last executing test programs: 2m3.807962908s ago: executing program 0 (id=3611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 2m3.694901812s ago: executing program 0 (id=3614): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, &(0x7f0000000180)) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000006c0)={0x9, @remote}, &(0x7f0000000700)=0x12, 0x80000) accept4$x25(r2, &(0x7f0000000740)={0x9, @remote}, &(0x7f0000000780)=0x12, 0x800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="9d6b00000000000000004e0000009c9cee6ab21331f4f28de21e4d64fb0d11065607a1097a785a785c0fc1e9fab23a3b8665eb59e3c80695196f643eb1e1b8e140c373e2bc6cd05640efdf4297f9bf3bfa981521cd751a757047f7aa4c7b51d4b4e6cdb9dea50257a69d24f9dcf07cebcca1d9283b22042a7aabaebeb83ca0e7543fcd61641f0e5b9d35f2bb51dc16d283b77153786037be271d53851914c0ffc327dcaccad665d21bc6071b365b673c7b5a8920"], 0x14}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x8, [0x0, 0x10000]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="250a0000000000006111510000000000950000000000000080b4f2"], &(0x7f0000000040)='syzkaller\x00', 0x6}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x63, &(0x7f00000003c0)=""/99, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x2, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r4, r4, r4, r4, r4, r4, r4, r4], &(0x7f00000005c0)=[{0x2, 0x2, 0x4, 0x9}, {0x5, 0x4, 0xc, 0x4}], 0x10, 0x8}, 0x94) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="02000006000100"/22], 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x808) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r8}, 0xe0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000100), 0x12) r12 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0100001600010f0000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0101000000000000000000000000000008003300000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f44f000008001d00000000000c0008"], 0x10c}}, 0x0) r14 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000000c0), 0x40) pread64(r14, &(0x7f0000001840)=""/4096, 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000000000063110c00000000008510000002000000950040000500000095000000000000009500a50500000000c71d5a2cc445854518293d4447c13573999e6e1031d568c7f648a3c4a5c14b83cce72aea8be027ab0ac588bd9ffbe5a8fe8ca4336b2dd10e51864777174c483211f561b9aadceab0575250bf047d0581cd3a2c8ac4dc346780d38ab92103fcb1e6229b17c04c92702b4de9dc71d2575482b6a44edd8fe2b417c8a0eb1299e4bd4008495d13843d895a1457a8fc0c1e5411aca84634465a02867b96b2be74a71e6c79fc73f840a5b20dc88eaa46852892bb424a40c7d667c5d011918363ac84913a2b65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 2m3.514964259s ago: executing program 0 (id=3618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x0, 0x4}}}}, 0x30}}, 0x2c040880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) 2m3.352207369s ago: executing program 0 (id=3622): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x7, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f00000002c0), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="a3", &(0x7f0000000180)=@tcp6, 0x2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x4}}}]}, 0x3c}}, 0x24000010) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000200)=@ethtool_rxfh={0x46, 0x4, 0x400, 0x1, 0x6, "f7b6fe"}}) 2m3.17501178s ago: executing program 0 (id=3625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, 0x5, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000008900005791206a1800a0ec45"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1}, 0x10}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4a4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x3, 0x4, 0x4, 0x10001}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000004e800000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfe, &(0x7f00000004c0)=""/254}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r0, 0x5, 0x7f, 0xfffffffffffffff0}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x7, 0x83, 0x7, 0x100, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x69b2, 0x3, 0x2, 0x41804, 0x1, 0xb9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0xe}, 0x50) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000600)) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0, 0x0) r12 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x89fc, &(0x7f0000000040)={'bond0\x00', 0x0}) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r5, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r7}, 0x20) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x30000000, '\x00', 0x0, r1, 0x0, 0x2, 0x4}, 0x50) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r17, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x1f, 0x2, 0x520, 0x360, 0x360, 0x290, 0x1c0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth0_to_hsr\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @mcast1, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [], [], 'veth0_to_bond\x00', 'caif0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x4, 0x9, 0x4, 0x20}, @generic={0x6, 0x3, 0xe, 0xfffa, 0x6}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x7}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf09b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x4c, &(0x7f0000000140)=""/76, 0x41000, 0x1, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[r2, r3, r6, r7, 0x1, r8, r9, r10, r11, r14, r15, r10, r9, r7, r16], &(0x7f0000000640)=[{0x0, 0x5, 0x2, 0x6}, {0x0, 0x3, 0x7, 0x3}, {0x0, 0x3, 0x8, 0xb}, {0x5, 0x1, 0xa, 0x3}, {0x5, 0x3, 0xa, 0x6}, {0x3, 0x1, 0x2, 0x8}, {0x4, 0x2, 0xf, 0x2}, {0x5, 0x1, 0xa, 0x7}], 0x10, 0x9}, 0x94) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r18, &(0x7f0000000c40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x244, 0x0, 0x206, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0xff, 0xf, 0x7}, {0x276a, 0x5, 0x6, 0x9}, {0x8, 0x29, 0x40, 0x9}, {0xfff8, 0x6, 0x3, 0x6b7}, {0x7, 0x6, 0xe, 0xa}, {0x2, 0x6, 0x40, 0x8}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x100, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x79, 0x0, 0xf9, 0xb4}, {0x107, 0x6, 0x5, 0x1}, {0x1d2, 0x0, 0x76, 0x4}, {0x4, 0x7, 0x1, 0xb2a}, {0x2, 0x6, 0x9, 0xfffffffe}, {0x200, 0x9, 0x1, 0x10000}, {0x9, 0xff, 0x8, 0x2}, {0x5, 0x4, 0xf9, 0x3}, {0x0, 0x80, 0xf, 0x6}, {0x3ff, 0x2, 0x6}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0) 2m2.946469784s ago: executing program 0 (id=3629): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 32) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000480)=[{0x3, 0x1, {0x0, 0xf0, 0x4}, {0x2, 0x1, 0x4}, 0xfe, 0xfe}, {0x1, 0x2, {0x0, 0x0, 0x4}, {0x2, 0x1}, 0x0, 0x2}, {0x0, 0x1, {0x1, 0x0, 0x2}, {}, 0x0, 0xff}, {0x2, 0x3, {0x2, 0xf0, 0x1}, {0x0, 0x0, 0x1}, 0xff, 0xfe}, {0x1, 0x0, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x3}, 0x2, 0xff}, {0x1, 0x2, {0x1, 0x1}, {0x2, 0x1, 0x4}, 0xfd, 0x2}], 0xc0) (rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010028bd7000fedbdf060200000008000100", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000e00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000225bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="58a04a183a1bad1392424dd2c4d867bba2c9cb6ba027132f00000000000010000000000000000000002ca70000fe01ee59fcdb00000000000000e827bdfd1d27a3f401b50eca62b312c0232f42c16e7d"], 0x2c}}, 0x880) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r5, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) (async) r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x800) r14 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x260, 0x150, 0x150, 0x0, 0xf8010000, 0x370, 0x238, 0x238, 0x370, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, [{}, {0x0, 0x4}], 0x0, 0xd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'pim6reg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xc, 0xe, 0xfffffffa, 0xfa8, '\x00', 'syz0\x00', {0x100000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r15 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r15, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xffff, 0x15}, {0x1, 0x5}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x90) (rerun: 64) 1m47.882275981s ago: executing program 32 (id=3629): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 32) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000480)=[{0x3, 0x1, {0x0, 0xf0, 0x4}, {0x2, 0x1, 0x4}, 0xfe, 0xfe}, {0x1, 0x2, {0x0, 0x0, 0x4}, {0x2, 0x1}, 0x0, 0x2}, {0x0, 0x1, {0x1, 0x0, 0x2}, {}, 0x0, 0xff}, {0x2, 0x3, {0x2, 0xf0, 0x1}, {0x0, 0x0, 0x1}, 0xff, 0xfe}, {0x1, 0x0, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x3}, 0x2, 0xff}, {0x1, 0x2, {0x1, 0x1}, {0x2, 0x1, 0x4}, 0xfd, 0x2}], 0xc0) (rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010028bd7000fedbdf060200000008000100", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000e00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000225bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="58a04a183a1bad1392424dd2c4d867bba2c9cb6ba027132f00000000000010000000000000000000002ca70000fe01ee59fcdb00000000000000e827bdfd1d27a3f401b50eca62b312c0232f42c16e7d"], 0x2c}}, 0x880) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r5, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) (async) r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x800) r14 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x260, 0x150, 0x150, 0x0, 0xf8010000, 0x370, 0x238, 0x238, 0x370, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, [{}, {0x0, 0x4}], 0x0, 0xd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'pim6reg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xc, 0xe, 0xfffffffa, 0xfa8, '\x00', 'syz0\x00', {0x100000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r15 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r15, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xffff, 0x15}, {0x1, 0x5}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x90) (rerun: 64) 2.323228872s ago: executing program 2 (id=5274): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x2, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x1) 2.09129872s ago: executing program 2 (id=5280): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x4e8, 0xffffffff, 0x0, 0x0, 0x348, 0xffffffff, 0xffffffff, 0x418, 0x418, 0x418, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x100, 0x228, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d6], 0x8, 0x7f, 0x2}}, @common=@icmp6={{0x28}, {0x5, "a499", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:random_device_t:s0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @remote, [0xffffff00, 0x0, 0xff], [0xff, 0x0, 0xff, 0xff], 'vlan1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x1, 0x0, 0x19}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@icmp6={{0x28}, {0x2, ';5', 0x1}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xffffffff, 0xff], [0xffffffff, 0xff, 0xff000000], 'veth1_to_batadv\x00', 'netpci0\x00', {}, {}, 0x2f, 0xf7, 0x1, 0x20}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x40, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0xae0, 0x8d8, 0x4c, 0x1a, 0x0, 0x75, 0xa10, 0x258, 0x258, 0xa10, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'syz_tun\x00', 'macvlan0\x00'}, 0x0, 0x8b0, 0x8d8, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@unspec=@u32={{0x7e0}, {[{}, {}, {}, {}, {}, {}, {[], [], 0x0, 0x64}], 0x9}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x4e, 0x0, 0x0, 0x4}, 0x28) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) 2.022215521s ago: executing program 2 (id=5281): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x88dd895beaa99965, 0x12, r2, 0xe352a000) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @local}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x190, 0x150, 0x150, 0x0, 0xf8010000, 0x260, 0x238, 0x238, 0x260, 0x238, 0x3, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf25030000000c000800010000000000000008000100000000000829a8e5a64948d9665f359a29a600010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c000200070000f1ffffffff0b000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) bind$phonet(r6, &(0x7f0000000180)={0x23, 0x2, 0x3c, 0xf4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) 1.903816731s ago: executing program 4 (id=5284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x4c, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a030c0000000000000000020000000900010073797a3000000000090002"], 0x2c}}, 0x0) socket(0x2c, 0x3, 0x40) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c851) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'erspan0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 1.391375687s ago: executing program 1 (id=5291): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000000)="000000f1e4c06417e58f38aa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10405731cb19e97d9e00000000000022000002c61f6ce1ee0fa5c7a7c303e1d301a791cdee83d2d01a0756f037b245617580b74309c3c8404502b7738c93f245a6cd912a82ec9782f9f798d329661cd33214af0900cc5bf9ce4fda50b8f582e27055951aeb3240dd63d9a118daf57b0ed5596ed2d0522caf4a77e0e7bfc6d8be259585f422d63e801a449f48a7d5e11b1597a99fcf15252ad9b581c5d18ee30800f97a046e798ff2465eff6d08006319da3ceba3be4c9a8d9c18d3a46f3c407f10661bcd0f"], 0x10}}], 0x2, 0x40c2) 1.280030099s ago: executing program 3 (id=5293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 1.278172449s ago: executing program 1 (id=5294): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000240)=""/12, 0xc, 0x0, &(0x7f0000000280)=""/89, 0x59}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r7, 0x800448d5, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0000e500edbc0b985357d92408be9dbe74fa29a83d9862e3b5d3a0b323f0bfa482b3dccf0218f881d705276daa6fd0062edcb52e6a1699639b633a8c6c88ee024bfd30e3bf79b35bea5c36d17b3d61797b01a3504bd1a2b418228a9b2d", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf25020000000900010073797a3100000000050004000200000005000400020000000900030073797a31000000000900030073797a32000000000900030073797a3000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20040004) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffef, @remote}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES64=r3, @ANYRES32=r8, @ANYRESHEX=r3, @ANYRESOCT=r8], 0x50}}, 0x0) 1.162480817s ago: executing program 5 (id=5295): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0x2}, {0x0, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffff, 0x2}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x6, 0x0, 0xb835, 0x20, 0x800, 0x7ff, 0x8ea}}]}}]}, 0x44}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000400000000000010000007c799ef7449139a8e737b50001005b00"], 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010a01040000000000000000010000080900010073797a311e000080"], 0x20}, 0x1, 0x0, 0x0, 0x2000801}, 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0x2}, {0x0, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffff, 0x2}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x6, 0x0, 0xb835, 0x20, 0x800, 0x7ff, 0x8ea}}]}}]}, 0x44}}, 0x4000) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r3) (async) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000400000000000010000007c799ef7449139a8e737b50001005b00"], 0x24}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010a01040000000000000000010000080900010073797a311e000080"], 0x20}, 0x1, 0x0, 0x0, 0x2000801}, 0x4) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 1.129105794s ago: executing program 3 (id=5296): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x1d, 0x2, 0x6) ppoll(&(0x7f00000004c0)=[{r1, 0x401}], 0x1, &(0x7f0000000540), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@dellink={0x68, 0x11, 0x302, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x8055, 0x30000}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}, @IFLA_ADDRESS={0xa}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="1f2d45f3575f"}]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0xbc8, 0x0, 0xa, 0x148, 0x908, 0x10, 0xb30, 0x2a8, 0x2a8, 0xb30, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'virt_wifi0\x00'}, 0x0, 0x8a8, 0x908, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x1}, {0x70}, {0x4, 0x1}, {0x8000, 0x1}, {0x5, 0x3}, {0x9, 0x2}, {0x1000}, {0x8, 0x1}, {0x9, 0x3}, {0x10001}, {0xa}], [{0x0, 0x2}, {0x7ff, 0x80}, {0x7, 0x1}, {0x2, 0x9}, {0x3, 0xb743}, {}, {0x2}, {0x7, 0x100}, {0x8, 0x6}, {0x3, 0x4}, {0x8, 0xcc}], 0x3, 0x3}, {[{0x0, 0x1}, {0x80000000, 0x3}, {0x7, 0x2}, {0x3, 0xdee8dc261cf1d23e}, {0xf, 0x1}, {0xa5a, 0x1}, {0x1ff, 0x2}, {0x10}, {0x9, 0x2}, {0x1, 0x2}, {0xf, 0x3}], [{0x3ff, 0xfe}, {0x2, 0xf}, {0x89, 0x4}, {0x7, 0x9f}, {0xc00, 0xf9}, {0xfffffffa, 0x1a400}, {0x8, 0x7ff}, {0xfffffffd, 0xfffffffc}, {0x8, 0x6}, {0x2, 0x5}, {0xffff, 0x8000}], 0x4, 0x5}, {[{0x4}, {0x7, 0x2}, {0x9, 0x3}, {0x7}, {0x4, 0x2}, {0x3}, {0x27e, 0x2}, {0xff, 0x1}, {0x5, 0x2}, {0x81, 0x2}, {0x3ff, 0x1}], [{0x0, 0x3}, {0xff, 0x5}, {0x4, 0xa}, {0x1, 0x80000001}, {0x5, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0xbc1d, 0x10001}, {0x80000000, 0x6}, {0xfff, 0x5}, {0x10000, 0x10000}], 0x7, 0x8}, {[{0x2}, {0x9}, {0x10000}, {0x4, 0x1}, {0x7, 0x3}, {0xaa, 0x2}, {0x4916d1fa, 0x3}, {0x3ff, 0x1}, {0x697f8a48, 0x2}, {0x9, 0x2}, {0x8, 0x2}], [{0xf, 0x2}, {0x80000001, 0x4}, {0x3, 0x6}, {0x9, 0x1ff}, {0x7, 0xff}, {0x4, 0x9}, {0x9, 0x9}, {0x31c, 0x9}, {0x5, 0x5}, {0x4, 0xc}, {0xfffffffb, 0x7}], 0xb, 0xa}, {[{0x9, 0x3}, {0x8, 0x2}, {0x49, 0x2}, {0xfffffff8, 0x1}, {0x4997, 0x3}, {0x9e63}, {0x6, 0x3}, {0xffffffff, 0x2}, {0x6, 0x1}, {0x8, 0x2}, {0x1, 0x3}], [{0x6, 0xcb8}, {0x7f, 0x1800000}, {0x2, 0x9064}, {0xffff, 0xe2}, {0x8, 0x8001}, {0x1, 0xb9}, {0xd, 0x1}, {0xd, 0x4}, {0x9, 0x8}, {0x5, 0x4000000}, {0x3ff, 0x6}], 0x0, 0x1}, {[{0x5, 0x1}, {0x5, 0x3}, {0x7}, {0x269, 0x3}, {0x401, 0x1}, {0x9}, {0x80000001, 0x3}, {0x9, 0x3}, {0x80000001, 0x2}, {0x8001, 0x3}, {0x7}], [{0x2, 0x4}, {0xb2, 0x1}, {0x8001, 0x10000}, {0x4, 0x1}, {0xffffdef4, 0xc}, {0x95, 0xfffffffb}, {0x8, 0x8}, {0x605f, 0x40}, {0x81, 0xb}, {0x5, 0x3}, {0x8, 0x54a1ee43}], 0x1, 0xa}, {[{0x1, 0x2}, {0x2, 0x3}, {0x6, 0x1}, {0xffff5fe8, 0x2}, {0xfffffff7, 0x1}, {0x5, 0x3}, {0xfe, 0x2}, {0x2324, 0x2}, {0x4, 0x2}, {0x7, 0x3}, {0x40, 0x3}], [{0x7, 0x6}, {0x2, 0x83}, {0x2b, 0x4}, {0x2, 0x4}, {0x7ff, 0x5}, {0x4fe9, 0x9b}, {0x9, 0x6}, {0x5, 0x5}, {0x9, 0x3}, {0x25}, {0x400, 0x5}], 0x0, 0x3}, {[{0x101}, {0x7f, 0x3}, {0x37, 0x2}, {0x8, 0x3}, {0x0, 0x1}, {0x4}, {0x9}, {0x502, 0x1}, {0x3939}, {0x3, 0x2}, {0xbe, 0x3}], [{0x1, 0x100}, {0x8, 0x57}, {0x7, 0xc4b5}, {0x401, 0x2}, {0xfffff333, 0x1}, {0xd0c5, 0x1}, {0x2, 0xfffffffa}, {0x48000, 0x2}, {0x5ac, 0x7ff}, {0x4, 0x8}, {0x0, 0x8}], 0x9, 0x9}, {[{}, {0x4}, {0xe}, {0x0, 0x2}, {0x1, 0x2}, {0x2, 0x1}, {0xbf, 0x3}, {0x7}, {0x80000000, 0x1}, {0x0, 0x2}, {0xe, 0x1}], [{0xef0, 0x2}, {0x1, 0xfff}, {0x5, 0x40}, {0xfffffffe, 0x8}, {0x90000, 0x3}, {0x5, 0x400}, {0x2, 0x7}, {0x5, 0xc}, {0x4, 0x1}, {0x80, 0x6}, {0x94d}], 0x6, 0x9}, {[{0x8, 0x3}, {0x8}, {0xb80d, 0x3}, {0x4}, {0xfffffffc, 0x3}, {0x1}, {0x7fffffff, 0x2}, {0x2, 0x3}, {0x2, 0x3}, {0xe180000, 0x1}, {0x7, 0x1}], [{0x80000001, 0x3}, {0x1, 0x401}, {0x2, 0x3}, {0x4, 0x8000}, {0x3ff, 0x40}, {0x3, 0x8}, {0x1}, {0x1000, 0xf7}, {0x5359, 0x7fffffff}, {0x400, 0x6}, {0x1, 0xfff}], 0x8, 0x3}, {[{0x9}, {0xe, 0x2}, {0x400}, {0x7, 0x3}, {0x6, 0x2}, {0x9, 0x3}, {0x2, 0x2}, {0xfffffffc, 0x3}, {0xc6, 0x3}, {0xfffff001, 0x3}, {0x101}], [{0x9, 0x8000}, {0x980, 0x100}, {0xdda, 0x7}, {0x2, 0xffff}, {0x4, 0x1}, {0x6, 0x42}, {0x1, 0x40}, {0x3, 0x47}, {0x7, 0x9}, {0x2, 0x4}, {0x9, 0x2}], 0xa, 0x1}]}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x406, 0xa359e000, 0x0, 0x20}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x3ff, 0x5, [0x3f, 0x20, 0x29, 0x38, 0x21, 0x7, 0x3b, 0xf, 0x11, 0x33, 0x3a, 0x4, 0x12, 0x7, 0x31, 0x1d], 0x1, 0x5, 0x1}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'pimreg1\x00', 'veth0_to_team\x00', {0xff}, {}, 0x40}, 0x0, 0x208, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0x1, 0x30, 0x0, 0x0, 0x7ffe, 0x1ff, 0xfffffff5}}}, @common=@set={{0x40}, {{0x1, [0x2, 0x2, 0x0, 0x4, 0x5, 0x4], 0x5}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0xc28) 1.048008011s ago: executing program 5 (id=5297): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x138, 0xa, 0x148, 0x138, 0x10, 0x388, 0x2a8, 0x2a8, 0x388, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xffffffff, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xf8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x3, 0x1, 0x4}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00', 0x0}, {'pim6reg0\x00', {0x0, 0x0, 0x0, 0xfffffffc}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "335d2565d31034fbd4bf655e219c13faa9dfed5859a72255f7c2027c2073"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'macvtap0\x00', 'hsr0\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00'}}, @common=@icmp={{0x28}, {0xb, "367f"}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xfffa, [0x0, 0x0, 0x0, 0x3]}, {0xfffd}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x480) 1.047257624s ago: executing program 1 (id=5298): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000240)=[{0x0, 0x5, 0xb, 0x2}, {0x2, 0x5, 0x7, 0x4}, {0x6, 0x8005, 0x8, 0x3}, {0x1, 0x4, 0x3, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x5, 0x5, 0x4}, {0x4, 0x1, 0xe, 0x4}, {0x3, 0x4, 0x4, 0xc}], 0x10, 0x9}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000240)=[{0x0, 0x5, 0xb, 0x2}, {0x2, 0x5, 0x7, 0x4}, {0x6, 0x8005, 0x8, 0x3}, {0x1, 0x4, 0x3, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x5, 0x5, 0x4}, {0x4, 0x1, 0xe, 0x4}, {0x3, 0x4, 0x4, 0xc}], 0x10, 0x9}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000000, 0x410, r0, 0xf31b0000) socket(0x1e, 0x5, 0x0) (async) r1 = socket(0x1e, 0x5, 0x0) setsockopt$inet6_tcp_int(r1, 0x10f, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0xfffffd8a, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600800a00000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmmsg$alg(r1, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="ce89abf1fbf87dc1da6230045be52bc0ea94aa0fc330d03a1c1896a8221d76549210b3941040b67a96c13a87b9b585bcb8ad5e76cb39b21adfd57a01440f8b47ce589644315646e85a6f5e68595e4843c5aba7e51ed6fb3e32687c14e35f2d21f59e31dc0b371fe25b96d2cbc494192989afa254c9824697f99d53f22933199a2aa459e713c1f0367672bd2409c8b6eb18077c21396f20e45740da2aade82508008e18d693539b86f6", 0xa9}, {&(0x7f0000000440)="1d6621f61981186530a00321e5d9b1e99bd3d338c4a52c8df53d39134711b57f243a797255364459159e8e8087902f412ed94798728f11210a5b2930cf8cbbd193145f6915aba9adb48b8a2ef53269734c52b348330e8549a492fca33ce33dbfed801a265da014250912329c76bbf20e6c92fad5e22b261e0b2bee440141e852b786481224fe4d746aced41c649cbc92de782c64b2148672be4b432f6880131e2e423689aa0ebeac3d2b702b92d674f84eaebf536847007d6a5e0f1cf7b11d79b538c83cc12e224c39b080095d7f938c358c741548d117bc63987850", 0xdc}, {&(0x7f0000000540)="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", 0xfa}, {&(0x7f0000000640)="ca97064c41ba492cc2a648e3f615b35825a5f03f8e3537", 