last executing test programs: 36.568347557s ago: executing program 2 (id=3927): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\xca'}, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1, 0xffffffff, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000180)={0x0, 0x80}) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800) 32.994316997s ago: executing program 2 (id=3939): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200008f0800000000000000000000850000006100000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @multicast1, {0x10, 0x4, 0x2, 0x35, 0x9, 0x67, 0x1, 0x5, 0x6c, 0x8, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x9f, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0x7fffffff}]}, @lsrr={0x83, 0x17, 0x5b, [@dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}}}, 0x0) socketpair(0x8, 0x1, 0xff, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000180)={0xffffffffffffffff, 0x8, 0xf, 0x3, @vifc_lcl_addr=@loopback, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x36, 0x0, &(0x7f0000000580)="ac0000000000ec67838717bd86ddbd6e902562ac5675da63a84744c677777570e8bd8e1450c4e68db8b8f5853e524b918ea6e4db95eb", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x21) 32.885075527s ago: executing program 2 (id=3941): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811248000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x23c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811248000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x23c}}, 0x0) (async) 32.556999178s ago: executing program 2 (id=3943): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "a7fd6a5c3705ba85"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x4008810) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x1}}, 0x10) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r8, 0x303, 0x70bd29, 0x10000000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xba}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', r7, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r12, &(0x7f0000000640)=[{&(0x7f0000000100)="afa63660", 0x4}], 0x1) recvmsg$unix(r12, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) close(r13) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r10, &(0x7f0000000600)=ANY=[@ANYBLOB="08000800070303000200140000004610002c00000000082f9078ac1e0101ffffffff94040100810088a8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50a33f2ee328257f29b9"], 0x3a) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r9, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 30.752402601s ago: executing program 0 (id=3948): r0 = socket$pppl2tp(0x18, 0x1, 0x1) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) sendto$inet(r1, &(0x7f0000000200)='%', 0x1, 0x20000805, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 32) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x4, 0x4}, 0x14) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x1, &(0x7f00000000c0)=0xb, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) (async) write$tun(r4, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x8, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x8}}}}, 0x30) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @private}, 0x2, 0x3, 0x2}}, 0x2e) (async) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r6) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80001120}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x84d1}, 0x80) (async, rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async, rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) 30.370072558s ago: executing program 3 (id=3951): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0xc400) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r9, 0x300, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44084}, 0x8000) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) shutdown(r10, 0x1) r12 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4620, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r12, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) setsockopt(r10, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000003e80)={0xa, 0x4e22, 0xb, @remote}, 0x1c, 0x0}}], 0x1, 0x890) 30.040783037s ago: executing program 0 (id=3954): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x5, 0x4) listen(r0, 0x7) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000400)={{0x3, @rose}, [@remote, @rose, @netrom, @remote, @remote, @rose, @remote, @rose]}, &(0x7f0000000480)=0x48) accept$netrom(r2, &(0x7f00000004c0)={{0x3, @default}, [@null, @null, @default, @netrom, @netrom, @null, @default, @rose]}, &(0x7f0000000540)=0x48) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000000)=0x10, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000007a63272bc4f71fb5bdc521ccfac25586100001042abd70000200000000000000", @ANYRES32=0x0, @ANYBLOB="100302003eb7f31a24001280110001006272696467655f736c617665000000000c0005800500090000000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x8c0) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r6, &(0x7f0000000180)="0b0312002e1264000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r8}, 0x14) recvfrom$packet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000003c0)='hsr0\x00', 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000506b92e9ed5c96f208aab389e87a7d6890998c26426e05ae1a1aea25beae2cd8d960d4d9408fc281b982fb0d20fc9d05b75b833b1b50bab3731cd5139feb584f6f18f2816c6248a1ebe4830dfa6e01f259bc02ba082f0b4686b4239442cc4b016f7d6e9c0f8c390057efddd531767304d20a87c104567344b1b3d348c7e3e652e291e3a231c0d9268ba923ee749fabe3bed75bdd9cb18cf856d3c0fe1d7af421782a6bb159a5576150c1f8fe2dd36a0c0b145c632e646e326d62fd6fd02057e7d2ae9f879bc5fcefba18bae99b594ca0f216fdd81d9647ce61", @ANYRES16=r11, @ANYBLOB="050427bd7000fddbdf250100000008000100", @ANYRES32=r12, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f616463617374000000"], 0x60}, 0x1, 0x0, 0x0, 0x4008441}, 0x44084) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 29.704237175s ago: executing program 3 (id=3956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000000002000000480004802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000081800018011004700666c6f775f6f66666c6f6164000000000900010073797a30000000000975d15c0bd4428cd6000000140000001100010000000000000000000000000a47d276e37fb141c54f8dc0348ded6ab96e90c1fb4ffeaea687fdaef0bf8de34134c0e0ec71516e23ea00d5ce2e4b7413832fad5f30950e25dc1d799dcf630dc5f8563e25d026f9671d601a0a05cf85"], 0x9c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x30}}, 0x0) r6 = socket(0x2b, 0x80801, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x4, 0x247d, 0x4, @remote, @mcast1, 0x700, 0x8, 0x3a, 0xe9f4}}) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x3, 'geneve1\x00', {0x9}, 0xf}) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@in={0x2, 0x4e20, @local}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)="899590450815a4e0a055c1b3338bd855", 0x10}, {&(0x7f0000000300)="56bba1aa6ec20bdaec50368103d09e2f13c0347f4169f0a7b165c3e57bdc00364acebf08b298d6d0a707782d863fc65ab2f0851ec8aa799f57402a9d853d7c57f39df3259091565419ee38304e338eadb5d58c99f9b4f108eb191c8aa2f112bbd9ba70a6711d15b06fcdf02b4a33fb8c28f0ff41e4501c2468116100ac55f6f7927b7c7522097307fb993f4db3c7e4df1aa1280cc83cb282618d1740ed02f6dbecf73ca616f7c48942644b7da9b0dec553554a55e833", 0xb6}, {&(0x7f00000003c0)="d83694a7fa2f6cbbde34c12033b3c2877d7a2c0dfa49e4e072cb600d69c4a31795cb1d096fc4ecb1c1bde03c050dc673ef78c17c022c1ae73795aeb892944d4b58a7717ef6b10cccce96b7a82a967904faea7895ec86b172ef3f21d2ef12118b91a3351d4456ac506f9414cee9e3a199c7fc14316a9648494d63329f9373724d1b063692c3d53033d8bf9b83cd6d26d2afb7f0a7704873e32ed3b4ff2565aed66e4e0d9dfcb1002d1ae3db89659c881d597704b5f22e1ed68ffafafa2792f9b1a30775d83c", 0xc5}, {&(0x7f00000004c0)="dfaf57d52d5dd2ab219f824eabad3b001b7c665cda33d1e383d41dbfff982c2c7f840c5759957051956b638777cdbebadb164b6d806d39b410ae7bf5a29e6619eacebcac15101daff86e39c7766da737ca56de7c55a1c4f8340bde3c32f8d5beb73e7e0d5dc097a0f7929c7e44eb950f8a2ac4b92138e058ddc66553f7b451e45bb636a4bf84db31354c2fe3df69ced82300b3ad6e59a62f0c23fb9edbb9ecb2d56009817c534aafe83c5e6c3c00c90f617a9af1f929616877", 0xb9}, {&(0x7f0000000140)="6077e6bd6727a5fe2d1f4567717416c027541b39487ca03bd88e205a5e880c44c0279e2f85d841760bff52fe0def51de3b2cc4c0629924447a0c4eede03ef2e1b52879ed9697ad92d0f8390029d18db49e9647153efd77014fcdb512d5bf24c0ca03a1d8f3410df7b22f4cbf1cb423514ead4e02", 0x74}, {&(0x7f0000000580)="c0486281896d1f0d549a33a7792a8187698230dc06a53cf8aff02ec757192bb20dc839782f10bc1a8ebe6dff23b34079e7ef5d9c5d3882bfa621111376e6c306bbbfe02224b738809e7420d78d4b3041bc7dab7a44a45b701531bc08a72fb09f69876c49b468c9f429124c25ac0ce421e76031e024aa3931f5e8c0995e7e", 0x7e}], 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x10b8}, 0x800) 29.182846072s ago: executing program 3 (id=3960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x3, [@var={0x5, 0x0, 0x0, 0xe, 0x5, 0x2}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x3, 0x3}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x2}]}, @float={0x8, 0x0, 0x0, 0x10, 0x2}, @enum={0x2, 0x4, 0x0, 0x6, 0x4, [{0x5, 0xfffeffff}, {0xd, 0x4}, {0x4, 0xfffffffd}, {0xa}]}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x3, 0xa}, @typedef={0x7, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x2e]}}, &(0x7f0000000140)=""/18, 0xa3, 0x12, 0x1, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', r1, r2, 0x4, 0x4, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xe1, 0xaf, &(0x7f0000000340)="24c826caa799b816e2f410ff35358665afc6fd8ea24e52c4037cd7a81b98e938eff887827c6e05067928263fb2f979bfb6cb4f99639e63d02facc5a57a6639e482f8c542c5702af9073005f7150b503c70329a3639801fb8eec79a95ab25834ff7108212ff006859c1162fb1167c48768a30b4c08e8e0ac5208a233788e7df29b5a4b0590a56a3f07ccefdcb36471af0dfcd955cf9d235ca3030368981f1fdd1ee8d9870967a8f42adcf5f8f371cde6b2e429d1d7fede56a87c3b746e900a762f14b1efde66000a6d4ccec1d8748cf09261a60fa28dd33c745ed2b30b870123475", &(0x7f0000000440)=""/175, 0xffff8000, 0x0, 0xa9, 0x6a, &(0x7f0000000500)="dffc0c783adf7eaaec7ad6b8f06b3b4f68ff09c5b3dd0782a69688f93c8a58a939da867d2cbee7236dc155679c16c17896c1983aa50c4fab0c62f8fcb03b5e6362e43ad8c618860b0f2f5fc67eea484199b5504665539f030869daf4f840ef29366779285ca8b6bc4d10ca0e63f1db3d8ee844d825f755f65c18a9397d17c0678f5fb9048543826da2ae4d0fd865a67b06a571f3612a9d5cbd327c321794c9ecd3f22cf6ef5beb9afb", &(0x7f00000005c0)="31a2ec78c605d84a88738eafbbf41dd17614118662640c23b82720f95d4f20973eb28185d5b8116b4ffc40dd5923a766644d99dfb8f71883bf9bdc2cebb39c4c941e6bd5365664540061db3c77f6ffb2034c0b7e6297e067f22ae7c0770c6a4c72ede2acae570e4ab949", 0x4, 0x0, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 28.952893485s ago: executing program 0 (id=3963): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000020000000000000000000f03ffff0063d038000000000000000f01000000de0000"], 0x0, 0x36}, 0x28) r2 = socket(0xa, 0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x238, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x20c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x238}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000633cf0c10ceaa0e3fd1aa97e576bdbb9d738ba2e3400910000000000000400cb0151c23c70f668e36fba11e5396828cf2bc171aecac0c543085784e4bab8b387d14491f9790bdd4e408008384fb509b3c54718861800abb164283f5b25da29c833e684", @ANYRES16=r1, @ANYBLOB="010030bd7000000000000100000008000100030000000c00048005000300020000000800020003000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf00000c00098008000200030000000c00028008000900000000008674a0d7535463293ea712778a2489edf94dcce45c5ec8d42ca890fa6bb3b15732214a0248b4bfa3e9fb35b8a848517862877ffc8b7cd85773cb686527c49d0e31c8a8aa81f618ad1cb52ddb6c49802272232c9b4ecaa5f353ff80fc56a27272a24c41c864f86a3c5f1c182690f1d692791f7116414700d4fc041faabd199d598a9754817e5209037143604b9cd3eff52f63ffaca1b8361cb69369d8d1d3b2ee2a8b4b96c87d6f658b81c8d4ccc0d1709b338e78cec3fc"], 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0xffffffffffffff0b}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24008840) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000028000480240001800b0001006578746864720000140002800800f5400000000008000607000000010900010073797a30000000000900020073797a320000000005000740c500000014000000110001000000006ad824cb6200000000000000000aa7179b4d611f47e1fad6d2f23c349e2e814c17c3a49c9175ab1bc50496a7617c33ebb5fcc523992fe00535f66372"], 0x84}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x3c, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) 28.753949204s ago: executing program 3 (id=3964): r0 = socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000040)=0xfffffffe, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @rand_addr=0x64010101, @private}}}], 0x20}, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000040)=0xfffffffe, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @rand_addr=0x64010101, @private}}}], 0x20}, 0x0) (async) 28.331472704s ago: executing program 2 (id=3965): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffcbe, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000600000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000180)={r5, 0x38, "2578bac7061f3447a08504a2446c491a23182dafbb473aafa54eb3ed48ca035bdffd91df4210d2f7aa12cbbe0f09339f6cb8fbb3fba27bbc"}, &(0x7f00000011c0)=0x40) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r9 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x23, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x161}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r6}, @generic={0x0, 0x4, 0x5, 0xe, 0x9}, @alu={0x7, 0x1, 0x6, 0x0, 0xa, 0x100, 0xfffffffffffffffc}, @printk={@lld}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.067594489s ago: executing program 3 (id=3967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88010010}, 0xc, &(0x7f0000000040)={&(0x7f0000002d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x304, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_USERDATA={0x47, 0x7, 0x1, 0x0, "c9c7906c70f58e5a5c49d2f33e530a4057d0e8eeb820622674e3090242f7ef263891f986d903eb4870b9fd4be91860d87f6afcebcf89be28b85f24f647e254d3e7d99a"}, @NFTA_RULE_EXPRESSIONS={0x2a8, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x22c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x21c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x91, 0x3, "33a7726dec2a7488886b113a4a58793a0995914f7ae2667e7a0ed041097af67787bc1c8f05f824ede92a1d17d562324fc6634e59dd0f11d9b73b788465b7fac29edc7ab013c5f718124f284bb9019e4cc3da9e58064509f6f34d2a22dac6b715104a89e548822cd8eb6374d201c8366d97be59fd0cf4890400c2cc30c560c3d66d89ae171e1ca5f074504158e0"}, @NFTA_TARGET_INFO={0xbd, 0x3, "c2fa62795bb09fb934c1870f0e2ca5fc1407b3c6c13eb059479885fa6d4eade819eda9c76df19cb7f5939c035a07aca7269543b3b2f4a070d72a1dc8da4daddc9de803fe1ec8c4b2e8fe9bd3ba2ccef07595d4b779fc5101cc4290bae510003bbe0dd08120e4883241383450eed4ba604dadbda9d6fcc27fb6402a475c42cf302e8b53018e83dd1f119865a80ba373fb30238c91ac88f80b83368df584230d6639c82b97a2337ce94474cf42f6d40785119ea336333d0dcc87"}, @NFTA_TARGET_NAME={0x9, 0x1, 'DSCP\x00'}, @NFTA_TARGET_INFO={0x20, 0x3, "5365f9277432f92b30b1797c806013adab7087633df92d5fe21e9c17"}, @NFTA_TARGET_INFO={0x7b, 0x3, "a7f3c7e7a66802c5434c2ca9025737ed1ce1e9e53bc06f41afa9998699684969f3cd43407309a7952095d7885f69a410f75376a213f560d0af2a24967b06fd4bd2f6e11c0e139bebcdd28c4db9e718c96d402c3d545bfcd3edabe31c2a7b5bf3061675d74120f5311efe323d4e460760fb7d1ad5981bdd"}, @NFTA_TARGET_NAME={0x7, 0x1, 'CT\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_QUEUE_FLAGS={0x6}]}}}]}]}, @NFT_MSG_DELRULE={0x204, 0x8, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xbc, 0x7, 0x1, 0x0, "f0cb606888e38bf332898a147540102bda605175c42418906a71514dfbb99a29e3a21b2ab8c44c594cbe4f434bb10f160c5e447cf8aa091b415fcd310d3532e27aeaf9c95fdb5ae3cf9857879800a3c7952a2933972c8e64583e8c7ca6b6d58cf8a6f7c9d46239100c68256c43d0f8d6134387d72c4fe2275505390deedfcc614d3cbbc68efb8652ff8571d0e26fd84832e7e03879e0d7c3f7648bb07294ebbb4c8a7023962c36f725d6bf0bdd510f900be611d06cde9f6b"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xfb, 0x7, 0x1, 0x0, "d32dfe62493521ce48b654f72a833b5b0801170beac69901b8e6961e75d5beb09781d330c2da27613338dab4f4190f00d5acc5626582484fee71a0c5f5227d08b4379a1ab1c271e2c14addf6b25d4a4ab699c1be6e90b2ecc18c46e97ff4c42d9077200cf0ec800d47146ebfaf4fa94c709c333da74107cf21cb76005a4ddb4dcf7197816021b30e774a94fffbbe565f6e12910f4132c7307d518072cd026365cf5e73ac2ce823a359ca69fb99de9e09f1f8c943b91260f1676f0d990cbbb0426495ebcef901e72003014cbf88845f3fcfd87606cc169d43accf67f7b53cfb4f42ce592d1830685cba415c9f3b64c927d9c736823cfa15"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x204, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0x20, 0x7, 0x1, 0x0, "fa978e9654db58711a2dd1b970a432547c0c096ef4c2783272929123"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0xfffffffffffffd84, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0x5b, 0x8, "00ffb7d3ee68764b54c0c3ebecfc6dce9b923ac149395b9d49051cac11f4ff7bd651e3d3bf154ce1d1d1df28cb60a47aa914029e611e0edabb6ca1704aacf4a3113ec24974cfb767fb8f55df4e3f44ff0f1904d09c4b7a"}]}, @NFT_MSG_DELSETELEM={0x854, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x528, 0x3, 0x0, 0x1, [{0x4ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x7c, 0x6, 0x1, 0x0, "e10d5a2ee96f101f411a3408960e418987bc9dc8fec8851072a25fccffcf87c2d59eea0430d631831a7d0b6c5a1bbb13482c2423233e593d0e7029e8d76a5a9afbc09aef620be27e5941b71b05b1ec159b268eefddfbb771050604017a78c3dc50d62804649d2a9ed4431e3017bb6bffb3553a303617c6c3"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x99, 0x6, 0x1, 0x0, "58ffd8c74f23059c60ee2417eb31808434cb8a670c1c6140bcc9c0739f01a5e40f66a9a420a4f7e4aff30978349918ce0e52ea798e9670cca78cc3dad4c5eff2c69ec2d15cb59d701048fae265d9c65d82e3f59df1dbc1d6ef51cd12c1d1d522c478779238dc9878cd4ae166ebf752bc45efcd5f147abde9ac2b9b0dc2bf1a59bd1951e024a1a5663865c178bc3f14815eac7c56a4"}, @NFTA_SET_ELEM_EXPRESSIONS={0x16c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x50, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xc55}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x70, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_EXPR={0x24, 0x7, 0x0, 0x1, {{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0xd55a}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x12}]}}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x54, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_DYNSET_SREG_DATA={0x8}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_DATA={0x258, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x62, 0x1, "19afa6a73708c422eac0e199018821e18e406c62d7f2243e9f1d020ff0bd108eebbdad33ff22b4249d31219e4d89d962bb3ee90113542debaca66d253f09a4ed9ff6234625cea82ddb343663f122995adc5bb17514812c1cb602a211f5fc"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x82, 0x1, "ea15b08278b036d024b31a01f1b7548f3bc79c54b72538148edb6a7402f725af530777ab532d3667115c499b71ae27f5fd62efd996621951eaf74ab17be74c94e63f40e78ad128f69b40620e5511da8c9079d03c6b48d2327d1b76764972b3c81450011bf4b09d34cc5b3a711a0879c3970839b0b1d95ae3b7d720f9d129"}, @NFTA_DATA_VALUE={0x54, 0x1, "7c427d9a64d26dbebe3a900c2ad7d2fe14781657f91213bc4be7aaa079736947efc834dc5e3acac0b3f45d1fe8d3a45fa5ebd951cfdc7101c78fefa9f2f15faf86b5d85e5b9bd2a1b54006e100dccf68"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2dc, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x2a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xd0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x65, 0x1, "46ba551540634e87bcc81c43d7b48722cbd56ffd239416b86bc74718d20b40dca8758b06d5adc4175d45f6641e2f8b71e6e70fcecc449bd6915b658a47e98dc56573601093a78fb26aa6c67648f0b2d679e81a96365d637c77009eff6bfb8dd122"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0x45, 0x6, 0x1, 0x0, "8f34515395eae2d4556c0bb4edc9223eb6e7f2888e6605973ffe67661f9d7b7208736d57c3db8c58ba53879a5621eee51d233f971b31082bb70983129816e9f182"}, @NFTA_SET_ELEM_KEY_END={0x150, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x70, 