last executing test programs: 7m35.608540082s ago: executing program 3 (id=1261): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x9}, {0xffff, 0x6}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7ff, 0x8, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x40000041, 0x0) (async) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x40000041, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 7m35.477044646s ago: executing program 3 (id=1264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 7m35.453119643s ago: executing program 4 (id=1266): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) unshare(0x6040000) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$netlink(0x10, 0x3, 0x14) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) sendmsg$netlink(r2, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="100000000010", @ANYRESDEC=r0], 0x10}], 0x1}, 0x0) 7m35.353795825s ago: executing program 3 (id=1269): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x80, 0xd, 0x5, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7800, 0x8020, 0x0, 0x400000}}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x7fdffffc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000015000100faffffff0000002002180000", @ANYRES32=r2, @ANYBLOB="14000300766574683000000058a6000000000000"], 0x2c}}, 0x4000850) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x8, &(0x7f00000000c0)="bd", 0x1) getsockopt$inet_opts(r4, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x32) r5 = socket$kcm(0x10, 0x2, 0x10) write(r5, &(0x7f0000001180)="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", 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipmr_newroute={0x2c, 0x18, 0x1, 0x70bd2d, 0x25dfdbff, {0x80, 0x14, 0x20, 0x7, 0xfe, 0x1, 0xfe, 0x6, 0x100}, [@RTA_MARK={0x8, 0x10, 0xb5}, @RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x2c}}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000009d0e000000000000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r9}, [@IFA_FLAGS={0x8, 0x8, 0x411}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000780)={0x0, 0xfffffffffffffff0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r12 = socket$inet(0x2, 0x80005, 0x4) accept$inet(r12, 0x0, &(0x7f00000002c0)) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000000b0102000000000100000003000000080002400000000008000340000000010b0001006d616e676c65"], 0x30}}, 0x20004084) 7m35.201129003s ago: executing program 0 (id=1271): r0 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[], 0x0) sendto$packet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0xda, 0x6, @remote}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c02870be9eda70eb00", @ANYRES16=r4, @ANYBLOB="000127bd7000fcdbdf250f000000340009800800020008000000080001000000010008000100050000000800010000000100080002000800000008000100f909000054000680080001000b0000004500040067636d28616573290000000000000000000000000000000000000000000000001d000000b88f5002cb3876324ce15861a1582b5378ba435482b7422c0c07cc00f6000000240007800c00030008000000000000000c000400050000000000000008000100ffff0000"], 0xc0}}, 0x4040000) socket$packet(0x11, 0x1, 0x300) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00'}) (async) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[], 0x0) (async) sendto$packet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0xda, 0x6, @remote}, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) (async) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c02870be9eda70eb00", @ANYRES16=r4, @ANYBLOB="000127bd7000fcdbdf250f000000340009800800020008000000080001000000010008000100050000000800010000000100080002000800000008000100f909000054000680080001000b0000004500040067636d28616573290000000000000000000000000000000000000000000000001d000000b88f5002cb3876324ce15861a1582b5378ba435482b7422c0c07cc00f6000000240007800c00030008000000000000000c000400050000000000000008000100ffff0000"], 0xc0}}, 0x4040000) (async) 7m35.104792986s ago: executing program 0 (id=1272): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r5, 0x20, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 7m35.044742049s ago: executing program 2 (id=1273): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x20, 0x72, 0x333, 0x6, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}}, 0x20000050) getsockname$ax25(r3, &(0x7f0000000000)={{0x3, @null}, [@netrom, @rose, @rose, @null, @rose, @null, @netrom, @rose]}, &(0x7f0000000080)=0x48) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001a00)={0x30, 0x0, 0x802d21512708ad7b, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdb}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x600c0}, 0x4040034) 7m34.945084938s ago: executing program 4 (id=1274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001d40)={'bridge0\x00', &(0x7f0000000d00)=@ethtool_dump={0x40, 0x1, 0x9}}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x1, 0x0, 0x6, "feff31d1ee602ec4802a04e87bdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120c8be6d7f81cd81e8275000386e7d95f0669b744a5414779d0", 0x1b}, 0x60) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7m34.943694265s ago: executing program 2 (id=1275): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x4008010) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000011}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) (rerun: 64) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7d, &(0x7f00000000c0)=@assoc_value={r4}, 0x8) 7m34.730954688s ago: executing program 0 (id=1277): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x21}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x80000) recvfrom$inet(r4, &(0x7f0000000780)=""/58, 0x3a, 0x21, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x140e, 0x200, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8041) 7m34.660971884s ago: executing program 2 (id=1278): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="09583ade49d9", 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x4000000, {0x4, @local, 'bridge_slave_1\x00'}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x6, 0x0}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000038000103"], 0x14}}, 0x0) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000000340)={{r2}, 0x5, &(0x7f0000000280)=[0x8000, 0x3, 0xffffffffffffffff, 0xb, 0x4], 0x6, 0x8}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=r4, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xf}, {0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffd}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 7m34.659616937s ago: executing program 4 (id=1279): r0 = socket$inet6(0xa, 0x802, 0x88) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xc, 0x6, 0x3, 0xb, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x10, 0x30}, @sadb_lifetime={0x4, 0x4, 0xffff42bc, 0x3, 0xfff, 0x3}]}, 0x58}}, 0x40040c4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000003c0)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @mcast2}, 0x1c) 7m34.506918903s ago: executing program 0 (id=1281): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m34.506266942s ago: executing program 2 (id=1282): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x42, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b150c000000002e000000000000", @ANYRES32=0x0, @ANYBLOB="c1900000a1540000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x24008810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000030900010073797a31000000002400048020000180070001006374000014000280080002400000000108000140000000090900020073797a32000000001400000011", @ANYRES8], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0xfc6, &(0x7f00000022c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c890f902c00fe800000000000000000000000000024ff0200000000000000000000000000018400"], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 7m34.482061355s ago: executing program 4 (id=1283): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000ed4bc61c96b1eb53abd8eef2c198f59c4e29d90538457a5f426b4760285ed72a9fd797440aed3f69051460ab4d09c908808786a4db93548731c625e0cbd74085285fe9a1e117f060f3064c9307093fff33ef05da7fae813254cfe166cd68bae1bc0ccd40c81283136f9bec1405b6b3f58f3eabfb1d426b7bebbc7fdd8a07d9841b515161cae48fadb3bedc0b59eaa2323c99", @ANYRES32=0x1, @ANYBLOB="0000be2cdd460000010000000800ef39e56a0000", @ANYRES16, @ANYRES32, @ANYRESOCT], 0x48) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100001700010300000000fbdbdf2501"], 0x114}], 0x1}, 0x840) (async) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100001700010300000000fbdbdf2501"], 0x114}], 0x1}, 0x840) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2d, 0x4e21, @broadcast}}, 0x24) (async) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2d, 0x4e21, @broadcast}}, 0x24) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, 0x0, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000080)="26e6a2", 0x3, 0x4, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r6) (async) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r6) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r6) sendmsg$NFC_CMD_GET_SE(r6, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r9, 0x200, 0x70b923, 0x25dfdbfb, {}, [""]}, 0xe}, 0x1, 0x0, 0x0, 0x400c080}, 0x24000040) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3800000012140100000000000000000008004f0000000000080001000000000008004b00130080000800150000000000080003"], 0x38}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3800000012140100000000000000000008004f0000000000080001000000000008004b00130080000800150000000000080003"], 0x38}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)={0x40, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) 7m34.33754055s ago: executing program 3 (id=1284): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd}, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xe, [0xb8, 0xe6, 0x9, 0x9, 0x9, 0x3]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @broadcast}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x2010, r1, 0x2ada0000) 7m34.285006131s ago: executing program 0 (id=1286): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0xfffe, @local, 'batadv_slave_1\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x18, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb75"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x0, @broadcast, 'vxcan1\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7m34.28219266s ago: executing program 4 (id=1287): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0x88b5}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x2f, 0x0, @private=0x1fe1, @local}, {0xa000, 0x86dd, 0x8}}}}}}, 0x2e) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {0x0, 0x401}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x5) 7m34.177331044s ago: executing program 2 (id=1288): syz_emit_ethernet(0x21, &(0x7f0000001a40)={@local, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "e3", "dc094a", 0x8035, "81b5be3181fd3b87d0a0a7"}}}}}, 0x0) (async, rerun: 64) r0 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x25dfdbfc, {}, [@typed={0x32, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 7m31.794944459s ago: executing program 3 (id=1289): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f00000000c0), 0x4) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = socket(0x15, 0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x60, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040411}, 0x4040015) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000600)) getpeername(r6, &(0x7f0000000100)=@in={0x2, 0x0, @initdev}, &(0x7f0000000000)=0x80) 7m31.794310168s ago: executing program 2 (id=1290): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x7, 0x5}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r1, 0x80089000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9fe0307681f5c8c989a14f088a8657988a8", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}]}, 0x70}}, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x110, r1, 0xffffd000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r1}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1, r4}) 7m31.793447998s ago: executing program 4 (id=1291): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001900010000000000000000001d0109002900838025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3"], 0x90}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) bind$ax25(r0, &(0x7f0000000380)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 7m31.793076367s ago: executing program 3 (id=1292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$inet(0xa, 0x801, 0x84) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f00000000c0)=0x6, 0x4) (async) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 32) listen(r2, 0x8) (async, rerun: 32) accept4(r2, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000002c0)=@framed={{}, [@generic={0x40}]}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd0, &(0x7f0000000340)=""/208}, 0x94) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0) 7m31.792297425s ago: executing program 32 (id=1291): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001900010000000000000000001d0109002900838025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3"], 0x90}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) bind$ax25(r0, &(0x7f0000000380)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 7m31.79204748s ago: executing program 0 (id=1294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0x280) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000fdbccf137789dd5e3df5fc6047a353000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x400d0) 7m31.791335682s ago: executing program 33 (id=1294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0x280) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000fdbccf137789dd5e3df5fc6047a353000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x400d0) 7m31.790341839s ago: executing program 34 (id=1290): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x7, 0x5}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r1, 0x80089000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9fe0307681f5c8c989a14f088a8657988a8", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}]}, 0x70}}, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x110, r1, 0xffffd000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r1}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1, r4}) 7m31.79023786s ago: executing program 35 (id=1292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$inet(0xa, 0x801, 0x84) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f00000000c0)=0x6, 0x4) (async) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 32) listen(r2, 0x8) (async, rerun: 32) accept4(r2, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000002c0)=@framed={{}, [@generic={0x40}]}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd0, &(0x7f0000000340)=""/208}, 0x94) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0) 4.780581915s ago: executing program 5 (id=6087): syz_emit_ethernet(0x46, &(0x7f0000000f00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x15, 0xd}}}}}}, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={@loopback, @private=0xa010102, 0xc, 0x4}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0xbe}, 0x14) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r6, 0x1}, 0x14}}, 0x0) connect$phonet_pipe(r1, &(0x7f0000002200), 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0xf6, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x14, r9, 0x926fdb2c68a18847, 0x70bd2d, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x24048001}, 0x44040) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="100018bd7000ffdbdf25052cb43a23435a5d009f005c6c010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8085) 4.693872885s ago: executing program 1 (id=6089): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000"], 