0x17}, {&(0x7f0000000680)="f54aad846c77e13ee679fb0bde5356999d23c590ebf20b909119997c80472b7f3671923d72c567b38d96bc6efccd09c052574e11973bee36c02c7f3981f45b5aa26b85f843ac67df5a9c586161debcf75cd667f47d861f52f4bcd4e33a28dcd85d30955efaa5018c523ea5488044d689353d9f79bd1e8542f35e1d7d9a48fc8540760d", 0x83}], 0x5, &(0x7f0000004480)=ANY=[@ANYBLOB="8800000000000000170100000200000071000000052d6c7ff5f8ba0925c6d1862deabf0bb74785383c3949ade0742b29228cadef6616bc55380b34a10ae2ae10572acd9a32f44069ebac9214ad4297739ad984d55a7fa47abad9d69cbec58b215679b4c6c220a949a5287b0accd658630681d14862d84f51d40f3161ef9c7f9b6c1ee111c6df3db0599ae82d01600c8fb3862ae400000018000000e4ffffff1701000004000000ad00000000000000180000000000000017010000040000000000000000000000180000000000000017010000030000000100000000000000"], 0xd0, 0x4000080}, {0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3528ba5f469a56170781d4ade2a3280a465162b941754ecb70221246d045fb3fc2233184459e217db6efc761c32ae9b56a1c1e8c6da6", 0x36}, {&(0x7f0000000900)="f0a16a2329867c1d37e50c5396c1e6f18227979203558d441b2670888343327bc1fe30db67d3b4a711e8a29e426356003de1c9a0ec888e1345e7349b03544a488342b5fe6f20961c7bf321fa3095b2ddbff5b1fef7f9abc8e96fd3f9c4d78b705423d7ca97adec16f14111c608183317a61a5aa161ec1744947897c29e2e629c77b141dd13376ba6d362e31ff9b550be107231e72e8fef0ee92d8288ddaa28335a419c71b9401f3efde93fc8a5aff10c10635871b69828b6057d0c2cc74a75e2ef13ad8010b17acaa26ec9d3377c24d4ee63683ec2292514af9764475af01ac5", 0xe0}], 0x2, &(0x7f0000000a40)=[@iv={0x118, 0x117, 0x2, 0xfe, "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"}, @op={0x18}, @iv={0x50, 0x117, 0x2, 0x39, "568b520962c2b66d02520f2e80af8f16a09e6783b96ddddd9792300cef9b699e9004ee32ad11bef7c02d3aaa075f3507a320cf357d145b67a0"}, @assoc={0x18, 0x117, 0x4, 0x435c}], 0x198, 0x200c8c5}, {0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c00)="aa6d749847a18b17d12cd9348205a785b071aaeb18a35be7f4d48b2f679ed87ded4169cf7f27de30d2a71cad1bf3049dc81ffe2a30ab0c91fd7a0210c84ba73e93b35a0425697269901c", 0x4a}], 0x1, &(0x7f0000000cc0)=[@op={0x18}, @iv={0x70, 0x117, 0x2, 0x5a, "f07ba2b78c344d88718be19a0b42959715530230a7671b2e925dfadfbf364ffbd60cbf98770d192a64315e5fee16c31c7056955f968e3207e721786fe5ea59483b656c4b9fce6bb1234b719763dc2ef5feafa25bb46e87c5e37e"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xf8, 0x117, 0x2, 0xde, "9476bf483689fcc730e905e7de465b91cea93af7dc18d0336c84c8f5be99e6531e90c6adf5bf96d0b7c4d3c97e818113c2bc33ce4c9f4680941d6c2c8b25010f6c55da5033fa00e23f3cd250164d8cfb0062caceb724b712251ec406ea0d8af64e29a3d3110a0dee1c9b8384ff5b5b0bf2149606f16e15b9b5d6a8c956fce396b925167da80c30ae6f5d064c5068d012dad21e80b656f887bf6aa86267f0a12e3224ad6a20945e123f15dca5b3d88813e683ccd3ae543f17ec509a7ec92e890fa6e5c29d1e09fef56968ba03eec327f7a771bb8b588d57227ae68b91d4c4"}], 0x198, 0x8000091}, {0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e80)="e6367d1e2a59506e1b1e32ae28531954588d5f3b0b767b7f646799a1951de540dd40a5f2b5860ce2398f5a7b5f8b942276e329d03f2f1f0bb9a005605512b2034d9af4a8cf", 0x45}, {&(0x7f0000000f00)="dd2b4038ee1614cc624efc2e5d213384efe5f802dea6fe", 0x17}], 0x2, &(0x7f0000001340)=[@op={0x18}, @iv={0x118, 0x117, 0x2, 0xfd, "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"}, @iv={0xf0, 0x117, 0x2, 0xd6, "f6d796556647bd703c979489782b094b59b9da2ef625788da74ac6447f3bad926a5187825c94638b9d6b1ea57bea546b86446dd60aed3bf8d6ede1160fb58ca5a3656d4304d9109e20269fc14e9cbfff46c001797e35a01465a2af99516dda665d0829e374621dac4d99e161349d932543289a1bd1cba50d9083b732b3ba4560815e13ded1301fcb48cf8924475df7b5875ca21f7e9b90a1a0d71786b36f75a4e515494e582490c4eac62b95f9754971f658a91dd9fcdfcacdb5859d5735147c6464288fc1fdf7f6cd90e2ce2aaac8a27a74032fc000"}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xa9d}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xb0, 0x117, 0x2, 0x9a, "a88adc2133d6be21c120f6d753c7c1ef903339b61beadea3174695778bf47b9544876362f21ea16bb1bb64c6b8456e506d08a25ee779e64f39dcb2f3c0643985aa2e58336d9261bd581695a3745a82a26d3c3827340e149afe9a84a8820b6ccaeb1ae002c099e3ed539ae70bca7c2f15f30bb86d2459f5884bf2d9cf4e9f11524068b8132e4101381ea2c3d15dffb90a2a5a115a89274033345c"}, @assoc={0x18}], 0x360}, {0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000016c0)="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", 0x1000}], 0x1, &(0x7f0000000fc0)=[@op={0x18}, @op={0x18}], 0x30, 0x44}, {0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000010c0)="cc91c95b07b40b83eeca3bf6e4a27d916c26d81efba673b0947ddbc1586ccee0524102b869000ddc3e6fc126db03e67a0dfa6993e7e9b9a6da2a5caf4bddc4f6d7a64ca98524fde0a55c21f861748afa0412d4f2b85cfca736bc3dc9f67cd4ce1bcbc45bb597808bcd51ccaddf6b8a10def366e3ae361f34bb492e703b9e761fc2491bc6ad0ebe38abca55b514584f1738aa", 0x92}], 0x1, &(0x7f00000011c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x3000c800}, {0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000001200)="a2a394a881855dce9930bf8fda84855f03bf7268f1cac817c7fb87997bdc9170d7990d16c95fc688e05cd0ba78fc111d88647c47f6efdaf253c58c7eba4eb3a1e0a923fe30d018b26aef02803dfee9dd13d1747fa6c1e02406007ac09b43045b3a971d50fe51675f788157c5214384bfacab1e0a5346133b0f10fc52608b6ee4d84fed2bbedb29b17fce0ad4530bf322eb44f78fc8e71e59d05ab77ea36482434daccc7b86dab96f18", 0xa9}, {&(0x7f00000026c0)="a03f26e4a41f203a60098254135939aef9f608c2f607a62957d2cb05a67f94741f05729bfc2d968f0dbaa6c628f92ea0348abc5e317e7d8df002163f93f78b7be7610d5dc8c8ffe788695285249bfa688bc24b3cef0becdb2e07f186c4bef7944257e9986dcc32161613b473ffbaa89aba5b4872322a8d531a1fa0519e5b197b01343755c183e4d671b855aa7c3033a300c485c4fdd2dd60c8d1610748d5fcdf184db420220343a6221722394c3de7b23909328bd9c296141cedb50d085ce50c7b94d8e33ecdeef99f55f712daa9f0bc83f2fdffcb4795d58ad3c4f6d684105f197d0b3f89f55b1c468744a56c", 0xed}, {&(0x7f00000027c0)="79290572b4b7d5c1ead09b29ddbf25f3748707ffd5b9d3a49a81802d1fad3d5faef8acf5c4f76023f2c90a8f3151c8fbd4d4faee3c040110bc3ebc84ac80aaf1246be33791d4d3e23992dea4a7cd56509896fe465935915180a95e13e6", 0x5d}, {&(0x7f0000002840)="44dddee12ce393c3433e00d211f1ecc7166a2dd54ccdfe53bedc3e10bb800725047df660b72f154eddc32273abab85fd50cfb497896bd5372e24043cf602c5716768c4ee85d65cf534f816557b7c31d6427decf8a1cd85f7bd5fd62173ff73ae6a48f756c4b7acc42c7fe6bb6a0bccc237be68354a4c2a87dee4047d0890f660e80c04af7c4ce4b75866ddd76eaa6369b9950f8563488e8bc565c517bc6303cbadcd1eebe9acf38ced5e3aaf956ff0ec5c6306194329367c83caf4a129577fc03679e24297f20ad2", 0xc8}, {&(0x7f0000002940)="f9af76725ea232b859a1e302b369060419a02da3298642b9d23d2a30c0ebe5ef3b53b654fdfc178dce7b89649cc957ecaffe5f4cf9b51bda4cf326b1172c391877d36ab754086ac283014d1ef4cdc593132b4a9fe5bd1e2c24ddf3f656268ae2e49050f4272b7718f38d4dbf2308838a4b6cda4cb9880c2de51606f8c53a45639734827dacd375c58cb684bde55e867d3af076e5bc988db9db038ea8b3feafe69bdf6a93b60654e06523f6cdc2d8e0f3e67612a6871d7f309a60d89f44a67f36a3d8210bf7951f62c53261225570ae105a08a24e642d3e590c5740a8575d266c", 0xe0}], 0x5, &(0x7f0000002ac0)=[@assoc={0x18, 0x117, 0x4, 0x23}, @assoc={0x18, 0x117, 0x4, 0x1000}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x200}, @iv={0xf0, 0x117, 0x2, 0xd8, "fdfe0e63fb540e5c211085ecaa27ed15baa3a033f5519f3283a036b88d872dfcda9eb18cbda6918142c899467648308b5cab0214ce27028a4285514b4e6d6580c96f2452c181bd1aaf05c6cb4c98ad67382410ca654cb460877b627010bdd754c465f44673bab70d6929de03b394e20f8e643b4118920eafaac86130f8b5e7273219c32be4508753871ba758786e98584a61e84ac18ab157f16f4a4800245e588e2cdc3dfb26c66305a902e266903cbfa11be7909833fcb498953844aa86fb539f92fb10f656d117ba063510cd68abbb2ca69e927360590e"}, @assoc={0x18, 0x117, 0x4, 0xfffffe00}], 0x168, 0x8}, {0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000002c40)="b1f89bf17f968aca0392b83f58e95ec4392c06611c376fb6e08df56f4c0758bed86df43d451004c584640609ec8b612595cb2fc27ef24c45b83ea17c3a8ac57d6befbc2533d582df20cb9cef71322e1bce6bbccece196207aa21efe4883a63ffb2a21098c24e79a616af976f6d98040d016a7d15d916c2f0f5f2091eccb6748a4a94599fef98841d6245b9383e3020dd2a342cfdfa4fa296269165bce0002ad346adcdbe84b287102cb4193c532c4d34583e8d3e15c6b7", 0xb7}, {&(0x7f0000002d00)="ccc2fb1a53ea40f89f5808f0722150f2100ebc104cf042e5545b4d2e1146c079deb5980384b72dc0fefb4a13cc43f0af234a66e925e6c56c5975b5dccbc1f402bbf5111e9af5398a829036149ccf284aa0176d014475dba8c65ec95f89714116393f5cd71af92411cc4b089b6e128e0199ed056b6a1ef0398f49aef3215ecd27b36a372ae56e7cd673861fa55e5a337080bd959b78076d9842d2c9436d09cc9decc6e5ff200ef7a8a90f3807f15f06b984ea399796850f388fbbbfb0633449b7e38dc00dca87ad38230a9d07139d8fa67fc6c45e37b752e4da", 0xd9}, {&(0x7f00000012c0)="24e0c9655a886041ba62627c7f7b6b60d06c064ae3273e9e1adad90c78195731", 0x20}, {&(0x7f0000002e00)="3c7e7e88088cd4afbaaf9efcec1b7bd77820407cb328bc141ffc53edeaff01858b3428a0cabff6b8a3164c113456435f83a5c30520", 0x35}, {&(0x7f0000002e40)="d419776ae36c16a4d8f9e5d5174117550fb45a9913355aedd040b71cd781a09e3c6de82073d43eeb0fda394a69b5dc0a13ed71e5c5b328033c262f962eeed4ff5a2199b4b3579bb82d940d4d5e7a52b98090e69734f7ad3407a0434c5161e148590ed93c53ed3d6794d72d21a5532a000989c169540e719c85dc45af44c35a3bfd09c647a7bdd1edfb29d0f292556ff20376d4ccc475e79950c0cf1821326052ddfaa1fcea4ccbdb3023b9518adca3a60f0a0ea5690044ac6554cbba8e5d88ce1f4b4e94cd677b8df52f6c61a29dcd7ce9a5", 0xd2}, {&(0x7f0000002f40)="d8306fccabec178d158e3e2dd088b5bedd106ee196ecf6f03d73506ebeecec710862463fc47259c1a8ea2ae4a1119cb4cb7dd5c54086c32ff39cb9a0939e29f1f398cabd154d11224c9956e34ec9205086b933b9923bd26fc2c2993e9475d992942430fb1d964a975af7c25e6f3b9ff70b74a2e1f1bf321ae51c95fe566bad80f6484adc77faf673443fbe13f545c363f6ecb0f0fcb261e6469b6bcae945eed923168708ab442e651a2ed3c6685321f2c54f87d5c5381dca3ee86b07481262b5ba4cd386e82e3c5cb046a9824d24c8ed23", 0xd1}, {&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000004040)="8166c91bd760b20f27d3dd34536f5a01048eb206683608903cdc5bb2cd627ef4013cad4258198f1f9736c829b63fbf8b1b9d3ce31bcc10cc39f86775ba450b99ee3ae298fb190647e6bfe91e50a2384fbad1666dd5084641e69fdca46f1f3a0268a346828ceaab7b7c1a3aa8314ae6f2d10ce2ca", 0x74}, {&(0x7f00000040c0)="14c18def567efe071e05b4e9659dcade598ff5ea522acfeef86ae8421ce48c3d4c5795dea0bc17", 0x27}], 0x9, &(0x7f00000041c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x6a, "e6bb56035f4d3fdd4bf7d69958bdfa30ce8e43d30c21fabb33976f2066fe89976d6bfb64d08ad123ef87cc6a898ace3d54cb439715871fae25cd67678792a847c72a16f52c2cfcf5c8707e0a875fa4aa5088384edaa82b3bc6b655db796dd61befbaf9acc08912a391fe"}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x409f}], 0xf8, 0x46}], 0x8, 0x41) 1.034352518s ago: executing program 5 (id=5299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRESDEC, @ANYBLOB="0100000000000000240012001400028005000100faffffff05001b0000000000"], 0x44}}, 0x4) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x3c}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x110, 0x31, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x2010, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8003}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff268}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1006, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xfffffffffffffea6, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'bpf\x00'}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r6, &(0x7f0000000040)="aa", 0x1, 0x4048084, &(0x7f0000000100)={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x2}, 0x1c) shutdown(r5, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x38, 0x2, 0x2}, {0x401, 0x8b, 0x9, 0x200}, {0xfffa, 0xb0, 0x40, 0x2}, {0x4, 0xa, 0x0, 0x80000000}, {0x6, 0x77, 0x4, 0x4}]}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000001bc0)=ANY=[@ANYRES8=r4], 0x0, 0x3e, 0x0, 0x2, 0x2}, 0x28) r8 = openat$cgroup_ro(r7, &(0x7f0000001ec0)='cgroup.kill\x00', 0x275a, 0x0) preadv(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x1055f, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 984.466887ms ago: executing program 2 (id=5300): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x10, 0x453, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x800) socket(0x23, 0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r5, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x200, {0x7, 0x155, 0x4, 0xe48c}}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x70000, {0x18, 0x0, 0x8000, 0x1ff}}}, @NL80211_ATTR_MAC_HINT={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000009000000000600150002000000140033f4e5579d32c42b02800800010000000000"], 0x38}}, 0x0) 879.871634ms ago: executing program 4 (id=5301): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001100)=[{&(0x7f0000001140)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e8c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb98", 0x44}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_0\x00'}}, 0x1e) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x3, 0x2, {0xa, 0x4e24, 0x1000000, @private1, 0x7}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x227}, {&(0x7f0000001440)="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", 0x38d}], 0x2}, 0x8400) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x3d, &(0x7f0000000000)=""/85, &(0x7f0000000080)=0x55) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) 877.960387ms ago: executing program 1 (id=5302): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) (async) close(r0) 815.206964ms ago: executing program 1 (id=5303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x30}}}}, [@NL80211_ATTR_KEY_SEQ={0x8, 0xa, "5e56e9ff"}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "923fa2e9a5"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x50040}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000240)={r4, 0x1}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x0, 0xb, 0x0, 0x7, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x20, 0x20, 0x6}}) sendmsg$nl_route(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x1, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x60044081) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000440)={r4, 0x70, "f3a2b39784b429807545996dddd4ca83a07e2bfd3a409efbfa0f0a91f3d7bbfbe1fb8d13b8b861fb2c1a81068e29615284afe6978c5f8ece7304cef27018814d556ae6c7066a4c6c2c04761a5466f509b9b1710f9d36f2ee78d3b045e14629f1137b9363286dabb0c4fadc9f17287404"}, &(0x7f00000004c0)=0x78) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000800)={&(0x7f0000000500), 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x208, r8, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc3, 0xbe, "ef99be4ca2664122329f79003d4ecb2e0dbe222bccfc2f88d4d5e24cc4bd0c0dbc90fd8177fb9e06644ba19e15c084d99bd602c4e3ca5873d7b6db0e94b20a3d9cf9912b21a253e80b92c9d3e96b200c4c2e77e2b9cf10148dca1fd23101be6c84a52d54ba20a2fff71d37e9de8181ca37c167f57ab3db020bdb484589292358d3bbd3164f20eeff88b0dd4e7737bc13371ed5172de8ffc8c3dd84cf2905c5b5ccfc21d0295beed2e1e84a44b2e015f811f0e664633a31d5be55f14eca26fc"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8f27}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0xad1e, 0x0, 0x2, 0x1, 0x0, 0x4, 0x3f4, 0x4]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd3, 0xbe, "8c937f33a0da6c0811ea86cbbdbe054e8a9e61ab13b96537ab03e73fdaa3138ffa9115f0ab2fa2ea338a18ae55babfd2b99e2f44f559ab285e57dec96dec4c3bad1172a945320aeade4c423f271738425bf4db0ced34deb82708118c080f6d5748f4d7cfcff60db70950b288c42fdcc3f596287f8728e2ced95b61f249526ae40fab2b8a4617dc12403b90da4f4c137c993cda20103efd1626594cf4dde1c4928c230940d886893c8535bab15558806fe70bdfbe109c648d835b7e92ad452151f83d6c15948c23cad9af014ea1ee99"}]}, 0x208}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r9, &(0x7f0000000b00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x1c8, r10, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x1a0, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x541cee8b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4adc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a99}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x468d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cbbbd41}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x197e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24088da7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x388edd2e}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x643}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35ec3c2a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ef5114}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1613}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb658}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11db106a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5aa4e9dd}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5980b74d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ae66631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f3ff071}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x105de2f8}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b05}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34b30d54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dae5bfb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b374255}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c0ebcf3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2b1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76011a28}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc858d48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45b879c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e192f0c}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d27}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e8c2d0e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x181a63f1}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x536eb018}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e5bed6c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24224820}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x728f4137}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27229135}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5634}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd6f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x248c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6aaa2c0b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dabc88b}]}, {0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r11 = accept4$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b80)=0x14, 0x80800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000bc0)={'syztnl0\x00', r6, 0x40, 0x40, 0x90000000, 0x1, {{0x26, 0x4, 0x1, 0x9, 0x98, 0x67, 0x0, 0x8, 0x4, 0x0, @multicast1, @empty, {[@timestamp={0x44, 0x28, 0x57, 0x0, 0x8, [0xf2, 0x98, 0xfffffff7, 0x1, 0x5, 0xfffffffb, 0x1, 0x5, 0xffffffff]}, @lsrr={0x83, 0xf, 0x4f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, @local]}, @timestamp_addr={0x44, 0x4c, 0xfb, 0x1, 0xe, [{@remote, 0x40}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x6b}, {@rand_addr=0x64010100, 0x6}, {@multicast1}, {@multicast2, 0xb}, {@loopback, 0x3}]}]}}}}}) bind$packet(r11, &(0x7f0000000cc0)={0x11, 0x9, r12, 0x1, 0x2, 0x6, @broadcast}, 0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000d00)={r4, @in={{0x2, 0x4e22, @multicast2}}, 0x1, 0x4}, &(0x7f0000000dc0)=0x90) bind$inet(r7, &(0x7f0000000e00)={0x2, 0x4e22, @local}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r13, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e80)={0x154, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x15}}}}, [@NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xc0000000, 0x10]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x32}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4c2d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xc}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}]}, @NL80211_ATTR_CQM={0x74, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x49}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xfffffff8, 0x4, 0x3e6]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1f4f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0xff, 0x8, 0x7f, 0x877, 0x6, 0x1, 0x8, 0x7, 0x1]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1f}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x296}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x605}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x8, 0xd, 0x200, 0x8001, 0x8]}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffff0001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1ce}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xe, 0x1, 0x2, 0x2, 0x9, 0x80000001, 0x8001]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x10) socket$igmp6(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x44, r1, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xcb6, 0x4b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}}, 0xc081) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000001200), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001280)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r9, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x30, r14, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\''}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20004840) 808.522684ms ago: executing program 3 (id=5304): socket(0x40000000015, 0x5, 0x0) (async) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000003e80), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003ec0)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20040004) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) (async) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0700000000000000000000f8ff0000000000471680e04f3ddd84c178079aa6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000400"/28], 0x50) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r7) (async) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000080)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1a, 0x5, 0x9, 0x1, 0x51000, r5, 0x1, '\x00', 0x0, r6, 0x4, 0x4, 0x0, 0x0, @void, @value, @value=r7}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1a, 0x5, 0x9, 0x1, 0x51000, r5, 0x1, '\x00', 0x0, r6, 0x4, 0x4, 0x0, 0x0, @void, @value, @value=r7}, 0x50) splice(r2, &(0x7f00000001c0)=0x277, r3, &(0x7f0000000300)=0x1, 0x100000000, 0x9) 675.867421ms ago: executing program 2 (id=5305): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{0x7, 0x11, 0xcf, 0x7}, {0x3, 0x5, 0x2c, 0x4}, {0x7}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}]}) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0xffffffffffffff28) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) (async) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x3, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x400261f2, &(0x7f0000000100)={'dvmrp0\x00'}) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r3, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1}, 0x5b2}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req={0x4, 0x1, 0x4}, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x10) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8) 675.418493ms ago: executing program 4 (id=5306): getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000040)=""/197, &(0x7f0000000140)=0xc5) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c0001801800108014"], 0x34}}, 0x84) 665.779489ms ago: executing program 5 (id=5307): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="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", 0x19b) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x800, 0x1ff, 0x8, 0x0, 0x8000000, 0x1, 0x5}, 0x1c) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x94cd, 0xe}) recvfrom$inet(r1, &(0x7f0000000000)=""/8, 0xfffffffffffffd21, 0x100ca, 0x0, 0xfffffffffffffd25) 627.447571ms ago: executing program 1 (id=5308): unshare(0x6a040000) (async) unshare(0x6a040000) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000000903000000000014000000070000000900010073797a3000005cb518000200070001"], 0x38}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) 597.531038ms ago: executing program 3 (id=5309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x3, 0x8001, 0x8, 0x6, 0x3f, 0x2, 0x2}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0xc80, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc50, 0x2, [@TCA_BASIC_POLICE={0x81c, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x263, 0x0, 0x1, 0x81, 0xfffff89c, 0xc, 0xf, 0x800, 0x251, 0x4, 0x800, 0x2, 0x7fff, 0x4, 0x6, 0x7f, 0x8000, 0x10, 0x4, 0x4, 0x4, 0x4, 0x40, 0x1000, 0x2, 0x7, 0x7fffffff, 0x9, 0x9, 0xd, 0x10000, 0xfff, 0x40, 0x3, 0x8000, 0x3, 0x9, 0x2, 0x6, 0xffff, 0x8, 0x2, 0xfffffc00, 0xfffffff8, 0x4, 0x9, 0xc4, 0x9, 0x800, 0x7, 0x5, 0x5, 0xbaa, 0x1, 0xdeb80000, 0x9, 0x7, 0x800, 0x5, 0xe, 0xd, 0x9, 0x7, 0x96, 0x209, 0x9, 0x40000, 0x9, 0x8, 0x2, 0xb, 0x6, 0x1, 0x7f, 0x9, 0x1, 0xfffffffc, 0x3, 0x3, 0x7, 0xf, 0x1, 0x9, 0x3e3f, 0xfdffddd2, 0xd5, 0x80000000, 0xe, 0x40, 0x584, 0x7, 0x8, 0x6, 0x8, 0x3, 0x7fffffff, 0x8, 0x4, 0x4, 0x7, 0x0, 0x3, 0x3, 0x3, 0xd, 0x8, 0x7, 0x3, 0x7fffffff, 0x3, 0x3, 0x3, 0x74, 0x1, 0xffff6491, 0x2, 0x401, 0x8, 0xd, 0xffff, 0x8, 0x5, 0x5, 0x5, 0x7fffffff, 0x10001, 0xd, 0x7c3, 0x6, 0x5, 0x7, 0xc, 0xb, 0x7ff, 0x6, 0x6, 0x0, 0xf, 0xf, 0xc, 0x8, 0x9, 0x100, 0x5, 0x6, 0x9, 0xe, 0xfff, 0x101, 0x1, 0x4, 0x7, 0x3, 0x5, 0x6, 0x6, 0x5, 0x7, 0x2, 0x2, 0x1, 0xab4, 0x0, 0x6, 0x10, 0x2, 0x5, 0x80, 0x2, 0x800, 0x4b, 0x0, 0x4, 0x5, 0x4, 0x8, 0x9, 0x8, 0x5c3a786e, 0x7, 0xfffffff9, 0x6, 0x0, 0x1b, 0x100, 0x6, 0xb8, 0x101, 0xffffffff, 0x7, 0x1, 0x3, 0x1, 0x6, 0x7, 0x4, 0xbddf, 0xffffffff, 0x8000, 0x2, 0x5, 0x200, 0x2, 0x7ff, 0x10000, 0x6, 0xc, 0x401, 0x4, 0x9, 0xb5b2, 0x8, 0x6, 0x8, 0x8, 0x40000000, 0x2, 0x2, 0x6, 0x6, 0xf7, 0x5, 0x80000000, 0x6, 0x5d, 0x2, 0x6, 0x2, 0x2, 0x8, 0x5, 0x7fffffff, 0x80000000, 0xa, 0x8832, 0x2, 0x1f435a62, 0x1, 0x4a8, 0x6, 0x5, 0x0, 0xf5, 0x2, 0x8, 0x7fa67612, 0x0, 0x3ff, 0x5, 0x7f, 0xa, 0x5, 0x8000, 0x101, 0x4, 0xfc8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x9, 0xa46, 0xec, 0x3, 0x1000, 0xffffffc3, 0x400, 0xd43, 0x10, 0x8, 0x4, 0x6, 0x9, 0x3, 0xd4c, 0x3, 0x1, 0x8000, 0x39, 0xd7, 0xbb3, 0x1, 0x4a140363, 0xfffffff6, 0xc, 0xd, 0x5, 0xff9d, 0x1, 0xfffffff8, 0x2, 0x5, 0x8, 0xa, 0x1, 0x9, 0x0, 0x0, 0x4, 0x7, 0x9, 0xc1, 0xffffff48, 0x9, 0x3b4, 0x8, 0x4, 0x9, 0xfffffff5, 0x2, 0xe31, 0x3, 0x5, 0x1000, 0x6, 0x48, 0x6, 0x10000000, 0x7, 0xd5, 0xfe37, 0x1, 0x2bc06b81, 0x2, 0xfffffffa, 0x71, 0x80, 0x737e, 0xfffffffb, 0x6, 0x5fa, 0x7f, 0x2, 0x9, 0x8, 0xfffffffb, 0x1, 0x7, 0x9, 0x800, 0xfffffff8, 0x800, 0xffffffff, 0x400, 0x0, 0x6, 0x5, 0x8, 0x3, 0x3, 0x8, 0x8001, 0x7, 0x4, 0x0, 0x3, 0xfff, 0x5, 0x6bfe, 0x5, 0x3, 0x1, 0x7, 0x7, 0x4, 0x2, 0xab, 0x8, 0xf, 0x4, 0x2, 0x2, 0x5, 0xd, 0xbcc, 0x80000000, 0x8, 0x8000, 0x5, 0x5, 0x86, 0x4, 0x9, 0x4, 0xf, 0x0, 0x10, 0x1, 0xe6, 0xffffff01, 0x0, 0x3, 0x5, 0x6, 0x7, 0xd6, 0x4, 0x8, 0x6, 0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x18000000, 0xff, 0x40, 0x80, 0x6, 0x84c, 0xe, 0x9, 0x3ff, 0x8, 0x7, 0xb, 0x7, 0xd, 0x10000, 0xab, 0x0, 0x5cdb, 0x9, 0x6, 0x80, 0x8, 0x0, 0x5bf, 0x9, 0x0, 0x2, 0x6, 0x6d, 0x5748, 0x3, 0x9, 0x9, 0x5, 0x0, 0x2, 0x1, 0xfff, 0xfffffff7, 0x1, 0x200, 0xe, 0x7, 0x8, 0x40, 0x7, 0xffff, 0x1, 0x7ff, 0x6, 0xe, 0x3, 0x7, 0x5c, 0x9, 0x0, 0x9101, 0x5, 0x2, 0x835, 0x92e6, 0x200, 0x3, 0xbd1, 0x7fffffff, 0x1, 0x9, 0x7, 0x9, 0x1, 0x3, 0x7, 0x3bf, 0x3, 0x9, 0x3, 0x9, 0x6, 0x1, 0x10000, 0x0, 0x6, 0x5, 0x4, 0x4, 0x663, 0xfffffffe, 0x5, 0x3, 0xff, 0x1ff, 0x9, 0x0, 0x401, 0xe, 0x5, 0xb4, 0x9, 0x4, 0xffffffff, 0xc000000, 0x0, 0x80, 0xf414, 0x800, 0xf7, 0x6, 0x5, 0x6, 0x9, 0x1000]}]}, @TCA_BASIC_ACT={0x420, 0x3, [@m_sample={0x5c, 0x14, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x35e94dd7}]}, {0x28, 0x6, "180c8f0af78383726413d58131748ac88cd2602f3ab90edd7e22421b56c69315f06401a6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x288, 0xf, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x49, 0x3, 0x0, 0x9}, @broadcast, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x9, 0x7, 0x10, 0xc1e3}, @multicast2, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xbb, 0x7, 0xd5, 0x3}, @broadcast, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x68, 0x6, 0x4, 0x81, 0x9}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffff00, 0x7}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xa, 0x7, 0x5, 0xb578}, @loopback, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x10000, 0x9}, @private=0xa010102, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x10001, 0x1, 0x5, 0x7}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa20b, 0x80000001, 0x20000000, 0x1, 0x5}, @dev={0xac, 0x14, 0x14, 0x21}, @local, 0x100000100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x80, 0x1, 0x5, 0xbdd}, @empty, @private=0xa010100}}]}, {0xf8, 0x6, "bb56e6cfff9222710cba3f3ca67b28eca8317a1b5f2a55d661d486b8e0440e9f35dcfe531f65893b5e55866a2eaa39f4c99f026d5ac9540d7a50b1446d5e232f9b6b1591df926767338a2f6149f0bb354e9b903f489f2a432cc1c53aa9f95c1cb1a62ebcbdedaafe36371ba54781382f24addebba77d19379dd9a45cdd18c8cb66471ee213f96a81bb20457e0ed784c2441e7fc23b6f9c66c25efc36cc2e7af4fc5c14b7a340f187f3c5a14e6ff6000684f1e5a7121d5bbb0a99e1eabef5c330a4df5f37d5f1641c717acbc5665260aae7ce66b7e786aae58fe84a477eeece5dc29d3f120da9460c701960fad291f992ffe94dcb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x138, 0x15, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @random="38e21ceb813c"}]}, {0xf8, 0x6, "4ffc35e240948b367360f20a70fc2deb4389598a5270037f2decad59c9fb5ea1dffea806e2844add14503eee896571c491b35aeed3bb063e349eb6444d770c626def9b80aaffe7646fe2efab8c82c0562e9adde94bf23ba240ea14f828cf59bf6e76b9ecd8f33dc4dc6c62dc656811b020e0cf0750f0bcde5386861ea94f8857620d382d4b54bc8c38b83191d069b5bb1cd014ba2e43627ef737bdad9cd2a71d9510b17e439ad9995b082bb9a1519d08900b026fedb467943520a242e57d483d684e471e180c22000842b625d17c6f7ba35c832d74611a74e05584a8c9e5fd92fb2d7622db07e44a06424b6f74b44cfe228a40fa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0xf}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x7}}]}}]}, 0xc80}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 479.82074ms ago: executing program 2 (id=5310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x2}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x13, 0x1, 0x70bd27, 0x0, {0x7, 0x0, 0x0, r7, 0x410a2, 0x14188}}, 0x20}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) syz_emit_ethernet(0x51, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x1b, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xf, 0x6, 0xc18, 0x5932, [{0x3, 0x1, "e71f377553ec8e70c2"}]}}}}}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1d}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0xcaf, 0x0, 0x0, 0x41100, 0x41, '\x00', r2, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)=[0x1, 0x1, r0, 0x1], &(0x7f0000000380)=[{0x0, 0x5, 0x1, 0xc}, {0x3, 0x1, 0x3, 0x2}, {0x0, 0x3, 0xb, 0x7}, {0x3, 0x2, 0xc, 0x9}, {0x0, 0x3, 0xe, 0x4}, {0x3, 0xfffffffe, 0x2, 0xc}, {0x3, 0x1, 0xc, 0x3}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0x5}, 0x94) socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000004c0)=r11, 0x4) sendmmsg$alg(r4, &(0x7f0000004e00), 0x54, 0x200410c4) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r12) sendmsg$ETHTOOL_MSG_TSINFO_GET(r12, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001380)={0x2c, r13, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4030015}, 0x10004800) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x1f00, 0x3ff, 0x24, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 479.11837ms ago: executing program 4 (id=5311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240000000000800014000000000090003007379a1090000000000000000060a010400000000000000000100000008000b40000000000000000073797a3000040000100004800c0001800800010066696200140000001100018207000000000000000000000a3d998c81581926bdf7b4a3b505b45dc0dd2cc6c9b11127e927"], 0xc0}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c00000015000103005271c6e21ddc740a000000080008002e83f2b725", @ANYRES32, @ANYBLOB], 0x1c}}, 0x20000080) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x200000c1}, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async, rerun: 32) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000000) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000006400)=0x4, 0x4) (async, rerun: 32) pselect6(0x0, 0x0, &(0x7f0000006480)={0xfffffffffffffffb, 0x4, 0x7, 0x58, 0x5, 0x10000, 0x5, 0x3}, 0x0, 0x0, &(0x7f0000006580)={0x0}) (async, rerun: 32) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r3, 0x0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) (async) sendmsg$NET_DM_CMD_START(r4, 0x0, 0x80) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nfc(0x0, r4) (async) sendmsg$NFC_CMD_GET_TARGET(r4, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000008a80), r4) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000008b00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000008c00)={0x0, 0x0, &(0x7f0000008bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060001000000010000000c00060002000000020000000c0006000200000002000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="9675613725e48856809488fee7a755a18aa7aa70f4ec569027d308d04e53ca05759a5c16c3adbaa417300d09716d8784ba4027f7e280f1ae20cb53d808cdb4bffc38ec978a326286eee4e3355b57a6e6f9e6e20b2c03c490a363d39c869bf7af88d84317aea41aa2e5d734902bacafd3e4fde3d0937b2c5277027e73022e940dd00e2ab72ad6ac3276345ff3ab3d7b0656781b0c26c01dfbe504516956ddd027600a513281d368bf0435290c758985a917b1983bc9ce5cd49295aec7e91e22437420edce6a3b28dc27b0b33b0250036527bd4cb9576c3bdf40161548b1620c51fe7d81fe468914a7cd76ed778932"], 0x58}, 0x1, 0x0, 0x0, 0x40008c5}, 0x4000800) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) 320.121963ms ago: executing program 3 (id=5312): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3], 0x54}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) 277.289997ms ago: executing program 5 (id=5313): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x6}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}]}}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cf000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) 179.980251ms ago: executing program 4 (id=5314): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x52}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000440)=@ringbuf={{}, {}, {}, [@jmp, @cb_func, @ringbuf_output]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8994, &(0x7f0000000200)={'bond0\x00'}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x7, [@volatile={0x6, 0x0, 0x0, 0x9, 0x4}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x1}, @float={0xb, 0x0, 0x0, 0x10, 0x10}, @enum64={0x9, 0x7, 0x0, 0x13, 0x1, 0x4, [{0x3, 0x0, 0x80000001}, {0x10, 0x9, 0x4}, {0x2, 0x7, 0x3}, {0x2, 0x62c}, {0x1, 0x5, 0x8001}, {0x10, 0x7, 0x3}, {0x2, 0x5, 0xffffff23}]}, @enum64={0x10, 0x3, 0x0, 0x13, 0x0, 0x4, [{0xf, 0xffffffff, 0x9}, {0xf, 0x5, 0x10000}, {0xa, 0x100, 0x5}]}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}, @fwd={0x5}]}, {0x0, [0x51, 0x5f, 0x30, 0x2e, 0x0]}}, &(0x7f00000006c0)=""/161, 0xeb, 0xa1, 0x1, 0x7ff}, 0x28) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r4, 0x24}, 0x14) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) accept(r1, 0x0, 0x0) 96.690279ms ago: executing program 5 (id=5315): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0x6}, {0x4, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x1b0, 0x0, 0x290, 0x290, 0x0, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0) 54.531417ms ago: executing program 4 (id=5316): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r1 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000e40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xc4, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8fb6fcf7e2187aff}, 0xda4735a750a0d4a4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) (async) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}], 0x28}}], 0x2, 0x4001c00) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 0s ago: executing program 3 (id=5317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000180)={0x2}, &(0x7f0000000280)=0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @private=0xa010103, {[@timestamp_addr={0x44, 0x4, 0x5, 0x3}, @ssrr={0x89, 0x3, 0xce}, @lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0) kernel console output (not intermixed with test programs): 4711 [ 349.241436][T17540] tipc: Enabled bearer , priority 0 [ 349.287588][T17537] syzkaller0: entered promiscuous mode [ 349.300877][T17537] syzkaller0: entered allmulticast mode [ 349.322493][T17466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.340555][T17466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.366027][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3282'. [ 349.376258][T17466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.416849][T17466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.423872][T17466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.462075][T17466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.482629][T17536] tipc: Resetting bearer [ 349.502553][T17536] tipc: Disabling bearer [ 349.694106][T17466] hsr_slave_0: entered promiscuous mode [ 349.713754][T17466] hsr_slave_1: entered promiscuous mode [ 349.722997][T17466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.742339][T17466] Cannot create hsr debugfs directory [ 350.061839][T17565] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3291'. [ 350.333376][T17577] netlink: 'syz.2.3295': attribute type 33 has an invalid length. [ 350.367082][T17577] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3295'. [ 350.387128][T17572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3295'. [ 350.553155][T17585] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.573453][T17585] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 350.934393][T17608] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 350.951891][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3306'. [ 350.961782][T17612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3306'. [ 351.009690][ T30] audit: type=1800 audit(1753548351.117:2): pid=17615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3307" name="memory.events" dev="tmpfs" ino=124 res=0 errno=0 [ 351.088551][ T30] audit: type=1804 audit(1753548351.197:3): pid=17616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3307" name="/newroot/21/memory.events" dev="tmpfs" ino=124 res=1 errno=0 [ 351.256548][ T5856] Bluetooth: hci1: command tx timeout [ 351.361027][T17466] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.383981][T17466] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.426016][T17466] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.482571][T17466] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.505094][T17634] net veth1_virt_wifi .: renamed from virt_wifi0 [ 351.674601][T17466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.717293][T17466] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.791435][ T9919] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.798752][ T9919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.824172][ T9918] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.831335][ T9918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.910021][T17650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3314'. [ 351.919776][T17650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3314'. [ 352.159752][T17665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3317'. [ 352.247589][T17632] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 352.282349][T17670] pimreg: entered allmulticast mode [ 352.284257][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3319'. [ 352.307452][T17670] lo: left allmulticast mode [ 352.312215][T17670] pimreg: left allmulticast mode [ 352.423311][T17466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.597484][T17466] veth0_vlan: entered promiscuous mode [ 352.650401][T17687] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 352.651181][T17466] veth1_vlan: entered promiscuous mode [ 352.770558][T17466] veth0_macvtap: entered promiscuous mode [ 352.805545][T17466] veth1_macvtap: entered promiscuous mode [ 352.825385][T17695] tipc: Enabled bearer , priority 0 [ 352.868974][T17696] syzkaller0: entered promiscuous mode [ 352.874515][T17696] syzkaller0: entered allmulticast mode [ 352.906565][T17466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.949333][T17696] tipc: Resetting bearer [ 352.968072][T17466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.984296][T17694] tipc: Resetting bearer [ 353.009670][T17694] tipc: Disabling bearer [ 353.031210][T17466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.048904][T17466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.064597][T17466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.084793][T17466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.336083][ T5856] Bluetooth: hci1: command tx timeout [ 353.344119][ T9919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.360650][ T9919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.439332][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.452160][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.576520][ T5860] Bluetooth: hci0: command 0x080f tx timeout [ 353.924316][ T9923] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 354.079902][T17758] netlink: 'syz.0.3343': attribute type 4 has an invalid length. [ 354.105297][T17758] netlink: 'syz.0.3343': attribute type 4 has an invalid length. [ 354.120764][T17758] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 354.674717][T17757] netlink: 'syz.0.3343': attribute type 1 has an invalid length. [ 354.686063][T17757] __nla_validate_parse: 1 callbacks suppressed [ 354.686082][T17757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3343'. [ 354.815473][T17772] IPv6: NLM_F_CREATE should be specified when creating new route [ 355.051095][T17788] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 355.179450][T17793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3357'. [ 355.211090][T17792] tipc: Enabled bearer , priority 0 [ 355.218804][T17792] syzkaller0: entered promiscuous mode [ 355.224332][T17792] syzkaller0: entered allmulticast mode [ 355.249411][T17792] netlink: 'syz.4.3356': attribute type 1 has an invalid length. [ 355.257759][T17792] netlink: 'syz.4.3356': attribute type 2 has an invalid length. [ 355.263895][T17799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3358'. [ 355.279085][T17792] netlink: 'syz.4.3356': attribute type 1 has an invalid length. [ 355.312803][T17803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3360'. [ 355.336835][T17803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3360'. [ 355.363551][T17795] tipc: Resetting bearer [ 355.375205][T17808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3359'. [ 355.394110][T17791] tipc: Resetting bearer [ 355.414714][T17791] tipc: Disabling bearer [ 355.416365][ T5860] Bluetooth: hci1: command tx timeout [ 355.774993][T17826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.224452][T17848] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 356.264023][T17848] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3373'. [ 356.337176][T17850] netlink: 'syz.0.3374': attribute type 13 has an invalid length. [ 356.356523][T17850] digital: digital_start_poll: Unknown protocol [ 356.406480][T17856] netlink: 'syz.3.3377': attribute type 2 has an invalid length. [ 356.415490][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3377'. [ 356.573531][T17866] netlink: 'syz.2.3380': attribute type 11 has an invalid length. [ 356.617329][T17866] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3380'. [ 356.633923][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3382'. [ 356.667614][T17870] tipc: Enabled bearer , priority 0 [ 356.677535][T17870] syzkaller0: entered promiscuous mode [ 356.689837][T17870] syzkaller0: entered allmulticast mode [ 356.759858][T17869] tipc: Resetting bearer [ 356.797813][T17869] tipc: Disabling bearer [ 356.831815][T17879] sctp: [Deprecated]: syz.2.3384 (pid 17879) Use of int in max_burst socket option deprecated. [ 356.831815][T17879] Use struct sctp_assoc_value instead [ 356.853774][T17879] sctp: [Deprecated]: syz.2.3384 (pid 17879) Use of int in max_burst socket option deprecated. [ 356.853774][T17879] Use struct sctp_assoc_value instead [ 356.866480][T17884] tipc: Enabling of bearer rejected, failed to enable media [ 357.169130][T17896] netlink: 'syz.2.3390': attribute type 1 has an invalid length. [ 357.251624][T17896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.315184][T17903] bond2: (slave geneve2): making interface the new active one [ 357.360789][T17903] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 357.370911][T17907] netlink: 'syz.3.3393': attribute type 1 has an invalid length. [ 357.411788][T17909] sock: sock_timestamping_bind_phc: sock not bind to device [ 357.469390][T17907] bond1: entered promiscuous mode [ 357.475058][T17907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.502876][ T5860] Bluetooth: hci1: command 0x0405 tx timeout [ 357.543900][T17910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.551535][T17910] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 357.562508][T17910] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 357.580139][T17910] bond1: (slave wireguard0): making interface the new active one [ 357.590014][T17910] wireguard0: entered promiscuous mode [ 357.598113][T17910] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 357.692253][T17912] Bluetooth: MGMT ver 1.23 [ 357.830328][T17909] syzkaller0: entered promiscuous mode [ 357.836362][T17909] syzkaller0: entered allmulticast mode [ 357.846797][T17930] netlink: ct family unspecified [ 357.851837][T17930] openvswitch: netlink: Actions may not be safe on all matching packets [ 357.951776][T17915] syzkaller0: entered promiscuous mode [ 357.959417][T17915] syzkaller0: entered allmulticast mode [ 362.046183][T17987] netlink: 'syz.0.3411': attribute type 24 has an invalid length. [ 362.085231][T17991] __nla_validate_parse: 5 callbacks suppressed [ 362.085249][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3412'. [ 362.184058][T17991] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.261133][T17993] gretap1: entered promiscuous mode [ 362.279043][T17993] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 