0xb, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_USERDATA={0x2d, 0xd, 0x1, 0x0, "67a032c76f9ccc37be4622ee2c70361154779cd035f142477d1ab14c627947433b7213909bf2a2d718"}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}], {0x14}}, 0xfd8}, 0x1, 0x0, 0x0, 0x20004081}, 0x44) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0xc000) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) r8 = socket(0x28, 0x5, 0x0) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r9, 0x4) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000310f2762e40db254d1460446eda4e886991a984bb7eaf5a05117830e35537acb430dcb54ff8824f5d5ff91fb69d44db0dff67a6452fe73084df2ff1b0f179557ff499f0a1b71ed1b622a147d65475fd243ece3e51d8a24acac71c65498614e951597cef88d711e1d601ec0f8dd56067dc6ab361085d1318c8779f23e112c8a4bf17ec8e8e0b4a337ecc5296323dfe812", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x28002, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r11, 0x0, &(0x7f0000001700)=""/53}, 0x20) r12 = accept$unix(r9, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x447c}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x2eb}}]}, 0x74}}, 0x20000000) sendmmsg(r12, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="d9", 0x1}], 0x1}}], 0x1, 0x20000040) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r6, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x14008880) socket$nl_netfilter(0x10, 0x3, 0xc) 27.481420748s ago: executing program 2 (id=3970): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000040)=0x6, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000280)={0x1f, @none}, 0x8) listen(r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="da11e427e249b71b600160d9a687eac49650f5687031b6f14cb90ea79bcc113bf9c28194ca1cd0aff3dd", 0x2a}, {&(0x7f00000007c0)="5d08eafd9f4420bbe9a060cd39a2039914b88d205dbbb4c97a5880", 0x1b}], 0x2, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="780000002300000125bd7000fbdbdf250000000014000d00ff02000000000000000000000000000108001f000200000010000a002cbd70002bbd7000a04700000c001c00", @ANYRES32=r0, @ANYBLOB="01000000c759a0b1cbf25be6c18075ca972c0013007e80335b23fff0ca08291f0000000000000000000000000036ac5414bb0007ffe1000000db94564e035e20b5d0cae4b25b178487c7051aa0d032d57fe062a1ae2b480b8334bd34db56b23f95eebd7aee3a1ef2294343fe420dab7173d12c2cc53baa7c23821232fcfc2eaeae31513889f04ffc4b90ecc184a9"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, 0x0) recvmsg$qrtr(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/168, 0xa8}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000200)=""/34, 0x22}], 0x4, 0x0, 0x0, 0x101}, 0x38, 0x12040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000440)='wg0\x00', 0x4) r7 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES8=r4, @ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211008001", @ANYRES64=r0], 0x6f4}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) 27.328317286s ago: executing program 0 (id=3972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001"], 0x122}, 0x1, 0x0, 0x0, 0x400c054}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r2, 0xd574370038829967, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 26.927778285s ago: executing program 3 (id=3974): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x43}}}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x100, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 26.650028911s ago: executing program 0 (id=3975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000800bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f00000000c0)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x8, 0x0}, 0x8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0x81}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r2, 0xfffffff7, 0x8}, 0xc) 26.229719039s ago: executing program 0 (id=3977): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f, 0x10}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r2, 0x4, r2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r8, &(0x7f0000003180)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000000800), 0x62, 0x12141, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r9, 0x1, 0x0, 0x400, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="02062bbd7000fcdbdf255d0000001c00a6800a00060008021100000000000a00064008021100000000000800a50001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4024054}, 0x20000000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001540)=0x0, &(0x7f0000001580)=0x4) sendmsg$nl_route_sched(r6, &(0x7f0000001640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xfff3}, {0x4, 0x6}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48044}, 0x4000) 11.826067776s ago: executing program 32 (id=3970): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000040)=0x6, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000280)={0x1f, @none}, 0x8) listen(r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="da11e427e249b71b600160d9a687eac49650f5687031b6f14cb90ea79bcc113bf9c28194ca1cd0aff3dd", 0x2a}, {&(0x7f00000007c0)="5d08eafd9f4420bbe9a060cd39a2039914b88d205dbbb4c97a5880", 0x1b}], 0x2, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="780000002300000125bd7000fbdbdf250000000014000d00ff02000000000000000000000000000108001f000200000010000a002cbd70002bbd7000a04700000c001c00", @ANYRES32=r0, @ANYBLOB="01000000c759a0b1cbf25be6c18075ca972c0013007e80335b23fff0ca08291f0000000000000000000000000036ac5414bb0007ffe1000000db94564e035e20b5d0cae4b25b178487c7051aa0d032d57fe062a1ae2b480b8334bd34db56b23f95eebd7aee3a1ef2294343fe420dab7173d12c2cc53baa7c23821232fcfc2eaeae31513889f04ffc4b90ecc184a9"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, 0x0) recvmsg$qrtr(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/168, 0xa8}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000200)=""/34, 0x22}], 0x4, 0x0, 0x0, 0x101}, 0x38, 0x12040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000440)='wg0\x00', 0x4) r7 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES8=r4, @ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211008001", @ANYRES64=r0], 0x6f4}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) 11.651332901s ago: executing program 33 (id=3974): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x43}}}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x100, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.100502019s ago: executing program 34 (id=3977): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f, 0x10}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r2, 0x4, r2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r8, &(0x7f0000003180)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000000800), 0x62, 0x12141, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r9, 0x1, 0x0, 0x400, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="02062bbd7000fcdbdf255d0000001c00a6800a00060008021100000000000a00064008021100000000000800a50001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4024054}, 0x20000000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001540)=0x0, &(0x7f0000001580)=0x4) sendmsg$nl_route_sched(r6, &(0x7f0000001640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xfff3}, {0x4, 0x6}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48044}, 0x4000) 4.177819412s ago: executing program 1 (id=3993): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r0, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4) (async) setsockopt$inet6_mtu(r0, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@offload={0xc, 0x1c, {r4, 0x6}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080), 0x4) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2b, 'rdma'}, {0x2b, 'blkio'}]}, 0xd) 3.060584638s ago: executing program 1 (id=3996): r0 = socket$inet(0x2, 0x2, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000002ec0)={'netdevsim0\x00', &(0x7f0000002e40)=@ethtool_coalesce={0x4b, 0x3169, 0x9, 0x1, 0x6, 0x9, 0x8, 0x2, 0xfff, 0x10000, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1, 0x5, 0x1, 0x2400, 0x3, 0x9, 0xede, 0x80000000}}) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) (async) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @rand_addr=0x64010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0200000000000000000000000d0000090400000000000000000000040000000000000000000000080000000000000000610027e759ac352801fe641d1cabda9a97900608895344eaa923fcac178a04782a0622d7546593d82f1c8385a7f6b5c1d239bd248ec744ed62337846a0c875c3b89230e3ea0ccfbba9ba69bdc4b8f03a6d90b42dbf79f0d6c9"], 0x0, 0x52}, 0x20) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000080), 0x4) 2.706488207s ago: executing program 1 (id=3997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001680)=""/4086, 0xff6}, {&(0x7f0000001580)=""/238, 0xee}], 0x2}, 0xffffffff}], 0x1, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) (async) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001680)=""/4086, 0xff6}, {&(0x7f0000001580)=""/238, 0xee}], 0x2}, 0xffffffff}], 0x1, 0x2, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}}, 0x0) (async) 1.953160034s ago: executing program 1 (id=4001): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r6, &(0x7f0000000180)={0x27}, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100736977001400330069705f76748f3b66dcbb114e07000000"], 0x38}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f00000001c0)=0x8) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="070000000000000000000800000008000300", @ANYRES32=r4], 0x1c}}, 0x0) 1.815199925s ago: executing program 4 (id=4002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1, 0xa, 0x801}, 0x14}}, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0x7, 0x1, 0x6537, 0x9, 0x339, 0x9, 0x3, 0x6}, 0x0, &(0x7f0000000140), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@local, @broadcast, 0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x3, 0x71, 0x20, @dev={0xfe, 0x80, '\x00', 0x2d}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0xa, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x7800, 0x1, 0x1, 0x80000001, {{0x1d, 0x4, 0x2, 0x7, 0x74, 0x64, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@timestamp_prespec={0x44, 0x4c, 0x7a, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x2}, {@rand_addr=0x64010101, 0x9}, {@local, 0xfffffff7}, {@multicast2, 0x3b5e7040}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010102, 0x7}, {@multicast1, 0x200}, {@broadcast, 0x9}]}, @rr={0x7, 0x13, 0x31, [@broadcast, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=@RTM_DELMDB={0x98, 0x55, 0x100, 0x70bd29, 0x25dfdbfb, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0x1, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xddb3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x1, {@in6_addr=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0x2, {@in6_addr=@loopback, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)={0xe0, 0x2, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_TUPLE={0x84, 0x2, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @mcast1}, {0x0, 0x4, @loopback}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x53}, @NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) 1.363296662s ago: executing program 1 (id=4003): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000000c0)=""/61, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x4, 0xb12, 0x2}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x4, 0x3, 0x2, 0xc}, {0x0, 0x5, 0x7, 0x4}, {0x2, 0x1, 0x2, 0x8}, {0x3, 0x2, 0xa, 0x6}, {0x0, 0x2, 0x6, 0x6}, {0x3, 0x2, 0x6, 0x8}, {0x4, 0x5, 0x2, 0x9}, {0x5, 0x2, 0x7, 0x3}, {0x4, 0x1, 0x2, 0xc}], 0x10, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) bpf$BPF_PROG_DETACH(0x9, 0xfffffffffffffffc, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000380)=0xfff, 0x4) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000400)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r3, &(0x7f00000045c0)=[{{&(0x7f0000000440)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/16, 0x10}, {&(0x7f0000000500)=""/40, 0x28}, {&(0x7f0000000540)=""/13, 0xd}], 0x3, &(0x7f00000005c0)=""/4096, 0x1000}, 0x2}, {{&(0x7f00000015c0)=@nl, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001640)=""/219, 0xdb}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/107, 0x6b}, {&(0x7f00000027c0)=""/90, 0x5a}, {&(0x7f0000002840)=""/104, 0x68}, {&(0x7f00000028c0)=""/135, 0x87}, {&(0x7f0000002980)=""/160, 0xa0}, {&(0x7f0000002a40)=""/46, 0x2e}], 0x8, &(0x7f0000002b00)=""/191, 0xbf}}, {{&(0x7f0000002bc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002c40)}, {&(0x7f0000002c80)=""/42, 0x2a}, {&(0x7f0000002cc0)=""/178, 0xb2}, {&(0x7f0000002d80)=""/19, 0x13}, {&(0x7f0000002dc0)=""/175, 0xaf}, {&(0x7f0000002e80)=""/185, 0xb9}], 0x6, &(0x7f0000002fc0)=""/226, 0xe2}}, {{&(0x7f00000030c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003140)=""/118, 0x76}], 0x1, &(0x7f0000003200)=""/99, 0x63}, 0x6}, {{&(0x7f0000003280)=@tipc, 0x80, &(0x7f0000004540)=[{&(0x7f0000003300)=""/39, 0x27}, {&(0x7f0000003340)=""/30, 0x1e}, {&(0x7f0000003380)=""/80, 0x50}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/242, 0xf2}, {&(0x7f0000004500)=""/55, 0x37}], 0x6}, 0x3}], 0x5, 0x2042, &(0x7f0000004700)={0x77359400}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000004980)={&(0x7f0000004740)=@ax25={{0x3, @default}, [@default, @rose, @null, @null, @bcast, @null, @netrom, @default]}, 0x80, &(0x7f0000004940)=[{&(0x7f00000047c0)=""/172, 0xac}, {&(0x7f0000004880)=""/123, 0x7b}, {&(0x7f0000004900)=""/8, 0x8}], 0x3}, 0x22) socketpair(0x21, 0x80000, 0x3ff, &(0x7f00000049c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000004ac0)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a40)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000004b00)={{0x0, 0x9581, 0x2, 0x2, 0x200, 0xffffffffffffa0c1, 0x6cc, 0x1, 0xfffffffe, 0x0, 0x6, 0x0, 0x9, 0x800, 0x9}, 0x20, [0x0, 0x0, 0x0, 0x0]}) sendmsg(r2, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004bc0)="104bc3a211b157c74a37cd4a39a8c9639093aab440a7970a6a3ffd6bff9b827cb753b711ee92251c15feb2f53f709ccecd48f4eea1b592c2207e254620bf8cc00fb1f286038f07ca10f81f3886611ec4a7fd0e16713565451d3d5c6efd77637951110a017e1968073fd0ce27", 0x6c}, {&(0x7f0000004c40)="f09605f8dda66cf88b547527fad3e7c214d9791b0bbe7dfc60b33c881aabb0", 0x1f}], 0x2}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004d40), r5) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000005380)={&(0x7f0000004d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005340)={&(0x7f0000004d80)={0x594, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5f}}}}, [@NL80211_ATTR_FRAME={0x12d, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {0x3f94}, @broadcast, @device_b, @initial, {0x2, 0x1}}, 0x1086, 0x7f, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0xc}]}, @void, [{0xdd, 0xbf, "e972bb8229152ec9d5178fd2d757a4c5e2ad00d3b76dbcf6c924aaf3cd4912a6c88fc99c82844980e41c6526cc01ed7fc197c13ce0d4da8d0e4efd42c5bd1a836e3cff3a85efbbc751b5c5c685c5ee967bc6cb7e94e0ce1c38fd388072d2779817e832db963c233ad059727a0c5ae878800522665e9252b4af11b75ee0837c8f2b0b5903d9a16d3a7bd1d91275c82a0db6be4e07734ec31393eab7aea96274f00f9a490ce95fec70bcbbe4181637577b48a942311164ae33e3d21f401cd101"}, {0xdd, 0x39, "fe83627a1380a505dc2df7707e8651cbc58bb7850120b8959862264d3ca7744ba91afaf5dc056c8a566cfe76abe34d5be7da4cf73b457311de"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1d3, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @broadcast, @random="9acf3674b039", {0x9, 0x1}}, 0x48cc, 0x5d, @default, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x1, 0x0, {0xc, 0x7, 0x0, 0xb, 0x0, 0x1, 0x1, 0x3}, 0x300, 0x8000, 0x3}}, [{0xdd, 0x2e, "f3ae4e71227e7bf1e4c20a81e05450da9b1a869c25dbd7b820aad54565c96efd6fe85b192ac5b826d28986e73264"}, {0xdd, 0xc8, "571de421ccf9e3c217104678b59f2caac734af9f87802ab1110e709323259dc3668eca9fc5c4a8118a3da9ba92a9b54b8612e0bc8310d1e86ed1b42d1af1fcf977574d7371ec603e2383ead41a2b7373ee44b8371fad754744ce80b73fca6acdcda8a634bc3000cc33450ab2a2876e2a3a8061c54f58a1b63e30786aa47019d5cb765c137e8a0e4f99a665f06ea0cfc8312499c8f9f693ec176cb6e8d08d1d5f106f1e0ebb877cb386329b8b643978f516daecaa5b3b78cb33aa714fc6bc01a660885c024f74f835"}, {0xdd, 0x18, "4801229140fca55feeafad866a0bcd065c42b1b68c4d20c8"}, {0xdd, 0x7f, "f472eae570e073a7058aadd1e47ca95767e32b03d91e0737a87841c16e8ef3f0c5dc91d78e5b8027fb6da60ecb8e8340eaf25d601c2fd7a210e966ac4cc6d6dffc725b534081f7d158819585cee771c789a86a88c10c35a62a5a506340d72c019622b3335c6cb31b12b58e0fb973c0ad93d589cd9ee4caf731dffe44b1b6ad"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x1}, @broadcast}}, @NL80211_ATTR_FRAME={0x1f9, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x20e3}, @device_b, @device_b, @from_mac=@device_b, {0x5, 0x8ed}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1}}, 0x1, 0x3, 0x4, @val={0x10, 0x1, 0x17}, [{0xdd, 0xbd, "9fc670e8309cb0424cbc609ec8e66af821002f0be7f75542dad3352a8472194af9bda5c0848fda62796d5665d09575cfca596fe13393700572064d121af5dad9585ce26b0dbe4af4f1add8637145f8e1d08927684c22eb017cd664851d2366aaab9395be37d7cecb42c8c4bf7ddc3495d2d26d730731aba9be29e7347db0ed8a7a321512b66a8e059052d41fa89a65c0538cd869d27331866da470aae5cf455384f6a1f813ade43837d87ca1d213beccf24b3f766ba94a9e199af22d02"}, {0xdd, 0xb7, "888d99fae89801c5d85ada9a52f7f0b84458fe4f08428f1ee5aea4e500d05c69fb26b98a07b68d8abd8842a1bf464e0643f137a2f8e0a10211aa57f1356e724bf29c83cdabab4be714d1df461e39dedd24b99b3c5f8daf2ecc5a0bfa442dd6d898f1c9602f81c04f396ebf4d963a5ae9d7171db62fa29e95e9f521dc976b20d908434e86bb203ecc40ead280bc8c44a0955a0342f469c19a68e9e386cc858efa0462c9230dab109bae03406f53247fa85b6120e3dfff54"}, {0xdd, 0x56, "3aaea5edbca73cd75c1a44ebae5400250c123756cff5c223aa56d424f981f6552f65f737f6e6e84efa7f789e01b4c65796cd0b02ff1df594df07a46074bb17344ad8f51295b69d4bccd4fc3a91bc65a3435db6c3a0ba"}]}}, @NL80211_ATTR_FRAME={0x33, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @device_a, @device_a, @random="12fc8152cf16", {0x0, 0x2}}, @tdls_disc_req={0xc, 0xa, {0x1, {0x65, 0x12, {@random="d5d940522209", @device_a, @broadcast}}}}}}]}, 0x594}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000053c0)={r4, r2}) mkdirat$cgroup(r1, &(0x7f0000005400)='syz0\x00', 0x1ff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x9, &(0x7f0000005440)=0xa69, 0x4) connect$vsock_stream(r4, &(0x7f0000005480)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r8, 0xf505, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000054c0)={0x0, 0x26, "28346eb630acc0e0ff904823f43c2369fdf8f2391d02241a65b3f1a513d2ef1ef98b350448c0"}, &(0x7f0000005500)=0x2e) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000005540)=@assoc_value={r10, 0x1}, &(0x7f0000005580)=0x8) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005600), r6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005900)={r2, 0xe0, &(0x7f0000005800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000005640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000005680)=[0x0, 0x0], &(0x7f00000056c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000005700)=[{}, {}], 0x10, 0x10, &(0x7f0000005740), &(0x7f0000005780), 0x8, 0xa8, 0x8, 0x8, &(0x7f00000057c0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000059c0)={r2, 0x58, &(0x7f0000005940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000005a00)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000060c0)={&(0x7f00000055c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000006080)={&(0x7f0000005e40)={0x20c, r11, 0x400, 0x76ed0494, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9bb1e456780e03}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000810}, 0x44892) 1.264188607s ago: executing program 4 (id=4004): syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb8100000086dd6008010800142f00fc010000000000000000000000000001fc01000000000000000000000000000000008902", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000872596bb93f0e756813c1e0b0dd67fc6e299b4f108b53e53e9410eb2e652a5eda8a657a49d11341edf33f4e755c01b871cc08dfa429932aa47855d01bd036ddbfad37643a76ed95215a4db"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000000004cd6000000000000000000000008000a40000000000900020073797a31000400000900010073736d29f3deabff23a63a8b62ecb04591027a30010000006d812659f68a8f414c080005400000000d0800064000000000080003400000000914000000"], 