0xdc}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48) 4.485224515s ago: executing program 1 (id=6090): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x94) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000000c0)=0x100, 0x4) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)="290000001e00190f25003fffffffda060200000000e80001dd000804f4ff0800ea11c21d0005000000", 0x29}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.484702059s ago: executing program 5 (id=6091): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x45, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, '\x00\x00eX\x00\x00\x00'}}}}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r6], 0x38}}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbb0500000000000000aaaa860700f4adf700182c00fe800000000000000000000000000000ff02008b290000000000000000c29b000000000000007800000000d3ba2ab6ada839e7376a5b10ca3fb3c38ce2ca9194865e0a0f93f556a8ea171318cc19020c28d1e173843851a2789ae866ae4953cb2daa3e01c2b7e689c700c6446884a51c7ec0589c2942ba54f9ef5a30dc2b8664375d1880e653a2958c4674f8aab67c223f6a20f188943685d3d7eeb22081adbfd6d23a0451ed79eb8b9398ad5694dcad6f1c4f8f059d5b7fd19e75657cf3f1cf95d879de7f84fa8444d70b8cbb006fa569"], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) writev(r5, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800048004000500080000003e"], 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.504972326s ago: executing program 8 (id=6098): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x80087601, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'U'}]}], {0x14}}, 0x84}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x800, 0x0, 0x1, 0x1, 0x7}, 0x20) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, 0x0, &(0x7f0000000280)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x3c71, 0x2, 0x3, 0x0, 0x0, 0x7}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x7, 0x0, 0x1, 0x4, 0x6, 0x2}, &(0x7f0000000040)=0x20) 3.335113019s ago: executing program 6 (id=6100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x80, 0xd, 0x5, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7800, 0x8020, 0x14853, 0x400000}}) (async) r1 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1c12bb52ea6c767a}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 3.113076386s ago: executing program 7 (id=6104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x856}]}}}]}, 0x40}}, 0x0) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000480)={0x1, 0x0, 0x1000, 0x10, &(0x7f00000002c0)="bae0c3137e0a9b75e8e87d9a52132812", 0x66, 0x0, &(0x7f0000000400)="3ff86aa8606b54809fa31ce144daabba03ce935bf97ee84aea56bc75ac109e1793d400f13caa99698ef122b65b9ff92e67938b971bd8f70f9fd8f0dc20bad28d61ed6f3f08e3f998267033bedebb0ffd06d2ca7d2347ea2cceca4bf1a5e745099875cd87cd58"}) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000060000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000090a01040000de00000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021280011800a0001006d61746368000000180002800800024000400000f9ffffff71756f7461000000140000001000010000000000000000000000000a"], 0xac}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x200800, 0x0) syz_emit_ethernet(0x20, &(0x7f0000002480)={@random="2b893c1caa3e", @random="caf66222e6aa", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) (async, rerun: 32) write$tun(r4, &(0x7f0000000600)={@val={0x0, 0x6004}, @val={0x2, 0x84, 0xfffd, 0x7, 0x1}, @eth={@empty, @remote, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x7, 0x0, 0x3}}, {@llc={0x4, {@llc={0xbd, 0x86, "c6", "19e46c8858f1def3172f0b04023bd33162dc4d8b67ec6124cc733fa4450d1d083ed962880735f6618c0db839e2bc91c45153d4abb653dcb8e1203d959315c5b800121fd17976d64e9b608bab23ccc988ee593dcb9f08d4d8b3c3270981c380c3eb551bae4d9e71"}}}}}}, 0x8e) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x88, r2, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x5}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000280), 0x4) (async) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0)) accept4(r6, &(0x7f0000000500)=@x25, &(0x7f0000000580)=0x80, 0x80800) 1.420390645s ago: executing program 1 (id=6105): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x735a, 0x101, 0xe, 0x7, 0x3, 0x9, 0x4, 0x7fff}, 0x20) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x118c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061122c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) 1.418381395s ago: executing program 8 (id=6106): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x25dfdbfe}, 0x14}}, 0xc040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) 1.321193246s ago: executing program 6 (id=6107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x16, 0x0, &(0x7f00000001c0)) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000300)={r7, 0x4, 0xffff, 0x5, 0x5, 0x1041, 0x3, 0x4, {r7, @in={{0x2, 0x4e20, @empty}}, 0x9, 0x9, 0xe, 0x8, 0x6}}, &(0x7f00000001c0)=0xb0) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x20, &(0x7f0000000180), 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003000739f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.319364529s ago: executing program 5 (id=6108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x3fe, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0x46000040, 0x4000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x600) r3 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @loopback}, &(0x7f0000000280)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x50) ioctl(r7, 0x8b0f, &(0x7f0000000040)) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.319033286s ago: executing program 7 (id=6109): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x5, 0x808, 0x9db) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv4_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0x2, 0x10}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netdevsim0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7800000010000100"/20, @ANYRES32=r7, @ANYBLOB="000000000000000058001a80100002800c00f8ffdfcb34362b85fc4313f000000000000008001700ffff00000800100000000000080010001000000008000100ff010000080016006a00000004001c00100002800c00018008001d0000000000"], 0x78}, 0x1, 0x2, 0x0, 0x84}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000030400000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="604b3ec257067c0bf21cdb90a9bff22a2d0ab844ed177b1ab0d843d8798cf6a9db0e62a6b46f239709ee2efc5d13c374486583d9cbf8e45125526bb2f540117046343632d7ade01ba7488830186ced70cbfd5c5b4524654cd616452e3dc0f3457185ad35572b6a051c9d911bde6448291927f8ae5096347436ed85cc30a1dc4d7d9676c7bcd892b348b1675de5b34f4e2757db22772b0592b37cc3b36c3cc493d39cc6d231b84e499faea82642391a567a75ad2c3afb90d869c2ddc58b2ad7c021208a"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000030400000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="604b3ec257067c0bf21cdb90a9bff22a2d0ab844ed177b1ab0d843d8798cf6a9db0e62a6b46f239709ee2efc5d13c374486583d9cbf8e45125526bb2f540117046343632d7ade01ba7488830186ced70cbfd5c5b4524654cd616452e3dc0f3457185ad35572b6a051c9d911bde6448291927f8ae5096347436ed85cc30a1dc4d7d9676c7bcd892b348b1675de5b34f4e2757db22772b0592b37cc3b36c3cc493d39cc6d231b84e499faea82642391a567a75ad2c3afb90d869c2ddc58b2ad7c021208a"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@local, @in6=@local, 0x4e22, 0x3, 0x4e21, 0x5, 0xa, 0x0, 0x80, 0x6c, r7, 0xffffffffffffffff}, {0x9, 0x6, 0x7, 0x6, 0x5, 0x6, 0x90bf}, {0x8000000000000000, 0x7, 0x32, 0x436}, 0x7, 0x6e6bb3, 0x1, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d3, 0x8f}, 0x2, @in=@remote, 0x3502, 0x4, 0x3, 0xf, 0x92, 0x4, 0x5}}, 0xe8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2309000000000000000001000000050007000000000008000900000000000600020001e0000008000a0000000000080017"], 0x3c}}, 0x0) 1.225230053s ago: executing program 8 (id=6110): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@dellinkprop={0x58, 0x6d, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x48c0d, 0x50480}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x61d}, @IFLA_EXT_MASK={0x8, 0x1d, 0x2}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}, @IFLA_EVENT={0x8, 0x2c, 0x5}, @IFLA_IFALIAS={0x14, 0x14, 'xfrm0\x00'}, @IFLA_IFALIASn={0x4}]}, 0x58}}, 0x0) 1.125595292s ago: executing program 6 (id=6111): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xffffffff) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x4, 0x2, 0x2}, &(0x7f0000000040)=0x10) socket(0x10, 0xa, 0xb845) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080001"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900090000040000086bb02f23"], 0x24}}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac141400000000000000000003000600000000000a"], 0x50}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.045026871s ago: executing program 1 (id=6112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x24, 0x0, &(0x7f0000000180)) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050900000000000000797a30000000002c00010000000000000000050000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000500000008000b4000000000300004802c000180090001007866726d000000001c0002800500030000000000080002400000000308000140000000010900010073797a3000000000140000001100010000000000000000000000000a0000000000"], 0xcc}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x154, r4, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2a}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x154}}, 0x20000000) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x10, 0x400, 0x4, @rand_addr=' \x01\x00', @loopback, 0x64e91e306b4fab98, 0x700, 0xd, 0x10000}}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0xc) accept(r6, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0801, 0x0) (async) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r7], 0x38}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x64, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0xfffffffffffffd50, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf250100000014000200776731000000000000000000000000007400088070000080"], 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) 1.042579752s ago: executing program 7 (id=6113): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) listen(r0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) close(r3) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_netfilter(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x2230, 0x14, 0x2, 0x101, 0x70bd27, 0x25dfdbfb, {}, [@nested={0x2a, 0x96, 0x0, 0x1, [@generic="de0fca3e36304e3fdbb0aa1444b1fbd5547c8c2cb114881d3ee7", @typed={0x8, 0x17, 0x0, 0x0, @fd=r2}, @nested={0x4, 0xc5}]}, @typed={0x8, 0x58, 0x0, 0x0, @pid}, @nested={0x1030, 0x9f, 0x0, 0x1, [@typed={0x14, 0x10, 0x0, 0x0, @str=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x71, 0x0, 0x0, @u32=0x10000}, @typed={0x4, 0x12b}, @generic="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", @nested={0x4, 0x2}, @typed={0x8, 0xe, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @nested={0x11b5, 0xd3, 0x0, 0x1, [@typed={0x8, 0xd4, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x3d}, @generic="a4b084e6a731f493e870b322c1f3660531404ec904d3297db9bcbff5b0de59d1f163e7b7b58ba2610de397bf0cbc5aa899954e6f21aefab126a64bee03ab0e1305ea0169f5a3d50babe8f13d3909ceed41587944fd279edb9e208566f3a2f070e229362b40e146b85072400c4485fed4565533e4a9db0edfe97177cf01d24fd5cde8531e9f8f653f69f0d96d514220a173bfb5ce9913074baffd507bdeab116e0bf933ea0fd78b804721e6bcdb55530d6cd983613798bae1408d84133f6f0e0ab712b5200e3b32c405ff6c18a487fe80062a5e4dc4f19b4b9fb0d85b60362fc05d9d47085bf356c4c7fff359fa94be1261a6c64e753a70461c8fc4a76e47960ab03d44d87d0ea8b840f5687f08404c6c87a3a218a6d6fbe394a79dd99b17cb3af0f2d41715f963e6fe1049a42a9c7fb38a1114050fbbedbc6feec4208145c3f1dc3012a92e3dc5e70e7c32c72423c4438cac2246a94efbc22447923a5d4e64c3de032111e301e6fd22ae8d0238ebb3030d3687f17f38381ff0f94705396f415d41d319f19750682b04c9b21b19c1cc3eb2b4f6194643dcb1bedb143ff5c26d27f22f96f3c4c7912de5f73ca9a3bc867e7354fc015da2588deea0607d06b11ebab60ac141694cd31f562ef434d5c8eff7ecc129589fc87bfa726abbca08a52e0781a0ce962e4b03778292485ff403ea9302736bb3a96e89d4360b4fe8d112e38dbc466dbacceab9584562d7136d81bbb6c336ad619c0aed7f08dc0aaf79a1f46e8cb76104e79f3561d99e1f3294f1bfaed7d779154717d3ee85c17a3ac37fd4f1c4e6cb1287ebcae8326923c10acd2718959ad38d9d8792346e6b2820f09b8669f41193ca779de2e333d869542ec35395042dcc25e40c7fa0bae1a43ee191bca566f5ed3d7c219a460288b854c29317daf390433aa091018fd24fb8b6c627d5d128b31eebbd1b4f889aaf184e49c3b0af7f6b73931a63a3304e6a5d304c942c68a8aa803de3a35ba9ff2fada50305857510e9ee6b1c782cbc90cdfdf506249ebddf40dfc8e80407e5ea4bd80d0c2947a1c7376f68aa3597b274d20d260a0571f58d355e7b8b34eed0f51cc72a3e241f4f6640a7a55387ccf9e6ca7517827b8c72c87857bc9dcecff37e75f4ae377721fa98eb0426f583ead411b1f98068c3b21c4b1fe0d4089ddb9aee791a74ce829135978a34414cf731e678f7109209a0d7d756da73519c453fd32ad6ea30603d070e0d962939a17381768bd0b1056cfafe4387d844e11f48f37db00485cfdb614547b67bfafcf96ade0a34c6a8399a8584f40b053971786679100c0417dcd98b6b617e4bfac73ab8de74cf2dea759cad878fb2a17c57950161c5dfdc6d951b00973a9e309bff761bc24ba24735e6144462c74929db85bb85a4308643e917b7d2625072d65a250cc5b6c5c0ff8bcdd07a5039d05d2a33303c637daab17cb1e29184e5498a37bb1ee4c2dd715699cddb5cded65a288111f227a62328daff4ae072737834f1d0f68419c8415d3a3ffd53657fa39a67823372f9fb6d675911ee835357b490b7d38a43917211a63d61ec86b1104e7c0545012c06507748500b7e13c4569a0e033c105c8ac447b0348663d254ab93c56f9a11d9d6d45a14aa0245f62ca8d61b00ed8cf9f337793f2b3e494eaf52092d818d82e7c35211735888b207c19e1a8fdf93d7f90a9ae77b3424087760f55f72111571651c9c114c39811939ef438bbc7ec7616314a21ba7831a4e26d8a5fd2f8b6d18211062c5d35b9cf77a2c1f55588d647b17bd1476803ffab03f8ca48b0490c217415c4d5175d94dd4918029d0a544f14597d36cb1e807e2c9450ff92c8fc9c71a5f798dc10c1ffb9dd261d2eec049939e891ee337f026d0066f7e2f53b913bab9fb8bffb38d35474b269b0646da09d02d680aac703f75801cf3f548e5e9ee335ebf3162682e6d679f10a601778e24ab9888f8003642be678df99f371e1366bfd9df2b7d43bda4e3bddbf44e447eca959095c4aae50b0e2a6b09a848f4f6fcd5f62ad58e25f25a9f0ccce0e5ea9462c2da7a19aacb0884ea9152df99f4f40230301c38dec4bd666585457f6f02f69c4ab6e5e69227e2fe3eee133832cb640160e7aa5792521f2c53f6af6c1f5b782a886782001a968c7c95367dfe202a5b92ffdce290cd207b981cd43cabed22d7fe58fcd01fd01c7e5f4ee9821810db71229b8647f8994b8d569dfdc9dc49985d2bc93e3621c42f09420610e135291b189cce4f242d4f6a7ada3d87d8d2cea12a1339c67eb251c0b2180318c676d5d7a4053d0069cc885621bc2663ad77da916f21aa5142810fd4bec83b43fcef7d5b9f10359dbf2f1b2811410847006d186b10e45d44f3a86ddb7efca137225a97e9ab01fd088a9031113f1cfcaebe615dd9abc98619889ce73463544626bedc2f61f0d963eee0ca90f31b1302fe55a87aa8f830128cbae1808ef943ca37d9f012347291ae248db941a7d1e444341abb0e4ecc528d59dae1d0d17e5e76a1a502764ddd06ac702ad5118eef142e9cf71c19af09ee69f8e77c774955a0a09334320b6034ed70bd196c311d55007887d8c5a4cc5a3984ff9ae91440cfa8a5c3d56ed97924ca44ea4e98e7988ba53a803d008a81a97d18e50c38a4d0aa748b7d137d5dd231ec2b7b23cb03c799ffec9499ef467a1c954ad5d4d67e705d03856b72a6a46a5b373b09cad0431cf3ba650ea5cfde3ea433afbfbca3660c4ee14778c52fc0d17eca9d58d0f25bfa11c648c8d229a172f37c2e661236007186bf38f0a3064646c7df28464aea0515a2cbf457cdc053be859b72ece7e101d2b182a1fc9d8dc78d0eb80af2b837253d33dc01a52c283491ff082244e8379f4cb6fc504ddd63af054aa148b72f6807c32c1d6a42828bec0aafa0e12689d5a01a12daa6807c91100eb23a1e8530c64135b0ba25e513a43501fd7fa455a4ab93131b94ee8cc00b9008cdbb202e562d3c346c229f5530f5ca52a3ac32c7eb682f731520dbb77e5d2be613a85afa76da591f68c648c72801a035d18ae9fb9af4e78226e7e96faca9cbb79db71b91cd6d220bc7fb014e47bc3f01952475722b8f004c5ef9cb4643ceeaf7da7383d3ed0b0ee0e68c69204a94d1eae5b8911b0b22b20d1314de0e3ea7014577317d97339b8c222dad23e6687d98b56872306bc75abec3dddd0ef1474b1bf3cfbb39321b02091214bacaa269b5f8d7726bfcfd9a2613a33ad5132300c411e092fd10acd51949de69b2aa0fae3a3c5bced1bbd054169d6a177344291fb2ecdde4138fc2f119c8bb2e15d8fc29f639093ec5c7d967b1553a797af2fed525d9a792aca3310fe55365f85