362.306125][T17991] macvlan2: entered promiscuous mode [ 362.311987][T17991] macvlan2: entered allmulticast mode [ 362.319231][T17991] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 362.488311][T17998] netlink: 'syz.1.3414': attribute type 1 has an invalid length. [ 362.505937][T17998] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3414'. [ 362.515371][T17998] netlink: 'syz.1.3414': attribute type 1 has an invalid length. [ 362.532740][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3415'. [ 362.572390][T18004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3416'. [ 362.595927][T18004] nbd: nbd0 already in use [ 362.844731][T18010] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3420'. [ 363.784345][T18063] xt_TCPMSS: Only works on TCP SYN packets [ 363.800706][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3436'. [ 388.092713][T18068] netlink: 'syz.3.3440': attribute type 3 has an invalid length. [ 388.116061][T18068] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3440'. [ 388.329295][T18084] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3443'. [ 388.357784][T18084] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.366528][T18084] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.837086][T18108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3448'. [ 388.995403][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3451'. [ 389.187257][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'. [ 389.292582][T18128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3453'. [ 389.472480][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3456'. [ 389.649203][T18148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3459'. [ 389.870196][T18161] dvmrp1: entered allmulticast mode [ 389.890693][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3464'. [ 390.020794][T18168] syzkaller0: entered promiscuous mode [ 390.027085][T18168] syzkaller0: entered allmulticast mode [ 390.041589][T18174] sctp: [Deprecated]: syz.2.3466 (pid 18174) Use of int in max_burst socket option. [ 390.041589][T18174] Use struct sctp_assoc_value instead [ 390.223073][T18180] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3469'. [ 390.670665][T18187] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 390.689539][T18187] xt_TPROXY: Can be used only with -p tcp or -p udp [ 392.190024][T18197] netlink: 'syz.4.3475': attribute type 1 has an invalid length. [ 392.428322][T18209] sit0: entered promiscuous mode [ 392.445238][T18209] netlink: 'syz.2.3480': attribute type 1 has an invalid length. [ 393.243322][T18261] netlink: 'syz.2.3497': attribute type 1 has an invalid length. [ 393.272479][T18258] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 393.287401][T18263] netlink: 'syz.2.3497': attribute type 1 has an invalid length. [ 393.413136][T18266] __nla_validate_parse: 11 callbacks suppressed [ 393.413156][T18266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3499'. [ 393.458328][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3500'. [ 393.484528][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3499'. [ 393.492505][T18274] openvswitch: netlink: IP tunnel dst address not specified [ 393.530978][T18274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3502'. [ 393.605086][T18275] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.698991][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3499'. [ 393.726385][T18286] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3499'. [ 393.772121][T18293] xt_hashlimit: size too large, truncated to 1048576 [ 393.828925][T18275] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.897156][T18301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3507'. [ 394.065181][T18275] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.184611][T18310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 394.236426][T18312] netlink: 'syz.1.3509': attribute type 32 has an invalid length. [ 394.264837][T18312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 394.404197][T18310] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 394.458021][T18275] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.504274][T18312] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 394.625146][T18319] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3510'. [ 394.711548][T18319] netlink: 'syz.3.3510': attribute type 1 has an invalid length. [ 394.811954][T18275] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.857878][T18275] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.908463][T18275] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.961223][T18275] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.195176][T18340] netlink: 'syz.2.3519': attribute type 1 has an invalid length. [ 395.262504][T18340] netlink: 'syz.2.3519': attribute type 1 has an invalid length. [ 395.284777][T18351] tipc: Started in network mode [ 395.294646][T18351] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 395.302447][T18351] tipc: Enabled bearer , priority 10 [ 395.553313][T18371] netlink: 'syz.0.3524': attribute type 21 has an invalid length. [ 395.595013][T18371] netlink: 'syz.0.3524': attribute type 6 has an invalid length. [ 395.612648][T18363] netlink: 'syz.0.3524': attribute type 8 has an invalid length. [ 395.990801][T18389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.089503][T18398] netlink: 'syz.3.3529': attribute type 10 has an invalid length. [ 396.112861][T18391] macvtap1: entered promiscuous mode [ 396.132854][T18391] vlan0: entered promiscuous mode [ 396.151309][T18391] macvtap1: entered allmulticast mode [ 396.173380][T18391] vlan0: entered allmulticast mode [ 396.178973][T18391] veth0_vlan: entered allmulticast mode [ 396.194038][T18394] gretap1: entered promiscuous mode [ 396.215708][T18394] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 396.273584][T18389] macvlan0: entered promiscuous mode [ 396.280037][T18389] macvlan0: entered allmulticast mode [ 396.288387][T18389] bond2: (slave macvlan0): Error -98 calling set_mac_address [ 396.296453][ T9131] tipc: Node number set to 10463914 [ 396.726580][T18429] NCSI netlink: No device for ifindex 0 [ 396.776481][T18437] Cannot find set identified by id 65535 to match [ 397.175472][T18457] syzkaller1: entered promiscuous mode [ 397.184053][T18457] syzkaller1: entered allmulticast mode [ 397.598599][T18486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.239862][T18520] nftables ruleset with unbound chain [ 398.376837][ T5856] Bluetooth: hci1: command 0x0405 tx timeout [ 398.929124][T18567] vlan2: entered promiscuous mode [ 398.934238][T18567] bridge0: entered promiscuous mode [ 399.614909][T18570] __nla_validate_parse: 80 callbacks suppressed [ 399.614930][T18570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3583'. [ 399.884597][T18588] netlink: 'syz.0.3588': attribute type 11 has an invalid length. [ 399.937834][T18590] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3588'. [ 399.966010][T18586] lo speed is unknown, defaulting to 1000 [ 399.986159][T18588] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3588'. [ 400.009180][T18588] 0ªX¹¦D: renamed from gretap0 (while UP) [ 400.022573][T18588] 0ªX¹¦D: entered allmulticast mode [ 400.028673][T18588] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 400.082576][T18601] netlink: 'syz.2.3593': attribute type 1 has an invalid length. [ 400.176378][T18601] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 400.243183][T18608] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3594'. [ 400.387527][T18617] xt_TCPMSS: Only works on TCP SYN packets [ 402.083219][T18625] dvmrp0: entered allmulticast mode [ 402.093750][T18631] dvmrp0: left allmulticast mode [ 402.282566][T18635] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3600'. [ 402.559345][T18644] macvtap1: entered promiscuous mode [ 402.578811][T18644] vlan0: entered promiscuous mode [ 402.590027][T18644] macvtap1: entered allmulticast mode [ 402.603061][T18644] vlan0: entered allmulticast mode [ 402.621292][T18644] veth0_vlan: entered allmulticast mode [ 402.792929][T18661] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3607'. [ 403.005315][T18669] team0: Device gtp0 is of different type [ 403.088442][T18673] bond0: (slave bond_slave_1): Releasing backup interface [ 403.174565][T18675] gtp0: entered promiscuous mode [ 403.252384][T18681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3615'. [ 403.304389][T18680] tipc: Enabling of bearer rejected, failed to enable media [ 403.952566][T18721] TCP: TCP_TX_DELAY enabled [ 404.200337][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a47b400: rx timeout, send abort [ 404.708801][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a47b400: abort rx timeout. Force session deactivation [ 404.950302][T18756] blkio.reset_stats is deprecated [ 404.995077][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a479000: rx timeout, send abort [ 405.314035][T18768] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3643'. [ 405.494948][T18777] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 405.506426][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a479000: abort rx timeout. Force session deactivation [ 405.644819][T18781] sit0: left promiscuous mode [ 405.691823][T18781] gretap1: left promiscuous mode [ 405.702658][T18781] macvtap1: left promiscuous mode [ 405.712775][T18781] vlan0: left promiscuous mode [ 405.741721][T18781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3649'. [ 405.778783][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a478400: rx timeout, send abort [ 405.939771][T18791] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20004 [ 405.973662][T18791] netlink: 'syz.3.3651': attribute type 21 has an invalid length. [ 405.982253][T18791] netlink: 'syz.3.3651': attribute type 6 has an invalid length. [ 405.990687][T18791] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3651'. [ 406.053350][T18796] netlink: 'syz.1.3654': attribute type 10 has an invalid length. [ 406.090316][T18796] batman_adv: batadv0: Adding interface: team0 [ 406.113916][T18796] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.161979][T18796] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 406.287370][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a478400: abort rx timeout. Force session deactivation [ 406.298937][T18802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3657'. [ 406.580050][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a47ac00: rx timeout, send abort [ 407.088659][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a47ac00: abort rx timeout. Force session deactivation [ 407.220126][T18826] netlink: 'syz.4.3665': attribute type 10 has an invalid length. [ 407.244375][T18826] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 407.305129][T18831] netlink: 'syz.4.3665': attribute type 10 has an invalid length. [ 407.361094][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a478c00: rx timeout, send abort [ 407.540837][T18837] netlink: 'syz.1.3669': attribute type 11 has an invalid length. [ 407.541848][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3668'. [ 407.755251][T18840] bond2: entered promiscuous mode [ 407.774176][T18840] bond2: entered allmulticast mode [ 407.803537][T18840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 407.824105][T18845] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3671'. [ 407.833325][T18845] tc_dump_action: action bad kind [ 407.869535][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a478c00: abort rx timeout. Force session deactivation [ 407.920089][ T9123] IPVS: starting estimator thread 0... [ 408.002864][T18857] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 408.026461][T18853] IPVS: using max 26 ests per chain, 62400 per kthread [ 408.061752][T18857] bond1: entered promiscuous mode [ 408.075523][T18857] bond1: entered allmulticast mode [ 408.082970][T18857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.146978][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a479400: rx timeout, send abort [ 408.166443][T18857] block nbd1: Unsupported socket: shutdown callout must be supported. [ 408.250675][T18869] tipc: Started in network mode [ 408.255730][T18869] tipc: Node identity 7f000001, cluster identity 4711 [ 408.276666][T18869] tipc: Enabled bearer , priority 10 [ 408.435469][T18877] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 408.579066][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3679'. [ 408.655272][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a479400: abort rx timeout. Force session deactivation [ 408.933704][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a478800: rx timeout, send abort [ 408.934624][T18903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3685'. [ 409.100407][T18916] xt_TPROXY: Can be used only with -p tcp or -p udp [ 409.188998][T18923] IPVS: set_ctl: invalid protocol: 131 100.1.1.2:20000 [ 409.216945][T18923] x_tables: duplicate underflow at hook 2 [ 409.257298][T18927] tipc: Enabled bearer , priority 10 [ 409.266778][T18929] xt_NFQUEUE: number of total queues is 0 [ 409.406273][ T9121] tipc: Node number set to 2130706433 [ 409.442077][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a478800: abort rx timeout. Force session deactivation [ 409.557697][T18942] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3699'. [ 409.602788][T18942] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3699'. [ 409.655114][T18917] infiniband syz0: set active [ 409.669979][T18917] infiniband syz0: added bond_slave_0 [ 409.685048][T18917] syz0: rxe_create_cq: returned err = -12 [ 409.698530][T18917] infiniband syz0: Couldn't create ib_mad CQ [ 409.704746][T18917] infiniband syz0: Couldn't open port 1 [ 409.714527][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058cae000: rx timeout, send abort [ 409.803065][T18917] RDS/IB: syz0: added [ 409.807292][T18917] smc: adding ib device syz0 with port count 1 [ 409.813828][T18917] smc: ib device syz0 port 1 has pnetid [ 409.934501][T18961] SET target dimension over the limit! [ 410.222954][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058cae000: abort rx timeout. Force session deactivation [ 410.256499][ T9121] tipc: Node number set to 323781222 [ 410.387774][T18978] __nla_validate_parse: 2 callbacks suppressed [ 410.387793][T18978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3713'. [ 410.490568][T18984] netlink: 'syz.3.3715': attribute type 1 has an invalid length. [ 410.501405][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058caf400: rx timeout, send abort [ 410.634687][T18990] xt_hashlimit: max too large, truncated to 1048576 [ 410.669932][T18994] xt_hashlimit: max too large, truncated to 1048576 [ 410.679125][T18992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3717'. [ 410.700496][T18992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.708206][T18992] IPv6: NLM_F_CREATE should be set when creating new route [ 411.007523][T19009] netlink: 'syz.4.3723': attribute type 1 has an invalid length. [ 411.015337][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058caf400: abort rx timeout. Force session deactivation [ 411.044419][T19011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3722'. [ 411.111413][T19014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3724'. [ 411.148577][T19014] macsec1: entered allmulticast mode [ 411.154146][T19014] team0: entered allmulticast mode [ 411.159642][T19014] team_slave_0: entered allmulticast mode [ 411.181824][T19014] team_slave_1: entered allmulticast mode [ 411.197407][T19014] team0: left allmulticast mode [ 411.202566][T19014] team_slave_0: left allmulticast mode [ 411.209004][T19014] team_slave_1: left allmulticast mode [ 411.277558][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058caec00: rx timeout, send abort [ 411.477348][T19024] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 411.592309][T19031] C: renamed from lo (while UP) [ 411.602431][T19031] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 411.750569][T19037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3731'. [ 411.785874][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058caec00: abort rx timeout. Force session deactivation [ 412.010516][T19046] netlink: 'syz.4.3735': attribute type 1 has an invalid length. [ 412.068219][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058cacc00: rx timeout, send abort [ 412.086728][T19044] netlink: 'syz.1.3734': attribute type 4 has an invalid length. [ 412.174204][T19050] 8021q: adding VLAN 0 to HW filter on device bond3 [ 412.197871][T19050] bond2: (slave bond3): making interface the new active one [ 412.221048][T19050] bond2: (slave bond3): Enslaving as an active interface with an up link [ 412.503712][T19064] IPVS: Scheduler module ip_vs_sip not found [ 412.576560][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058cacc00: abort rx timeout. Force session deactivation [ 412.670009][T19069] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3739'. [ 412.722684][T19074] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3740'. [ 412.853027][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058cad400: rx timeout, send abort [ 413.137964][T19089] veth0: entered promiscuous mode [ 413.361375][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058cad400: abort rx timeout. Force session deactivation [ 413.638806][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058caf000: rx timeout, send abort [ 413.819208][T19084] veth0: left promiscuous mode [ 413.920877][T19108] delete_channel: no stack [ 414.147153][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058caf000: abort rx timeout. Force session deactivation [ 414.408626][T19157] xt_ipcomp: unknown flags B [ 414.429602][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a63b800: rx timeout, send abort [ 414.937996][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a63b800: abort rx timeout. Force session deactivation [ 415.003410][T19167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3765'. [ 415.211448][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a639000: rx timeout, send abort [ 415.434795][T19188] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.673768][T19202] bridge2: entered promiscuous mode [ 415.684805][T19202] bridge2: entered allmulticast mode [ 415.719789][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a639000: abort rx timeout. Force session deactivation [ 415.903703][T19211] netlink: 'syz.3.3776': attribute type 3 has an invalid length. [ 415.916501][T19211] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3776'. [ 415.917675][T19209] tipc: Enabled bearer , priority 0 [ 415.935237][T19209] syzkaller0: entered promiscuous mode [ 415.941180][T19209] syzkaller0: entered allmulticast mode [ 415.969632][T19209] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 415.992679][T19209] tipc: Resetting bearer [ 416.005169][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab8fc00: rx timeout, send abort [ 416.014085][T19208] tipc: Resetting bearer [ 416.040898][T19208] tipc: Disabling bearer [ 416.086330][T19220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 416.113426][T19220] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 416.513573][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab8fc00: abort rx timeout. Force session deactivation [ 416.665355][T19254] xt_addrtype: ipv6 does not support BROADCAST matching [ 416.798980][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab8f000: rx timeout, send abort [ 416.820690][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3793'. [ 416.829796][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3793'. [ 416.881108][T19269] netlink: 'syz.2.3792': attribute type 1 has an invalid length. [ 416.942137][T19269] 8021q: adding VLAN 0 to HW filter on device bond4 [ 417.010125][T19269] macvtap2: entered promiscuous mode [ 417.032769][T19269] bond4: entered promiscuous mode [ 417.038751][T19269] macvtap2: entered allmulticast mode [ 417.045514][T19269] bond4: entered allmulticast mode [ 417.053454][T19269] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 417.097247][T19277] bond4: (slave gretap2): making interface the new active one [ 417.104782][T19277] gretap2: entered promiscuous mode [ 417.137583][T19277] gretap2: entered allmulticast mode [ 417.145708][T19282] openvswitch: netlink: Flow key attribute not present in set flow. [ 417.155378][T19277] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 417.307386][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab8f000: abort rx timeout. Force session deactivation [ 417.573213][T19299] vlan2: entered promiscuous mode [ 417.578763][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab8f400: rx timeout, send abort [ 417.591040][T19302] netlink: 'syz.3.3803': attribute type 1 has an invalid length. [ 417.595986][T19299] bridge0: entered promiscuous mode [ 417.744528][T19302] bond4: entered promiscuous mode [ 417.757696][T19302] 8021q: adding VLAN 0 to HW filter on device bond4 [ 417.787962][T19302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.795404][T19302] IPv6: NLM_F_CREATE should be set when creating new route [ 417.802989][T19302] IPv6: NLM_F_CREATE should be set when creating new route [ 417.817380][T19302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.857075][T19324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3808'. [ 417.873802][T19306] 8021q: adding VLAN 0 to HW filter on device bond4 [ 417.881540][T19306] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 417.892737][T19306] bond4: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 417.920150][T19306] bond4: (slave wireguard1): making interface the new active one [ 417.932768][T19306] wireguard1: entered promiscuous mode [ 417.942456][T19306] bond4: (slave wireguard1): Enslaving as an active interface with an up link [ 417.959762][T19318] tipc: Enabled bearer , priority 10 [ 418.087291][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab8f400: abort rx timeout. Force session deactivation [ 418.214131][T19332] IPv6: sit1: Disabled Multicast RS [ 418.263784][T19332] sit1: entered allmulticast mode [ 418.357676][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab8f800: rx timeout, send abort [ 418.568353][T19355] batman_adv: batadv0: Removing interface: team0 [ 418.593253][T19355] bridge_slave_0: left allmulticast mode [ 418.606834][T19355] bridge_slave_0: left promiscuous mode [ 418.612818][T19355] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.646954][T19355] bridge_slave_1: left allmulticast mode [ 418.654231][T19355] bridge_slave_1: left promiscuous mode [ 418.660835][T19355] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.685155][T19355] bond0: (slave bond_slave_0): Releasing backup interface [ 418.710907][T19355] bond0: (slave bond_slave_1): Releasing backup interface [ 418.775700][T19355] team0: Port device team_slave_0 removed [ 418.810427][T19355] team0: Port device team_slave_1 removed [ 