x8, 0x3, 0x0, 0x7fffffff, 0x200, 0x9}, {0x0, 0x7fffffff, 0x40, 0x93f, 0x820, 0xfff}, {0xfff, 0x1, 0xd879, 0x1, 0x401}, {0x3ff, 0x8, 0x3, 0x0, 0xa2b9, 0x9}, {0xd700000, 0x2, 0x5, 0xa, 0x1, 0x80000001}, {0x17b, 0x0, 0x8, 0x4, 0x9}, {0xc536, 0x4, 0xffffea07, 0x7, 0x800, 0x8a74}, {0xe, 0x8, 0x4e22, 0x8, 0x0, 0x52cd}, {0x2, 0x4, 0x4, 0x8, 0xb1d0, 0x6}, {0x6, 0x0, 0xa, 0x1, 0xffffff00, 0x7ff}, {0x7, 0x2, 0xa3, 0x5, 0x4, 0x2}, {0x6, 0xa, 0x80, 0x4, 0x3, 0x7f}, {0x8, 0x9, 0x2, 0x2, 0x8, 0x1dff}, {0x4, 0xffffce77, 0xfffffffb, 0x3, 0x6, 0x7fffffff}, {0x401, 0x3, 0x7, 0x1ff, 0xcc, 0x8001}, {0x1, 0x7, 0x1, 0x20000, 0x9, 0x3}, {0x2, 0xa200, 0x10, 0x80000001, 0x4, 0x1}, {0x328, 0x7f, 0xffffc3cb, 0x6, 0xfffffff8, 0xb20}, {0x4, 0x10001, 0x3, 0x3, 0x2, 0xf07}, {0x8, 0x0, 0x3, 0x4, 0x8001, 0x1}, {0x8, 0x1, 0x6, 0x6, 0x48, 0x101}, {0x8, 0x10001, 0xffffffff, 0xc, 0xfff, 0x4}, {0x2, 0x5, 0xffff8000, 0x4, 0x3, 0x2}, {0x0, 0x8e66, 0x8, 0x10000, 0x0, 0xeab}, {0x6, 0x4, 0x5, 0xd, 0xed5, 0x1}, {0xa39, 0x79, 0x22, 0x26, 0x0, 0xe}, {0x7, 0xffff, 0x801, 0x5e, 0x4, 0x100}, {0x7, 0x2, 0x8, 0x6, 0x8, 0xa01}, {0x1, 0x77, 0x8, 0xcf6, 0x2, 0x5}, {0x4, 0x0, 0x3, 0x2, 0x8, 0x1}, {0x3, 0x6, 0x4, 0x5, 0x90}, {0x4, 0xffffffff, 0x9e8, 0x4, 0x9, 0x7}, {0x8, 0xffffffff, 0x2, 0x46, 0x6, 0x3}, {0xfffffff7, 0x7, 0xe, 0x2, 0x800, 0xe}, {0x440c00, 0x7b2402c8, 0x1000, 0x5, 0x9, 0x9}, {0xfffffff9, 0x95fc, 0xad, 0x6, 0xffff, 0xfffff999}, {0x1, 0x6, 0x34c751b, 0xe, 0x80, 0x1}, {0x400, 0xfffffffc, 0xf, 0x81, 0x1, 0x9}, {0xb, 0xa, 0x8000, 0x55, 0x5, 0x7fff}, {0xc, 0x4, 0x10000000, 0x7e3, 0xc}], [{0x2}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x1}, {0x4}, {0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0xecb69bd80251a299}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x5}, {}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x1}, {0xf2a87999fa450d4b}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x1, 0x48b34726b916e49c}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x3}, {0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0xae, 0x6, "281af3d9b2b760ad5da45aed8f8407a073a27a53136dde36000b4a684492ce96f9d6f7205a82d01489b0ab7cdb16c2b778ba0dc26d77cb974449a5ac9af92aa36e26cc4d63349f07b8057c813916257a4e0faf61ff5f631d58ba3dc7e183c5b8a8dd3610a36f27767471361cfbd25e861513d79636ee95c8f179f8ecafe37e9ad5fd3ec4a7a868e4ad967ee0945a7e2ba3b3519abfa8dac6f390df5c559bb9516ebc0834ef3e1bd9c323"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x6c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x124f, 0x6}}]}, {0x32, 0x6, "1238b070d608c2379d28917b7a84de93be5701e737ed18fc3b6e3c163a0c8cf7a432dc348182df59c8ae4edd8976"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FW_POLICE={0x58, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0xd4, 0x6, 0x4, {0xd, 0x0, 0x4, 0x3, 0x0, 0x1}, {0x1, 0x2, 0x4608, 0x8, 0xc0d7}, 0xc2df, 0x9, 0x743e}}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff}]}, @TCA_FW_POLICE={0x20, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6b2}]}, @TCA_FW_ACT={0x1d8, 0x4, [@m_bpf={0xb8, 0x7, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x8, 0x0, 0xfd, 0x8}}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x2, 0x40, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x9}, {0x0, 0x74, 0x2, 0x3a9}, {0x5, 0x2c, 0x9, 0x4}]}]}, {0x49, 0x6, "6ff72085a215b00be9e349180681caa87d832017c4825ea25707aeb816c120d5e259a65926f9228a17924881e3ac8f07b2ddbdfd72099a42ddbbbfef170bae8f4f4b223113"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x11c, 0x10, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0xe8, 0x6, "7c466db4c80a76172eadedbdcfb324f760f7129e8064e70fd4c824b55f84dc3d9a60e5cc8fe6b46e99a3a12d5e4e0d119c5e9626d1d018e61c5444e1ec68c5d97c19efa541a6bec0fd89f62ba130cf2432617c404ca20e90502ba70ef795e8570ad9d1325e9edff09098f16b117f87bbbf8d0e8883d89a26ede57b9c7734c5539496c5dc180c8cecf201a082b23f5b907f437e01828233659c4ad1996b4d07648dbedb686a4219af35d4b9d4642b17f0e8b9c97e9e47975b2c51718bee9b6fafc9a2cf9d8b598131a969b1f258c593875811b7d7dfe63cde1a97dc9c944b9cb8d64b0ca5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'wlan0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0xfff7}}, @TCA_FW_POLICE={0x47c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x8000, 0xfffffffe, 0xfffff800, {0xe, 0x2, 0x3, 0x6, 0x8}, {0x1, 0x1, 0x2, 0x4, 0x200, 0x1}, 0x8, 0x6, 0x1c000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xff, 0x81, 0x5463, 0xdc, 0x160, 0xf, 0x209, 0x2, 0x5f, 0x2, 0x0, 0x1, 0x8, 0x1, 0x7fffffff, 0x1, 0x200, 0x3fc, 0x8, 0x7, 0xf, 0x7f, 0xfd17, 0x3, 0x4, 0xf5e, 0xffffffdd, 0x8, 0x1000, 0x9, 0xaf22, 0x9, 0x3, 0x4, 0x7f, 0x8, 0x1, 0x5, 0x7, 0x1, 0x4, 0x7, 0x400, 0xdd9, 0x7, 0x0, 0x7fff, 0x2c, 0x32b, 0xb, 0x5, 0x56, 0x1, 0x5415208e, 0x10001, 0xc6, 0x5, 0xd05e, 0x1ff, 0xd, 0x2, 0x1, 0x3, 0x733c0cc0, 0x0, 0x75, 0x0, 0x5, 0x101, 0x6, 0x5, 0x0, 0x2, 0x1, 0x3, 0x2, 0x9, 0x0, 0x0, 0x1e, 0x1, 0x3, 0xa, 0x10001, 0x7f, 0x5d9, 0x80000001, 0x9, 0x2, 0x1, 0x6, 0xfffffeff, 0x8, 0x1, 0x7f, 0x5, 0x8, 0x7, 0x4, 0x7, 0x80000000, 0x0, 0x80, 0x6, 0xffff, 0x2c3, 0xffffffff, 0x4, 0x986, 0x9, 0x63, 0x80000001, 0x1000, 0xc6b0, 0x3a, 0x3, 0x42de, 0x800, 0x6, 0xeb, 0x5, 0x2, 0x1, 0xffffffff, 0x5c, 0xff, 0x10, 0xa11e, 0x3, 0x1, 0x1, 0x14, 0xfffffff7, 0x32e, 0x33, 0x32, 0x1, 0xa6, 0xb, 0x7, 0x4, 0x565d8bf3, 0x5, 0xffffff81, 0xf, 0xfb, 0x5, 0x124, 0x10001, 0x2, 0xb, 0xffff, 0x3, 0x1cc, 0x2d92, 0x1ff, 0xfffff529, 0x20000000, 0x2, 0x8, 0x5, 0x7, 0x2, 0x7, 0x5, 0x7fffffff, 0x3, 0xb, 0xfffffff8, 0x4, 0x9, 0x2c00000, 0x80000000, 0x2, 0x3, 0x3, 0xd90, 0x9, 0x8f18, 0x10001, 0x7, 0x8, 0x7fffffff, 0x5, 0x8, 0x3, 0xe00e, 0xffffff81, 0x4, 0x2, 0x7, 0x6, 0x5, 0x5, 0x4, 0x5, 0x8, 0x2, 0x100000, 0xb6e9, 0x1dfa000, 0x2, 0x97, 0x5, 0xd, 0x1, 0x9, 0x5, 0x4, 0x1, 0x22e, 0xf6, 0x7fff, 0x7ff, 0xfffffff0, 0x7f, 0xd, 0xb36, 0xa4, 0x7, 0x9f, 0xc, 0x2, 0x200, 0x10, 0x1, 0x4, 0x8, 0x2400, 0x1f7, 0xffff8000, 0x8, 0x80000000, 0x5, 0x5d389b88, 0x7, 0xfffff613, 0x18, 0x5, 0x2110, 0x4, 0x1, 0x4, 0x1, 0x7fff, 0x7fffffff, 0x4, 0xc, 0xcf4, 0xde65, 0x7, 0x433, 0x20]}]}, @TCA_FW_INDEV={0x14, 0x3, 'dummy0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x8}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfe4}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x400}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x2618}, 0x1, 0x0, 0x0, 0x20000841}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'h{-', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}]}}}}}, 0x0) (async, rerun: 32) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000000c0)={@local, 0x78, r11}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) 2m7.336321706s ago: executing program 2 (id=623): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getrule={0x14, 0x22, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x44805) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x7d}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x800) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000000)=0x100000, 0x4) 2m6.823169934s ago: executing program 2 (id=630): r0 = socket$kcm(0x10, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2m6.639351317s ago: executing program 2 (id=635): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}]}, 0x54}}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, &(0x7f0000000300)) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000906010200000000000000000200ffff180007800c0001800800011ee000000208000a40000000020900020073797a31000000000500010007000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m5.65415372s ago: executing program 2 (id=644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)={0x14, 0x0, 0x5, 0x3, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4008041}, 0x840) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x48) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x19, @remote, 'vlan1\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32], 0x4c}}, 0x3f00) 2m5.273374376s ago: executing program 2 (id=648): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x3, 0x2, {0x0, 0xff, 0x2}, {0x1, 0x0, 0x3}, 0x2, 0xfe}, {0x1, 0x0, {0x1, 0x1, 0x4}, {0x0, 0xf0, 0x1}, 0xfd, 0x958541acc69741c9}], 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) (async) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) (async) read(r3, &(0x7f0000002340)=""/232, 0xe8) (async) r5 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000c40)='\x00\x00', 0x2}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000000000000a27300110009000000000009000000000000000010000011000000008400007de60451cf5560"], 0x28}, 0x40cdd) 1m50.170342338s ago: executing program 32 (id=648): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x3, 0x2, {0x0, 0xff, 0x2}, {0x1, 0x0, 0x3}, 0x2, 0xfe}, {0x1, 0x0, {0x1, 0x1, 0x4}, {0x0, 0xf0, 0x1}, 0xfd, 0x958541acc69741c9}], 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) (async) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) (async) read(r3, &(0x7f0000002340)=""/232, 0xe8) (async) r5 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000c40)='\x00\x00', 0x2}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000000000000a27300110009000000000009000000000000000010000011000000008400007de60451cf5560"], 0x28}, 0x40cdd) 3.793266249s ago: executing program 3 (id=2447): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="4d00330040bc01000802110000000000000000000250505050509400ac0146c0000f9db4a84f2beb2f4ecb945a20a904b02d1a00080010000000000000000300010008000000000406000000090000000600cd000000000004008e00080057"], 0x88}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x24008080) r4 = epoll_create1(0x0) r5 = socket$inet(0x2, 0x2, 0x0) sendfile(r5, r4, 0x0, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @remote}}}}, 0x0) 3.667273853s ago: executing program 3 (id=2450): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, &(0x7f0000000000)=0x380000, r1, &(0x7f0000000040)=0xfbde, 0x2, 0x1) (async) splice(r0, &(0x7f0000000000)=0x380000, r1, &(0x7f0000000040)=0xfbde, 0x2, 0x1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000006400000000000000050e14f7267d14e4e0740a8dc09bd34eefcb250024cf44ea5eff639bba52f785a2e02d0aef10766761eaafdf3cf56c4e1470dd72aa10731072546f5f7bc82bbc7e483a2f9bac54e0f63f1dc0e84968d8d7a24cfd8ba3dc8b2da0d9902ea31419fcdc9d4673838ecf8f9ff35b6acbd4056b9a015d", @ANYRES16=r3, @ANYBLOB="010000000000000000000202020005000300000000000900010073797a31000000000500040000000000"], 0x30}, 0x1, 0x40030000000000}, 0x0) (async) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000006400000000000000050e14f7267d14e4e0740a8dc09bd34eefcb250024cf44ea5eff639bba52f785a2e02d0aef10766761eaafdf3cf56c4e1470dd72aa10731072546f5f7bc82bbc7e483a2f9bac54e0f63f1dc0e84968d8d7a24cfd8ba3dc8b2da0d9902ea31419fcdc9d4673838ecf8f9ff35b6acbd4056b9a015d", @ANYRES16=r3, @ANYBLOB="010000000000000000000202020005000300000000000900010073797a31000000000500040000000000"], 0x30}, 0x1, 0x40030000000000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000f080003400000000108000440000000220500020007000000240001800a000100726564697200000014000280080002400000000808000140000000120900010073797a30"], 0xf8}}, 0x40040a4) r5 = socket$inet_sctp(0x2, 0x4, 0x84) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) (async) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) 3.595182994s ago: executing program 0 (id=2452): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0xf04c5000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x11) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0xa693a000) 3.537456182s ago: executing program 1 (id=2453): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x38, 0x48, 0xe4945d2eb074039d, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2={0xff, 0x5}}]}, 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000025c0)='ns/cgroup\x00') r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xa11c}, 0x8) write$bt_hci(r3, &(0x7f0000000000)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc8, {0xfe, 0x0, 0x6, 0xfffffffd, 0x3fb, 0xa}, {0x2a, 0x1, 0x4, 0x1ff, 0x7, 0x5ff}}}}, 0x25) preadv(r2, 0x0, 0x0, 0x0, 0x0) 3.491973636s ago: executing program 0 (id=2454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) close(0x3) sendmsg$802154_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="99132437984f932d7ab395c4ae", 0xd}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x894a, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) write$ppp(r2, &(0x7f0000000240)="b0b152a800df65d02876069abcc69764db90429d3b8f36db8220bdf07cc78bc8f41188fd76fe8f1a3a436d1db93d4190c955ac50acc018f4a519b204d4dd996e6a75dde8afe108272407e9ce155bfdb39032afdc77cb7226201df93cb3f71882055d14acd1e921938322ae90e840679f", 0x70) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) poll(&(0x7f00000044c0)=[{r6, 0x209}], 0x1, 0x8000) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000200)=ANY=[], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x18, 0x1, 0x7) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0c0004000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800074000000000080003400000001608000140000000120800024000000000080004400000000020000180080001006e61740014000280080003400000000008000540000000000900010073797a30"], 0x150}}, 0x0) socket$isdn(0x22, 0x3, 0x5) 3.415200138s ago: executing program 1 (id=2456): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r5, &(0x7f0000000980)='io.stat\x00', 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)={[{0x2d, 'freezer'}, {0x2d, 'io'}]}, 0xd) r6 = openat$cgroup_int(r4, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r7, r6, 0x0, 0xe25) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, &(0x7f0000000080)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000000)=0x1010612, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7ff}, &(0x7f0000000280)=0x8) 3.261719796s ago: executing program 5 (id=2457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x2b, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.171032452s ago: executing program 1 (id=2458): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000880)={'wlan1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000780)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)="1f", 0x1}], 0x1}}], 0x1, 0x3404c8d4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000880)={'wlan1\x00'}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmmsg$inet6(r4, &(0x7f0000000780)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)="1f", 0x1}], 0x1}}], 0x1, 0x3404c8d4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) 3.168436763s ago: executing program 3 (id=2459): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x1a, 0xf, &(0x7f0000000440)=@ringbuf, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x1c}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@ipv6_newroute={0x3c, 0x18, 0x309, 0x0, 0x0, {0xa, 0x20, 0x80, 0x0, 0xfd, 0x0, 0xfd}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x10004044) 3.034255416s ago: executing program 5 (id=2460): bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xff}, 0x1c) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) (async) r4 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB="08000d000000000008003f000802"], 0x4c}}, 0x0) 3.021766448s ago: executing program 1 (id=2461): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000ec0), 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000200af501000000000000000001"], 0x84}, 0x1, 0x0, 0x0, 0x844}, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r2, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="20000280", @ANYRES32=r3, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r5], 0x58}}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000280)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r7, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_FIRMWARE_NAME={0xf, 0x14, 'SMC_PNETID\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xf, 0x14, 'SMC_PNETID\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8041) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, 0x0}, 0x30004084) (async, rerun: 32) pread64(r0, &(0x7f0000000040)=""/146, 0x92, 0xce) 2.859092053s ago: executing program 5 (id=2462): r0 = socket$packet(0x11, 0x3, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000040)={'wg2\x00'}) 2.804991784s ago: executing program 1 (id=2463): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r2 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write(r2, &(0x7f0000000000)="fbb9b307fa130b923e74c84c68675b9e870ea9c6c897e37a3e5e65752a37b70062afd0f4be7b2724aa772c4af277210cc211327af71e82b8b80177c6cb8ed832fd4bd7645b505d98cdca463f0d03dccd7758e567d9f2edfad51e0e9c0bc7ffd3da4d0324f20912c84fd72bc48bf87639fd5473ac3dd0de0599e1f3fe", 0x7c) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020a10100000005000800000000000600", @ANYRES8=r7], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r11 = socket(0x10, 0x80003, 0x0) (async, rerun: 32) r12 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7f}}}]}, 0x3c}}, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x3, 0x3, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x20, 0x3, 0x80000001}}) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) (async, rerun: 64) r16 = socket(0x2a, 0x2, 0x0) (rerun: 64) getsockname$packet(r16, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {0x0, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x44}}, 0x20040040) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x7, 0xe, 0x4, @private2, @mcast1, 0x80, 0x7, 0x3, 0x7}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'gre0\x00', 0x0, 0x10, 0x20, 0x7, 0x1, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010101, {[@noop, @lsrr={0x83, 0xf, 0x2a, [@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010102, @multicast1]}]}}}}}) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x11c, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20048004}, 0x20000000) (async) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000003b005000128009000100766c616e000000004000028006000100000000000c00020000000000000000000c00020000000000000000001c0004800c00060004000000000800000a0001"], 0x80}, 0x1, 0xba01}, 0x0) (rerun: 32) 2.788514311s ago: executing program 4 (id=2464): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='macvlan1\x00', 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x21e7a6f1, 0x1bb6, 0xb}) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'hugetlb'}, {0x2d, 'perf_event'}, {0x2d, 'hugetlb'}, {0x2b, 'net_prio'}]}, 0x28) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x19e52a8, @loopback, 0x4}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="6fb0685b1e3ccef2210c3140a1ce6158eaea1d1224f50d36457ff325bd245008eedb7e9fcda24b60025bcd394097b187b2741cdf0879cdf4cd68ebc963be6eedfd6d08086a613fd28b932299531ffd5b3ac16e8fc76ed8f6a58899ff481bb96a3d5dd920606a1199b07cdea902fb231dce6e682de408deb777c0a816055302da2f6d927767718685a195ac15f361898efedaa6a3511eb012e2f60250a6db7cee49a97abc0dd1f531e35dbdbcefbe417c0aaa621af6c07ec4370e3ff0b3096c04ead96157872de3cb34cc2c85942bb69dc1abb247635c3fd7", 0xd8}], 0x1, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}], 0x38}, 0x4000) sendto$unix(r1, &(0x7f0000000300)="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", 0x1000, 0x4, 0x0, 0x0) r2 = accept$unix(r1, 0x0, &(0x7f0000001300)) recvfrom$unix(r2, &(0x7f0000001340)=""/147, 0x93, 0x100, &(0x7f0000001400)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001480)={0xd, 0x0, 0x7fff, 0x401, 0x0}, &(0x7f00000014c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001500)=@sack_info={r3, 0x80}, 0xc) recvmmsg$unix(r1, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001540)=""/162, 0xa2}, {&(0x7f0000001600)=""/247, 0xf7}, {&(0x7f0000001700)=""/128, 0x80}, {&(0x7f0000001780)=""/111, 0x6f}, {&(0x7f0000001800)=""/239, 0xef}, {&(0x7f0000001900)=""/194, 0xc2}, {&(0x7f0000001a00)=""/158, 0x9e}, {&(0x7f0000001ac0)=""/96, 0x60}, {&(0x7f0000001b40)=""/226, 0xe2}], 0x9, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001d80), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001e00)=""/198, 0xc6}, {&(0x7f0000001f00)=""/212, 0xd4}], 0x2, &(0x7f0000002040)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000002100)=""/34, 0x22}, {&(0x7f0000002140)=""/3, 0x3}, {&(0x7f0000002180)=""/248, 