last executing test programs: 3m41.207272182s ago: executing program 0 (id=1799): r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="ff00"}) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003980cc4c93c1ab1ea7d73cd69f11995373f430b094fd9e40fa38d339a50e7ecb879d741a216e0ee4b71239e5951f2217d85fecab5a3219be23ec530dc71f773ac125cbf3af7695760e8c3847183297bd221cdaad81c159e2c4b11f9d", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000", @ANYRES8=r2, @ANYRES16=r3, @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3m40.95751133s ago: executing program 0 (id=1800): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x5) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, 0x0, 0x0) (async) connect$unix(r2, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x9, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x9, 0xf, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7ffffffb]}, 0x80, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r5, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34010000170001000000000000000000640101020000000000000000000000000000000097581e58e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000a010100000000000000000000000000000000000201000302000020000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000b10f00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000004000000b86b"], 0x134}}, 0x4000) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r7, &(0x7f000000b9c0), 0x0, 0x810) socket$kcm(0x21, 0x2, 0x2) (async) r8 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r8, 0x110, 0x7, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r8, 0x110, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbf8, 0x40000000}, 0xc) 3m40.428490578s ago: executing program 0 (id=1802): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex, 0x3, 0x0, 0x6ce0ceef, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x7}, 0x8) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x2c, 0x0, 0xffffffffffffffff, @void, @value, @void, @void, r0}, 0x20) 3m40.098931431s ago: executing program 0 (id=1804): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) listen(r0, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getuid() getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000380)=""/40, &(0x7f00000003c0)=0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001a80)={r4, &(0x7f00000018c0), 0x0}, 0x20) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000700)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000040000000000000000400000000000000104800000200002000a0000000000000000000000000000000000000000000000010000000d000100"], 0x6c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r3, @ANYBLOB="04002dbd7000fbdbdf251700000054000980080002000000006808000100f9ffffff080002007ed000000800020007000000080002000a0000000800010001000000080001000a00000008000100ffffffff08000200ff0700000800020001000080600005804c0002800800030001000000080001001b00000008000100020000000800020009000000080001000300000008000100eaffffff080003007f0000000800010004000000080001000300000008000100756470000800010065746800"], 0xc8}, 0x1, 0x0, 0x0, 0x40009}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x30, 0x1405, 0x800, 0x70bd26, 0x25dfdbfd, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x6}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44044040) r6 = accept4(r0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x1, r8}, 0x38) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r6) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, r9, 0x803, 0x70bd26, 0x4, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9cf}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmmsg$alg(r6, &(0x7f0000003ac0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c40)="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", 0xa6a}], 0x1, 0x0, 0x0, 0x40}], 0x1, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x4, 0x0, 0xfe, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@cipso={0x86, 0x6, 0x3}, @timestamp_prespec={0x44, 0x3c, 0xfd, 0x3, 0x4, [{@multicast1, 0x5102}, {@dev={0xac, 0x14, 0x14, 0x14}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0xfffffffe}, {@empty, 0x1}, {@remote, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) 3m39.013749957s ago: executing program 0 (id=1810): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0xfffffffffffffeff, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x14, 0x30, 0x2, 0x10000, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000002c0)="87243ab8cf6e22ad0064d9eabb267828585bcdaf77100c8412a46ec14787", 0x1e}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000ffffffff00000000000000009500000000000000702fd19408363add13744244a61b684e71d61fe508c6333db60b20dd44a2eae4ca095ce710dd625e2ce8de827cb08d4ee3e2da9be33f789786"], 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000146aa23069fbdb3d9d006800e97800000000000000000b0000"], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001800dd8d000000000000040002001000febe115b0a00002008001e00020000005bb34c6f80f2f3a89fb045300791a5af60bb77c9925cf5d21dbd564faed894092027a90b1b23142ca6ed8d349399bd6433cc80d3242a9ad173210ff4c78011e19c653713b6ef652427239dfe7d5ed6cb82db6ce7e8ba1c366b6472f850de3b0da67798d7dfea2b7777b10c71a9c605f68d48686e8ca265d52c10e97b616efb78fd6025b47398c960a02896a86316ed0be1d8c482cc79fae0"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000068000903434983d200000300000000000a000000000000000400040008000100"], 0x24}}, 0x0) 3m35.952312459s ago: executing program 1 (id=1824): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r2, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x721}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x200040c0}, 0x8000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xc}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000054}, 0x8000) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}}, 0x4810) r5 = socket$rds(0x15, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendfile(r5, r6, 0x0, 0xd029) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$NILFS_IOCTL_GET_VINFO(r7, 0xc0186e86, &(0x7f00000003c0)={&(0x7f0000000340)=[{0x9, 0x40, 0x1, 0x2}, {0x8, 0x6, 0xffffffff, 0x4}, {0x7, 0x8, 0x4, 0xa0}], 0x3, 0x20, 0x1000, 0x8000000000000001}) 3m35.372150936s ago: executing program 1 (id=1826): r0 = socket(0x10, 0x803, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = gettid() r3 = syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/time_for_children\x00') mkdirat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x1ff) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x30}}, 0x4000010) 3m34.911311595s ago: executing program 1 (id=1828): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x20, 0x6, "01aad8db0e3a"}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000b2825b1605e0200"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000380)={0x5, "9b2bfd996c0be5abb43cb3b0dbe99f3a7926b4b8e032ee19cb719817a88a825ea1816942b4e9322bc95288a463141e5ac63db6b8a145be31b7616743ed728bb8f3bae936e132cf4d5bf66ad646ff4ccef51ec743af93382a56162bbefd23448915341fcaf41f1d0862316ab3dd7d1de6f02814ca5f5c03d29189749fef86a658"}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000140)=0xc, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 3m34.688709799s ago: executing program 0 (id=1830): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000005900000000000a50000000fc3301040000000000000000020000000900020073797a3200000000090001000000000024040480200001800700010063740000140002800800014000000013080002408000000e140000001100010000000000000000000500010a3d95b27bbcda5a34ad0a53544c4bb18b3a2f2dc40600000000"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x884}, 0x40c1) socket$inet6(0xa, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="2a5c7352c4b7"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r2, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0xfc0, 0x65, 0x0, 0xd, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x10000, 0x3, 0x4}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYBLOB="2000f50a08000d004000000008000900e200000014000100fe80000000000000000000000000000c"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r9, 0x0, 0x487, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) 3m33.273516807s ago: executing program 3 (id=1833): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRESDEC=r0], 0x10}, 0x1b}, 0x880) 3m33.019836217s ago: executing program 2 (id=1835): syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a80000810000000806000108000604000100000000000000000000aaaaaaaaaaaaffffffff"], 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0xf4f422d5faf08caa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa1}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x141, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 3m32.905244963s ago: executing program 4 (id=1836): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x121040, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x12) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x4000010, r4, 0x90517000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r2], 0x44}}, 0x8000) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_stats}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r11, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x200}, 0x10) preadv(r10, 0xffffffffffffffff, 0x1, 0x4, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000002e152d2700000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000002000110850000008600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r14, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="620ac4ff000000b87110aa010000000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) close(r1) 3m32.823651976s ago: executing program 3 (id=1837): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000655bee0d0000d2565a2234e23e26f76a5206e6c07c8b45197f2643d3f7793eccab3cc93d17cb773346a02c2cb504dcd7d4dd7b0932adba037fc5c723fdfca9bd7b842a10c39339ca946efc52e42f31f9e4d5f33b09ffe59cd714b942ef77b811c24de0da24650256351292abb5df9aaca3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/50], 0xfdef) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x1a, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) (async) close(0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) (async) ppoll(&(0x7f0000000000)=[{r5, 0x1228}], 0x1, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) close(0x3) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000004) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000006cf894d6984afb4922838830f9a7f603fa68ef77f1b9729319ebf6cdc814301b17564cbdbf894e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff00"/24, @ANYRES32, @ANYBLOB], 0x50) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103000400ff00000000020000921a00010073797a30000000000900030073797a3200eaffff13000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c000480280001800a0001006d61f463680000001800028008000240000000000b000100706f6c6963790000095d00010073797a30000000000900020073797a320000000014000000110001000000000000000000000000472d23197ae5ed5fe9ed582a541ec97e0d420fdc447fae8a5690acf1343b688f0afecab844291dfb254c733e5b22734dfdb7126f4a5943d45ada031309466e478cc2ebc1f16dfafb2b519d967035"], 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 3m32.57181964s ago: executing program 2 (id=1838): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 32) r1 = socket(0x1e, 0x4, 0x0) (rerun: 32) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001bc0)=""/4100, 0x1004}], 0x1}}], 0x47, 0x40012282, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}]}}], 0x400000000000181, 0x9200000000000000) (async) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'pimreg1\x00', {0x2, 0x0, @multicast2}}) (async) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f00000002c0), 0x4) (async) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x4c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000700)={'bond0\x00', &(0x7f00000006c0)=@ethtool_channels={0x3d, 0x7fff, 0x9, 0xb9f4, 0x5, 0x6, 0x3, 0x70}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000009000000000000000100000085000000b4000000950000001c000000018c019be3ea040e0c5a350b"], &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) unshare(0x2c020400) (async, rerun: 32) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) getsockopt$sock_cred(r4, 0x1, 0x4d, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) unshare(0x40000000) (async, rerun: 64) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x10) (rerun: 32) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, 0x2e, 0x9, 0x70bd27, 0x3, {0x4}, [@typed={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) 3m32.552602996s ago: executing program 3 (id=1839): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="80200100420000002000128008000100677470001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="746cd18b736e0f53fcdd8e1da94bf6447f22f05e4859533a2e626ca0fe5897bd7f1d591755d35145b7afa3b4fb8d3bc9f8e804a9695a072e45bd313497c1cbb121fb63eaa47480927b2a018250e56bd0f27da8c8c5e29f87ffe833778efb8c535e"], 0x40}, 0x1, 0xba01}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20) connect$l2tp6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x4, @empty, 0x4, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getpeername$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}], 0x1}, 0x4}], 0x2, 0x60, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x4, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 3m32.049055811s ago: executing program 1 (id=1840): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@mpls_getroute={0x30, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x25dfdbfb, {}, [@RTA_VIA={0x14, 0x12, {0x27, "c01d9cb53748f67be3167fd987a4"}}]}, 0x30}}, 0x0) unshare(0x400) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x24040054) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}, @typed={0x4, 0x19}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0xc040) 3m31.883465799s ago: executing program 4 (id=1841): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x40408a0, &(0x7f0000000040)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @random="5b5813d48b08"}, 0x14) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001a00)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x2, 0x1}}}}, 0x30}}, 0x40000) 3m31.881948117s ago: executing program 2 (id=1842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x5, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000300), 0x83f, r1}, 0x38) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000880)={{{@in=@broadcast, @in=@loopback, 0x4e23, 0x0, 0x4e23, 0x1000, 0x2, 0x0, 0x0, 0x3c}, {0x1, 0x7f, 0x5, 0x100000001, 0xffffffffffffffff, 0x8, 0x8001, 0x4}, {0xb1ca, 0x4, 0x7, 0x13455513}, 0x0, 0x6e6bc0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@private0, 0x4d6, 0x2b}, 0xa, @in6=@empty, 0x0, 0x7, 0x0, 0x6, 0x8, 0x2, 0x170}}, 0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x218, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x84, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fff, 0x6}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80000001}}, @TCA_HTB_DIRECT_QLEN={0xfffffffffffffefd, 0x5, 0xffc}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1400, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000001}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xfff}}]}}, @TCA_STAB={0x160, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x1b, 0xffff, 0x400, 0x2, 0x5, 0x9, 0x3}}, {0xa, 0x2, [0x7ff, 0x2, 0xfff]}}, {{0x1c, 0x1, {0x8, 0x5, 0xb, 0xffffffff, 0x0, 0x7, 0xa, 0x2}}, {0x8, 0x2, [0x200, 0x3]}}, {{0x1c, 0x1, {0x40, 0x40, 0x4, 0x101, 0x0, 0x14d60000, 0x511d, 0x9}}, {0x16, 0x2, [0x40, 0x1fe, 0x8001, 0x3, 0x0, 0x4, 0x409, 0x1, 0x8]}}, {{0x1c, 0x1, {0x3, 0x0, 0x90, 0xffff, 0x2, 0xfffd, 0xd9c7, 0x8}}, {0x14, 0x2, [0x4, 0xe4ce, 0x7fff, 0x8, 0x7, 0x6, 0x4, 0x35]}}, {{0x1c, 0x1, {0xdb, 0x2, 0x3, 0x1, 0x1, 0x8000, 0xfffffc01, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x5, 0x7, 0x400, 0x1, 0x0, 0x2, 0xe5, 0x9}}, {0x16, 0x2, [0xccf3, 0x4, 0x3, 0x1, 0xa4, 0x6, 0x6, 0x10, 0xe]}}, {{0x1c, 0x1, {0xf, 0x2, 0x3, 0xb, 0x0, 0x6, 0x7, 0x3}}, {0xa, 0x2, [0x1da1, 0x2, 0x82e]}}, {{0x1c, 0x1, {0x3, 0x0, 0x100, 0x4, 0x2, 0x4, 0x0, 0x6}}, {0x10, 0x2, [0x101, 0xad, 0x1000, 0x81, 0x80, 0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0xea}}]}, 0x218}}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000040000000200000009"], 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000000)=':\'$\xe8%*\x00', 0x10000, &(0x7f0000000040)={@_ha_fsid={[0x9, 0x2b0f5f49]}, {0x30, 0xfff9, 0xa, 0x9}}, 0x86, &(0x7f00000000c0), &(0x7f0000000180)=0x1}) setsockopt$packet_buf(r6, 0x107, 0x2, &(0x7f0000000400)="c213e59c63817338862d0645273bfdfea9ab25b6d690f72b8e67df50c28112d97b2de10bc4a9655c2a4edcf1a7b39a6b51637aee7f6744ffea852948e44b9be10c0facee928a60ca09649ffd93321a95480036f3832a205ef7a449e64242467e4767ff9f00d1f5bd8149d6cc409c206e880141ea9420f2dd21cebd2eec8314cf9b549c6d8a4f90a24ba42aec781d5dbf15013a15eda78ed8146cb92804d5e8e054f56956b96c13db41cab6ae", 0xac) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x40, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r8, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20040080) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000201030000000000000000000a0000040c001980080002000100018014000300ff01"], 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x0, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f0000000ec0)={{0x400, 0x0, 0x95, 0x5, 0x8}, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}]}) 3m31.497939087s ago: executing program 3 (id=1843): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001002abd70000000000014000000", @ANYRES32=0x0, @ANYRESDEC=0x0], 0x3c}}, 0x4040000) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xce) (async) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001002abd70000000000014000000", @ANYRES32=0x0, @ANYRESDEC=0x0], 0x3c}}, 0x4040000) (async) 3m31.21639959s ago: executing program 2 (id=1844): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="1c0000001a006b00103fe3dc6e08000081ffffff8006b25700000864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r2, &(0x7f0000000400)=@phonet={0x23, 0x0, 0x1, 0x1}, 0x80) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', 0x0}) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0xe}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=@deltfilter={0x24, 0x2d, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x9, 0xfff9}, {0x3, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, 0x0, &(0x7f0000000600)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r9, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x1d, r8, 0x0, {0x0, 0xff, 0x2}, 0x2}, 0x18, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x4804) pipe(0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x8) readv(r1, &(0x7f0000000680)=[{0x0}], 0x1) 3m31.155685622s ago: executing program 4 (id=1845): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r6) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x2c, &(0x7f0000000500)=""/44, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x4, 0x7fffffff, 0x5}, 0x10, r9, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000600)=[{0x1, 0x3, 0x4, 0x5}, {0x0, 0x1, 0x4, 0x2}, {0x2, 0x1, 0xa, 0x4}, {0x2, 0x4, 0xc, 0xa}], 0x10, 0x3}, 0x94) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 3m31.154700853s ago: executing program 1 (id=1846): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r2 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) recvmsg(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb5d57b70af3d2b6b95f0633b269b0e6d64a4e16a6b295c96bdf493711c2d6eed50906f92504314b12b4719c24ff9c27e0a71232b51316ae4b9c97f78b0e244d6b63591fccb765a9"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 3m30.599273291s ago: executing program 3 (id=1847): socket(0x2, 0x80805, 0x0) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) syz_emit_ethernet(0x86, &(0x7f00000003c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev, {[@lsrr={0x83, 0x3}, @lsrr={0x83, 0x7, 0x90, [@private=0xa010101]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x800}, {@multicast2}]}]}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10100, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={r2, 0x1, 0x7, 0x2, 0x3, 0x1, 0x6, 0x9, {r2, @in6={{0xa, 0x4e23, 0x3233, @local, 0x6}}, 0x8000, 0x8, 0xfffff013, 0x6, 0x6}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0xb4, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x88, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x40, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x138}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)={r5, 0x5, 0x20}, &(0x7f00000001c0)=0x18) 3m30.580603804s ago: executing program 4 (id=1848): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="dd588bfc98ad"}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000010000883e"], 0xfdef) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010004b0429bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="09a00100068100001c0012800b000100773931948dc86fb7061a1709e68462726964676500000c00028005000200000000000a0001000000aaaaaaaa00005da5b7afd69380c16dff87a06c4de4bef5077c71bfdbc6902dcacc323b2745be4d23601f37e3be1ba59f9230784b5800abd9f7f29b435b7de73a4b129236872affde9742ee32df62cc2a0611e4610405ed6ef968682128df08a3b45b26489f7888a348046fa92183e1a0747c"], 0x48}}, 0x20000000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8008010) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000300000a00000029000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000007c20445ba0621e00000000000007000000000000000000000000400000000000000200000b0200000000000000ffffffffffffff5a04ff00000000000000000000000000000000000000000000000000000000000000ffffffffffffff000000100000000000000000000000000029225d09a0407a1e07ec"], 