418.821261][T19355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.833605][T19355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.862763][T19355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.870377][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab8f800: abort rx timeout. Force session deactivation [ 418.904355][T19355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.999270][T19355] bond2: (slave gretap1): Releasing backup interface [ 419.139616][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aee4400: rx timeout, send abort [ 419.626887][T19381] netlink: 356 bytes leftover after parsing attributes in process `syz.3.3830'. [ 419.647990][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aee4400: abort rx timeout. Force session deactivation [ 419.768542][ T5856] block nbd1: Receive control failed (result -32) [ 419.924390][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aee7000: rx timeout, send abort [ 420.025967][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 420.036987][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 420.048042][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 420.060381][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 420.070239][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 420.150501][T19391] lo speed is unknown, defaulting to 1000 [ 420.432733][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aee7000: abort rx timeout. Force session deactivation [ 420.695590][T19419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.705183][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bf93000: rx timeout, send abort [ 420.728347][T19419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.736301][T19419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.747083][T19424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3842'. [ 420.834282][T19426] netlink: 'syz.1.3844': attribute type 12 has an invalid length. [ 421.076417][T19426] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 421.109959][T19437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.213452][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bf93000: abort rx timeout. Force session deactivation [ 421.370412][T19391] chnl_net:caif_netlink_parms(): no params data found [ 421.419874][T19444] macvtap3: entered promiscuous mode [ 421.425240][T19444] vlan0: entered promiscuous mode [ 421.433439][T19444] macvtap3: entered allmulticast mode [ 421.443134][T19447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3849'. [ 421.613345][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3851'. [ 422.136321][ T5856] Bluetooth: hci2: command tx timeout [ 422.224638][T19474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3855'. [ 422.309446][T19474] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 422.355203][T19474] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 422.364459][T19474] gretap3: entered promiscuous mode [ 422.385999][T19474] gretap3: entered allmulticast mode [ 422.400393][T19391] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.426233][T19391] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.433569][T19391] bridge_slave_0: entered allmulticast mode [ 422.461685][T19391] bridge_slave_0: entered promiscuous mode [ 422.493631][T19391] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.520425][T19391] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.540189][T19391] bridge_slave_1: entered allmulticast mode [ 422.561221][T19391] bridge_slave_1: entered promiscuous mode [ 422.679216][T19391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.699382][T19391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.784305][ T49] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 422.870071][T19391] team0: Port device team_slave_0 added [ 422.927866][T19391] team0: Port device team_slave_1 added [ 423.041046][T19391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.064346][T19391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.096359][T19391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.109678][T19514] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3866'. [ 423.123178][T19391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.135962][T19391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.180554][T19391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.304557][T19391] hsr_slave_0: entered promiscuous mode [ 423.315386][T19391] hsr_slave_1: entered promiscuous mode [ 423.322966][T19391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.336854][T19391] Cannot create hsr debugfs directory [ 423.372219][T19520] syzkaller0: entered promiscuous mode [ 423.382098][T19520] syzkaller0: entered allmulticast mode [ 423.406586][T19520] tipc: Enabled bearer , priority 0 [ 423.432288][T19526] xt_l2tp: v2 tid > 0xffff: 150994944 [ 423.469236][T19520] tipc: Resetting bearer [ 423.502292][T19519] tipc: Resetting bearer [ 423.524487][T19519] tipc: Disabling bearer [ 423.735405][T19532] macsec1: entered allmulticast mode [ 423.741275][T19532] team0: entered allmulticast mode [ 423.753604][T19532] team0: left allmulticast mode [ 424.016261][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3878'. [ 424.045451][T19544] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3878'. [ 424.065993][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3878'. [ 424.086864][T19550] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 424.113742][T19391] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 424.172877][T19391] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 424.213466][T19391] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 424.226774][ T5856] Bluetooth: hci2: command tx timeout [ 424.238523][T19553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.308564][T19391] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 424.392695][T19567] bridge0: port 3(syz_tun) entered blocking state [ 424.424325][T19567] bridge0: port 3(syz_tun) entered disabled state [ 424.439754][T19567] syz_tun: entered allmulticast mode [ 424.442288][T19568] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 424.459264][T19567] syz_tun: entered promiscuous mode [ 424.518856][T19574] netlink: 'syz.3.3885': attribute type 1 has an invalid length. [ 424.532298][T19574] netlink: 'syz.3.3885': attribute type 2 has an invalid length. [ 424.543860][T19580] ü: renamed from veth1_to_team (while UP) [ 424.608606][T19570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3886'. [ 424.822315][T19391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.895684][T19391] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.937651][ T9910] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.944986][ T9910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.981650][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.989009][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.137160][T19598] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 425.167308][T19598] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 425.203920][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3893'. [ 425.547484][T19613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3896'. [ 425.722724][T19619] bridge2: entered allmulticast mode [ 425.860252][T19391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.093964][T19637] openvswitch: netlink: Unknown nsh attribute 0 [ 426.145953][T19637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.177548][T19637] xt_hashlimit: size too large, truncated to 1048576 [ 426.301545][ T5856] Bluetooth: hci2: command tx timeout [ 426.497548][T19651] netlink: 'syz.4.3906': attribute type 4 has an invalid length. [ 426.506336][T19645] __nla_validate_parse: 10 callbacks suppressed [ 426.506353][T19645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3908'. [ 426.804911][T19669] x_tables: duplicate underflow at hook 2 [ 426.810901][T19670] x_tables: duplicate underflow at hook 2 [ 426.950972][T19391] veth0_vlan: entered promiscuous mode [ 427.084491][T19391] veth1_vlan: entered promiscuous mode [ 427.279936][T19683] netlink: 'syz.1.3915': attribute type 4 has an invalid length. [ 427.287763][T19391] veth0_macvtap: entered promiscuous mode [ 427.299563][T19391] veth1_macvtap: entered promiscuous mode [ 427.340393][T19683] netlink: 'syz.1.3915': attribute type 4 has an invalid length. [ 427.357794][T19391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.380599][T19391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.425560][T19391] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.456266][T19391] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.479517][T19687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3917'. [ 427.488457][T19391] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.488489][T19391] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.520847][T19687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3917'. [ 427.722799][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.754525][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.835318][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.898560][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.074265][T19712] netlink: 'syz.4.3924': attribute type 2 has an invalid length. [ 428.106942][T19712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.167877][T19722] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 428.197445][T19718] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3926'. [ 428.215087][T19723] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 428.384422][ T5856] Bluetooth: hci2: command tx timeout [ 428.439643][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3932'. [ 428.508517][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3932'. [ 428.674212][T19755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3934'. [ 429.003320][T19770] sctp: [Deprecated]: syz.1.3938 (pid 19770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 429.003320][T19770] Use struct sctp_sack_info instead [ 429.858834][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3949'. [ 429.858834][T19808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3948'. [ 430.127424][T19825] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 430.249167][T19830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3954'. [ 430.666356][T19844] unknown channel width for channel at 909000KHz? [ 430.781969][T19855] erspan0: entered allmulticast mode [ 430.988788][T19867] x_tables: duplicate underflow at hook 2 [ 431.401371][T19894] netlink: 'syz.5.3974': attribute type 21 has an invalid length. [ 431.449870][T19894] netlink: 'syz.5.3974': attribute type 5 has an invalid length. [ 431.595506][T19911] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 431.675684][T19922] netlink: 'syz.1.3980': attribute type 1 has an invalid length. [ 431.687397][T19922] __nla_validate_parse: 6 callbacks suppressed [ 431.687415][T19922] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3980'. [ 431.771521][T19925] syz_tun: entered allmulticast mode [ 431.779163][T19925] syz_tun: left allmulticast mode [ 431.902712][ T5169] Bluetooth: hci0: command 0x080f tx timeout [ 431.902908][ T5864] Bluetooth: hci3: command 0x0406 tx timeout [ 432.013204][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3985'. [ 432.749674][T19979] netlink: 'syz.1.3998': attribute type 11 has an invalid length. [ 432.764807][T19979] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3998'. [ 432.967056][T19992] netdevsim netdevsim5: Firmware load for './file0/../file0' refused, path contains '..' component [ 432.992178][T19996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4004'. [ 433.120237][T20000] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 433.172116][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4007'. [ 433.251352][T20012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4008'. [ 433.453837][T20018] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 433.471758][T20018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 433.487089][T20018] netlink: 'syz.3.4009': attribute type 10 has an invalid length. [ 433.495113][T20018] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 433.534718][T20018] bridge_slave_0: left allmulticast mode [ 433.541308][T20018] bridge_slave_0: left promiscuous mode [ 433.549085][T20018] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.571888][T20018] bridge_slave_1: left allmulticast mode [ 433.583715][T20018] bridge_slave_1: left promiscuous mode [ 433.589770][T20018] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.609182][T20018] bond0: (slave bond_slave_0): Releasing backup interface [ 433.726669][T20018] bond0: (slave bond_slave_1): Releasing backup interface [ 433.759066][T20018] team0: Port device team_slave_0 removed [ 433.777398][T20018] team0: Port device team_slave_1 removed [ 433.791607][T20018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.802566][T20018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.822842][T20018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.831036][T20018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.856508][T20018] bond1: (slave wireguard0): Releasing backup interface [ 433.863547][T20018] wireguard0: left promiscuous mode [ 433.874649][T20018] bond4: (slave wireguard1): Releasing backup interface [ 433.888105][T20018] wireguard1: left promiscuous mode [ 433.946353][T20021] tipc: Enabling of bearer rejected, failed to enable media [ 434.507012][T20060] xt_socket: unknown flags 0x2 [ 435.021738][T20070] tipc: Enabling of bearer rejected, failed to enable media [ 435.199861][T20076] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 435.218112][T20078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4028'. [ 435.237824][T20078] tc_dump_action: action bad kind [ 435.500063][T20096] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 435.620216][T20100] netlink: 'syz.3.4035': attribute type 5 has an invalid length. [ 435.645056][T20099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4036'. [ 435.674500][T20100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4035'. [ 435.698193][T20102] tipc: Enabling of bearer rejected, already enabled [ 435.749213][T20105] netlink: 'syz.5.4038': attribute type 7 has an invalid length. [ 435.768073][T20100] geneve2: entered promiscuous mode [ 435.773344][T20100] geneve2: entered allmulticast mode [ 435.811013][T20105] : entered promiscuous mode [ 436.258953][T20134] netlink: 'syz.1.4044': attribute type 1 has an invalid length. [ 436.742585][T20160] __nla_validate_parse: 6 callbacks suppressed [ 436.742607][T20160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4052'. [ 436.840332][T20170] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 437.028267][T20176] netlink: 'syz.1.4059': attribute type 3 has an invalid length. [ 437.047951][T20176] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4059'. [ 437.160330][T20185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4061'. [ 437.308725][T20185] 8021q: adding VLAN 0 to HW filter on device bond4 [ 437.493699][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4068'. [ 437.505675][T20210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4068'. [ 437.529948][T20212] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2 [ 437.546840][T20210] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 437.561671][T20212] netdevsim netdevsim5: Falling back to sysfs fallback for: ..€ [ 437.591627][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4070'. [ 437.733236][T20221] netlink: 'syz.4.4071': attribute type 1 has an invalid length. [ 437.858892][T20232] netlink: 'syz.3.4074': attribute type 5 has an invalid length. [ 437.931791][T20237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4077'. [ 438.298664][T20267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4086'. [ 438.430172][T20270] syzkaller1: entered promiscuous mode [ 438.436027][T20270] syzkaller1: entered allmulticast mode [ 438.458611][T20271] netlink: 'syz.3.4087': attribute type 1 has an invalid length. [ 438.469659][T20271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.507424][T20271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4087'. [ 438.550495][T20275] tipc: Enabled bearer , priority 0 [ 438.604657][T20278] netlink: 'syz.2.4091': attribute type 1 has an invalid length. [ 438.614941][T20278] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4091'. [ 438.644364][T20275] syzkaller0: entered promiscuous mode [ 438.656462][T20275] syzkaller0: entered allmulticast mode [ 438.675638][T20275] tipc: Resetting bearer [ 438.697308][T20275] syzkaller1: entered promiscuous mode [ 438.702907][T20275] syzkaller1: entered allmulticast mode [ 438.720859][T20273] tipc: Resetting bearer [ 438.748182][T20273] tipc: Disabling bearer [ 438.846992][T20286] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 439.097258][T20296] netlink: 'syz.3.4096': attribute type 1 has an invalid length. [ 439.140431][T20296] bond5 (unregistering): Released all slaves [ 439.187164][T20298] ip6tnl2: entered promiscuous mode [ 439.196584][T20298] ip6tnl2: entered allmulticast mode [ 439.207991][T20300] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 439.518310][T20313] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 439.529274][T20316] tipc: Enabling of bearer rejected, failed to enable media [ 439.547729][T20316] netlink: 'syz.1.4105': attribute type 29 has an invalid length. [ 439.567248][T20316] netlink: 'syz.1.4105': attribute type 29 has an invalid length. [ 439.755567][T20320] veth0_virt_wifi: renamed from vlan0 [ 440.248084][T20354] C: renamed from lo (while UP) [ 440.347526][T20362] netlink: 'syz.1.4118': attribute type 5 has an invalid length. [ 440.354129][T20359] gretap0: entered promiscuous mode [ 440.376472][T20359] vlan0: entered promiscuous mode [ 440.497585][T20360] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.042434][T20408] tap0: tun_chr_ioctl cmd 1074025678 [ 441.055002][T20408] tap0: group set to 0 [ 441.453549][ T30] audit: type=1800 audit(1753548441.547:4): pid=20432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4141" name="memory.events" dev="tmpfs" ino=979 res=0 errno=0 [ 441.533118][T20438] xt_cgroup: path and classid specified [ 442.044780][T20465] __nla_validate_parse: 9 callbacks suppressed [ 442.044800][T20465] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.4155'. [ 442.124432][T20470] tipc: Enabled bearer , priority 0 [ 442.142137][T20470] syzkaller0: entered promiscuous mode [ 442.151755][T20470] syzkaller0: entered allmulticast mode [ 442.212520][T20473] netdevsim netdevsim1: Direct firmware load for ,.€ failed with error -2 [ 442.213858][T20470] tipc: Resetting bearer [ 442.240152][T20473] netdevsim netdevsim1: Falling back to sysfs fallback for: ,.€ [ 442.310195][T20467] tipc: Resetting bearer [ 442.347001][T20467] tipc: Disabling bearer [ 442.412354][T20481] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4161'. [ 442.489017][T20481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 442.538301][T20483] gretap1: entered promiscuous mode [ 442.549351][T20483] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 442.565065][T20481] macvlan3: entered promiscuous mode [ 442.571315][T20481] macvlan3: entered allmulticast mode [ 442.577414][T20481] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 442.670881][T20486] netlink: 'syz.2.4164': attribute type 29 has an invalid length. [ 442.686623][T20486] netlink: 'syz.2.4164': attribute type 29 has an invalid length. [ 442.815562][T20499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4166'. [ 443.073624][T20514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4170'. [ 443.091080][T20514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4170'. [ 443.106395][T20514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4170'. [ 443.147968][T20514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4170'. [ 443.243985][T20525] sctp: [Deprecated]: syz.4.4173 (pid 20525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.243985][T20525] Use struct sctp_sack_info instead [ 443.510126][T20539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4179'. [ 443.536033][T20539] vxcan2: entered promiscuous mode [ 443.545698][T20539] vxcan2: entered allmulticast mode [ 443.606194][T20539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4179'. [ 443.644472][T20543] netlink: 'syz.2.4178': attribute type 10 has an invalid length. [ 443.698898][T20543] team0: Device ipvlan1 failed to register rx_handler [ 443.755411][T20546] tipc: Enabled bearer , priority 24 [ 443.957907][T20562] veth0: entered promiscuous mode [ 444.023005][T20561] veth0: left promiscuous mode [ 444.169778][T20568] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4187'. [ 447.164363][T20582] __nla_validate_parse: 1 callbacks suppressed [ 447.164384][T20582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4193'. [ 447.215279][T20582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4193'. [ 447.344451][T20591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4196'. [ 447.355134][T20593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4197'. [ 447.437166][T20593] bridge_slave_1: left allmulticast mode [ 447.443017][T20593] bridge_slave_1: left promiscuous mode [ 447.456861][T20593] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.507919][T20593] bridge_slave_0: left allmulticast mode [ 447.513978][T20593] bridge_slave_0: left promiscuous mode [ 447.534500][T20593] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.707009][T20605] tipc: Enabled bearer , priority 0 [ 447.727918][T20596] syzkaller0: entered promiscuous mode [ 447.760213][T20596] syzkaller0: entered allmulticast mode [ 447.787875][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'. [ 447.855467][T20596] tipc: Resetting bearer [ 447.865506][T20615] netlink: 'syz.5.4205': attribute type 1 has an invalid length. [ 447.905239][T20615] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4205'. [ 447.939049][T20622] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4206'. [ 448.025248][T20594] tipc: Resetting bearer [ 448.051953][T20594] tipc: Disabling bearer [ 448.382786][T20644] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4212'. [ 448.525236][T20651] Cannot find set identified by id 752 to match [ 448.525348][T20655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.621172][T20657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4217'. [ 448.710250][T20659] 8021q: VLANs not supported on ip6tnl0 [ 448.980052][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4226'. [ 449.119611][T20693] netlink: 'syz.3.4228': attribute type 11 has an invalid length. [ 449.189743][T20696] netlink: ct family unspecified [ 449.194786][T20696] openvswitch: netlink: Actions may not be safe on all matching packets [ 450.203164][T20754] xt_HMARK: proto mask must be zero with L3 mode [ 450.285269][T20757] sctp: [Deprecated]: syz.3.4245 (pid 20757) Use of int in maxseg socket option. [ 450.285269][T20757] Use struct