0x74}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000ec4b036ccefb1574bae521532d3268bb7ebfa58277ece3be678a5cb9363543efd43290723f40696ae7b84fca3d115007b396ea38e4402f2e16a42f81ce615c419b3fd69c9af3ad778510d9e1ad257225b5a22cece29dea995fb8660ab8c5cc96da7bb7a47ca59532ba03f62eeb365736ebe9258919b7c137d9220000000000", @ANYRES16=r1, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800c300741300000800c40001000000"], 0x38}}, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000003c0)={@loopback, @empty}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="6870ef997e2ff08f0200fe1f000002000d000200000008000c01"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) sendmsg$rds(r10, &(0x7f0000000480)={&(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x40) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r11, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x2}}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0xc16}, @in6={0xa, 0x4e22, 0x24f, @local, 0x5}], 0x68) socketpair(0x34, 0x2, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDDLCI(r12, 0x8980, &(0x7f00000000c0)={'dvmrp1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013f00000000009500170000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 810.710039ms ago: executing program 1 (id=4005): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="bf5dba82feb3"}]}, 0x44}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x2a, 0x3, 0x10) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$phonet(0x23, 0x2, 0x1) (async, rerun: 64) r6 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) ioctl$int_in(r6, 0x5421, &(0x7f0000000100)=0x100000001) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async, rerun: 32) sendmmsg$sock(r8, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f0000001980)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6aa", 0x1a}, {&(0x7f00000019c0)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a12fcbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a10b", 0x9a}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435ec3b8e138d7ac5d5e03549ab05be431c31046700791a9d1ca44797", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005640)="35033276e4182bf05da6dba9497609361c261aacc3f1f07b2786fa3cc11683a17d722e3035c5b73598c0835f3ebcbc15d5bf1b6f07426475348426b74e314d7b11083f2f2331a4", 0x47}, {&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19138299f0db214dd0a0f2f3b733922434f0e1cba8c19d31ea7429ade0a5bce8aa8ef6613c475f37f08a1b03e37104", 0x82}, {&(0x7f0000005780)="e6afeb66137d540bb20fc2648790cd3143649ad14a4ae447e071d23877c471fce8cb00af5bff001c81e78809efa77efdb8a912894dd545c1cefa6295be21dbbecab4a74f5b49bd2014a7dd3b348417a44f6c4f8abd1f7c193a46f0ebbe444f71c66ceeac9235e92fb34a9cb158469bc9d62db26e52fe4e9a4bc3b37d9c822f0aea673a02c4324bfc638a0898ea6de844851aeaec603fb31490e0e60264f14e333333807db17277caed9f9bfa5c25947766dba10c75bfd55350f72272e7b781de95cae3d1f76d46b61e9f1d7b37b3835bccec30fd0b7fe8e0d20dc6e4dd54c5437420517e873777a935eb24dfa59c", 0xee}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28dea3a8e8a5fe9f3e28dddaf8546cff808f818a30d6be666081ae6b8fd47133ffbc10a8345d2fd", 0x9b}, {&(0x7f0000005940)="40ee9ab1e7dc5e3b590a66b1e1", 0xd}], 0x5}}], 0x4, 0x4000011) (async, rerun: 32) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r6) (async, rerun: 64) ioctl$sock_proto_private(r5, 0x89ee, &(0x7f0000007880)="0ecd") (async, rerun: 64) r9 = socket$igmp6(0xa, 0x3, 0x2) (async) r10 = socket$kcm(0x2, 0xa, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) (async) listen(r0, 0xfffffff8) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}}) (async) write$tun(r4, &(0x7f0000000140)={@val={0x0, 0xc}, @void, @eth={@empty, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "d3"}}}}}}}, 0x19) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x8000}) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000010003904fcffffff0000000000000000", @ANYRES32=r3, @ANYBLOB="00000000422200001800128008000100677265000c000280080006007f"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x844) 636.574317ms ago: executing program 4 (id=4006): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xa6, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a932"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004dc7", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 419.804344ms ago: executing program 4 (id=4007): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="1803000000000080000000000010000085100000060000001800000000000000000000000000000065000000000000001800000000000000ffffffffffffff859500000000000000840300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 171.856001ms ago: executing program 4 (id=4008): r0 = socket$can_bcm(0x1d, 0x2, 0x2) unshare(0xc020400) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) 0s ago: executing program 4 (id=4009): socket$netlink(0x10, 0x3, 0x2) (async) r0 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ipvlan0\x00', &(0x7f00000002c0)=@ethtool_drvinfo={0x3, "eac7d0664df14587d9f0842533226a1cbf7574f0424b813d5f3463dec452e8aa", "907a10b0420681481ecf440568306f64e60bce9be2b8d6c62979f15582809a21", "38073012d8e7aee5557038d57aab25eeee6f96de5204378748062eee3499545c", "069026788e83340e75715b78150504a5f6aace146bd5052d4a1b28ce34595564", "9718eb5593e65c29e87a3a40f74ce773690220f740b4d41cf24da8f2194ca148", "0b11e62aa945f93da27960e0", 0x6, 0xe0, 0x2, 0x6, 0x1000}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ipvlan0\x00', &(0x7f00000002c0)=@ethtool_drvinfo={0x3, "eac7d0664df14587d9f0842533226a1cbf7574f0424b813d5f3463dec452e8aa", "907a10b0420681481ecf440568306f64e60bce9be2b8d6c62979f15582809a21", "38073012d8e7aee5557038d57aab25eeee6f96de5204378748062eee3499545c", "069026788e83340e75715b78150504a5f6aace146bd5052d4a1b28ce34595564", "9718eb5593e65c29e87a3a40f74ce773690220f740b4d41cf24da8f2194ca148", "0b11e62aa945f93da27960e0", 0x6, 0xe0, 0x2, 0x6, 0x1000}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r2, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) splice(r3, 0x0, r3, &(0x7f0000000100)=0x4, 0x7, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x44, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0xc016}, 0x4004081) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae00"/24, 0x18) kernel console output (not intermixed with test programs): for wq "nfc2_nci_cmd_wq": -EINTR [ 307.675119][T14291] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2400'. [ 308.694633][T14355] netlink: 'syz.4.2422': attribute type 12 has an invalid length. [ 308.720346][T14355] netlink: 'syz.4.2422': attribute type 16 has an invalid length. [ 308.747696][T14356] netlink: 'syz.2.2420': attribute type 2 has an invalid length. [ 308.839818][T14364] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 308.876731][T14366] 8021q: VLANs not supported on ip6gre0 [ 309.212664][T14373] tipc: Resetting bearer [ 309.941041][T14389] __nla_validate_parse: 7 callbacks suppressed [ 309.941064][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2430'. [ 310.369529][T14416] veth3: left promiscuous mode [ 310.667114][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 310.678922][T14416] tipc: Resetting bearer [ 310.713832][T14416] geneve2: left promiscuous mode [ 310.736686][T14416] geneve2: left allmulticast mode [ 310.746561][T14450] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2438'. [ 311.014927][T14416] bridge3: left promiscuous mode [ 311.037015][T14416] bridge3: left allmulticast mode [ 311.151278][T14416] geneve3: left promiscuous mode [ 311.190921][T14416] ip6gre2: left allmulticast mode [ 311.258182][ T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.279596][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.306955][T14445] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2437'. [ 311.319573][T14445] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2437'. [ 311.419844][ T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.451111][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.501109][ T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.538084][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.573699][ T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.603261][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.648271][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 311.779577][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2444'. [ 311.923529][T14488] sock: sock_timestamping_bind_phc: sock not bind to device [ 311.996133][T14494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2449'. [ 312.091583][T14494] net_ratelimit: 397 callbacks suppressed [ 312.091607][T14494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.627715][T14530] netlink: 'syz.1.2457': attribute type 11 has an invalid length. [ 312.896670][T14542] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 313.113136][T14559] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.2465'. [ 313.606126][T14585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2473'. [ 313.774182][T14590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.982883][T14602] netlink: 'syz.2.2476': attribute type 3 has an invalid length. [ 314.321701][T14613] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 314.633345][T14636] pimreg: entered allmulticast mode [ 314.868190][T14653] 8021q: VLANs not supported on xfrm0 [ 314.906736][T14657] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 315.023459][T14667] __nla_validate_parse: 4 callbacks suppressed [ 315.023482][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2492'. [ 315.511649][T14682] openvswitch: netlink: Missing valid actions attribute. [ 315.544291][T14682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.705344][T14689] bond4: entered promiscuous mode [ 315.711286][T14689] bond4: entered allmulticast mode [ 315.717891][T14689] 8021q: adding VLAN 0 to HW filter on device bond4 [ 316.052095][T14689] bond4 (unregistering): Released all slaves [ 316.185725][T14704] syzkaller1: entered promiscuous mode [ 316.198770][T14704] syzkaller1: entered allmulticast mode [ 316.216514][T14702] ip6tnl0 speed is unknown, defaulting to 1000 [ 316.235784][T14707] macsec2: entered promiscuous mode [ 316.242808][T14707] macsec2: entered allmulticast mode [ 316.299023][T14702] ip6tnl0 speed is unknown, defaulting to 1000 [ 316.334447][T14702] ip6tnl0 speed is unknown, defaulting to 1000 [ 316.369527][T14718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.427506][T14721] sit0: entered promiscuous mode [ 316.437748][T14721] netlink: 'syz.2.2511': attribute type 1 has an invalid length. [ 316.465245][T14721] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2511'. [ 316.580076][T14724] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 316.614388][T14730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2513'. [ 316.624180][T14724] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.2512'. [ 316.838541][T14740] net veth1_virt_wifi .: renamed from virt_wifi0 [ 317.212437][T14702] infiniband syz1: set active [ 317.223574][T14702] infiniband syz1: added ip6tnl0 [ 317.234603][T14760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2521'. [ 317.236263][T14702] syz1: rxe_create_cq: returned err = -12 [ 317.267212][T14702] infiniband syz1: Couldn't create ib_mad CQ [ 317.286425][T14702] infiniband syz1: Couldn't open port 1 [ 317.406309][T14396] ip6tnl0 speed is unknown, defaulting to 1000 [ 317.431703][T14702] RDS/IB: syz1: added [ 317.436788][T14702] smc: adding ib device syz1 with port count 1 [ 317.454291][T14702] smc: ib device syz1 port 1 has pnetid [ 317.474999][T14396] ip6tnl0 speed is unknown, defaulting to 1000 [ 317.645473][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2524'. [ 317.696383][T14769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2524'. [ 317.727973][T14702] ip6tnl0 speed is unknown, defaulting to 1000 [ 317.730792][T14774] tipc: Enabling of bearer rejected, already enabled [ 317.818445][T14767] dummy0: mtu less than device minimum [ 318.273191][T14786] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 318.465551][T14702] ip6tnl0 speed is unknown, defaulting to 1000 [ 318.565428][T14803] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2532'. [ 319.048350][T14702] ip6tnl0 speed is unknown, defaulting to 1000 [ 319.347525][T14825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2538'. [ 319.406143][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2538'. [ 319.490458][T14830] netlink: 'syz.3.2541': attribute type 1 has an invalid length. [ 319.606191][T14830] bond5 (unregistering): Released all slaves [ 319.715539][T14702] ip6tnl0 speed is unknown, defaulting to 1000 [ 319.817366][T14844] netlink: 'syz.0.2543': attribute type 6 has an invalid length. [ 320.036352][T14702] ip6tnl0 speed is unknown, defaulting to 1000 [ 320.427488][T14836] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 320.535940][T14862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2548'. [ 320.570330][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2548'. [ 320.595002][T14862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2548'. [ 320.611151][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2548'. [ 320.631726][T14868] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 320.720570][T14877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2554'. [ 320.817604][T14879] tipc: Enabled bearer , priority 0 [ 320.854084][T14879] syzkaller0: entered promiscuous mode [ 320.876386][T14879] syzkaller0: entered allmulticast mode [ 320.948356][T14879] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 320.959080][T14888] nbd: must specify at least one socket [ 321.022945][T14879] tipc: Resetting bearer [ 321.115471][T14878] tipc: Resetting bearer [ 321.188027][T14878] tipc: Disabling bearer [ 321.518101][T14904] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2561'. [ 321.644906][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2563'. [ 321.678938][T14909] openvswitch: netlink: IPv4 tun info is not correct [ 321.749140][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2564'. [ 321.965001][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2560'. [ 322.003247][T14920] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 322.092839][T14911] hsr_slave_1 (unregistering): left promiscuous mode [ 322.120353][T14920] tipc: Enabling of bearer rejected, failed to enable media [ 322.148772][T14930] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2567'. [ 322.159109][T14920] 8021q: VLANs not supported on ip6_vti0 [ 322.182015][T14930] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 322.226653][T14930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.377782][T14943] netlink: 'syz.3.2569': attribute type 10 has an invalid length. [ 322.409699][T14943] netlink: 'syz.3.2569': attribute type 10 has an invalid length. [ 322.466549][T14943] netlink: 'syz.3.2569': attribute type 10 has an invalid length. [ 323.102078][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.108902][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.214498][T14983] netlink: 'syz.1.2583': attribute type 1 has an invalid length. [ 323.223406][T14983] netlink: 'syz.1.2583': attribute type 1 has an invalid length. [ 323.503707][T14999] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 323.789772][T15009] tipc: Enabling of bearer rejected, already enabled [ 324.787699][T15046] netlink: 'syz.4.2602': attribute type 1 has an invalid length. [ 324.796463][T15046] netlink: 'syz.4.2602': attribute type 1 has an invalid length. [ 325.757367][T15062] __nla_validate_parse: 17 callbacks suppressed [ 325.757390][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2606'. [ 325.936681][T15051] gretap2: entered promiscuous mode [ 325.942462][T15051] gretap2: entered allmulticast mode [ 326.009238][T15068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2609'. [ 326.026257][T15066] netlink: 'syz.2.2608': attribute type 10 has an invalid length. [ 326.057441][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2609'. [ 326.550425][T15098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2614'. [ 326.594607][T15099] netlink: 'syz.0.2616': attribute type 33 has an invalid length. [ 326.621569][T15099] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2616'. [ 326.731742][T15104] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2618'. [ 326.823130][T15106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2619'. [ 326.835166][T15106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2619'. [ 327.108010][T15125] syzkaller1: entered promiscuous mode [ 327.119028][T15125] syzkaller1: entered allmulticast mode [ 327.140082][T15125] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 327.592845][T15149] netlink: 'syz.2.2629': attribute type 3 has an invalid length. [ 327.619927][T15149] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2629'. [ 327.638505][T15155] netlink: 'syz.0.2632': attribute type 11 has an invalid length. [ 327.665418][T15155] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2632'. [ 328.555833][T15193] netlink: 'syz.2.2647': attribute type 1 has an invalid length. [ 328.594505][T15196] netlink: 'syz.4.2650': attribute type 2 has an invalid length. [ 328.637283][T15196] netlink: 'syz.4.2650': attribute type 1 has an invalid length. [ 328.682956][T15193] 8021q: adding VLAN 0 to HW filter on device bond9 [ 328.801731][T15201] 8021q: adding VLAN 0 to HW filter on device bond9 [ 328.809674][T15201] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 328.832151][T15201] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 328.884498][T15217] netlink: 'syz.4.2654': attribute type 1 has an invalid length. [ 328.897966][T15206] veth15: entered promiscuous mode [ 328.926880][T15206] bond9: (slave veth15): Enslaving as an active interface with a down link [ 328.960247][T15193] vlan2: entered allmulticast mode [ 328.970882][T15193] bond9: entered allmulticast mode [ 329.317797][T15228] syzkaller0: entered promiscuous mode [ 329.330481][T15228] syzkaller0: entered allmulticast mode [ 329.362274][T15240] netlink: 'syz.1.2656': attribute type 3 has an invalid length. [ 329.717689][T15268] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 329.883766][T15280] validate_nla: 4 callbacks suppressed [ 329.883786][T15280] netlink: 'syz.1.2672': attribute type 10 has an invalid length. [ 329.920456][T15283] vlan0: entered allmulticast mode [ 329.928703][T15283] erspan0: entered allmulticast mode [ 330.029914][T15286] tipc: Enabling of bearer rejected, already enabled [ 330.122492][T15288] netlink: 'syz.2.2676': attribute type 5 has an invalid length. [ 330.772625][T15327] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 331.146691][T15343] netlink: 'syz.2.2696': attribute type 1 has an invalid length. [ 331.426900][T15356] __nla_validate_parse: 20 callbacks suppressed [ 331.426926][T15356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2700'. [ 331.541511][T15368] netlink: 'syz.1.2704': attribute type 1 has an invalid length. [ 331.571905][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2702'. [ 331.620177][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2702'. [ 331.634442][T15370] netlink: 'syz.0.2702': attribute type 14 has an invalid length. [ 331.643656][T15370] netlink: 'syz.0.2702': attribute type 13 has an invalid length. [ 331.657276][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2706'. [ 331.669352][T15373] bond4: (slave bridge10): making interface the new active one [ 331.680099][T15373] bond4: (slave bridge10): Enslaving as an active interface with an up link [ 331.719292][T15377] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 