0xb8}}, 0x4008004) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6(0xa, 0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmmsg(r4, &(0x7f0000001340)=[{{&(0x7f0000000080)=@can={0x1d, r6}, 0x80, &(0x7f0000001180)=[{&(0x7f00000029c0)="3c1826f8993cc476520609dd34c3ad6290f6e4f423b3aeddf90a580a6ed1a4e3df9701c3a94d32e6bb4338b7a1ad3d2e6b7ee41a164f8989c2374a8db9526daa30b200789b565e8708b6191a5d5fda539ada6038d89a580b073bbc068b1f6d2dc4df59aeed5c771153b8f8b944f01ec3e895efd0f893f889243efef9daa293cc6db636feb377c3dfed4b4dfbc447f28ddbca894caa47e81c1a03c5e5df036fc1f3bc8c7006836e30f55d0dc12eece04ad4d62659cf06fefeeb4955d6839ed442db16aaa427f1e4e3dda56a658bcd1758f5cba8a2cca082131cda4f42ee2d187c8a689df68c145f9a051420d92bf82574b76b740b779841a92e5192725787789ebdfde0375abc547fffa46b0b43e0104a9b8de99101d51ce09c29d5e709dca779af940073a7953800e9e2802e64a2107d9d60c72b19046c0da657ce5c544962100630cb116dc0a22e72961e860b3b452cd8e156ec9b19a08b38352d32b531cc8a202346a12eff6d45bc74f15491d00bab6e944af44c66f82401d7b9a9fe8dca85cd07c4991f7943789cc87849998a975c5c1afbc5a25cdf1fb74b7eb1b33ffe84c74aa95ffd7025848b72f2d90feb05bbae581360cddf5429fac75c5d94d531c140147510f018cda3c413281c4e143c81a9ee7088be6b4b7fefd05358de9dd7c35078fbac0a4c071b1b5f820ef3cffa9ee728e536ca08d609f654ab74f65ea2bba931023fc05d59909bc45ebde53a63504e09dcd8a0ebf958f953f6fd57de5c8e463917791fc7ddd6895d85148b7574c06a41b36d71d09b898f6913f02a2eeb567470c4a1a3ccbd93aee971fb0c81bcbe9694f9e2ac785ea53f9aee405ef7858245fed9f0286090f392411262f562935d8005186954dcdc6650147e602536b4eb436f57f3417e4db467398f5b573cbb3504b121dae8a90305b0e655319c0635c80fcf92971c00e4e8d6d165db108d92985f278281f9567c2dbf48787df87d19ca9a080601bd45f0a8e1f281a04eb29819562fe46da4e9a2f1e2c20d03bee1e1a937dfed24ff814a38ca3ccc189fd12bb38ed9c4a6f3f369221ee04461126391ee5b7499ebb93939cc660416da61d7a97791cf8bd246bf5b44d9f09ae25cb97c3f66f8ae03c984ced6fd64b881ca6f365259eedbe31aa2daf9b0d8a07442a3f1ff2908384081d06ba09daf423ee850a3a2c2e97b3b39e475ece4405bc982841f7abc76cc539e00f85d4aaba631206e4221102f90dac544402d1c67291c3e9cdb43f18078bfff8dddc549d043e30235b4524b0b9b71f7ae8bf30b3596e3a4b94cc265cfc38f9a8ad7769ccf6d616de1330daa66bb2eb1bc8c1c1d04031a0cdd18b2bca6c9b181679c38a2b19c0a4e0428875ee5fd5267b569f17f9a9c802e183865211ac904e7e7623fb95a0ca68e563e3ec433a48f80dea1028348ed7f579d55f2fd3738c2161877f59410b9544d181e3f466ed467cb0e623393c362aaaf9298e98b07e07beb13622058020ce8f7993b262ed7806c6e1504bea751bc961fa23286ca559ae63021bdf65832e793433c42d9280e3e024858d962f44924389c8b0c4cd3c5283b98927410b043fe4103e6d56d83984e6d3f9759f1b140a8fe107cfd885b27a8b0a2a21bca8ba27cb491b35d4684a5ede9909a176c2f5cc06e11ed8c28c210ac3e3db54239dd7c31a3646178e3575eb26f08f93016118b0fcb58f363780c8456e48e42b01e5e3066f97da03a98b7d40f1d8d5ecdec4c2111c14002ef6cf6b6d93fd0b56ad12b0ef5f3bce94d3c1742f5b1adebed12260f8ca9acc41f4d0d57cbc08f64c777d3e924fe0ce936b51a80b932189346373e0d8eb2d166e2b9484d6f92acbbb643261464b05c48acee186f7584658d0545e36506cbcad84272051bfb7feeb94dcefa73695c674a55c0608ffc8dda9944dcd79c94faf7d42a9d4dc1faf83b822440670a23851045029d1c5f976ffaf4d74e014b265bfa7f263b66329c18f20e6e565569c1736d46ce5676370bc3527c9ccba32b16be5882b3864fbce56ebafc3bb51c719ba8beb4904f113d4be523b3a2267a3945b32884db345923b2507000577bc2b7bc303a9b1473a79c5f1c28cf6fcd86874ca59558e32c1830940fab6b2417bc900413f7f4543a779127d1ed5ca87507c2f29aad09acb30bdad18f3c84628ae29370fa8adfd1c9b3c9857c7d1b81e47bd70431db249bf25be3313a99b5cbe8e8da17ddb6f9ed409e459fd74816ad36ddc39592c994aecd09e2745d6cc7ccbea0ef0b9521081707a6aaab7c5e8fbbd116e8f2c0f9bd3d53f8985113a6518ed8ed91f1e2121514710b2128c5069db6b703c9b5d317a82f8da5fdda82825d142f500d341df435a65412e69f0b2df6cc15a81200e015a0cd99ac111d3be41072f5fe8bbf5afa9a5bdb958dbe2ec6945f2ffe40aa3834cb0164143a78e47898c4536a787a499afdf25fcda791f1e8c9f208bb6ab6cdac3724709b504c01be4499fa6f023bde58f39e68d1061a24a9c2d853747cfe1601841d174b23d065872f9686f2386557fb25ec0311bd4ad9886d9b7315f15fc9eeee58de4e09ad14be2e3ae015e2d181d216bd53c76b00bf9866a11809fa9c57dfa665e4f67784708cb2e8d945d3b6517b17d1c50ffe9321485adaf3ce2d98b8594156245e716b3be125078fba3be7ffa92f7257d3b1ca6aa6ec89cce57c43c249f5ce5cbe7bb4d581bce0dccc677a111bc39748fd1a82401087a2f79457d8fff636a8ab700d668dc47bc4c688116e682b6a612d29a89ff7d428ed4a919285b62f2537a99c9085fab1ead4c63a22c6ba7e36691ec3aba972d84fe6c59e90d375c9c038589169c083ff562048727dde24147b8e9aa7a6139f7d5b0f3d2585c093610b7aee24b775d420e477f4c41025bdcb91d32f549609f319295610bf37ec8ddbd75a4527c40ebadadfe85d2bd22199640362ff7aad26d6e32efbc067628766d9b542d6835b7aab2abc7e5ea80e0d944b34e1dc761e4972cd3528ef9b376d645b28cadda0e18ed0a6abe4bc863f2823972b0b09eee4eee956620a8267be6cc2244522ce3a05ec631f71d571a7fc59fabc36356da25e52fdec2ef3be9f61fa43a6c991a02a7177ef08dc4643e7a0ecfa080d3e4f561c89c41d804cdbaf7ad1682568bd5ac67bbb45496301dadb837498cb449743cbc5568c9767a2d890f0f5dd62adc40e1b9e2e2ccfed7f37d3d3adc8ab6f154a3f3074ed79cb6bc85a725ef3c4e1153bacc5e1f8b0f0500dc8e4e0bb2ebde6107be2e63b687f1475356e485a88cdf6e869cc7b818bdd7dc0893981878bce3627edb8b5f783cce8a4c8e19fced18973fd4fc7aee51a7d296ac3a340df5a781d13dc9d7f246e020ff3dba7250f18694c2c004784d0a263bb1a27008e6989482cdc9beabb163d421efaaee5081611ef0959139cf9ad1791422065383f3ed8e198e9393bc584cac189df6c445439a0221b2ce526cedeafd407389156b3765a788fa09fbe93c049e2d015718058463b5e329dc1c2576bea2410061696797b9898bf910b91e66132d230e6571e45bd8d9aa155be7f9bd74878446f400a0211a1f9f5c2299ede3eb472e5148eabd2a4fe541b8658a5be39693e92f4d9c9da895d260f3ee44bbcb6219e3ae29f4e9b0fe1666683a001dd97263d464f97fb28c691f1ebb994133f53d172a21c505daf4a48c327c890ae3bb44ea4145a21a605b34a5f241aa363672c402aba4ef08437a1ebd46642ca5171a009e5f7d4030164f0a1ec98a0c2093b9dfaf8747b52148e6a40e48e53a0a9a596f626a049cccf7f6d1974ef84063973dcdc1352aa82ec9f18f41bb71b45b4e7ef41491f31ee79d9a06e81ff924a2e999c14d7c3a36fffba0f9e255530822d8e396b2e9f565499a4f07146682181b0acaecdf5a777c483599dc0ba67fa97f7f405d30844d8e3b01802f4c30743b3107c88063b37e3d13a4ea8db329a1f33a08de61bfbb6ccb47ba6dab13da371a2e26adcb9b519426fab3100f21b80d5ba9f9106192279156514e6665378a93149f68e75fec916d63f8dd98b7455000757c2400f4050aa75effe255ab95d0e66f9049cb580ba6c6fcc809aca955f9ad0df855b181c90378233d03f655ed1e4e225b18dda201e5a2d424b5bedbd97d4026d3d8ac77a77b9feb5d39b1938770b7c0c55a12962deca682b6c9d50f68c713f4cb41f8e59057d154dc2cbf991122e94b8c5d855f2513cfad81389f109baadffd9cfff3bffcff28dce6ac14457ca01f01b3e44cc7b8a284d3c5dafb6e07aa07cbd7a5dc43f10160cb004c1317f58a4a0355c7cbfc75ce8b01d38e9b92510efed6a82ef2c5c0e74c93a85b0a9216bd339dec661d6c9eb10274d0dc1e239e4da6434fa4d5500c9bb30d8e926c999b1ad8c66a001c4d94a09d034abd27301f4ce68b1e4ced6ed423856e1419f7b84691829a53600f48226643921c2a324aed4e4670cb73d05f313ae4638a709f8f0a49e7e1b9c3b7cb65773d7d0cedf21cbc55585e40248b417666df2286b12ecdfa9516816ad915c391d930a5b641de3dd603f9c2a470aefcd7739eb0f3020e7af1aa615a2b4e05fb814536e998464b6cef754f9e62a65e23ae9253ffb3d032adea15a7009156cf934744b44003267a929e61ea19ac0d43bf21bd3f51cbccac82acfffa6b6305739d791ba98f84f1db64d3673ea551d4bbe09e68ed62af6d8573a24a23a1b031e040420b1e3c8f5944fce769b56676c00cd05684164c1f1fe3329a1055c14e0a81b4ba84180b33287e68400ac45845ba6d5cc1e22ed804dadc637093782792d6dd51225260a9130ea7aae1f894bca321d1cf039f219b4c89c5461524687497694f7ba0d551df16aa7fc14717a581eada3549f2f6dd8ecb735339975f69e7c7277477d2e3cad8002f68642dfb0a92b56bcd2ade393820981bed741ebc739a0c6fd8ba93ae7056baafab5474aeb869afeccfdf0f096873ed9eac388b2da79aa730585009516688b562ac1c2b2a4c8ae94dce770ed7200189c4ba02034622af73be9371abc84fe62ba0cc1559b0f4b5bd5beb13f54a6085bc449aec87bcb2caf2e733d1045e167e9b4e8e211e8247c091b3f1ed4f60c55e0313aec19d066b694ab397c572eb57ec170a7deaec91dc2d772a4e72b61b5f1857463063f29a1e2a1011b6d31b5cf3f256a06d2d626f6a204685ac9e386ee618f42da0be5825867122c09e6070060402776aad6383cb67a8197cc94c1763d2e07183340aec1fde1f820717c9ea800a184be2b372767dda7834a49648ab6841eef1f7e7bf05a0956df2c4b3ff8121cb544aca56dab2652d3f0decbf09e588020ac75a2eb5ae5c90722d67a835563c767561efab688de38be7bf3271dec6e883fd39d430a6a131bba7540f0150403f8cd65357f280160d08d71022bb7ae53a8942f83a2bcdcfbb0b1ff3c3477c592c3408cbf7b17a61d75b1571510ad273685dca4eddec6846c592d91761473921f3b0c8748da63d23772007669e62b972b24d23a8c39d1aead6fd3f32eac7b78e6f9ae41a22bb13db313f6ffedbf2453c08bfa36fec141f7796112a5236d5fea956ab7562491a98280d8bfd413f90e4f4965223225a9d3773d98cb5a29b2173d02f7f0606bffb8405a07823d9ef53e9bc19580ef318562405fe956d5f01f5c8ab0c1164eda992c9a7aa6d488fc483b78eb2bd17de10107bff1ad9c4a85d685fdf476728a5471b65dd53ee7b4c52a1ab3c23cb41e8b51932b7f7db430f23aa54b291c0841c92485ea1bbc462893a9e7c5ee1062bd65af5f", 0x100c}, {&(0x7f0000001100)="9df9d5f100"/18, 0x12}, {&(0x7f0000001140)="3e2a39e907c7824bb0cc3925675c1a01197782", 0x13}], 0x3}}, {{&(0x7f00000011c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x43}}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001240)="6dbdf9cba9b2e0ebd01fee55728a51f32c08e0c224722bcf6a342774ae1ee0d32a1cf66a2de5414155f7ea4be89110ab79e8376d6b0d8f513c05c72792d904579c95006f3efe10dd78f2f47c65c4943ee1e13ca883580b27f36a01bbebf5045c883701eebf2fba03e27812505828e67faff3e1b90092e34f3bd92b534727b73943766c2f33171a97fc3a237d8bbe", 0x8e}], 0x1, &(0x7f00000016c0)=[{0x1010, 0x115, 0x2, "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"}, {0x10, 0x10e, 0x8}, {0x18, 0x181, 0x0, "68f79a"}, {0x60, 0x107, 0xc, "0c44eec8d24d43d5c12304e393e2b18cd811776b4c480d4c6d2a8bbc2b1649512510a704734ea11ae23d8017413ffd31ec470c52319ab024760eb53e331b5b2d29882ead2e193153756e"}, {0x80, 0x113, 0x10000, "9c8a23b324f86453ea3cc711ba45c6e96bf5a7f56369b6053785bdedf65ef6be972141e47f8b0042519750d48eeba6ea8b11ed091ac646981d539acd5b0a2dc045d536abdff666a4d333ff0a1c920d86786f9ee42c09ced8214e1578144815d2bff2edb103e258c414611fe585"}, {0xc8, 0x116, 0x3, "60652d2d2e905c4a03cf97b21bef55afef857a6add1fde9a0d8c40e345c2a2bbe4c985933424224af8bad6434e62ad967d157f37ae671a887479323025ced74c38cb23aa7b5f09d7191eff2a2edf149474936592ec67bba3c7cd7eff565fb3dfd0a0436b88fd07ca3b2d8ddb64431e283f89c144d436413e1e0e8379f2c5414a262d81d6e93191d3d9928f78ee6d05d20c32645f7a74cdf23225cecdf72666087047bb1d9502ef728fbf54f9749fab7b865a85"}, {0x70, 0x0, 0xfdd, "8d8b98c587330f37952deea11495569073c27d7dde67a9287634ebc0f2cd0e383f7ca11711474c52ce454ea624da3a8377b70019a30bfa42cf557b04823adf16d3dc8463baa05c9dfc4dce03247a607b64ee658c49b985a094dcbb0b743935"}, {0x98, 0x109, 0x7, "624403df909084bad81971c03da12df0427654806990e340d833c1e99c50f3f6c65fa857bada339e8f3a0bc8409450de1bf29ada9a741be525f4b21b241cf4bc235d342f7cb6eee894c3d6e002337cafd0a90c97f120aeba8c293c6e7aeb80221e6dcac37b602a7039c6c5b104de16ae53b27dd201e783990a75d7e5c016007e93f958b3527d"}], 0x12e8}}], 0x2, 0x800) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f6b657967656e5f657865635f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dc58c00140660"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003780)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="15ddf3e09fb94102899da38f014e93de0a65da8b2d661af1c855a39c687109cebcfb4a0776d5b259280a8c3c82ffd4a5e9c1abe113a9354ebec36c07a1a23101e1c332ed83fe8891f10aff55b448753a8715", @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) r9 = socket$igmp(0x2, 0x3, 0x2) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_ifindex=r10, @remote}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 3m29.467842694s ago: executing program 1 (id=1849): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003b00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0x1e}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r5, @ANYRES16=0x0, @ANYRESOCT=r5], 0x24}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 3m29.466918728s ago: executing program 2 (id=1850): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000003500), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003540)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008834}, 0x0) connect(r0, &(0x7f00000001c0)=@generic={0x29, "15b47c7aeba7ee49d0687cd8ffd93121dbedf77e489c3083022323bfb7828753d7f5f2583da9a331be0887a77ecf5f7b074de695cc6a3c62648cbc5dd8e3a578898d3549f2041a879e76856bf7acac13333378ff838aeafd062347ca506219c4dc8ac43f97064484fee61ec52a1b4b1394d97e48ed909ef285bb34eba7d1"}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)=@getae={0x310, 0x1f, 0x4, 0x70bd28, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0xa, 0x32}, @in6=@empty, 0x3, 0x3503}, [@policy_type={0xa}, @lifetime_val={0x24, 0x9, {0xcc8, 0xf, 0x3, 0x8000000000000000}}, @migrate={0x1cc, 0x11, [{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x3c}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x0, 0xa, 0x2}, {@in6=@empty, @in=@loopback, @in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x33, 0x0, 0x0, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@broadcast, @in=@loopback, @in6=@private1, 0x33, 0x1, 0x0, 0x3505, 0xa}, {@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x7}, @in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x33, 0x3, 0x0, 0x3501, 0x2, 0x2}, {@in=@local, @in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@private=0xa010100, 0x3c, 0x2, 0x0, 0x3506, 0xa, 0xa}, {@in=@loopback, @in=@local, @in=@rand_addr=0x64010101, @in6=@mcast2, 0x6c, 0x0, 0x0, 0x3500, 0xa, 0xa}]}, @algo_aead={0x5b, 0x12, {{'ccm_base(xts-twofish-3way,hmac(sha256))\x00'}, 0x78, 0xc0, "53e67364d641adafafeae8ee7f6492"}}, @algo_auth_trunc={0x76, 0x14, {{'wp256-generic\x00'}, 0x150, 0x80, "4f950dbcb84bacd8950c7a4ff0c6b77123488cdaba81e9196d6a12e1fc5930f653e2968b38d1f22239a5"}}]}, 0x310}}, 0x4080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x59}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000000)={r3}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbf0400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2}, 0x94) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x127, 0x2, 0x8, 0x4, 0x7, "422251afe4f03b0c92d73e87f6a164e5c4dbbbcf0fdd9bc0c958fa9ace82df51b481c317a0699a92e69955e508212b253450b448493ca194ea49346dff62fb99a0a14eef90257d107d16a83fbc8da53c715e8ff2d2131e1690e4677c69ff57dd921a4564545979f619ceaf3f6067c3cca11e43bdf3e29dfea61e46640a3e593c"}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000940)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000980)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000009c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000a00)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r7, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0xc0) 3m29.433896893s ago: executing program 3 (id=1851): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) nanosleep(0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) accept4$x25(r1, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x81000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r3, 0x331, 0x2000, 0x40080000, {0x8}, [@BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @typedef={0x5}, @func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x71, 0x2e, 0x5f, 0x30, 0x6f]}}, 0x0, 0x4b, 0x0, 0x1, 0x79a}, 0x28) sendmmsg$alg(r1, &(0x7f0000005ec0), 0x0, 0x800) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x100) 3m28.86287191s ago: executing program 4 (id=1852): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x18, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x30, 0x0]}}, 0x0, 0x2d}, 0x28) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_sa={0x2, 0x18, 0x0, 0x0, 0xfe, 0x7, 0x2}]}, 0x20}, 0x1, 0x7}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r4, 0x201, 0x70bd2c, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}]}, 0x2c}}, 0x80) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570", 0x6f}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m19.55435703s ago: executing program 2 (id=1853): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c, 0x80000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x10001}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0xf, 0x6a, 0x8004, 0xffffffffffffffff, 0x1, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000005000000000000000000001d711879000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m16.127904083s ago: executing program 32 (id=1830): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000005900000000000a50000000fc3301040000000000000000020000000900020073797a3200000000090001000000000024040480200001800700010063740000140002800800014000000013080002408000000e140000001100010000000000000000000500010a3d95b27bbcda5a34ad0a53544c4bb18b3a2f2dc40600000000"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x884}, 0x40c1) socket$inet6(0xa, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="2a5c7352c4b7"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r2, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0xfc0, 0x65, 0x0, 0xd, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x10000, 0x3, 0x4}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYBLOB="2000f50a08000d004000000008000900e200000014000100fe80000000000000000000000000000c"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r9, 0x0, 0x487, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) 3m10.961500584s ago: executing program 33 (id=1849): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003b00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0x1e}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r5, @ANYRES16=0x0, @ANYRESOCT=r5], 0x24}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 3m2.410011108s ago: executing program 34 (id=1851): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) nanosleep(0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) accept4$x25(r1, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x81000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r3, 0x331, 0x2000, 0x40080000, {0x8}, [@BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @typedef={0x5}, @func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x71, 0x2e, 0x5f, 0x30, 0x6f]}}, 0x0, 0x4b, 0x0, 0x1, 0x79a}, 0x28) sendmmsg$alg(r1, &(0x7f0000005ec0), 0x0, 0x800) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x100) 2m59.935970095s ago: executing program 4 (id=1857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x37, 0x2, {0xe, 0x10, 0xbb2f, 0x7}}]}, @TCA_NETEM_RATE={0x6b0a7a9f386294e2, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x84}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf250d0000007c000180080003000100000008000100", @ANYRES32=r9, @ANYBLOB="08000300030000001400020070696d72656731000000000000000000140002006970365f767469300000000000000000140002006e657470636930000000000000000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="140002006970766c616e310000000000000000005400018008000100", @ANYRES32=r7, @ANYBLOB="080003000200000014000200767863616e3100000000000000000000080800030003000000140002006d6163766c616e310000000000000000f0139f316c4e1259faf9c8a8898d1b6a2a6129ee3a37fb67c7df35b70f7712074352ad6abde35f7109a156e1119374"], 0xe4}, 0x1, 0x0, 0x0, 0x24040004}, 0x24000004) r10 = accept$netrom(r3, &(0x7f0000000500)={{0x3, @netrom}, [@netrom, @default, @remote, @netrom, @default, @null, @bcast, @bcast]}, &(0x7f0000000580)=0x48) getsockopt$netrom_NETROM_T2(r10, 0x103, 0x2, &(0x7f00000005c0)=0x4, &(0x7f0000000600)=0x4) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x10, 0x4, 0x3, 0x1b, 0xca, 0x66, 0x0, 0x41, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x2c, 0x20, 0x0, 0x4, [0x4, 0x9, 0x6, 0xd721, 0x200, 0x1, 0x53, 0x6e, 0x3, 0x2]}]}}, {0x4e20, 0x4e21, 0x8a, 0x0, @gue={{0x2, 0x1, 0x0, 0x3}, "11e4d931aa6211e0656e7e9942eab969b35347b3c5c235bf26d3a0d85c0be10f1a2a9347dad5f110b6b7bd1f1953a3fd14af713b54b204a03bd59323d477653b78c0e92da75ef50c26ae9b0286b25be063773eb2670402729f6a409f8a5d422b915cb40400af9f4053a75b902829160e23f87caf9047d57e5fdf"}}}}, 0xd8) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5c00000012006bab9e3fe3d86e6c1d0000147ea64e21160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m57.50276937s ago: executing program 35 (id=1853): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c, 0x80000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x10001}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0xf, 0x6a, 0x8004, 0xffffffffffffffff, 0x1, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000005000000000000000000001d711879000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m39.760458128s ago: executing program 36 (id=1857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x37, 0x2, {0xe, 0x10, 0xbb2f, 0x7}}]}, @TCA_NETEM_RATE={0x6b0a7a9f386294e2, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x84}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf250d0000007c000180080003000100000008000100", @ANYRES32=r9, @ANYBLOB="08000300030000001400020070696d72656731000000000000000000140002006970365f767469300000000000000000140002006e657470636930000000000000000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="140002006970766c616e310000000000000000005400018008000100", @ANYRES32=r7, @ANYBLOB="080003000200000014000200767863616e3100000000000000000000080800030003000000140002006d6163766c616e310000000000000000f0139f316c4e1259faf9c8a8898d1b6a2a6129ee3a37fb67c7df35b70f7712074352ad6abde35f7109a156e1119374"], 0xe4}, 0x1, 0x0, 0x0, 0x24040004}, 0x24000004) r10 = accept$netrom(r3, &(0x7f0000000500)={{0x3, @netrom}, [@netrom, @default, @remote, @netrom, @default, @null, @bcast, @bcast]}, &(0x7f0000000580)=0x48) getsockopt$netrom_NETROM_T2(r10, 0x103, 0x2, &(0x7f00000005c0)=0x4, &(0x7f0000000600)=0x4) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x10, 0x4, 0x3, 0x1b, 0xca, 0x66, 0x0, 0x41, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x2c, 0x20, 0x0, 0x4, [0x4, 0x9, 0x6, 0xd721, 0x200, 0x1, 0x53, 0x6e, 0x3, 0x2]}]}}, {0x4e20, 0x4e21, 0x8a, 0x0, @gue={{0x2, 0x1, 0x0, 