sctp_assoc_value instead [ 450.968068][T20785] lo: entered promiscuous mode [ 451.001048][T20785] tunl0: entered promiscuous mode [ 451.020324][T20785] tipc: Resetting bearer [ 451.030034][T20785] gre0: entered promiscuous mode [ 451.063641][T20785] gretap0: entered promiscuous mode [ 451.098415][T20785] erspan0: entered promiscuous mode [ 451.128493][T20785] ip_vti0: entered promiscuous mode [ 451.147549][T20785] ip6_vti0: entered promiscuous mode [ 451.171092][T20785] sit0: entered promiscuous mode [ 451.189025][T20785] ip6tnl0: entered promiscuous mode [ 451.200334][T20798] openvswitch: netlink: Unknown key attributes 2 [ 451.203736][T20785] ip6gre0: entered promiscuous mode [ 451.219018][T20785] syz_tun: entered promiscuous mode [ 451.237037][T20785] ip6gretap0: entered promiscuous mode [ 451.255537][T20785] bond0: entered promiscuous mode [ 451.277405][T20785] team0: entered promiscuous mode [ 451.298960][T20785] dummy0: entered promiscuous mode [ 451.313178][T20785] nlmon0: entered promiscuous mode [ 451.324681][T20785] batadv0: entered promiscuous mode [ 451.334915][T20785] veth0: entered promiscuous mode [ 451.349933][T20785] veth1: entered promiscuous mode [ 451.368767][T20785] wg0: entered promiscuous mode [ 451.379874][T20785] wg1: entered promiscuous mode [ 451.389928][T20785] wg2: entered promiscuous mode [ 451.398980][T20785] veth0_to_bridge: entered promiscuous mode [ 451.410076][T20785] bridge_slave_0: entered promiscuous mode [ 451.425659][T20785] veth1_to_bridge: entered promiscuous mode [ 451.434875][T20785] bridge_slave_1: entered promiscuous mode [ 451.441629][T20785] veth0_to_bond: entered promiscuous mode [ 451.450783][T20785] bond_slave_0: entered promiscuous mode [ 451.458664][T20785] veth1_to_bond: entered promiscuous mode [ 451.470327][T20785] bond_slave_1: entered promiscuous mode [ 451.476908][T20785] veth0_to_team: entered promiscuous mode [ 451.485636][T20785] team_slave_0: entered promiscuous mode [ 451.492295][T20785] veth1_to_team: entered promiscuous mode [ 451.502035][T20785] team_slave_1: entered promiscuous mode [ 451.509388][T20785] veth0_to_batadv: entered promiscuous mode [ 451.520196][T20785] batadv_slave_0: entered promiscuous mode [ 451.531268][T20785] veth1_to_batadv: entered promiscuous mode [ 451.541277][T20785] batadv_slave_1: entered promiscuous mode [ 451.551686][T20785] xfrm0: entered promiscuous mode [ 451.560180][T20785] veth0_to_hsr: entered promiscuous mode [ 451.574010][T20785] veth1_to_hsr: entered promiscuous mode [ 451.589263][T20785] hsr0: entered promiscuous mode [ 451.600065][T20785] veth1_virt_wifi: entered promiscuous mode [ 451.610055][T20785] veth0_virt_wifi: entered promiscuous mode [ 451.619813][T20785] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 451.643967][T20785] vlan0: entered promiscuous mode [ 451.650007][T20785] vlan1: entered promiscuous mode [ 451.657744][T20785] macvlan0: entered promiscuous mode [ 451.669554][T20785] macvlan1: entered promiscuous mode [ 451.678400][T20785] ipvlan0: entered promiscuous mode [ 451.683930][T20785] ipvlan1: entered promiscuous mode [ 451.724507][T20785] macvtap0: entered promiscuous mode [ 451.745298][T20785] macsec0: entered promiscuous mode [ 451.763903][T20785] geneve0: entered promiscuous mode [ 451.773711][T20785] geneve1: entered promiscuous mode [ 451.791846][T20785] netdevsim netdevsim3 ÿÿÿÿÿÿ: entered promiscuous mode [ 451.810172][T20785] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 451.821669][T20785] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 451.832804][T20785] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 451.853911][T20785] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 451.863339][T20785] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode [ 451.871110][T20785] ip6tnl1: entered promiscuous mode [ 451.883199][T20785] wireguard0: entered promiscuous mode [ 451.890886][T20785] bridge1: entered promiscuous mode [ 451.897834][T20785] gre1: entered promiscuous mode [ 451.936752][T20785] gre2: entered promiscuous mode [ 451.943487][T20785] vlan0.0: entered promiscuous mode [ 451.949232][T20785] bond3: entered promiscuous mode [ 451.954489][T20785] gretap1: entered promiscuous mode [ 451.960210][T20785] bridge2: entered promiscuous mode [ 451.969633][T20785] wireguard1: entered promiscuous mode [ 451.975256][T20785] vxlan0: entered promiscuous mode [ 451.982018][T20785] netdevsim netdevsim3 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.990800][T20785] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.000199][T20785] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.009162][T20785] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.024453][T20785] geneve3: entered promiscuous mode [ 452.030918][T20785] bridge3: entered promiscuous mode [ 452.041123][T20785] bridge4: entered promiscuous mode [ 452.310659][T20816] __nla_validate_parse: 9 callbacks suppressed [ 452.310678][T20816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4261'. [ 452.328032][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4260'. [ 452.348713][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4261'. [ 452.376041][T20816] netlink: 'syz.3.4261': attribute type 14 has an invalid length. [ 452.383632][T20821] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4263'. [ 452.386383][T20816] netlink: 'syz.3.4261': attribute type 13 has an invalid length. [ 452.407763][T20821] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4263'. [ 452.424929][T20821] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4263'. [ 452.526597][T20816] netlink: 'syz.3.4261': attribute type 2 has an invalid length. [ 452.549512][T20816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.588391][T20828] netlink: 'syz.4.4265': attribute type 32 has an invalid length. [ 452.606521][T20828] netlink: 776 bytes leftover after parsing attributes in process `syz.4.4265'. [ 452.939252][T20855] nft_compat: unsupported protocol 1 [ 452.968047][T20856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4270'. [ 453.000734][T20856] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4270'. [ 453.046592][T20856] C: renamed from team_slave_0 [ 453.082069][T20856] netlink: 'syz.3.4270': attribute type 1 has an invalid length. [ 453.104932][T20856] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 453.327271][T20868] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4274'. [ 453.582068][T20880] netlink: 'syz.5.4279': attribute type 1 has an invalid length. [ 453.691241][T20875] veth0_virt_wifi (unregistering): left allmulticast mode [ 453.699109][T20875] veth0_vlan (unregistering): left allmulticast mode [ 453.707001][T20875] veth0_virt_wifi (unregistering): left promiscuous mode [ 453.807837][T20880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.838720][T20891] xt_connbytes: Forcing CT accounting to be enabled [ 453.853397][T20891] --map-set only usable from mangle table [ 454.114266][T20908] netlink: 'syz.3.4288': attribute type 1 has an invalid length. [ 454.843089][T20951] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 454.850166][T20950] netlink: 'syz.4.4299': attribute type 10 has an invalid length. [ 454.963422][T20950] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 455.118214][T20964] x_tables: duplicate underflow at hook 1 [ 455.180629][T20969] netlink: 'syz.1.4304': attribute type 1 has an invalid length. [ 455.231423][T20964] team0: Device vti0 is up. Set it down before adding it as a team port [ 455.584966][T20992] netlink: 'syz.1.4310': attribute type 29 has an invalid length. [ 455.643284][T20994] netlink: 'syz.1.4310': attribute type 29 has an invalid length. [ 456.127892][T21012] netlink: 'syz.3.4316': attribute type 1 has an invalid length. [ 456.169020][T21014] tipc: Enabled bearer , priority 0 [ 456.263287][T21012] 8021q: adding VLAN 0 to HW filter on device bond5 [ 456.271070][T21014] syzkaller0: entered promiscuous mode [ 456.277865][T21014] syzkaller0: entered allmulticast mode [ 456.285475][T21017] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 456.323071][T21018] 8021q: adding VLAN 0 to HW filter on device bond5 [ 456.330711][T21018] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 456.344046][T21018] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 456.391141][T21012] netlink: 'syz.3.4316': attribute type 2 has an invalid length. [ 456.422729][T21014] tipc: Resetting bearer [ 456.482916][T21013] tipc: Resetting bearer [ 456.539878][T21013] tipc: Disabling bearer [ 456.678220][T21035] team0: left promiscuous mode [ 456.690799][T21035] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.712522][T21035] team0: Cannot enslave team device to itself [ 457.085797][T21058] netlink: 'syz.5.4326': attribute type 9 has an invalid length. [ 457.332475][T21042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.359477][T21042] bond0 (unregistering): Released all slaves [ 457.422288][T21054] bond3: entered promiscuous mode [ 457.430603][T21054] bond3: entered allmulticast mode [ 457.440502][T21054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 457.453322][T21055] __nla_validate_parse: 19 callbacks suppressed [ 457.453342][T21055] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4327'. [ 457.641589][ T9123] syz0: Port: 1 Link DOWN [ 458.071283][T21093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4337'. [ 458.093909][T21094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4337'. [ 458.193616][T21094] hsr_slave_1 (unregistering): left promiscuous mode [ 458.376119][T21112] validate_nla: 3 callbacks suppressed [ 458.376138][T21112] netlink: 'syz.5.4342': attribute type 2 has an invalid length. [ 458.469831][T21118] Cannot find del_set index 5 as target [ 458.480393][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4343'. [ 459.144829][T21150] netlink: 'syz.3.4351': attribute type 11 has an invalid length. [ 459.456334][T21166] vlan0: entered promiscuous mode [ 459.464752][T21166] vlan0: entered allmulticast mode [ 459.471702][T21166] hsr_slave_1: entered allmulticast mode [ 460.517819][T21221] bridge6: entered promiscuous mode [ 460.523792][T21225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4371'. [ 460.543047][T21221] bridge6: entered allmulticast mode [ 460.560583][T21225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4371'. [ 460.880417][T21241] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4375'. [ 461.390134][T21267] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 461.532484][T21273] syzkaller0: entered promiscuous mode [ 461.549565][T21273] syzkaller0: entered allmulticast mode [ 461.574090][T21277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4389'. [ 461.770934][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4392'. [ 461.936232][T21308] netlink: 'syz.2.4396': attribute type 21 has an invalid length. [ 462.080383][T21318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4400'. [ 462.102441][T21315] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 462.307789][T21328] vlan3: entered allmulticast mode [ 462.312960][T21328] bridge5: entered allmulticast mode [ 462.321371][T21328] bridge5: port 1(vlan3) entered blocking state [ 462.328355][T21328] bridge5: port 1(vlan3) entered disabled state [ 462.621440][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 462.814601][T21347] __nla_validate_parse: 4 callbacks suppressed [ 462.814620][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4408'. [ 463.139550][T21363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4412'. [ 463.161951][T21363] ip6tnl1: entered promiscuous mode [ 463.163515][T21365] openvswitch: netlink: Key type 292 is out of range max 32 [ 463.180279][T21365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4413'. [ 463.302465][T21369] netlink: 'syz.2.4414': attribute type 8 has an invalid length. [ 463.498538][T21380] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 463.646045][T21385] xt_bpf: check failed: parse error [ 463.674914][T21386] xt_bpf: check failed: parse error [ 464.175360][T21415] netlink: 'syz.5.4429': attribute type 2 has an invalid length. [ 464.196584][T21415] netlink: 'syz.5.4429': attribute type 1 has an invalid length. [ 464.522172][T21433] pim6reg1: entered promiscuous mode [ 464.539671][T21433] pim6reg1: entered allmulticast mode [ 464.543221][T21440] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4438'. [ 464.559122][T21443] x_tables: duplicate underflow at hook 3 [ 464.656824][T21447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4436'. [ 464.705549][T21450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4440'. [ 465.122762][T21466] netlink: 'syz.5.4446': attribute type 10 has an invalid length. [ 465.168456][T21466] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 465.194345][T21473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4445'. [ 465.201057][T21471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4447'. [ 465.213163][T21471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4447'. [ 465.223199][T21471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4447'. [ 466.384051][T21536] macvlan0: left promiscuous mode [ 466.721912][T21550] tipc: Enabled bearer , priority 0 [ 466.731686][T21551] tipc: Enabling of bearer rejected, already enabled [ 466.741386][T21550] syzkaller0: entered promiscuous mode [ 466.747257][T21550] syzkaller0: entered allmulticast mode [ 467.102220][T21550] tipc: Resetting bearer [ 467.141047][T21550] tipc: Disabling bearer [ 467.280377][T21571] x_tables: duplicate underflow at hook 2 [ 467.309825][T21571] x_tables: duplicate underflow at hook 2 [ 467.316081][T21571] x_tables: duplicate underflow at hook 2 [ 467.322022][T21571] x_tables: duplicate underflow at hook 2 [ 467.340072][T21571] x_tables: duplicate underflow at hook 2 [ 467.352069][T21571] x_tables: duplicate underflow at hook 2 [ 467.398275][T21569] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 468.041232][T21609] __nla_validate_parse: 43 callbacks suppressed [ 468.041255][T21609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4489'. [ 468.157866][T21620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4491'. [ 468.233485][T21625] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4492'. [ 468.383875][T21635] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 468.426768][T21635] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 468.496522][T21635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4494'. [ 468.552334][T21640] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4496'. [ 468.603447][T21643] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4498'. [ 468.640130][T21648] openvswitch: netlink: Missing key (keys=40, expected=100) [ 468.863279][T21659] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 469.004914][T21669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4504'. [ 469.069366][T21676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4507'. [ 469.145354][T21676] bond4: entered promiscuous mode [ 469.253894][T21683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4507'. [ 469.294903][T21683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4507'. [ 469.339978][T21689] netlink: 'syz.5.4510': attribute type 21 has an invalid length. [ 469.432298][T21691] netlink: 'syz.3.4512': attribute type 29 has an invalid length. [ 469.459718][T21694] ipvlan0: entered promiscuous mode [ 469.470211][T21694] ipvlan0: entered allmulticast mode [ 469.723461][T21714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.910845][T21711] team0 (unregistering): Port device team_slave_0 removed [ 469.926396][T21711] team0 (unregistering): Port device team_slave_1 removed [ 470.324995][T21735] bond0: (slave bond_slave_1): Releasing backup interface [ 470.407907][T21746] tipc: Enabling of bearer rejected, failed to enable media [ 470.408957][T21748] netlink: 'syz.2.4530': attribute type 16 has an invalid length. [ 470.861443][ T5864] Bluetooth: hci2: command 0x0405 tx timeout [ 471.311616][T21793] netlink: 'syz.2.4543': attribute type 1 has an invalid length. [ 471.466168][T21789] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 471.495842][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 471.654009][T21808] netlink: 'syz.5.4547': attribute type 29 has an invalid length. [ 471.670094][T21808] netlink: 'syz.5.4547': attribute type 29 has an invalid length. [ 471.680661][T21808] netlink: 'syz.5.4547': attribute type 29 has an invalid length. [ 471.689782][T21808] netlink: 'syz.5.4547': attribute type 29 has an invalid length. [ 471.902713][T21820] sctp: [Deprecated]: syz.5.4549 (pid 21820) Use of int in maxseg socket option. [ 471.902713][T21820] Use struct sctp_assoc_value instead [ 471.971450][T21824] tipc: Enabled bearer , priority 0 [ 471.986476][T21824] syzkaller0: entered promiscuous mode [ 471.992522][T21824] syzkaller0: entered allmulticast mode [ 472.026917][T21824] tipc: Resetting bearer [ 472.089762][T21824] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.100795][T21824] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.228785][T21824] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.245374][T21824] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.349928][T21824] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.360932][T21824] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.453971][T21824] bond0: (slave netdevsim0): Releasing backup interface [ 472.483662][T21824] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.506348][T21824] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.536007][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 472.754827][T21824] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.775629][T21824] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.822635][T21824] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.831277][T21824] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.859474][T21823] tipc: Resetting bearer [ 472.905235][T21823] tipc: Disabling bearer [ 472.952437][T21824] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.974246][T21824] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.999944][T21824] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.009048][T21824] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.130744][T21864] __nla_validate_parse: 14 callbacks suppressed [ 473.130781][T21864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4564'. [ 473.155832][T21864] netlink: 'syz.2.4564': attribute type 3 has an invalid length. [ 473.172498][T21866] tipc: Enabling of bearer rejected, media not registered [ 473.196550][T21866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4566'. [ 473.251630][T21871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4566'. [ 473.296493][T21866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4566'. [ 473.456734][T21878] netlink: 'syz.4.4569': attribute type 1 has an invalid length. [ 473.575913][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 473.725120][T21893] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4573'. [ 473.816441][T21895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4574'. [ 473.832372][T21896] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4574'. [ 474.390769][T21929] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4583'. [ 474.412360][T21929] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4583'. [ 474.428169][T21927] vlan2: entered allmulticast mode [ 474.431529][T21929] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4583'. [ 474.446968][T21927] mac80211_hwsim hwsim46 wlan0: entered allmulticast mode [ 474.615913][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 474.938069][T21962] delete_channel: no stack [ 475.412194][T21984] tc_dump_action: action bad kind [ 475.432166][T21984] validate_nla: 1 callbacks suppressed [ 475.432188][T21984] netlink: 'syz.1.4601': attribute type 1 has an invalid length. [ 475.655834][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 475.782017][T22000] netlink: 'syz.5.4605': attribute type 5 has an invalid length. [ 475.805211][T22003] netlink: 'syz.1.4606': attribute type 5 has an invalid length. [ 475.867742][T22003] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 475.944061][T22003] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 475.953583][T22003] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 475.970372][T22003] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 475.985003][T22003] geneve2: entered promiscuous mode [ 475.995626][T22003] geneve2: entered allmulticast mode [ 476.586198][T22053] netlink: 'syz.4.4617': attribute type 10 has an invalid length. [ 476.633528][T22053] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.662731][T22053] bridge_slave_1: left allmulticast mode [ 476.695863][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 476.709069][T22053] bridge_slave_1: left promiscuous mode [ 476.728764][T22053] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.782567][T22053] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 477.219479][T22090] netlink: 'syz.4.4630': attribute type 1 has an invalid length. [ 477.291250][T22090] 8021q: adding VLAN 0 to HW filter on device bond6 [ 477.333167][T22095] 8021q: adding VLAN 0 to HW filter on device bond6 [ 477.340677][T22095] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 477.353388][T22095] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 477.437159][T22090] veth5: entered promiscuous mode [ 477.454985][T22090] bond6: (slave veth5): Enslaving as an active interface with a down link [ 477.481708][T22098] vlan0: entered allmulticast mode [ 477.512133][T22098] bond6: entered allmulticast mode [ 477.735858][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 477.992560][T22128] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 478.137314][T22139] __nla_validate_parse: 14 callbacks suppressed [ 478.137335][T22139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4641'. [ 478.156277][T22139] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 478.206064][T22139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.343240][T22148] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 478.427812][T22151] tipc: Enabled bearer , priority 0 [ 478.441272][T22151] syzkaller0: entered promiscuous mode [ 478.453213][T22151] syzkaller0: entered allmulticast mode [ 478.552394][T22156] syzkaller0: entered promiscuous mode [ 478.558872][T22156] syzkaller0: entered allmulticast mode [ 478.609660][T22164] tipc: Resetting bearer [ 478.632263][T22150] tipc: Resetting bearer [ 478.680073][T22150] tipc: Disabling bearer [ 478.776017][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 478.891439][T22173] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 478.907261][T22173] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 478.922212][T22173] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 478.938476][T22173] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 479.816710][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 480.745439][T22176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4651'. [ 