331.907289][T15386] pimreg: left allmulticast mode [ 331.948607][T15380] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2707'. [ 332.189860][T15393] netlink: 'syz.4.2712': attribute type 2 has an invalid length. [ 332.228570][T15393] netlink: 'syz.4.2712': attribute type 1 has an invalid length. [ 332.323942][T15393] tipc: Enabled bearer , priority 0 [ 332.361791][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 332.470399][T15395] tipc: Disabling bearer [ 332.858086][T15423] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2720'. [ 332.879903][T15423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2720'. [ 333.141129][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2725'. [ 333.196110][T15437] tipc: Enabled bearer , priority 0 [ 333.197731][T15439] netlink: 'syz.3.2726': attribute type 10 has an invalid length. [ 333.208850][T15437] syzkaller0: entered promiscuous mode [ 333.234436][T15437] syzkaller0: entered allmulticast mode [ 333.246110][T15439] veth1_macvtap: left promiscuous mode [ 333.276508][T15439] team0: Device veth1_macvtap failed to register rx_handler [ 333.349325][T15435] tipc: Resetting bearer [ 333.441987][T15435] tipc: Disabling bearer [ 333.488633][T15441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2727'. [ 333.640668][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2732'. [ 333.661130][T15462] netlink: 'syz.3.2733': attribute type 5 has an invalid length. [ 334.143493][T15484] geneve2: entered promiscuous mode [ 334.155975][T15484] geneve2: entered allmulticast mode [ 334.500180][T15508] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 334.787496][T15522] bond11: entered promiscuous mode [ 334.795259][T15522] 8021q: adding VLAN 0 to HW filter on device bond11 [ 334.810089][ T30] audit: type=1107 audit(1755004714.470:5): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 334.820771][ T30] audit: type=1107 audit(1755004714.470:6): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 334.945239][ T30] audit: type=1107 audit(1755004714.490:7): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa*' [ 335.061662][ T30] audit: type=1107 audit(1755004714.490:8): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa*' [ 335.079024][ T30] audit: type=1107 audit(1755004714.490:9): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa*' [ 335.082162][T15533] 8021q: adding VLAN 0 to HW filter on device bond11 [ 335.095231][ T30] audit: type=1107 audit(1755004714.490:10): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa*' [ 335.111244][T15533] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address [ 335.139832][T15533] bond11: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 335.150623][ T30] audit: type=1107 audit(1755004714.490:11): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa*' [ 335.184226][T15533] bond11: (slave wireguard0): making interface the new active one [ 335.184887][ T30] audit: type=1107 audit(1755004714.490:12): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa*' [ 335.203580][T15533] wireguard0: entered promiscuous mode [ 335.228791][T15533] bond11: (slave wireguard0): Enslaving as an active interface with an up link [ 335.255071][ T30] audit: type=1107 audit(1755004714.490:13): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa*' [ 335.283124][ T30] audit: type=1107 audit(1755004714.490:14): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa*' [ 335.616938][T15545] validate_nla: 8 callbacks suppressed [ 335.616960][T15545] netlink: 'syz.1.2757': attribute type 1 has an invalid length. [ 335.679116][T15551] openvswitch: netlink: Actions may not be safe on all matching packets [ 335.679212][T15545] netlink: 'syz.1.2757': attribute type 2 has an invalid length. [ 335.706494][T15551] openvswitch: netlink: Actions may not be safe on all matching packets [ 335.756027][T15546] netlink: 'syz.1.2757': attribute type 1 has an invalid length. [ 335.765670][T15556] netlink: 'syz.3.2756': attribute type 1 has an invalid length. [ 335.769102][T15546] netlink: 'syz.1.2757': attribute type 2 has an invalid length. [ 335.782194][T15556] netlink: 'syz.3.2756': attribute type 3 has an invalid length. [ 335.803358][T15556] NCSI netlink: No device for ifindex 131080 [ 336.313388][T15574] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 336.677150][T15590] __nla_validate_parse: 5 callbacks suppressed [ 336.677182][T15590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2770'. [ 336.693237][T15591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2767'. [ 337.016745][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'. [ 337.064158][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2774'. [ 337.197109][T15614] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2775'. [ 337.197248][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'. [ 337.456298][T15625] tipc: Enabled bearer , priority 0 [ 337.474741][T15625] syzkaller0: entered promiscuous mode [ 337.481538][T15625] syzkaller0: entered allmulticast mode [ 337.556508][T15625] tipc: Resetting bearer [ 337.634790][T15624] tipc: Resetting bearer [ 337.668028][T15624] tipc: Disabling bearer [ 338.083910][T15660] IPv6: NLM_F_CREATE should be specified when creating new route [ 338.118441][T15661] sctp: [Deprecated]: syz.2.2789 (pid 15661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.118441][T15661] Use struct sctp_sack_info instead [ 338.262240][T15670] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2793'. [ 338.313151][T15673] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2794'. [ 338.352213][T15673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2794'. [ 338.441282][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.804383][T15731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2813'. [ 340.266537][T15744] syzkaller0: entered promiscuous mode [ 340.300400][T15744] syzkaller0: entered allmulticast mode [ 340.339171][T15758] FAULT_INJECTION: forcing a failure. [ 340.339171][T15758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.365830][T15752] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 340.380242][T15758] CPU: 1 UID: 0 PID: 15758 Comm: syz.2.2819 Not tainted 6.16.0-syzkaller-12091-g89886abd0734 #0 PREEMPT(full) [ 340.380275][T15758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.380288][T15758] Call Trace: [ 340.380298][T15758] [ 340.380308][T15758] dump_stack_lvl+0x189/0x250 [ 340.380341][T15758] ? __pfx____ratelimit+0x10/0x10 [ 340.380370][T15758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.380404][T15758] ? __pfx__printk+0x10/0x10 [ 340.380448][T15758] should_fail_ex+0x414/0x560 [ 340.380480][T15758] _copy_to_user+0x31/0xb0 [ 340.380504][T15758] simple_read_from_buffer+0xe1/0x170 [ 340.380543][T15758] proc_fail_nth_read+0x1b3/0x220 [ 340.380573][T15758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.380602][T15758] ? rw_verify_area+0x2a6/0x4d0 [ 340.380628][T15758] ? __lock_acquire+0xab9/0xd20 [ 340.380657][T15758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.380684][T15758] vfs_read+0x200/0x980 [ 340.380712][T15758] ? fdget_pos+0x247/0x320 [ 340.380736][T15758] ? __pfx___mutex_lock+0x10/0x10 [ 340.380766][T15758] ? __pfx_vfs_read+0x10/0x10 [ 340.380797][T15758] ? __fget_files+0x2a/0x420 [ 340.380835][T15758] ? __fget_files+0x3a0/0x420 [ 340.380868][T15758] ? __fget_files+0x2a/0x420 [ 340.380913][T15758] ksys_read+0x145/0x250 [ 340.380948][T15758] ? __pfx_ksys_read+0x10/0x10 [ 340.380972][T15758] ? rcu_is_watching+0x15/0xb0 [ 340.381008][T15758] ? do_syscall_64+0xbe/0x3b0 [ 340.381041][T15758] do_syscall_64+0xfa/0x3b0 [ 340.381067][T15758] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.381100][T15758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.381128][T15758] ? clear_bhb_loop+0x60/0xb0 [ 340.381157][T15758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.381179][T15758] RIP: 0033:0x7f4c9a18d5fc [ 340.381200][T15758] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 340.381220][T15758] RSP: 002b:00007f4c9b09e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 340.381243][T15758] RAX: ffffffffffffffda RBX: 00007f4c9a3b5fa0 RCX: 00007f4c9a18d5fc [ 340.381259][T15758] RDX: 000000000000000f RSI: 00007f4c9b09e0a0 RDI: 0000000000000003 [ 340.381272][T15758] RBP: 00007f4c9b09e090 R08: 0000000000000000 R09: 0000000000000000 [ 340.381285][T15758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.381297][T15758] R13: 00007f4c9a3b6038 R14: 00007f4c9a3b5fa0 R15: 00007ffd4b2ea3a8 [ 340.381334][T15758] [ 340.662719][T15752] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 342.852241][T15781] syzkaller1: entered promiscuous mode [ 342.861194][T15781] syzkaller1: entered allmulticast mode [ 343.151534][T15798] __nla_validate_parse: 2 callbacks suppressed [ 343.151555][T15798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2828'. [ 343.187250][T15798] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2828'. [ 343.230450][T15796] wlan1 speed is unknown, defaulting to 1000 [ 343.232728][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2830'. [ 343.257334][T15803] netlink: 'syz.1.2830': attribute type 8 has an invalid length. [ 343.333374][T15796] ip6tnl0 speed is unknown, defaulting to 1000 [ 343.342732][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2831'. [ 343.730849][T15824] netlink: 'syz.0.2835': attribute type 4 has an invalid length. [ 343.762104][T15824] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2835'. [ 343.858887][T15824] `: renamed from bond0 (while UP) [ 344.121863][T15832] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2838'. [ 344.130234][T15842] netlink: 'syz.1.2841': attribute type 9 has an invalid length. [ 344.159339][T15832] 0ªî{X¹¦: renamed from gretap0 [ 344.173310][T15832] tipc: Disabling bearer [ 344.182864][T15832] 0ªî{X¹¦: entered allmulticast mode [ 344.190342][T15832] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 344.333992][T15848] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2842'. [ 345.004917][T15879] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2848'. [ 345.187855][T15886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.092081][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'. [ 346.173930][T15927] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 346.358761][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.373389][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.387401][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.398764][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.409043][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 346.657485][T15947] Bluetooth: MGMT ver 1.23 [ 346.714899][T15952] bond1: (slave gretap1): Releasing active interface [ 346.786681][ T5939] ip6tnl0 speed is unknown, defaulting to 1000 [ 346.802393][T15935] wlan1 speed is unknown, defaulting to 1000 [ 346.811992][T15956] tipc: Enabling of bearer rejected, already enabled [ 346.842278][T15935] ip6tnl0 speed is unknown, defaulting to 1000 [ 347.205460][T15971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2875'. [ 347.704139][T15971] team0: Port device vlan0 removed [ 348.205790][T15935] chnl_net:caif_netlink_parms(): no params data found [ 348.260928][T16000] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 348.310452][T16000] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 348.338222][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'. [ 348.339151][T16000] gretap0: entered promiscuous mode [ 348.359220][T16000] gretap0: entered allmulticast mode [ 348.420175][T16000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2885'. [ 348.522707][ T5877] Bluetooth: hci0: command tx timeout [ 348.745050][T16021] 8021q: VLANs not supported on ip6_vti0 [ 348.752969][T15935] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.760434][T15935] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.775350][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 348.778461][T15935] bridge_slave_0: entered allmulticast mode [ 348.790570][T15935] bridge_slave_0: entered promiscuous mode [ 348.873789][T15935] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.910177][T15935] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.918291][T15935] bridge_slave_1: entered allmulticast mode [ 348.938460][T15935] bridge_slave_1: entered promiscuous mode [ 349.019608][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2888'. [ 349.035219][T15935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.056754][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2888'. [ 349.074422][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2891'. [ 349.083989][T16037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'. [ 349.090453][T15935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.223041][T15935] team0: Port device team_slave_0 added [ 349.238426][T15935] team0: Port device team_slave_1 added [ 349.333762][T15935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.348502][T16044] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2893'. [ 349.348816][T15935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.388158][T15935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.408203][T16044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.430405][T15935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.443281][T15935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.456415][T16046] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2894'. [ 349.488746][T15935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.597301][T15935] hsr_slave_0: entered promiscuous mode [ 349.607427][T15935] hsr_slave_1: entered promiscuous mode [ 349.618409][T15935] debugfs: 'hsr0' already exists in 'hsr' [ 349.626561][T15935] Cannot create hsr debugfs directory [ 349.660764][T16050] netem: incorrect ge model size [ 349.675532][T16050] netem: change failed [ 350.055125][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'. [ 350.204760][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2906'. [ 350.256446][T16076] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 350.301155][T16076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.369043][T15935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.397160][T15935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.575330][T15935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.587293][T15935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.602830][ T51] Bluetooth: hci0: command 0x041b tx timeout [ 350.727487][T15935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.739780][T15935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.847550][T15935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.879156][T15935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.485962][T15935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.542730][T15935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.587797][T15935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 351.648348][T15935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 352.034017][T15935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.085537][T15935] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.124390][T12597] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.131919][T12597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.170896][T12597] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.178383][T12597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.691641][ T51] Bluetooth: hci0: command 0x041b tx timeout [ 352.848271][T15935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.866272][T16192] pim6reg1: entered promiscuous mode [ 352.872837][T16192] pim6reg1: entered allmulticast mode [ 353.174898][T15935] veth0_vlan: entered promiscuous mode [ 353.214334][T15935] veth1_vlan: entered promiscuous mode [ 353.300235][T16212] team0: Device gtp1 is up. Set it down before adding it as a team port [ 353.460278][T16223] __nla_validate_parse: 3 callbacks suppressed [ 353.460301][T16223] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2942'. [ 353.483160][T15935] veth0_macvtap: entered promiscuous mode [ 353.493817][T16223] netlink: zone id is out of range [ 353.499781][T16223] netlink: get zone limit has 8 unknown bytes [ 353.525815][T15935] veth1_macvtap: entered promiscuous mode [ 353.578472][T15935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.603835][T15935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.629995][ T971] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.672199][ T971] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.710429][ T971] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.722808][T16228] sock: sock_timestamping_bind_phc: sock not bind to device [ 353.728228][ T971] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.926297][T12597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.993600][T12597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.094958][T12597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.106873][T12597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.300647][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2852'. [ 354.761389][ T51] Bluetooth: hci0: command 0x041b tx timeout [ 354.800779][T16260] wlan1 speed is unknown, defaulting to 1000 [ 354.810880][T16261] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 354.885101][T16260] ip6tnl0 speed is unknown, defaulting to 1000 [ 355.055350][T16261] netlink: 'syz.2.2953': attribute type 8 has an invalid length. [ 355.110593][T16261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2953'. [ 355.347136][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 355.379724][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 355.390507][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 355.412249][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.422588][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.710682][T16271] wlan1 speed is unknown, defaulting to 1000 [ 356.040072][T16271] ip6tnl0 speed is unknown, defaulting to 1000 [ 356.155665][T16303] netlink: 'syz.4.2965': attribute type 1 has an invalid length. [ 356.299220][T16310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2966'. [ 356.368236][T16313] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2968'. [ 356.842676][ T5877] Bluetooth: hci0: command 0x041b tx timeout [ 357.171497][T16336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2975'. [ 357.273697][T16347] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2977'. [ 357.324969][T16350] netlink: 'syz.1.2975': attribute type 1 has an invalid length. [ 357.371886][T16350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2975'. [ 357.391360][T16347] unsupported nlmsg_type 40 [ 357.424650][T16271] chnl_net:caif_netlink_parms(): no params data found [ 357.483122][ T5877] Bluetooth: hci1: command tx timeout [ 357.935545][T16370] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2982'. [ 357.972758][T16271] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.991268][T16271] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.999582][T16271] bridge_slave_0: entered allmulticast mode [ 358.019110][T16271] bridge_slave_0: entered promiscuous mode [ 358.053246][T16271] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.081837][T16271] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.093177][T16271] bridge_slave_1: entered allmulticast mode [ 358.101478][T16377] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2984'. [ 358.120673][T16271] bridge_slave_1: entered promiscuous mode [ 358.275425][T16382] bond1: entered promiscuous mode [ 358.282683][T16382] bond1: entered allmulticast mode [ 358.294529][T16382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.460706][T16271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.492538][T16399] 8021q: VLANs not supported on ip6_vti0 [ 358.511586][T14392] IPVS: starting estimator thread 0... [ 358.554031][T16399] 8021q: VLANs not supported on ip6_vti0 [ 