0xf8}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/93, 0x5d}, {&(0x7f0000003300)=""/185, 0xb9}, {&(0x7f00000033c0)=""/41, 0x29}], 0x7}}, {{&(0x7f0000003480)=@abs, 0x6e, &(0x7f0000004580)=[{&(0x7f0000003500)=""/94, 0x5e}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}, {{&(0x7f00000045c0), 0x6e, &(0x7f0000004800)=[{&(0x7f0000004640)=""/59, 0x3b}, {&(0x7f0000004680)=""/28, 0x1c}, {&(0x7f00000046c0)=""/252, 0xfc}, {&(0x7f00000047c0)=""/17, 0x11}], 0x4, &(0x7f0000004840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004980)=""/110, 0x6e}, {&(0x7f0000004a00)=""/146, 0x92}, {&(0x7f0000004ac0)=""/222, 0xde}, {&(0x7f0000004bc0)=""/49, 0x31}, {&(0x7f0000004c00)=""/73, 0x49}], 0x5, &(0x7f0000004d00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000004d40), 0x6e, &(0x7f0000004e80)=[{&(0x7f0000004dc0)}, {&(0x7f0000004e00)=""/99, 0x63}], 0x2, &(0x7f0000004ec0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}], 0x7, 0x10121, &(0x7f0000005100)) recvmsg$can_raw(r13, &(0x7f0000006780)={&(0x7f0000005140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000006640)=[{&(0x7f00000051c0)=""/160, 0xa0}, {&(0x7f0000005280)}, {&(0x7f00000052c0)=""/44, 0x2c}, {&(0x7f0000005300)=""/90, 0x5a}, {&(0x7f0000005380)=""/117, 0x75}, {&(0x7f0000005400)=""/114, 0x72}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/214, 0xd6}, {&(0x7f0000006580)=""/143, 0x8f}], 0x9, &(0x7f0000006700)=""/119, 0x77}, 0x40000000) bpf$TOKEN_CREATE(0x24, &(0x7f00000067c0), 0x8) sendmsg$inet_sctp(r1, &(0x7f0000006900)={&(0x7f0000006800)=@in={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000006880)=[{&(0x7f0000006840)="637e2e6474e087e81803bc377804de333a39d708f583067e401ac581d6b1cc77779635cafb5f4849aef461a131c5d55e7337e9b66e403d05b5", 0x39}], 0x1, &(0x7f00000068c0)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @init={0x18, 0x84, 0x0, {0x523, 0x4, 0x1000, 0x200}}], 0x38, 0x1274bc1b5a4e8a6f}, 0x4000000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000006940)=@sack_info={r3, 0x2bda, 0x200}, &(0x7f0000006980)=0xc) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000006a80)={&(0x7f00000069c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006a40)={&(0x7f0000006a00)={0x18, 0x3f9, 0x400, 0x70bd28, 0x25dfdbfc, {0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000040}, 0x40080) ioctl$SIOCX25SENDCALLACCPT(r12, 0x89e9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000006c00)={'ip_vti0\x00', &(0x7f0000006b00)={'erspan0\x00', 0x0, 0x8, 0x80, 0x9, 0x3, {{0x30, 0x4, 0x2, 0x0, 0xc0, 0x68, 0x0, 0x8, 0x2f, 0x0, @empty, @loopback, {[@rr={0x7, 0x1f, 0x74, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @broadcast, @remote]}, @rr={0x7, 0x13, 0x87, [@local, @local, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1]}, @ssrr={0x89, 0x13, 0x2f, [@dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x20}, @multicast1, @dev={0xac, 0x14, 0x14, 0xc}]}, @ssrr={0x89, 0x7, 0x4, [@dev={0xac, 0x14, 0x14, 0x30}]}, @timestamp_prespec={0x44, 0x4c, 0xc9, 0x3, 0x4, [{@loopback, 0x8}, {@local}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x6c}, {@broadcast, 0xfffffffa}, {@local, 0x200}, {@empty, 0x7a}, {@empty, 0x5}, {@multicast2, 0x5}, {@empty, 0xfffffff8}]}, @ssrr={0x89, 0xf, 0x5f, [@dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010100, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r8, &(0x7f0000006cc0)={&(0x7f0000006ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000006c80)={&(0x7f0000006c40)=@ipv6_getnetconf={0x2c, 0x52, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0xb4}, @NETCONFA_IFINDEX={0x8, 0x1, r15}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r16 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r16, &(0x7f0000006dc0)={&(0x7f0000006d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006d80)={&(0x7f0000006d40)={0x10, 0x3e8, 0x400, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000004) write$cgroup_subtree(r11, &(0x7f0000006e00)={[{0x6, 'pids'}, {0x2d, 'io'}, {0x2d, 'rlimit'}, {0x2d, 'blkio'}, {0x2d, 'net_cls'}, {0x2b, 'net'}]}, 0x27) socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0x8008f513, &(0x7f0000006e40)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000006f40)={'syztnl1\x00', &(0x7f0000006ec0)={'syztnl2\x00', r14, 0x2b, 0xc3, 0xff, 0x699d, 0x42, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7800, 0x0, 0x94}}) sendmsg$nl_route(r4, &(0x7f0000007080)={&(0x7f0000006e80), 0xc, &(0x7f0000007040)={&(0x7f0000006f80)=@RTM_NEWMDB={0x98, 0x54, 0x8, 0x70bd26, 0x25dfdbfc, {0x7, r17}, [@MDBA_SET_ENTRY={0x20, 0x1, {r15, 0x0, 0x0, 0x2, {@in6_addr=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r15, 0x0, 0x1, 0x4, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r15, 0x1, 0x0, 0x0, {@ip4=@multicast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r14, 0x1, 0x0, 0x1, {@ip4=@dev={0xac, 0x14, 0x14, 0x32}, 0x86dd}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r18 = syz_genetlink_get_family_id$nbd(&(0x7f0000007100), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000007200)={&(0x7f00000070c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000071c0)={&(0x7f0000007140)={0x50, r18, 0x400, 0x70bd2d, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfd7a}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xc0f}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8810}, 0x4) 2.617816272s ago: executing program 4 (id=2465): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) read$alg(r5, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r5, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be3", 0xe}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) (async) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) (async) r6 = epoll_create1(0x0) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x20, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0xa0028000}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r9, 0x84, 0x78, 0x0, 0x0) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x38, 0x2d, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x4, 0x800}, @nested={0x24, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c169ef3fa7a52"]}]}, 0x38}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$inet_udp(0x2, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.333229323s ago: executing program 3 (id=2466): r0 = socket(0x26, 0x4, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000000), 0x4) write(r0, &(0x7f0000000280)="2c0000001d005f80004000000000000002000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) 2.265406924s ago: executing program 3 (id=2467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x200000100000011, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x7, 0x6, @local}, 0x14) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x34}], 0x1, 0x0, 0x0, 0x20000080}, 0x4000) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000001c0)={0x290, 0x6, 0x0, 0x7}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000010900010073797a31000000c1f80004801800018008000100666962000c00028008000240000000010900020073797a3200000000140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={r6, 0x9}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast2}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x7, 0x2, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x7, 0x67, [@rand_addr=0x64010100]}]}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x200000100000011, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) (async) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x7, 0x6, @local}, 0x14) (async) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x34}], 0x1, 0x0, 0x0, 0x20000080}, 0x4000) (async) pipe(&(0x7f0000000140)) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000001c0)={0x290, 0x6, 0x0, 0x7}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000010900010073797a31000000c1f80004801800018008000100666962000c00028008000240000000010900020073797a3200000000140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={r6, 0x9}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) (async) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast2}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x7, 0x2, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x7, 0x67, [@rand_addr=0x64010100]}]}}}}}}}, 0x0) (async) 2.098954378s ago: executing program 3 (id=2468): r0 = socket(0x1e, 0x805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r0}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r0}]}}}]}, 0x80}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="0000000000f0ff0000000000000000001d13b44d19b85397000007000000000000000000902c3c6c789723abf0f64a69913f537dbc7544b5c459440a8cb047fdf65a039f571aa209eebe56c51b8d4c86a462b88b8b4772b0129dc3cd94e42718ef3e99a749", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) r5 = socket(0x2, 0x3, 0xff) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfb}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000081}, 0x20008081) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x130, 0x130, 0x130, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x18, 0x2, @l2={'eth', 0x3a, 'geneve0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4084}, 0x1) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000000c0)={{r1}, 0x7, &(0x7f0000000080)=[0xa, 0x4, 0x5000000000000000, 0x200, 0x2, 0x3, 0x5], 0x9, 0x7, 0x1}) 811.663598ms ago: executing program 4 (id=2469): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008035"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) r1 = socket(0x2, 0x3, 0x100000001) setsockopt(r1, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) (async) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x20, 0x1, 0x0, @private=0xa010100, @loopback}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 789.125476ms ago: executing program 0 (id=2470): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r1 = socket(0xa, 0x3, 0x3a) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, {{0xa, 0x0, 0x0, @local}}}, 0x18) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x200}, 0x1c) close(0xffffffffffffffff) close(r0) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r4, 0x0, 0x7, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000530408002dbd7000fbdbdf25a3a7018a45a10004", @ANYRES64=r1, @ANYRESHEX=r2, @ANYRESOCT=r2, @ANYRES64=r4], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) close(r5) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x23, 0x0, "f304a2c4303659302b599b8768ea2d3c9deb198bf7842d1355de4bc62f804a6b5455b7ca310a48dd18ac88e13b1c3e1e423e80debbd473f61079dfd01dc3ba8b23485999262cbf140b76b46630a4962d"}, 0xd8) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) 630.9481ms ago: executing program 4 (id=2471): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x0, 0x7, 0xfffffffffffff801}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x34, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906, "434b5682f8682ed45b171376ad6a4e38b7aea7854bdfacbcb6245fd5539d8ffe6a8f98cecd73"}}}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2}, 0x2000) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x80, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r8, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0xfffe}, {0x0, 0x5}}}]}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, r1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) 629.653763ms ago: executing program 1 (id=2472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x4008084) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_newvlan={0x24, 0x70, 0x1, 0x70bd2a, 0x25dfdbfd, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xf0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000016}, 0x80090) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000440), 0x10) listen(r9, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x0, 0x4}, 0x28) r11 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x890b, &(0x7f0000000000)={r11}) connect$vsock_stream(r10, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r10, &(0x7f0000000240), 0x0) r12 = accept4$unix(r9, 0x0, 0x0, 0x0) recvmsg(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="0600cd0000000000590033008020090008021100000108021100"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r13, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r13, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10) 629.088856ms ago: executing program 5 (id=2473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="cc0000001b000100000000000000000000000000000000000000000000000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffe0000000000008000000000000000000000000000000000000000c"], 0xcc}}, 0x0) 553.644129ms ago: executing program 0 (id=2474): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x28, 0x20, 0x1, 0x401}, &(0x7f0000000280)=0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x400003, 0x80040009}, 0x48) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="fdb767b4a404d64b9639b0d4501d521da5d9"], 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) 497.433272ms ago: executing program 5 (id=2475): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000ec0)="9925f561", 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000fc0)=[@sack_perm, @window={0x3, 0x1ff, 0xeed}, @mss={0x2, 0x3575f4f3}, @window={0x3, 0x30, 0x9}], 0x4) 450.711658ms ago: executing program 0 (id=2476): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000040)) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x4, 0x1ff, 0x3, 0xffff}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48c0}, 0x40000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@multicast2}, {@in6=@local, 0x1, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@dev}]}, 0x104}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010002000000fcdbdf2517000000400006803c000400"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x7c, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc00000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r6, &(0x7f0000001380)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) close(0x3) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r1, 0x2, 0x4, 0x7f}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r8, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'/11, @ANYRES16=0x0, @ANYBLOB="02002abd7000fddbdf2506000000080001007063690011000200303030303a30303a31302e300000000008000300020000000600040003000000080001007063690011000200303030303a30303a31302e300000000008000300000000000600040003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000884}, 0x4000000) 388.139832ms ago: executing program 4 (id=2477): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f519b0b9a88acdc655996a533db62158fd851e9db6028bd39d5171df3b8b18ae2dbf1e41bbe930467edd78950fda841a64724a13db2b29effd28b49ca44b877fe7a6cdcc70308e7ee6af72f10ae10c2ceae08b6219aab5faf879db3efe64a346b9a6c149ecd32452714c6339c7b529b8820084aaa5af8335fc8be47b87c7b4c5d00ef736cc09b49029c1b", @ANYRESDEC, @ANYBLOB="087333f30c86d7e2919bac32", @ANYRESDEC, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESDEC], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES64=r1, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRESDEC=r1], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x4000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x18, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f00800fee0050000000000002f77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff23}, 0x2c) 306.232983ms ago: executing program 5 (id=2478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r3, 0x1, 0x9, 0x0, &(0x7f0000000dc0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000111ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20"], 0x4b) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000007c0)={'vxcan1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000880)={&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000280)="ed34ca577c1680f86cbf3fa5ff08865d8426327ae6ee5b3f4d2784cb6c4f50af4877aacdec8e4aa7985ee0011f773e37330db3b5786dc954eb9e8a2be1dc36a7c6beccdabd51d9568dee7d9a6cce9042dfa37592214427b04880fb20b1a91b5789d9315c83ca73ccd25d6b7cfa738a577d3d314b6de6acd950ebfe1d5ee8a2db0ba2ea3d6838133d9cd1c0726be3acb5f3816dbf7af2d9bfd44ca794f9eb2166d38c", 0xa2}, {&(0x7f00000003c0)="2d9f18948d20e9ed3e83eb9f07b3b19fa7fdf1983225657aa8d8c1bc9771da3602d05e412c4fc4c1b6a24ec59e0c5fc866efbedcdf8f56387accae400a5240160f47f8580001a2739c56418e0fb0cd4bebf118c8a373f421fe16a9b0a9006c2c20b824e5e9641bfb08b29d213227a9ee8d00ee04c556e5b416052ceb49250298b7b44b4763ee46eff062555809e58ef3645e77661b5b40d081f7855a295984e223140d42d6d8a09552ed6c8f", 0xac}, {&(0x7f0000000480)="420bb3edd8578ef68bf7324dd17349d1ec6519b3cf5a4c1b0a38ebce7abbd09d631080011f1faecfa1b9d1216603eda8dca94264de499ea2016238b0d521dcb03741c08d36568da875ed8c2e7a9538d61419aa5a5fb7cc70c4d1413efa2f2bbab65529dad058b262dfb6863fbc99343c8b0c727c9cabbb46e76a9cce8fd50136306ceadb557d175b2bcc3811e58b98542476d73a1a2fbed0416a3c76b8f856c2fc016c0874e976e17f6de33867479f9447c2d35ada", 0xb5}, {&(0x7f0000000540)="215edbfd8b67b2b2cc7a97fd92195384c32313afbd673978b1a2a93fdfe0b30e24ce3b5e9bdb75170b234cf664502002e5cbf808a68c03b1b9daf1dfb7f28dd837733e599ee02c4c4608182dfa42bfaa10c8f4dba1595565ccc3031fac18fc8efe1254b67303ed30bf47a466db5425b86a5ae733462488bc2cadb8195f0020cd47dff0052f19b86616a5fe2e0269747f7e380afe6fa2fb990110974e7cb3f1fa77062f6cd2ef275a1b3bcaf2db5bd87e1ae028ca182c8caf842a22fb383bd5acd5690e047ceee4a12338e6c2689ac81a2e8946a7717a136a6e44a987ac15ef833ed7822b92", 0xe5}, {&(0x7f00000001c0)="47fe36ac86c1c3b7bb63d11002e76803f09b19", 0x13}, {&(0x7f0000000640)="d363200358823f1bf83e3c44b36b8dff238b8df9209795fc41e8b49cd9d929e1de153b6572d84ec9c602dfa061851e6e36ec89f07c7c68ee1c8c26531ba5f765f2949f3c0d871756594e9dabf3ba822ae7aed64d1def029e4c596dfe2cfe165e5ebbb3c266160ec90344f2cdb108e503fdb1a5043e3fff980686e77393ebcaca9b15a9cdb0403d2bb37c218a241e34bb40f14f3f", 0x94}, {&(0x7f0000000340)="889e9b8a2ab34105db090ad26ca499fc58573da5b5fe70a60ba97cf1a95300df1cc013bf34ef9a4d2776e2b605afa3", 0x2f}], 0x7, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @remote}}}], 0x50}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) 175.222599ms ago: executing program 0 (id=2479): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f000001b640)=""/102397, 0x18ffd}], 0x1, 0x1903d}}], 0x48}, 0x0) 0s ago: executing program 4 (id=2480): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x44, r0, 0x1, 0xfffffffe, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x57c}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x44}}, 0x4000) kernel console output (not intermixed with test programs): ribute type 25 has an invalid length. [ 118.371930][ T6644] delete_channel: no stack [ 118.377617][ T6647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.169'. [ 118.382518][ T6644] delete_channel: no stack [ 118.396849][ T6644] delete_channel: no stack [ 118.401399][ T6645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.167'. [ 118.415350][ T6644] delete_channel: no stack [ 118.420078][ T6644] delete_channel: no stack [ 118.424900][ T6644] delete_channel: no stack [ 118.455840][ T6644] delete_channel: no stack [ 118.467326][ T6644] delete_channel: no stack [ 118.478003][ T6644] delete_channel: no stack [ 118.490350][ T6644] delete_channel: no stack [ 118.500269][ T6644] delete_channel: no stack [ 118.506324][ T6644] delete_channel: no stack [ 118.511789][ T6644] delete_channel: no stack [ 118.516614][ T6644] delete_channel: no stack [ 118.536756][ T6644] delete_channel: no stack [ 118.552467][ T6644] delete_channel: no stack [ 118.568143][ T6644] delete_channel: no stack [ 118.581820][ T6644] delete_channel: no stack [ 118.615165][ T6644] delete_channel: no stack [ 118.655221][ T6644] delete_channel: no stack [ 118.681575][ T6644] delete_channel: no stack [ 118.686273][ T6644] delete_channel: no stack [ 118.699601][ T6644] delete_channel: no stack [ 118.715875][ T6644] delete_channel: no stack [ 118.761619][ T6644] delete_channel: no stack [ 118.766296][ T6644] delete_channel: no stack [ 118.786858][ T6644] delete_channel: no stack [ 118.798729][ T6676] trusted_key: syz.0.170 sent an empty control message without MSG_MORE. [ 118.808159][ T6644] delete_channel: no stack [ 118.823494][ T6675] netlink: 52 bytes leftover after parsing