fc90947ce595d5a5b15fa0f27ffba92e3c44557a643a859501c5c9cfdf71f8743bdd3d4980d34d47ca04176ed23afbf085a7df93362d42241480268cb113d829f6fc134517525f021b7b67ae2adf1b46cbfd7bd213663ccda0fc30a12288bf1987a0847ce509474f2598f0c91dbb85572097d9ea86703d71133b5e60ee94b0dffa877fd84221ddac106516db10cea26b318958d0ce7f3eda47bfb3b0b76b27e43ecb3c02589c0277e7af5d5810f58f45b328fd12a8777a20fc4cdf0f5212469829de54da136055cc06323e2d68bd09ea2a34d16f581043af71706bb592b3f350ccb12e97370717956ff76a3f2ec7a3ed0117589f08448c149b77f118cee89167a201f2609b6d8afb5f18b68ae32096148ada66cf7d3a3ffa313446316ea2bd7fd2647d044b0f3483a76a6323d1709f92dc43964e4a6c06ff302d108b723d36ae4ed6d212e346054c697ecaefbde2dd2702b2fcdc55943e0114f0de3b6161a1453c2efcc8774d910fea1fa2c3a853daccd50f96672b4633cceedcf6a66b0437e9e39327f3edd388dc00dcea9ce900f33f66e5520c83cbfd5f653d4bf8fbdd3e528026052cc0e7d186216a68b3b57d5ac49893081ab1c6434aa526701e462f5e55d7c7d24a2156c2f342acfefa20334384791dc8d4ee6ae36da5796be6ef9b97dc1880bcaafabe9766b62df607a1d091d44fd125d05663f2db2881a79ac05003408727b2b81c8f6b3be4751a6242f295e299e21e338ea49d6bf61c6a5b28d9bbc0b585ce0a853a274ba74675a0081029f1c2645f9bc219406d8fc68c0faf9461fd229ed309deee58536cc69825ef29c4e5ce3c292fbd6c70df7f7a6d20160d78c9b7973fe2722b49ef50b5e35e270a8fed9981a950f30cd2a2d5b3ef724590d8169a0259173a789e0dd1064bd8d15704bd81c3365e113007ad5c2759aba0c13afa2b8a3a696ee2de08caccdb66d817140a4ffbf81882fdb58272621b8b4c7496e2652d1fed13f90568d395ff9dc9cb868efdb1a258ba6ed7d62e911ded8ee1133e0be8f61af6bc1703d2cc547ca591f6c95571518b2a2988df1679eead72c9c4c09f7bd38e7c58ebea7a85e9c8805fa5c679844a6b2f86a05778b3747c74898acfc0febc2193d460939e3449c30832b3e5f586f5162ac8d9a8cc02fc1863fb60e6a2f10b86a2e9aeb054e9f5aad7537163147b2deb4e5af2e3db6ddf571e708176f7b0acc49d3857dfe836054040bc11f3a41e66ad2ca2258b1396f751f0e48a52420685e46027807a0d38e7c0f2e533b45a3040a3734167de3ae191ce0617f5538453e629a4267c611c2717179e7de83dad2866900d9cf3e2f9a9084cc8895c50293cc47f5623fdafa21535c3ef27316bf1fb843b3357c5f445da3c5a9201a56a2215a5803c433ad8a3192e06fe82107a236de589d6e40b7c311eb55049e3e476ef6aae22630bafba497f3d942acd9e5d6397969544bfa38110fa942fe7eea58d9e5bce7bc1e279e30477ad94afb81df3dd89c39a9c8742161d0a2b395e900edc66a231efc4b23f9fc6b20a9de8f5cfa0c7c8c151faa5b4d7320c84c60aeaa3f89ac7334a6aa996d758e5c01259a4532b5905f42b692aa45dec52812e2a0c7cd7896228ebe743fdccc19946ff622ad65cc691a2580db09500408938975554d256533d3a2f81cb94d494c31770e7db0dc39fbd8393962505fbeb79472d250747afd4ed0ad8cb578c54a8ecf73f575866e5e1c29dc77c38c6c36381977b54b74dcb6e4b12ceb3d16596fa81b31da1a6bf373d6863c6c033e0870ffcb4ded8297c4c046dc7546cb4fcd6491c859d776dee3472e7733110288e221c650a8a08c1aff38a7384ba8e5a28772700886deb7e6d933f30a478da99c8a88422552c75c2f619ecc394ca56a38b14d27186c0cb5569645dc82d5c195d914619a56f7d67adc66f2cab474dbae6803f6d1bc50515a0a11d8cd53252c11b011f8add6234abd464242a1537980fd9ce429226259950dde2725e7e8853b4b0ecc9cfcda1aafad301794dc2284531bc60f9fa36340feac6c7e6d18128888a74bf6032742a25e16951f5843c8210dbedf4fe21e0c997e946fafbbe3b9a278ae0d29ffba04ef823e1baa8fc67b6fdff0ca2d40c4b428a50887ba80bbeee86001baf90788c4fc935a6fa439b138217ed4c94fcae1714435cc06729647b0dd4e160a7f67f51695e16c3be07713756d9551dc820375228e9a13a3da1ff0ebec812445e6e51636b2a6f90d88fb8d4c0d0cc05727bc1a23943be964d2987d25d7bae622fbc3387d1d0a4bfdc48cefbea9057c907eac547498a4af60b39f6c3309bfd5e67a129f14bbcf3cb2e3f694b40f4454b0e1587387211fcb9d831adedbfc41f51efeb4cbd6f84396fba5924805e4d05e450b37bda6b9aa0ba83d9421f2422eaf68", @generic="efc4eea8ecf52be04cb9332115c1856029673ca4494bafb7867eb4b704be140a31ee394661e846de727717b88ad9439329fa112fa3e814a9ecfb4ae841ce36d34d2a7ef32eeced545de6051a4f044639ffd2794336a9a011ea7183cf3387075f544394a94603c067", @typed={0x8, 0x2b, 0x0, 0x0, @pid=r4}, @typed={0x6, 0x132, 0x0, 0x0, @str='(\x00'}, @generic="11cc12ed805e81c9b8114ac9c72787671017d2ad241875f26ca30ab3868d8b915494e82e45f20422d0ab8e5eb244fcfc1525bfaf985bd8b7dbef615d58ea1b26f272b615e5d701dc", @generic="df38237ec64f7d4e2d3c50542b806779a76b25cd37e2ad992d4081151ec67aaa73a6a68db47c3486729a074995cdf097b25e0bedb9411ef9bac4c27e0578cae3330e6e5b83742582e68bec0230067c519b2de17664c7fc176e86cf2e63adc3268427d61daed8a8424738c4372e401610f7e0729a144bd6ea719b0400dce58e5111522c89db5ee90e638eec6833f830621e15a613f8d3d7045901e7790a6ceb9ff0da0f1125ea4a26126b607810cfdcfb50fed7704593e061c87115adb87dd9e491853d53fcdb6b3cb7263297a3488dda9a94a998cb9cdc1d45436bc9524182ad89", @nested={0x4, 0x150}]}]}, 0x2230}}, 0xc0080) 1.014035674s ago: executing program 8 (id=6114): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000000)) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4014011) syz_emit_ethernet(0x20, &(0x7f0000002480)={@random="2b893c1caa3e", @random="caf66222e6aa", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) getsockopt(r0, 0x1, 0xcbe0, &(0x7f0000000040)=""/30, &(0x7f00000000c0)=0x1e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 962.830494ms ago: executing program 6 (id=6115): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x9, 0xcf}) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5324a8567e2235a8}, 0x4000084) r1 = accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom}, [@remote, @netrom, @remote, @null, @bcast, @remote, @default]}, &(0x7f0000000240)=0x48) recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/140, 0x8c}], 0x3, &(0x7f00000013c0)=""/213, 0xd5}, 0x7}], 0x1, 0x20, &(0x7f0000001500)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001540)={0x1, 0xd5, 0x8000000000000000}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001580)={r0, 0xffffffffffffffff}, 0x4) ppoll(&(0x7f00000015c0)=[{r0, 0x180}, {r1, 0x401}, {r0, 0x22d2}, {r0, 0x4020}, {r0, 0x5040}, {r1, 0x304}, {r2, 0x220}, {r0, 0x1200}, {r0, 0xc0}], 0x9, &(0x7f0000001640), &(0x7f0000001680)={[0xc21b]}, 0x8) writev(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f00000016c0)="0b5d78d76f495ee6b94acf26ef01474d4489c881b341b683817b3cd8e7043f90848c1d4d2d8902682414742da65479f1c2e17c46003c0f477502d46ac00a5492471147aaac6a15d4ff45732dc2bc7336f1faa91572320402422afba87db532abce013444b290278d9689a5d98a5d04c37de53574e921f5e9dfcfc0ff9a8d5117445f3457943209e599e98644ef7124d19a81aff04e706ab30d3d1d09c5c99716585bcf94bb1f27b0502616f0de7323e5d1fc6c5a0ab5911ac7c371c99cead13faab6b2add60b86e94553b78569053debbc29fd3e01", 0xd5}, {&(0x7f00000017c0)="6e3d7327208336ae49175038e05dd094cf632a7ebfdd6c5264f39dbe7465150bf5a40847ac532dfdd13e50a20f5b1c8d12dabc0611377b986a51d1eed8a0bc5902007f8f27b497eea26dfaf0d490332a8247ef66f835acc17528e1e458249d202919febc2727b85f09fcbe6fbb900f428bca", 0x72}, {&(0x7f0000001840)="6a3c059fef1691c6f05a6b274ce772ab502f175c3892744e1e6e79ebd60bdb6129848977c4e8fb0a054539aafeb5d6085d2b3ec1987f4d12304b42266b00057c6fc75254269e22eadf98c6792b", 0x4d}], 0x3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001bc0)={r0, 0x58, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001c80)={0xa6ed, 0x0}, 0x8) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001cc0)={0x0, 0x0, 0x18}, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d00)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0x200, '\x00', 0x0, r0, 0x4, 0x3, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x1, 0x25, &(0x7f0000001900)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}, @ldst={0x0, 0x0, 0x6, 0x8, 0x6, 0x10, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @generic={0x8, 0x1, 0x2, 0xfff, 0x21b}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xac}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000001a40)='GPL\x00', 0x1, 0xa0, &(0x7f0000001a80)=""/160, 0x41000, 0x50, '\x00', r3, @fallback=0xe, r0, 0x8, &(0x7f0000001c00)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001c40)={0x1, 0x8, 0x10001, 0x4}, 0x10, r4, 0xffffffffffffffff, 0x3, &(0x7f0000001d80)=[r5, r0, r0, r6, r2], &(0x7f0000001dc0)=[{0x1, 0x2, 0x8, 0x4}, {0x0, 0x2, 0x2, 0x3}, {0x1, 0x1, 0x9, 0x6}], 0x10, 0xf4}, 0x94) connect$bt_l2cap(r0, &(0x7f0000001ec0)={0x1f, 0x207, @any, 0x3ff}, 0xe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000021c0)={r7, 0xe0, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001f80)=[0x0], 0x0, 0x46, &(0x7f0000001fc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000002000), &(0x7f0000002040), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000002080)}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000002200)={0x5, 0x3, 0x7fffffff, 0x8}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r8, r0, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003300)={r9, &(0x7f00000022c0)="c0b9b8a69dc32ba5cf58cbf01054e87eac43720f0e734ec16cfd46f09d80fbac313fb9e2e023cb6835d721af9217292f936943e508635720", &(0x7f0000002300)=""/4096, 0x4}, 0x20) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003540)=r4, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003680)={{r9, 0xffffffffffffffff}, &(0x7f0000003600), &(0x7f0000003640)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003740)={{r0, 0xffffffffffffffff}, &(0x7f00000036c0), &(0x7f0000003700)=r0}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000003780)=@base={0x6, 0x8, 0x4, 0x5, 0x800, 0x1, 0x2, '\x00', r8, r0, 0x0, 0x2, 0x4}, 0x50) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003840)={0x6, 0x21, &(0x7f0000003340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8c99}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000003480)='syzkaller\x00', 0x9, 0x46, &(0x7f00000034c0)=""/70, 0x41000, 0x0, '\x00', r8, 0x25, r10, 0x8, &(0x7f0000003580)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000035c0)={0x4, 0xf, 0xfff, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003800)=[r11, r9, r9, r2, r2, r9, r12, r9, r13], 0x0, 0x10, 0xa}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003980)={{r0, 0xffffffffffffffff}, &(0x7f0000003900), &(0x7f0000003940)=r14}, 0x20) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000039c0)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x7, '\x00', r8, r0, 0x1, 0x5, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003d00)=@bpf_tracing={0x1a, 0x21, &(0x7f0000003a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r15}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r16}}, @jmp={0x5, 0x0, 0x8, 0xb, 0x3, 0xfffffffffffffefe, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', r3, 0x1a, r0, 0x8, &(0x7f0000003bc0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000003c00)={0x2, 0xb, 0x9, 0x1}, 0x10, 0xb2cd, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000003c40)=[{0x3, 0x3, 0x1, 0xb}, {0x1, 0x2, 0xe, 0x9}, {0x1, 0x1}, {0x1, 0x5, 0x3, 0xb}, {0x3, 0x2, 0xc, 0x2}, {0x2, 0x3, 0xe, 0xc}, {0x5, 0x5, 0x1, 0xc}, {0x4, 0x5, 0x10}, {0x5, 0x5, 0x6, 0x3}], 0x10, 0x7}, 0x94) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000003dc0)={0x0, 0x200}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000004000)={0x0, 0xf, &(0x7f0000003e00)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x5, 0x0, 0x7, 0x7, 0x7}, @map_fd={0x18, 0x2, 0x1, 0x0, r11}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000003e80)='syzkaller\x00', 0x6, 0x98, &(0x7f0000003ec0)=""/152, 0x41000, 0x24, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000003f80)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r14, 0x0, &(0x7f0000003fc0)=[r2, r0, 0x1], 0x0, 0x10, 0x9}, 0x94) 852.213692ms ago: executing program 1 (id=6116): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="00001b4000000000"], 0x10}], 0x1}, 0x80) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000e6c210a4000000000000000d0000000000b50009000000000054daca11f5ab48b1cf0078f1a732ea431e279b091bd463e7715078f00ba159f3687049bb497e132a11022083d264467ec258e89a763b6d491e260f7fdfd87782295eedfbd2888b5a25b5daec6f998d81b1cd51ff578691609f44"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0xf8, 0x120, 0x0, 0x0) 851.593318ms ago: executing program 6 (id=6117): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x20000, {0x7a}, [@IFLA_MTU={0x0, 0x4, 0x401}]}, 0x5c}}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000004c0)={'lo\x00', &(0x7f0000000480)=@ethtool_eee={0x44, 0x7, 0x2f97885b, 0xfff, 0x0, 0x8, 0x2, 0x3ff, [0x81, 0x9]}}) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000000)=0x10000, 0x4) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000a40)={'ip6gretap0\x00', &(0x7f0000000940)=@ethtool_drvinfo={0x3, "bee2aaea47f2f37205c98e7ed83c15137452f65ef12c354505905322ff0e66f0", "8e8ce08348eb581ee0d54827a7928d62751f988877012792c712f347aa543375", "1bf0bb00e384b38fa4c8fa69ac174ebfe074fa4c11f914cc26f3496f03d7394c", "202a1007630cceaa0d06ba0681d27c74354e46161bc3398978683031019947ba", "6a159546e8250dbbaf91dc2e5518d14b4193aaf63ce0e30a8b8a50787ef0a0af", "573c59e9bdd0b659d53a1cd9", 0x80000001, 0x2, 0x7, 0x0, 0x5}}) (async) write$tun(r3, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1a) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000003000128008000100736974002400028008000100", @ANYRES32=0x0, @ANYBLOB="08000300ffffffff080003007f0000010607000003000000"], 0x50}}, 0x0) (async) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f0000000100), 0x12) writev(r8, &(0x7f00000017c0)=[{&(0x7f00000002c0)="a9aa9ef3", 0x4}], 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x6f8, 0x898c, 0x80, 0x6, 0x4, 0x9c, 0xb, 0x3, 0x1, 0xed, 0xfffffff9, 0x7ff, 0x4, 0xc, 0x8, [0x7f, 0x5]}}) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(r9, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) (async) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000100)) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f00000008c0)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x68000}, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, @in={0x2, 0x4e21, @multicast2}], 0x58) r11 = socket(0x10, 0x3, 0x0) (async) r12 = socket(0x400000000010, 0x3, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000300)="68d1193b49a2c5b92679c31407376bc8e9ee673f307bb202f8bb5c83454e7b874ec0fee2d18216c0ed5ab14016c4a2453bd65837fafa02de11ba428aa7e8e185af193d54d34e14cdb1050451df81386950efb0676e3f32d0388d099312b174c5ddeef20d0640bab75ea1b2a62f73d00d29aee8865170b450dff90f6db869bb76caeefef157ea2b0da1dbee5e82f5e4e19c5baa5db7205b1e49a0fb631c43d37e20aa28c7fe885b2c99cc0fa2363ae7a8", 0xb0}, {&(0x7f0000000040)="f56a2e6dc14be90d54975b2988bc941fa31e07ac8d4a696008a98eaf0a5732ccac11337adb9674abfe806527afb3227e217f66c08b6166ab49ca6a2ee6dae89d275923d8449de51c1087530849e34f4280cfab6ea417a661bc54ae93fdb8ea6d34a3d399eee6311e0be72367c33011e47b032c3a563bc3094e3d77fcbbc8efe3", 0x80}, {&(0x7f0000000140)="a8b9733135984fd05196492650eb744946e1af20aa0f4100f66a2afb2eb0d20b6d3699dbae36fe5bfbd2bb1cdd61c95707233e187cf05bdcf6294e79", 0x3c}, {&(0x7f00000003c0)="bcbbb143572f6680e0a76579368e3f8326dbfadcfa6916e0f774b1c83e7e4cc3d4334c1932aca9be86367a522ef6432c6eca8843196caf3780f83c638ab3cc8ed8406694f1de1602fa29978f9bb70ba144f5afdafd3aee036e27d0a553b5452213c6cb13342ef4cb55ffbeaeaf23890878823b06ac649918fa33f895f4b288f2f8bfcb03176b1235b9daf647d29c7c34c65ce3c0b43c7d909dae7fa439f8db1a7e18", 0xa2}, {&(0x7f00000004c0)="d7a322fbf0880769b2fae251faedf517ce4ec57504a919a0fcc996be4ebf6178af126d2f9830ea933406cd457655cd385e8aa12eeaaa8a28f6511558c0b1621b206f6580b15e3b4337775297c593b05cf0b66e6924e5c0225c0ddd7c5900de9a9bc23ed76444e94d5bc839b87ca90bf598462b2326e23bd16d89398605edb41f8410ffc27c23cb0593519bd7a1e5511d838c2bf7f08669039664825f3e02154dad7e61ab46d52b5698ba0d49909e0747980e89d30753457822097b5694d4a8ea6bf258bfe4f2bea3450d2f4d2167a70193b0e9af369c1a580ddba96396cbdc01", 0xe0}, {&(0x7f00000006c0)="ec7953a2bebbb1104d24589713b9a14c1d61ef56c8c806aaa287a8ccce09d3d9ba266b13c4dc17e2c70b62312ae88031d10548bad316c32d5c2d9061a0164fb3ed24b8cb98c27c2f574ab0250cc27a7c9c16721987ba8e29a589133bea48e6dda977cdf9cda8c6fd84fcd757c4d8751df97e6948a977da4aeb86acc5ce68d7d9d62d54f7a49e5f3a18d294c3e8e8d8393b922c34cd578404e271f0da418de7177cb970098cbce2d37f67b40e5f2ec611f52ca61ef9b6655d090e3bc1005481e826c9aba3466560bc8a827d1b923e085b57d5954e210d3a76c9fad4f6", 