0x3}, "11e4d931aa6211e0656e7e9942eab969b35347b3c5c235bf26d3a0d85c0be10f1a2a9347dad5f110b6b7bd1f1953a3fd14af713b54b204a03bd59323d477653b78c0e92da75ef50c26ae9b0286b25be063773eb2670402729f6a409f8a5d422b915cb40400af9f4053a75b902829160e23f87caf9047d57e5fdf"}}}}, 0xd8) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5c00000012006bab9e3fe3d86e6c1d0000147ea64e21160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m30.939114995s ago: executing program 5 (id=1854): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e80)=@newtaction={0x1544, 0x30, 0xb, 0x5, 0x0, {}, [{0x80, 0x1, [@m_ct={0x7c, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}]}, {0x4a, 0x6, "d233103a4f3aa75872671502c722002bc91a91c86f96198aba6bc147682b4f64f8919befbc58e007e3982971ba00c4c0627c406b5e80f31fa3f737c80db2ecee9ca1e4a4ebf8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, {0x1434, 0x1, [@m_vlan={0x114, 0xd, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x800, 0x3, 0xe4c, 0xeb}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff663, 0x1000, 0x0, 0x10, 0xce2e}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x930}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x8, 0x4, 0x7fffffff, 0x2}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2e, 0x6, 0x2, 0x5, 0x1752}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x56, 0x6, "521b596b9fcef363c559e8ff2a18674bed48f62c0e22ab75479e2506e86776ff1e2f9d3a47937aa0cf71d5139438012a5456002a2943c1e237294f55395d5511dff23e5f764cfe6508537b830714f9107fda"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_skbedit={0x1080, 0x15, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xe}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x2}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0xfff1}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0xfff1}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x1004, 0x6, "7257f65d75313d0592f183c5e8c3690a010de098a455fac49a1696b9d00709b8191e56edd1c999623b88c1612d846a113d4f9ab52e1f1cadb28a31f046a96615621d3df5454bafa314c06d511d7ddb3b27891065787e693aa9906558017f553da80dcf27e5e317f0c2bf3ccb703f4974776bcecd7ed74e5375b56dfc5ec6a0e08bd4a6b91b49509f2bb5a4f24d1e96b89d3a3d2ff8246e4eb572963bc7fbfdc73c7892831aa40f86b1e2d15764cf909d68c71982d190aa8c930753e7b42cefc32831959cc14af6e9bc1303edc6b67ae22f9272f0d1449f9557bbcf50bdc7eded53dd5c11911fc7b95d3ca09ceabff5ace47ec7fa147d0d19aebb765aee99b9ea94451f937e0aed19c28416c9b740b92956ad0a85e11b59fa91a1cae60fa9f3658a730dd585f69a342111e6a0f77a754c98fe12e7c0518986d76008f25fdbe7bfd92ab01a9c8a940e489416d8bba18f9c875ccc69c013f2293da41f0cb54f14069e4b949726c4e84771c2ca650c53d2719613ac9d1b49a971d8c1e95532bb2c926aa47af078f31eed797c9dd5735ee5cf7ec61c3933bc19c2743f49dcf37773ecb8c86481f1da5c979d0aacf490d8daf0059ceedf8180ad630135e9e551754f6bd0468898f01d22c7d01eab1ac3d555462876ed5ffa41d2b356e6526f9790b7133cba9f9f2642168bdbb54f44be3a3d4f628c6508735040937427f2b11400dba2a652c06a6d7d30e5fb447d0a25cc31990daae8db2c8aaa2420e0422f8dc201c70d6a86b7784d32524baab59952de9a945f1c92201a3a6e1f143d48b25dc7cfad8ac8c8bf9beba14914bf0b41371ddc61a4c5d259692059ea13a718995cb98902f47eb9429afd19851bc06907d01f5a16137ee339ed2188825d087c9a6c160ceb8fed017d66b4abe4fa992317da9dcd6ae1055aa81094a0d077ab6ce37eda7447edbbbc6184e35f2d83e1916759ceb39b76c92ddcff5a1406270263ad74e61683fdd4c4d4c399706f223d0059249aeac7d69f14066f3e71977c3e1a0ae163b6e11bce2f09a94be0fe69fad89f8d2d49554e79ea97c39491ccfe72f01640bb017ac7f50f80ad83d6f276457e5780a49e4469c0d592fa1709c3ec4f2c3136148f59cba347a9252274673724cd09e508a4305a805a58fb17e3890e1afb736140cced72bc2e233fe1f4cb5bb5da33725373b32c51c2dc3ca90550048b19f9daf10870a6c3595164573a1b6e2971d0da15e2e0afff039b5df4f8aa26e5a679b1c484e589215369308755aa9444a87415e162a4e9a1d4c1cef03a8345028b82f2c25ca6959220f632a5a3e9658e8428850e77fba4b9247c75770c9cd2a2ee46b76ed551e60a6053a1e8a285c9f1676f014657ad97a972df1d6c0a49310c933315512c556b50908dfa8e2beb131a138d68c63334a7380763c5c20e543eb2d7cb16001a011db2fbdb71202c2fd7aa6681ef1aab0717b5d590015ae7d8275f2bcfccd0106f8af259c5b01ddfd9e19869f0068b5bb7cfb90241eaf8d6ca4d8a93659a9d1ce0eaf91f809a12a3bf3e5e5fb9ad9e8f2e7ad7c5a273807569f24d66ee334df51a06ecbc30596c8e009582953ec60c8b151a8e9f85db0e7c5afbb159fe92dbddf04a36b67be98f474355dc7ff9584b58e4021b416ea39ea66ae8dcf6063be58fec6cb26170ad70394f425144c39fce23006c67eb89168c8fb6917e27e1e10e106b795dfbbe7a8efc275d3baabf651284e9cfc9434d74296bff8d458cd4850d31e79a9826d993c85104e254236dd0e3bc0e5bc5f9a0229b5ea39680fe9267dd0e20f0639a8c4625f09136cf1a309ac99b90cb4a8ffa36862653323a58da67059ea8dcdb89982a72ca091627b9506ab697e60e9ff9c90321b55c17fba34a54bc6d7786ffc2ab8dcaf63fc525292192e3f36a5ad590e3152cdfa1312f759f74af195724895872264a72ebaf71a4e793d2925fdbdb7fb74863307b4fc2b4cc53556556b96138c4a75076b47ec9bb3e07370b3770a48eb293cc18555d504fe03a2438caa0313f814f98690220c2106859af98bb3e2f8e9e19b3c13eda5b4b1fb4a83ec9c4c6b84fe150a7fee0024e01f6c4eec06b7cf859b27239230d04b55c84eaf80e0a233273d5cad3ff4335baa1b6e8b11b896e5af5c9ce4b96076ed7152f2d8a51a07bbb2c45c584c3321aa883a0dfd8b2da14e00f0353c1c3342516d19f6f1a829b2c9e30e3d80cef459aaa5921bfb335514ebba70434bbfb15a95bcea2970c02379e2cf3572f0cc8762b890c1187f114b08d62876e9b1f35f29cf14022ade5101c55b10203415bb64b98b065b920b6300dfa1a59cd0d23994bda4171b7a3411d5134a12fd4273c1113b8b2bb57af0d350fbba323bc7d1bc33e122e55dc2318f631902429c5368b57b4bc09fd7fca52b3a265d3b301c5015c5086b044b64fca9fa8fb60e80ba7b356c1709a112b3fbe5958634b945e5eaba3b03900e1ddd4b438f721f8e1e9f9b58e008cfd0da7dccffa2a4c91d6127c35bcdc3a3cf58646d51eceeade0866031d8de74c3177e3522ef6b98c05d2b8d57c154159fc8a92b14b5210d6d35a9e007a1ffedee47ce32358ea4cdf7a135a4ed79935d26e306653a64dce78274f7056399e5039162bb25ea667c8303e4e8eb5d3a34975bef1e91fa8e1784a19a9ac5f2c55040ccd8b0abe3db05bac50e7882a958df1a473186b58c8920b979244cc981639c1042bab284e8950bc4bfda5508984540db6020777c5279334d16730eeb3bde0e96833c138cf8d72cbc2733a55a4d7bd872a5b7ead9821773cfbd8fafe74b0b1cdf56e431649aea57b27b2a84b3b220318753cee66909677bb9128f3e4d4122a6c6b780719e80b24dd85d48cae014f12df506d3831e0a76f2c6acee16f7b7e567eeca395a51f02144d5d88f8bb2741f8e9326be61f221cf3bc72dce6235fd45c17905bf24e8171b6cf092f86cdd8248823b43a6867db32630e7e534fde2d4d1bcfef732519186e2fbc286ef11dbcec410c274e46593caf47e2845c8413137905bef1f95ed0c2d283f6595a1dfc6e22607a1bdd6cfb2440d9dcf9dc33c0941adb279cfe94d71e8d1ae1c73e977987932ce21cd3cd433451c0eee83f54d45d52fb8096c2138e69dad7209759d5cc0de9af7cdaa8556e1ddfaac87dc4777bb15b2355388f159e63c82e715754a607210dfc8c0e6626e6586600d91c5786d0884c36bccb30949d73c6a5325eb4e571ff98513c9bc0542b31df3db402af99c2395904cfe84eec02849349d5001ed0a771d7cfdd2f3059e56fbfaa0fae45939f6f7d026883449626dd7b755708063a44cf028496187138c702ba68d8c8eb18808267241521c1e24536d65caf9f5565cb13ea2a550be5fa6cee363d1a9b31d4f43b4ad48d3e9e3298883369d3e756145a8f28bb5fba7b8b0f1b14e359cab3f91e778d203f5f97c190530f8cb8560c3681982e50ad96cc65e77e6b5c920916aeedb325e365f948852bea9b1af12d37cd0aa8009b703e88ac33374a52213a410634f863eebb4a66b213acce3b5618644da2113e4cc8c850fa6d66f6d4c5049c203e1e5acf00b7ba8f7570a8224cd7c1a80f54dd59edbed2a859c506fb77998fa2992ee081b9705df823b8a4abff283c053e9af6e12e2a66fb8524fcd045adfa1c445822a4c44b7246a393143ad2c15691cec2729678a471aa27bc5436067ffbeb0f57f96fef0e208b21d32697eeac54991ad09546758259f2c3eca602c77e81c4e14a6a6816f8a18a1a6e02849aa293edfc36343307f924bd54b57befdbb0cd7a742eec404bbbadc90c81d1e4ed895080d142ffb0d47ac8ff9cc2b61d0b0ba6eb64cfb3fe4021bbe67d56ad278501fa346adaf4320bb440a1c1db317e9e4db24be084adbe8d699c586e06bb41ab7c583d755659de0998b661d75385ab34324c24e2bcec65e8c65c2819fb81d79b049c15a8d24a3debd384fdc4c731960b8b2b9505624f5df0b0d26111339c2792d16f5bb082dd5d5c62c5cc1603626d28c3a0b8b699bd4c19be3f055f4d526d279953013d5254aeb32b71599e0994ee562947271a1bf92e62a8380f1eee628795bb646ceba8a8360bb0634bbc0010db999e4616d374d5642ec36f5b7756367b02e54e2835b8194797465287fad9181132df36335c79399db64b904b9bd02ad2f8e2eb124977b38259bdf374ccc6eaa9acd8a2d103386714d2965c0d35731f66bd607172fe4ef9090a251c28d4b493c7c3b6d5ef70b5af8270a9e6d82af4440565f4620cda093f0d7908f5ac7483ea140b5f7576b50377993da15947b5e7e03d024169cebd110d99fcb52b43a6855714e1b2b38ac8cdb6b0373359b0e760e122c44358363e06fdc09b785c06995c85be62d4d8a353137098a7c315d978e53fb9858d1142c9f5e686146ab9ad6b55221872c3ba921f982154656dbae7ca472ce0c517d1577bf775e6ed355191d425e9da21245efd9acb2a62a768a9870461ac0f04d6a484b1c955048e95bef47f73277b28fd019280585dde920a8df51a0f14ebd3897105f5cf10b14128f5b807f0073052f4cefb6943e6a39179491547f25ed9560071bda1987fdc972b891ffadb75e6e43f2552bd68b71002acb03696d7392d6a56a3d125a4e8b67b95673b8ea6e420b5336ed73bc74a8bc826d2022e4667d79e5ce046b9b4b34c1305a0f6096b05eb49a82cce9d70104dbbb89ba99a54addc15dbe61e64bdffc16577d51b8b19de7f70768e39baecc58a2938d1ca0d549e313abb114dfaadf27a305e25ed2cfe9073ebd2b2f4ffb65bcf4c7192d2a8ed2dbd1d0ed963646ad60c28ea6b7eaefbdd386bf1add7b9cb546596c09762c4714d7cab907f0e80782987c46c34bf8a66ced4d3a48e5a1e6e156fc2ce9a1d42d2e14e157cfe3fe5d406100904642cffaffd6a151bb08c20eefe735a7a3714a66a779cebb761b9a31279f253f4c5051658cef8779c17443176fdae9f06860076315778cb32675b0ad6b04f575533aa10afe96c0da089004b5e419f010be0020cb879dd03a046b84eee49a349bc9a9ec918f014af412de47f20c985e27013d66929d2c24bba1a2b1c977a1a73d7e0705e2d1c7093ebca56d3133f706b4c50ff10d01e4374d3826943f9f93e931fe5464ef869a991af32c6507146301b8aa5dad40c3c92b555a06f050c50578578b53957ff010e6fd099a2301b1b0e40829a53de8f1ea17bc427ebddb78bf0def2c730bf4a30af508334d322f010d04ad945ada5c91f5461e5e6585004f42ad97c7b067364eb5312d00e1ed806296c7ec3eb2e732c90c381e7722c8396d5eba8ab0c0b398f4499c14ab5fc85cd74205afc7bc967c267d2ce1b21c80e877a8c435efb06739ead8076cdc5e8b368b54259e44b4eba249abcf67fa67fcf5c1083c7f7c3e8f214e9cbd1d19bb0fb3591da1c92d1e29127f1461521fecf7cfefc60b16c900db2df10b601710cd794d3a77cc7230e7647985a86c636bdeffbbbcabb05d287dea5f5f1d477e3aabd308d85c1646621138cb6cf080572f6eb7b04bd5a35bc80af45d9f8853be2233edf15590b0f20224f8d04db16ea56eefe5f30dc8085159d266cbc0f8f1809fee1d7a341b528b0bdd5855d7c6a6b62d12e81146a412f6fc772ab353d0b2613d9e50eabd4419b6c4e23f3a1210862ec347388ae125157e9429a2a5164fcb42fbf2cf8d8fc6bac400ed17d860cf02a41583574ae55398d8fbc063036973b775c763f3724f63d5ade7c3dd955edc2fc740daabcba78be47be114afdb78eb0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x64, 0xa, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x29, 0x6, "300468274f36094e3d5bccc6e6d594971ed2f474bd9bf9ac7a30ce7eff05ea2b7dca7f4932"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0x178, 0x20, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x7f, 0x8, 0x100, 0xff}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffff001, 0x370, 0x0, 0x4, 0x5}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x10}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffffb}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}]}, {0xf1, 0x6, "85768e7b10974ad38e5d43b979160b0a45fa9603721f372e0f0d379581e14aacffaba333ed8404f675b7c005f0fa623fe0a5ec89cea9af51807f63877ce31c488843bfedfbe7cdcf06665ec122c48acec8a880eaa4c5106e962e3e554d6150e296111cc3e0a04702d37507a63b0c5b5745c9e9ce9eb54d2ea2147dd6f7f0f165d818d7303ba5bfa5a97ddc5aa61a54b5bba4e85f78660c58a3ce6093463bf62183c29cf70c801188a5255e227a434c848f75776e03d5840562f44c6a1179db9f33abff0b9be8c7f9ee956b2442687118a9dd39d80beabfbdf23f2539f18b1c49f62a9918a1be458d959090c6ad"}, {0xc}, {0xc}}}, @m_ife={0xc0, 0xc, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}, {0x8a, 0x6, "2eb3786ca3bd627023119e51dc3642deaa4afa442d99aefe60cf769f183592ae8643b65a0e3af822ce3af4674640d26fc4a2f2943dd336c9c020d0f4203259566dd7504f300b5523242ff9381df73185a70d0777474d22a40d737962964f21c5b8078264dce7367ca7f2bf108a091d3f578bdcc8f3e6d8a8218cf0e84cda76ddd4360105051e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x7c, 0x1, [@m_skbedit={0x78, 0xc, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x43, 0x6, "e8662e5dd51792825975c5d06001bd788fd936217371273be2ae1dcd4255a6067a2c0dc051170b6f1ee6f761cabb4b0b5af3595030340cda2af1f9350263fa"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x1544}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x8, [0x1, 0x0, 0x3, 0xfffe, 0x81, 0x9, 0x8, 0x3]}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={r2, 0x5, 0x12, "9e70b2590782d9f06f685902e4406eb360c4"}, 0x1a) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 2m2.331781693s ago: executing program 8 (id=1858): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8800) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$nci(r7, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0xf, {0x0, 0x3, 0x45, 0x1, 0x9, 0x1, 0x9, 0x6, 0xc7, "74695b428849389505b80a4675391627910c459722b2c74a9a39247d69ddf4c50995a37c273f1077e19829a7f6179ee1d36dfcad42ca1dba19a6b842466e35ac6ceea11073dfc082409aac0b373cd117dd3a300be309befc07abedc20d514f801585a261e03e3c195ff04caab23a3ac1fb43aa5efe050829d5b14c8f5781d3be8acbc8c1d6a7873e74e636144a33d24268395facc4329dcfbc459b58c4773ee645178b0357c0a177d3d5e08febfe39ad9dbeaf6bad040bfbd7fb58a1f23f7b80200d034af35faf"}}, 0xd8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r8, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) (async) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000002300)=ANY=[@ANYBLOB="dccdd8706b7c29240dd5638785173e0f67930a3df41d07f764bad85e753a874e69b8b2c4dcd047fb1102873979b8752541de1b7c5fe069cdad5261"]) sendmsg$NFT_MSG_GETSET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000a0a01030000000000000000010000040900010073797a300000000085a5a53a64195c29340874"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 1m49.923986444s ago: executing program 7 (id=1856): r0 = socket(0x1d, 0x80805, 0xe) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0x1, {0x0, 0xff, 0x2}, 0x45901cc80355182b}, 0x18) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd8, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x60, 0x48, 0x24, 0x46, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4000, 0x3, 0x9, 0x6, 0x6, 0x3, 0x2, 0x76]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x43b, 0x8, 0xc7, 0x10, 0x6, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x36, 0x30, 0x30, 0xb, 0x12, 0x4, 0x90, 0x0]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x6}, {0x6, 0x9}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0x4}, {0x1}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x2}, {0x6, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x6, 0x1}, {0x0, 0x8}, {0x3, 0x5}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1}, {0x5, 0x6}, {0x1, 0x2}, {0x2, 0x2}, {0x7, 0x3}, {0x3, 0x6}, {0x7, 0x1}, {0x2, 0x6}, {0x1}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x3}, {0x1, 0x3}]}]}]}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x4004890) (async) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000) (async) close(0x3) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) (async) ppoll(&(0x7f0000000140)=[{r3, 0x4282}], 0x1, 0x0, 0x0, 0x0) 1m5.300001254s ago: executing program 6 (id=1855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x6a}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xce}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0xfffffffffffff801], 0x0, 0x0, 0x100000}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000020000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000300006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 0s ago: executing program 7 (id=1856): r0 = socket(0x1d, 0x80805, 0xe) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0x1, {0x0, 0xff, 0x2}, 0x45901cc80355182b}, 0x18) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd8, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x60, 0x48, 0x24, 0x46, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4000, 0x3, 0x9, 0x6, 0x6, 0x3, 0x2, 0x76]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x43b, 0x8, 0xc7, 0x10, 0x6, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x36, 0x30, 0x30, 0xb, 0x12, 0x4, 0x90, 0x0]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x6}, {0x6, 0x9}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0x4}, {0x1}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x2}, {0x6, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x6, 0x1}, {0x0, 0x8}, {0x3, 0x5}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1}, {0x5, 0x6}, {0x1, 0x2}, {0x2, 0x2}, {0x7, 0x3}, {0x3, 0x6}, {0x7, 0x1}, {0x2, 0x6}, {0x1}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x3}, {0x1, 0x3}]}]}]}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x4004890) (async) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000) (async) close(0x3) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) (async) ppoll(&(0x7f0000000140)=[{r3, 0x4282}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ck. [ 92.992343][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.029717][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.156650][ T5992] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 93.283378][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'. [ 93.433416][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 93.738322][ T6016] warning: `syz.3.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.754839][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 109.441145][ T6034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29'. [ 109.459628][ T6033] netlink: 'syz.2.27': attribute type 2 has an invalid length. [ 109.516435][ T6045] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 109.542442][ T6043] netlink: 'syz.2.27': attribute type 2 has an invalid length. [ 109.602569][ T6039] Zero length message leads to an empty skb [ 109.614323][ T6033] : entered promiscuous mode [ 109.831414][ T6052] netlink: 'syz.4.31': attribute type 32 has an invalid length. [ 109.854958][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 109.942520][ T6052] bond1: option coupled_control: invalid value (24) [ 109.973173][ T6052] bond1 (unregistering): Released all slaves [ 110.217049][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'. [ 110.254200][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 110.295870][ T6075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.37'. [ 110.435920][ T6084] netlink: 9 bytes leftover after parsing attributes in process `syz.2.39'. [ 110.468246][ T6083] netlink: 3 bytes leftover after parsing attributes in process `syz.4.38'. [ 110.489189][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38'. [ 110.500111][ T6083] netlink: 3 bytes leftover after parsing attributes in process `syz.4.38'. [ 110.510223][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38'. [ 110.645379][ T6084] gretap0: entered promiscuous mode [ 110.688993][ T6088] 0ªî{X¹¦: renamed from gretap0 [ 110.733204][ T6088] 0ªî{X¹¦: left promiscuous mode [ 110.752876][ T6088] 0ªî{X¹¦: entered allmulticast mode [ 110.761538][ T6088] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 111.360294][ T6107] tipc: Started in network mode [ 111.378732][ T6107] tipc: Node identity 7a5596d1d34e, cluster identity 4711 [ 111.404189][ T6107] tipc: Enabled bearer , priority 0 [ 111.486126][ T6107] netlink: 'syz.2.44': attribute type 3 has an invalid length. [ 111.492888][ T6114] nbd: must specify at least one socket [ 111.527728][ T6109] syzkaller0: entered promiscuous mode [ 111.533270][ T6109] syzkaller0: entered allmulticast mode [ 111.540586][ T6109] tipc: Resetting bearer [ 111.555119][ T6110] netlink: 'syz.0.45': attribute type 1 has an invalid length. [ 111.590975][ T6106] tipc: Resetting bearer [ 112.176858][ T6132] netlink: 'syz.0.52': attribute type 8 has an invalid length. [ 113.001933][ T6106] tipc: Disabling bearer [ 113.042921][ T5927] tipc: Node number set to 2837157585 [ 113.245296][ T6138] Bluetooth: MGMT ver 1.23 [ 113.264173][ T6138] ip_vti0: entered allmulticast mode [ 113.473193][ T6153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.510023][ T6154] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 113.907925][ T6171] x_tables: unsorted entry at hook 3 [ 114.174189][ T6181] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 114.897377][ T6212] __nla_validate_parse: 14 callbacks suppressed [ 114.897399][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 115.058334][ T6217] netlink: 'syz.1.76': attribute type 29 has an invalid length. [ 115.073405][ T6221] netlink: 'syz.1.76': attribute type 29 has an invalid length. [ 115.094224][ T6217] netlink: 264 bytes leftover after parsing attributes in process `syz.1.76'. [ 115.228001][ T6228] x_tables: duplicate underflow at hook 3 [ 115.252101][ T6226] geneve2: entered promiscuous mode [ 115.263050][ T6226] geneve2: entered allmulticast mode [ 115.388689][ T6235] netlink: 'syz.0.82': attribute type 2 has an invalid length. [ 115.430875][ T6235] tipc: Started in network mode [ 115.463133][ T6235] tipc: Node identity 340008, cluster identity 4711 [ 115.496381][ T6235] tipc: Node number set to 3407880 [ 115.524681][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 115.555100][ T42] IPVS: starting estimator thread 0... [ 115.657136][ T6247] IPVS: using max 34 ests per chain, 81600 per kthread [ 115.670169][ T6252] netlink: 'syz.2.87': attribute type 1 has an invalid length. [ 115.715325][ T6252] veth3: entered promiscuous mode [ 115.870411][ T6257] netlink: 'syz.1.88': attribute type 8 has an invalid length. [ 116.096999][ T6267] netlink: 'syz.4.91': attribute type 3 has an invalid length. [ 116.246915][ T6272] block nbd4: NBD_DISCONNECT [ 116.606015][ T6267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.625950][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.93'. [ 116.646523][ T6274] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 117.212677][ T6299] netlink: 496 bytes leftover after parsing attributes in process `syz.4.100'. [ 117.333856][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.100'. [ 118.085832][ T6288] lec:lec_atm_close: lec0: Shut down! [ 118.410086][ T6335] netlink: 'syz.1.106': attribute type 1 has an invalid length. [ 118.450096][ T6335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.461366][ T6342] netlink: 68 bytes leftover after parsing attributes in process `syz.4.105'. [ 118.491103][ T6337] netlink: 68 bytes leftover after parsing attributes in process `syz.4.105'. [ 118.544761][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 118.602327][ T6346] veth1_macvtap: left promiscuous mode [ 118.780175][ T6354] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 118.897857][ T6351] bond1 (unregistering): Released all slaves [ 118.923287][ T6364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.110'. [ 119.340546][ T6381] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 119.374712][ T6372] tipc: Started in network mode [ 119.392479][ T6372] tipc: Node identity 5aaacde3c895, cluster identity 4711 [ 119.432994][ T6372] tipc: Enabled bearer , priority 0 [ 119.458439][ T6370] tipc: Disabling bearer [ 119.827410][ T796] lec:lec_start_xmit: lec0:No lecd attached [ 120.215252][ T6421] __nla_validate_parse: 1 callbacks suppressed [ 120.215271][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 121.021020][ T6463] Illegal XDP return value 4294967274 on prog (id 25) dev N/A, expect packet loss! [ 121.645454][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 121.693963][ T6490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.137'. [ 121.717596][ T6490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.137'. [ 122.521841][ T6506] syzkaller0: entered promiscuous mode [ 122.536820][ T6506] syzkaller0: entered allmulticast mode [ 122.873989][ T6528] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 123.499858][ T6556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.552586][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 123.600484][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 123.790923][ T6578] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.158'. [ 124.151677][ T6601] netlink: 'syz.1.164': attribute type 4 has an invalid length. [ 124.295079][ T6607] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 124.460000][ T6607] bond1: entered promiscuous mode [ 124.466186][ T6607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.756318][ T6624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.170'. [ 125.166614][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 125.176138][ C0] lec:lec_tx_timeout: lec0 [ 125.183196][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 125.697552][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 125.811485][ T6659] netlink: 'syz.3.177': attribute type 10 has an invalid length. [ 126.001039][ T6659] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 126.129508][ T1157] tipc: Subscription rejected, illegal request [ 126.347341][ T6691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.184'. [ 126.390752][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.184'. [ 126.705805][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 126.743040][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 126.990442][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 127.208049][ T6690] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 127.335862][ T6724] IPVS: set_ctl: invalid protocol: 31091 97.108.108.101:29232 [ 127.571807][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 127.666331][ T6734] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.197'. [ 127.945523][ T6743] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.200'. [ 128.120478][ T6751] netlink: 52 bytes leftover after parsing attributes in process `syz.4.204'. [ 128.563281][ T6770] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 128.600411][ T6770] syzkaller0: entered promiscuous mode [ 128.611247][ T6770] syzkaller0: entered allmulticast mode [ 128.987523][ T6787] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.015269][ T6797] openvswitch: netlink: IP tunnel TTL not specified. [ 129.079674][ T6794] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 129.110264][ T6794] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 129.140133][ T6787] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.221429][ T6787] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.371540][ T6787] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.510431][ T6810] netlink: 'syz.4.217': attribute type 11 has an invalid length. [ 130.046460][ T130] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.095423][ T6823] geneve2: entered promiscuous mode [ 130.129195][ T1107] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.279046][ T1107] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.319527][ T58] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.541601][ T6842] syz_tun: entered allmulticast mode [ 130.652118][ T6851] bridge_slave_0: left allmulticast mode [ 130.658878][ T6851] bridge_slave_0: left promiscuous mode [ 130.667573][ T6851] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.707506][ T6851] bridge_slave_1: left allmulticast mode [ 130.713342][ T6851] bridge_slave_1: left promiscuous mode [ 130.725113][ T6851] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.800089][ T6851] bond0: (slave bond_slave_0): Releasing backup interface [ 130.873155][ T6851] bond0: (slave bond_slave_1): Releasing backup interface [ 130.926646][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 130.934786][ C0] lec:lec_tx_timeout: lec0 [ 130.939700][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 131.014713][ T6851] team0: Port device team_slave_0 removed [ 131.081238][ T6851] team0: Port device team_slave_1 removed [ 131.115311][ T6851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.128468][ T6866] __nla_validate_parse: 2 callbacks suppressed [ 131.128486][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 131.150447][ T6851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.172005][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 131.184971][ T6851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.209083][ T6851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.240162][ T6851] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.395699][ T6860] vlan0: entered promiscuous mode [ 131.635794][ T6877] syzkaller1: entered promiscuous mode [ 131.653758][ T6877] syzkaller1: entered allmulticast mode [ 132.876309][ T6916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.260'. [ 132.932148][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.940891][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.106194][ T6921] pim6reg1: entered promiscuous mode [ 133.150510][ T6921] pim6reg1: entered allmulticast mode [ 133.552678][ T6933] netlink: 128 bytes leftover after parsing attributes in process `syz.1.262'. [ 134.305797][ T6954] pimreg: entered allmulticast mode [ 134.849441][ T6976] netlink: 224 bytes leftover after parsing attributes in process `syz.1.271'. [ 135.301838][ T6981] netlink: 'syz.0.275': attribute type 2 has an invalid length. [ 135.646800][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 135.951163][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 135.959278][ C0] lec:lec_tx_timeout: lec0 [ 135.977010][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 137.271083][ T7026] veth1_to_bridge: entered allmulticast mode [ 137.288310][ T7026] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 137.370663][ T7029] netlink: 48 bytes leftover after parsing attributes in process `syz.2.282'. [ 137.926044][ T7037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.028177][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 138.110885][ T7037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.285'. [ 138.851527][ T7057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.943854][ T24] IPVS: starting estimator thread 0... [ 139.045253][ T7059] IPVS: using max 29 ests per chain, 69600 per kthread [ 139.608996][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 139.769388][ T7073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.290'. [ 139.826978][ T7075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.291'. [ 139.877988][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 140.150169][ T7075] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 140.217506][ T7075] netlink: 56 bytes leftover after parsing attributes in process `syz.1.291'. [ 140.874370][ T7089] Bluetooth: MGMT ver 1.23 [ 140.989360][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 140.997270][ T7089] Bluetooth: hci1: too big key_count value 29096 [ 140.999727][ C0] lec:lec_tx_timeout: lec0 [ 141.021066][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 142.162827][ T7111] gtp0: entered promiscuous mode [ 142.189439][ T7111] gtp0: entered allmulticast mode [ 144.276563][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 144.325568][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.312'. [ 144.458359][ T7152] IPVS: sh: FWM 3 0x00000003 - no destination available [ 144.474963][ T7155] netlink: 'syz.1.314': attribute type 3 has an invalid length. [ 144.485368][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 146.056317][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 146.064436][ C0] lec:lec_tx_timeout: lec0 [ 146.082808][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 146.103393][ T7167] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 146.626377][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 147.497394][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 147.517589][ T7196] netlink: 68 bytes leftover after parsing attributes in process `syz.0.321'. [ 147.540333][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 147.618362][ T7196] netlink: 68 bytes leftover after parsing attributes in process `syz.0.321'. [ 148.176138][ T6985] Set syz1 is full, maxelem 65536 reached [ 148.205075][ T7205] netlink: 'syz.3.322': attribute type 2 has an invalid length. [ 148.266143][ T7206] netlink: 'syz.3.322': attribute type 2 has an invalid length. [ 148.334684][ T7205] !¼Þ: entered promiscuous mode [ 148.400609][ T7206] !¼Þ: left promiscuous mode [ 148.466810][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 150.034001][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.329'. [ 150.147566][ T7232] can: request_module (can-proto-0) failed. [ 150.946999][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 151.078465][ T7238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.331'. [ 151.104986][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 151.113085][ C0] lec:lec_tx_timeout: lec0 [ 151.129361][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 151.484459][ T7245] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 151.604210][ T7252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.333'. [ 151.829090][ T7249] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 151.899152][ T7249] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 152.120996][ T7258] bond2: (slave gretap0): making interface the new active one [ 152.152055][ T7258] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 152.285443][ T7252] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 153.206547][ T7282] vlan2: entered allmulticast mode [ 153.222977][ T7282] bond0: entered allmulticast mode [ 153.230483][ T7282] bond_slave_0: entered allmulticast mode [ 153.247860][ T7282] bond_slave_1: entered allmulticast mode [ 154.196961][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 154.213269][ T7287] gretap0: entered promiscuous mode [ 154.308322][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 154.581671][ T7292] netlink: 'syz.3.346': attribute type 13 has an invalid length. [ 154.643629][ T7292] netlink: 'syz.3.346': attribute type 17 has an invalid length. [ 154.690249][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.347'. [ 155.024313][ T7292] vlan0: left promiscuous mode [ 156.194853][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.354'. [ 156.481891][ T7332] hsr_slave_1 (unregistering): left promiscuous mode [ 157.177521][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6050 ms [ 157.185590][ C0] lec:lec_tx_timeout: lec0 [ 157.201531][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 158.806471][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 159.109699][ T7364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.361'. [ 159.133646][ T7364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.361'. [ 159.150195][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 159.174786][ T7375] netlink: 'syz.2.361': attribute type 4 has an invalid length. [ 159.202504][ T7370] openvswitch: netlink: Missing key (keys=40, expected=80) [ 160.488908][ T7426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.702786][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.381'. [ 160.869962][ T7441] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.386'. [ 161.181479][ T7463] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 161.189377][ T7463] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 161.390701][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 161.607809][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 161.707497][ T7486] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 162.685455][ T7513] netlink: 'syz.2.404': attribute type 7 has an invalid length. [ 162.731277][ T7513] netlink: 'syz.2.404': attribute type 8 has an invalid length. [ 162.815071][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 162.926592][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms [ 162.934704][ C0] lec:lec_tx_timeout: lec0 [ 162.939651][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 163.015636][ T7528] sctp: [Deprecated]: syz.2.409 (pid 7528) Use of int in max_burst socket option. [ 163.015636][ T7528] Use struct sctp_assoc_value instead [ 163.296660][ T7543] netlink: 'syz.1.410': attribute type 1 has an invalid length. [ 163.321561][ T7543] netlink: 'syz.1.410': attribute type 2 has an invalid length. [ 163.744416][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.417'. [ 163.778796][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.417'. [ 163.865642][ T7562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.420'. [ 163.938792][ T7564] netlink: 52 bytes leftover after parsing attributes in process `syz.1.419'. [ 164.594348][ T7597] netlink: 'syz.1.427': attribute type 1 has an invalid length. [ 164.611713][ T7597] netlink: 'syz.1.427': attribute type 3 has an invalid length. [ 164.626146][ T7600] netlink: 88 bytes leftover after parsing attributes in process `syz.2.428'. [ 164.645520][ T7597] netlink: 224 bytes leftover after parsing attributes in process `syz.1.427'. [ 164.712213][ T7603] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 164.894435][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'. [ 166.148649][ T7628] bond0: (slave wlan1): Releasing backup interface [ 166.182645][ T7660] netlink: 'syz.0.441': attribute type 8 has an invalid length. [ 166.204967][ T7653] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 166.212834][ T7653] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 166.243446][ T7655] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 166.516412][ T7671] __nla_validate_parse: 2 callbacks suppressed [ 166.516431][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 166.563721][ T7669] netlink: 14 bytes leftover after parsing attributes in process `syz.0.444'. [ 166.595474][ T7673] netlink: 240 bytes leftover after parsing attributes in process `syz.3.443'. [ 166.624702][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.446'. [ 166.634436][ T7668] vlan2: entered allmulticast mode [ 166.640075][ T7673] netlink: 'syz.3.443': attribute type 9 has an invalid length. [ 166.647881][ T7668] bond0: entered allmulticast mode [ 166.647932][ T7668] bond_slave_0: entered allmulticast mode [ 166.647949][ T7668] bond_slave_1: entered allmulticast mode [ 166.661254][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.446'. [ 166.719596][ T7669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.730550][ T7669] bond_slave_0: left allmulticast mode [ 166.743853][ T7669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.762695][ T7669] bond_slave_1: left allmulticast mode [ 166.772795][ T7669] bond0 (unregistering): Released all slaves [ 166.894181][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.902222][ T7666] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.012199][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.035578][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.186813][ T35] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.213327][ T35] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.261703][ T35] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.296986][ T35] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.345141][ T7688] netlink: 'syz.4.448': attribute type 7 has an invalid length. [ 167.946620][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 167.954714][ C0] lec:lec_tx_timeout: lec0 [ 167.960628][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 168.075886][ T7738] ÿ: renamed from bond_slave_0 [ 168.606142][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.458'. [ 168.638551][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 168.735990][ T7772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.459'. [ 168.781704][ T7772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.459'. [ 169.361296][ T7802] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 169.404263][ T7802] syzkaller0: entered promiscuous mode [ 169.410708][ T7802] syzkaller0: entered allmulticast mode [ 169.441148][ T7805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.469'. [ 169.706085][ T7822] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.739412][ T7827] : entered promiscuous mode [ 169.824508][ T7825] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 170.525269][ T7866] netlink: 'syz.3.482': attribute type 4 has an invalid length. [ 170.559310][ T7866] netlink: 'syz.3.482': attribute type 8 has an invalid length. [ 170.579991][ T7866] netlink: 'syz.3.482': attribute type 1 has an invalid length. [ 170.601591][ T7866] NCSI netlink: No device for ifindex 0 [ 170.789015][ T7879] netlink: 'syz.0.484': attribute type 1 has an invalid length. [ 170.802948][ T7879] netlink: 'syz.0.484': attribute type 2 has an invalid length. [ 171.388989][ T7905] netlink: zone id is out of range [ 171.418456][ T7905] netlink: zone id is out of range [ 171.439886][ T7905] netlink: zone id is out of range [ 171.462293][ T7905] netlink: zone id is out of range [ 171.510852][ T7905] netlink: zone id is out of range [ 171.553683][ T7905] netlink: zone id is out of range [ 171.583354][ T7905] netlink: zone id is out of range [ 171.616448][ T7905] netlink: zone id is out of range [ 171.654995][ T7905] netlink: zone id is out of range [ 171.684414][ T7905] netlink: zone id is out of range [ 171.923411][ T7924] __nla_validate_parse: 6 callbacks suppressed [ 171.923429][ T7924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.500'. [ 171.946949][ T7924] netlink: 7 bytes leftover after parsing attributes in process `syz.4.500'. [ 172.630978][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 172.860447][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 172.875032][ T7973] trusted_key: syz.2.511 sent an empty control message without MSG_MORE. [ 172.976653][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 172.984777][ C0] lec:lec_tx_timeout: lec0 [ 172.989488][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 173.310546][ T7985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.515'. [ 173.460513][ T8003] netlink: 'syz.4.520': attribute type 1 has an invalid length. [ 174.509117][ T8035] netlink: 'syz.1.529': attribute type 1 has an invalid length. [ 174.526803][ T8035] netlink: 244 bytes leftover after parsing attributes in process `syz.1.529'. [ 174.578444][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 175.512698][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 176.331306][ T8110] wg1: entered promiscuous mode [ 176.392250][ T8110] wg1: entered allmulticast mode [ 176.413310][ T8116] netlink: 'syz.0.549': attribute type 8 has an invalid length. [ 176.477702][ T8109] block nbd0: server does not support multiple connections per device. [ 176.509824][ T8109] block nbd0: shutting down sockets [ 176.759572][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 177.372737][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 177.400730][ T8166] netlink: 'syz.3.562': attribute type 3 has an invalid length. [ 177.454867][ T8166] block nbd3: NBD_DISCONNECT [ 177.542431][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 177.996577][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 178.004755][ C0] lec:lec_tx_timeout: lec0 [ 178.009873][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 178.131118][ T8199] net_ratelimit: 337 callbacks suppressed [ 178.131140][ T8199] openvswitch: netlink: IP tunnel dst address not specified [ 178.185671][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 178.232995][ T8199] netlink: 'syz.1.571': attribute type 13 has an invalid length. [ 178.266013][ T8199] netlink: 'syz.1.571': attribute type 17 has an invalid length. [ 178.372620][ T8199] ip_vti0: left allmulticast mode [ 178.532283][ T8224] nbd: must specify at least one socket [ 178.541929][ T8224] xt_l2tp: missing protocol rule (udp|l2tpip) [ 178.555654][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 178.565094][ T8219] netlink: 36 bytes leftover after parsing attributes in process `syz.2.577'. [ 178.575474][ T8199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.656973][ T8224] netlink: 32 bytes leftover after parsing attributes in process `syz.4.578'. [ 