attributes in process `syz.1.174'. [ 118.829124][ T6644] delete_channel: no stack [ 118.863135][ T6644] delete_channel: no stack [ 118.866176][ T6675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.174'. [ 118.878452][ T6644] delete_channel: no stack [ 118.902362][ T6644] delete_channel: no stack [ 118.919937][ T6644] delete_channel: no stack [ 118.931687][ T6644] delete_channel: no stack [ 118.957790][ T6644] delete_channel: no stack [ 118.979401][ T6644] delete_channel: no stack [ 118.996102][ T6644] delete_channel: no stack [ 119.013616][ T6644] delete_channel: no stack [ 119.021751][ T6644] delete_channel: no stack [ 119.038163][ T6644] delete_channel: no stack [ 119.046363][ T6644] delete_channel: no stack [ 119.053105][ T6644] delete_channel: no stack [ 119.057753][ T6644] delete_channel: no stack [ 119.068012][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'. [ 119.085504][ T6644] delete_channel: no stack [ 119.099488][ T6644] delete_channel: no stack [ 119.112588][ T6644] delete_channel: no stack [ 119.117352][ T6644] delete_channel: no stack [ 119.155124][ T6644] delete_channel: no stack [ 119.161327][ T6644] delete_channel: no stack [ 119.172337][ T6644] delete_channel: no stack [ 119.176971][ T6644] delete_channel: no stack [ 119.214659][ T6682] netlink: 248 bytes leftover after parsing attributes in process `syz.1.176'. [ 119.222700][ T6644] delete_channel: no stack [ 119.232819][ T6644] delete_channel: no stack [ 119.242483][ T6644] delete_channel: no stack [ 119.260487][ T6644] delete_channel: no stack [ 119.265129][ T6644] delete_channel: no stack [ 119.299124][ T6644] delete_channel: no stack [ 119.303766][ T6644] delete_channel: no stack [ 119.329310][ T6644] delete_channel: no stack [ 119.333933][ T6644] delete_channel: no stack [ 119.344246][ T6644] delete_channel: no stack [ 119.349175][ T6644] delete_channel: no stack [ 119.353759][ T6644] delete_channel: no stack [ 119.362830][ T6644] delete_channel: no stack [ 119.367659][ T6644] delete_channel: no stack [ 119.979483][ T6711] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 120.536052][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.193'. [ 120.698170][ T6743] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 120.997343][ T6759] netlink: 'syz.1.204': attribute type 1 has an invalid length. [ 121.107057][ T6763] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 121.124344][ T6763] gretap1: entered promiscuous mode [ 121.130211][ T6763] gretap1: entered allmulticast mode [ 121.802863][ T6801] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 121.854682][ T6801] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 122.727070][ T6848] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 122.780037][ T6848] gretap1: entered promiscuous mode [ 122.785534][ T6848] gretap1: entered allmulticast mode [ 123.005775][ T6863] __nla_validate_parse: 10 callbacks suppressed [ 123.005792][ T6863] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.239'. [ 123.054733][ T6858] tunl0: entered promiscuous mode [ 123.080836][ T6858] netlink: 'syz.0.236': attribute type 3 has an invalid length. [ 123.124252][ T6858] netlink: 9 bytes leftover after parsing attributes in process `syz.0.236'. [ 123.152812][ T6866] syzkaller1: entered promiscuous mode [ 123.160089][ T6866] syzkaller1: entered allmulticast mode [ 123.635708][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'. [ 123.659095][ T6902] syzkaller0: create flow: hash 2621971371 index 1 [ 123.750466][ T6906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.249'. [ 123.771138][ T6894] tipc: Started in network mode [ 123.776059][ T6894] tipc: Node identity c69daaa3b04c, cluster identity 4711 [ 123.796010][ T6894] tipc: Enabled bearer , priority 0 [ 123.803552][ T6891] syzkaller0: delete flow: hash 2621971371 index 1 [ 124.912316][ T5934] tipc: Node number set to 1993452195 [ 125.017286][ T6906] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 125.028141][ T6906] gretap1: entered promiscuous mode [ 125.033898][ T6906] gretap1: entered allmulticast mode [ 125.043492][ T6903] syzkaller0: entered promiscuous mode [ 125.050145][ T6903] syzkaller0: entered allmulticast mode [ 125.070047][ T6860] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 125.167511][ T6903] tipc: Resetting bearer [ 125.187358][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.252'. [ 125.198825][ T6903] tipc: Disabling bearer [ 125.343044][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 125.426189][ T6917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.523827][ T6934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'. [ 125.544902][ T6940] netlink: 'syz.3.257': attribute type 2 has an invalid length. [ 125.546522][ T6922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.252'. [ 125.554913][ T6940] netlink: 119 bytes leftover after parsing attributes in process `syz.3.257'. [ 125.566440][ T6922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.252'. [ 125.802837][ T6946] netlink: 'syz.0.258': attribute type 10 has an invalid length. [ 125.861669][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.892964][ T6946] bridge_slave_1: left allmulticast mode [ 125.900073][ T6946] bridge_slave_1: left promiscuous mode [ 125.912870][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.931765][ T6946] bridge_slave_1: entered allmulticast mode [ 125.938150][ T6946] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 126.178500][ T6963] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 126.536570][ T6979] xt_cgroup: path and classid specified [ 127.178147][ T6997] netlink: 'syz.4.276': attribute type 29 has an invalid length. [ 127.566192][ T7015] netlink: 'syz.1.281': attribute type 2 has an invalid length. [ 127.713864][ T7014] team0: Device wireguard0 is of different type [ 127.956614][ T7034] netlink: 'syz.2.286': attribute type 2 has an invalid length. [ 128.029248][ T7037] __nla_validate_parse: 5 callbacks suppressed [ 128.029267][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 128.064945][ T7041] netlink: 13 bytes leftover after parsing attributes in process `syz.4.288'. [ 128.103125][ T7041] netlink: 13 bytes leftover after parsing attributes in process `syz.4.288'. [ 128.127561][ T7046] netlink: 204 bytes leftover after parsing attributes in process `syz.2.286'. [ 128.154258][ T7034] xt_CT: No such helper "snmp" [ 128.186977][ T7042] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 128.238777][ T7049] netlink: 'syz.0.289': attribute type 21 has an invalid length. [ 128.273352][ T7049] netlink: 'syz.0.289': attribute type 22 has an invalid length. [ 128.303792][ T7049] netlink: 'syz.0.289': attribute type 23 has an invalid length. [ 128.331839][ T7049] netlink: 'syz.0.289': attribute type 25 has an invalid length. [ 128.362365][ T7049] netlink: 96 bytes leftover after parsing attributes in process `syz.0.289'. [ 128.461027][ T7056] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.463265][ T5918] IPVS: starting estimator thread 0... [ 128.570959][ T7066] IPVS: using max 26 ests per chain, 62400 per kthread [ 128.631527][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 128.673906][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'. [ 128.753066][ T7080] netlink: 36 bytes leftover after parsing attributes in process `syz.0.297'. [ 128.831283][ T7078] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.300'. [ 128.856839][ T7070] netlink: 156 bytes leftover after parsing attributes in process `syz.0.297'. [ 129.263690][ T7084] IPVS: length: 135 != 8 [ 129.918991][ T7122] syzkaller1: entered promiscuous mode [ 129.924515][ T7122] syzkaller1: entered allmulticast mode [ 129.967845][ T7122] 8021q: VLANs not supported on wg1 [ 130.796833][ T7156] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 131.231065][ T7177] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 131.320751][ T7182] validate_nla: 1 callbacks suppressed [ 131.320769][ T7182] netlink: 'syz.4.336': attribute type 2 has an invalid length. [ 131.540376][ T7194] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 131.590085][ T7194] gretap1: entered promiscuous mode [ 131.604265][ T7194] gretap1: entered allmulticast mode [ 131.824020][ T7211] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.935103][ T7214] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 132.179141][ T7223] 8021q: VLANs not supported on ip6_vti0 [ 132.259413][ T7221] Cannot find add_set index 0 as target [ 132.766392][ T7242] netlink: 'syz.2.359': attribute type 3 has an invalid length. [ 132.796481][ T7249] netlink: 'syz.2.359': attribute type 3 has an invalid length. [ 132.914490][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.926052][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.283580][ T7269] __nla_validate_parse: 15 callbacks suppressed [ 133.283599][ T7269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.368'. [ 133.424717][ T7275] netlink: 40 bytes leftover after parsing attributes in process `syz.0.370'. [ 134.270056][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 134.305465][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 134.427043][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 134.470790][ T7329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.385'. [ 134.484188][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 134.529197][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'. [ 134.578028][ T7330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.387'. [ 134.951647][ T7349] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 135.050986][ T7357] netlink: 39 bytes leftover after parsing attributes in process `syz.2.397'. [ 135.215904][ T7357] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 136.139284][ T7402] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.368362][ T5857] block nbd0: Receive control failed (result -32) [ 136.672510][ T7437] openvswitch: netlink: Multiple metadata blocks provided [ 136.999383][ T7454] tipc: Started in network mode [ 137.028549][ T7454] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 137.035771][ T7454] tipc: Enabled bearer , priority 10 [ 137.398495][ T7465] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.405696][ T10] IPVS: starting estimator thread 0... [ 137.518404][ T7476] IPVS: using max 31 ests per chain, 74400 per kthread [ 137.940640][ T7490] ip6t_srh: unknown srh match flags 536B [ 138.150274][ T7506] netlink: 'syz.3.440': attribute type 11 has an invalid length. [ 138.158353][ T10] tipc: Node number set to 10136234 [ 138.316323][ T7513] __nla_validate_parse: 10 callbacks suppressed [ 138.316341][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'. [ 138.316908][ T7514] pim6reg1: entered promiscuous mode [ 138.358363][ T7514] pim6reg1: entered allmulticast mode [ 138.897471][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 138.912077][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 138.951105][ T7548] veth3: entered allmulticast mode [ 139.114237][ T7550] xt_CT: No such helper "syz0" [ 139.424123][ T7568] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 139.432061][ T7568] netlink: 'syz.2.452': attribute type 11 has an invalid length. [ 139.450548][ T7568] netlink: 224 bytes leftover after parsing attributes in process `syz.2.452'. [ 139.874025][ T7592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.457'. [ 140.155251][ T7604] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 140.686556][ T7634] sctp: [Deprecated]: syz.1.464 (pid 7634) Use of int in max_burst socket option deprecated. [ 140.686556][ T7634] Use struct sctp_assoc_value instead [ 141.184429][ T7653] xt_SECMARK: invalid mode: 0 [ 141.206665][ T7658] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 141.217071][ T7659] veth0: entered promiscuous mode [ 141.259538][ T7655] veth0: left promiscuous mode [ 141.380597][ T7668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.475'. [ 141.452633][ T7668] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 141.496504][ T7668] gretap1: entered promiscuous mode [ 141.510057][ T7668] gretap1: entered allmulticast mode [ 141.529573][ T7672] bridge0: port 1(syz_tun) entered blocking state [ 141.554296][ T7672] bridge0: port 1(syz_tun) entered disabled state [ 141.589969][ T7672] syz_tun: entered allmulticast mode [ 141.595925][ T7684] netlink: 32 bytes leftover after parsing attributes in process `syz.3.479'. [ 141.621897][ T7672] syz_tun: entered promiscuous mode [ 141.876446][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 141.912023][ T7690] openvswitch: netlink: nsh attr 1539 is out of range max 3 [ 141.928829][ T7690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.194037][ T7704] netlink: 11 bytes leftover after parsing attributes in process `syz.2.486'. [ 142.335776][ T7709] vlan2: entered promiscuous mode [ 142.342472][ T7709] bridge0: entered promiscuous mode [ 142.367614][ T7709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.488'. [ 142.389588][ T7711] sctp: [Deprecated]: syz.4.489 (pid 7711) Use of int in max_burst socket option. [ 142.389588][ T7711] Use struct sctp_assoc_value instead [ 142.772842][ T7732] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 142.992074][ T7750] tunl0: left promiscuous mode [ 143.026964][ T7750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.182475][ T7755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.214181][ T7757] macvlan2: entered promiscuous mode [ 143.220571][ T7757] macvlan2: entered allmulticast mode [ 143.227520][ T7757] bond1: (slave macvlan2): Opening slave failed [ 143.368478][ T7772] __nla_validate_parse: 5 callbacks suppressed [ 143.368497][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'. [ 143.437360][ T7772] netlink: 44 bytes leftover after parsing attributes in process `syz.0.506'. [ 143.483812][ T7777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'. [ 143.502466][ T7779] netlink: 'syz.3.507': attribute type 8 has an invalid length. [ 143.526227][ T7779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.507'. [ 143.835224][ T7794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.932093][ T7794] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 144.051641][ T7812] netlink: 52 bytes leftover after parsing attributes in process `syz.2.513'. [ 144.228819][ T7815] bond1: entered promiscuous mode [ 144.234022][ T7815] bond1: entered allmulticast mode [ 144.240515][ T7815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.427755][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 144.586780][ T7827] raw_sendmsg: syz.4.518 forgot to set AF_INET. Fix it! [ 144.787422][ T7846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 144.885892][ T7852] netlink: 44 bytes leftover after parsing attributes in process `syz.3.526'. [ 144.918535][ T7852] netlink: 43 bytes leftover after parsing attributes in process `syz.3.526'. [ 144.980572][ T7852] netlink: 'syz.3.526': attribute type 6 has an invalid length. [ 145.017146][ T7852] netlink: 'syz.3.526': attribute type 5 has an invalid length. [ 145.036815][ T7866] netlink: 'syz.0.529': attribute type 2 has an invalid length. [ 145.056711][ T7852] netlink: 43 bytes leftover after parsing attributes in process `syz.3.526'. [ 145.166152][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'. [ 145.821166][ T7903] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 145.940753][ T7905] veth5: entered promiscuous mode [ 145.979987][ T7904] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 146.449453][ T7927] netlink: 'syz.0.545': attribute type 5 has an invalid length. [ 146.807089][ T7954] netlink: 'syz.2.552': attribute type 11 has an invalid length. [ 146.848364][ T7954] netlink: 'syz.2.552': attribute type 11 has an invalid length. [ 146.991283][ T7957] team_slave_0: entered promiscuous mode [ 146.997244][ T7957] team_slave_1: entered promiscuous mode [ 147.238686][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 147.452052][ T7974] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 148.774706][ T8026] __nla_validate_parse: 14 callbacks suppressed [ 148.774726][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 149.060380][ T8035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.568'. [ 149.098589][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 149.164481][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 149.400358][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 149.427356][ T8050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.572'. [ 149.503295][ T8050] geneve2: entered promiscuous mode [ 149.522987][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 149.584760][ T8050] geneve2: entered allmulticast mode [ 149.870641][ T8076] netlink: 124 bytes leftover after parsing attributes in process `syz.2.575'. [ 149.879440][ T8075] netlink: 5 bytes leftover after parsing attributes in process `syz.0.577'. [ 150.753965][ T8101] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 150.933181][ T8113] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.029132][ T8113] IPv6: Can't replace route, no match found [ 151.038477][ T8116] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 151.488357][ T8126] netlink: 'syz.2.588': attribute type 2 has an invalid length. [ 151.524467][ T8126] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.588'. [ 151.560849][ T8126] nbd: must specify a device to reconfigure [ 151.828737][ T8135] netlink: 'syz.3.591': attribute type 1 has an invalid length. [ 151.970173][ T8135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.020369][ T8141] bond3: (slave gretap2): making interface the new active one [ 152.080170][ T8141] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 152.114670][ T8141] syz.3.591 (8141) used greatest stack depth: 18712 bytes left [ 152.660955][ T8175] netlink: 'syz.1.601': attribute type 5 has an invalid length. [ 153.123737][ T8199] netlink: 'syz.2.608': attribute type 1 has an invalid length. [ 153.407796][ T8211] netlink: 'syz.1.610': attribute type 33 has an invalid length. [ 153.429811][ T8210] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 153.469701][ T8210] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 153.520594][ T8215] netlink: 'syz.2.611': attribute type 10 has an invalid length. [ 153.547848][ T8215] veth0_vlan: entered allmulticast mode [ 153.593284][ T8215] veth0_vlan: left promiscuous mode [ 153.606609][ T8215] veth0_vlan: entered promiscuous mode [ 153.625870][ T8215] team0: Device veth0_vlan failed to register rx_handler [ 153.706995][ T8215] tipc: Resetting bearer [ 154.342226][ T8255] __nla_validate_parse: 7 callbacks suppressed [ 154.342244][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 154.365340][ T8255] netlink: 'syz.1.620': attribute type 30 has an invalid length. [ 154.497568][ T8255] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.507134][ T8255] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.516184][ T8255] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.525343][ T8255] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.542018][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 154.553092][ T8260] netlink: 5 bytes leftover after parsing attributes in process `syz.0.622'. [ 154.562495][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 154.593817][ T8255] netlink: 'syz.1.620': attribute type 30 has an invalid length. [ 154.747852][ T8268] bridge5: entered promiscuous mode [ 154.759621][ T8268] bridge5: entered allmulticast mode [ 154.986081][ T8284] netlink: 'syz.2.630': attribute type 21 has an invalid length. [ 155.018735][ T8284] netlink: 156 bytes leftover after parsing attributes in process `syz.2.630'. [ 155.084335][ T8291] netlink: 108 bytes leftover after parsing attributes in process `syz.3.631'. [ 155.341230][ T8309] xt_hashlimit: size too large, truncated to 1048576 [ 155.609328][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'. [ 155.657582][ T8321] netlink: 260 bytes leftover after parsing attributes in process `syz.3.638'. [ 155.719859][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'. [ 156.053052][ T8338] pim6reg: entered allmulticast mode [ 156.087804][ T8339] pim6reg: left allmulticast mode [ 156.225494][ T8345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.644'. [ 156.458699][ T8351] netlink: 'syz.4.643': attribute type 5 has an invalid length. [ 156.688155][ T8368] IPv6: NLM_F_REPLACE set, but no existing node found! [ 156.740640][ T8373] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 157.079645][ T8385] tipc: Started in network mode [ 157.084662][ T8385] tipc: Node identity 000000005f0000000000000000000001, cluster identity 4711 [ 157.098402][ T8385] tipc: Enabling of bearer rejected, failed to enable media [ 157.401377][ T8396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.684607][ T8405] netlink: 'syz.4.663': attribute type 2 has an invalid length. [ 157.751816][ T8405] netlink: 'syz.4.663': attribute type 1 has an invalid length. [ 157.797245][ T8408] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.807105][ T8408] bond0: (slave bond4): Enslaving as an active interface with an up link [ 157.823471][ T8409] tipc: Started in network mode [ 157.851839][ T8409] tipc: Node identity 6a8702d7b58b, cluster identity 4711 [ 157.867818][ T8409] tipc: Enabled bearer , priority 0 [ 157.909521][ T8405] syzkaller0: entered promiscuous mode [ 157.915125][ T8405] syzkaller0: entered allmulticast mode [ 157.964578][ T8419] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 158.098953][ T8405] tipc: Resetting bearer [ 158.211063][ T8404] tipc: Resetting bearer [ 158.274581][ T8431] netlink: 'syz.0.669': attribute type 21 has an invalid length. [ 158.292888][ T8404] tipc: Disabling bearer [ 158.553962][ T8449] netlink: 'syz.4.674': attribute type 1 has an invalid length. [ 158.590322][ T8449] netlink: 'syz.4.674': attribute type 4 has an invalid length. [ 158.779597][ T8458] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.568903][ T8505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.605367][ T8506] __nla_validate_parse: 12 callbacks suppressed [ 159.605386][ T8506] netlink: 240 bytes leftover after parsing attributes in process `syz.3.692'. [ 159.663774][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.694'. [ 159.797823][ T8513] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 159.819777][ T8513] netlink: 224 bytes leftover after parsing attributes in process `syz.3.696'. [ 159.847824][ T8513] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 159.866624][ T8510] xt_CT: No such helper "syz0" [ 160.198286][ T8535] netlink: 'syz.4.702': attribute type 1 has an invalid length. [ 160.261108][ T8527] syz.0.700 (8527) used greatest stack depth: 17992 bytes left [ 160.499961][ T8553] netlink: 'syz.3.705': attribute type 10 has an invalid length. [ 160.518145][ T8553] team0: Device hsr_slave_0 failed to register rx_handler [ 160.716753][ T8557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.707'. [ 160.849896][ T5857] Bluetooth: hci4: link tx timeout [ 160.856102][ T5857] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 160.996989][ T8569] netlink: 60 bytes leftover after parsing attributes in process `syz.4.712'. [ 161.007334][ T8569] bridge0: entered promiscuous mode [ 161.397801][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 161.407662][ T8586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.719'. [ 161.660477][ T8598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.723'. [ 162.033858][ T8611] validate_nla: 1 callbacks suppressed [ 162.033877][ T8611] netlink: 'syz.1.730': attribute type 1 has an invalid length. [ 162.035807][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.729'. [ 162.069601][ T8611] netlink: 228 bytes leftover after parsing attributes in process `syz.1.730'. [ 162.239667][ T8621] veth0: entered promiscuous mode [ 162.245724][ T8621] veth0: left promiscuous mode [ 162.799514][ T8640] xt_hashlimit: size too large, truncated to 1048576 [ 162.841731][ T8640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.882400][ T8640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.906949][ T8640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.914481][ T5857] Bluetooth: hci4: command 0x0405 tx timeout [ 162.951255][ T8640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.354184][ T8639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.504085][ T8656] xt_HMARK: spi-set and port-set can't be combined [ 163.907202][ T8673] sch_tbf: burst 0 is lower than device lo mtu (65499) ! [ 164.043649][ T8679] openvswitch: netlink: Flow actions attr not present in new flow. [ 164.051053][ T8684] netlink: 'syz.3.752': attribute type 13 has an invalid length. [ 164.101794][ T8684] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.183215][ T8688] netlink: 'syz.0.754': attribute type 1 has an invalid length. [ 164.247229][ T8688] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.272367][ T8693] bond3: (slave veth0_to_bond): making interface the new active one [ 164.283991][ T8693] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 164.336524][ T8688] vlan3: entered allmulticast mode [ 164.346180][ T8688] veth1: entered allmulticast mode [ 164.548885][ T8709] netlink: 'syz.0.759': attribute type 1 has an invalid length. [ 164.767633][ T8726] sctp: [Deprecated]: syz.4.764 (pid 8726) Use of int in maxseg socket option. [ 164.767633][ T8726] Use struct sctp_assoc_value instead [ 165.092548][ T8741] netlink: 'syz.1.769': attribute type 21 has an invalid length. [ 165.213142][ T8750] __nla_validate_parse: 25 callbacks suppressed [ 165.213160][ T8750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.771'. [ 165.554966][ T8768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.778'. [ 165.654121][ T8773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.778'. [ 165.784108][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 165.812866][ T8781] netlink: 60 bytes leftover after parsing attributes in process `syz.1.781'. [ 166.167094][ T8800] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 166.187682][ T8802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.789'. [ 166.225596][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 166.316339][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'. [ 166.321931][ T8808] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 166.352684][ T8808] netlink: 'syz.3.791': attribute type 6 has an invalid length. [ 166.432639][ T8804] macvtap1: entered promiscuous mode [ 166.438627][ T8804] vlan0: entered promiscuous mode [ 166.444017][ T8804] macvtap1: entered allmulticast mode [ 166.449581][ T8804] vlan0: entered allmulticast mode [ 166.454798][ T8804] veth0_vlan: entered allmulticast mode [ 166.462726][ T8809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.789'. [ 166.475056][ T8809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.789'. [ 167.107295][ T8848] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 167.172548][ T8848] 8021q: adding VLAN 0 to HW filter on device bond5 [ 167.296002][ T8854] 8021q: adding VLAN 0 to HW filter on device bond5 [ 167.317274][ T8854] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 167.377610][ T8854] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 167.522824][ T8848] veth9: entered promiscuous mode [ 167.555866][ T8872] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 167.674274][ T8876] bond3: (slave gretap2): making interface the new active one [ 167.682918][ T8876] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 167.823808][ T8883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.055433][ T8894] Bluetooth: MGMT ver 1.23 [ 168.696708][ T8924] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 168.850249][ T8928] team0: Cannot enslave team device to itself [ 168.941174][ T8936] netdevsim netdevsim0: Direct firmware load for /.€ failed with error -2 [ 168.989164][ T8936] netdevsim netdevsim0: Falling back to sysfs fallback for: /.€ [ 169.054374][ T8937] netdevsim netdevsim0: Direct firmware load for /.€ failed with error -2 [ 169.063788][ T8937] netdevsim netdevsim0: Falling back to sysfs fallback for: /.€ [ 169.339009][ T6293] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 169.351321][ T8971] netlink: 'syz.0.839': attribute type 5 has an invalid length. [ 169.501204][ T8979] C: renamed from team_slave_0 (while UP) [ 169.517540][ T8979] netlink: 'syz.4.840': attribute type 1 has an invalid length. [ 169.525548][ T8979] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 169.857877][ T8986] sctp: [Deprecated]: syz.1.843 (pid 8986) Use of int in maxseg socket option. [ 169.857877][ T8986] Use struct sctp_assoc_value instead [ 170.010521][ T8978] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒžóúz [ 170.653468][ T9017] bond0: entered promiscuous mode [ 170.685111][ T9017] bond_slave_0: entered promiscuous mode [ 170.705465][ T9017] bond_slave_1: entered promiscuous mode [ 170.731511][ T9017] batadv0: entered promiscuous mode [ 170.761660][ T9028] __nla_validate_parse: 14 callbacks suppressed [ 170.761678][ T9028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.851'. [ 170.770664][ T9017] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 170.839463][ T9017] bond0: left promiscuous mode [ 170.861805][ T9017] bond_slave_0: left promiscuous mode [ 170.875987][ T9017] bond_slave_1: left promiscuous mode [ 170.907835][ T9017] batadv0: left promiscuous mode [ 170.965837][ T9023] tc_dump_action: action bad kind [ 171.414206][ T9056] xt_check_table_hooks: 57 callbacks suppressed [ 171.414226][ T9056] x_tables: duplicate underflow at hook 1 [ 171.476413][ T9059] IPVS: set_ctl: invalid protocol: 46 10.1.1.2:20002 [ 171.845173][ T9071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.861'. [ 172.123676][ T9085] netlink: 36 bytes leftover after parsing attributes in process `syz.4.864'. [ 172.192512][ T9089] netlink: 40 bytes leftover after parsing attributes in process `syz.3.866'. [ 172.459837][ T9107] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 172.573018][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 172.586469][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 172.595569][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 172.610256][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 172.623728][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 172.926324][ T9122] syzkaller1: entered promiscuous mode [ 172.942996][ T9122] syzkaller1: entered allmulticast mode [ 173.160847][ T9133] af_packet: tpacket_rcv: packet too big, clamped from 118 to 4294967286. macoff=82 [ 173.253743][ T9135] vlan2: entered allmulticast mode [ 173.269784][ T9135] veth0_to_bridge: entered allmulticast mode [ 173.315561][ T9140] netlink: 68 bytes leftover after parsing attributes in process `syz.0.877'. [ 173.368821][ T9147] netlink: 'syz.3.879': attribute type 1 has an invalid length. [ 173.585305][ T9147] veth9: entered promiscuous mode [ 173.598879][ T9158] netlink: 'syz.0.881': attribute type 1 has an invalid length. [ 173.644533][ T9147] bond6: (slave veth9): Enslaving as a backup interface with a down link [ 173.653264][ T9160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.879'. [ 173.682967][ T9160] 8021q: adding VLAN 0 to HW filter on device bond6 [ 173.724316][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.880'. [ 173.973438][ T9110] chnl_net:caif_netlink_parms(): no params data found [ 173.999627][ T9175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.885'. [ 174.045170][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.885'. [ 174.349030][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.351339][ T9196] lo speed is unknown, defaulting to 1000 [ 174.356537][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.369735][ T9110] bridge_slave_0: entered allmulticast mode [ 174.380149][ T9110] bridge_slave_0: entered promiscuous mode [ 174.380529][ T9199] delete_channel: no stack [ 174.416386][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.424852][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.436221][ T9110] bridge_slave_1: entered allmulticast mode [ 174.449941][ T9110] bridge_slave_1: entered promiscuous mode [ 174.462419][ T9196] lo speed is unknown, defaulting to 1000 [ 174.468777][ T9197] tipc: Enabled bearer , priority 0 [ 174.476578][ T9197] syzkaller0: entered promiscuous mode [ 174.482270][ T9197] syzkaller0: entered allmulticast mode [ 174.506497][ T9208] netlink: 3 bytes leftover after parsing attributes in process `syz.0.893'. [ 174.526483][ T9208] openvswitch: netlink: Actions may not be safe on all matching packets [ 174.626257][ T9196] lo speed is unknown, defaulting to 1000 [ 174.633470][ T9194] tipc: Resetting bearer [ 174.665628][ T9194] tipc: Disabling bearer [ 174.666568][ T9196] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 174.683911][ T5857] Bluetooth: hci5: command tx timeout [ 174.707427][ T9196] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 174.745297][ T9110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.758101][ T9110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.816880][ T9196] lo speed is unknown, defaulting to 1000 [ 174.880568][ T9196] lo speed is unknown, defaulting to 1000 [ 174.886526][ T9221] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 174.904338][ T9110] team0: Port device team_slave_0 added [ 174.925176][ T9110] team0: Port device team_slave_1 added [ 175.008046][ T9196] lo speed is unknown, defaulting to 1000 [ 175.053039][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.074721][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.110139][ T9110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.123369][ T9196] lo speed is unknown, defaulting to 1000 [ 175.124911][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.141147][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.170445][ T9110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.182141][ T9227] netlink: 'syz.4.898': attribute type 3 has an invalid length. [ 175.191131][ T9196] lo speed is unknown, defaulting to 1000 [ 175.269755][ T9196] lo speed is unknown, defaulting to 1000 [ 175.387511][ T9110] hsr_slave_0: entered promiscuous mode [ 175.407387][ T9110] hsr_slave_1: entered promiscuous mode [ 175.423515][ T9110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.446190][ T9110] Cannot create hsr debugfs directory [ 175.767043][ T9245] bridge0: port 3(vlan3) entered blocking state [ 175.776067][ T9245] bridge0: port 3(vlan3) entered disabled state [ 175.783329][ T9245] vlan3: entered allmulticast mode [ 175.789144][ T9245] bridge0: entered allmulticast mode [ 175.798125][ T9245] vlan3: left allmulticast mode [ 175.805119][ T9245] bridge0: left allmulticast mode [ 175.885927][ T9110] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 175.895448][ T9250] __nla_validate_parse: 69 callbacks suppressed [ 175.895465][ T9250] netlink: 56 bytes leftover after parsing attributes in process `syz.0.906'. [ 175.919208][ T9110] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 175.926471][ T9250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.906'. [ 175.940780][ T9110] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 175.947809][ T9250] netlink: 31 bytes leftover after parsing attributes in process `syz.0.906'. [ 175.963615][ T9110] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 175.970726][ T9250] netlink: 'syz.0.906': attribute type 2 has an invalid length. [ 175.979930][ T9250] netlink: 31 bytes leftover after parsing attributes in process `syz.0.906'. [ 176.186138][ T9110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.226213][ T9110] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.245819][ T6289] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.253089][ T6289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.277446][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.909'. [ 176.335026][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.342628][ T6289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.748518][ T5857] Bluetooth: hci5: command tx timeout [ 176.860233][ T9296] tipc: Started in network mode [ 176.870380][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 176.880479][ T9296] tipc: Node identity 82d2af324782, cluster identity 4711 [ 176.888996][ T9296] tipc: Enabled bearer , priority 0 [ 176.896707][ T9299] tipc: Enabling of bearer rejected, already enabled [ 176.992099][ T9296] syzkaller0: entered promiscuous mode [ 176.997619][ T9296] syzkaller0: entered allmulticast mode [ 177.178774][ T9295] tipc: Resetting bearer [ 177.263411][ T9295] tipc: Disabling bearer [ 177.272427][ T9318] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 177.300874][ T9315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.317072][ T9110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.512634][ T9329] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 177.514380][ T9326] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.921'. [ 177.548852][ T9326] netlink: zone id is out of range [ 177.554043][ T9326] netlink: zone id is out of range [ 177.618965][ T9326] netlink: zone id is out of range [ 177.641892][ T9326] netlink: zone id is out of range [ 177.647063][ T9326] netlink: zone id is out of range [ 177.706421][ T9326] netlink: zone id is out of range [ 177.748852][ T9326] netlink: zone id is out of range [ 178.007821][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.928'. [ 178.089128][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.928'. [ 178.100224][ T9110] veth0_vlan: entered promiscuous mode [ 178.105787][ T9354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.931'. [ 178.134321][ T9110] veth1_vlan: entered promiscuous mode [ 178.227006][ T9110] veth0_macvtap: entered promiscuous mode [ 178.277138][ T9360] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 178.345036][ T9110] veth1_macvtap: entered promiscuous mode [ 178.394774][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.407890][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.446288][ T9110] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.472883][ T9110] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.482650][ T9110] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.492762][ T9110] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.735939][ T6289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.777903][ T6289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.830974][ T5857] Bluetooth: hci5: command tx timeout [ 178.923245][ T6292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.940792][ T9382] tipc: Enabled bearer , priority 0 [ 178.951933][ T6292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.964662][ T9382] syzkaller0: entered promiscuous mode [ 178.980124][ T9382] syzkaller0: entered allmulticast mode [ 179.081756][ T9382] tipc: Resetting bearer [ 179.103753][ T9382] sctp: [Deprecated]: syz.4.941 (pid 9382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.103753][ T9382] Use struct sctp_sack_info instead [ 179.280279][ T9381] tipc: Resetting bearer [ 179.396176][ T9381] tipc: Disabling bearer [ 179.734381][ T9426] netlink: 'syz.4.956': attribute type 1 has an invalid length. [ 179.851104][ T9430] netlink: 'syz.4.956': attribute type 2 has an invalid length. [ 180.258630][ T9444] netlink: 'syz.3.963': attribute type 5 has an invalid length. [ 180.905543][ T9469] __nla_validate_parse: 14 callbacks suppressed [ 180.905561][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.971'. [ 180.910610][ T5857] Bluetooth: hci5: command tx timeout [ 180.927200][ T9469] netlink: 'syz.1.971': attribute type 1 has an invalid length. [ 181.004106][ T9478] net_ratelimit: 16 callbacks suppressed [ 181.004123][ T9478] netlink: zone id is out of range [ 181.029759][ T9469] netlink: 108 bytes leftover after parsing attributes in process `syz.1.971'. [ 181.223327][ T9484] netlink: 66 bytes leftover after parsing attributes in process `syz.0.978'. [ 181.304811][ T9487] tipc: Enabled bearer , priority 0 [ 181.319736][ T9487] syzkaller0: entered promiscuous mode [ 181.325266][ T9487] syzkaller0: entered allmulticast mode [ 181.353140][ T9487] tipc: Resetting bearer [ 181.383233][ T9486] tipc: Resetting bearer [ 181.449045][ T9486] tipc: Disabling bearer [ 181.461902][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'. [ 181.532986][ T9505] openvswitch: netlink: Missing key (keys=40, expected=100) [ 181.659942][ T9508] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.985'. [ 181.680173][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.986'. [ 181.940411][ T9519] netlink: 128 bytes leftover after parsing attributes in process `syz.5.988'. [ 181.950281][ T9519] netlink: 128 bytes leftover after parsing attributes in process `syz.5.988'. [ 182.097408][ T9532] netlink: 'syz.0.992': attribute type 4 has an invalid length. [ 182.537866][ T9561] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1002'. [ 182.546935][ T9565] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 182.555219][ T9561] netlink: zone id is out of range [ 182.556503][ T9564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.570190][ T9561] netlink: zone id is out of range [ 182.585510][ T9561] netlink: get zone limit has 8 unknown bytes [ 182.959019][ T9587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.046112][ T9591] x_tables: duplicate underflow at hook 1 [ 183.243685][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1015'. [ 183.442752][ T9604] netlink: 'syz.4.1017': attribute type 21 has an invalid length. [ 183.567524][ T9604] netlink: 'syz.4.1017': attribute type 5 has an invalid length. [ 183.881675][ T9621] netlink: 'syz.4.1023': attribute type 13 has an invalid length. [ 184.130003][ T9638] block nbd1: Unsupported socket: shutdown callout must be supported. [ 184.164753][ T9638] block nbd1: shutting down sockets [ 184.467658][ T9658] tipc: Enabled bearer , priority 0 [ 184.526667][ T9658] syzkaller0: entered promiscuous mode [ 184.541142][ T9658] syzkaller0: entered allmulticast mode [ 184.615537][ T9658] tipc: Resetting bearer [ 184.630346][ T9666] netlink: 'syz.0.1035': attribute type 4 has an invalid length. [ 184.696795][ T9657] tipc: Resetting bearer [ 184.719934][ T9672] netlink: 'syz.4.1036': attribute type 11 has an invalid length. [ 184.790820][ T9657] tipc: Disabling bearer [ 185.240573][ T9699] netlink: 'syz.3.1041': attribute type 1 has an invalid length. [ 185.316912][ T9703] syzkaller1: entered promiscuous mode [ 185.346111][ T9703] syzkaller1: entered allmulticast mode [ 185.564850][ T9714] xt_hashlimit: invalid interval [ 185.791624][ T9722] netlink: 'syz.0.1048': attribute type 23 has an invalid length. [ 185.913013][ T9727] __nla_validate_parse: 15 callbacks suppressed [ 185.913031][ T9727] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1052'. [ 186.135726][ T9733] : entered promiscuous mode [ 186.150708][ T9740] digital: digital_start_poll: Unknown protocol [ 186.241956][ T5897] IPVS: starting estimator thread 0... [ 186.297641][ T9742] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20003 [ 186.336801][ T9751] IPVS: using max 32 ests per chain, 76800 per kthread [ 186.415489][ T9753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.755517][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'. [ 186.801984][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 186.846802][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 186.871973][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 187.068131][ T9795] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1070'. [ 187.118568][ T9795] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1070'. [ 187.160239][ T9755] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 187.763453][ T9838] netlink: 'syz.3.1081': attribute type 49 has an invalid length. [ 187.802513][ T9838] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1081'. [ 187.825633][ T9838] netlink: 'syz.3.1081': attribute type 49 has an invalid length. [ 187.843444][ T9840] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1082'. [ 188.373130][ T9868] netlink: 'syz.0.1089': attribute type 2 has an invalid length. [ 188.505284][ T9885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1091'. [ 188.860937][ T9895] netlink: 'syz.4.1098': attribute type 9 has an invalid length. [ 189.537755][ T9927] netlink: 'syz.5.1110': attribute type 3 has an invalid length. [ 189.579762][ T9927] netlink: 'syz.5.1110': attribute type 3 has an invalid length. [ 189.613540][ T9927] netlink: 'syz.5.1110': attribute type 3 has an invalid length. [ 189.646863][ T9927] netlink: 'syz.5.1110': attribute type 3 has an invalid length. [ 190.042950][ T9955] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 190.093172][ T9955] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 190.139165][ T9955] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 190.429038][ T9971] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 190.536937][ T9976] lo speed is unknown, defaulting to 1000 [ 190.949856][T10011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.972281][T10012] __nla_validate_parse: 14 callbacks suppressed [ 190.972301][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 191.425783][T10027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1137'. [ 192.077155][T10044] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 192.600255][ T6293] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.636288][ T5845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.646923][ T6293] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.731686][T10073] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 192.742289][T10075] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1151'. [ 192.774825][T10077] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 192.939227][ T5845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.086666][T10090] veth0: entered promiscuous mode [ 193.161416][T10082] veth0: left promiscuous mode [ 193.548520][ T5845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.826410][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1162'. [ 194.235757][T10147] »»»»»»: renamed from bond_slave_0 (while UP) [ 194.320806][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1168'. [ 195.135923][T10178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1173'. [ 195.210686][T10182] syzkaller0: entered promiscuous mode [ 195.216215][T10182] syzkaller0: entered allmulticast mode [ 195.269490][T10180] tipc: Started in network mode [ 195.274497][T10180] tipc: Node identity 5a137ef03d42, cluster identity 4711 [ 195.322649][T10180] tipc: Enabled bearer , priority 0 [ 195.389903][T10190] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 195.433151][T10190] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 195.458543][T10180] tipc: Resetting bearer [ 195.483567][T10180] tipc: Disabling bearer [ 195.497293][T10196] tipc: Enabled bearer , priority 0 [ 195.542990][T10187] syzkaller0: entered promiscuous mode [ 195.559515][T10187] syzkaller0: entered allmulticast mode [ 195.646202][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.670621][T10204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.699527][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.732327][T10204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.807658][T10187] tipc: Resetting bearer [ 195.846304][T10184] tipc: Resetting bearer [ 195.894891][T10184] tipc: Disabling bearer [ 195.952971][T10218] validate_nla: 48 callbacks suppressed [ 195.952983][T10218] netlink: 'syz.5.1186': attribute type 21 has an invalid length. [ 195.969063][T10218] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1186'. [ 196.067369][T10222] tipc: Enabled bearer , priority 12 [ 196.111014][T10224] netlink: 'syz.4.1188': attribute type 1 has an invalid length. [ 196.220911][T10232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1188'. [ 196.263084][T10232] bond1: entered allmulticast mode [ 196.459122][T10241] syzkaller0: entered promiscuous mode [ 196.464630][T10241] syzkaller0: entered allmulticast mode [ 196.514544][T10239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1193'. [ 196.577732][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1196'. [ 196.593116][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.785209][T10262] netlink: 'syz.3.1197': attribute type 2 has an invalid length. [ 197.073486][ T5897] tipc: Node number set to 1593835521 [ 197.221145][T10237] tipc: Enabled bearer , priority 0 [ 197.314373][T10264] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1199'. [ 197.391610][T10237] tipc: Resetting bearer [ 197.491040][T10237] tipc: Disabling bearer [ 197.883340][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1207'. [ 198.015019][T10293] netlink: 'syz.4.1210': attribute type 4 has an invalid length. [ 198.023962][T10293] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1210'. [ 198.281939][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.720927][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1218'. [ 198.751610][T10327] netlink: 'syz.4.1218': attribute type 16 has an invalid length. [ 198.772576][T10327] netlink: 'syz.4.1218': attribute type 17 has an invalid length. [ 198.923580][ T5845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.117559][T10350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.253982][T10350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.496647][T10323] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 199.559211][ T5845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.561100][T10356] netlink: 'syz.1.1228': attribute type 10 has an invalid length. [ 199.780164][T10357] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 199.836944][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1231'. [ 199.874911][T10356] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 199.878512][T10372] netlink: 'syz.4.1231': attribute type 1 has an invalid length. [ 199.919539][T10372] netlink: 'syz.4.1231': attribute type 1 has an invalid length. [ 199.968495][T10372] netlink: 'syz.4.1231': attribute type 2 has an invalid length. [ 199.976302][T10372] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1231'. [ 199.991929][T10373] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1231'. [ 200.591124][T10403] nftables ruleset with unbound chain [ 201.145705][T10430] ip6t_srh: unknown srh invflags 4449 [ 201.550555][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 201.557275][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 201.564822][ T5167] Bluetooth: hci1: command 0x0406 tx timeout [ 201.748626][T10452] __nla_validate_parse: 4 callbacks suppressed [ 201.748644][T10452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1256'. [ 201.935006][T10454] xt_cgroup: path and classid specified [ 202.213938][T10469] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1261'. [ 202.319423][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1261'. [ 202.426434][T10473] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1262'. [ 202.453338][T10481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1264'. [ 202.784548][T10490] validate_nla: 4 callbacks suppressed [ 202.784565][T10490] netlink: 'syz.5.1267': attribute type 18 has an invalid length. [ 202.863054][T10490] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.871964][T10490] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.880799][T10490] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.890842][T10490] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.919589][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1272'. [ 202.962331][T10500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1272'. [ 202.973908][T10504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1274'. [ 203.302788][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1278'. [ 203.536007][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1280'. [ 203.907558][T10548] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 203.929417][T10548] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.965309][T10556] netlink: 'syz.0.1291': attribute type 2 has an invalid length. [ 204.212215][T10560] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 204.240354][T10560] sctp: [Deprecated]: syz.3.1294 (pid 10560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.240354][T10560] Use struct sctp_sack_info instead [ 204.552054][T10584] tun0: tun_chr_ioctl cmd 1074025675 [ 204.567264][T10584] tun0: persist disabled [ 204.596588][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 204.981910][T10601] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 205.228986][ T5857] Bluetooth: hci5: command 0x0405 tx timeout [ 205.410034][T10625] netlink: 'syz.0.1313': attribute type 11 has an invalid length. [ 205.573046][T10632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.848755][T10643] bridge1: entered promiscuous mode [ 205.878500][T10643] bridge1: entered allmulticast mode [ 206.371755][T10675] veth13: entered promiscuous mode [ 206.388484][T10675] veth13: entered allmulticast mode [ 206.737226][T10688] bond6: entered promiscuous mode [ 206.742444][T10688] bond6: entered allmulticast mode [ 206.756246][T10688] 8021q: adding VLAN 0 to HW filter on device bond6 [ 206.818450][T10688] netlink: 'syz.1.1333': attribute type 3 has an invalid length. [ 206.857995][T10695] __nla_validate_parse: 21 callbacks suppressed [ 206.858013][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'. [ 206.889052][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'. [ 206.907624][T10695] openvswitch: netlink: nsh attribute has 123 unknown bytes. [ 206.915649][T10694] openvswitch: netlink: nsh attribute has 123 unknown bytes. [ 206.926875][T10695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.937669][T10694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.221168][T10715] netlink: 'syz.0.1339': attribute type 9 has an invalid length. [ 207.677223][T10737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1345'. [ 207.806134][T10737] syzkaller0: entered promiscuous mode [ 207.812677][T10737] syzkaller0: entered allmulticast mode [ 208.214129][T10754] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1350'. [ 208.317367][T10763] RDS: rds_bind could not find a transport for fdff:ffff:fedb:df25:6000:0:100:0, load rds_tcp or rds_rdma? [ 209.633201][T10752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1347'. [ 209.667968][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 209.800883][T10777] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1355'. [ 209.839059][T10775] netlink: 'syz.0.1357': attribute type 1 has an invalid length. [ 209.860698][T10779] netlink: 'syz.5.1356': attribute type 2 has an invalid length. [ 209.881555][T10784] syzkaller1: entered promiscuous mode [ 209.887094][T10784] syzkaller1: entered allmulticast mode [ 209.907986][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 209.939426][T10779] netlink: 'syz.5.1356': attribute type 4 has an invalid length. [ 210.114604][T10799] netlink: 'syz.1.1360': attribute type 10 has an invalid length. [ 210.205169][T10787] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 210.241641][T10798] syz_tun: left allmulticast mode [ 210.246743][T10798] syz_tun: left promiscuous mode [ 210.258930][T10798] bridge0: port 1(syz_tun) entered disabled state [ 210.279289][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1364'. [ 210.291715][T10798] bridge_slave_1: left allmulticast mode [ 210.297735][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 210.298100][T10798] bridge_slave_1: left promiscuous mode [ 210.315245][T10798] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.333160][T10798] bond0: (slave bond_slave_0): Releasing backup interface [ 210.347391][T10798] bond0: (slave bond_slave_1): Releasing backup interface [ 210.377217][T10798] team0: Port device team_slave_0 removed [ 210.402691][T10798] team0: Port device team_slave_1 removed [ 210.418110][T10798] bond0: (slave wlan1): Releasing backup interface [ 210.427693][T10798] bond1: (slave bond2): Releasing backup interface [ 210.458991][T10798] bond3: (slave gretap2): Releasing active interface [ 210.474926][T10799] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 210.495286][T10799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.515417][T10799] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 210.641437][T10815] netlink: 'syz.3.1364': attribute type 1 has an invalid length. [ 210.677826][T10817] netlink: 'syz.3.1364': attribute type 1 has an invalid length. [ 210.866730][T10837] tun0: tun_chr_ioctl cmd 1074025675 [ 210.877959][T10837] tun0: persist disabled [ 211.147223][T10848] veth3: entered promiscuous mode [ 211.154132][ T5845] IPVS: starting estimator thread 0... [ 211.248362][T10855] IPVS: using max 35 ests per chain, 84000 per kthread [ 211.318447][ T5934] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 211.504318][ T5934] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 211.684546][T10895] IPv6: NLM_F_CREATE should be specified when creating new route [ 211.737104][T10900] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 211.777866][T10901] lo: entered promiscuous mode [ 211.790559][T10901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.807801][T10905] x_tables: ip_tables: ah match: only valid for protocol 51 [ 211.828949][T10900] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 211.989687][T10901] __nla_validate_parse: 7 callbacks suppressed [ 211.989706][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1385'. [ 212.034403][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 212.040018][T10909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.040925][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.052608][T10910] netlink: 'syz.3.1388': attribute type 1 has an invalid length. [ 212.057684][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.073601][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.080329][T10910] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1388'. [ 212.081556][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.098555][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.106600][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.114495][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.122595][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.130481][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.138478][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.146322][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.154303][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.162189][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.170180][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.178022][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.186007][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.193887][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.201964][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.209838][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.217768][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.225665][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.233717][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.241618][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.249581][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.257421][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.265416][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.273309][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.281286][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.289163][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.297099][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.304986][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.312950][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.320909][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.329418][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.337269][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.345368][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.353704][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.361780][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.369657][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.377797][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.386039][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.394030][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.402193][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.410254][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.418110][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.426214][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.434101][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.442177][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.450074][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.581058][T10915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1390'. [ 