480.855873][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 480.943918][T22199] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4658'. [ 481.305157][T22218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4662'. [ 481.384909][T22225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4663'. [ 481.415917][T22225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4663'. [ 481.529285][T19132] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea [ 481.614610][T22237] xt_hashlimit: invalid rate [ 481.895847][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 482.011062][T22260] FAULT_INJECTION: forcing a failure. [ 482.011062][T22260] name failslab, interval 1, probability 0, space 0, times 1 [ 482.032666][T22260] CPU: 0 UID: 0 PID: 22260 Comm: syz.4.4676 Not tainted 6.16.0-rc7-syzkaller-00091-geccf7a3480a0 #0 PREEMPT(full) [ 482.032707][T22260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 482.032729][T22260] Call Trace: [ 482.032738][T22260] [ 482.032746][T22260] dump_stack_lvl+0x189/0x250 [ 482.032776][T22260] ? __pfx____ratelimit+0x10/0x10 [ 482.032798][T22260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.032822][T22260] ? __pfx__printk+0x10/0x10 [ 482.032852][T22260] ? __pfx___might_resched+0x10/0x10 [ 482.032876][T22260] ? fs_reclaim_acquire+0x7d/0x100 [ 482.032905][T22260] should_fail_ex+0x414/0x560 [ 482.032932][T22260] should_failslab+0xa8/0x100 [ 482.032971][T22260] __kmalloc_noprof+0xcb/0x4f0 [ 482.032997][T22260] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 482.033018][T22260] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 482.033047][T22260] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 482.033078][T22260] genl_family_rcv_msg_doit+0xb8/0x300 [ 482.033108][T22260] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 482.033134][T22260] ? rcu_is_watching+0x15/0xb0 [ 482.033160][T22260] ? apparmor_capable+0x137/0x1b0 [ 482.033190][T22260] ? bpf_lsm_capable+0x9/0x20 [ 482.033215][T22260] ? security_capable+0x7e/0x2e0 [ 482.033244][T22260] genl_rcv_msg+0x60e/0x790 [ 482.033274][T22260] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.033292][T22260] ? ref_tracker_free+0x63a/0x7d0 [ 482.033313][T22260] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 482.033332][T22260] ? __pfx_nl80211_connect+0x10/0x10 [ 482.033355][T22260] ? __pfx_nl80211_post_doit+0x10/0x10 [ 482.033375][T22260] ? __pfx_ref_tracker_free+0x10/0x10 [ 482.033409][T22260] netlink_rcv_skb+0x205/0x470 [ 482.033439][T22260] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.033463][T22260] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.033511][T22260] ? down_read+0x1ad/0x2e0 [ 482.033539][T22260] genl_rcv+0x28/0x40 [ 482.033559][T22260] netlink_unicast+0x75c/0x8e0 [ 482.033597][T22260] netlink_sendmsg+0x805/0xb30 [ 482.033637][T22260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.033669][T22260] ? aa_sock_msg_perm+0x94/0x160 [ 482.033693][T22260] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.033714][T22260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.033744][T22260] __sock_sendmsg+0x21c/0x270 [ 482.033772][T22260] ____sys_sendmsg+0x505/0x830 [ 482.033799][T22260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.033828][T22260] ? import_iovec+0x74/0xa0 [ 482.033861][T22260] ___sys_sendmsg+0x21f/0x2a0 [ 482.033882][T22260] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.033942][T22260] ? __fget_files+0x2a/0x420 [ 482.033967][T22260] ? __fget_files+0x3a0/0x420 [ 482.033997][T22260] __x64_sys_sendmsg+0x19b/0x260 [ 482.034020][T22260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.034052][T22260] ? __pfx_ksys_write+0x10/0x10 [ 482.034085][T22260] ? do_syscall_64+0xbe/0x3b0 [ 482.034113][T22260] do_syscall_64+0xfa/0x3b0 [ 482.034135][T22260] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.034155][T22260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.034175][T22260] ? clear_bhb_loop+0x60/0xb0 [ 482.034199][T22260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.034224][T22260] RIP: 0033:0x7f437178e9a9 [ 482.034242][T22260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.034259][T22260] RSP: 002b:00007f437265d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.034281][T22260] RAX: ffffffffffffffda RBX: 00007f43719b5fa0 RCX: 00007f437178e9a9 [ 482.034295][T22260] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 482.034308][T22260] RBP: 00007f437265d090 R08: 0000000000000000 R09: 0000000000000000 [ 482.034320][T22260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.034331][T22260] R13: 0000000000000000 R14: 00007f43719b5fa0 R15: 00007ffdc2ac7848 [ 482.034364][T22260] [ 482.588393][T22269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4679'. [ 482.791047][T22274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4682'. [ 482.924787][T22283] geneve2: entered promiscuous mode [ 482.936187][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 482.969275][T22288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4686'. [ 482.986976][T22283] geneve2: entered allmulticast mode [ 483.020977][T22292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4688'. [ 483.181189][T22293] can: request_module (can-proto-0) failed. [ 483.201419][T22304] FAULT_INJECTION: forcing a failure. [ 483.201419][T22304] name failslab, interval 1, probability 0, space 0, times 0 [ 483.240850][T22304] CPU: 0 UID: 0 PID: 22304 Comm: syz.3.4690 Not tainted 6.16.0-rc7-syzkaller-00091-geccf7a3480a0 #0 PREEMPT(full) [ 483.240882][T22304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 483.240904][T22304] Call Trace: [ 483.240913][T22304] [ 483.240922][T22304] dump_stack_lvl+0x189/0x250 [ 483.240953][T22304] ? __pfx____ratelimit+0x10/0x10 [ 483.240978][T22304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.241002][T22304] ? __pfx__printk+0x10/0x10 [ 483.241037][T22304] ? __pfx___might_resched+0x10/0x10 [ 483.241061][T22304] ? fs_reclaim_acquire+0x7d/0x100 [ 483.241086][T22304] should_fail_ex+0x414/0x560 [ 483.241114][T22304] should_failslab+0xa8/0x100 [ 483.241146][T22304] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 483.241176][T22304] ? __alloc_skb+0x112/0x2d0 [ 483.241210][T22304] __alloc_skb+0x112/0x2d0 [ 483.241245][T22304] netlink_ack+0x146/0xa50 [ 483.241272][T22304] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.241292][T22304] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 483.241312][T22304] ? __pfx_nl80211_post_doit+0x10/0x10 [ 483.241347][T22304] netlink_rcv_skb+0x28c/0x470 [ 483.241376][T22304] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.241400][T22304] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.241449][T22304] ? down_read+0x1ad/0x2e0 [ 483.241478][T22304] genl_rcv+0x28/0x40 [ 483.241498][T22304] netlink_unicast+0x75c/0x8e0 [ 483.241539][T22304] netlink_sendmsg+0x805/0xb30 [ 483.241580][T22304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.241614][T22304] ? aa_sock_msg_perm+0x94/0x160 [ 483.241639][T22304] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.241662][T22304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.241693][T22304] __sock_sendmsg+0x21c/0x270 [ 483.241722][T22304] ____sys_sendmsg+0x505/0x830 [ 483.241749][T22304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.241780][T22304] ? import_iovec+0x74/0xa0 [ 483.241814][T22304] ___sys_sendmsg+0x21f/0x2a0 [ 483.241837][T22304] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.241906][T22304] ? __fget_files+0x2a/0x420 [ 483.241924][T22304] ? __fget_files+0x3a0/0x420 [ 483.241955][T22304] __x64_sys_sendmsg+0x19b/0x260 [ 483.241978][T22304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.242011][T22304] ? __pfx_ksys_write+0x10/0x10 [ 483.242035][T22304] ? rcu_is_watching+0x15/0xb0 [ 483.242066][T22304] ? do_syscall_64+0xbe/0x3b0 [ 483.242095][T22304] do_syscall_64+0xfa/0x3b0 [ 483.242117][T22304] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.242139][T22304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.242160][T22304] ? clear_bhb_loop+0x60/0xb0 [ 483.242185][T22304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.242205][T22304] RIP: 0033:0x7fef7598e9a9 [ 483.242224][T22304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.242241][T22304] RSP: 002b:00007fef767e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.242263][T22304] RAX: ffffffffffffffda RBX: 00007fef75bb5fa0 RCX: 00007fef7598e9a9 [ 483.242278][T22304] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 483.242291][T22304] RBP: 00007fef767e7090 R08: 0000000000000000 R09: 0000000000000000 [ 483.242303][T22304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.242315][T22304] R13: 0000000000000000 R14: 00007fef75bb5fa0 R15: 00007fff6cf69718 [ 483.242347][T22304] [ 483.744260][T22318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4692'. [ 483.864538][T22330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4699'. [ 483.884909][T22318] bond0: (slave bridge_slave_1): Releasing backup interface [ 483.926662][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4698'. [ 483.975829][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 483.995479][T22330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.010544][T22335] macvlan0: entered promiscuous mode [ 484.016716][T22335] macvlan0: entered allmulticast mode [ 484.027267][T22335] bond0: entered promiscuous mode [ 484.033098][T22335] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 484.064776][T22335] bond0: left promiscuous mode [ 484.139227][T22328] syz_tun: entered promiscuous mode [ 484.147214][T22328] batadv_slave_0: entered promiscuous mode [ 484.155047][T22328] hsr1: entered allmulticast mode [ 484.161665][T22328] syz_tun: entered allmulticast mode [ 484.169259][T22328] batadv_slave_0: entered allmulticast mode [ 484.280788][T22349] netlink: 'syz.4.4701': attribute type 7 has an invalid length. [ 484.497110][T22361] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4706'. [ 484.527190][T22361] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 484.759820][T22379] netlink: 'syz.2.4711': attribute type 10 has an invalid length. [ 484.771134][T22379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4711'. [ 484.815682][T22383] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4712'. [ 484.847918][T22379] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 485.015994][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 485.401328][T22395] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.426410][T22395] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.435347][T22395] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.453596][T22395] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.513029][T22395] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 485.524164][T22395] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 485.535419][T22395] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 485.544329][T22395] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 485.735292][T22420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4725'. [ 485.959685][T22433] openvswitch: netlink: Message has 4 unknown bytes. [ 485.995316][T22432] openvswitch: netlink: Message has 4 unknown bytes. [ 486.055853][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 486.199827][T22451] IPVS: set_ctl: invalid protocol: 98 172.30.1.5:20257 [ 486.444570][T22470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4739'. [ 486.500495][T22476] netlink: 'syz.5.4740': attribute type 1 has an invalid length. [ 486.542411][T22476] bond5: entered promiscuous mode [ 486.548263][T22476] 8021q: adding VLAN 0 to HW filter on device bond5 [ 486.681099][T22488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 486.688479][T22488] IPv6: NLM_F_CREATE should be set when creating new route [ 486.695783][T22488] IPv6: NLM_F_CREATE should be set when creating new route [ 486.743440][T22488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 486.792070][T22476] 8021q: adding VLAN 0 to HW filter on device bond5 [ 486.816633][T22476] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 486.828095][T22476] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 486.850909][T22476] bond5: (slave wireguard0): making interface the new active one [ 486.860605][T22476] wireguard0: entered promiscuous mode [ 486.868743][T22476] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 487.095817][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 487.308849][T22513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.145833][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 489.175924][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 489.194716][T22536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4753'. [ 489.220886][T22537] Bluetooth: MGMT ver 1.23 [ 489.232128][T22536] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4753'. [ 489.284647][T22536] geneve2: entered promiscuous mode [ 489.298590][T22536] geneve2: entered allmulticast mode [ 489.314487][T22544] sctp: [Deprecated]: syz.4.4756 (pid 22544) Use of int in max_burst socket option. [ 489.314487][T22544] Use struct sctp_assoc_value instead [ 489.493352][T22546] syzkaller1: entered promiscuous mode [ 489.515996][T22546] syzkaller1: entered allmulticast mode [ 489.629756][T22552] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4757'. [ 490.080887][T22585] netlink: 'syz.5.4766': attribute type 1 has an invalid length. [ 490.114772][T22589] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 490.200324][T22591] 8021q: adding VLAN 0 to HW filter on device bond7 [ 490.214018][T22591] bond6: (slave bond7): making interface the new active one [ 490.221615][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 490.232547][T22591] bond6: (slave bond7): Enslaving as an active interface with an up link [ 490.318141][T22599] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4771'. [ 490.321738][T22596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4769'. [ 490.336958][T22596] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4769'. [ 490.410387][T22604] netlink: set zone limit has 8 unknown bytes [ 490.848691][T22633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4778'. [ 490.858372][T22633] netlink: 'syz.3.4778': attribute type 2 has an invalid length. [ 490.866361][T22633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4778'. [ 491.114733][T22645] pim6reg527: entered allmulticast mode [ 491.151273][T22641] netlink: 'syz.1.4779': attribute type 1 has an invalid length. [ 491.161917][T22641] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4779'. [ 491.257637][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 491.415284][T22667] netlink: 'syz.4.4784': attribute type 1 has an invalid length. [ 491.424718][T22667] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4784'. [ 491.486534][T22671] IPVS: set_ctl: invalid protocol: 255 172.20.20.64:20001 [ 491.794312][T22682] netlink: 'syz.2.4793': attribute type 1 has an invalid length. [ 492.114441][T22706] vlan3: entered promiscuous mode [ 492.121443][T22706] bridge0: entered promiscuous mode [ 492.271887][T22709] vlan3: entered promiscuous mode [ 492.305840][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 492.828177][T22747] geneve2: entered promiscuous mode [ 492.833468][T22747] geneve2: entered allmulticast mode [ 493.168279][T22762] syz_tun: left allmulticast mode [ 493.173449][T22762] syz_tun: left promiscuous mode [ 493.182840][T22762] bridge0: port 3(syz_tun) entered disabled state [ 493.221284][T22762] bridge_slave_1: left allmulticast mode [ 493.227395][T22762] bridge_slave_1: left promiscuous mode [ 493.233227][T22762] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.250039][T22762] bridge_slave_0: left allmulticast mode [ 493.264436][T22762] bridge_slave_0: left promiscuous mode [ 493.279657][T22762] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.335942][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 493.445185][T22773] team0: Device gtp1 is up. Set it down before adding it as a team port [ 493.596258][T22783] netlink: 'syz.2.4822': attribute type 8 has an invalid length. [ 494.168196][T22817] tipc: Trying to set illegal importance in message [ 494.185679][T22816] netlink: 'syz.4.4833': attribute type 1 has an invalid length. [ 494.205929][T22816] netlink: 'syz.4.4833': attribute type 1 has an invalid length. [ 494.375922][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 494.393158][T22826] netlink: 'syz.2.4836': attribute type 83 has an invalid length. [ 494.641623][T22843] __nla_validate_parse: 5 callbacks suppressed [ 494.641643][T22843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4841'. [ 494.730200][T22853] netlink: 'syz.5.4843': attribute type 58 has an invalid length. [ 494.769103][T22853] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4843'. [ 494.966028][T22861] IPVS: set_ctl: invalid protocol: 108 172.30.0.3:20003 [ 494.985460][T22862] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 495.054533][T22866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4847'. [ 495.094341][T22866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4847'. [ 495.115531][T22873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4849'. [ 495.279516][T22878] vlan2: entered allmulticast mode [ 495.311888][T22878] bond0: entered allmulticast mode [ 495.415916][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 495.848302][T22919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4865'. [ 495.910288][T22927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4868'. [ 495.914948][T22924] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 495.929438][T22927] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4868'. [ 495.944531][T22927] bridge: RTM_NEWNEIGH with invalid ether address [ 496.044059][T22924] C speed is unknown, defaulting to 1000 [ 496.388177][T22946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4873'. [ 496.455969][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 496.779525][T22958] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.4879'. [ 497.043266][T22974] netlink: 'syz.1.4884': attribute type 2 has an invalid length. [ 497.194853][T22982] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 497.253935][T22983] tipc: Enabled bearer , priority 0 [ 497.452607][T22983] syzkaller0: entered promiscuous mode [ 497.466807][T22983] syzkaller0: entered allmulticast mode [ 497.473648][T22983] tipc: Resetting bearer [ 497.505815][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 497.593240][T22987] tipc: Resetting bearer [ 498.175409][T23016] xt_CT: You must specify a L4 protocol and not use inversions on it [ 498.536138][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 499.373401][T22987] tipc: Disabling bearer [ 499.576135][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 500.192880][T23068] netlink: 'syz.2.4912': attribute type 1 has an invalid length. [ 500.247803][T23068] netlink: 'syz.2.4912': attribute type 3 has an invalid length. [ 500.266980][T23068] __nla_validate_parse: 2 callbacks suppressed [ 500.266999][T23068] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4912'. [ 500.492831][T23086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4920'. [ 500.534712][T23091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4918'. [ 500.573722][T23091] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4918'. [ 500.625958][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 500.772884][T23110] sctp: [Deprecated]: syz.5.4923 (pid 23110) Use of int in max_burst socket option deprecated. [ 500.772884][T23110] Use struct sctp_assoc_value instead [ 500.869434][T23113] netlink: 'syz.2.4926': attribute type 8 has an invalid length. [ 500.922119][T23118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 500.932423][T23122] xt_CT: You must specify a L4 protocol and not use inversions on it [ 501.071190][T23134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4930'. [ 501.223093][T23139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4931'. [ 501.483708][T23160] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4937'. [ 501.515033][T23161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4937'. [ 501.543225][T23160] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4937'. [ 501.655839][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 501.687884][T23166] macvtap1: entered promiscuous mode [ 501.693257][T23166] vlan0: entered promiscuous mode [ 501.710167][T23166] macvtap1: entered allmulticast mode [ 501.730794][T23166] vlan0: entered allmulticast mode [ 501.746225][T23169] openvswitch: netlink: IP tunnel dst address not specified [ 501.756498][T23166] veth0_vlan: entered allmulticast mode [ 501.917579][T23177] IPv6: sit1: Disabled Multicast RS [ 502.017885][T23184] C speed is unknown, defaulting to 1000 [ 502.024467][T23183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4947'. [ 502.249509][T23199] gretap0: entered promiscuous mode [ 502.277636][T23199] vlan3: entered promiscuous mode [ 502.705952][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 503.267981][T23254] netlink: 'syz.4.4963': attribute type 1 has an invalid length. [ 503.737480][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 504.223269][T23318] xt_policy: output policy not valid in PREROUTING and INPUT [ 504.519909][T23323] dvmrp1: left allmulticast mode [ 504.572430][T23331] netlink: 'syz.1.4982': attribute type 1 has an invalid length. [ 504.776118][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 505.022801][T23347] netlink: zone id is out of range [ 505.031563][T23347] netlink: zone id is out of range [ 505.037305][T23347] netlink: get zone limit has 8 unknown bytes [ 505.225997][T23353] netlink: 'syz.5.4991': attribute type 1 has an invalid length. [ 505.251217][T23353] netlink: 'syz.5.4991': attribute type 1 has an invalid length. [ 505.376453][T23352] __nla_validate_parse: 14 callbacks suppressed [ 505.376473][T23352] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4990'. [ 505.795193][T23382] bond5: entered promiscuous mode [ 505.801464][T23382] bond5: entered allmulticast mode [ 505.808305][T23382] 8021q: adding VLAN 0 to HW filter on device bond5 [ 505.815930][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 505.843823][T23390] netlink: 'syz.2.5003': attribute type 3 has an invalid length. [ 506.121399][T23404] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 506.298236][T23419] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 506.448770][T23427] netlink: 'syz.1.5015': attribute type 10 has an invalid length. [ 506.484545][T23427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5015'. [ 506.672553][T23444] netlink: 'syz.4.5020': attribute type 10 has an invalid length. [ 506.853551][T23461] nbd: must specify at least one socket [ 506.860805][T23460] nbd: must specify at least one socket [ 506.865872][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 506.922626][T23461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5025'. [ 