0xdc}, {&(0x7f0000000200)="ef31388089d4b7a52f575071ce11004be9cc70ad303df008e1", 0x19}, {&(0x7f0000000280)="9a54aa5137202989cb109c394a74ecdae548b14701d529dddd568b4a8a51b3b94a7629bc9c75b5f18a0ed3694ba05162a506bc0d41018acbbec9", 0x3a}], 0x9, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x55e1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1a}}, @ip_ttl={{0x14}}], 0x48}, 0x8000) ioctl$sock_SIOCETHTOOL(r12, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x0, 0x0, 0x0, 0xf}}) (async) write(r11, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8073f00001d00000000000000", 0x1c) 851.229162ms ago: executing program 5 (id=6118): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e24, 0x3, 'rr\x00', 0x25, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@private=0xa010101, 0x4e20, 0x10000, 0xf8}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 781.16405ms ago: executing program 7 (id=6119): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000010500"/16, @ANYRES64=0x0, @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0100006001"], 0x48}}, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='vlan0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000000)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008847"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r3, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="89000000120081ae08060cdc016b3f087f03e3520000000000e2ffca1b1f000000000cc00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030004010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 702.790098ms ago: executing program 5 (id=6120): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) getsockopt$bt_hci(r1, 0x84, 0x14, &(0x7f0000000040)=""/4106, &(0x7f00000010c0)=0x100a) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'gre0\x00', {}, 0x4}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000001080)=0x1011, 0x4) 701.075496ms ago: executing program 1 (id=6121): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000140)=0x34fd, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000080)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000000)={&(0x7f0000001080)=""/191, 0xbf}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 195.243888ms ago: executing program 6 (id=6122): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000100000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000008000000008000000100000000000000", @ANYRES8=0x0, @ANYBLOB="feffffff00"/20, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="00000000000000000000f5cff3f9c800"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb598}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001000058009"], 0x48}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) r7 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000240), 0x4) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r9, 0x104, 0x7, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_subtree(r12, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000100)=ANY=[@ANYBLOB="2b619bbf5597"], 0x6) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a1a0000000014000000030a01010000000000000000010000007c000000020a01020000000000000000010000080900010073797a300000000024000600324b9366a56feffd49b3f17b1e059999916da13ff7a81c4b814ee2180308278f0900010073797a30000000000c00044000000000000000050900090000007a31000000000c0004400000000000000001140000001100010000000000000000000700000a"], 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x0) 144.944878ms ago: executing program 7 (id=6123): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x110, r0, 0xc5037000) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r1 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) sendto$ax25(r1, &(0x7f0000000080)="acea47d4934a4d1b570bb80e7a97e70bd2f3e56d308db60c54dc49a39fee7c94688e916836f45d82ed4576c2704e5b39f084b0668696a3519e44863d714b419cae641763a767e97b6693cefbef9508b8e1c23a43b98d790da52448494ff8054103d862081242baaecb433940f22551e10d06359b631c8c8f5e1c2a1bba093f39daa4307f609ed363173fed3a0d352aad2a4c74ad4c11da0c8d3c74c8641646450bd020953dcb162550899f93982db3328e46b919e2d50271fd64ddc42cc8268e6894ae1ee3b444cae6255f23f996f4f9261b9dbc89761151d9", 0xd9, 0x4045, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000280)={0x0, r0, 0x7, 0x400, 0x8}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000002c0)={0x5c, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d0, 0x1e8, 0xf8, 0xf8, 0x500, 0x0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f0000000300), {[{{@ipv6={@empty, @empty, [0x0, 0xff, 0xffffffff], [0xffffffff, 0xff, 0xff], 'pimreg\x00', 'veth0_macvtap\x00', {}, {}, 0x2f, 0xf8, 0x2, 0x4c}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x5}}}, {{@ipv6={@local, @empty, [0xffffffff, 0xffffffff, 0xff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00], 'veth0\x00', 'lo\x00', {}, {0xff}, 0x2c, 0xbf, 0x3, 0x41}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@mcast1, 0x36, 0x16, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x15}, [0x0, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0xfffefe, 0xff000000], 'gre0\x00', 'tunl0\x00', {}, {0xff}, 0x16, 0xc, 0x4, 0x20}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x2, 0x6, 0x1, [0x4000, 0x69, 0x3ef, 0x0, 0x8, 0x8, 0x1, 0x5, 0x9, 0x8, 0x6, 0xc8, 0x1, 0x5, 0x7fff, 0xcf11], 0x7}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@remote, 0x2, 0x1e, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x4, @ipv4=@local, 0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r4 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000009c0)={0x1000, 0x3, 0xc6, 0x15e9}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'erspan0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x8, 0x1, 0x7, 0x7fffffff, {{0xb, 0x4, 0x1, 0x37, 0x2c, 0x67, 0x0, 0x8, 0x0, 0x0, @private=0xa010102, @empty, {[@lsrr={0x83, 0x7, 0xf, [@dev={0xac, 0x14, 0x14, 0x2c}]}, @lsrr={0x83, 0xf, 0x31, [@private=0xa010101, @private=0xa010101, @initdev={0xac, 0x1e, 0xe, 0x0}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x78, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6254f61557e770df}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004094}, 0x20008050) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000c40)=0x5, 0x4) r7 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000c80), &(0x7f0000000cc0)=0x10) ioctl$SIOCPNADDRESOURCE(r7, 0x89e0, &(0x7f0000000d00)=0x7) r8 = socket$kcm(0x29, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) write(r9, &(0x7f0000000d40)="b6419346809608af3926d0804f0d694a2395788cca83d09e4efb971b2e3b6b720e9d085e448dec4b57130f8e7ae7ed69bd0a29d78607985d9b12b6504398918fdaba13ebaa52fc9d57fb00bc7ca40f1b4f8bab858224b7479ee5266c01711a37523026bad788f30ffa756cbcdb13aa5361c9f4f5678faffaf609d03ef777cda20ec1d0d5f3dbb246f3298de0a87279dcf88f520f64a12b9a5e4cbb520ce26cc22547712cbb481fa2b5af2617b03618b2ad3ae7d075b87a64e05ff45f96eaf0", 0xbf) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40), r2) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x104, r10, 0x500, 0x8, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x63d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xed31}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x39}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4df}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x347}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x48004}, 0x20000010) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x64, r10, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000001180)='team0\x00', 0x6) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r11, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, 0x140a, 0x2, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004890}, 0x4000010) sendto$inet6(r0, &(0x7f00000012c0)="182eadc5504c2b53d49dbe64b162fbbe5abaff2b8bdbda4d441bed84495f2f852bebcfeb4158785996ec86950914ad122e2976827f1fc27aa942fab2f9a5b4d3a8215495e8227f49fbb211fb4d925b4df309a911ba0e8519e1af1dae33be052f86ea815b1211b4c008827c6f9a80fa26268e5752bbc1551bc4f9bb459be835345a33e353392c56bcdfd6e46606141e47bbbe7a44ddf49f15a6108663d84f5686a670d1a0a549b9394c4bcfd876b81fa4f7b652d3b1ba80e5e2335f910e439fb519e17afe6d9ac78cbb1670e02c4469920e28cd57a2a32691dbde2c6c8e10721c57cdc90bb16cdf72c7fcfb8c7d74dbe93beac015a48c", 0xf6, 0x20008084, &(0x7f00000013c0)={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001400)={0xd3, {{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}}, 0x1, 0x1, [{{0xa, 0x4e23, 0xfa7, @dev={0xfe, 0x80, '\x00', 0x33}, 0x798}}]}, 0x110) 144.477733ms ago: executing program 8 (id=6124): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xfdaf) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589dc643f167cf0fcd370239aac93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) shutdown(r0, 0x2) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) sendto$inet6(r2, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x40094, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4ea0, 0x2, @empty, 0xfffffffe}, 0xfffffffffffffd5d, &(0x7f0000000580)=[{&(0x7f0000000280)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4d}, @void, @val={0xc, 0x99, {0x1971, 0x14}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 143.851679ms ago: executing program 5 (id=6125): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={0x0, 0x1e, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd2a, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x6, 0x1, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r0, 0x952de000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x5, '\x00', r5, r3, 0x5, 0x3}, 0x50) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r6, 0x0) listen(r6, 0x7f3d) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700260a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 28.381462ms ago: executing program 7 (id=6126): r0 = socket$inet6(0xa, 0x1, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRESDEC], 0x88}}, 0x90) socket$inet6(0xa, 0x1, 0x7) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRESDEC], 0x88}}, 0x90) (async) 0s ago: executing program 8 (id=6127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000740)=@getchain={0x4c, 0x66, 0x300, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x7, 0x2}, {0xfff1, 0x4}, {0xc, 0x6}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0xfffffff6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): ] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.168578][T20921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.262741][ T1112] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.287795][ T1112] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.330719][ T1112] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.360788][ T1112] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.503218][T21421] __nla_validate_parse: 10 callbacks suppressed [ 534.503239][T21421] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4431'. [ 534.555667][T21421] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4431'. [ 534.572697][T21421] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4431'. [ 534.726690][T21256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.734545][T21256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.788862][T21430] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4433'. [ 534.829569][T21256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.842602][T21256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.995260][T21450] netlink: 71 bytes leftover after parsing attributes in process `syz.7.4439'. [ 535.367077][T21465] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4443'. [ 535.441606][T21449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.608051][T21462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.651691][T21474] netlink: 788 bytes leftover after parsing attributes in process `syz.1.4445'. [ 535.939435][T10495] bridge0: port 3(syz_tun) entered disabled state [ 536.006088][T21487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4449'. [ 536.020671][ T5885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 536.038169][ T5885] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 536.038799][T10495] syz_tun (unregistering): left allmulticast mode [ 536.046921][ T5885] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 536.060242][ T5885] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 536.070103][ T5885] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 536.092145][T10495] syz_tun (unregistering): left promiscuous mode [ 536.098842][T10495] bridge0: port 3(syz_tun) entered disabled state [ 536.231685][T21488] hsr0 speed is unknown, defaulting to 1000 [ 536.251502][T21488] C speed is unknown, defaulting to 1000 [ 536.259882][T21498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4451'. [ 536.433774][T21508] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4455'. [ 536.449794][T21508] 8021q: VLANs not supported on ip_vti0 [ 536.534448][T21515] netlink: 'syz.6.4458': attribute type 11 has an invalid length. [ 536.703275][T21515] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.727942][T21519] tipc: Enabling of bearer rejected, failed to enable media [ 536.765560][T21519] openvswitch: netlink: Flow actions attr not present in new flow. [ 536.902956][T21515] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.938221][T21529] netlink: 'syz.5.4463': attribute type 1 has an invalid length. [ 537.062989][T21515] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.115417][T21539] netlink: 'syz.5.4465': attribute type 1 has an invalid length. [ 537.121384][T21542] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 537.212335][T21515] bond0: (slave netdevsim0): Releasing backup interface [ 537.234189][T21515] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.416364][ T13] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.478935][T21562] netlink: 'syz.1.4471': attribute type 2 has an invalid length. [ 537.519501][ T1112] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.586664][T21488] chnl_net:caif_netlink_parms(): no params data found [ 537.658776][ T1112] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.670982][ T1112] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.682195][T21566] tipc: Enabled bearer , priority 0 [ 537.780222][T21566] syzkaller0: entered promiscuous mode [ 537.797901][T21566] syzkaller0: entered allmulticast mode [ 537.875445][T21566] tipc: Resetting bearer [ 537.923414][T21488] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.934923][T21488] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.942365][T21488] bridge_slave_0: entered allmulticast mode [ 537.951643][T21488] bridge_slave_0: entered promiscuous mode [ 537.960621][T21488] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.968890][T21488] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.977127][T21488] bridge_slave_1: entered allmulticast mode [ 537.985639][T21488] bridge_slave_1: entered promiscuous mode [ 537.992685][T21565] tipc: Resetting bearer [ 538.023432][T21565] tipc: Disabling bearer [ 538.107269][T21488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.107420][ T5885] Bluetooth: hci3: command tx timeout [ 538.160330][T21488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.269854][T21488] team0: Port device team_slave_0 added [ 538.293086][T21607] netlink: 'syz.7.4480': attribute type 1 has an invalid length. [ 538.303340][T21488] team0: Port device team_slave_1 added [ 538.380915][T21488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.391102][T21488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.422840][T21488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.444921][T21488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.451908][T21488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.480586][T21488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.498708][T21614] syz.1.4481 (21614) used obsolete PPPIOCDETACH ioctl [ 538.567858][T21488] hsr_slave_0: entered promiscuous mode [ 538.577363][T21488] hsr_slave_1: entered promiscuous mode [ 538.583953][T21488] debugfs: 'hsr0' already exists in 'hsr' [ 538.591216][T21488] Cannot create hsr debugfs directory [ 538.765988][T21627] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 539.060272][T21644] bridge7: entered promiscuous mode [ 539.075447][T21644] bridge7: entered allmulticast mode [ 539.169097][T21488] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 539.192817][T21488] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.232228][T21654] gretap0: entered promiscuous mode [ 539.238227][T21654] vlan2: entered promiscuous mode [ 539.336369][T21488] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 539.350190][T21662] xt_limit: Overflow, try lower: 271964/0 [ 539.351437][T21488] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.469001][T21488] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 539.514957][T21488] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.550003][T21671] netlink: 'syz.5.4499': attribute type 1 has an invalid length. [ 539.576128][T21671] __nla_validate_parse: 5 callbacks suppressed [ 539.576148][T21671] netlink: 236 bytes leftover after parsing attributes in process `syz.5.4499'. [ 539.602999][T21670] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4496'. [ 539.632149][T21670] tc_dump_action: action bad kind [ 539.651346][T21488] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 539.666294][T21670] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4496'. [ 539.688873][T21488] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.039211][T21488] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 540.081063][T21488] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 540.121360][T21488] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 540.135721][T21488] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 540.185456][ T5885] Bluetooth: hci3: command tx timeout [ 540.243020][T21712] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4506'. [ 540.244373][T21714] netlink: 'syz.5.4507': attribute type 1 has an invalid length. [ 540.260184][T21714] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4507'. [ 540.345812][T21706] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4506'. [ 540.363293][T21719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4508'. [ 540.379081][T21719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4508'. [ 540.511966][T21488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.598996][T21488] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.629554][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.636730][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.688062][T10644] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.695265][T10644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.696039][T21734] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4514'. [ 540.973505][T21742] tap0: tun_chr_ioctl cmd 1074025676 [ 540.987909][T21742] tap0: owner set to 0 [ 541.182534][T21759] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4521'. [ 541.232279][T21759] geneve4: entered promiscuous mode [ 541.291102][T21763] tipc: Started in network mode [ 541.320588][T21763] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 541.338284][T21763] tipc: Enabled bearer , priority 10 [ 541.359363][T21767] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 541.400257][T21488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.529456][T21772] netlink: 'syz.7.4526': attribute type 11 has an invalid length. [ 542.106225][T21808] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 542.265355][ T5885] Bluetooth: hci3: command tx timeout [ 542.288776][T21488] veth0_vlan: entered promiscuous mode [ 542.349262][T21488] veth1_vlan: entered promiscuous mode [ 542.465520][ T7563] tipc: Node number set to 4269801492 [ 542.543374][T21488] veth0_macvtap: entered promiscuous mode [ 542.617789][T21488] veth1_macvtap: entered promiscuous mode [ 542.719245][T21488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.749691][T21488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.790491][T21819] tipc: Enabled bearer , priority 0 [ 542.813998][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.831949][T21256] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.860244][T21819] syzkaller0: entered promiscuous mode [ 542.868597][T21802] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 542.881620][T21819] syzkaller0: entered allmulticast mode [ 542.917544][T21256] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.936833][T21256] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.960788][T21827] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 543.028244][T21830] tipc: Resetting bearer [ 543.201593][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.241842][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.280895][T21818] tipc: Resetting bearer [ 543.299922][T21818] tipc: Disabling bearer [ 543.345570][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.370746][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.398033][T21842] syzkaller1: entered promiscuous mode [ 543.428199][T21842] syzkaller1: entered allmulticast mode [ 543.620488][T21853] netlink: 'syz.8.4440': attribute type 21 has an invalid length. [ 543.638447][T21853] netlink: 'syz.8.4440': attribute type 4 has an invalid length. [ 543.647625][T21853] netlink: 'syz.8.4440': attribute type 5 has an invalid length. [ 543.657442][T21853] sctp: [Deprecated]: syz.8.4440 (pid 21853) Use of int in max_burst socket option. [ 543.657442][T21853] Use struct sctp_assoc_value instead [ 543.676250][T21853] netlink: 'syz.8.4440': attribute type 21 has an invalid length. [ 543.692620][T21853] netlink: 'syz.8.4440': attribute type 4 has an invalid length. [ 543.704509][T21853] netlink: 'syz.8.4440': attribute type 5 has an invalid length. [ 544.020207][T21876] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 544.066723][T21883] tipc: Started in network mode [ 544.071770][T21883] tipc: Node identity 6646d3c87eee, cluster identity 4711 [ 544.102012][T21883] tipc: Enabled bearer , priority 0 [ 544.158864][T21879] syzkaller0: entered promiscuous mode [ 544.179772][T21879] syzkaller0: entered allmulticast mode [ 544.226870][T21879] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 544.293704][T21879] tipc: Resetting bearer [ 544.354753][ T5885] Bluetooth: hci3: command tx timeout [ 544.389845][T21878] tipc: Resetting bearer [ 544.424159][T21878] tipc: Disabling bearer [ 545.311486][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 545.320785][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 545.328831][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 545.338858][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 545.347558][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 545.397693][T21915] hsr0 speed is unknown, defaulting to 1000 [ 545.405519][T21915] C speed is unknown, defaulting to 1000 [ 545.538778][T21919] __nla_validate_parse: 16 callbacks suppressed [ 545.538797][T21919] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4569'. [ 545.778302][T21929] netlink: 'syz.6.4572': attribute type 1 has an invalid length. [ 545.907929][T21929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 545.917137][T21939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4573'. [ 545.931130][T21939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4573'. [ 545.989158][T21939] netlink: 'syz.1.4573': attribute type 12 has an invalid length. [ 546.175177][T21950] netlink: 'syz.6.4577': attribute type 5 has an invalid length. [ 546.258600][T21915] chnl_net:caif_netlink_parms(): no params data found [ 546.428756][T21915] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.433520][T21968] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 546.437609][T21915] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.452525][T21915] bridge_slave_0: entered allmulticast mode [ 546.461515][T21915] bridge_slave_0: entered promiscuous mode [ 546.470177][T21960] netlink: 'syz.8.4580': attribute type 1 has an invalid length. [ 546.490621][T21915] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.498709][T21915] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.506908][T21915] bridge_slave_1: entered allmulticast mode [ 546.514799][T21915] bridge_slave_1: entered promiscuous mode [ 546.523376][T21960] pim6reg1: entered promiscuous mode [ 546.528832][T21960] pim6reg1: entered allmulticast mode [ 546.627102][T21915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.644634][T21915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.715756][T21915] team0: Port device team_slave_0 added [ 546.758210][T21915] team0: Port device team_slave_1 added [ 546.846015][T21915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.853366][T21915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.908622][T21915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.939344][T21915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.946621][T21915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.998711][T21915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.127293][T21990] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4588'. [ 547.192707][T21915] hsr_slave_0: entered promiscuous mode [ 547.199914][T21915] hsr_slave_1: entered promiscuous mode [ 547.212991][T21915] debugfs: 'hsr0' already exists in 'hsr' [ 547.221800][T21915] Cannot create hsr debugfs directory [ 547.385336][ T5885] Bluetooth: hci2: command tx timeout [ 547.653662][T21915] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.848172][T21915] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.865660][T21915] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 547.875764][T21915] netdevsim netdevsim7 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 547.997651][T21915] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.025672][T21915] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.064918][T21915] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 548.084966][T21915] netdevsim netdevsim7 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 548.181797][T21915] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.226332][T21915] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.244229][T21915] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 548.254402][T21915] netdevsim netdevsim7 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 548.341896][T21915] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.373649][T21915] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.393944][T21915] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 548.415251][T21915] netdevsim netdevsim7 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 548.559216][T22053] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4610'. [ 548.644499][T22058] netlink: 'syz.5.4611': attribute type 1 has an invalid length. [ 548.700870][T22063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4612'. [ 548.720311][T22058] bond1 (unregistering): Released all slaves [ 548.795064][T22062] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4613'. [ 548.810080][T22067] netlink: 124 bytes leftover after parsing attributes in process `syz.8.4613'. [ 548.890337][T21915] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 548.901928][T21915] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 548.925957][T21915] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 548.947466][T21915] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 549.143787][T21915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.174065][T21915] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.208962][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.216250][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.233479][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.240700][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.463331][T22095] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4621'. [ 549.474944][ T5885] Bluetooth: hci2: command tx timeout [ 549.525900][T22095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.808587][T22108] netlink: 'syz.5.4624': attribute type 29 has an invalid length. [ 549.822839][T22109] veth1_to_bond: entered allmulticast mode [ 549.863032][T21915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.887852][T22113] netlink: 'syz.5.4624': attribute type 29 has an invalid length. [ 549.912295][T22113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4624'. [ 549.969835][T22107] veth1_to_bond: left allmulticast mode [ 550.462039][T22135] netlink: 'syz.1.4631': attribute type 1 has an invalid length. [ 550.533326][T22138] sctp: [Deprecated]: syz.8.4632 (pid 22138) Use of int in maxseg socket option. [ 550.533326][T22138] Use struct sctp_assoc_value instead [ 550.559862][T22135] 8021q: adding VLAN 0 to HW filter on device bond4 [ 550.580272][T22139] __nla_validate_parse: 3 callbacks suppressed [ 550.580293][T22139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4631'. [ 550.950296][T22139] bond4 (unregistering): Released all slaves [ 551.119003][T21915] veth0_vlan: entered promiscuous mode [ 551.179441][T21915] veth1_vlan: entered promiscuous mode [ 551.253520][T22153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4635'. [ 551.272041][T21915] veth0_macvtap: entered promiscuous mode [ 551.293430][T22153] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4635'. [ 551.322618][T21915] veth1_macvtap: entered promiscuous mode [ 551.379837][T21915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.405570][T21915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.433656][T10644] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.461860][T10644] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.505959][T10644] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.524190][T10644] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.546845][ T5885] Bluetooth: hci2: command tx timeout [ 551.555797][T22177] sctp: [Deprecated]: syz.8.4639 (pid 22177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.555797][T22177] Use struct sctp_sack_info instead [ 551.686167][T22188] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20003 [ 551.802316][T22198] netlink: 'syz.1.4645': attribute type 1 has an invalid length. [ 551.832730][T22198] 8021q: adding VLAN 0 to HW filter on device bond4 [ 551.854578][T22198] bond4: (slave gretap1): making interface the new active one [ 551.863027][T22198] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 551.998846][T22201] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 552.030278][T22201] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4646'. [ 552.197733][T22207] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.4648'. [ 552.276582][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.290580][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.361894][T22209] macvtap1: entered promiscuous mode [ 552.368028][T22209] vlan0: entered promiscuous mode [ 552.373733][T22209] macvtap1: entered allmulticast mode [ 552.384654][T22209] vlan0: entered allmulticast mode [ 552.393003][T22209] veth0_vlan: entered allmulticast mode [ 552.438910][T22211] macvtap2: entered promiscuous mode [ 552.455235][T22211] macvtap2: entered allmulticast mode [ 552.528837][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.538964][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.724497][T22225] netlink: 'syz.6.4653': attribute type 1 has an invalid length. [ 552.856308][T22230] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4655'. [ 552.933636][T22225] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 553.002194][T22225] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 