212.763050][T10938] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 212.787137][T10938] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 212.797906][T10938] gretap3: entered promiscuous mode [ 212.803473][T10938] gretap3: entered allmulticast mode [ 213.330440][T10972] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1406'. [ 213.343906][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 213.363969][T10972] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1406'. [ 213.410592][T10975] netlink: 2068 bytes leftover after parsing attributes in process `syz.3.1408'. [ 213.592981][T10992] netlink: 'syz.0.1412': attribute type 10 has an invalid length. [ 213.602604][T10992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1412'. [ 213.654474][T10992] batadv0: entered promiscuous mode [ 213.666749][T10992] batadv0: entered allmulticast mode [ 213.677939][T10992] bridge0: port 2(batadv0) entered blocking state [ 213.685002][T10992] bridge0: port 2(batadv0) entered disabled state [ 213.695877][T10992] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 213.770411][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1416'. [ 213.853896][T11001] netlink: 'syz.4.1418': attribute type 11 has an invalid length. [ 213.864058][T11001] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1418'. [ 214.071741][T11014] netlink: 'syz.3.1422': attribute type 1 has an invalid length. [ 214.112127][T11014] netlink: 'syz.3.1422': attribute type 2 has an invalid length. [ 214.237158][T11026] tipc: Enabled bearer , priority 0 [ 214.268369][T11026] syzkaller0: entered promiscuous mode [ 214.273890][T11026] syzkaller0: entered allmulticast mode [ 214.420022][T11026] tipc: Resetting bearer [ 214.446821][T11025] tipc: Resetting bearer [ 214.541385][T11025] tipc: Disabling bearer [ 214.577993][T11041] lo speed is unknown, defaulting to 1000 [ 214.584861][T11047] xt_hashlimit: overflow, try lower: 4294967295/0 [ 214.927875][T11071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.083973][T11073] validate_nla: 2 callbacks suppressed [ 215.083991][T11073] netlink: 'syz.4.1437': attribute type 1 has an invalid length. [ 215.209704][T11073] bond2: entered promiscuous mode [ 215.240261][T11073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.318004][T11080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.349307][T11080] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 215.385079][T11080] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 215.412217][T11080] bond2: (slave wireguard0): making interface the new active one [ 215.462350][T11080] wireguard0: entered promiscuous mode [ 215.476391][T11080] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 215.548069][T11090] tipc: Enabled bearer , priority 0 [ 215.589304][T11090] syzkaller0: entered promiscuous mode [ 215.595011][T11090] syzkaller0: entered allmulticast mode [ 215.658859][T11090] tipc: Resetting bearer [ 215.680505][T11089] tipc: Resetting bearer [ 215.772180][T11089] tipc: Disabling bearer [ 216.039347][T11133] openvswitch: netlink: Missing key (keys=40, expected=100) [ 216.072337][T11128] 8021q: VLANs not supported on lo [ 216.133383][T11136] siw: device registration error -23 [ 216.363812][T11148] bridge_slave_0: left allmulticast mode [ 216.378698][T11148] bridge_slave_0: left promiscuous mode [ 216.390937][T11148] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.410973][T11148] bridge_slave_1: left allmulticast mode [ 216.417233][T11148] bridge_slave_1: left promiscuous mode [ 216.424757][T11148] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.445841][T11148] bond0: (slave »»»»»»): Releasing backup interface [ 216.470942][T11148] bond0: (slave bond_slave_1): Releasing backup interface [ 216.503477][T11148] team0: Port device C removed [ 216.528101][T11148] team0: Port device team_slave_1 removed [ 216.535808][T11148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.544222][T11148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.575428][T11148] bond2: (slave wireguard0): Releasing backup interface [ 216.593556][T11148] wireguard0: left promiscuous mode [ 216.608193][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.667304][T11156] C: renamed from lo [ 217.020703][T11188] netlink: 'syz.0.1473': attribute type 1 has an invalid length. [ 217.053981][T11189] netlink: 'syz.0.1473': attribute type 1 has an invalid length. [ 217.122241][T11204] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 217.408574][T11234] netlink: 'syz.1.1481': attribute type 4 has an invalid length. [ 217.507008][T11234] netlink: 'syz.1.1481': attribute type 4 has an invalid length. [ 217.520832][T11236] Bluetooth: MGMT ver 1.23 [ 217.607301][T11253] netlink: 'syz.0.1483': attribute type 178 has an invalid length. [ 217.709142][ T5934] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.912081][T11209] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 218.005056][T11271] __nla_validate_parse: 10 callbacks suppressed [ 218.005073][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1488'. [ 218.113858][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1491'. [ 218.139097][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1491'. [ 218.166479][T11277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1491'. [ 218.346004][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1494'. [ 218.569734][T11303] xt_bpf: check failed: parse error [ 218.649680][T11308] lo speed is unknown, defaulting to 1000 [ 218.859522][T11327] sctp: [Deprecated]: syz.5.1502 (pid 11327) Use of int in max_burst socket option. [ 218.859522][T11327] Use struct sctp_assoc_value instead [ 218.878070][T11327] xt_bpf: check failed: parse error [ 219.548677][ T5861] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 219.556253][ T5861] Bluetooth: hci2: command 0x0406 tx timeout [ 219.952197][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.149263][T11312] vlan4: entered allmulticast mode [ 220.154420][T11312] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 220.171153][T11318] syzkaller1: entered promiscuous mode [ 220.187232][T11318] syzkaller1: entered allmulticast mode [ 220.326631][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. [ 220.681453][T11353] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.932419][T11372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1518'. [ 220.942265][T11370] netlink: 'syz.3.1517': attribute type 1 has an invalid length. [ 220.957218][T11370] netlink: 'syz.3.1517': attribute type 1 has an invalid length. [ 220.964187][T11374] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 220.983140][T11374] netlink: 'syz.4.1519': attribute type 11 has an invalid length. [ 220.996830][T11370] bridge2: entered promiscuous mode [ 221.001669][T11374] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1519'. [ 221.027334][T11370] bridge2: entered allmulticast mode [ 221.049422][T11370] siw: device registration error -23 [ 221.381234][T11393] syzkaller1: entered promiscuous mode [ 221.386783][T11393] syzkaller1: entered allmulticast mode [ 221.733442][T11412] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1529'. [ 222.006140][T11432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1534'. [ 222.099072][T11422] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 222.449529][T11442] team0: Device wireguard0 is of different type [ 222.551583][T11450] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 222.955851][T11482] veth13: entered promiscuous mode [ 222.962287][T11482] veth13: entered allmulticast mode [ 223.331180][T11504] __nla_validate_parse: 6 callbacks suppressed [ 223.331199][T11504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1557'. [ 223.460863][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1560'. [ 223.817721][T11528] No such timeout policy "syz0" [ 223.994144][T11545] netlink: 'syz.0.1571': attribute type 10 has an invalid length. [ 224.076736][T11547] x_tables: unsorted entry at hook 3 [ 224.137052][T11545] dummy0: entered allmulticast mode [ 224.157630][T11545] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 224.429287][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1577'. [ 224.463961][T11567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1578'. [ 224.500416][T11567] tipc: Resetting bearer [ 224.537092][T11577] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 224.671605][ T5934] IPVS: starting estimator thread 0... [ 224.692977][T11583] pim6reg: entered allmulticast mode [ 224.800982][T11587] IPVS: using max 28 ests per chain, 67200 per kthread [ 224.813667][T11591] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1585'. [ 224.961690][T11596] syzkaller0: entered promiscuous mode [ 224.967215][T11596] syzkaller0: entered allmulticast mode [ 225.018390][T11607] netlink: 'syz.3.1591': attribute type 7 has an invalid length. [ 225.051566][T11607] : entered promiscuous mode [ 225.223873][T11615] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1594'. [ 225.275320][T11618] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 225.429087][T11629] netlink: 'syz.0.1598': attribute type 2 has an invalid length. [ 225.514175][T11636] bond0: (slave dummy0): Releasing backup interface [ 225.529859][T11639] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1601'. [ 225.552220][T11636] dummy0 (unregistering): left allmulticast mode [ 225.605895][T11645] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1602'. [ 225.720120][T11647] block nbd1: Unsupported socket: shutdown callout must be supported. [ 225.739374][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.757317][T11647] bridge0: port 3(syz_tun) entered blocking state [ 225.777797][T11647] bridge0: port 3(syz_tun) entered disabled state [ 225.797444][T11647] syz_tun: entered allmulticast mode [ 225.811530][T11647] syz_tun: entered promiscuous mode [ 225.811639][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1602'. [ 225.821887][T11647] bridge0: port 3(syz_tun) entered blocking state [ 225.832738][T11647] bridge0: port 3(syz_tun) entered forwarding state [ 225.841915][T11643] netlink: 'syz.4.1599': attribute type 11 has an invalid length. [ 225.939457][T11652] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.947535][T11652] bridge0: port 2(bond5) entered blocking state [ 225.961112][T11652] bridge0: port 2(bond5) entered disabled state [ 225.967889][T11652] bond5: entered allmulticast mode [ 225.976187][T11652] bond5: entered promiscuous mode [ 225.982647][T11652] bridge0: port 2(bond5) entered blocking state [ 225.990213][T11652] bridge0: port 2(bond5) entered forwarding state [ 226.242059][ T5934] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.362944][T11691] netlink: 'syz.1.1613': attribute type 1 has an invalid length. [ 226.402200][T11691] netlink: 'syz.1.1613': attribute type 3 has an invalid length. [ 226.421272][T11691] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1613'. [ 226.497771][T11703] xt_TCPMSS: Only works on TCP SYN packets [ 226.560162][T11700] xt_cgroup: xt_cgroup: no path or classid specified [ 226.601371][T11705] x_tables: duplicate underflow at hook 4 [ 227.872787][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 227.878460][ T5861] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 228.541586][ T6292] bridge0: port 2(bond5) entered disabled state [ 228.759689][T11748] xt_hashlimit: max too large, truncated to 1048576 [ 228.968077][T11763] netlink: 'syz.1.1635': attribute type 23 has an invalid length. [ 229.028019][T11765] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 229.102417][T11762] __nla_validate_parse: 2 callbacks suppressed [ 229.102436][T11762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1635'. [ 229.484602][T11784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.523123][T11795] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 229.783299][T11813] IPv6: sit2: Disabled Multicast RS [ 229.806840][T11813] sit2: entered allmulticast mode [ 230.087251][T11834] bridge0: left promiscuous mode [ 230.111964][T11834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.213507][T11842] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1661'. [ 230.450310][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 230.552374][T11859] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1667'. [ 230.562696][T11861] syzkaller0: entered promiscuous mode [ 230.568199][T11861] syzkaller0: entered allmulticast mode [ 230.576126][T11868] netlink: 'syz.1.1670': attribute type 2 has an invalid length. [ 230.586604][T11859] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1667'. [ 230.606869][T11859] netlink: 'syz.4.1667': attribute type 2 has an invalid length. [ 230.887105][T11881] netlink: 'syz.3.1675': attribute type 1 has an invalid length. [ 230.895749][T11881] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1675'. [ 230.917696][T11881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1675'. [ 230.967930][T11886] syzkaller1: entered promiscuous mode [ 230.988519][T11886] syzkaller1: entered allmulticast mode [ 231.198850][T11900] macvtap1: entered promiscuous mode [ 231.225077][T11900] vlan0: entered promiscuous mode [ 231.237402][T11900] macvtap1: entered allmulticast mode [ 231.257784][T11900] vlan0: entered allmulticast mode [ 231.267977][T11900] veth0_vlan: entered allmulticast mode [ 231.285468][T11904] vlan0: entered promiscuous mode [ 231.292793][T11904] bridge0: entered promiscuous mode [ 231.298133][T11904] vlan0: entered allmulticast mode [ 231.305053][T11904] bridge0: entered allmulticast mode [ 231.363012][T11910] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1683'. [ 231.372330][T11910] netlink: 272 bytes leftover after parsing attributes in process `syz.5.1683'. [ 231.381926][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'. [ 231.582607][T11922] syzkaller1: entered allmulticast mode [ 231.773898][T11930] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 231.952549][T11944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.953717][T11943] block nbd5: not configured, cannot reconfigure [ 232.188875][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 232.190574][ T5861] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 232.353813][T11966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.537412][T11978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.931823][T11999] syzkaller1: entered promiscuous mode [ 232.937347][T11999] syzkaller1: entered allmulticast mode [ 233.218307][T12018] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.251500][T12018] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 233.620762][T12048] netlink: 'syz.4.1728': attribute type 13 has an invalid length. [ 233.789501][T12048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.993304][T12071] veth1_macvtap: left promiscuous mode [ 234.149069][T12086] __nla_validate_parse: 18 callbacks suppressed [ 234.149092][T12086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1738'. [ 234.217343][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1739'. [ 234.301641][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1739'. [ 234.360291][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1739'. [ 234.528450][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1743'. [ 234.532016][T12102] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 234.695596][T12113] !: renamed from dummy0 (while UP) [ 234.716084][T12113] netlink: 'syz.5.1745': attribute type 1 has an invalid length. [ 234.733675][T12113] netlink: 'syz.5.1745': attribute type 2 has an invalid length. [ 234.796472][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1748'. [ 234.811084][T12123] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1747'. [ 234.841788][T12121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1748'. [ 234.883349][T12117] lo speed is unknown, defaulting to 1000 [ 234.902370][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1747'. [ 234.963615][T12123] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 235.006123][T12123] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1747'. [ 236.021814][T12186] netlink: 'syz.5.1766': attribute type 33 has an invalid length. [ 236.182032][T12192] netlink: 'syz.3.1771': attribute type 10 has an invalid length. [ 236.589893][T12210] openvswitch: netlink: Message has -1 unknown bytes. [ 236.714742][T12217] SET target dimension over the limit! [ 236.767587][T12227] netlink: 'syz.1.1783': attribute type 4 has an invalid length. [ 236.838038][T12229] netlink: 'syz.1.1783': attribute type 4 has an invalid length. [ 237.264666][T12256] netlink: 'syz.0.1792': attribute type 1 has an invalid length. [ 237.407551][T12261] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 237.628648][T12280] tipc: Enabled bearer , priority 0 [ 237.646119][T12280] syzkaller0: entered promiscuous mode [ 237.652191][T12280] syzkaller0: entered allmulticast mode [ 237.776798][T12280] tipc: Resetting bearer [ 237.936928][T12300] : entered promiscuous mode [ 238.288493][T12304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.400351][T12314] tipc: Trying to set illegal importance in message [ 238.410116][T12314] openvswitch: netlink: Key type 29 is not supported [ 238.673439][T12279] tipc: Resetting bearer [ 238.775043][T12279] tipc: Disabling bearer [ 239.052877][T12346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.858188][T12359] __nla_validate_parse: 21 callbacks suppressed [ 239.858206][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1818'. [ 241.016538][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1820'. [ 241.043643][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1820'. [ 241.274011][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 241.299332][T12385] chnl_net:caif_netlink_parms(): no params data found [ 241.352600][T12392] netlink: 'syz.5.1829': attribute type 2 has an invalid length. [ 241.363350][T12392] netlink: 119 bytes leftover after parsing attributes in process `syz.5.1829'. [ 241.511553][T12398] netlink: 'syz.0.1831': attribute type 3 has an invalid length. [ 241.539651][T12404] netlink: 'syz.5.1832': attribute type 1 has an invalid length. [ 241.706731][T12419] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1835'. [ 241.725303][T12418] netlink: 'syz.5.1839': attribute type 33 has an invalid length. [ 241.748089][T12423] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1838'. [ 241.769710][T12419] nbd: socks must be embedded in a SOCK_ITEM attr [ 241.889711][T12428] policy can only be matched on NF_INET_PRE_ROUTING [ 241.889738][T12428] unable to load match [ 242.067453][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1845'. [ 242.606782][T12487] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 242.642212][T12487] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 242.676331][T12487] gretap1: entered promiscuous mode [ 242.703097][T12487] gretap1: entered allmulticast mode [ 242.734588][T12495] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1860'. [ 242.755078][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 242.767836][T12500] netlink: 'syz.4.1861': attribute type 5 has an invalid length. [ 243.014907][T12510] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 243.056606][T12515] openvswitch: netlink: Message has 4 unknown bytes. [ 243.092238][T12513] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 243.099963][T12513] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 243.135642][T12505] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 243.161628][T12510] 8021q: VLANs not supported on wg2 [ 243.179312][T12516] tipc: Enabling not permitted [ 243.185047][T12516] tipc: Enabling of bearer rejected, failed to enable media [ 243.346273][T12528] erspan0: entered promiscuous mode [ 243.378409][T12527] xt_addrtype: ipv6 does not support BROADCAST matching [ 243.379754][T12528] erspan0: entered allmulticast mode [ 