178.911128][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 179.153086][ T8230] bond1: entered promiscuous mode [ 179.188432][ T8230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.962075][ T8280] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 180.420771][ T8304] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 180.977350][ T8332] netlink: 52 bytes leftover after parsing attributes in process `syz.3.595'. [ 181.831482][ T8378] netlink: 210320 bytes leftover after parsing attributes in process `syz.2.604'. [ 181.866399][ T8378] netlink: 'syz.2.604': attribute type 10 has an invalid length. [ 181.977160][ T8378] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 182.107226][ T8394] netlink: 'syz.1.608': attribute type 9 has an invalid length. [ 182.750990][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 183.016758][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 183.024988][ C0] lec:lec_tx_timeout: lec0 [ 183.031168][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 183.055643][ T8432] netlink: 'syz.4.616': attribute type 21 has an invalid length. [ 183.083558][ T8439] ipvlan0: entered promiscuous mode [ 183.089264][ T8432] netlink: 156 bytes leftover after parsing attributes in process `syz.4.616'. [ 183.593241][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 183.638568][ T8465] netlink: 60 bytes leftover after parsing attributes in process `syz.0.622'. [ 183.733117][ T8465] unsupported nlmsg_type 40 [ 183.738452][ T8468] netlink: 'syz.2.623': attribute type 6 has an invalid length. [ 183.771102][ T8468] netlink: 104 bytes leftover after parsing attributes in process `syz.2.623'. [ 183.897886][ T8478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.626'. [ 184.263101][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'. [ 184.368141][ T8499] block nbd0: server does not support multiple connections per device. [ 184.398267][ T8499] block nbd0: shutting down sockets [ 184.845172][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 184.854785][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 184.875717][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 184.895243][ T8518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.919043][ T8518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.960909][ T8500] xt_cgroup: xt_cgroup: no path or classid specified [ 184.985129][ T8496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.240408][ T8525] 0ªî{X¹¦: left allmulticast mode [ 185.321715][ T8525] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.329756][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.385644][ T8525] veth1_to_bridge: left allmulticast mode [ 185.433255][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.449633][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.572306][ T8525] bond1: left promiscuous mode [ 185.579789][ T8525] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 185.587620][ T8525] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 185.655017][ T8547] bond0: entered promiscuous mode [ 185.666404][ T8547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.677687][ T3554] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.713172][ T3554] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.849238][ T3554] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.885206][ T3554] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.778865][ T8602] netlink: 'syz.0.660': attribute type 1 has an invalid length. [ 186.793112][ T8598] ip6gre2: entered promiscuous mode [ 186.799919][ T8598] ip6gre2: entered allmulticast mode [ 186.862782][ T8602] bond2: entered promiscuous mode [ 186.868787][ T8602] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.877939][ T7713] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.909568][ T1212] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.923754][ T7713] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.986828][ T54] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 187.090440][ T8611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.101958][ T8611] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 187.115801][ T8611] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 187.149987][ T8611] bond2: (slave wireguard0): making interface the new active one [ 187.174079][ T8611] wireguard0: entered promiscuous mode [ 187.210371][ T8611] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 187.237045][ T54] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 187.268516][ T8602] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 187.285169][ T8602] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 187.372520][ T8633] netlink: 'syz.1.667': attribute type 4 has an invalid length. [ 187.818058][ T8660] __nla_validate_parse: 3 callbacks suppressed [ 187.818079][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 187.834290][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 187.863490][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 187.909913][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 187.921987][ T8663] netlink: zone id is out of range [ 187.928115][ T8663] netlink: zone id is out of range [ 187.933512][ T8663] netlink: zone id is out of range [ 187.945880][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 187.958292][ T8663] netlink: zone id is out of range [ 187.974284][ T8663] netlink: zone id is out of range [ 187.983076][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 187.994617][ T8663] netlink: zone id is out of range [ 188.007641][ T8663] netlink: zone id is out of range [ 188.021936][ T8663] netlink: zone id is out of range [ 188.035425][ T8663] netlink: zone id is out of range [ 188.046590][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 188.054671][ C0] lec:lec_tx_timeout: lec0 [ 188.059505][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 188.443226][ T8671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.677'. [ 189.550333][ T1157] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.584204][ T1157] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.623950][ T1157] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.710301][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 189.845424][ T8701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.681'. [ 189.865360][ T1157] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.911865][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 190.914126][ T8739] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 3, id = 0 [ 191.073128][ T8749] net_ratelimit: 46 callbacks suppressed [ 191.073149][ T8749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.096979][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 191.156822][ T8748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.171236][ T8750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.298631][ T8757] Unsupported ieee802154 address type: 0 [ 192.376159][ T8806] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 193.066565][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 193.074785][ C0] lec:lec_tx_timeout: lec0 [ 193.080011][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 194.020739][ T8871] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.072691][ T8871] bond4: (slave lo): Enslaving as an active interface with an up link [ 194.081651][ T8871] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 194.106247][ T8872] __nla_validate_parse: 3 callbacks suppressed [ 194.106267][ T8872] netlink: 76 bytes leftover after parsing attributes in process `syz.3.710'. [ 194.293837][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.302622][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.404107][ T8883] pim6reg1: entered promiscuous mode [ 194.419641][ T8883] pim6reg1: entered allmulticast mode [ 194.505058][ T8887] netlink: 40 bytes leftover after parsing attributes in process `syz.4.713'. [ 194.518083][ T8883] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 194.541366][ T8887] netlink: 40 bytes leftover after parsing attributes in process `syz.4.713'. [ 194.576018][ T8887] netlink: 40 bytes leftover after parsing attributes in process `syz.4.713'. [ 194.673505][ T8897] netlink: zone id is out of range [ 194.682136][ T8897] netlink: zone id is out of range [ 194.687620][ T8897] netlink: zone id is out of range [ 194.693090][ T8897] netlink: zone id is out of range [ 194.699939][ T8897] netlink: zone id is out of range [ 194.700918][ T8886] bond3: invalid ARP target 0.0.0.0 specified for addition [ 194.705447][ T8897] netlink: zone id is out of range [ 194.719226][ T8886] bond3: option arp_ip_target: invalid value (0) [ 194.731709][ T8886] bond3 (unregistering): Released all slaves [ 195.085515][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.719'. [ 195.239546][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'. [ 195.290551][ T8927] sctp: [Deprecated]: syz.0.721 (pid 8927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.290551][ T8927] Use struct sctp_sack_info instead [ 195.316752][ T8931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.722'. [ 195.506031][ T8939] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 195.556682][ T8939] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 195.910587][ T8965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.069651][ T8972] syzkaller1: entered promiscuous mode [ 196.101960][ T8972] syzkaller1: entered allmulticast mode [ 196.477273][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'. [ 196.532795][ T8994] bond0: (slave vlan0): Opening slave failed [ 196.629844][ T8996] netlink: 'syz.3.736': attribute type 5 has an invalid length. [ 196.978004][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'. [ 196.999464][ T9015] veth1: entered promiscuous mode [ 197.004666][ T9015] veth1: entered allmulticast mode [ 197.464053][ T9035] netlink: 180 bytes leftover after parsing attributes in process `syz.4.743'. [ 198.086674][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 198.094881][ C0] lec:lec_tx_timeout: lec0 [ 198.099555][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 198.439298][ T9074] Bluetooth: MGMT ver 1.23 [ 198.760325][ T9093] netlink: 'syz.4.755': attribute type 1 has an invalid length. [ 198.798922][ T9093] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 199.406746][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 199.554577][ T9117] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 199.600526][ T9117] bridge1: entered allmulticast mode [ 199.966166][ T9146] __nla_validate_parse: 3 callbacks suppressed [ 199.966188][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 200.023529][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 200.132499][ T1107] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.160350][ T1107] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.229013][ T1107] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.271544][ T1107] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.426309][ T9153] syzkaller0: entered promiscuous mode [ 200.464982][ T9153] syzkaller0: entered allmulticast mode [ 200.527183][ T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 200.591101][ T9160] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 200.636691][ T9160] net_ratelimit: 20 callbacks suppressed [ 200.636717][ T9160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.042238][ T9189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.102980][ T9190] netlink: 'syz.4.775': attribute type 11 has an invalid length. [ 201.192443][ T9198] netlink: 'syz.1.776': attribute type 8 has an invalid length. [ 201.229452][ T9195] lo speed is unknown, defaulting to 1000 [ 201.285263][ T9204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.776'. [ 201.309165][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 201.388408][ T9195] lo speed is unknown, defaulting to 1000 [ 201.404783][ T9195] lo speed is unknown, defaulting to 1000 [ 201.424222][ T9195] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 201.445675][ T9195] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 201.477675][ T9196] bridge_slave_0: left allmulticast mode [ 201.499451][ T9196] bridge_slave_0: left promiscuous mode [ 201.513163][ T9196] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.526379][ T9216] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 201.542484][ T9196] bridge_slave_1: left allmulticast mode [ 201.548572][ T9196] bridge_slave_1: left promiscuous mode [ 201.554493][ T9196] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.585440][ T9196] team0: Port device team_slave_0 removed [ 201.599166][ T9196] team0: Port device team_slave_1 removed [ 201.606338][ T9196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.614263][ T9196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.623254][ T9196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.631272][ T9196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.640680][ T9196] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.673384][ T9195] lo speed is unknown, defaulting to 1000 [ 201.730661][ T9195] lo speed is unknown, defaulting to 1000 [ 201.772893][ T9195] lo speed is unknown, defaulting to 1000 [ 201.780384][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'. [ 201.816045][ T9195] lo speed is unknown, defaulting to 1000 [ 201.833884][ T9195] lo speed is unknown, defaulting to 1000 [ 201.847233][ T9223] netlink: 36 bytes leftover after parsing attributes in process `syz.4.784'. [ 202.166955][ T9228] syzkaller0: entered promiscuous mode [ 202.182322][ T9228] syzkaller0: entered allmulticast mode [ 203.890710][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 203.898803][ C0] lec:lec_tx_timeout: lec0 [ 203.903557][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 204.172191][ T9266] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 204.172191][ T9266] Please contact the netfilter-devel mailing list or update your nftables rules. [ 204.304848][ T9277] netlink: 32 bytes leftover after parsing attributes in process `syz.3.799'. [ 204.430381][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.800'. [ 204.828360][ T9299] tipc: Enabled bearer , priority 10 [ 205.119151][ T9306] netlink: 'syz.0.804': attribute type 83 has an invalid length. [ 205.369022][ T9313] netlink: 36 bytes leftover after parsing attributes in process `syz.1.805'. [ 205.423548][ T9313] netlink: 36 bytes leftover after parsing attributes in process `syz.1.805'. [ 205.493592][ T9312] netlink: 'syz.1.805': attribute type 1 has an invalid length. [ 205.522847][ T9313] netlink: 36 bytes leftover after parsing attributes in process `syz.1.805'. [ 205.542279][ T9315] openvswitch: netlink: Flow actions attr not present in new flow. [ 205.553693][ T9312] netlink: 96 bytes leftover after parsing attributes in process `syz.1.805'. [ 205.585394][ T9317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.805'. [ 205.597336][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 205.616103][ T9312] netlink: 1 bytes leftover after parsing attributes in process `syz.1.805'. [ 205.648320][ T9312] netlink: 'syz.1.805': attribute type 1 has an invalid length. [ 205.681112][ T9312] netlink: 'syz.1.805': attribute type 8 has an invalid length. [ 205.713898][ T9312] netlink: 606 bytes leftover after parsing attributes in process `syz.1.805'. [ 206.191593][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 206.325764][ T9346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.815'. [ 206.348907][ T9346] netlink: 'syz.0.815': attribute type 4 has an invalid length. [ 206.505872][ T9351] team0: entered promiscuous mode [ 206.512269][ T9351] team_slave_0: entered promiscuous mode [ 206.521629][ T9351] team_slave_1: entered promiscuous mode [ 206.527974][ T9351] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 206.546454][ T9351] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 206.563086][ T9351] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 206.579253][ T9351] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 206.613692][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 207.308813][ T9367] lo speed is unknown, defaulting to 1000 [ 208.145778][ T9404] lo speed is unknown, defaulting to 1000 [ 208.658996][ T9426] bond0: entered promiscuous mode [ 208.676709][ T9426] bond_slave_0: entered promiscuous mode [ 208.691189][ T9426] bond_slave_1: entered promiscuous mode [ 208.705916][ T9426] batadv0: entered promiscuous mode [ 208.723561][ T9426] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 208.738976][ T9426] bond0: left promiscuous mode [ 208.749072][ T9426] bond_slave_0: left promiscuous mode [ 208.754899][ T9426] bond_slave_1: left promiscuous mode [ 208.764715][ T9426] batadv0: left promiscuous mode [ 208.936681][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 208.944792][ C0] lec:lec_tx_timeout: lec0 [ 208.949580][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 211.726780][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 211.732908][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 213.966622][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 213.974724][ C0] lec:lec_tx_timeout: lec0 [ 213.980203][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 216.686849][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 218.986632][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 218.994793][ C0] lec:lec_tx_timeout: lec0 [ 218.999574][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 224.006619][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 224.014708][ C0] lec:lec_tx_timeout: lec0 [ 224.019293][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 227.089836][ T9430] __nla_validate_parse: 4 callbacks suppressed [ 227.089857][ T9430] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.836'. [ 227.109893][ T9438] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 227.120048][ T9430] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.836'. [ 227.134317][ T9438] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 227.145334][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.835'. [ 227.153206][ T9438] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 227.179854][ T9438] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 227.380012][ T9447] bridge5: port 1(veth3) entered blocking state [ 227.387165][ T9447] bridge5: port 1(veth3) entered disabled state [ 227.393724][ T9447] veth3: entered allmulticast mode [ 227.403610][ T9447] veth3: entered promiscuous mode [ 227.430123][ T9435] bridge5: port 2(veth0_to_bond) entered blocking state [ 227.437514][ T9435] bridge5: port 2(veth0_to_bond) entered disabled state [ 227.444713][ T9435] veth0_to_bond: entered allmulticast mode [ 227.456710][ T9435] veth0_to_bond: entered promiscuous mode [ 227.469621][ T9458] netlink: 'syz.2.837': attribute type 14 has an invalid length. [ 227.523526][ T9454] lo speed is unknown, defaulting to 1000 [ 227.805961][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 228.200466][ T9493] netlink: 340 bytes leftover after parsing attributes in process `syz.2.849'. [ 228.246963][ T9491] IPVS: Scheduler module ip_vs_sip not found [ 228.258065][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.849'. [ 228.426089][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 228.633773][ T9519] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 228.662877][ T9519] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 228.853906][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 228.897666][ T9531] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.860'. [ 229.026638][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 229.034771][ C0] lec:lec_tx_timeout: lec0 [ 229.039881][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 229.148702][ T9542] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 229.281621][ T9550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.866'. [ 229.373928][ T9555] netlink: 'syz.2.867': attribute type 9 has an invalid length. [ 229.386057][ T9555] netlink: 'syz.2.867': attribute type 7 has an invalid length. [ 229.402722][ T9555] netlink: 'syz.2.867': attribute type 8 has an invalid length. [ 229.471785][ T9560] xt_hashlimit: size too large, truncated to 1048576 [ 229.500935][ T9560] xt_hashlimit: invalid interval [ 229.613161][ T9568] tipc: Enabling of bearer rejected, failed to enable media [ 229.706874][ T9562] IPVS: persistence engine module ip_vs_pe_… not found [ 229.804984][ T9578] lo speed is unknown, defaulting to 1000 [ 230.373302][ T9603] netlink: 'syz.4.879': attribute type 4 has an invalid length. [ 230.517549][ T9610] syz.3.882 (9610) used obsolete PPPIOCDETACH ioctl [ 232.809048][ T9582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.213459][ T9629] netlink: 'syz.0.884': attribute type 8 has an invalid length. [ 233.223923][ T9629] __nla_validate_parse: 5 callbacks suppressed [ 233.223940][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'. [ 233.240253][ T9629] unsupported nla_type 216 [ 233.327056][ T9627] lo speed is unknown, defaulting to 1000 [ 233.328988][ T9626] netlink: 148 bytes leftover after parsing attributes in process `syz.2.888'. [ 234.046565][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 234.054736][ C0] lec:lec_tx_timeout: lec0 [ 234.059513][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 234.089050][ T9665] lo speed is unknown, defaulting to 1000 [ 234.155024][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 234.190201][ T9670] netlink: 48 bytes leftover after parsing attributes in process `syz.2.899'. [ 234.233750][ T9670] vlan0: entered allmulticast mode [ 234.242607][ T9670] macvtap0: entered allmulticast mode [ 234.476100][ T9684] syzkaller0: entered promiscuous mode [ 234.493251][ T9684] syzkaller0: entered allmulticast mode [ 234.524078][ T9688] netlink: 'syz.0.903': attribute type 3 has an invalid length. [ 234.544241][ T9688] netlink: 224 bytes leftover after parsing attributes in process `syz.0.903'. [ 234.820504][ T9706] netlink: 132 bytes leftover after parsing attributes in process `syz.4.906'. [ 235.031097][ T9716] netlink: 'syz.0.908': attribute type 1 has an invalid length. [ 235.226450][ T9716] bond5: entered promiscuous mode [ 235.252151][ T9716] bond5: entered allmulticast mode [ 235.262855][ T9716] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.310428][ T9726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.909'. [ 235.579640][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 235.638202][ T9737] netlink: 'syz.1.911': attribute type 1 has an invalid length. [ 235.649688][ T9737] netlink: 'syz.1.911': attribute type 2 has an invalid length. [ 235.669326][ T9737] netlink: 'syz.1.911': attribute type 1 has an invalid length. [ 235.683900][ T9741] sctp: [Deprecated]: syz.3.913 (pid 9741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.683900][ T9741] Use struct sctp_sack_info instead [ 235.700695][ T9737] netlink: 'syz.1.911': attribute type 2 has an invalid length. [ 235.753617][ T9744] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 237.227698][ T9802] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.930'. [ 237.237844][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 237.307404][ T9807] netlink: 'syz.3.932': attribute type 11 has an invalid length. [ 237.323245][ T9800] hsr_slave_1 (unregistering): left promiscuous mode [ 237.343920][ T9811] netlink: 'syz.3.932': attribute type 11 has an invalid length. [ 237.920314][ T9835] netlink: 'syz.1.939': attribute type 32 has an invalid length. [ 238.199447][ T9841] macsec0: entered promiscuous mode [ 238.217605][ T9841] virt_wifi0: entered promiscuous mode [ 238.862758][ T9864] netem: invalid attributes len -1 [ 238.878999][ T9864] netem: change failed [ 239.067633][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 239.075869][ C0] lec:lec_tx_timeout: lec0 [ 239.080586][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 239.134186][ T9880] __nla_validate_parse: 2 callbacks suppressed [ 239.134207][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 239.193140][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 239.222421][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 239.235138][ T9889] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 239.243165][ T9889] netlink: 92 bytes leftover after parsing attributes in process `syz.4.957'. [ 239.258804][ T9884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.292126][ T9887] netlink: 'syz.0.956': attribute type 7 has an invalid length. [ 239.310964][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 239.342527][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 239.352232][ T9891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.670388][ T9904] vxcan3: entered promiscuous mode [ 239.819719][ T3554] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.850736][ T3554] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.979776][ T9918] geneve3: entered promiscuous mode [ 240.005305][ T3554] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.039666][ T3554] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.070820][ T9921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.134672][ T9934] netlink: 264 bytes leftover after parsing attributes in process `syz.3.968'. [ 240.282218][ T9941] netlink: 'syz.0.971': attribute type 18 has an invalid length. [ 240.320661][ T9944] x_tables: duplicate underflow at hook 2 [ 240.384418][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.972'. [ 240.691057][ T9958] netlink: 64 bytes leftover after parsing attributes in process `syz.0.977'. [ 241.169058][ T9983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.385951][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 241.493380][T10002] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 241.685088][T10010] netlink: 'syz.3.991': attribute type 2 has an invalid length. [ 241.715705][T10010] hmac(sha224: entered promiscuous mode [ 241.911115][T10017] syzkaller0: entered promiscuous mode [ 241.916924][T10017] syzkaller0: entered allmulticast mode [ 242.012771][T10029] lo speed is unknown, defaulting to 1000 [ 242.021744][ T7720] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 242.276720][T10040] netlink: 'syz.3.999': attribute type 1 has an invalid length. [ 242.376046][T10040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.543157][T10047] lo speed is unknown, defaulting to 1000 [ 242.684701][T10016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.973875][T10062] netlink: 'syz.3.1002': attribute type 1 has an invalid length. [ 243.602772][T10091] sctp: [Deprecated]: syz.4.1011 (pid 10091) Use of int in maxseg socket option. [ 243.602772][T10091] Use struct sctp_assoc_value instead [ 243.878551][T10106] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 244.034782][T10106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.046381][T10106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.096651][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 244.104749][ C0] lec:lec_tx_timeout: lec0 [ 244.109991][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 244.292111][T10106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.305538][T10106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.702594][T10106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.736891][T10106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.939855][T10106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.956882][T10106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.295800][ T7722] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.315940][ T7722] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.424865][ T7722] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.456671][ T7722] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.576474][ T7720] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.597628][ T7720] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.625569][T10179] syzkaller0: entered promiscuous mode [ 245.642396][T10179] syzkaller0: entered allmulticast mode [ 245.731985][ T7713] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.750532][ T7713] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.842223][T10205] netlink: 'syz.2.1042': attribute type 64 has an invalid length. [ 245.869316][T10202] __nla_validate_parse: 14 callbacks suppressed [ 245.869339][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 245.929322][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1042'. [ 246.094378][T10213] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 246.271069][T10226] netlink: 'syz.1.1048': attribute type 3 has an invalid length. [ 246.303583][T10226] block nbd1: NBD_DISCONNECT [ 246.362575][T10231] vlan3: entered allmulticast mode [ 246.368097][T10231] bridge_slave_0: entered allmulticast mode [ 246.413865][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 246.780411][T10249] tun0: tun_chr_ioctl cmd 1074812118 [ 246.790857][T10226] infiniband syz0: set active [ 246.795280][T10249] tun0: tun_chr_ioctl cmd 1074033169 [ 246.805731][T10226] infiniband syz0: added batadv_slave_1 [ 246.877988][T10226] RDS/IB: syz0: added [ 246.888900][T10226] smc: adding ib device syz0 with port count 1 [ 246.895529][T10226] smc: ib device syz0 port 1 has no pnetid [ 247.146208][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1059'. [ 247.160824][T10266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'. [ 247.250727][T10268] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 247.567230][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 247.840172][T10290] ip6erspan0: entered allmulticast mode [ 247.904404][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'. [ 248.119298][T10298] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1069'. [ 248.410879][T10304] tipc: Enabled bearer , priority 0 [ 248.661658][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1075'. [ 249.101904][T10335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1080'. [ 249.123693][T10336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1080'. [ 249.326824][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 249.966545][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5860 ms [ 249.974672][ C0] lec:lec_tx_timeout: lec0 [ 249.979555][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 250.229036][T10368] vlan0: entered allmulticast mode [ 250.236186][T10368] bridge2: entered allmulticast mode [ 250.911359][T10405] netlink: 'syz.2.1094': attribute type 309 has an invalid length. [ 251.424261][T10420] __nla_validate_parse: 5 callbacks suppressed [ 251.424281][T10420] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1100'. [ 251.604520][T10424] block nbd0: server does not support multiple connections per device. [ 251.632853][T10428] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1102'. [ 251.653051][T10424] block nbd0: shutting down sockets [ 251.691018][T10428] netlink: 'syz.4.1102': attribute type 1 has an invalid length. [ 251.714804][T10428] netlink: 'syz.4.1102': attribute type 2 has an invalid length. [ 251.755556][T10428] netlink: 'syz.4.1102': attribute type 1 has an invalid length. [ 251.803411][T10428] netlink: 'syz.4.1102': attribute type 3 has an invalid length. [ 251.844529][T10439] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1106'. [ 251.969171][T10442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1107'. [ 251.998413][T10442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1107'. [ 252.024474][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1105'. [ 252.059108][T10444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1105'. [ 252.285754][T10458] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 252.383138][T10458] bond6: entered promiscuous mode [ 252.396307][T10458] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.558035][T10474] netlink: 'syz.3.1115': attribute type 8 has an invalid length. [ 252.576158][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1115'. [ 252.604882][T10474] bond0: entered promiscuous mode [ 252.616453][T10474] ÿ: entered promiscuous mode [ 252.643195][T10474] bond_slave_1: entered promiscuous mode [ 252.683411][T10474] gretap0: entered promiscuous mode [ 252.707912][T10474] veth0_to_team: entered promiscuous mode [ 252.744195][T10474] hsr1: entered promiscuous mode [ 253.472416][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 253.617463][T10527] nbd: must specify an index to disconnect [ 253.808564][T10531] IPv6: addrconf: prefix option has invalid lifetime [ 254.295992][T10563] netlink: 'syz.4.1135': attribute type 1 has an invalid length. [ 254.318587][T10563] netlink: 936 bytes leftover after parsing attributes in process `syz.4.1135'. [ 254.551900][T10571] tipc: Can't bind to reserved service type 0 [ 254.611496][T10575] syzkaller0: entered promiscuous mode [ 254.618241][T10575] syzkaller0: entered allmulticast mode [ 254.986570][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 254.994786][ C0] lec:lec_tx_timeout: lec0 [ 254.999522][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 255.662989][T10629] netlink: 'syz.4.1156': attribute type 12 has an invalid length. [ 255.744762][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.835845][T10632] IPVS: set_ctl: invalid protocol: 32 255.255.255.255:20004 [ 256.122988][T10646] macsec1: entered promiscuous mode [ 256.143223][T10646] team0: entered promiscuous mode [ 256.156256][T10646] macsec1: entered allmulticast mode [ 256.169754][T10646] team0: entered allmulticast mode [ 256.181468][T10646] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 256.189497][T10646] team0: Device macsec1 is already an upper device of the team interface [ 256.199728][T10646] team0: left allmulticast mode [ 256.215220][T10646] team0: left promiscuous mode [ 256.484367][T10658] bond3: option packets_per_slave: invalid value (1048582) [ 256.507589][T10658] bond3: option packets_per_slave: allowed values 0 - 65535 [ 256.520971][T10658] bond3 (unregistering): Released all slaves [ 256.534650][T10662] netlink: 'syz.3.1164': attribute type 1 has an invalid length. [ 256.577266][T10662] __nla_validate_parse: 9 callbacks suppressed [ 256.577286][T10662] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1164'. [ 256.628883][T10668] IPVS: length: 4096 != 24 [ 256.965591][T10692] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1170'. [ 256.982306][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 257.050460][T10698] IPVS: set_ctl: invalid protocol: 52 224.0.0.2:20002 [ 257.095865][T10699] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1172'. [ 257.214884][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 257.224228][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 257.234347][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 257.243922][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 257.253453][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 257.393690][T10715] netlink: 'syz.0.1178': attribute type 8 has an invalid length. [ 257.414247][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 258.009615][T10736] syzkaller0: entered promiscuous mode [ 258.028523][T10736] syzkaller0: entered allmulticast mode [ 260.006638][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 260.014771][ C0] lec:lec_tx_timeout: lec0 [ 260.019799][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 260.059387][T10853] tipc: Enabling of bearer rejected, already enabled [ 260.432405][T10871] lo speed is unknown, defaulting to 1000 [ 261.048822][T10884] bond3 (unregistering): Released all slaves [ 261.394477][T10900] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 261.501997][T10898] syzkaller0: entered promiscuous mode [ 261.616138][T10893] syzkaller0 (unregistering): left promiscuous mode [ 262.652605][T10940] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 262.674147][T10940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.781046][T10949] __nla_validate_parse: 16 callbacks suppressed [ 262.781065][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 262.810027][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 262.860913][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 262.944379][T10956] team0: entered allmulticast mode [ 262.950654][T10956] team_slave_0: entered allmulticast mode [ 262.959805][T10956] team_slave_1: entered allmulticast mode [ 262.970040][T10956] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.071736][T10960] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 263.080653][T10960] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 263.093420][T10960] tipc: Enabling of bearer rejected, already enabled [ 263.153853][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 263.463636][T10978] siw: device registration error -23 [ 263.534294][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1260'. [ 263.607619][T10988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1262'. [ 263.826069][T10991] lo speed is unknown, defaulting to 1000 [ 264.344191][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 264.438247][T11026] xt_bpf: check failed: parse error [ 264.512990][T11026] syzkaller0: entered promiscuous mode [ 264.548478][T11026] syzkaller0: entered allmulticast mode [ 264.630320][T11026] tipc: Enabling of bearer rejected, failed to enable media [ 265.026570][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 265.034766][ C0] lec:lec_tx_timeout: lec0 [ 265.039798][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 265.298861][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'. [ 265.311395][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'. [ 265.514017][T11079] veth0_to_bond: left allmulticast mode [ 265.520204][T11079] veth0_to_bond: left promiscuous mode [ 265.526214][T11079] bridge5: port 2(veth0_to_bond) entered disabled state [ 265.550266][T11079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 265.586901][T11078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1285'. [ 266.054655][T11096] netlink: 'syz.1.1290': attribute type 13 has an invalid length. [ 266.067272][T11096] netlink: 'syz.1.1290': attribute type 17 has an invalid length. [ 266.144551][T11100] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 266.616850][T11092] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.624672][T11092] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.744065][T11126] nbd: socks must be embedded in a SOCK_ITEM attr [ 266.764317][T11114] nbd: nbd64 already in use [ 266.772113][ T9453] block nbd64: NBD_DISCONNECT [ 266.884797][T11092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.905339][T11092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.963065][ T9446] udevd[9446]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 267.096696][ T5882] lo speed is unknown, defaulting to 1000 [ 267.111299][T11096] gretap0: left promiscuous mode [ 267.150176][T11096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.159916][T11096] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.173835][T11096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.232591][ T7713] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.232606][ T42] syz0: Port: 1 Link DOWN [ 267.249172][ T7713] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.262278][ T8679] lo speed is unknown, defaulting to 1000 [ 267.275533][ T7713] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.314086][ T7713] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.883266][T11165] lo speed is unknown, defaulting to 1000 [ 268.010255][T11170] lo speed is unknown, defaulting to 1000 [ 268.380416][T11174] 8021q: VLANs not supported on vcan0 [ 268.391172][T11174] __nla_validate_parse: 14 callbacks suppressed [ 268.391192][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 268.984197][T11195] xt_connbytes: Forcing CT accounting to be enabled [ 269.007735][T11195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.028442][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1316'. [ 269.291479][T11216] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 269.301433][T11217] raw_sendmsg: syz.3.1323 forgot to set AF_INET. Fix it! [ 269.413606][T11221] syzkaller0: entered promiscuous mode [ 269.430306][T11221] syzkaller0: entered allmulticast mode [ 269.455955][T11221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1321'. [ 269.500091][T11221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1321'. [ 269.523448][T11221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1321'. [ 269.551811][T11221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1321'. [ 269.571329][T11221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1321'. [ 269.594791][T11221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1321'. [ 269.606024][T11221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1321'. [ 269.620146][T11221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1321'. [ 269.672138][ T42] lo speed is unknown, defaulting to 1000 [ 269.682937][ T42] syz2: Port: 1 Link DOWN [ 270.046597][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 270.054727][ C0] lec:lec_tx_timeout: lec0 [ 270.059454][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 270.631064][T11268] netlink: 'syz.4.1338': attribute type 1 has an invalid length. [ 270.647695][T11271] netlink: 'syz.0.1339': attribute type 3 has an invalid length. [ 271.115395][T11284] lo speed is unknown, defaulting to 1000 [ 271.214279][ T29] audit: type=1804 audit(1776598554.876:2): pid=11299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1346" name="/newroot/288/memory.events" dev="tmpfs" ino=1490 res=1 errno=0 [ 271.252498][T11300] netlink: 'syz.2.1346': attribute type 1 has an invalid length. [ 271.296756][ T29] audit: type=1800 audit(1776598554.886:3): pid=11299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1346" name="memory.events" dev="tmpfs" ino=1490 res=0 errno=0 [ 271.374213][ T29] audit: type=1804 audit(1776598554.916:4): pid=11299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1346" name="/newroot/288/memory.events" dev="tmpfs" ino=1490 res=1 errno=0 [ 271.669124][T11313] lo speed is unknown, defaulting to 1000 [ 271.706511][T11316] lo speed is unknown, defaulting to 1000 [ 272.592669][T11341] netlink: 'syz.2.1355': attribute type 1 has an invalid length. [ 272.655545][T11329] lo speed is unknown, defaulting to 1000 [ 272.703112][T11344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.747221][T11341] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.302775][T11358] lo speed is unknown, defaulting to 1000 [ 273.368902][T11366] netem: change failed [ 273.869332][T11377] openvswitch: netlink: IPv4 tun info is not correct [ 274.513301][T11387] netlink: 'syz.4.1366': attribute type 1 has an invalid length. [ 274.683891][T11387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.802272][T11391] bond1: (slave veth5): Enslaving as an active interface with a down link [ 274.827306][T11394] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 274.834667][T11394] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 275.066695][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 275.074830][ C0] lec:lec_tx_timeout: lec0 [ 275.079969][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 275.105604][T11408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.261402][T11412] bond2: option tlb_dynamic_lb: invalid value (5) [ 275.272608][T11412] bond2 (unregistering): Released all slaves [ 275.469632][T11423] __nla_validate_parse: 