358.565949][T16271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.594809][T16406] tipc: MTU too low for tipc bearer [ 358.602229][T16403] IPVS: using max 25 ests per chain, 60000 per kthread [ 358.617395][T16405] tipc: MTU too low for tipc bearer [ 358.806901][T16271] team0: Port device team_slave_0 added [ 358.914396][T16271] team0: Port device team_slave_1 added [ 359.039547][T16425] ip6gre3: entered allmulticast mode [ 359.155502][T16271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.192182][T16271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.292287][T16271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.328559][T16271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.350785][T16271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.381291][T16271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.561341][ T5877] Bluetooth: hci1: command tx timeout [ 359.736068][T16271] hsr_slave_0: entered promiscuous mode [ 359.755030][T16271] hsr_slave_1: entered promiscuous mode [ 359.768609][T16271] debugfs: 'hsr0' already exists in 'hsr' [ 359.778745][T16271] Cannot create hsr debugfs directory [ 360.042516][T16465] Bluetooth: MGMT ver 1.23 [ 360.307901][T16479] __nla_validate_parse: 2 callbacks suppressed [ 360.307922][T16479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3015'. [ 360.333153][T16481] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 360.497995][T16485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3017'. [ 360.563043][T16271] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.575413][T16271] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.587620][T16271] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 360.667879][T16497] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3018'. [ 360.814836][T16271] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.853953][T16271] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.869451][T16271] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 360.895094][T16488] delete_channel: no stack [ 360.952289][T16506] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3023'. [ 361.018512][T16271] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.039999][T16271] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.056194][T16271] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 361.112201][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3024'. [ 361.156281][T16271] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.176425][T16271] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.208252][T16271] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 361.300026][T16518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'. [ 361.325598][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3026'. [ 361.341468][T16520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3027'. [ 361.355823][T16521] netlink: 'syz.1.3026': attribute type 1 has an invalid length. [ 361.371422][T16521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3026'. [ 361.402304][T16521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3026'. [ 361.642254][ T5877] Bluetooth: hci1: command tx timeout [ 361.737402][T16271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 361.785434][T16271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 361.836763][T16271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 361.874120][T16271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 361.941075][T16537] netlink: 'syz.4.3032': attribute type 3 has an invalid length. [ 362.289119][T16271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.398514][T16271] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.437852][T12597] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.445486][T12597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.498494][T12597] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.507767][T12597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.626616][T16576] wg1: entered promiscuous mode [ 363.159057][T16592] tipc: Enabled bearer , priority 0 [ 363.222195][T16592] syzkaller0: entered promiscuous mode [ 363.228011][T16592] syzkaller0: entered allmulticast mode [ 363.268018][T16592] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 363.342047][T16592] netlink: 'syz.4.3044': attribute type 12 has an invalid length. [ 363.381722][T16592] tipc: Resetting bearer [ 363.414461][T16591] tipc: Resetting bearer [ 363.484803][T16591] tipc: Disabling bearer [ 363.546415][T16271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.721758][ T5877] Bluetooth: hci1: command tx timeout [ 363.803132][T16271] veth0_vlan: entered promiscuous mode [ 363.872436][T16271] veth1_vlan: entered promiscuous mode [ 363.982140][T16271] veth0_macvtap: entered promiscuous mode [ 363.996860][T16271] veth1_macvtap: entered promiscuous mode [ 364.059823][T16271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.095043][T16271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.127366][T12597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.138450][T12597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.155378][T12597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.178636][T12597] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.284386][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.301392][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.344116][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.354722][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.637152][T16641] netlink: 'syz.0.3059': attribute type 21 has an invalid length. [ 364.647050][T16641] netlink: 'syz.0.3059': attribute type 4 has an invalid length. [ 364.658027][T16641] netlink: 'syz.0.3059': attribute type 5 has an invalid length. [ 364.669320][T16641] netlink: 'syz.0.3059': attribute type 21 has an invalid length. [ 364.678705][T16641] netlink: 'syz.0.3059': attribute type 4 has an invalid length. [ 364.700646][T16641] netlink: 'syz.0.3059': attribute type 5 has an invalid length. [ 364.827337][T16643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.203418][T16652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.211496][T16652] IPv6: NLM_F_CREATE should be set when creating new route [ 365.716296][T16671] __nla_validate_parse: 14 callbacks suppressed [ 365.716317][T16671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3069'. [ 365.819058][T16677] netlink: 'syz.0.3072': attribute type 75 has an invalid length. [ 365.855788][T16677] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3072'. [ 365.971992][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.988739][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.998672][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.023434][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.035360][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.226832][T16680] wlan1 speed is unknown, defaulting to 1000 [ 366.279528][T16680] ip6tnl0 speed is unknown, defaulting to 1000 [ 366.445260][T16696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3078'. [ 366.686773][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3081'. [ 367.288197][T16727] bridge_slave_0: left allmulticast mode [ 367.299645][T16727] bridge_slave_0: left promiscuous mode [ 367.306294][T16727] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.362875][T16727] bridge_slave_1: left allmulticast mode [ 367.386380][T16727] bridge_slave_1: left promiscuous mode [ 367.410213][T16727] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.448880][T16727] bond0: (slave bond_slave_0): Releasing backup interface [ 367.462989][T16727] bond0: (slave bond_slave_1): Releasing backup interface [ 367.489929][T16727] team0: Port device team_slave_0 removed [ 367.504824][T16727] team0: Port device team_slave_1 removed [ 367.514944][T16727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.524411][T16727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.536527][T16727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.545846][T16727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.628942][T16737] veth0: entered promiscuous mode [ 367.656671][T16736] veth0: left promiscuous mode [ 367.701859][T16745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3092'. [ 367.959245][T16751] netlink: 'syz.2.3094': attribute type 12 has an invalid length. [ 367.975507][T16680] chnl_net:caif_netlink_parms(): no params data found [ 368.122283][ T5877] Bluetooth: hci3: command tx timeout [ 368.133998][T16757] IPv6: addrconf: prefix option has invalid lifetime [ 368.152052][T16757] netlink: 'syz.2.3097': attribute type 1 has an invalid length. [ 368.167658][T16754] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 368.404654][T16680] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.428362][T16680] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.465858][T16680] bridge_slave_0: entered allmulticast mode [ 368.479213][T16680] bridge_slave_0: entered promiscuous mode [ 368.500569][T16680] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.525848][T16680] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.545384][T16680] bridge_slave_1: entered allmulticast mode [ 368.567624][T16680] bridge_slave_1: entered promiscuous mode [ 368.724896][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3098'. [ 368.825838][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3098'. [ 368.868934][T16680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.938540][T16680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.103920][T16780] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3101'. [ 369.169458][T16680] team0: Port device team_slave_0 added [ 369.196894][T16680] team0: Port device team_slave_1 added [ 369.327147][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3104'. [ 369.361589][T16680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.381060][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.425983][T16680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.448556][T16680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.456209][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.497710][T16680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.660046][T16680] hsr_slave_0: entered promiscuous mode [ 369.677981][T16680] hsr_slave_1: entered promiscuous mode [ 369.690592][T16680] debugfs: 'hsr0' already exists in 'hsr' [ 369.701140][T16680] Cannot create hsr debugfs directory [ 369.707004][T16794] tipc: Enabling of bearer rejected, failed to enable media [ 370.201773][ T5877] Bluetooth: hci3: command tx timeout [ 370.502954][T16828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3112'. [ 370.608314][T16833] netlink: 'syz.1.3114': attribute type 1 has an invalid length. [ 370.868509][T16840] __nla_validate_parse: 3 callbacks suppressed [ 370.868532][T16840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3118'. [ 370.875400][T16842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.897542][T16840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3118'. [ 371.106495][T16680] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 371.126010][T16680] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 371.141855][T16680] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 371.157927][T16680] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 371.454991][T16680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.508005][T16863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3124'. [ 371.536830][T16680] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.614740][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.624968][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.806903][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.815757][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.066143][T16892] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3132'. [ 372.115188][T16894] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3133'. [ 372.283145][ T5877] Bluetooth: hci3: command tx timeout [ 372.515158][T16916] netlink: 'syz.2.3137': attribute type 1 has an invalid length. [ 372.553230][T16916] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3137'. [ 372.695719][T16680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.726273][T16923] netlink: 'syz.2.3139': attribute type 3 has an invalid length. [ 372.889470][T16680] veth0_vlan: entered promiscuous mode [ 372.942567][T16680] veth1_vlan: entered promiscuous mode [ 373.102323][T16933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3140'. [ 373.306645][T16933] ksmbd: Unknown IPC event: 8, ignore. [ 373.318828][T16680] veth0_macvtap: entered promiscuous mode [ 373.417455][T16680] veth1_macvtap: entered promiscuous mode [ 373.588913][T16954] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3143'. [ 373.620521][T16680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.666505][T16680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.781341][T12595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.832507][T12595] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.897742][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.923540][T16961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3145'. [ 373.938692][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.001472][T16965] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3146'. [ 374.020611][T16968] netlink: 'syz.4.3147': attribute type 11 has an invalid length. [ 374.362535][ T5877] Bluetooth: hci3: command tx timeout [ 374.419333][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.473906][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.510482][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.548287][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.078134][T17006] syzkaller1: entered promiscuous mode [ 375.096957][T17006] syzkaller1: entered allmulticast mode [ 375.126845][T17006] netlink: 'syz.4.3158': attribute type 1 has an invalid length. [ 375.135440][T17006] nbd: illegal input index 1048576 [ 375.295498][T17010] team0: Device ip6gre1 is of different type [ 375.775622][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.807433][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.812794][T17023] netlink: 'syz.3.3162': attribute type 1 has an invalid length. [ 375.842576][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.872631][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.884308][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.936479][T17028] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 376.002833][T17022] wlan1 speed is unknown, defaulting to 1000 [ 376.011781][T17022] ip6tnl0 speed is unknown, defaulting to 1000 [ 376.478890][T17040] __nla_validate_parse: 4 callbacks suppressed [ 376.478921][T17040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3167'. [ 376.552593][T17047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3171'. [ 376.596449][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 376.596471][ T30] audit: type=1800 audit(1755004756.260:38): pid=17045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3169" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=3050 res=0 errno=0 [ 376.634275][T17047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.750358][T17051] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.870655][T17047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.341244][T17065] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 377.402250][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 377.479960][T17076] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 377.527656][T17076] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 377.551826][T17076] gretap3: entered promiscuous mode [ 377.569971][T17076] gretap3: entered allmulticast mode [ 377.590054][T17081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3180'. [ 377.613368][T17081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3180'. [ 377.657850][T17081] netlink: 'syz.2.3180': attribute type 1 has an invalid length. [ 377.709117][T17022] chnl_net:caif_netlink_parms(): no params data found [ 377.717123][T17081] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3180'. [ 377.883144][T17089] team0: Device wireguard0 is of different type [ 377.970328][ T51] Bluetooth: hci5: command tx timeout [ 378.107504][ T36] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.187991][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.208193][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.287087][T17108] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3186'. [ 378.302712][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.475949][T17114] netlink: 'syz.3.3189': attribute type 10 has an invalid length. [ 378.495257][T17022] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.538925][T17022] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.561695][T17022] bridge_slave_0: entered allmulticast mode [ 378.570052][T17022] bridge_slave_0: entered promiscuous mode [ 378.603424][T17022] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.632135][T17022] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.669639][T17022] bridge_slave_1: entered allmulticast mode [ 378.692732][T17022] bridge_slave_1: entered promiscuous mode [ 378.804494][T17129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3194'. [ 378.900282][T17022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.934002][T17022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.118344][T17022] team0: Port device team_slave_0 added [ 379.204111][T17022] team0: Port device team_slave_1 added [ 379.311209][T17146] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.369250][T17148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3202'. [ 379.396815][T17022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.416252][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.448813][T17022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.463009][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3203'. [ 379.498681][T17022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.521098][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.578856][T17022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.630524][T17156] openvswitch: netlink: Flow key attr not present in new flow. [ 379.945376][T17022] hsr_slave_0: entered promiscuous mode [ 379.954006][T17022] hsr_slave_1: entered promiscuous mode [ 379.969090][T17022] debugfs: 'hsr0' already exists in 'hsr' [ 379.988214][T17022] Cannot create hsr debugfs directory [ 380.042629][ T51] Bluetooth: hci5: command tx timeout [ 380.119322][T17163] tipc: Started in network mode [ 380.138725][T17163] tipc: Node identity 4af96b16ea53, cluster identity 4711 [ 380.190483][T17163] tipc: Enabled bearer , priority 0 [ 380.251535][T17184] tipc: Resetting bearer [ 380.349436][T17171] syzkaller0: entered promiscuous mode [ 380.370583][T17171] syzkaller0: entered allmulticast mode [ 380.400741][T17162] tipc: Resetting bearer [ 380.435271][T17162] tipc: Disabling bearer [ 380.826313][T17022] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.956860][T17022] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.120881][T17022] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 381.138213][T17022] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.277880][T17022] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.417335][T17217] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.426288][T17217] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.583809][T17217] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 381.585462][T17230] __nla_validate_parse: 36 callbacks suppressed [ 381.585484][T17230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3225'. [ 381.614908][T17219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.651519][T17225] tipc: Started in network mode [ 381.661502][T17225] tipc: Node identity e230bc1847c9, cluster identity 4711 [ 381.670439][T17225] tipc: Enabled bearer , priority 0 [ 381.900790][T17233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3226'. [ 381.915866][T17225] tipc: Disabling bearer [ 382.142443][ T51] Bluetooth: hci5: command tx timeout [ 382.220344][T17241] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3229'. [ 382.249463][T17241] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3229'. [ 382.379185][T17022] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 382.419714][T17022] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 382.475338][T17022] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 382.513724][T17259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.555135][T17257] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 382.666574][T17022] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 382.691871][T17257] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 382.697054][T17253] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3232'. [ 382.731863][T17257] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 382.760670][T17257] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 382.795695][T17257] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 382.889686][T17257] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 382.924580][T17257] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 382.958514][T17257] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 382.998764][T17257] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 383.055879][T17257] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 383.260720][T17285] bond0: entered promiscuous mode [ 383.351594][T17297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3242'. [ 383.824107][T17022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.929909][T17022] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.962792][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.970529][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.068078][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.077269][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.176168][T17324] tipc: Enabled bearer , priority 0 [ 384.199594][T17323] syzkaller0: entered promiscuous mode [ 384.201625][ T51] Bluetooth: hci5: command tx timeout [ 384.240464][T17323] syzkaller0: entered allmulticast mode [ 384.291684][T17022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.391810][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3252'. [ 384.462788][T17321] tipc: Resetting bearer [ 384.514893][T17321] tipc: Disabling bearer [ 384.528411][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.542688][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.600047][T17342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3255'. [ 384.650923][T17345] veth0: entered promiscuous mode [ 384.710052][T17342] team0: No ports can be present during mode change [ 384.727744][T17347] veth0: entered promiscuous mode [ 384.740063][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3255'. [ 384.742088][T17344] veth0: left promiscuous mode [ 384.776695][T17352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3258'. [ 385.106948][T17022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.327098][T17022] veth0_vlan: entered promiscuous mode [ 385.473335][T17370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.499808][T17022] veth1_vlan: entered promiscuous mode [ 385.540630][T17375] vlan2: entered promiscuous mode [ 385.554294][T17375] bond1: entered promiscuous mode [ 385.564024][T17375] vlan2: entered allmulticast mode [ 385.572470][T17375] bond1: entered allmulticast mode [ 385.704267][T17375] bond1: (slave gretap1): making interface the new active one [ 385.712768][T17375] gretap1: entered promiscuous mode [ 385.719960][T17375] gretap1: entered allmulticast mode [ 385.740407][T17375] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 385.741208][T17386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.890458][T17378] syzkaller0: entered promiscuous mode [ 385.906327][T17378] syzkaller0: entered allmulticast mode [ 385.929293][ T6083] syzkaller0: tun_net_xmit 48 [ 385.943587][T17381] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 385.952022][T17381] syzkaller0: Linktype set failed because interface is up [ 386.229878][T17403] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 387.005850][T17399] delete_channel: no stack [ 388.726368][T17022] veth0_macvtap: entered promiscuous mode [ 388.758154][T17022] veth1_macvtap: entered promiscuous mode [ 388.869649][T17022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.898891][T17022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.035349][ T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.070364][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.098324][T17421] __nla_validate_parse: 3 callbacks suppressed [ 389.098352][T17421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3277'. [ 389.129511][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.152684][T17424] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 389.180174][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.327707][T17426] bridge_slave_0: left allmulticast mode [ 389.349432][T17426] bridge_slave_0: left promiscuous mode [ 389.383326][T17426] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.423354][T17426] bridge_slave_1: left allmulticast mode [ 389.429522][T17426] bridge_slave_1: left promiscuous mode [ 389.492215][T17426] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.531932][T17426] bond0: (slave bond_slave_0): Releasing backup interface [ 389.534906][T17430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 389.581514][T17426] bond0: (slave bond_slave_1): Releasing backup interface [ 389.694050][T17426] team0: Port device team_slave_0 removed [ 389.756439][T17426] team0: Port device team_slave_1 removed [ 389.788505][T17426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.812322][T17426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.830551][T17426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.852151][T17426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.926752][T17426] bond1: (slave gretap1): Releasing active interface [ 389.939256][T17426] gretap1: left promiscuous mode [ 389.956282][T17426] gretap1: left allmulticast mode [ 390.244681][ T6408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.286332][ T6408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.377131][ T6083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.421807][ T6083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.508590][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3283'. [ 390.696971][T17458] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3286'. [ 390.741939][T17458] validate_nla: 11 callbacks suppressed [ 390.741961][T17458] netlink: 'syz.2.3286': attribute type 2 has an invalid length. [ 391.248390][T14392] IPVS: starting estimator thread 0... [ 391.311275][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3287'. [ 391.350521][T17461] netlink: 'syz.4.3287': attribute type 1 has an invalid length. [ 391.361019][T17461] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3287'. [ 391.361162][T17468] IPVS: using max 23 ests per chain, 55200 per kthread [ 391.853855][T17479] netlink: 'syz.2.3292': attribute type 16 has an invalid length. [ 391.881453][T17479] netlink: 'syz.2.3292': attribute type 17 has an invalid length. [ 391.997169][T17479] bond0: left promiscuous mode [ 392.025745][T17479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.091856][T17479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.616747][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 392.628926][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 392.637997][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 392.647172][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 392.656004][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 392.786161][T17503] wlan1 speed is unknown, defaulting to 1000 [ 392.804779][T17503] ip6tnl0 speed is unknown, defaulting to 1000 [ 393.099744][T12595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.159195][T12595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.183708][T17519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3300'. [ 393.241769][ T51] Bluetooth: hci0: command 0x041b tx timeout [ 393.492216][T12595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.529585][T12595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.570136][T17533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3302'. [ 393.723095][T17536] netlink: 'syz.1.3304': attribute type 1 has an invalid length. [ 393.739096][T17536] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3304'. [ 393.755150][T12595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.775414][T12595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.883979][T12595] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.914800][T12595] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.939050][T17548] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 393.959672][T17550] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 394.095089][T17558] netlink: 'syz.1.3312': attribute type 8 has an invalid length. [ 394.135757][T17562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3310'. [ 394.431637][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3315'. [ 394.526199][T17589] netlink: 'syz.2.3318': attribute type 1 has an invalid length. [ 394.551257][T17589] netlink: 'syz.2.3318': attribute type 3 has an invalid length. [ 394.587959][T17589] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3318'. [ 394.764303][ T51] Bluetooth: hci2: command tx timeout [ 394.788862][T17597] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3319'. [ 395.008677][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3324'. [ 395.074254][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3324'. [ 395.349653][ T70] smc: removing ib device syz1 [ 396.841562][ T51] Bluetooth: hci2: command tx timeout [ 397.569076][T12595] bond0 (unregistering): Released all slaves [ 397.620477][T12595] bond1 (unregistering): Released all slaves [ 397.897830][T12595] bond2 (unregistering): Released all slaves [ 398.057115][T12595] bond3 (unregistering): Released all slaves [ 398.208598][T12595] bond4 (unregistering): Released all slaves [ 398.226650][T12595] bond5 (unregistering): Released all slaves [ 398.242572][T12595] bond6 (unregistering): Released all slaves [ 398.278207][T17503] chnl_net:caif_netlink_parms(): no params data found [ 398.316871][T14390] ip6tnl0 speed is unknown, defaulting to 1000 [ 398.331235][T14390] syz1: Port: 1 Link DOWN [ 398.334311][T17612] gretap0: entered promiscuous mode [ 398.367856][T17612] gretap0: left promiscuous mode [ 398.576388][T12595] tipc: Disabling bearer [ 398.596902][T12595] tipc: Left network mode [ 398.923842][ T51] Bluetooth: hci2: command tx timeout [ 398.937018][T17503] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.958240][T17645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3332'. [ 398.964159][T17503] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.989549][T17503] bridge_slave_0: entered allmulticast mode [ 399.012270][T17503] bridge_slave_0: entered promiscuous mode [ 399.249442][T17647] tipc: Started in network mode [ 399.283248][T17647] tipc: Node identity 0601f0a7f0dd, cluster identity 4711 [ 399.372623][T17647] tipc: Enabled bearer , priority 0 [ 399.431172][T17670] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3335'. [ 399.436127][T17503] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.471737][T17503] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.490461][T17503] bridge_slave_1: entered allmulticast mode [ 399.520904][T17503] bridge_slave_1: entered promiscuous mode [ 399.534561][T17648] syzkaller0: entered promiscuous mode [ 399.546764][T17648] syzkaller0: entered allmulticast mode [ 399.563985][T17639] tipc: Resetting bearer [ 399.667645][T17637] tipc: Resetting bearer [ 399.806457][T17637] tipc: Disabling bearer [ 400.063762][T17503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.125126][T17503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.268094][T12595] hsr_slave_0: left promiscuous mode [ 400.312051][T12595] hsr_slave_1: left promiscuous mode [ 400.367586][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3344'. [ 400.439912][T12595] veth1_macvtap: left promiscuous mode [ 400.454396][T12595] veth0_macvtap: left promiscuous mode [ 400.503334][T17710] netlink: 'syz.2.3345': attribute type 1 has an invalid length. [ 401.004647][ T51] Bluetooth: hci2: command tx timeout [ 401.838742][T17711] netlink: 'syz.1.3344': attribute type 2 has an invalid length. [ 401.948783][T17718] netlink: 'syz.3.3347': attribute type 33 has an invalid length. [ 402.116987][T17503] team0: Port device team_slave_0 added [ 402.164138][T17718] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 402.235708][T17503] team0: Port device team_slave_1 added [ 402.426621][T17503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.436492][T17503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.512422][T17503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.577114][T17503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.592533][T17503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.637102][T17503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.842084][T17503] hsr_slave_0: entered promiscuous mode [ 402.859401][T17503] hsr_slave_1: entered promiscuous mode [ 402.879769][T17503] debugfs: 'hsr0' already exists in 'hsr' [ 402.894249][T17503] Cannot create hsr debugfs directory [ 402.924343][T12595] IPVS: stop unused estimator thread 0... [ 403.181122][T17755] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 403.516548][T17775] IPv4: Oversized IP packet from 172.20.20.24 [ 403.526252][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 403.534232][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 404.475944][T17820] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3375'. [ 404.668162][T17818] ip6gre1: entered allmulticast mode [ 404.747882][T17503] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 404.780430][T17836] netlink: 'syz.3.3379': attribute type 1 has an invalid length. [ 404.888494][T17836] bond2 (unregistering): Released all slaves [ 404.955984][T17840] tipc: Enabling of bearer rejected, media not registered [ 404.989682][T17503] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 405.043903][T17843] ip6tnl2: entered promiscuous mode [ 405.049596][T17843] ip6tnl2: entered allmulticast mode [ 405.083980][T17503] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 405.110542][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3382'. [ 405.120329][T17503] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 405.132127][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3382'. [ 405.499562][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3386'. [ 405.518468][T17863] IPVS: Scheduler module ip_vs_sip not found [ 405.544373][T17503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.563958][T17875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.638223][T17875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.767385][T17503] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.817865][T12595] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.825754][T12595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.885656][T17888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3389'. [ 405.900753][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.908359][ T6083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.009595][T17893] netlink: 340 bytes leftover after parsing attributes in process `syz.0.3390'. [ 406.029998][T17894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3388'. [ 406.063076][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3389'. [ 406.297784][T17900] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 406.643158][T15864] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.671498][T15864] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.709014][T15864] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.759044][T15864] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.865513][T17925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3399'. [ 406.905943][T17503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.906470][T17925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3399'. [ 408.040566][T17503] veth0_vlan: entered promiscuous mode [ 408.189333][T17503] veth1_vlan: entered promiscuous mode [ 408.528318][T17503] veth0_macvtap: entered promiscuous mode [ 408.636218][T17503] veth1_macvtap: entered promiscuous mode [ 408.839336][T17503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.917637][T17503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.153748][ T2909] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.211412][ T2909] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.220667][ T2909] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.408762][ T2909] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.230583][T12595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.343888][T12595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.647791][ T6408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.722299][ T6408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.799113][T17985] __nla_validate_parse: 5 callbacks suppressed [ 410.799133][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3416'. [ 410.936131][T17984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3416'. [ 412.053611][T17989] tipc: Started in network mode [ 412.066930][T17989] tipc: Node identity 0680096cb7d5, cluster identity 4711 [ 412.084631][T17989] tipc: Enabled bearer , priority 0 [ 412.139259][T17993] syzkaller0: entered promiscuous mode [ 412.172518][T17993] syzkaller0: entered allmulticast mode [ 412.400449][T18009] tipc: Resetting bearer [ 412.459134][T18021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3425'. [ 412.476084][T17987] tipc: Resetting bearer [ 412.520144][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3425'. [ 412.612010][T17987] tipc: Disabling bearer [ 412.632285][T14392] IPVS: starting estimator thread 0... [ 412.732494][T18028] IPVS: using max 24 ests per chain, 57600 per kthread [ 413.469314][T18037] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3429'. [ 413.818267][T18047] gtp0: entered promiscuous mode [ 414.188476][T18056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3434'. [ 414.459298][T18066] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3436'. [ 414.470339][T18067] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3437'. [ 414.514119][T18066] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3436'. [ 414.582436][T18069] netlink: 'syz.4.3436': attribute type 1 has an invalid length. [ 414.622169][T18066] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3436'. [ 414.941583][T18083] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 414.977409][T18083] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 415.388928][T18090] tipc: Enabled bearer , priority 0 [ 415.547680][T18098] syzkaller0: entered promiscuous mode [ 415.568979][T18098] syzkaller0: entered allmulticast mode [ 415.671776][T18090] tipc: Resetting bearer [ 416.432629][T14392] tipc: Node number set to 2784607256 [ 416.662042][T18125] __nla_validate_parse: 7 callbacks suppressed [ 416.662065][T18125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3450'. [ 417.255376][T18089] tipc: Resetting bearer [ 417.597782][T18089] tipc: Disabling bearer [ 418.091641][T18148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3457'. [ 418.159088][T18148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3457'. [ 418.312047][T18140] block nbd1: server does not support multiple connections per device. [ 418.335223][T18140] block nbd1: shutting down sockets [ 