506.948274][T23460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5025'. [ 506.976276][T23460] netlink: 'syz.3.5025': attribute type 1 has an invalid length. [ 506.993411][T23460] netlink: 'syz.3.5025': attribute type 2 has an invalid length. [ 507.013535][T23461] netlink: 'syz.3.5025': attribute type 1 has an invalid length. [ 507.025551][T23471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.040753][T23471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.066428][T23471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.090905][T23471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.138593][T23480] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5031'. [ 507.158084][T23480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5031'. [ 507.419887][T23491] veth0_macvtap: left promiscuous mode [ 507.451945][T23491] macvtap0: entered allmulticast mode [ 507.497996][T23491] macvtap0: refused to change device tx_queue_len [ 507.710595][T23510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5042'. [ 507.829121][T23510] dvmrp1: entered allmulticast mode [ 507.876342][T23524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5045'. [ 507.896102][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 507.930221][T23519] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5044'. [ 507.942440][T23524] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 508.198323][T23539] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5049'. [ 508.935814][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 508.961521][T23588] veth0: entered promiscuous mode [ 509.088613][T23587] veth0: left promiscuous mode [ 509.191390][T23597] tipc: Enabled bearer , priority 0 [ 509.219955][T23597] syzkaller0: entered promiscuous mode [ 509.231242][T23597] syzkaller0: entered allmulticast mode [ 509.280004][T23597] tipc: Resetting bearer [ 509.301666][T23596] tipc: Resetting bearer [ 509.321729][T23596] tipc: Disabling bearer [ 509.530369][T23621] xt_ecn: cannot match TCP bits for non-tcp packets [ 509.839141][T23645] xt_hashlimit: size too large, truncated to 1048576 [ 509.958354][T23648] syzkaller1: entered promiscuous mode [ 509.976028][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 509.984199][T23648] syzkaller1: entered allmulticast mode [ 510.267067][T23659] xfrm1: entered allmulticast mode [ 510.679441][T23686] : entered promiscuous mode [ 510.868711][T23698] __nla_validate_parse: 5 callbacks suppressed [ 510.868729][T23698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5096'. [ 510.905189][T23698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5096'. [ 511.025995][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 511.304886][T23726] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5106'. [ 511.306976][T23728] validate_nla: 2 callbacks suppressed [ 511.306993][T23728] netlink: 'syz.4.5105': attribute type 10 has an invalid length. [ 511.316807][T23724] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5104'. [ 511.377983][T23724] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5104'. [ 511.395571][T23733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5106'. [ 511.430378][T23724] netlink: 71 bytes leftover after parsing attributes in process `syz.5.5104'. [ 511.440172][T23735] netlink: 'syz.4.5107': attribute type 1 has an invalid length. [ 511.463777][T23724] tipc: Started in network mode [ 511.475009][T23724] tipc: Node identity aaaaaaaaaa33, cluster identity 6 [ 511.492015][T23724] tipc: Enabled bearer , priority 12 [ 511.622529][T23741] C speed is unknown, defaulting to 1000 [ 511.714369][T23750] netlink: 'syz.2.5112': attribute type 2 has an invalid length. [ 511.736652][T23750] netlink: 'syz.2.5112': attribute type 1 has an invalid length. [ 512.007785][T23759] x_tables: duplicate underflow at hook 1 [ 512.055866][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 512.431152][T23774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5121'. [ 512.480980][ T30] audit: type=1804 audit(1753548512.587:5): pid=23775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5120" name="/newroot/443/cgroup.controllers" dev="tmpfs" ino=2276 res=1 errno=0 [ 512.507918][T23774] 8021q: adding VLAN 0 to HW filter on device bond6 [ 512.516180][ T30] audit: type=1800 audit(1753548512.587:6): pid=23775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5120" name="cgroup.controllers" dev="tmpfs" ino=2276 res=0 errno=0 [ 512.619372][T23778] gretap2: entered promiscuous mode [ 512.624809][ T9121] tipc: Node number set to 10070698 [ 512.644221][T23781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5123'. [ 512.654296][T23778] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 512.689541][T23774] macvlan2: entered promiscuous mode [ 512.695033][T23774] macvlan2: entered allmulticast mode [ 512.716420][T23774] bond6: (slave macvlan2): Error -98 calling set_mac_address [ 513.032815][T23786] C speed is unknown, defaulting to 1000 [ 513.095936][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 513.449558][T23815] tipc: Enabled bearer , priority 0 [ 513.451929][T23812] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 513.582878][T23815] syzkaller0: entered promiscuous mode [ 513.588810][T23815] syzkaller0: entered allmulticast mode [ 513.595138][T23815] tipc: Resetting bearer [ 513.632278][T23814] tipc: Resetting bearer [ 513.689857][T23826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.054590][T23842] netlink: 264 bytes leftover after parsing attributes in process `syz.2.5136'. [ 514.136638][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 515.178054][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 515.476760][T23814] tipc: Disabling bearer [ 516.215925][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 516.394742][T23881] __nla_validate_parse: 1 callbacks suppressed [ 516.394761][T23881] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5152'. [ 516.799986][T23916] 8021q: VLANs not supported on ip6gre0 [ 516.915053][T23917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.988977][T23932] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5163'. [ 517.032602][T23926] netlink: 544 bytes leftover after parsing attributes in process `syz.5.5163'. [ 517.171088][T23938] openvswitch: netlink: Multiple metadata blocks provided [ 517.255816][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 517.287215][T23947] netlink: 'syz.5.5167': attribute type 4 has an invalid length. [ 517.339175][T23951] netlink: 'syz.5.5167': attribute type 4 has an invalid length. [ 517.370737][T23947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5167'. [ 517.445691][T23949] can: request_module (can-proto-3) failed. [ 517.452414][T23940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.516802][T23955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5169'. [ 518.234505][T23994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.307327][T24004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.741239][ T1035] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 518.799421][T24040] C speed is unknown, defaulting to 1000 [ 518.911481][T24046] C speed is unknown, defaulting to 1000 [ 519.063601][T24051] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5193'. [ 519.578361][T24057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5196'. [ 519.605905][T24057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5196'. [ 519.662961][T24057] erspan0: entered promiscuous mode [ 519.677211][T24057] batadv_slave_1: entered promiscuous mode [ 519.684025][T24057] batadv_slave_1: left promiscuous mode [ 519.719431][T24057] erspan0: left promiscuous mode [ 519.943835][T24070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5199'. [ 519.981772][T24070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5199'. [ 520.139012][T24072] veth0_virt_wifi: renamed from veth0_vlan [ 520.188942][T24074] tipc: Enabled bearer , priority 0 [ 520.204410][T24074] syzkaller0: entered promiscuous mode [ 520.210325][T24074] syzkaller0: entered allmulticast mode [ 520.327351][T24074] tipc: Resetting bearer [ 520.436501][T24074] tipc: Resetting bearer [ 520.514474][T24074] tipc: Disabling bearer [ 520.570092][T24098] netlink: 'syz.4.5206': attribute type 29 has an invalid length. [ 520.630883][T24102] netlink: 'syz.4.5206': attribute type 29 has an invalid length. [ 520.857565][T24114] bond7: entered promiscuous mode [ 520.862865][T24114] bond7: entered allmulticast mode [ 520.868720][T24114] 8021q: adding VLAN 0 to HW filter on device bond7 [ 520.938943][T24120] wg1: entered promiscuous mode [ 521.460644][T24148] __nla_validate_parse: 4 callbacks suppressed [ 521.461745][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5222'. [ 521.853862][T24166] macvlan2: entered promiscuous mode [ 521.867844][T24166] macvlan2: entered allmulticast mode [ 522.306721][T24194] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 522.322588][T24193] netlink: 'syz.5.5232': attribute type 1 has an invalid length. [ 522.332953][T24194] tipc: Enabling of bearer rejected, failed to enable media [ 522.340899][T24193] netlink: 784 bytes leftover after parsing attributes in process `syz.5.5232'. [ 522.560591][T24210] netlink: 'syz.4.5240': attribute type 1 has an invalid length. [ 522.576887][T24213] netlink: 'syz.4.5240': attribute type 1 has an invalid length. [ 522.602292][T24211] openvswitch: netlink: Key type 12304 is out of range max 32 [ 522.626267][T24214] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5241'. [ 522.656459][T24214] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5241'. [ 522.691968][T24215] netlink: 'syz.1.5241': attribute type 142 has an invalid length. [ 522.700461][T24214] netlink: 'syz.1.5241': attribute type 142 has an invalid length. [ 522.746786][T24218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5242'. [ 522.762186][T24218] gtp0: entered promiscuous mode [ 522.785977][T24218] gtp0: entered allmulticast mode [ 522.901802][T24229] tipc: Enabled bearer , priority 0 [ 522.961642][T24229] syzkaller0: entered promiscuous mode [ 522.975596][T24229] syzkaller0: entered allmulticast mode [ 523.021567][T24236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5248'. [ 523.069511][T24229] tipc: Resetting bearer [ 523.087179][T24227] tipc: Resetting bearer [ 523.144588][T24227] tipc: Disabling bearer [ 523.230704][T24243] xt_recent: Unsupported userspace flags (00000061) [ 523.261034][T24243] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5251'. [ 523.285374][T24246] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5252'. [ 523.303917][T24246] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5252'. [ 523.518924][T24258] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 523.581320][T24262] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.5260'. [ 523.790399][T24274] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 524.055404][T24289] netlink: 'syz.5.5269': attribute type 3 has an invalid length. [ 524.276929][T24303] set match dimension is over the limit! [ 524.332794][T24300] x_tables: duplicate underflow at hook 1 [ 524.350918][T24302] x_tables: duplicate underflow at hook 1 [ 524.763620][T24326] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20002 [ 524.924891][T24330] tipc: Resetting bearer [ 524.972526][T24336] openvswitch: netlink: Message has -1 unknown bytes. [ 525.139616][T24342] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 525.240666][T24345] tap0: tun_chr_ioctl cmd 1074025677 [ 525.250017][T24345] tap0: linktype set to 65534 [ 525.284744][T24349] tap0: tun_chr_ioctl cmd 1074025677 [ 525.292447][T24349] tap0: linktype set to 65534 [ 525.344282][T24350] tap0: tun_chr_ioctl cmd 1074025673 [ 525.743196][T24372] xt_l2tp: invalid flags combination: 4 [ 525.865997][T24379] openvswitch: netlink: Message has 4 unknown bytes. [ 526.204945][T24403] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 526.439326][T24409] C speed is unknown, defaulting to 1000 [ 526.462363][T24411] C speed is unknown, defaulting to 1000 [ 526.566030][T24424] __nla_validate_parse: 14 callbacks suppressed [ 526.566051][T24424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5312'. [ 526.649920][T24431] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5312'. [ 526.823261][T24436] ------------[ cut here ]------------ [ 526.829748][T24436] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 5 MHz (6) [ 526.880752][T24436] WARNING: CPU: 1 PID: 24436 at drivers/net/wireless/virtual/mac80211_hwsim.c:2653 mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 526.894543][T24436] Modules linked in: [ 526.898925][T24436] CPU: 1 UID: 0 PID: 24436 Comm: syz.5.5315 Not tainted 6.16.0-rc7-syzkaller-00091-geccf7a3480a0 #0 PREEMPT(full) [ 526.911177][T24436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 526.921951][T24436] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 526.928787][T24436] Code: 71 17 00 00 48 c7 c7 20 b1 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 10 69 91 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 8d 79 cd fa 90 0f 0b 90 e9 fe fe ff [ 526.928896][T24441] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5315'. [ 526.949179][T24436] RSP: 0018:ffffc90010bc6fd0 EFLAGS: 00010282 [ 526.949265][T24436] RAX: 833d6f71ded0a800 RBX: 0000000000000014 RCX: 0000000000080000 [ 526.949283][T24436] RDX: ffffc90018802000 RSI: 0000000000005043 RDI: 0000000000005044 [ 526.949298][T24436] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 526.949330][T24436] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: 0000000000000000 [ 526.949346][T24436] R13: dffffc0000000000 R14: 0000000000000006 R15: 0000000000000000 [ 526.949361][T24436] FS: 00007f1de1cd36c0(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 526.966273][ T5864] Bluetooth: hci2: command 0x0405 tx timeout [ 526.973588][T24436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.029519][T24436] CR2: 00007f1de1cb2d58 CR3: 0000000061a9c000 CR4: 00000000003526f0 [ 527.037652][T24436] Call Trace: [ 527.040987][T24436] [ 527.043973][T24436] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 527.050690][T24436] mac80211_hwsim_sta_add+0xa3/0x310 [ 527.056122][T24436] drv_sta_state+0x8c1/0x1840 [ 527.060858][T24436] sta_info_insert_rcu+0xd32/0x1940 [ 527.066161][T24436] ? sta_info_insert_rcu+0x2ce/0x1940 [ 527.071736][T24436] sta_info_insert+0x16/0xc0 [ 527.077137][T24436] rdev_add_station+0x105/0x290 [ 527.082066][T24436] nl80211_new_station+0x1723/0x1b40 [ 527.087505][T24436] ? __pfx_nl80211_new_station+0x10/0x10 [ 527.093304][T24436] ? netdev_run_todo+0xe1d/0xea0 [ 527.098586][T24436] ? nl80211_pre_doit+0x4f1/0x930 [ 527.103684][T24436] genl_family_rcv_msg_doit+0x215/0x300 [ 527.110117][T24436] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 527.116344][T24436] ? bpf_lsm_capable+0x9/0x20 [ 527.121085][T24436] ? security_capable+0x7e/0x2e0 [ 527.126225][T24436] genl_rcv_msg+0x60e/0x790 [ 527.130786][T24436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.136568][T24436] ? ref_tracker_free+0x63a/0x7d0 [ 527.141690][T24436] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 527.147165][T24436] ? __pfx_nl80211_new_station+0x10/0x10 [ 527.152865][T24436] ? __pfx_nl80211_post_doit+0x10/0x10 [ 527.158518][T24436] ? __pfx_ref_tracker_free+0x10/0x10 [ 527.163970][T24436] netlink_rcv_skb+0x205/0x470 [ 527.169501][T24436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.174669][T24436] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 527.180166][T24436] ? down_read+0x1ad/0x2e0 [ 527.184641][T24436] genl_rcv+0x28/0x40 [ 527.188930][T24436] netlink_unicast+0x75c/0x8e0 [ 527.193786][T24436] netlink_sendmsg+0x805/0xb30 [ 527.199453][T24436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.204928][T24436] ? aa_sock_msg_perm+0x94/0x160 [ 527.209983][T24436] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.215327][T24436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.220729][T24436] __sock_sendmsg+0x21c/0x270 [ 527.225478][T24436] ____sys_sendmsg+0x505/0x830 [ 527.230969][T24436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.236412][T24436] ? import_iovec+0x74/0xa0 [ 527.240977][T24436] ___sys_sendmsg+0x21f/0x2a0 [ 527.245713][T24436] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.251070][T24436] ? __fget_files+0x2a/0x420 [ 527.256654][T24436] ? __fget_files+0x3a0/0x420 [ 527.261412][T24436] __x64_sys_sendmsg+0x19b/0x260 [ 527.266467][T24436] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.272013][T24436] ? rcu_is_watching+0x15/0xb0 [ 527.276932][T24436] ? do_syscall_64+0xbe/0x3b0 [ 527.281673][T24436] do_syscall_64+0xfa/0x3b0 [ 527.286937][T24436] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.292205][T24436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.298953][T24436] ? clear_bhb_loop+0x60/0xb0 [ 527.303703][T24436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.309741][T24436] RIP: 0033:0x7f1de0d8e9a9 [ 527.314225][T24436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.334582][T24436] RSP: 002b:00007f1de1cd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.343225][T24436] RAX: ffffffffffffffda RBX: 00007f1de0fb5fa0 RCX: 00007f1de0d8e9a9 [ 527.351409][T24436] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 527.360077][T24436] RBP: 00007f1de0e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 527.368203][T24436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.376283][T24436] R13: 0000000000000000 R14: 00007f1de0fb5fa0 R15: 00007fffd330bda8 [ 527.384321][T24436] [ 527.388154][T24436] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 527.395492][T24436] CPU: 1 UID: 0 PID: 24436 Comm: syz.5.5315 Not tainted 6.16.0-rc7-syzkaller-00091-geccf7a3480a0 #0 PREEMPT(full) [ 527.407599][T24436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.417685][T24436] Call Trace: [ 527.420991][T24436] [ 527.423949][T24436] dump_stack_lvl+0x99/0x250 [ 527.428626][T24436] ? __asan_memcpy+0x40/0x70 [ 527.433235][T24436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.438452][T24436] ? __pfx__printk+0x10/0x10 [ 527.443076][T24436] panic+0x2db/0x790 [ 527.447004][T24436] ? __pfx_panic+0x10/0x10 [ 527.451463][T24436] __warn+0x31b/0x4b0 [ 527.455466][T24436] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 527.461589][T24436] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 527.467751][T24436] report_bug+0x2be/0x4f0 [ 527.472144][T24436] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 527.478242][T24436] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 527.484333][T24436] ? mac80211_hwsim_sta_rc_update+0x6f7/0x860 [ 527.490419][T24436] handle_bug+0x84/0x160 [ 527.494704][T24436] exc_invalid_op+0x1a/0x50 [ 527.499226][T24436] asm_exc_invalid_op+0x1a/0x20 [ 527.504098][T24436] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 527.510819][T24436] Code: 71 17 00 00 48 c7 c7 20 b1 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 10 69 91 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 8d 79 cd fa 90 0f 0b 90 e9 fe fe ff [ 527.530447][T24436] RSP: 0018:ffffc90010bc6fd0 EFLAGS: 00010282 [ 527.536551][T24436] RAX: 833d6f71ded0a800 RBX: 0000000000000014 RCX: 0000000000080000 [ 527.544586][T24436] RDX: ffffc90018802000 RSI: 0000000000005043 RDI: 0000000000005044 [ 527.552591][T24436] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 527.560673][T24436] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: 0000000000000000 [ 527.568760][T24436] R13: dffffc0000000000 R14: 0000000000000006 R15: 0000000000000000 [ 527.576767][T24436] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 527.582777][T24436] mac80211_hwsim_sta_add+0xa3/0x310 [ 527.588170][T24436] drv_sta_state+0x8c1/0x1840 [ 527.592866][T24436] sta_info_insert_rcu+0xd32/0x1940 [ 527.598107][T24436] ? sta_info_insert_rcu+0x2ce/0x1940 [ 527.603507][T24436] sta_info_insert+0x16/0xc0 [ 527.608115][T24436] rdev_add_station+0x105/0x290 [ 527.613009][T24436] nl80211_new_station+0x1723/0x1b40 [ 527.618321][T24436] ? __pfx_nl80211_new_station+0x10/0x10 [ 527.623970][T24436] ? netdev_run_todo+0xe1d/0xea0 [ 527.628944][T24436] ? nl80211_pre_doit+0x4f1/0x930 [ 527.633986][T24436] genl_family_rcv_msg_doit+0x215/0x300 [ 527.639553][T24436] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 527.645652][T24436] ? bpf_lsm_capable+0x9/0x20 [ 527.650343][T24436] ? security_capable+0x7e/0x2e0 [ 527.655297][T24436] genl_rcv_msg+0x60e/0x790 [ 527.659833][T24436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.664866][T24436] ? ref_tracker_free+0x63a/0x7d0 [ 527.669904][T24436] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 527.675284][T24436] ? __pfx_nl80211_new_station+0x10/0x10 [ 527.680927][T24436] ? __pfx_nl80211_post_doit+0x10/0x10 [ 527.686398][T24436] ? __pfx_ref_tracker_free+0x10/0x10 [ 527.691795][T24436] netlink_rcv_skb+0x205/0x470 [ 527.696599][T24436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.701647][T24436] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 527.706967][T24436] ? down_read+0x1ad/0x2e0 [ 527.711404][T24436] genl_rcv+0x28/0x40 [ 527.715401][T24436] netlink_unicast+0x75c/0x8e0 [ 527.720201][T24436] netlink_sendmsg+0x805/0xb30 [ 527.724995][T24436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.730304][T24436] ? aa_sock_msg_perm+0x94/0x160 [ 527.735346][T24436] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.740654][T24436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.745962][T24436] __sock_sendmsg+0x21c/0x270 [ 527.750743][T24436] ____sys_sendmsg+0x505/0x830 [ 527.755532][T24436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.760943][T24436] ? import_iovec+0x74/0xa0 [ 527.765470][T24436] ___sys_sendmsg+0x21f/0x2a0 [ 527.770163][T24436] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.775417][T24436] ? __fget_files+0x2a/0x420 [ 527.780015][T24436] ? __fget_files+0x3a0/0x420 [ 527.784708][T24436] __x64_sys_sendmsg+0x19b/0x260 [ 527.789669][T24436] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.795158][T24436] ? rcu_is_watching+0x15/0xb0 [ 527.799940][T24436] ? do_syscall_64+0xbe/0x3b0 [ 527.804638][T24436] do_syscall_64+0xfa/0x3b0 [ 527.809150][T24436] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.814357][T24436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.820433][T24436] ? clear_bhb_loop+0x60/0xb0 [ 527.825124][T24436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.831112][T24436] RIP: 0033:0x7f1de0d8e9a9 [ 527.835540][T24436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.855159][T24436] RSP: 002b:00007f1de1cd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.863678][T24436] RAX: ffffffffffffffda RBX: 00007f1de0fb5fa0 RCX: 00007f1de0d8e9a9 [ 527.871668][T24436] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 527.879650][T24436] RBP: 00007f1de0e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 527.887635][T24436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.895611][T24436] R13: 0000000000000000 R14: 00007f1de0fb5fa0 R15: 00007fffd330bda8 [ 527.903609][T24436] [ 527.906994][T24436] Kernel Offset: disabled [ 527.911331][T24436] Rebooting in 86400 seconds..