553.050505][T22231] gretap1: entered promiscuous mode [ 553.063014][T22231] bond2: (slave gretap1): making interface the new active one [ 553.072855][T22231] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 553.099998][T22235] macvlan2: entered promiscuous mode [ 553.105531][T22235] macvlan2: entered allmulticast mode [ 553.111831][T22235] bond2: entered promiscuous mode [ 553.120180][T22235] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 553.131370][T22235] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 553.151529][T22235] bond2: left promiscuous mode [ 553.269149][T22243] siw: device registration error -23 [ 553.380923][T22259] xt_time: unknown flags 0xf4 [ 553.535103][T22263] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4665'. [ 553.559162][T22263] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4665'. [ 553.623427][T22267] netlink: 'syz.7.4667': attribute type 4 has an invalid length. [ 553.632845][ T5885] Bluetooth: hci2: command tx timeout [ 553.768845][T22266] vlan0 (unregistering): left allmulticast mode [ 553.777397][T22266] veth0_vlan: left allmulticast mode [ 553.783054][T22266] vlan0 (unregistering): left promiscuous mode [ 554.079592][T22279] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 554.130119][T22282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4670'. [ 554.546379][T22298] nbd: must specify a size in bytes for the device [ 554.609483][T22300] geneve2: entered promiscuous mode [ 554.653251][T22300] geneve2: entered allmulticast mode [ 554.819126][T22313] netlink: 168 bytes leftover after parsing attributes in process `syz.7.4681'. [ 554.838827][T22315] netlink: 'syz.5.4680': attribute type 1 has an invalid length. [ 555.135101][T22332] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 555.221757][T22330] Bluetooth: MGMT ver 1.23 [ 555.412810][T22346] netlink: 'syz.7.4693': attribute type 5 has an invalid length. [ 555.450031][T22348] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 555.591806][T22346] dvmrp0: entered allmulticast mode [ 555.604442][T22352] __nla_validate_parse: 4 callbacks suppressed [ 555.604463][T22352] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4696'. [ 555.664964][T22357] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4697'. [ 555.678400][T22357] netlink: 35 bytes leftover after parsing attributes in process `syz.6.4697'. [ 555.749306][T22360] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 555.755566][T22357] netlink: 'syz.6.4697': attribute type 5 has an invalid length. [ 555.784035][T22357] netlink: 'syz.6.4697': attribute type 6 has an invalid length. [ 555.794357][T22357] netlink: 35 bytes leftover after parsing attributes in process `syz.6.4697'. [ 555.808519][T22360] bond1: (slave vcan1): Error -95 calling set_mac_address [ 555.897634][T22367] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4701'. [ 556.312134][T22385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4706'. [ 556.369988][T22390] IPVS: ip_vs_add_dest(): server weight less than zero [ 556.398608][T22395] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4710'. [ 556.571543][T22405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4713'. [ 556.611556][T22408] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4711'. [ 556.624164][T22406] IPVS: length: 229 != 8 [ 556.877641][T22420] netlink: 'syz.8.4715': attribute type 1 has an invalid length. [ 556.907341][T22421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4714'. [ 557.231858][T22433] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 557.417560][T22416] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.425331][T22416] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.101540][T22416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.152865][T22416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.721969][T22484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.753036][T22445] tipc: Enabling of bearer rejected, failed to enable media [ 558.809749][ T1157] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.849122][ T1157] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.896505][ T1157] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.934589][ T1157] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.094325][T22496] netlink: 'syz.1.4729': attribute type 5 has an invalid length. [ 559.220956][T22510] openvswitch: netlink: Message has 5 unknown bytes. [ 559.774495][T22539] team0: Device vti0 is of different type [ 560.197736][T22572] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 560.305193][T22576] netlink: 'syz.8.4754': attribute type 1 has an invalid length. [ 560.379568][T22581] netlink: 'syz.1.4753': attribute type 2 has an invalid length. [ 560.673249][T22597] netlink: 'syz.1.4759': attribute type 1 has an invalid length. [ 560.687313][T22597] netlink: 'syz.1.4759': attribute type 4 has an invalid length. [ 560.704419][T22597] __nla_validate_parse: 7 callbacks suppressed [ 560.704436][T22597] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4759'. [ 561.050956][T22623] netlink: 'syz.8.4766': attribute type 1 has an invalid length. [ 561.093226][T22623] netlink: 244 bytes leftover after parsing attributes in process `syz.8.4766'. [ 561.246614][T22636] sctp: [Deprecated]: syz.1.4772 (pid 22636) Use of int in maxseg socket option. [ 561.246614][T22636] Use struct sctp_assoc_value instead [ 561.479978][T22638] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4773'. [ 561.502834][T22638] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4773'. [ 561.554582][T22646] gre1: entered promiscuous mode [ 561.593405][T22646] gre1: entered allmulticast mode [ 561.651514][T22638] virtio_net virtio1 eth0: entered promiscuous mode [ 561.692943][T22638] ifb1: entered promiscuous mode [ 561.728314][T22638] debugfs: 'hsr0' already exists in 'hsr' [ 561.758768][T22661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4780'. [ 561.795020][T22638] Cannot create hsr debugfs directory [ 561.895864][T22670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.271522][T22694] atomic_op ffff88807c0e2998 conn xmit_atomic 0000000000000000 [ 562.588924][T22713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4792'. [ 562.636431][T22713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4792'. [ 562.790258][T22726] netlink: 'syz.1.4796': attribute type 1 has an invalid length. [ 562.994128][T22738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.064609][T22738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4798'. [ 563.111120][T22740] netlink: 'syz.6.4799': attribute type 1 has an invalid length. [ 563.313233][T22759] netlink: 'syz.8.4806': attribute type 1 has an invalid length. [ 563.405243][T22762] bond3: (slave bridge2): making interface the new active one [ 563.413525][T22762] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 563.483231][T22765] hsr0 speed is unknown, defaulting to 1000 [ 563.543254][T22764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4808'. [ 563.545935][T22765] C speed is unknown, defaulting to 1000 [ 563.699993][T22774] netlink: 'syz.5.4811': attribute type 1 has an invalid length. [ 563.738710][T22776] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 563.772396][T22776] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 563.774984][T22777] netlink: 'syz.5.4811': attribute type 21 has an invalid length. [ 563.811217][T22777] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4811'. [ 563.880401][T22779] tipc: Enabling of bearer rejected, failed to enable media [ 565.298630][T22846] macvlan0: entered promiscuous mode [ 565.320634][T22846] batadv_slave_0: entered promiscuous mode [ 565.337435][T22846] debugfs: 'hsr1' already exists in 'hsr' [ 565.378867][T22846] Cannot create hsr debugfs directory [ 565.408727][T22852] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 565.780522][T22863] netlink: 'syz.5.4835': attribute type 6 has an invalid length. [ 565.829340][T22868] __nla_validate_parse: 2 callbacks suppressed [ 565.829358][T22868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4837'. [ 565.848497][T22873] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4839'. [ 565.860670][T22863] netlink: 'syz.5.4835': attribute type 6 has an invalid length. [ 565.934112][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4840'. [ 565.946068][T22880] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4840'. [ 566.056433][T22883] netlink: 'syz.5.4841': attribute type 25 has an invalid length. [ 566.209487][T22898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4846'. [ 566.229306][T22898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4846'. [ 566.245663][T22898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4846'. [ 566.402011][T22905] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.566713][T22905] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.666574][T22905] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.685222][T22925] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4853'. [ 566.789828][T22905] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.937270][T22939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4859'. [ 566.964745][ T60] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.005301][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.059278][ T1157] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.102068][ T1157] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.120823][T22945] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4861'. [ 567.146985][T22945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.282252][T22954] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 567.308768][T22957] tipc: Enabled bearer , priority 0 [ 567.342356][T22959] netlink: 'syz.1.4867': attribute type 23 has an invalid length. [ 567.376444][T22957] syzkaller0: entered promiscuous mode [ 567.385131][T22957] syzkaller0: entered allmulticast mode [ 567.507223][T22957] tipc: Resetting bearer [ 567.556903][T22952] tipc: Resetting bearer [ 567.693629][T22952] tipc: Disabling bearer [ 568.479069][T23025] tipc: Started in network mode [ 568.484067][T23025] tipc: Node identity 7e1e04979bc7, cluster identity 4711 [ 568.491652][T23025] tipc: Enabled bearer , priority 0 [ 568.515787][T23025] syzkaller0: entered promiscuous mode [ 568.531471][T23025] syzkaller0: entered allmulticast mode [ 568.569610][T23022] tipc: Resetting bearer [ 568.640053][T23022] tipc: Disabling bearer [ 569.457120][T23094] IPv6: NLM_F_REPLACE set, but no existing node found! [ 569.777949][T23114] netlink: 'syz.1.4918': attribute type 1 has an invalid length. [ 570.121746][T23129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 570.255688][ T13] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.266904][ T13] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.276239][ T13] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.285742][ T13] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.641982][T23165] netlink: 'syz.5.4932': attribute type 21 has an invalid length. [ 570.652204][T23165] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 570.742593][T23174] netlink: 'syz.8.4935': attribute type 21 has an invalid length. [ 570.770955][T23174] netlink: 'syz.8.4935': attribute type 7 has an invalid length. [ 570.779873][T23174] netlink: 'syz.8.4935': attribute type 8 has an invalid length. [ 570.945337][T23160] __nla_validate_parse: 17 callbacks suppressed [ 570.945359][T23160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4930'. [ 571.005770][T23160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4930'. [ 571.206230][T23186] netlink: 'syz.6.4940': attribute type 11 has an invalid length. [ 571.246431][T23189] netlink: 'syz.1.4938': attribute type 1 has an invalid length. [ 571.254213][T23189] netlink: 'syz.1.4938': attribute type 3 has an invalid length. [ 571.279276][T23189] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4938'. [ 571.298292][T23189] NCSI netlink: No device for ifindex 131080 [ 571.338098][T23197] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4943'. [ 571.359776][T23197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4943'. [ 571.370078][T23194] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4941'. [ 571.395089][T23197] bridge_slave_1: left allmulticast mode [ 571.410035][T23197] bridge_slave_1: left promiscuous mode [ 571.422866][T23197] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.475513][T23197] bridge_slave_0: left allmulticast mode [ 571.481203][T23197] bridge_slave_0: left promiscuous mode [ 571.496933][T23197] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.619576][T23213] xt_socket: unknown flags 0x50 [ 571.684417][T23209] C: renamed from team_slave_0 (while UP) [ 571.704122][T23209] netlink: 'syz.7.4947': attribute type 1 has an invalid length. [ 571.726305][T23209] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 571.929550][T23217] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.055036][T23232] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4955'. [ 572.224271][T23246] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4957'. [ 572.361267][T23217] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.460645][T23249] tipc: Enabled bearer , priority 0 [ 572.471626][T23243] syzkaller0: entered promiscuous mode [ 572.478342][T23243] syzkaller0: entered allmulticast mode [ 572.485639][T23240] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 572.515421][T23236] tipc: Resetting bearer [ 572.609207][T23217] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.628950][T23234] tipc: Resetting bearer [ 572.648478][T23234] tipc: Disabling bearer [ 572.719722][T23258] netlink: 'syz.6.4960': attribute type 4 has an invalid length. [ 572.791415][T23258] netlink: 'syz.6.4960': attribute type 4 has an invalid length. [ 572.903845][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.943571][T10644] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.002524][T10644] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.063609][T10644] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.475203][T23284] "syz.8.4967" (23284) uses obsolete ecb(arc4) skcipher [ 573.598382][T23288] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4968'. [ 573.649905][T23288] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 573.652154][T23290] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4969'. [ 573.763316][T23295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.913252][T23307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 573.920543][T23307] IPv6: NLM_F_CREATE should be set when creating new route [ 573.946555][T23307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 574.229777][T23327] vxcan1 speed is unknown, defaulting to 1000 [ 574.238687][T23327] vxcan1 speed is unknown, defaulting to 1000 [ 574.257782][T23327] vxcan1 speed is unknown, defaulting to 1000 [ 574.493426][T23340] syzkaller1: entered promiscuous mode [ 574.508857][T23340] syzkaller1: entered allmulticast mode [ 574.625245][T23327] infiniband sy: set active [ 574.630095][T23327] infiniband sy: added vxcan1 [ 574.642673][T22465] vxcan1 speed is unknown, defaulting to 1000 [ 574.684768][T23327] RDS/IB: sy: added [ 574.688860][T23327] smc: adding ib device sy with port count 1 [ 574.695208][T23327] smc: ib device sy port 1 has pnetid [ 574.703093][T22465] vxcan1 speed is unknown, defaulting to 1000 [ 574.712383][T23327] vxcan1 speed is unknown, defaulting to 1000 [ 574.850306][ T5885] block nbd2: Receive control failed (result -32) [ 575.025522][T23361] netlink: 'syz.7.4991': attribute type 1 has an invalid length. [ 575.162384][T23361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.189152][T23362] hsr0 speed is unknown, defaulting to 1000 [ 575.223732][T23362] C speed is unknown, defaulting to 1000 [ 575.540026][T23362] vxcan1 speed is unknown, defaulting to 1000 [ 575.787825][T23327] vxcan1 speed is unknown, defaulting to 1000 [ 575.962729][T23384] sctp: [Deprecated]: syz.5.4997 (pid 23384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 575.962729][T23384] Use struct sctp_sack_info instead [ 575.989964][T23381] __nla_validate_parse: 3 callbacks suppressed [ 575.989981][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4997'. [ 576.231972][T23327] vxcan1 speed is unknown, defaulting to 1000 [ 576.596307][T23402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5003'. [ 576.623141][T23401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.631966][T23327] vxcan1 speed is unknown, defaulting to 1000 [ 576.632269][T23402] bridge_slave_1: left allmulticast mode [ 576.645516][T23401] netlink: 'syz.7.5005': attribute type 4 has an invalid length. [ 576.653386][T23402] bridge_slave_1: left promiscuous mode [ 576.660244][T23402] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.672945][T23402] bridge_slave_0: left allmulticast mode [ 576.679106][T23402] bridge_slave_0: left promiscuous mode [ 576.685025][T23402] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.949042][T23327] vxcan1 speed is unknown, defaulting to 1000 [ 577.211299][T23327] vxcan1 speed is unknown, defaulting to 1000 [ 577.300680][T23414] netlink: 'syz.7.5008': attribute type 33 has an invalid length. [ 577.313362][T23414] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 577.453150][T23418] vcan0: entered allmulticast mode [ 577.570974][T23327] vxcan1 speed is unknown, defaulting to 1000 [ 577.861945][T23434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.035425][T23443] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5019'. [ 578.065102][T23443] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5019'. [ 578.090648][T23327] vxcan1 speed is unknown, defaulting to 1000 [ 578.413327][T23451] can: request_module (can-proto-0) failed. [ 578.583163][T23327] vxcan1 speed is unknown, defaulting to 1000 [ 578.667155][T23460] pim6reg1: entered promiscuous mode [ 578.672510][T23460] pim6reg1: entered allmulticast mode [ 579.080705][T23474] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5029'. [ 579.090224][T23469] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5029'. [ 579.183378][T23469] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5029'. [ 579.228287][T23469] netlink: 'syz.1.5029': attribute type 9 has an invalid length. [ 579.251630][T23469] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5029'. [ 579.267764][T23481] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5032'. [ 579.278988][T23474] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5029'. [ 579.332759][T23474] 0ªî{X¹¦: renamed from gretap0 [ 579.346740][T23474] 0ªî{X¹¦: left promiscuous mode [ 579.356117][T23474] 0ªî{X¹¦: entered allmulticast mode [ 579.379054][T23474] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 579.426033][T23469] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 579.449276][T23469] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 579.800818][T23493] openvswitch: netlink: Missing key (keys=40, expected=100) [ 579.832482][T23496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.017291][T23501] netlink: 'syz.5.5038': attribute type 10 has an invalid length. [ 580.253483][T23516] netlink: 'syz.8.5043': attribute type 33 has an invalid length. [ 580.408328][T23523] netlink: 'syz.7.5044': attribute type 12 has an invalid length. [ 580.428806][T23527] netlink: 'syz.8.5046': attribute type 3 has an invalid length. [ 580.986356][T23550] ve: renamed from ipvlan1 [ 581.140063][T23571] __nla_validate_parse: 7 callbacks suppressed [ 581.140080][T23571] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5056'. [ 581.156574][T23569] netlink: 'syz.5.5057': attribute type 1 has an invalid length. [ 581.177827][T23569] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5057'. [ 581.215566][T23569] netlink: 'syz.5.5057': attribute type 1 has an invalid length. [ 581.270264][T23582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.440226][T23591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5061'. [ 581.700734][T23595] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5064'. [ 581.789718][T23604] tipc: Enabled bearer , priority 0 [ 581.901838][T23604] syzkaller0: entered promiscuous mode [ 581.908285][T23604] syzkaller0: entered allmulticast mode [ 581.914640][T23604] tipc: Resetting bearer [ 581.941516][T23610] syzkaller1: entered promiscuous mode [ 581.947645][T23610] syzkaller1: entered allmulticast mode [ 582.083535][ T1157] tipc: Resetting bearer [ 582.098208][T23616] netlink: 'syz.5.5070': attribute type 4 has an invalid length. [ 582.271855][T23630] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.5071'. [ 582.553863][T23597] tipc: Resetting bearer [ 582.703939][T23610] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.845033][T22451] tipc: Node number set to 3856204951 [ 582.965765][T23642] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5075'. [ 582.993544][T23644] netlink: 'syz.7.5076': attribute type 1 has an invalid length. [ 583.039165][T23645] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5075'. [ 584.334636][T23597] tipc: Disabling bearer [ 584.421114][T23644] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 584.439714][T23647] vlan4: entered allmulticast mode [ 584.459311][T23647] veth0_to_bond: entered allmulticast mode [ 584.479699][T23647] bridge3: port 1(vlan4) entered blocking state [ 584.491939][T23647] bridge3: port 1(vlan4) entered disabled state [ 584.506076][T23647] vlan4: entered promiscuous mode [ 584.515282][T23647] veth0_to_bond: entered promiscuous mode [ 584.624156][T23658] bond5: entered promiscuous mode [ 584.631037][T23658] bond5: entered allmulticast mode [ 584.636878][T23658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 584.653000][T22451] IPVS: starting estimator thread 0... [ 584.689150][T23668] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5081'. [ 584.744909][T23665] IPVS: using max 28 ests per chain, 67200 per kthread [ 584.841006][T23676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5081'. [ 584.922041][T23681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5082'. [ 584.965793][T23658] bond5 (unregistering): Released all slaves [ 585.014019][T23668] team1: entered promiscuous mode [ 585.031435][T23668] team1: entered allmulticast mode [ 585.038199][T23684] netlink: 'syz.8.5084': attribute type 4 has an invalid length. [ 585.301915][T23696] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 585.331192][T23696] netlink: 'syz.6.5089': attribute type 10 has an invalid length. [ 585.342444][T23696] mac80211_hwsim hwsim37 wlan1: left allmulticast mode [ 585.360746][T23696] netlink: 'syz.6.5089': attribute type 1 has an invalid length. [ 585.430334][T23696] 8021q: adding VLAN 0 to HW filter on device bond3 [ 585.470912][T23703] bond3: (slave geneve2): making interface the new active one [ 585.489189][T23703] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 586.345152][T23746] __nla_validate_parse: 71 callbacks suppressed [ 586.345173][T23746] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5102'. [ 586.813210][T23768] xt_l2tp: missing protocol rule (udp|l2tpip) [ 586.838393][T23768] xt_l2tp: missing protocol rule (udp|l2tpip) [ 586.859962][T23768] xt_l2tp: missing protocol rule (udp|l2tpip) [ 586.878545][T23773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5111'. [ 587.085078][T23786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5113'. [ 587.663984][T23828] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5125'. [ 587.772875][T23830] syzkaller1: entered promiscuous mode [ 587.794886][T23830] syzkaller1: entered allmulticast mode [ 588.039688][T23852] sctp: [Deprecated]: syz.6.5132 (pid 23852) Use of int in max_burst socket option. [ 588.039688][T23852] Use struct sctp_assoc_value instead [ 588.058548][T23846] netlink: 248 bytes leftover after parsing attributes in process `syz.8.5131'. [ 588.393078][T23861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5134'. [ 588.434822][T23861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5134'. [ 588.656591][T23882] veth1_macvtap: left promiscuous mode [ 589.127957][T23902] 8021q: VLANs not supported on ip6tnl0 [ 589.436361][T23909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5149'. [ 589.506368][T23909] pim6reg1: entered promiscuous mode [ 589.511708][T23909] pim6reg1: entered allmulticast mode [ 589.539253][T23911] netlink: 'syz.1.5150': attribute type 4 has an invalid length. [ 589.674333][T23921] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 589.865772][T23932] netlink: 'syz.5.5157': attribute type 1 has an invalid length. [ 590.001874][T23941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5159'. [ 590.037772][T23941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5159'. [ 590.078153][T23945] openvswitch: netlink: Invalid VLAN frame [ 590.726344][T23954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 590.733629][T23954] IPv6: NLM_F_CREATE should be set when creating new route [ 590.757262][T23958] xfrm1: entered promiscuous mode [ 590.762418][T23958] xfrm1: entered allmulticast mode [ 590.806724][T23954] netlink: 'syz.6.5164': attribute type 12 has an invalid length. [ 590.816526][T23963] netlink: 'syz.7.5169': attribute type 1 has an invalid length. [ 591.059982][T23984] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 591.088086][T23969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 591.108050][T23969] bond2: (slave bond3): making interface the new active one [ 591.124836][T23969] bond2: (slave bond3): Enslaving as an active interface with an up link [ 591.373979][T24005] __nla_validate_parse: 2 callbacks suppressed [ 591.373999][T24005] netlink: 666 bytes leftover after parsing attributes in process `syz.5.5179'. [ 591.414032][T24006] netlink: 666 bytes leftover after parsing attributes in process `syz.5.5179'. [ 591.448222][T24013] netlink: 'syz.8.5180': attribute type 1 has an invalid length. [ 591.542808][T23972] tunl0: left promiscuous mode [ 591.557170][T23972] gre0: left promiscuous mode [ 591.659537][T24023] netlink: 'syz.8.5180': attribute type 4 has an invalid length. [ 591.689912][T23972] 1ªî{X¹¦: left allmulticast mode [ 591.718923][T23972] erspan0: left promiscuous mode [ 591.736911][T23972] ip_vti0: left promiscuous mode [ 591.768498][T23972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 591.820396][T24030] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5183'. [ 592.147266][T24044] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 592.403374][T24064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5195'. [ 592.565501][T24074] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5201'. [ 592.593384][T24076] netlink: 51 bytes leftover after parsing attributes in process `syz.7.5202'. [ 592.787881][T24087] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5204'. [ 592.921921][T24091] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5205'. [ 593.153025][T24108] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5210'. [ 593.199685][T24110] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5211'. [ 593.346383][T24116] netlink: 'syz.7.5213': attribute type 8 has an invalid length. [ 593.698002][T24139] netlink: 'syz.1.5222': attribute type 1 has an invalid length. [ 593.725812][T24139] netlink: 'syz.1.5222': attribute type 1 has an invalid length. [ 593.757377][T24145] netlink: 'syz.1.5222': attribute type 7 has an invalid length. [ 593.783456][T24139] netlink: 'syz.1.5222': attribute type 2 has an invalid length. [ 593.795968][T24145] netlink: 'syz.1.5222': attribute type 8 has an invalid length. [ 593.881212][T24145] team0: entered promiscuous mode [ 593.886898][T24145] team_slave_0: entered promiscuous mode [ 593.892757][T24145] team_slave_1: entered promiscuous mode [ 593.901152][T24145] bridge5: entered promiscuous mode [ 593.916707][T24145] team0: left promiscuous mode [ 593.921735][T24145] team_slave_0: left promiscuous mode [ 593.927831][T24145] team_slave_1: left promiscuous mode [ 593.936588][T24145] bridge5: left promiscuous mode [ 594.259765][T22451] IPVS: starting estimator thread 0... [ 594.392982][T24168] IPVS: using max 30 ests per chain, 72000 per kthread [ 594.696825][T24197] 8021q: adding VLAN 0 to HW filter on device bond5 [ 594.739411][T24197] bond4: (slave bond5): making interface the new active one [ 594.778369][T24197] bond4: (slave bond5): Enslaving as an active interface with an up link [ 594.845713][T24190] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 594.872467][T24190] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 595.143599][ T30] audit: type=1107 audit(1758174378.834:6): pid=24223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 595.144009][T24239] tap0: tun_chr_ioctl cmd 1074025678 [ 595.144038][T24239] tap0: group set to 0 [ 595.266530][T24218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.568565][T24258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 595.988128][T24283] validate_nla: 3 callbacks suppressed [ 595.988160][T24283] netlink: 'syz.5.5262': attribute type 1 has an invalid length. [ 596.131584][T24289] bond3: (slave gretap2): making interface the new active one [ 596.157527][T24289] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 596.433989][T24324] __nla_validate_parse: 18 callbacks suppressed [ 596.434008][T24324] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5270'. [ 596.460782][T24324] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5270'. [ 596.509872][T24328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5273'. [ 596.703451][ T30] audit: type=1107 audit(1758174380.394:7): pid=24342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Žà±aèÓ*nºïV -“€ß¬I1t¡ÍóŸò}Ä“â}õ„§ÙðÉ°;/†+цÃ3­Qv@•Ji&ª [ 596.703451][ T30] O@¬ÍšäÎW¬ÿàã×)ö[¡Ê4ȇ×*·+æ÷ARìtÂø!