418.952314][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3461'. [ 418.966756][T18170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3463'. [ 419.605687][T18183] netlink: 'syz.3.3467': attribute type 1 has an invalid length. [ 419.737270][T18181] bond3: entered promiscuous mode [ 419.755422][T18181] bond3: entered allmulticast mode [ 419.767965][T18181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 420.277690][T18181] bond3 (unregistering): Released all slaves [ 420.898844][T18200] bridge: RTM_NEWNEIGH with invalid ether address [ 421.054074][T18206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3474'. [ 421.988400][T18220] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 422.039135][T18220] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 422.059460][T18220] gretap1: entered promiscuous mode [ 422.089318][T18220] gretap1: entered allmulticast mode [ 422.485402][T18233] syzkaller0: entered promiscuous mode [ 422.544440][T18233] syzkaller0: entered allmulticast mode [ 422.737083][T18248] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3484'. [ 422.857592][T18232] tipc: Enabled bearer , priority 0 [ 423.044795][T18232] tipc: Resetting bearer [ 423.223945][T18232] tipc: Disabling bearer [ 424.464357][T18274] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3491'. [ 424.777425][T18279] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3492'. [ 425.165579][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3493'. [ 425.218912][T18287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3493'. [ 425.376814][T18297] netlink: 'syz.3.3497': attribute type 1 has an invalid length. [ 425.415195][T18297] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3497'. [ 425.690684][T18281] netlink: 'syz.4.3493': attribute type 16 has an invalid length. [ 425.754809][T18281] netlink: 'syz.4.3493': attribute type 17 has an invalid length. [ 425.828951][T18281] eql: remember to turn off Van-Jacobson compression on your slave devices [ 425.929518][T18281] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 426.296925][T18305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3500'. [ 426.893446][T18324] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3507'. [ 426.991557][T18325] netlink: 'syz.4.3508': attribute type 5 has an invalid length. [ 427.061986][T18325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3508'. [ 427.137409][T18334] openvswitch: netlink: Flow key attr not present in new flow. [ 427.202701][T18334] netlink: 'syz.3.3510': attribute type 178 has an invalid length. [ 427.648182][T18347] pim6reg: entered allmulticast mode [ 429.140075][T18389] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 429.268225][T18391] pim6reg: entered allmulticast mode [ 429.447975][T18399] IPv6: Can't replace route, no match found [ 429.795024][T18404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3529'. [ 430.205887][T18412] netlink: 'syz.4.3530': attribute type 4 has an invalid length. [ 430.732606][T18423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3533'. [ 430.749976][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 432.345230][T18459] x_tables: ip_tables: udp match: only valid for protocol 17 [ 434.722845][ T2909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.765885][ T2909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.807645][ T2909] bond0 (unregistering): Released all slaves [ 435.123199][ T2909] bond1 (unregistering): (slave veth3): Releasing backup interface [ 435.145630][ T2909] bond1 (unregistering): Released all slaves [ 435.165667][ T2909] bond2 (unregistering): Released all slaves [ 435.194798][ T2909] bond3 (unregistering): Released all slaves [ 435.230603][ T2909] bond4 (unregistering): Released all slaves [ 435.251993][ T2909] bond5 (unregistering): Released all slaves [ 435.278706][ T2909] bond6 (unregistering): Released all slaves [ 435.772704][ T2909] bond7 (unregistering): (slave veth13): Releasing active interface [ 435.805902][ T2909] bond7 (unregistering): Released all slaves [ 435.843546][ T2909] bond8 (unregistering): Released all slaves [ 436.320086][ T2909] bond9 (unregistering): (slave veth15): Releasing active interface [ 436.349841][ T2909] bond9 (unregistering): Released all slaves [ 436.386048][ T2909] bond10 (unregistering): Released all slaves [ 436.888341][ T2909] bond11 (unregistering): (slave wireguard0): Releasing backup interface [ 436.910011][ T2909] wireguard0: left promiscuous mode [ 436.946562][ T2909] bond11 (unregistering): Released all slaves [ 436.997819][T18446] netem: incorrect gi model size [ 437.021707][T18446] netem: change failed [ 437.045590][T18448] netem: incorrect gi model size [ 437.105209][T18448] netem: change failed [ 437.636094][T18473] netlink: 'syz.3.3548': attribute type 2 has an invalid length. [ 437.696550][T18475] netlink: 'syz.2.3547': attribute type 1 has an invalid length. [ 437.713413][T18473] netlink: 'syz.3.3548': attribute type 2 has an invalid length. [ 437.745313][ T2909] tipc: Left network mode [ 437.772462][T18475] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3547'. [ 438.798481][T18507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.965161][T18503] ip6gre1: entered allmulticast mode [ 439.004649][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a17c00: rx timeout, send abort [ 439.014015][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058a17c00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 439.324211][T18520] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3558'. [ 439.434866][ T2909] hsr_slave_0: left promiscuous mode [ 439.479013][ T2909] hsr_slave_1: left promiscuous mode [ 439.510533][ T2909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.557086][ T2909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.613548][ T2909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.656265][ T2909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.852095][ T30] audit: type=1800 audit(1755004820.470:39): pid=18541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3563" name="memory.events" dev="tmpfs" ino=149 res=0 errno=0 [ 445.975628][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.935453][ T2909] veth1_macvtap: left promiscuous mode [ 446.958239][ T2909] veth0_macvtap: left promiscuous mode [ 446.982494][ T2909] veth1_vlan: left promiscuous mode [ 448.567785][ T2909] team0 (unregistering): Port device vlan0 removed [ 449.490552][ T2909] team0 (unregistering): Port device team_slave_1 removed [ 449.644665][ T2909] team0 (unregistering): Port device team_slave_0 removed [ 450.878119][ T23] sched: DL replenish lagged too much [ 451.242089][T18536] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3563'. [ 451.392895][T18539] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 452.481398][T18564] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 453.091845][T18570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3573'. [ 453.215243][T18578] tipc: Enabled bearer , priority 0 [ 453.236796][T18578] syzkaller0: entered promiscuous mode [ 453.252293][T18578] syzkaller0: entered allmulticast mode [ 453.420272][T18580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3576'. [ 453.667737][T18577] tipc: Resetting bearer [ 453.908337][T18577] tipc: Disabling bearer [ 454.879875][T18604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3581'. [ 455.006898][ T5877] Bluetooth: hci2: command 0x0405 tx timeout [ 455.335585][T18611] netlink: 'syz.3.3584': attribute type 39 has an invalid length. [ 455.492167][T18616] netlink: 212364 bytes leftover after parsing attributes in process `syz.4.3585'. [ 455.528041][T18616] openvswitch: netlink: Message has 5 unknown bytes. [ 456.623949][T18637] netlink: 'syz.1.3591': attribute type 12 has an invalid length. [ 456.655647][T18637] netlink: 'syz.1.3591': attribute type 29 has an invalid length. [ 456.700242][T18637] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3591'. [ 456.737202][T18637] netlink: 'syz.1.3591': attribute type 2 has an invalid length. [ 456.757509][T18637] netlink: 23 bytes leftover after parsing attributes in process `syz.1.3591'. [ 457.194619][T18645] netlink: 'syz.1.3594': attribute type 83 has an invalid length. [ 457.623771][T18656] netlink: 'syz.1.3598': attribute type 5 has an invalid length. [ 457.676042][T18656] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3598'. [ 458.135946][T18665] netlink: 'syz.3.3602': attribute type 83 has an invalid length. [ 458.609082][T18673] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3605'. [ 458.682649][T18677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3605'. [ 458.810884][T18679] netlink: 'syz.3.3605': attribute type 11 has an invalid length. [ 458.830822][T18679] netlink: 'syz.3.3605': attribute type 11 has an invalid length. [ 458.897915][T18679] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3605'. [ 460.715047][T18718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3618'. [ 460.939290][T18722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3620'. [ 460.960314][T18723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3620'. [ 461.251786][T18727] netlink: 'syz.0.3622': attribute type 29 has an invalid length. [ 461.263429][T18728] netlink: 'syz.0.3622': attribute type 29 has an invalid length. [ 463.554546][T18760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3634'. [ 463.628120][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3635'. [ 463.665552][T18763] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3634'. [ 463.665621][T18762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3633'. [ 463.706742][T18763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3634'. [ 463.880094][T18769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3636'. [ 463.926086][T18769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3636'. [ 463.950476][T18771] netlink: 'syz.0.3637': attribute type 21 has an invalid length. [ 463.982517][T18771] IPv6: NLM_F_CREATE should be specified when creating new route [ 465.031989][T18801] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3645'. [ 465.518212][T18810] netlink: 'syz.0.3649': attribute type 16 has an invalid length. [ 465.559974][T18810] netlink: 'syz.0.3649': attribute type 3 has an invalid length. [ 465.610065][T18810] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3649'. [ 465.655393][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3648'. [ 466.017685][T18830] netlink: 'syz.3.3653': attribute type 1 has an invalid length. [ 466.137931][T18825] vlan2: entered promiscuous mode [ 466.155640][T18825] bridge0: entered promiscuous mode [ 466.235414][T18833] chnl_net:caif_netlink_parms(): no params data found [ 469.278028][T18853] netlink: 'syz.2.3661': attribute type 29 has an invalid length. [ 469.325260][T18856] __nla_validate_parse: 2 callbacks suppressed [ 469.325283][T18856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3662'. [ 469.351619][T18853] netlink: 'syz.2.3661': attribute type 29 has an invalid length. [ 469.396415][T18853] netlink: 'syz.2.3661': attribute type 29 has an invalid length. [ 469.517712][T18856] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 469.590137][T18853] netlink: 'syz.2.3661': attribute type 29 has an invalid length. [ 470.312881][T18870] netlink: 'syz.0.3666': attribute type 6 has an invalid length. [ 471.018221][T18877] team0: Device vti0 is up. Set it down before adding it as a team port [ 472.179181][ T2909] IPVS: stop unused estimator thread 0... [ 474.042311][T18921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.475958][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3677'. [ 474.501860][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3679'. [ 474.655594][T18933] netlink: 'syz.3.3680': attribute type 33 has an invalid length. [ 474.718839][T18933] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 475.101757][T18943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.769852][T18961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3687'. [ 475.983167][T18963] netlink: 'syz.2.3688': attribute type 1 has an invalid length. [ 476.114674][T18965] sctp: [Deprecated]: syz.1.3689 (pid 18965) Use of int in maxseg socket option. [ 476.114674][T18965] Use struct sctp_assoc_value instead [ 477.352381][T18990] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3697'. [ 477.375084][T18990] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 477.430141][T18990] dvmrp1: entered allmulticast mode [ 477.845283][T18995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3699'. [ 477.919017][T18997] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3700'. [ 478.700728][T19020] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3707'. [ 478.774988][ T5880] Bluetooth: hci0: command 0x041b tx timeout [ 478.782964][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 478.831020][T19021] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3707'. [ 479.086085][T19026] nbd: must specify a size in bytes for the device [ 479.165943][T19026] netlink: 'syz.4.3708': attribute type 1 has an invalid length. [ 479.211315][T19026] netlink: 'syz.4.3708': attribute type 3 has an invalid length. [ 479.240140][T19026] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3708'. [ 479.487074][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3711'. [ 479.503475][T19032] netlink: 'syz.3.3710': attribute type 1 has an invalid length. [ 479.979458][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3713'. [ 480.052663][T19046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3713'. [ 480.130398][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3713'. [ 480.191430][T19046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3713'. [ 480.248988][T19050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3715'. [ 480.260340][T19043] netlink: 50 bytes leftover after parsing attributes in process `syz.0.3713'. [ 480.302368][T19046] netlink: 50 bytes leftover after parsing attributes in process `syz.0.3713'. [ 480.597709][T19058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.650295][T19059] netlink: 'syz.4.3718': attribute type 1 has an invalid length. [ 481.019710][T19070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3722'. [ 481.215943][T19075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3723'. [ 483.069018][T19100] netlink: 'syz.1.3730': attribute type 1 has an invalid length. [ 484.340666][T19120] netlink: 'syz.0.3737': attribute type 10 has an invalid length. [ 484.501372][T19120] veth0_vlan: entered allmulticast mode [ 484.760784][T19120] veth0_vlan: left promiscuous mode [ 484.798376][T19120] veth0_vlan: entered promiscuous mode [ 484.865421][T19120] team0: Device veth0_vlan failed to register rx_handler [ 485.319087][T19149] ip6gre1: entered allmulticast mode [ 485.429823][T19150] tipc: Enabled bearer , priority 0 [ 485.439070][T19152] syzkaller0: entered promiscuous mode [ 485.467389][T19152] syzkaller0: entered allmulticast mode [ 485.587146][T19152] tipc: Resetting bearer [ 485.823486][T19152] tipc: Disabling bearer [ 486.668201][T19177] __nla_validate_parse: 3 callbacks suppressed [ 486.668225][T19177] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3751'. [ 486.714260][T19177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3751'. [ 486.794292][T19179] netlink: 'syz.1.3752': attribute type 1 has an invalid length. [ 486.819191][T19179] netlink: 'syz.1.3752': attribute type 1 has an invalid length. [ 486.862411][T19179] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3752'. [ 486.889184][T19177] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3751'. [ 486.918318][T19177] netlink: 'syz.4.3751': attribute type 2 has an invalid length. [ 486.968658][T19177] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3751'. [ 487.142643][T19185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3753'. [ 487.248781][T19187] netlink: 'syz.1.3753': attribute type 1 has an invalid length. [ 487.273228][T19187] netlink: 'syz.1.3753': attribute type 2 has an invalid length. [ 487.320293][T19188] netlink: 'syz.1.3753': attribute type 1 has an invalid length. [ 487.358762][T19188] netlink: 'syz.1.3753': attribute type 2 has an invalid length. [ 487.858399][T19191] netlink: 'syz.0.3754': attribute type 21 has an invalid length. [ 487.902212][T19191] netlink: 'syz.0.3754': attribute type 22 has an invalid length. [ 487.929204][T19191] netlink: 'syz.0.3754': attribute type 23 has an invalid length. [ 487.983357][T19191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3754'. [ 488.590604][T19208] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3759'. [ 488.613620][T19208] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3759'. [ 488.925222][T19213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3761'. [ 489.006245][ T5877] Bluetooth: hci3: command 0x0406 tx timeout [ 489.906169][T19230] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 490.950144][T19254] unknown channel width for channel at 909000KHz? [ 490.979574][T19254] unknown channel width for channel at 909000KHz? [ 491.000348][T19254] unknown channel width for channel at 909000KHz? [ 491.581410][T19265] chnl_net:caif_netlink_parms(): no params data found [ 491.693275][T19266] chnl_net:caif_netlink_parms(): no params data found [ 492.456829][T19270] tipc: Enabled bearer , priority 10 [ 492.789509][T19274] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 493.076721][T19276] tipc: Enabling of bearer rejected, media not registered [ 493.576401][T14392] tipc: Node number set to 4141674663 [ 494.422366][T19305] pimreg: entered allmulticast mode [ 494.450038][T19305] pimreg: left allmulticast mode [ 494.982707][T19312] tipc: Enabling of bearer rejected, media not registered [ 495.146517][T19316] __nla_validate_parse: 4 callbacks suppressed [ 495.146538][T19316] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3789'. [ 496.056916][T19332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3794'. [ 496.690750][T19335] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 496.712748][T19338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3796'. [ 496.882944][T19335] bond3: (slave vcan1): Error -95 calling set_mac_address [ 496.978035][T19349] pim6reg: left allmulticast mode [ 497.654047][T19369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3805'. [ 498.607758][T19394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3811'. [ 498.659783][T19393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3811'. [ 498.725856][T19394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3811'. [ 498.773271][T19393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3811'. [ 499.249771][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 499.534998][T19420] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.3816'. [ 499.675223][T19423] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 499.792104][T19427] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3819'. [ 500.184127][T19432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 500.973579][T19463] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3828'. [ 501.393078][T19473] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3833'. [ 501.956390][T19487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3835'. [ 502.030340][T19484] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3836'. [ 502.555136][T19498] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3839'. [ 502.796204][T19506] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3841'. [ 502.911285][T19509] validate_nla: 6 callbacks suppressed [ 502.911308][T19509] netlink: 'syz.0.3840': attribute type 2 has an invalid length. [ 503.133440][T19514] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3842'. [ 503.162487][T19509] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.3840'. [ 503.299482][T19518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3844'. [ 503.383034][T19518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3844'. [ 