243.436536][T12530] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.587119][T12534] netlink: 'syz.1.1874': attribute type 10 has an invalid length. [ 243.602810][T12537] netlink: 'syz.3.1876': attribute type 18 has an invalid length. [ 243.885550][T12557] netlink: 'syz.0.1882': attribute type 7 has an invalid length. [ 243.938530][T12557] netlink: 'syz.0.1882': attribute type 8 has an invalid length. [ 244.020937][T12557] bond0: entered promiscuous mode [ 244.062693][T12557] bond_slave_0: entered promiscuous mode [ 244.087085][T12557] bond_slave_1: entered promiscuous mode [ 244.124637][T12557] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 244.158837][T12557] bridge_slave_1: entered promiscuous mode [ 244.184803][T12557] bond0: left promiscuous mode [ 244.202869][T12557] bond_slave_0: left promiscuous mode [ 244.224163][T12557] bond_slave_1: left promiscuous mode [ 244.239647][T12557] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 244.246603][T12557] bridge_slave_1: left promiscuous mode [ 244.318048][T12577] syzkaller1: entered promiscuous mode [ 244.343417][T12577] syzkaller1: entered allmulticast mode [ 244.719837][T12595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.770886][T12600] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 244.985906][T12609] __nla_validate_parse: 16 callbacks suppressed [ 244.985919][T12609] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1896'. [ 245.006248][T12609] bond0: entered promiscuous mode [ 245.011423][T12609] bond_slave_0: entered promiscuous mode [ 245.017273][T12609] bond_slave_1: entered promiscuous mode [ 245.024599][T12609] bond0: left promiscuous mode [ 245.029530][T12609] bond_slave_0: left promiscuous mode [ 245.035299][T12609] bond_slave_1: left promiscuous mode [ 245.683000][T12642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.697969][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1907'. [ 245.836188][T12652] Cannot find del_set index 17 as target [ 246.041112][T12658] netlink: 'syz.5.1910': attribute type 1 has an invalid length. [ 246.493223][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1920'. [ 246.543540][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1921'. [ 246.577816][T12690] xfrm1: entered promiscuous mode [ 246.587103][T12690] xfrm1: entered allmulticast mode [ 246.595828][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1921'. [ 247.148639][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1926'. [ 247.198496][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1926'. [ 247.227954][T12726] netlink: 'syz.1.1929': attribute type 12 has an invalid length. [ 247.246622][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 247.404253][T12726] netlink: 'syz.1.1929': attribute type 12 has an invalid length. [ 247.415619][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 247.451700][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1933'. [ 247.493488][T12742] Bluetooth: MGMT ver 1.23 [ 247.705757][T12749] netlink: 'syz.5.1936': attribute type 4 has an invalid length. [ 248.093191][T12767] netlink: 'syz.4.1943': attribute type 2 has an invalid length. [ 248.375767][T12789] bond3: entered promiscuous mode [ 248.400390][T12789] bond3: entered allmulticast mode [ 248.419677][T12802] netlink: 'syz.1.1951': attribute type 2 has an invalid length. [ 248.427481][T12789] 8021q: adding VLAN 0 to HW filter on device bond3 [ 248.463614][T12787] xt_CT: No such helper "snmp" [ 248.937151][T12826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.943838][T12813] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.104399][T12813] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.264519][T12813] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.336305][T12839] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 249.415384][T12813] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.733284][T12813] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.780035][T12813] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.823748][T12813] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.882989][T12863] geneve2: entered promiscuous mode [ 249.895721][T12863] geneve2: entered allmulticast mode [ 250.077201][T12813] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.207057][T12886] __nla_validate_parse: 12 callbacks suppressed [ 250.207078][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 250.253892][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1977'. [ 250.265705][T12888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1977'. [ 250.366308][T12899] xt_addrtype: ipv6 does not support BROADCAST matching [ 250.382904][T12901] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 250.413877][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1977'. [ 250.598822][T12918] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1983'. [ 250.668830][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.033782][T12991] netlink: 'syz.1.2003': attribute type 10 has an invalid length. [ 252.047331][T12993] netlink: 'syz.1.2003': attribute type 10 has an invalid length. [ 252.329440][T13001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2006'. [ 252.544313][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2009'. [ 252.587356][T13012] netlink: 'syz.0.2010': attribute type 5 has an invalid length. [ 253.164499][T13057] team0: Device vti0 is of different type [ 253.176942][T13062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2026'. [ 253.237583][T13066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.245007][T13058] netlink: 'syz.0.2025': attribute type 5 has an invalid length. [ 253.372529][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2028'. [ 253.440875][T13073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2030'. [ 253.599532][T13083] netlink: 'syz.4.2033': attribute type 11 has an invalid length. [ 253.607517][T13083] netlink: 'syz.4.2033': attribute type 11 has an invalid length. [ 253.860214][T13107] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 253.867338][ C1] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 253.910507][T13104] netlink: 'syz.3.2039': attribute type 1 has an invalid length. [ 253.956678][T13116] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 253.997849][T13116] xt_hashlimit: size too large, truncated to 1048576 [ 254.608478][T13142] syzkaller1: entered promiscuous mode [ 254.614013][T13142] syzkaller1: entered allmulticast mode [ 254.769548][T13144] lo speed is unknown, defaulting to 1000 [ 255.144031][T13178] netlink: 'syz.1.2056': attribute type 30 has an invalid length. [ 255.189653][T13178] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 255.210932][T13178] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 255.364814][T13184] netlink: 'syz.0.2059': attribute type 11 has an invalid length. [ 255.517149][T13195] __nla_validate_parse: 12 callbacks suppressed [ 255.517163][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'. [ 255.537930][T13195] netlink: 'syz.0.2062': attribute type 1 has an invalid length. [ 255.593192][T13195] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.649133][T13199] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.656149][T13199] bond6: (slave vxcan77): The slave device specified does not support setting the MAC address [ 255.681658][T13199] bond6: (slave vxcan77): Error -95 calling set_mac_address [ 255.742382][T13197] lo speed is unknown, defaulting to 1000 [ 255.754626][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2064'. [ 255.778172][T13204] gretap2: entered promiscuous mode [ 255.806362][T13204] bond6: (slave gretap2): making interface the new active one [ 255.817433][T13204] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 255.923470][T13208] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2065'. [ 255.972109][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 256.004774][T13207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2065'. [ 256.620880][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2071'. [ 256.665810][T13231] veth0: entered promiscuous mode [ 256.679545][T13240] netlink: 'syz.3.2071': attribute type 1 has an invalid length. [ 256.738088][T13234] veth0: left promiscuous mode [ 256.824360][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2072'. [ 256.886528][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2075'. [ 256.918020][T13246] batadv1: entered allmulticast mode [ 256.950904][T13250] netlink: 'syz.4.2074': attribute type 4 has an invalid length. [ 257.386235][T13281] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2084'. [ 257.672169][T13293] delete_channel: no stack [ 257.765139][T13299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.785733][T13281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.823845][T13281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.869039][T13281] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 257.902053][T13281] bond0 (unregistering): (slave bond4): Releasing backup interface [ 257.915540][T13281] bond0 (unregistering): Released all slaves [ 258.194660][T13311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2092'. [ 258.222295][T13309] netlink: 'syz.3.2091': attribute type 4 has an invalid length. [ 258.226652][T13318] netlink: 'syz.3.2091': attribute type 4 has an invalid length. [ 258.275091][T13316] xt_hashlimit: size too large, truncated to 1048576 [ 258.394682][ T5910] lo speed is unknown, defaulting to 1000 [ 258.418670][ T5910] syz2: Port: 1 Link DOWN [ 258.473482][ T5910] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 258.483577][T13329] gretap0: entered promiscuous mode [ 258.590637][T13337] veth1_macvtap: left promiscuous mode [ 258.832898][T13350] xt_hashlimit: overflow, rate too high: 0 [ 259.109969][T13371] tipc: Enabled bearer , priority 0 [ 259.203117][T13371] syzkaller0: entered promiscuous mode [ 259.216541][T13371] syzkaller0: entered allmulticast mode [ 259.227375][T13377] netlink: 'syz.5.2112': attribute type 11 has an invalid length. [ 259.243701][ T5934] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.352256][T13371] tipc: Resetting bearer [ 259.382169][T13369] tipc: Resetting bearer [ 259.488027][T13369] tipc: Disabling bearer [ 259.551713][T13394] syzkaller1: entered promiscuous mode [ 259.557417][T13394] syzkaller1: entered allmulticast mode [ 260.622946][T13449] __nla_validate_parse: 8 callbacks suppressed [ 260.622964][T13449] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2133'. [ 260.746964][T13457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.757420][T13458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.922462][T13423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.101089][T13467] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 261.143210][T13469] No such timeout policy "syz0" [ 261.183655][T13469] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 261.239608][T13467] bond1: entered promiscuous mode [ 261.254950][T13467] bond1: entered allmulticast mode [ 261.263268][T13467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.278170][T13469] 8021q: VLANs not supported on vcan0 [ 261.344578][T13478] dvmrp0: entered allmulticast mode [ 261.383893][T13489] netlink: 'syz.4.2146': attribute type 6 has an invalid length. [ 261.409215][T13489] x_tables: duplicate underflow at hook 1 [ 261.506494][T13495] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2147'. [ 261.553444][T13495] netlink: 'syz.5.2147': attribute type 7 has an invalid length. [ 261.566704][T13495] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2147'. [ 261.616329][T13495] syzkaller1: entered promiscuous mode [ 261.635214][T13495] syzkaller1: entered allmulticast mode [ 261.746202][T13514] netlink: 'syz.0.2155': attribute type 11 has an invalid length. [ 261.932757][T13532] hsr0 speed is unknown, defaulting to 1000 [ 261.941737][T13532] hsr0 speed is unknown, defaulting to 1000 [ 261.949523][T13532] hsr0 speed is unknown, defaulting to 1000 [ 261.996079][T13532] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 262.033912][T13532] hsr0 speed is unknown, defaulting to 1000 [ 262.042226][T13532] hsr0 speed is unknown, defaulting to 1000 [ 262.054574][T13532] hsr0 speed is unknown, defaulting to 1000 [ 262.064211][T13532] hsr0 speed is unknown, defaulting to 1000 [ 262.081407][T13532] hsr0 speed is unknown, defaulting to 1000 [ 262.091726][T13532] hsr0 speed is unknown, defaulting to 1000 [ 262.116661][T13543] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.237886][T13548] netlink: 'syz.0.2165': attribute type 1 has an invalid length. [ 262.317107][T13550] netlink: 'syz.3.2166': attribute type 1 has an invalid length. [ 262.367663][T13550] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2166'. [ 262.504562][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'. [ 262.644317][T13567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.928169][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2180'. [ 263.023996][T13587] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2181'. [ 263.112425][T13589] netlink: 'syz.3.2183': attribute type 1 has an invalid length. [ 263.407250][T13608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2189'. [ 263.436515][T13610] netlink: 'syz.1.2191': attribute type 4 has an invalid length. [ 263.461823][T13611] netlink: 'syz.1.2191': attribute type 4 has an invalid length. [ 263.644000][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 263.841980][T13632] wg1: entered promiscuous mode [ 263.862436][T13633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2197'. [ 264.339409][T13674] sctp: [Deprecated]: syz.4.2207 (pid 13674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.339409][T13674] Use struct sctp_sack_info instead [ 265.064806][T13713] vlan2: entered promiscuous mode [ 265.080930][T13713] vlan2: entered allmulticast mode [ 265.096364][T13713] hsr_slave_1: entered allmulticast mode [ 265.199742][T13714] lo speed is unknown, defaulting to 1000 [ 265.208192][T13713] netlink: 'syz.4.2219': attribute type 23 has an invalid length. [ 265.219327][T13714] hsr0 speed is unknown, defaulting to 1000 [ 265.261572][T13724] »»»»»»: renamed from bond_slave_0 (while UP) [ 265.273387][T13718] netlink: 'syz.1.2220': attribute type 33 has an invalid length. [ 265.388646][ T5861] Bluetooth: hci5: command 0x0405 tx timeout [ 265.695033][T13742] ipt_rpfilter: unknown options [ 265.790499][T13750] Bluetooth: MGMT ver 1.23 [ 265.829727][T13757] __nla_validate_parse: 7 callbacks suppressed [ 265.829746][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2233'. [ 265.833482][T13759] netlink: 'syz.5.2234': attribute type 5 has an invalid length. [ 265.852660][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2233'. [ 265.853291][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2234'. [ 265.907949][T13762] smc: net device erspan0 applied user defined pnetid SYZ0 [ 266.271519][T13790] netlink: 'syz.1.2242': attribute type 2 has an invalid length. [ 266.298383][T13790] netlink: 'syz.1.2242': attribute type 2 has an invalid length. [ 266.324209][T13790] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 266.507582][T13800] netlink: 'syz.4.2244': attribute type 1 has an invalid length. [ 266.531827][T13800] netlink: 'syz.4.2244': attribute type 1 has an invalid length. [ 266.563167][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2247'. [ 266.688524][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2250'. [ 267.014443][T13816] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 267.227280][T13844] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 267.255807][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2261'. [ 267.273275][T13843] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.2258'. [ 267.319572][T13852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2260'. [ 267.334663][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2261'. [ 267.338560][T13844] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.2258'. [ 267.392079][T13860] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 267.415997][T13860] bond2: (slave vcan0): Error -95 calling set_mac_address [ 267.432946][T13855] xt_CT: No such helper "pptp" [ 267.586758][T13864] macvtap1: entered promiscuous mode [ 267.603466][T13864] vlan0: entered promiscuous mode [ 267.618731][T13864] macvtap1: entered allmulticast mode [ 267.627850][T13864] vlan0: entered allmulticast mode [ 267.637994][T13864] veth0_vlan: entered allmulticast mode [ 267.744475][T13876] xfrm1: entered allmulticast mode [ 267.758113][T13878] tipc: Enabling of bearer rejected, media not registered [ 267.991551][T13899] mac80211_hwsim hwsim3 : renamed from wlan1 [ 268.528957][T13933] tc_dump_action: action bad kind [ 268.574919][T13936] tc_dump_action: action bad kind [ 268.672466][T13944] team0: Device wireguard0 is of different type [ 269.162619][T13970] sctp: [Deprecated]: syz.0.2291 (pid 13970) Use of int in max_burst socket option. [ 269.162619][T13970] Use struct sctp_assoc_value instead [ 269.307542][T13979] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 269.320170][T13982] validate_nla: 3 callbacks suppressed [ 269.320188][T13982] netlink: 'syz.0.2295': attribute type 1 has an invalid length. [ 269.341520][T13982] netlink: 'syz.0.2295': attribute type 4 has an invalid length. [ 269.351861][T13982] NCSI netlink: No device for ifindex 458760 [ 269.372622][T13987] tls_set_device_offload: netdev not found [ 269.890331][T14014] netlink: 'syz.1.2305': attribute type 4 has an invalid length. [ 270.024981][T14025] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 270.033290][T14025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.403714][T14046] lo speed is unknown, defaulting to 1000 [ 270.415793][T14046] hsr0 speed is unknown, defaulting to 1000 [ 270.622482][ T6289] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea [ 270.754714][T14073] xt_bpf: check failed: parse error [ 270.803587][T14073] IPVS: Unknown mcast interface: vcan0 [ 270.982035][T14087] __nla_validate_parse: 12 callbacks suppressed [ 270.982066][T14087] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2330'. [ 271.053925][T14087] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2330'. [ 271.094273][T14087] netlink: 'syz.1.2330': attribute type 5 has an invalid length. [ 271.113226][T14087] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2330'. [ 271.744946][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2334'. [ 271.911815][T14117] netlink: 'syz.0.2338': attribute type 11 has an invalid length. [ 272.255711][T14129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2343'. [ 272.284933][T14129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2343'. [ 272.312655][T14142] netlink: 'syz.4.2345': attribute type 3 has an invalid length. [ 272.364181][T14129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2343'. [ 272.436239][T14145] 8021q: adding VLAN 0 to HW filter on device bond7 [ 272.638108][T14160] netlink: 'syz.5.2352': attribute type 1 has an invalid length. [ 272.660862][T14160] netlink: 'syz.5.2352': attribute type 1 has an invalid length. [ 272.673265][T14162] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 272.857905][T14173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2356'. [ 273.219034][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2363'. [ 273.236251][T14198] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2366'. [ 273.570291][T14216] FAULT_INJECTION: forcing a failure. [ 273.570291][T14216] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 273.596896][T14216] CPU: 1 UID: 0 PID: 14216 Comm: syz.3.2370 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065 #0 PREEMPT(full) [ 273.596922][T14216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.596940][T14216] Call Trace: [ 273.596947][T14216] [ 273.596955][T14216] dump_stack_lvl+0x189/0x250 [ 273.596999][T14216] ? __pfx____ratelimit+0x10/0x10 [ 273.597017][T14216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.597040][T14216] ? __pfx__printk+0x10/0x10 [ 273.597074][T14216] should_fail_ex+0x414/0x560 [ 273.597097][T14216] _copy_to_user+0x31/0xb0 [ 273.597123][T14216] do_bnep_sock_ioctl+0x4c5/0x640 [ 273.597145][T14216] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 