185 callbacks suppressed [ 275.469654][T11423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1374'. [ 275.622130][T11435] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1377'. [ 275.815567][T11443] netlink: 'syz.1.1379': attribute type 1 has an invalid length. [ 276.023834][T11443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 276.172005][T11449] bond3: (slave veth5): Enslaving as an active interface with a down link [ 276.218530][T11452] wg1: left promiscuous mode [ 276.229463][T11452] wg1: left allmulticast mode [ 276.255138][T11452] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 276.270705][T11452] vlan2: left allmulticast mode [ 276.275756][T11452] bond0: left allmulticast mode [ 276.281402][T11452] bond_slave_0: left allmulticast mode [ 276.287178][T11452] bond_slave_1: left allmulticast mode [ 276.293492][T11452] ip6gre2: left promiscuous mode [ 276.299195][T11452] ip6gre2: left allmulticast mode [ 276.305295][T11452] bridge1: left allmulticast mode [ 276.335484][T11443] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 276.385161][T11443] bond3: (slave batadv1): making interface the new active one [ 276.470438][T11443] batadv1: entered promiscuous mode [ 276.476256][T11443] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 276.698802][T11478] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 276.772464][T11481] bond3: entered allmulticast mode [ 276.855182][T11489] netlink: 'syz.4.1386': attribute type 11 has an invalid length. [ 276.914364][T11459] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 277.159090][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1392'. [ 277.192585][T11506] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1392'. [ 277.445251][T11523] netlink: 'syz.1.1396': attribute type 2 has an invalid length. [ 277.465881][T11523] netlink: 'syz.1.1396': attribute type 11 has an invalid length. [ 277.484876][T11523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1396'. [ 277.528529][T11526] --map-set only usable from mangle table [ 277.734892][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1402'. [ 277.745121][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 277.758976][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'. [ 277.872918][T11544] bridge3: entered allmulticast mode [ 277.891018][T11530] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1399'. [ 277.907222][T11530] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1399'. [ 277.930738][T11530] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 277.964056][T11541] lo speed is unknown, defaulting to 1000 [ 277.974548][T11544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1403'. [ 277.986464][T11544] bridge3: left allmulticast mode [ 278.050262][T11550] syz_tun: entered allmulticast mode [ 278.141803][T11555] netlink: zone id is out of range [ 278.162464][T11557] netlink: 'syz.1.1408': attribute type 1 has an invalid length. [ 278.162922][T11555] netlink: zone id is out of range [ 278.190490][T11555] netlink: zone id is out of range [ 278.201449][T11555] netlink: zone id is out of range [ 278.216641][T11555] netlink: zone id is out of range [ 278.223591][T11555] netlink: zone id is out of range [ 278.239648][T11555] netlink: zone id is out of range [ 278.250495][T11555] netlink: zone id is out of range [ 278.269355][T11555] netlink: zone id is out of range [ 280.086627][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 280.094768][ C0] lec:lec_tx_timeout: lec0 [ 280.099410][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 282.405178][T11610] netlink: 'syz.4.1417': attribute type 2 has an invalid length. [ 282.428054][T11610] __nla_validate_parse: 68 callbacks suppressed [ 282.428074][T11610] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1417'. [ 282.769513][T11632] FAULT_INJECTION: forcing a failure. [ 282.769513][T11632] name failslab, interval 1, probability 0, space 0, times 1 [ 282.786812][T11632] CPU: 1 UID: 0 PID: 11632 Comm: syz.3.1424 Not tainted syzkaller #0 PREEMPT(full) [ 282.786842][T11632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 282.786862][T11632] Call Trace: [ 282.786870][T11632] [ 282.786878][T11632] dump_stack_lvl+0xe8/0x150 [ 282.786924][T11632] should_fail_ex+0x412/0x560 [ 282.786957][T11632] should_failslab+0xa8/0x100 [ 282.786980][T11632] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 282.787011][T11632] ? __alloc_skb+0x1d0/0x7d0 [ 282.787037][T11632] ? __local_bh_enable_ip+0xd0/0x130 [ 282.787068][T11632] __alloc_skb+0x1d0/0x7d0 [ 282.787116][T11632] ? netlink_ack_tlv_len+0x6c/0x210 [ 282.787149][T11632] netlink_ack+0x146/0xa50 [ 282.787175][T11632] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.787197][T11632] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 282.787229][T11632] ? __pfx_nl80211_post_doit+0x10/0x10 [ 282.787277][T11632] netlink_rcv_skb+0x2b6/0x4b0 [ 282.787308][T11632] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.787332][T11632] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.787379][T11632] ? down_read+0x270/0x2e0 [ 282.787406][T11632] ? genl_rcv+0xd/0x40 [ 282.787430][T11632] genl_rcv+0x28/0x40 [ 282.787450][T11632] netlink_unicast+0x75c/0x8e0 [ 282.787489][T11632] netlink_sendmsg+0x813/0xb40 [ 282.787531][T11632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.787566][T11632] ? aa_sock_msg_perm+0xf1/0x1b0 [ 282.787597][T11632] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.787632][T11632] ____sys_sendmsg+0x972/0x9f0 [ 282.787673][T11632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.787715][T11632] ? import_iovec+0x73/0xa0 [ 282.787741][T11632] ___sys_sendmsg+0x2a5/0x360 [ 282.787777][T11632] ? __lock_acquire+0x6b5/0x2cf0 [ 282.787810][T11632] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.787881][T11632] ? __fget_files+0x2a/0x420 [ 282.787906][T11632] ? __fget_files+0x3a0/0x420 [ 282.787943][T11632] __x64_sys_sendmsg+0x1bd/0x2a0 [ 282.787979][T11632] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.788022][T11632] ? __pfx_ksys_write+0x10/0x10 [ 282.788062][T11632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.788084][T11632] do_syscall_64+0x15f/0xf80 [ 282.788109][T11632] ? trace_irq_disable+0x3b/0x140 [ 282.788131][T11632] ? clear_bhb_loop+0x40/0x90 [ 282.788157][T11632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.788178][T11632] RIP: 0033:0x7f0bcf19c819 [ 282.788203][T11632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.788220][T11632] RSP: 002b:00007f0bd0109028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.788250][T11632] RAX: ffffffffffffffda RBX: 00007f0bcf415fa0 RCX: 00007f0bcf19c819 [ 282.788265][T11632] RDX: 0000000000008080 RSI: 00002000000011c0 RDI: 0000000000000003 [ 282.788279][T11632] RBP: 00007f0bd0109090 R08: 0000000000000000 R09: 0000000000000000 [ 282.788291][T11632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.788303][T11632] R13: 00007f0bcf416038 R14: 00007f0bcf415fa0 R15: 00007ffcc6363848 [ 282.788338][T11632] [ 283.282876][T11636] bridge_slave_0: left allmulticast mode [ 283.318360][T11636] bridge_slave_0: left promiscuous mode [ 283.344995][T11636] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.394792][T11636] bridge_slave_1: left allmulticast mode [ 283.418258][T11636] bridge_slave_1: left promiscuous mode [ 283.437857][T11636] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.486739][T11636] bond0: (slave bond_slave_0): Releasing backup interface [ 283.515347][T11636] bond0: (slave bond_slave_1): Releasing backup interface [ 283.547823][T11636] team0: Port device team_slave_0 removed [ 283.573245][T11636] team0: Port device team_slave_1 removed [ 283.592821][T11636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.612327][T11636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.631592][T11636] net_ratelimit: 337 callbacks suppressed [ 283.631609][T11636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 284.056005][T11668] netlink: 'syz.1.1433': attribute type 10 has an invalid length. [ 284.088428][T11668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 284.129548][T11668] team0: Port device netdevsim0 added [ 284.300492][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 284.363514][T11682] lo speed is unknown, defaulting to 1000 [ 284.386299][T11691] Can't find ip_set type h]sh:ip,port,net [ 284.542404][T11684] syzkaller0: entered promiscuous mode [ 284.548082][T11684] syzkaller0: entered allmulticast mode [ 284.598478][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1441'. [ 285.886559][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 285.894710][ C0] lec:lec_tx_timeout: lec0 [ 285.899610][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 286.471699][T11714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1443'. [ 286.699652][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1446'. [ 286.939333][T11736] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 287.024537][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 287.160183][T11743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.356191][T11744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1448'. [ 287.983308][T11750] netlink: 'syz.3.1452': attribute type 4 has an invalid length. [ 288.740442][T11765] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 289.667751][T11724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.954407][T11789] xt_TCPMSS: Only works on TCP SYN packets [ 290.228074][T11794] lo speed is unknown, defaulting to 1000 [ 290.471909][T11811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1469'. [ 290.489922][T11806] lo speed is unknown, defaulting to 1000 [ 290.851264][T11827] lo speed is unknown, defaulting to 1000 [ 290.936607][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 290.944730][ C0] lec:lec_tx_timeout: lec0 [ 290.949582][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 291.141683][ T42] lo speed is unknown, defaulting to 1000 [ 291.524004][T11826] syz.1.1471 (11826) used greatest stack depth: 17784 bytes left [ 291.616031][T11829] syz.1.1471 (11829) used greatest stack depth: 16864 bytes left [ 291.721699][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 291.914860][T11848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.534154][T11863] delete_channel: no stack [ 293.084708][T11888] m1Ie5nè‹Ò: entered promiscuous mode [ 293.138641][T11888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1488'. [ 293.231486][T11889] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 293.286780][T11900] xt_hashlimit: size too large, truncated to 1048576 [ 293.297885][T11889] bond2 (unregistering): Released all slaves [ 293.464875][T11888] bond0: entered promiscuous mode [ 293.484862][T11888] gretap0: entered promiscuous mode [ 293.498147][T11888] debugfs: 'hsr1' already exists in 'hsr' [ 293.526667][T11888] Cannot create hsr debugfs directory [ 293.533993][T11888] hsr1: entered promiscuous mode [ 293.572795][T11905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1490'. [ 293.750275][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1492'. [ 293.861594][T11918] netlink: 'syz.3.1495': attribute type 6 has an invalid length. [ 294.054208][T11926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1498'. [ 294.055304][T11932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1500'. [ 294.362652][T11958] netlink: 'syz.2.1507': attribute type 1 has an invalid length. [ 294.409746][T11958] bond7: entered promiscuous mode [ 294.415447][T11958] 8021q: adding VLAN 0 to HW filter on device bond7 [ 294.534518][T11970] netlink: 'syz.4.1508': attribute type 1 has an invalid length. [ 294.569146][T11970] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.582399][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1508'. [ 294.977592][T11995] lo speed is unknown, defaulting to 1000 [ 295.014602][ T8675] IPVS: starting estimator thread 0... [ 295.116709][T11997] IPVS: using max 29 ests per chain, 69600 per kthread [ 295.966548][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 295.974711][ C0] lec:lec_tx_timeout: lec0 [ 295.980291][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 295.996171][ T5830] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 296.030119][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 296.030149][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 296.030160][ T5830] Call Trace: [ 296.030166][ T5830] [ 296.030173][ T5830] dump_stack_lvl+0xe8/0x150 [ 296.030203][ T5830] dump_header+0xd3/0x4c0 [ 296.030228][ T5830] oom_kill_process+0x3ab/0x970 [ 296.030260][ T5830] out_of_memory+0x106c/0x1410 [ 296.030284][ T5830] ? try_charge_memcg+0xba6/0x1560 [ 296.030313][ T5830] ? __pfx___mutex_lock+0x10/0x10 [ 296.030343][ T5830] ? __pfx_out_of_memory+0x10/0x10 [ 296.030365][ T5830] ? do_raw_spin_unlock+0xf5/0x210 [ 296.030393][ T5830] try_charge_memcg+0xc53/0x1560 [ 296.030438][ T5830] ? __pfx_try_charge_memcg+0x10/0x10 [ 296.030471][ T5830] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 296.030502][ T5830] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 296.030567][ T5830] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 296.030601][ T5830] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 296.030638][ T5830] __swap_cache_prepare_and_add+0xe8/0x760 [ 296.030675][ T5830] ? page_rmappable_folio+0x9a/0x170 [ 296.030706][ T5830] swap_cache_alloc_folio+0xf1/0x240 [ 296.030737][ T5830] swap_cluster_readahead+0x53a/0x690 [ 296.030772][ T5830] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 296.030814][ T5830] ? get_vma_policy+0x27b/0x3c0 [ 296.030838][ T5830] swapin_readahead+0x196/0xc50 [ 296.030869][ T5830] ? swap_table_get+0x1e/0x260 [ 296.030899][ T5830] ? __pfx_swapin_readahead+0x10/0x10 [ 296.030925][ T5830] ? swap_table_get+0x1e/0x260 [ 296.030947][ T5830] ? swap_table_get+0x1e/0x260 [ 296.030967][ T5830] ? swap_table_get+0x1e/0x260 [ 296.030991][ T5830] ? swap_table_get+0x216/0x260 [ 296.031015][ T5830] ? swap_cache_get_folio+0x513/0x520 [ 296.031046][ T5830] do_swap_page+0x56f/0x5a20 [ 296.031092][ T5830] ? do_swap_page+0x127/0x5a20 [ 296.031112][ T5830] ? __pfx_do_swap_page+0x10/0x10 [ 296.031131][ T5830] ? __pte_offset_map+0x1ae/0x240 [ 296.031161][ T5830] ? pte_offset_map_rw_nolock+0xea/0x160 [ 296.031190][ T5830] handle_mm_fault+0x12d2/0x3310 [ 296.031231][ T5830] ? handle_mm_fault+0xee/0x3310 [ 296.031264][ T5830] ? __pfx_handle_mm_fault+0x10/0x10 [ 296.031287][ T5830] ? lock_vma_under_rcu+0x45a/0x500 [ 296.031344][ T5830] do_user_addr_fault+0xa73/0x1340 [ 296.031380][ T5830] ? rcu_is_watching+0x15/0xb0 [ 296.031409][ T5830] ? trace_page_fault_user+0x84/0x1e0 [ 296.031440][ T5830] exc_page_fault+0x6a/0xc0 [ 296.031466][ T5830] asm_exc_page_fault+0x26/0x30 [ 296.031485][ T5830] RIP: 0033:0x7fce8b15d04e [ 296.031505][ T5830] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 296.031523][ T5830] RSP: 002b:00007fff38876428 EFLAGS: 00010246 [ 296.031550][ T5830] RAX: 0000000000000000 RBX: 000055557433b500 RCX: 00007fce8b15d04e [ 296.031563][ T5830] RDX: 00007fff38876480 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.031576][ T5830] RBP: 00007fff388764ec R08: 0000000000000000 R09: 0000000000000000 [ 296.031588][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 296.031599][ T5830] R13: 00000000000927c0 R14: 0000000000048172 R15: 00007fff38876540 [ 296.031632][ T5830] [ 296.033674][ T5830] memory: usage 307200kB, limit 307200kB, failcnt 535 [ 296.364281][ T5830] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 296.372355][ T5830] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 296.379759][ T5830] Memory cgroup stats for /syz1: [ 296.380208][ T5830] cache 4096 [ 296.388481][ T5830] rss 0 [ 296.391277][ T5830] rss_huge 0 [ 296.394487][ T5830] shmem 0 [ 296.397548][ T5830] mapped_file 0 [ 296.401033][ T5830] dirty 0 [ 296.403988][ T5830] writeback 0 [ 296.407353][ T5830] workingset_refault_anon 10 [ 296.411966][ T5830] workingset_refault_file 22 [ 296.416971][ T5830] swap 188416 [ 296.420498][ T5830] swapcached 245760 [ 296.424365][ T5830] pgpgin 42332 [ 296.428102][ T5830] pgpgout 42327 [ 296.431653][ T5830] pgfault 65758 [ 296.435144][ T5830] pgmajfault 10 [ 296.439725][ T5830] inactive_anon 16384 [ 296.443818][ T5830] active_anon 0 [ 296.447682][ T5830] inactive_file 0 [ 296.451407][ T5830] active_file 4096 [ 296.455165][ T5830] unevictable 0 [ 296.459119][ T5830] hierarchical_memory_limit 314572800 [ 296.464569][ T5830] hierarchical_memsw_limit 9223372036854771712 [ 296.471273][ T5830] total_cache 4096 [ 296.475055][ T5830] total_rss 0 [ 296.478865][ T5830] total_rss_huge 0 [ 296.482650][ T5830] total_shmem 0 [ 296.486154][ T5830] total_mapped_file 0 [ 296.490517][ T5830] total_dirty 0 [ 296.494042][ T5830] total_writeback 0 [ 296.498188][ T5830] total_workingset_refault_anon 10 [ 296.503375][ T5830] total_workingset_refault_file 22 [ 296.508829][ T5830] total_swap 188416 [ 296.512700][ T5830] total_swapcached 245760 [ 296.517349][ T5830] total_pgpgin 42332 [ 296.521301][ T5830] total_pgpgout 42327 [ 296.525504][ T5830] total_pgfault 65758 [ 296.529936][ T5830] total_pgmajfault 10 [ 296.534080][ T5830] total_inactive_anon 16384 [ 296.539256][ T5830] total_active_anon 0 [ 296.543315][ T5830] total_inactive_file 0 [ 296.547835][ T5830] total_active_file 4096 [ 296.552142][ T5830] total_unevictable 0 [ 296.556154][ T5830] anon_cost 0 [ 296.559839][ T5830] file_cost 0 [ 296.563210][ T5830] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1515,pid=11999,uid=0 [ 296.580646][ T5830] Memory cgroup out of memory: Killed process 11999 (syz.1.1515) total-vm:102360kB, anon-rss:1240kB, file-rss:22796kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 297.115316][T11935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.313280][T12018] lo: entered allmulticast mode [ 297.339587][T12018] lo: left allmulticast mode [ 297.384563][T12028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1524'. [ 297.442889][T12028] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1524'. [ 297.535335][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'. [ 297.804981][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1528'. [ 297.841688][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'. [ 297.894423][T12044] openvswitch: netlink: Message has 496 unknown bytes. [ 297.921166][T12044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.188423][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1532'. [ 298.763589][T12091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1538'. [ 298.807958][T12092] bridge_slave_0 (unregistering): left allmulticast mode [ 298.841612][T12092] bridge_slave_0 (unregistering): left promiscuous mode [ 298.886859][T12092] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.143658][T12114] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 299.619630][T12133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1550'. [ 299.660157][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1551'. [ 299.798753][T12133] block nbd0: server does not support multiple connections per device. [ 299.834403][T12133] block nbd0: shutting down sockets [ 299.854425][T12143] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 299.883781][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1554'. [ 300.690506][T12201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.702743][T12199] syzkaller0: entered promiscuous mode [ 300.717961][T12199] syzkaller0: entered allmulticast mode [ 300.986534][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 300.994780][ C0] lec:lec_tx_timeout: lec0 [ 300.999717][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 301.012732][T12215] netlink: 'syz.4.1573': attribute type 2 has an invalid length. [ 301.062125][T12215] l2: entered promiscuous mode [ 301.321305][T12224] lo speed is unknown, defaulting to 1000 [ 302.566744][T12274] __nla_validate_parse: 6 callbacks suppressed [ 302.566766][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1588'. [ 302.810899][T12278] bond8 (unregistering): Released all slaves [ 303.147557][T11795] udevd[11795]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 303.205428][T12298] delete_channel: no stack [ 303.322106][T12297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.343563][T12297] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.385172][T12297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.702137][T12327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.868095][T12327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.925795][T12327] netlink: 'syz.0.1599': attribute type 1 has an invalid length. [ 303.957679][T12327] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1599'. [ 304.433964][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1609'. [ 305.783373][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1621'. [ 306.006847][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 306.015001][ C0] lec:lec_tx_timeout: lec0 [ 306.020332][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 306.065052][T12417] bond3: entered promiscuous mode [ 306.075154][T12417] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.113738][T12405] team_slave_0: left promiscuous mode [ 306.120543][T12405] team_slave_0: left allmulticast mode [ 306.129684][T12405] team0 (unregistering): Port device team_slave_0 removed [ 306.137573][T12405] team_slave_1: left promiscuous mode [ 306.182236][T12405] team_slave_1: left allmulticast mode [ 306.190959][T12405] team0 (unregistering): Port device team_slave_1 removed [ 306.272085][T12433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1623'. [ 307.787531][T12385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.218607][T12482] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 