503.400620][ T6083] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 503.948461][ T6083] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 504.107387][ T5877] Bluetooth: hci2: link tx timeout [ 504.115310][ T5877] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 504.127840][ T5877] Bluetooth: hci2: link tx timeout [ 504.133750][ T5877] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 504.142733][ T5877] Bluetooth: hci2: link tx timeout [ 504.148136][ T5877] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 504.162962][ T5877] Bluetooth: hci2: link tx timeout [ 504.168780][ T5877] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 504.185807][ T5877] Bluetooth: hci2: link tx timeout [ 504.193394][ T5877] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 504.207601][ T5877] Bluetooth: hci2: link tx timeout [ 504.213014][ T5877] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 504.221807][ T5877] Bluetooth: hci2: link tx timeout [ 504.227493][ T5877] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 504.238056][ T5877] Bluetooth: hci2: link tx timeout [ 504.243584][ T5877] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 504.252889][ T5877] Bluetooth: hci2: link tx timeout [ 504.258445][ T5877] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 504.270718][ T5877] Bluetooth: hci2: link tx timeout [ 504.276667][ T5877] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 504.299726][ T5877] Bluetooth: hci2: link tx timeout [ 504.305309][ T5877] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 504.315014][ T5877] Bluetooth: hci2: link tx timeout [ 504.320622][ T5877] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 504.337510][ T5877] Bluetooth: hci2: link tx timeout [ 504.343466][ T5877] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 505.109319][T19547] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 505.735902][T19583] gtp0: entered promiscuous mode [ 505.750259][T19583] gtp0: entered allmulticast mode [ 505.770519][T19588] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 506.193465][T19617] __nla_validate_parse: 9 callbacks suppressed [ 506.193488][T19617] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3869'. [ 506.219901][ T5877] Bluetooth: hci2: command 0x0405 tx timeout [ 506.349217][T19624] syz.4.3870 (19624) used obsolete PPPIOCDETACH ioctl [ 506.371696][T19624] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3870'. [ 506.936108][T19648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.036522][T19654] syzkaller0: entered promiscuous mode [ 507.056699][T19654] syzkaller0: entered allmulticast mode [ 507.076360][T19653] tipc: Started in network mode [ 507.095989][T19653] tipc: Node identity 8671988db8b3, cluster identity 4711 [ 507.130581][T19653] tipc: Enabled bearer , priority 0 [ 507.145152][T19654] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 507.407938][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 507.837973][T19691] : renamed from hsr0 (while UP) [ 507.866450][T19652] tipc: Resetting bearer [ 507.918578][T19652] tipc: Disabling bearer [ 508.006579][T19700] veth1_virt_wifi: mtu less than device minimum [ 508.016957][T19698] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3894'. [ 508.211218][T19707] netlink: 'syz.4.3898': attribute type 2 has an invalid length. [ 508.673761][T19721] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 508.747147][T19724] netlink: 'syz.1.3904': attribute type 1 has an invalid length. [ 508.768817][T19724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.977695][T19727] netlink: 'syz.1.3904': attribute type 10 has an invalid length. [ 509.375024][T19741] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3909'. [ 509.538961][T19741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3909'. [ 509.733455][T19741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.845852][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 510.235758][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3913'. [ 510.283631][T19755] 8021q: VLANs not supported on wg0 [ 510.733619][T19769] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3917'. [ 511.018316][T19769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3917'. [ 511.490086][T19777] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3919'. [ 513.583177][T19819] netlink: 'syz.1.3926': attribute type 21 has an invalid length. [ 513.648678][T19819] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3926'. [ 515.054645][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3930'. [ 515.177709][T19832] netlink: 'syz.4.3931': attribute type 1 has an invalid length. [ 515.486162][T19832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 515.656120][T19836] veth3: entered promiscuous mode [ 516.409984][T19856] netlink: 'syz.1.3937': attribute type 11 has an invalid length. [ 516.437865][T19856] netlink: 'syz.1.3937': attribute type 11 has an invalid length. [ 516.469084][T19856] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3937'. [ 516.574607][T19859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3937'. [ 516.597563][T19859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3937'. [ 517.190153][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3938'. [ 517.978295][T19878] syzkaller1: entered promiscuous mode [ 517.994480][T19878] syzkaller1: entered allmulticast mode [ 518.718781][T19889] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3946'. [ 519.695880][T19895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3949'. [ 519.731534][T19896] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3950'. [ 519.741885][T19895] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 519.795541][T19895] netlink: 'syz.1.3949': attribute type 12 has an invalid length. [ 519.841155][T19895] netlink: 'syz.1.3949': attribute type 29 has an invalid length. [ 519.881421][T19895] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3949'. [ 520.080285][T19895] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3949'. [ 520.944055][T19932] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3958'. [ 520.964781][T19927] IPVS: persistence engine module ip_vs_pe_À not found [ 521.024821][T19932] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3958'. [ 521.123589][T19936] netlink: 'syz.4.3959': attribute type 1 has an invalid length. [ 521.451929][T19941] netlink: ct family unspecified [ 521.457202][T19941] openvswitch: netlink: Actions may not be safe on all matching packets [ 521.548181][T19944] bridge0: port 3(veth0_to_bridge) entered blocking state [ 521.585615][T19944] bridge0: port 3(veth0_to_bridge) entered disabled state [ 521.611618][T19944] veth0_to_bridge: entered allmulticast mode [ 521.635253][T19944] veth0_to_bridge: entered promiscuous mode [ 521.875957][T19947] netlink: 'syz.0.3963': attribute type 1 has an invalid length. [ 521.956945][T19947] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3963'. [ 522.159951][T19963] openvswitch: netlink: Actions may not be safe on all matching packets [ 522.393880][T19968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3967'. [ 522.458937][T19973] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3967'. [ 522.485385][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3968'. [ 522.501559][T19973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3967'. [ 522.632797][T19974] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 523.326447][T19994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3972'. [ 524.224591][T19910] udevd[19910]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 537.990333][T12595] bond1 (unregistering): Released all slaves [ 538.103314][T12595] bond0 (unregistering): Released all slaves [ 538.158824][T12595] bond2 (unregistering): Released all slaves [ 538.207707][T12595] bond3 (unregistering): Released all slaves [ 538.249325][T12595] bond4 (unregistering): Released all slaves [ 538.285364][T12595] bond5 (unregistering): Released all slaves [ 539.259435][T20043] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3983'. [ 540.662094][T20053] netlink: 'syz.4.3986': attribute type 28 has an invalid length. [ 540.670082][T20053] netlink: 'syz.4.3986': attribute type 3 has an invalid length. [ 540.811325][T20053] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3986'. [ 541.184917][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 541.206917][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 541.218514][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 541.232701][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 541.242377][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 541.269339][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 541.282756][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 541.296118][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 541.314141][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 541.337200][ T5886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 541.737403][T20058] wlan1 speed is unknown, defaulting to 1000 [ 541.739288][T12595] : left promiscuous mode [ 541.867242][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 541.888191][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 541.916985][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 541.969917][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 542.021249][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 542.113887][T20060] wlan1 speed is unknown, defaulting to 1000 [ 542.333335][T20065] wlan1 speed is unknown, defaulting to 1000 [ 543.401300][ T5886] Bluetooth: hci3: command tx timeout [ 543.408264][ T51] Bluetooth: hci0: command tx timeout [ 543.554762][ T70] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 543.729842][T20058] chnl_net:caif_netlink_parms(): no params data found [ 544.017623][T20065] chnl_net:caif_netlink_parms(): no params data found [ 544.110192][T20060] chnl_net:caif_netlink_parms(): no params data found [ 544.161716][ T5886] Bluetooth: hci4: command tx timeout [ 544.570348][T20058] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.596088][T20058] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.618547][T20058] bridge_slave_0: entered allmulticast mode [ 544.640774][T20058] bridge_slave_0: entered promiscuous mode [ 544.798060][T20058] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.832532][T20058] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.840282][T20058] bridge_slave_1: entered allmulticast mode [ 544.900459][T20058] bridge_slave_1: entered promiscuous mode [ 545.508955][ T5886] Bluetooth: hci3: command tx timeout [ 545.508992][ T51] Bluetooth: hci0: command tx timeout [ 545.542309][T20058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.907830][T20065] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.923796][T20065] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.951727][T20065] bridge_slave_0: entered allmulticast mode [ 545.982996][T20065] bridge_slave_0: entered promiscuous mode [ 546.004348][T20065] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.021118][T20065] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.039448][T20065] bridge_slave_1: entered allmulticast mode [ 546.075327][T20065] bridge_slave_1: entered promiscuous mode [ 546.133769][T20058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.176409][T12595] tipc: Disabling bearer [ 546.244049][T12595] tipc: Left network mode [ 546.291289][ T5886] Bluetooth: hci4: command tx timeout [ 546.358143][T12595] IPVS: stopping backup sync thread 10533 ... [ 546.451726][T20060] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.484939][T20060] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.502925][T20060] bridge_slave_0: entered allmulticast mode [ 546.520660][T20060] bridge_slave_0: entered promiscuous mode [ 546.760077][T20058] team0: Port device team_slave_0 added [ 546.783274][T20060] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.810391][T20060] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.828668][T20060] bridge_slave_1: entered allmulticast mode [ 546.850762][T20060] bridge_slave_1: entered promiscuous mode [ 547.127158][T20065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.324649][T20058] team0: Port device team_slave_1 added [ 547.528272][T20065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.566550][ T5886] Bluetooth: hci0: command tx timeout [ 547.572310][ T51] Bluetooth: hci3: command tx timeout [ 547.738522][T20058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.762292][T20058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.862587][T20058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.959639][T20060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.055588][T20141] xfrm1: entered allmulticast mode [ 548.063453][T20058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.093005][T20058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.161473][T20058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.310282][T20060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.368712][ T5886] Bluetooth: hci4: command tx timeout [ 548.620277][T20156] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4002'. [ 548.669803][T20156] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4002'. [ 549.005132][T20065] team0: Port device team_slave_0 added [ 549.106839][T20060] team0: Port device team_slave_0 added [ 549.274482][T20165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4004'. [ 549.315594][T20058] hsr_slave_0: entered promiscuous mode [ 549.344122][T20058] hsr_slave_1: entered promiscuous mode [ 549.376292][T20058] debugfs: 'hsr0' already exists in 'hsr' [ 549.403157][T20058] Cannot create hsr debugfs directory [ 549.417372][T20065] team0: Port device team_slave_1 added [ 549.506488][T20060] team0: Port device team_slave_1 added [ 549.539447][T20166] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4004'. [ 549.642252][ T51] Bluetooth: hci3: command tx timeout [ 549.648074][ T5886] Bluetooth: hci0: command tx timeout [ 550.424310][T20065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.441157][ T5886] Bluetooth: hci4: command tx timeout [ 550.454303][T20065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.486797][T20065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.513040][T20060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.532298][T20060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.615280][T20060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.709759][T12595] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 550.723148][T12595] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 550.733878][T12595] CPU: 1 UID: 0 PID: 12595 Comm: kworker/u8:10 Not tainted 6.16.0-syzkaller-12091-g89886abd0734 #0 PREEMPT(full) [ 550.747267][T12595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 550.757938][T12595] Workqueue: netns cleanup_net [ 550.763059][T12595] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 550.769432][T12595] Code: ff ff ff e8 63 d9 41 01 89 c5 31 ff 89 c6 e8 58 ce 88 f7 85 ed 74 45 e8 0f ca 88 f7 eb 05 e8 08 ca 88 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 92 34 ec f7 49 8b 2c 24 49 8d 7c [ 550.790129][T12595] RSP: 0018:ffffc9001a8bf0c0 EFLAGS: 00010206 [ 550.796510][T12595] RAX: 000000001fffe000 RBX: 1ffff1100aa6a702 RCX: ffff88807d439e00 [ 550.805049][T12595] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 550.813412][T12595] RBP: 0000000000000001 R08: ffffffff8fa34637 R09: 1ffffffff1f468c6 [ 550.821975][T12595] R10: dffffc0000000000 R11: fffffbfff1f468c7 R12: 00000000ffff0000 [ 550.830332][T12595] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888055353810 [ 550.839044][T12595] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 550.848278][T12595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.855079][T12595] CR2: 0000000000000000 CR3: 00000000557ac000 CR4: 00000000003526f0 [ 550.863490][T12595] Call Trace: [ 550.867182][T12595] [ 550.870322][T12595] mld_clear_delrec+0x160/0x660 [ 550.875386][T12595] ipv6_mc_destroy_dev+0x45/0x5a0 [ 550.880842][T12595] ? addrconf_ifdown+0x1396/0x1880 [ 550.886168][T12595] addrconf_ifdown+0x139e/0x1880 [ 550.891342][T12595] ? tls_dev_event+0x717/0xec0 [ 550.896230][T12595] ? __pfx_addrconf_ifdown+0x10/0x10 [ 550.901844][T12595] addrconf_notify+0x1bc/0x1010 [ 550.906836][T12595] notifier_call_chain+0x1b6/0x3e0 [ 550.912275][T12595] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 550.918912][T12595] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 550.925966][T12595] ? __pfx_call_rcu+0x10/0x10 [ 550.931340][T12595] unregister_netdevice_queue+0x33c/0x380 [ 550.937408][T12595] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 550.944063][T12595] _cfg80211_unregister_wdev+0x165/0x590 [ 550.950001][T12595] ieee80211_remove_interfaces+0x49a/0x6e0 [ 550.955936][T12595] ? __pfx_synchronize_rcu+0x10/0x10 [ 550.961358][T12595] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 550.968440][T12595] ? rcu_is_watching+0x15/0xb0 [ 550.973762][T12595] ieee80211_unregister_hw+0x5d/0x2c0 [ 550.979279][T12595] mac80211_hwsim_del_radio+0x275/0x460 [ 550.985205][T12595] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 550.991495][T12595] hwsim_exit_net+0x584/0x640 [ 550.996214][T12595] ? __pfx_hwsim_exit_net+0x10/0x10 [ 551.001714][T12595] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 551.007655][T12595] ops_undo_list+0x49a/0x990 [ 551.012363][T12595] ? __pfx_ops_undo_list+0x10/0x10 [ 551.017658][T12595] ? do_raw_spin_unlock+0x122/0x240 [ 551.023098][T12595] cleanup_net+0x4c5/0x800 [ 551.027646][T12595] ? __pfx_cleanup_net+0x10/0x10 [ 551.032792][T12595] ? _raw_spin_unlock_irq+0x23/0x50 [ 551.038114][T12595] ? process_scheduled_works+0x9ef/0x17b0 [ 551.044044][T12595] ? process_scheduled_works+0x9ef/0x17b0 [ 551.050327][T12595] process_scheduled_works+0xade/0x17b0 [ 551.056086][T12595] ? __pfx_process_scheduled_works+0x10/0x10 [ 551.062368][T12595] worker_thread+0x8a0/0xda0 [ 551.067263][T12595] kthread+0x70e/0x8a0 [ 551.071455][T12595] ? __pfx_worker_thread+0x10/0x10 [ 551.076598][T12595] ? __pfx_kthread+0x10/0x10 [ 551.081488][T12595] ? _raw_spin_unlock_irq+0x23/0x50 [ 551.087074][T12595] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.092511][T12595] ? __pfx_kthread+0x10/0x10 [ 551.097261][T12595] ret_from_fork+0x3fc/0x770 [ 551.102067][T12595] ? __pfx_ret_from_fork+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 551.107583][T12595] ? __switch_to_asm+0x39/0x70 [ 551.113083][T12595] ? __switch_to_asm+0x33/0x70 [ 551.118159][T12595] ? __pfx_kthread+0x10/0x10 [ 551.122882][T12595] ret_from_fork_asm+0x1a/0x30 [ 551.127885][T12595] [ 551.131229][T12595] Modules linked in: [ 551.137672][T12595] ---[ end trace 0000000000000000 ]--- [ 551.169826][T12595] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 551.178770][T12595] Code: ff ff ff e8 63 d9 41 01 89 c5 31 ff 89 c6 e8 58 ce 88 f7 85 ed 74 45 e8 0f ca 88 f7 eb 05 e8 08 ca 88 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 92 34 ec f7 49 8b 2c 24 49 8d 7c [ 551.208773][T12595] RSP: 0018:ffffc9001a8bf0c0 EFLAGS: 00010206 [ 551.215590][T12595] RAX: 000000001fffe000 RBX: 1ffff1100aa6a702 RCX: ffff88807d439e00 [ 551.229161][T12595] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 551.238243][T12595] RBP: 0000000000000001 R08: ffffffff8fa34637 R09: 1ffffffff1f468c6 [ 551.255838][T12595] R10: dffffc0000000000 R11: fffffbfff1f468c7 R12: 00000000ffff0000 [ 551.268577][T12595] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888055353810 [ 551.279420][T12595] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 551.295435][T12595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.305451][T12595] CR2: 0000000000000000 CR3: 00000000560da000 CR4: 00000000003526f0 [ 551.318028][T12595] Kernel panic - not syncing: Fatal exception [ 551.324421][T12595] Kernel Offset: disabled [ 551.328852][T12595] Rebooting in 86400 seconds..