273.597168][T14216] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 273.597195][T14216] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 273.597223][T14216] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 273.597261][T14216] sock_do_ioctl+0xd9/0x300 [ 273.597282][T14216] ? __pfx_sock_do_ioctl+0x10/0x10 [ 273.597298][T14216] ? __lock_acquire+0xab9/0xd20 [ 273.597331][T14216] sock_ioctl+0x576/0x790 [ 273.597350][T14216] ? __pfx_sock_ioctl+0x10/0x10 [ 273.597368][T14216] ? __fget_files+0x2a/0x420 [ 273.597383][T14216] ? __fget_files+0x3a0/0x420 [ 273.597397][T14216] ? __fget_files+0x2a/0x420 [ 273.597416][T14216] ? bpf_lsm_file_ioctl+0x9/0x20 [ 273.597435][T14216] ? __pfx_sock_ioctl+0x10/0x10 [ 273.597454][T14216] __se_sys_ioctl+0xf9/0x170 [ 273.597477][T14216] do_syscall_64+0xfa/0x3b0 [ 273.597495][T14216] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.597512][T14216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.597528][T14216] ? clear_bhb_loop+0x60/0xb0 [ 273.597549][T14216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.597564][T14216] RIP: 0033:0x7f62e098e9a9 [ 273.597587][T14216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.597603][T14216] RSP: 002b:00007f62e189d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.597629][T14216] RAX: ffffffffffffffda RBX: 00007f62e0bb5fa0 RCX: 00007f62e098e9a9 [ 273.597642][T14216] RDX: 0000200000000200 RSI: 00000000800442d2 RDI: 0000000000000004 [ 273.597654][T14216] RBP: 00007f62e189d090 R08: 0000000000000000 R09: 0000000000000000 [ 273.597665][T14216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.597675][T14216] R13: 0000000000000000 R14: 00007f62e0bb5fa0 R15: 00007fff1bd88db8 [ 273.597705][T14216] [ 274.221115][ T6284] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 274.252731][T14252] netlink: 'syz.1.2381': attribute type 10 has an invalid length. [ 274.263665][T14252] dummy0: entered promiscuous mode [ 274.274548][T14252] bridge0: port 1(dummy0) entered blocking state [ 274.283166][T14252] bridge0: port 1(dummy0) entered disabled state [ 274.293475][T14252] dummy0: entered allmulticast mode [ 274.304524][T14252] dummy0: left allmulticast mode [ 274.312385][T14252] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 274.353437][T14258] FAULT_INJECTION: forcing a failure. [ 274.353437][T14258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.368900][T14258] CPU: 1 UID: 0 PID: 14258 Comm: syz.0.2383 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065 #0 PREEMPT(full) [ 274.368925][T14258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.368936][T14258] Call Trace: [ 274.368943][T14258] [ 274.368951][T14258] dump_stack_lvl+0x189/0x250 [ 274.368978][T14258] ? __pfx____ratelimit+0x10/0x10 [ 274.368997][T14258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.369017][T14258] ? __pfx__printk+0x10/0x10 [ 274.369054][T14258] should_fail_ex+0x414/0x560 [ 274.369078][T14258] _copy_to_user+0x31/0xb0 [ 274.369102][T14258] simple_read_from_buffer+0xe1/0x170 [ 274.369130][T14258] proc_fail_nth_read+0x1df/0x250 [ 274.369151][T14258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.369173][T14258] ? rw_verify_area+0x258/0x650 [ 274.369193][T14258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.369212][T14258] vfs_read+0x200/0x980 [ 274.369239][T14258] ? __pfx___mutex_lock+0x10/0x10 [ 274.369259][T14258] ? __pfx_vfs_read+0x10/0x10 [ 274.369281][T14258] ? __fget_files+0x2a/0x420 [ 274.369302][T14258] ? __fget_files+0x3a0/0x420 [ 274.369316][T14258] ? __fget_files+0x2a/0x420 [ 274.369342][T14258] ksys_read+0x145/0x250 [ 274.369363][T14258] ? __fget_files+0x3a0/0x420 [ 274.369380][T14258] ? __pfx_ksys_read+0x10/0x10 [ 274.369408][T14258] ? do_syscall_64+0xbe/0x3b0 [ 274.369439][T14258] do_syscall_64+0xfa/0x3b0 [ 274.369457][T14258] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.369476][T14258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.369494][T14258] ? clear_bhb_loop+0x60/0xb0 [ 274.369515][T14258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.369533][T14258] RIP: 0033:0x7f3d1cb8d3bc [ 274.369549][T14258] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 274.369565][T14258] RSP: 002b:00007f3d1da4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.369584][T14258] RAX: ffffffffffffffda RBX: 00007f3d1cdb5fa0 RCX: 00007f3d1cb8d3bc [ 274.369597][T14258] RDX: 000000000000000f RSI: 00007f3d1da4f0a0 RDI: 0000000000000003 [ 274.369608][T14258] RBP: 00007f3d1da4f090 R08: 0000000000000000 R09: 0000000000000000 [ 274.369619][T14258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.369630][T14258] R13: 0000000000000000 R14: 00007f3d1cdb5fa0 R15: 00007ffedc82ebe8 [ 274.369670][T14258] [ 275.076250][T14281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.145588][T14285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.234402][T14285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.301245][T14291] bond0: (slave ): Releasing backup interface [ 275.353427][T14296] team0: Mode changed to "activebackup" [ 275.395937][T14291] vlan0: entered promiscuous mode [ 275.440519][T14291] geneve1: entered promiscuous mode [ 275.479303][T14291] team0: Port device vlan0 added [ 275.500452][T14309] netlink: 'syz.4.2399': attribute type 1 has an invalid length. [ 275.525680][T14296] tipc: Enabled bearer , priority 0 [ 275.729061][T14319] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 275.850625][T14330] : renamed from hsr0 (while UP) [ 275.975936][T14340] sctp: [Deprecated]: syz.0.2412 (pid 14340) Use of int in maxseg socket option. [ 275.975936][T14340] Use struct sctp_assoc_value instead [ 276.017398][T14340] __nla_validate_parse: 10 callbacks suppressed [ 276.017415][T14340] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2412'. [ 276.041160][T14342] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2413'. [ 276.124393][T14346] veth21: entered allmulticast mode [ 276.233396][T14357] unknown channel width for channel at 909000KHz? [ 276.255139][T14358] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 276.306019][T14358] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2417'. [ 276.443981][T14368] netlink: 'syz.4.2419': attribute type 39 has an invalid length. [ 276.538895][T14370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2421'. [ 276.696265][T14372] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2422'. [ 276.756750][T14377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2423'. [ 276.766542][T14377] tipc: Invalid UDP bearer configuration [ 276.766600][T14377] tipc: Enabling of bearer rejected, failed to enable media [ 276.821057][T14379] netlink: 'syz.0.2424': attribute type 1 has an invalid length. [ 276.929290][T14379] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.959077][T14379] bond3: (slave veth0_to_bond): Releasing active interface [ 276.993736][T14379] bond7: (slave veth0_to_bond): making interface the new active one [ 277.017630][T14379] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 277.036652][T14386] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2425'. [ 277.238963][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2431'. [ 277.239504][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2430'. [ 277.265082][T14398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2430'. [ 277.269214][T14397] netlink: 'syz.1.2429': attribute type 1 has an invalid length. [ 277.385965][T14408] tipc: Enabled bearer , priority 10 [ 277.613078][T14423] netlink: 'syz.4.2437': attribute type 10 has an invalid length. [ 277.643731][T14423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.675840][T14423] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 277.822126][T14437] netlink: 'syz.3.2443': attribute type 1 has an invalid length. [ 277.852302][T14441] netlink: 'syz.4.2442': attribute type 1 has an invalid length. [ 277.996639][T14446] sctp: [Deprecated]: syz.0.2444 (pid 14446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.996639][T14446] Use struct sctp_sack_info instead [ 278.134177][T14453] lo speed is unknown, defaulting to 1000 [ 278.160864][T14453] hsr0 speed is unknown, defaulting to 1000 [ 278.482170][T14482] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 278.498437][ T5934] tipc: Node number set to 3310399282 [ 278.663993][T14480] syzkaller0: entered promiscuous mode [ 278.671251][T14480] syzkaller0: entered allmulticast mode [ 278.677706][T14492] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.715486][T14534] ipt_REJECT: TCP_RESET invalid for non-tcp [ 280.897490][T14508] veth1_to_bond: entered allmulticast mode [ 281.036119][T14538] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 281.065640][T14534] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.108902][T14508] veth1_to_bond: left allmulticast mode [ 281.164476][T14544] __nla_validate_parse: 6 callbacks suppressed [ 281.164495][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2471'. [ 281.196720][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2473'. [ 281.277276][T14534] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.432336][T14562] tipc: Failed to remove unknown binding: 66,1,1/3310399282:682445914/682445916 [ 281.444818][T14562] tipc: Failed to remove unknown binding: 66,1,1/3310399282:682445914/682445916 [ 281.502477][T14554] Unknown status report in ack skb [ 281.561935][T14534] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.697159][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2478'. [ 281.719042][T14534] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.866059][T14581] ------------[ cut here ]------------ [ 281.872188][T14581] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 5 MHz (6) [ 281.887264][T14581] WARNING: CPU: 1 PID: 14581 at drivers/net/wireless/virtual/mac80211_hwsim.c:2653 mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 281.901753][T14581] Modules linked in: [ 281.906048][T14581] CPU: 1 UID: 0 PID: 14581 Comm: syz.4.2480 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065 #0 PREEMPT(full) [ 281.918632][T14581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.930467][T14581] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 281.938136][T14581] Code: 71 17 00 00 48 c7 c7 60 ae 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 f0 7f 91 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 8d 92 cd fa 90 0f 0b 90 e9 fe fe ff [ 281.960084][T14581] RSP: 0018:ffffc9001ee4efd0 EFLAGS: 00010282 [ 281.966214][T14581] RAX: a397ccb05844e200 RBX: 0000000000000014 RCX: 0000000000080000 [ 281.981567][T14581] RDX: ffffc9000d15a000 RSI: 0000000000007363 RDI: 0000000000007364 [ 281.990799][T14581] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 281.998992][T14581] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: 0000000000000000 [ 282.007082][T14581] R13: dffffc0000000000 R14: 0000000000000006 R15: 0000000000000000 [ 282.015184][T14581] FS: 00007fc70555f6c0(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 282.025354][T14581] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.032361][T14581] CR2: 0000200000001080 CR3: 0000000031b8c000 CR4: 00000000003526f0 [ 282.041324][T14581] Call Trace: [ 282.044632][T14581] [ 282.047594][T14581] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 282.054991][T14581] mac80211_hwsim_sta_add+0xa3/0x310 [ 282.060401][T14581] drv_sta_state+0x8be/0x1840 [ 282.065130][T14581] sta_info_insert_rcu+0xd32/0x1940 [ 282.070480][T14581] ? sta_info_insert_rcu+0x2ce/0x1940 [ 282.075995][T14581] sta_info_insert+0x16/0xc0 [ 282.081733][T14581] rdev_add_station+0x105/0x290 [ 282.086637][T14581] nl80211_new_station+0x1723/0x1b40 [ 282.092075][T14581] ? __pfx_nl80211_new_station+0x10/0x10 [ 282.097743][T14581] ? netdev_run_todo+0xe1d/0xea0 [ 282.102827][T14581] ? nl80211_pre_doit+0x4f1/0x930 [ 282.107898][T14581] genl_family_rcv_msg_doit+0x212/0x300 [ 282.114689][T14581] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 282.121009][T14581] ? bpf_lsm_capable+0x9/0x20 [ 282.125733][T14581] ? security_capable+0x7e/0x2e0 [ 282.130838][T14581] genl_rcv_msg+0x60e/0x790 [ 282.135441][T14581] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.142109][T14581] ? ref_tracker_free+0x63a/0x7d0 [ 282.147189][T14581] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 282.153050][T14581] ? __pfx_nl80211_new_station+0x10/0x10 [ 282.158818][T14581] ? __pfx_nl80211_post_doit+0x10/0x10 [ 282.164326][T14581] ? __pfx_ref_tracker_free+0x10/0x10 [ 282.171528][T14581] netlink_rcv_skb+0x208/0x470 [ 282.176445][T14581] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.181607][T14581] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.186973][T14581] ? down_read+0x1ad/0x2e0 [ 282.191696][T14581] genl_rcv+0x28/0x40 [ 282.195727][T14581] netlink_unicast+0x759/0x8e0 [ 282.201858][T14581] netlink_sendmsg+0x805/0xb30 [ 282.206684][T14581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.212091][T14581] ? aa_sock_msg_perm+0x94/0x160 [ 282.217069][T14581] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.222479][T14581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.227847][T14581] __sock_sendmsg+0x21c/0x270 [ 282.233908][T14581] ____sys_sendmsg+0x505/0x830 [ 282.238810][T14581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.244650][T14581] ? import_iovec+0x74/0xa0 [ 282.249577][T14581] ___sys_sendmsg+0x21f/0x2a0 [ 282.254399][T14581] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.260828][T14581] ? __fget_files+0x2a/0x420 [ 282.265492][T14581] ? __fget_files+0x3a0/0x420 [ 282.270719][T14581] __x64_sys_sendmsg+0x19b/0x260 [ 282.275727][T14581] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.281428][T14581] ? rcu_is_watching+0x15/0xb0 [ 282.286250][T14581] ? do_syscall_64+0xbe/0x3b0 [ 282.292140][T14581] do_syscall_64+0xfa/0x3b0 [ 282.296691][T14581] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.302002][T14581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.308148][T14581] ? clear_bhb_loop+0x60/0xb0 [ 282.313045][T14581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.320272][T14581] RIP: 0033:0x7fc70478e9a9 [ 282.324731][T14581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.344554][T14581] RSP: 002b:00007fc70555f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.355258][T14581] RAX: ffffffffffffffda RBX: 00007fc7049b5fa0 RCX: 00007fc70478e9a9 [ 282.363833][T14581] RDX: 0000000000004000 RSI: 0000200000001080 RDI: 0000000000000003 [ 282.371995][T14581] RBP: 00007fc704810d69 R08: 0000000000000000 R09: 0000000000000000 [ 282.381248][T14581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.389510][T14581] R13: 0000000000000000 R14: 00007fc7049b5fa0 R15: 00007ffc7e6e12e8 [ 282.397792][T14581] [ 282.400942][T14581] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 282.408252][T14581] CPU: 1 UID: 0 PID: 14581 Comm: syz.4.2480 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065 #0 PREEMPT(full) [ 282.420340][T14581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.430424][T14581] Call Trace: [ 282.433720][T14581] [ 282.436658][T14581] dump_stack_lvl+0x99/0x250 [ 282.441257][T14581] ? __asan_memcpy+0x40/0x70 [ 282.445851][T14581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.451082][T14581] ? __pfx__printk+0x10/0x10 [ 282.455734][T14581] panic+0x2db/0x790 [ 282.459693][T14581] ? __pfx_panic+0x10/0x10 [ 282.464145][T14581] __warn+0x31b/0x4b0 [ 282.468162][T14581] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 282.474247][T14581] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 282.480340][T14581] report_bug+0x2be/0x4f0 [ 282.484713][T14581] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 282.490811][T14581] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 282.496901][T14581] ? mac80211_hwsim_sta_rc_update+0x6f7/0x860 [ 282.502965][T14581] handle_bug+0x84/0x160 [ 282.507217][T14581] exc_invalid_op+0x1a/0x50 [ 282.512066][T14581] asm_exc_invalid_op+0x1a/0x20 [ 282.516912][T14581] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 282.523593][T14581] Code: 71 17 00 00 48 c7 c7 60 ae 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 f0 7f 91 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 8d 92 cd fa 90 0f 0b 90 e9 fe fe ff [ 282.543382][T14581] RSP: 0018:ffffc9001ee4efd0 EFLAGS: 00010282 [ 282.549477][T14581] RAX: a397ccb05844e200 RBX: 0000000000000014 RCX: 0000000000080000 [ 282.557555][T14581] RDX: ffffc9000d15a000 RSI: 0000000000007363 RDI: 0000000000007364 [ 282.565615][T14581] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 282.573786][T14581] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: 0000000000000000 [ 282.581767][T14581] R13: dffffc0000000000 R14: 0000000000000006 R15: 0000000000000000 [ 282.589892][T14581] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 282.595892][T14581] mac80211_hwsim_sta_add+0xa3/0x310 [ 282.601188][T14581] drv_sta_state+0x8be/0x1840 [ 282.605894][T14581] sta_info_insert_rcu+0xd32/0x1940 [ 282.611110][T14581] ? sta_info_insert_rcu+0x2ce/0x1940 [ 282.616535][T14581] sta_info_insert+0x16/0xc0 [ 282.621132][T14581] rdev_add_station+0x105/0x290 [ 282.626012][T14581] nl80211_new_station+0x1723/0x1b40 [ 282.631418][T14581] ? __pfx_nl80211_new_station+0x10/0x10 [ 282.637079][T14581] ? netdev_run_todo+0xe1d/0xea0 [ 282.642060][T14581] ? nl80211_pre_doit+0x4f1/0x930 [ 282.647093][T14581] genl_family_rcv_msg_doit+0x212/0x300 [ 282.652658][T14581] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 282.658750][T14581] ? bpf_lsm_capable+0x9/0x20 [ 282.663433][T14581] ? security_capable+0x7e/0x2e0 [ 282.668374][T14581] genl_rcv_msg+0x60e/0x790 [ 282.672966][T14581] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.678012][T14581] ? ref_tracker_free+0x63a/0x7d0 [ 282.683054][T14581] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 282.688519][T14581] ? __pfx_nl80211_new_station+0x10/0x10 [ 282.694154][T14581] ? __pfx_nl80211_post_doit+0x10/0x10 [ 282.699616][T14581] ? __pfx_ref_tracker_free+0x10/0x10 [ 282.705172][T14581] netlink_rcv_skb+0x208/0x470 [ 282.709958][T14581] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.715011][T14581] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.720328][T14581] ? down_read+0x1ad/0x2e0 [ 282.724747][T14581] genl_rcv+0x28/0x40 [ 282.728725][T14581] netlink_unicast+0x759/0x8e0 [ 282.733586][T14581] netlink_sendmsg+0x805/0xb30 [ 282.738360][T14581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.743676][T14581] ? aa_sock_msg_perm+0x94/0x160 [ 282.748656][T14581] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.753968][T14581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.759466][T14581] __sock_sendmsg+0x21c/0x270 [ 282.764213][T14581] ____sys_sendmsg+0x505/0x830 [ 282.769013][T14581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.774327][T14581] ? import_iovec+0x74/0xa0 [ 282.778837][T14581] ___sys_sendmsg+0x21f/0x2a0 [ 282.783610][T14581] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.788941][T14581] ? __fget_files+0x2a/0x420 [ 282.793529][T14581] ? __fget_files+0x3a0/0x420 [ 282.798646][T14581] __x64_sys_sendmsg+0x19b/0x260 [ 282.803590][T14581] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.809064][T14581] ? rcu_is_watching+0x15/0xb0 [ 282.813919][T14581] ? do_syscall_64+0xbe/0x3b0 [ 282.818598][T14581] do_syscall_64+0xfa/0x3b0 [ 282.823127][T14581] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.828352][T14581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.834639][T14581] ? clear_bhb_loop+0x60/0xb0 [ 282.839327][T14581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.845258][T14581] RIP: 0033:0x7fc70478e9a9 [ 282.849674][T14581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.869477][T14581] RSP: 002b:00007fc70555f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.877982][T14581] RAX: ffffffffffffffda RBX: 00007fc7049b5fa0 RCX: 00007fc70478e9a9 [ 282.885960][T14581] RDX: 0000000000004000 RSI: 0000200000001080 RDI: 0000000000000003 [ 282.893929][T14581] RBP: 00007fc704810d69 R08: 0000000000000000 R09: 0000000000000000 [ 282.901982][T14581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.910179][T14581] R13: 0000000000000000 R14: 00007fc7049b5fa0 R15: 00007ffc7e6e12e8 [ 282.918380][T14581] [ 282.921831][T14581] Kernel Offset: disabled [ 282.926162][T14581] Rebooting in 86400 seconds..