308.490340][T12497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1639'. [ 308.589345][T12500] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 309.621510][T12521] lo speed is unknown, defaulting to 1000 [ 309.671606][T12528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1647'. [ 309.903842][T12540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1649'. [ 309.938959][T12540] tipc: Invalid UDP bearer configuration [ 309.939019][T12540] tipc: Enabling of bearer rejected, failed to enable media [ 310.184365][T12544] x_tables: duplicate underflow at hook 1 [ 310.628360][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'. [ 310.854707][T12574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1658'. [ 311.026539][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 311.034663][ C0] lec:lec_tx_timeout: lec0 [ 311.039590][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 311.158972][T12590] sctp: [Deprecated]: syz.0.1664 (pid 12590) Use of int in max_burst socket option. [ 311.158972][T12590] Use struct sctp_assoc_value instead [ 311.214934][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1664'. [ 311.784069][T12621] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1675'. [ 311.914385][T12625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1675'. [ 312.250284][T12648] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 312.402624][T12654] ip6erspan0: entered promiscuous mode [ 312.408454][T12654] ip6erspan0: entered allmulticast mode [ 312.459307][T12660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1680'. [ 312.850889][T12676] netlink: 'syz.2.1685': attribute type 1 has an invalid length. [ 312.890008][T12680] macvlan2: entered promiscuous mode [ 312.895399][T12680] hsr0: entered promiscuous mode [ 312.905245][T12680] hsr0: left promiscuous mode [ 312.928587][T12672] netlink: 'syz.1.1682': attribute type 1 has an invalid length. [ 312.953717][T12672] netlink: 'syz.1.1682': attribute type 2 has an invalid length. [ 312.996142][T12676] 8021q: adding VLAN 0 to HW filter on device bond8 [ 313.024987][T12684] veth5: entered promiscuous mode [ 313.038508][T12684] bond8: (slave veth5): Enslaving as an active interface with an up link [ 313.098639][T12690] netlink: 'syz.3.1686': attribute type 1 has an invalid length. [ 313.130504][T12690] netlink: 'syz.3.1686': attribute type 1 has an invalid length. [ 313.361187][T12701] lo speed is unknown, defaulting to 1000 [ 313.853705][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1692'. [ 313.881781][T12716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1693'. [ 313.929888][T12716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1693'. [ 313.961133][T12720] xt_socket: unknown flags 0x50 [ 314.599821][T12743] bond9: entered promiscuous mode [ 314.626415][T12743] bond9: entered allmulticast mode [ 314.649379][T12743] 8021q: adding VLAN 0 to HW filter on device bond9 [ 314.765640][T12755] delete_channel: no stack [ 314.790798][T12755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1701'. [ 315.560036][T12792] netlink: 'syz.0.1708': attribute type 1 has an invalid length. [ 315.584190][T12792] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 316.046657][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 316.063068][ C0] lec:lec_tx_timeout: lec0 [ 316.069890][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 316.105920][ T8679] IPVS: starting estimator thread 0... [ 316.198424][T12826] IPVS: using max 27 ests per chain, 64800 per kthread [ 316.607928][T12806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 316.892735][T12844] netlink: 'syz.1.1719': attribute type 10 has an invalid length. [ 316.896075][T12845] netlink: 'syz.1.1719': attribute type 10 has an invalid length. [ 317.173738][T12863] x_tables: duplicate underflow at hook 1 [ 317.213137][T12865] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.1723'. [ 317.240593][T12865] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1723'. [ 317.361527][ T7722] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.393915][ T7722] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.415971][ T7722] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.434876][ T7722] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.451731][ T7722] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.495818][ T7722] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.539762][ T7722] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.571365][ T7722] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.677380][T12886] openvswitch: netlink: Key 22 has unexpected len 1203 expected 4 [ 317.713047][T12885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1729'. [ 317.722810][T12889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1729'. [ 317.737976][T12888] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1730'. [ 317.854273][T12888] lo speed is unknown, defaulting to 1000 [ 317.871924][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1731'. [ 318.002584][T12893] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.101289][T12896] bond4 (unregistering): Released all slaves [ 319.138515][T12949] __nla_validate_parse: 2 callbacks suppressed [ 319.138533][T12949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1740'. [ 319.179692][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1740'. [ 319.252675][T12943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1740'. [ 319.302415][T12949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1740'. [ 319.387509][T12956] netlink: 'syz.1.1744': attribute type 1 has an invalid length. [ 319.430354][T12959] netlink: 'syz.1.1744': attribute type 1 has an invalid length. [ 319.543559][T12959] bond4: entered promiscuous mode [ 319.558050][T12959] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.591637][T12956] ipvlan3: entered allmulticast mode [ 319.597345][T12956] bond4: entered allmulticast mode [ 319.613409][T12971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1745'. [ 319.684635][T12959] bond4: (slave bridge5): making interface the new active one [ 319.692473][T12959] bridge5: entered promiscuous mode [ 319.698520][T12959] bridge5: entered allmulticast mode [ 319.705744][T12959] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 319.847434][ T42] IPVS: starting estimator thread 0... [ 319.968337][T12973] IPVS: using max 25 ests per chain, 60000 per kthread [ 320.165142][T12987] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1749'. [ 320.242227][T12983] tipc: Enabled bearer , priority 0 [ 320.302207][T12986] syzkaller0: MTU too low for tipc bearer [ 320.328608][T12986] tipc: Disabling bearer [ 320.410705][ C0] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 321.082915][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 321.091054][ C0] lec:lec_tx_timeout: lec0 [ 321.103669][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 321.236278][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 321.690935][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1759'. [ 321.797987][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1760'. [ 322.232749][T13037] siw: device registration error -23 [ 322.262023][T13037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1763'. [ 326.929288][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 326.937398][ C0] lec:lec_tx_timeout: lec0 [ 326.947759][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 327.589103][T13084] lo speed is unknown, defaulting to 1000 [ 328.623557][T13122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1781'. [ 328.694630][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 329.191028][T13124] netlink: 'syz.4.1783': attribute type 2 has an invalid length. [ 329.633723][T13137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1788'. [ 329.656740][T13133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1786'. [ 329.751901][T13141] netlink: 210832 bytes leftover after parsing attributes in process `syz.1.1788'. [ 329.864111][T13149] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1789'. [ 330.895183][T13167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1792'. [ 330.956910][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1792'. [ 331.008455][T13157] lo speed is unknown, defaulting to 1000 [ 331.959964][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 331.968109][ C0] lec:lec_tx_timeout: lec0 [ 331.981563][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 333.718834][T13211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1803'. [ 333.769413][T13211] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1803'. [ 335.021366][T13239] ip6tnl2: entered allmulticast mode [ 335.054090][T13233] lo speed is unknown, defaulting to 1000 [ 335.933020][ T7722] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.947817][ T7722] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.985141][ T7722] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.014145][ T7722] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.212027][T13235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1810'. [ 337.003317][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 337.011541][ C0] lec:lec_tx_timeout: lec0 [ 337.024307][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 337.220512][T13286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1821'. [ 337.319065][T13283] delete_channel: no stack [ 338.478334][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1825'. [ 339.136076][T13313] lo speed is unknown, defaulting to 1000 [ 340.982632][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 341.124602][T13354] bond0: Unable to set down delay as MII monitoring is disabled [ 341.437863][T13363] syzkaller0: entered promiscuous mode [ 341.464039][T13363] syzkaller0: entered allmulticast mode [ 341.894861][T13380] netlink: 'syz.2.1842': attribute type 3 has an invalid length. [ 341.909649][T13380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1842'. [ 341.999208][T13375] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1842'. [ 342.038758][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 342.046869][ C0] lec:lec_tx_timeout: lec0 [ 342.063896][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 342.504135][T13388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1843'. [ 342.570998][T13392] netlink: 'syz.4.1845': attribute type 1 has an invalid length. [ 342.693079][T13402] netlink: 'syz.1.1846': attribute type 13 has an invalid length. [ 342.748522][T13392] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 342.772280][T13402] netlink: 'syz.1.1846': attribute type 17 has an invalid length. [ 343.582724][T13402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.605935][T13402] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.619967][T13402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.643175][ T42] lo speed is unknown, defaulting to 1000 [ 343.663685][ T42] syz2: Port: 1 Link ACTIVE [ 344.120665][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'. [ 344.182553][T13433] netlink: 'syz.2.1850': attribute type 5 has an invalid length. [ 344.269326][T13433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1850'. [ 344.898009][T13433] geneve3: entered promiscuous mode [ 345.591254][T13433] geneve3: entered allmulticast mode [ 347.085571][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 347.093772][ C0] lec:lec_tx_timeout: lec0 [ 347.110526][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 348.396748][ C1] sched: DL replenish lagged too much [ 351.974714][ T7722] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 352.538660][ T7722] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 352.941812][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 352.950006][ C0] lec:lec_tx_timeout: lec0 [ 355.923533][ T7722] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 356.004905][ T7722] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 380.592247][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 385.904053][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5300 ms [ 385.912252][ C0] lec:lec_tx_timeout: lec0 [ 389.752080][ T6518] lec:lec_start_xmit: lec0:No lecd attached [ 394.938068][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5180 ms [ 394.946138][ C0] lec:lec_tx_timeout: lec0 [ 396.286106][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 396.313527][ T5839] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 398.159364][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.235703][T13466] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 401.835452][ T5839] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 402.475981][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 402.500405][ T5839] Bluetooth: hci7: unexpected event for opcode 0x0c03 [ 403.356054][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 405.454432][T13473] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 413.852670][ T5839] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 414.853060][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 414.892019][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 416.395945][T13478] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 430.191886][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 430.802220][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 431.416064][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 431.911133][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 432.161186][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 435.281402][ T5825] Bluetooth: hci0: command tx timeout [ 437.433793][ T5839] Bluetooth: hci0: command tx timeout [ 437.529334][T13470] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 437.720259][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 437.775969][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 437.974937][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.467988][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.603670][ T5839] Bluetooth: hci0: command tx timeout [ 441.387389][ T5839] Bluetooth: hci2: command tx timeout [ 441.474575][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 441.818423][ T5839] Bluetooth: hci0: command tx timeout [ 443.456152][ T5839] Bluetooth: hci2: command tx timeout [ 445.684616][ T5839] Bluetooth: hci2: command tx timeout [ 446.938328][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms [ 446.946381][ C0] lec:lec_tx_timeout: lec0 [ 447.810652][ T5839] Bluetooth: hci2: command tx timeout [ 451.988583][ T5825] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 454.476420][ T6518] lec:lec_start_xmit: lec0:No lecd attached [ 459.900366][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 459.908488][ C0] lec:lec_tx_timeout: lec0 [ 460.862669][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 461.094924][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 461.549415][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 461.761583][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.319012][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 464.745497][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 465.339984][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 465.474924][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 466.853080][ T5839] Bluetooth: hci3: command tx timeout [ 467.563295][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 467.789841][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 469.218176][ T5839] Bluetooth: hci3: command tx timeout [ 470.523192][ T5839] Bluetooth: hci5: command tx timeout [ 471.311912][ T5825] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 471.394812][T13470] Bluetooth: hci3: command tx timeout [ 471.804550][ T5825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 471.899279][ T5825] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 472.067550][ T5825] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 472.611603][ T5825] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 472.653918][T13470] Bluetooth: hci5: command tx timeout [ 473.521287][ T5825] Bluetooth: hci3: command tx timeout [ 474.783471][ T5825] Bluetooth: hci5: command tx timeout [ 475.673896][ T5825] Bluetooth: hci6: command tx timeout [ 476.905304][ T5825] Bluetooth: hci5: command tx timeout [ 477.771667][ T5825] Bluetooth: hci6: command tx timeout [ 479.915214][ T5825] Bluetooth: hci6: command tx timeout [ 481.985420][ T5825] Bluetooth: hci6: command tx timeout [ 503.572234][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 507.215397][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 507.324592][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 508.481269][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 508.937795][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 508.945861][ C0] lec:lec_tx_timeout: lec0 [ 509.133612][ T5831] syz_tun (unregistering): left allmulticast mode [ 509.578564][T13470] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 509.710675][T13470] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 513.477338][T13470] Bluetooth: hci1: command tx timeout [ 515.595232][T13470] Bluetooth: hci1: command tx timeout [ 517.750775][T13470] Bluetooth: hci1: command tx timeout [ 518.552796][ T6518] lec:lec_start_xmit: lec0:No lecd attached [ 519.928653][T13470] Bluetooth: hci1: command tx timeout [ 523.891653][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 523.899760][ C0] lec:lec_tx_timeout: lec0 [ 528.524104][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 528.631121][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 528.738331][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 528.891838][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 529.194760][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 533.552654][ T5839] Bluetooth: hci7: command tx timeout [ 536.223269][ T5839] Bluetooth: hci7: command tx timeout [ 537.029441][T13470] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 537.196288][T13470] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 537.373293][T13470] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 538.174515][T13470] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 538.310522][T13470] Bluetooth: hci7: command tx timeout [ 538.359178][T13470] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 540.404933][ T5825] Bluetooth: hci7: command tx timeout [ 541.054821][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 541.290682][ T5825] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 541.623030][ T5825] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 542.251456][ T5825] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 542.372326][ T5825] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 542.550037][ T5825] Bluetooth: hci8: command tx timeout [ 543.279747][ T5840] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 544.658919][ T5840] Bluetooth: hci8: command tx timeout [ 544.891491][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 546.198300][ T5840] Bluetooth: hci9: command tx timeout [ 546.722732][ T5840] Bluetooth: hci8: command tx timeout [ 547.081398][T13536] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 548.573285][ T5840] Bluetooth: hci9: command tx timeout [ 549.048407][ T5840] Bluetooth: hci8: command tx timeout [ 550.632996][ T5840] Bluetooth: hci9: command tx timeout [ 552.710460][ T5840] Bluetooth: hci9: command tx timeout [ 560.132512][T13470] Bluetooth: hci0: command 0x0406 tx timeout [ 565.106063][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 565.327515][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 570.926815][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 570.934885][ C0] lec:lec_tx_timeout: lec0 [ 571.268746][ T30] INFO: task kworker/1:1:42 blocked for more than 143 seconds. [ 571.291302][ T30] Not tainted syzkaller #0 [ 571.296306][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.544151][ T30] task:kworker/1:1 state:D stack:23168 pid:42 tgid:42 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 571.721409][ T5839] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 571.987404][ T5839] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 572.235243][ T5839] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 572.563750][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 572.585904][ T30] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 572.882890][ T5839] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 573.092416][ T30] [ 573.095434][ T30] __schedule+0x17b4/0x5680 [ 573.146294][ T5839] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 573.301611][ T30] ? __pfx___schedule+0x10/0x10 [ 573.883782][ T30] ? schedule+0x90/0x360 [ 574.062249][ T30] schedule+0x164/0x360 [ 574.082676][ T30] schedule_preempt_disabled+0x13/0x30 [ 575.042766][ T30] __mutex_lock+0x7f5/0x1550 [ 575.381499][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 575.552423][ T30] ? __mutex_lock+0x606/0x1550 [ 576.454354][ T30] ? reg_check_chans_work+0xab/0x1090 [ 577.409487][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 577.466040][ T30] ? add_lock_to_list+0xc7/0x100 [ 577.952067][ T30] ? process_scheduled_works+0xa70/0x1860 [ 578.070780][ T6518] lec:lec_start_xmit: lec0:No lecd attached [ 578.624247][ T30] reg_check_chans_work+0xab/0x1090 [ 579.249848][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 579.759622][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 579.907803][ T30] ? process_scheduled_works+0xa70/0x1860 [ 579.913633][ T30] ? process_scheduled_works+0xa70/0x1860 [ 580.846026][ T30] ? process_scheduled_works+0xa70/0x1860 [ 581.007213][ T30] ? process_scheduled_works+0xa70/0x1860 [ 581.013136][ T30] process_scheduled_works+0xb5d/0x1860