þ½çƒZ‹Øç&VçÖ:n“–ñkH‘"¾âOÔG¾ñ0§w¨áX2›¿þ‹] [ 596.703451][ T30] Úú• ëŠñÅ`«º“EÕÔ§' [ 596.886546][T24357] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5282'. [ 596.952521][T24363] sctp: [Deprecated]: syz.1.5282 (pid 24363) Use of int in max_burst socket option. [ 596.952521][T24363] Use struct sctp_assoc_value instead [ 597.061612][T24368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5284'. [ 597.079176][T24367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5284'. [ 597.131700][T24370] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5285'. [ 597.149585][T24370] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5285'. [ 597.429350][T24387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5291'. [ 597.657362][T24405] hsr0 speed is unknown, defaulting to 1000 [ 597.663994][T24405] hsr0 speed is unknown, defaulting to 1000 [ 597.672569][T24405] hsr0 speed is unknown, defaulting to 1000 [ 597.695884][T24405] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 597.723703][T24405] hsr0 speed is unknown, defaulting to 1000 [ 597.734220][T24405] hsr0 speed is unknown, defaulting to 1000 [ 597.743826][T24405] hsr0 speed is unknown, defaulting to 1000 [ 597.752710][T24405] hsr0 speed is unknown, defaulting to 1000 [ 597.769962][T24405] hsr0 speed is unknown, defaulting to 1000 [ 597.783298][T24405] hsr0 speed is unknown, defaulting to 1000 [ 597.793413][T24405] hsr0 speed is unknown, defaulting to 1000 [ 597.802236][T24405] hsr0 speed is unknown, defaulting to 1000 [ 597.810371][T24405] hsr0 speed is unknown, defaulting to 1000 [ 597.915322][T24417] netlink: 288 bytes leftover after parsing attributes in process `syz.8.5301'. [ 597.979560][T24419] netlink: 'syz.6.5302': attribute type 8 has an invalid length. [ 598.126085][ C0] vcan0: j1939_tp_rxtimer: 0xffff888042971000: rx timeout, send abort [ 598.136470][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888042971000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 598.186871][T24431] netlink: 'syz.7.5308': attribute type 33 has an invalid length. [ 598.195613][T24432] netlink: 'syz.6.5306': attribute type 21 has an invalid length. [ 598.239104][T24432] netlink: 'syz.6.5306': attribute type 21 has an invalid length. [ 598.239876][ T1112] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.262471][ T1112] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.277742][ T1112] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.286263][ T1112] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.650581][T24465] pim6reg: entered allmulticast mode [ 598.940784][T24483] netlink: 'syz.6.5323': attribute type 1 has an invalid length. [ 599.591576][T24514] IPv6: sit1: Disabled Multicast RS [ 599.607501][T24516] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 599.692638][T24516] netlink: 'syz.8.5333': attribute type 32 has an invalid length. [ 599.701648][T24516] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 599.792777][ T5876] Bluetooth: hci2: command 0x0405 tx timeout [ 600.677227][T24573] hsr0 speed is unknown, defaulting to 1000 [ 600.696865][T24573] C speed is unknown, defaulting to 1000 [ 601.128506][T24595] veth1_macvtap: left promiscuous mode [ 601.147590][T24595] macsec0: entered promiscuous mode [ 601.152845][T24595] macsec0: entered allmulticast mode [ 601.199517][T24595] veth1_macvtap: entered promiscuous mode [ 601.215043][T24595] veth1_macvtap: entered allmulticast mode [ 601.231369][T24595] macsec0: left promiscuous mode [ 601.260408][T24595] macsec0: left allmulticast mode [ 601.269885][T24595] veth1_macvtap: left allmulticast mode [ 601.285661][T24573] vxcan1 speed is unknown, defaulting to 1000 [ 601.411694][T24605] netlink: 'syz.6.5360': attribute type 1 has an invalid length. [ 601.788253][T24620] team_slave_0: mtu greater than device maximum [ 601.794546][T24573] hsr0 speed is unknown, defaulting to 1000 [ 602.079039][T24633] __nla_validate_parse: 17 callbacks suppressed [ 602.079060][T24633] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5370'. [ 602.649067][T24659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.789357][T24665] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5380'. [ 602.837942][T24670] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5381'. [ 602.886724][T24670] netem: change failed [ 603.070865][ T30] audit: type=1804 audit(1758174386.764:8): pid=24680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5386" name="/newroot/225/cgroup.controllers" dev="tmpfs" ino=1158 res=1 errno=0 [ 603.100591][ T30] audit: type=1800 audit(1758174386.764:9): pid=24680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5386" name="cgroup.controllers" dev="tmpfs" ino=1158 res=0 errno=0 [ 603.132166][T24684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5388'. [ 603.144611][T24685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5388'. [ 603.178393][T24688] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5389'. [ 603.482677][T24709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.683896][T24722] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5399'. [ 603.863366][T24736] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 603.952173][T24721] syzkaller0: entered promiscuous mode [ 603.963035][T24721] syzkaller0: entered allmulticast mode [ 604.009745][T24742] Unsupported ieee802154 address type: 0 [ 604.153438][T24753] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5407'. [ 604.207747][T24756] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5406'. [ 605.736297][T24747] netlink: 196 bytes leftover after parsing attributes in process `syz.7.5404'. [ 605.978147][T24772] netlink: 'syz.1.5413': attribute type 1 has an invalid length. [ 606.089863][T24772] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 606.593603][T24808] netlink: 'syz.8.5421': attribute type 1 has an invalid length. [ 606.642253][T24785] hsr_slave_0 (unregistering): left promiscuous mode [ 606.676728][T24811] netlink: 'syz.7.5422': attribute type 1 has an invalid length. [ 606.691201][T24811] netlink: 'syz.7.5422': attribute type 1 has an invalid length. [ 606.761384][T24815] dvmrp0: entered allmulticast mode [ 606.803871][T24818] netlink: 'syz.6.5425': attribute type 3 has an invalid length. [ 606.830397][T24821] netlink: 'syz.6.5425': attribute type 3 has an invalid length. [ 606.984595][T24836] ip6gre2: entered allmulticast mode [ 607.099684][T24839] netlink: 'syz.7.5431': attribute type 1 has an invalid length. [ 607.109356][T24839] __nla_validate_parse: 13 callbacks suppressed [ 607.109367][T24839] netlink: 228 bytes leftover after parsing attributes in process `syz.7.5431'. [ 607.125583][T24839] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5431'. [ 607.232819][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5433'. [ 607.329933][T24847] netlink: 'syz.7.5435': attribute type 19 has an invalid length. [ 607.491515][T24855] netlink: 'syz.7.5436': attribute type 12 has an invalid length. [ 607.499772][T24855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5436'. [ 607.510055][T24855] netlink: 'syz.7.5436': attribute type 12 has an invalid length. [ 607.518191][T24855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5436'. [ 607.642651][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5437'. [ 607.737053][T24826] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 607.743088][T24826] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 607.833909][T24826] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 607.840261][T24826] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 607.947063][T24877] tipc: Failed to remove unknown binding: 66,1,1/0:3065788195/3065788197 [ 607.957498][T24877] tipc: Failed to remove unknown binding: 66,1,1/0:3065788195/3065788197 [ 607.966610][T24826] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 607.986320][T24826] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 608.113091][T24872] syzkaller0: entered promiscuous mode [ 608.139737][T24872] syzkaller0: entered allmulticast mode [ 608.152695][T24826] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 608.160020][T24826] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 608.326351][T24896] netlink: 'syz.6.5449': attribute type 1 has an invalid length. [ 608.334242][T24895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5449'. [ 608.344069][T24896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5449'. [ 608.377915][T24901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5449'. [ 610.095973][T24906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5452'. [ 610.493396][T24945] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 611.290689][T24989] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 611.320091][T24989] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 611.414507][T21256] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.429161][T21256] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.440968][T21256] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.462251][T21256] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.474233][T25002] veth0_macvtap: left promiscuous mode [ 611.497016][T25002] macvtap0: entered allmulticast mode [ 611.537053][T25002] macvtap0: refused to change device tx_queue_len [ 611.562202][T24999] sysfs: cannot create duplicate filename '/class/ieee80211/!ã' [ 611.596581][T24999] CPU: 0 UID: 0 PID: 24999 Comm: syz.6.5481 Not tainted syzkaller #0 PREEMPT(full) [ 611.596611][T24999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 611.596625][T24999] Call Trace: [ 611.596634][T24999] [ 611.596643][T24999] dump_stack_lvl+0x189/0x250 [ 611.596680][T24999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.596706][T24999] ? __pfx__printk+0x10/0x10 [ 611.596741][T24999] ? kernfs_path_from_node+0x2f/0x290 [ 611.596765][T24999] ? kernfs_path_from_node+0x250/0x290 [ 611.596787][T24999] ? kernfs_path_from_node+0x2f/0x290 [ 611.596815][T24999] sysfs_warn_dup+0x8e/0xa0 [ 611.596837][T24999] sysfs_do_create_link_sd+0xc0/0x110 [ 611.596862][T24999] device_add_class_symlinks+0x1cf/0x240 [ 611.596892][T24999] device_add+0x475/0xb50 [ 611.596922][T24999] wiphy_register+0x1ba6/0x28d0 [ 611.596963][T24999] ? __pfx_wiphy_register+0x10/0x10 [ 611.596983][T24999] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 611.597020][T24999] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 611.597053][T24999] ieee80211_register_hw+0x3484/0x4100 [ 611.597097][T24999] ? ieee80211_register_hw+0x13e1/0x4100 [ 611.597137][T24999] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 611.597170][T24999] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 611.597211][T24999] ? __hrtimer_setup+0x187/0x210 [ 611.597230][T24999] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 611.597254][T24999] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 611.597319][T24999] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 611.597349][T24999] ? trace_kmalloc+0x1f/0xd0 [ 611.597379][T24999] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 611.597407][T24999] ? kstrndup+0xbf/0x160 [ 611.597441][T24999] hwsim_new_radio_nl+0xea4/0x1b10 [ 611.597475][T24999] ? __pfx___nla_validate_parse+0x10/0x10 [ 611.597515][T24999] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 611.597560][T24999] ? __nla_parse+0x40/0x60 [ 611.597587][T24999] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 611.597632][T24999] genl_family_rcv_msg_doit+0x212/0x300 [ 611.597670][T24999] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 611.597714][T24999] ? bpf_lsm_capable+0x9/0x20 [ 611.597740][T24999] ? security_capable+0x7e/0x2e0 [ 611.597779][T24999] genl_rcv_msg+0x60e/0x790 [ 611.597815][T24999] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.597841][T24999] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 611.597888][T24999] netlink_rcv_skb+0x208/0x470 [ 611.597907][T24999] ? __lock_acquire+0xab9/0xd20 [ 611.597938][T24999] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.597968][T24999] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.598011][T24999] ? down_read+0x1ad/0x2e0 [ 611.598038][T24999] genl_rcv+0x28/0x40 [ 611.598063][T24999] netlink_unicast+0x82f/0x9e0 [ 611.598106][T24999] ? __pfx_netlink_unicast+0x10/0x10 [ 611.598140][T24999] ? netlink_sendmsg+0x642/0xb30 [ 611.598160][T24999] ? skb_put+0x11b/0x210 [ 611.598188][T24999] netlink_sendmsg+0x805/0xb30 [ 611.598221][T24999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.598248][T24999] ? aa_sock_msg_perm+0xf1/0x1d0 [ 611.598270][T24999] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 611.598293][T24999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.598317][T24999] __sock_sendmsg+0x21c/0x270 [ 611.598352][T24999] ____sys_sendmsg+0x505/0x830 [ 611.598390][T24999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.598428][T24999] ? import_iovec+0x74/0xa0 [ 611.598459][T24999] ___sys_sendmsg+0x21f/0x2a0 [ 611.598489][T24999] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.598558][T24999] ? __fget_files+0x2a/0x420 [ 611.598576][T24999] ? __fget_files+0x3a0/0x420 [ 611.598606][T24999] __x64_sys_sendmsg+0x19b/0x260 [ 611.598636][T24999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 611.598674][T24999] ? rcu_is_watching+0x15/0xb0 [ 611.598701][T24999] ? do_syscall_64+0xbe/0x3b0 [ 611.598730][T24999] do_syscall_64+0xfa/0x3b0 [ 611.598761][T24999] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.598781][T24999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.598800][T24999] ? clear_bhb_loop+0x60/0xb0 [ 611.598824][T24999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.598842][T24999] RIP: 0033:0x7ffac598eba9 [ 611.598860][T24999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.598878][T24999] RSP: 002b:00007ffac6814038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.598898][T24999] RAX: ffffffffffffffda RBX: 00007ffac5bd5fa0 RCX: 00007ffac598eba9 [ 611.598913][T24999] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 611.598925][T24999] RBP: 00007ffac5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 611.598937][T24999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.598948][T24999] R13: 00007ffac5bd6038 R14: 00007ffac5bd5fa0 R15: 00007fffc666ea28 [ 611.598999][T24999] [ 612.079705][T25011] validate_nla: 5 callbacks suppressed [ 612.079723][T25011] netlink: 'syz.5.5485': attribute type 1 has an invalid length. [ 612.183902][T25020] __nla_validate_parse: 10 callbacks suppressed [ 612.183921][T25020] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5485'. [ 612.232327][T25026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5488'. [ 612.383189][T25030] vlan2: entered allmulticast mode [ 612.389919][T25030] bridge0: entered allmulticast mode [ 612.402403][T25030] bond4: (slave vlan2): making interface the new active one [ 612.411470][T25030] bond4: (slave vlan2): Enslaving as an active interface with an up link [ 612.442088][T25036] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5492'. [ 612.645867][T25047] netlink: 'syz.6.5496': attribute type 7 has an invalid length. [ 612.656131][T25048] netlink: 'syz.1.5495': attribute type 16 has an invalid length. [ 612.666637][T25047] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5496'. [ 612.680598][T25048] netlink: 'syz.1.5495': attribute type 3 has an invalid length. [ 612.691429][T25048] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5495'. [ 612.731134][T25048] vlan3: entered allmulticast mode [ 612.806986][T25053] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5494'. [ 613.149328][T25064] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5502'. [ 614.112863][T25106] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5514'. [ 614.127231][T25106] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5514'. [ 614.616573][T25127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5523'. [ 615.198443][T25154] erspan0: entered allmulticast mode [ 615.523837][T21256] syzkaller0: tun_net_xmit 76 [ 615.537624][T21256] syzkaller0: tun_net_xmit 48 [ 615.826118][T25183] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 617.366752][T25205] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 617.406024][T25207] veth0_to_team: entered promiscuous mode [ 617.450506][T25207] veth0_to_team: entered allmulticast mode [ 617.639228][ T5876] block nbd4: Receive control failed (result -32) [ 617.665327][T25211] __nla_validate_parse: 2 callbacks suppressed [ 617.665345][T25211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5547'. [ 617.726599][T25228] netlink: 'syz.7.5553': attribute type 1 has an invalid length. [ 617.762882][T25231] netlink: 248 bytes leftover after parsing attributes in process `syz.8.5554'. [ 617.833791][T25228] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 617.905458][T25236] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5554'. [ 617.915284][T25236] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5554'. [ 618.240678][T25258] bridge: RTM_NEWNEIGH with invalid ether address [ 618.377010][T25269] netlink: 136 bytes leftover after parsing attributes in process `syz.8.5566'. [ 618.412884][T25273] netlink: 136 bytes leftover after parsing attributes in process `syz.8.5566'. [ 618.462781][T25278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5567'. [ 618.479524][T25279] netlink: 'syz.5.5565': attribute type 10 has an invalid length. [ 618.487502][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880565e8c00: rx timeout, send abort [ 618.532203][T25279] veth1_macvtap: left promiscuous mode [ 618.878219][T25305] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5572'. [ 618.914216][T25300] netlink: 'syz.1.5573': attribute type 1 has an invalid length. [ 618.925588][T25300] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5573'. [ 618.957199][T25300] netlink: 'syz.1.5573': attribute type 1 has an invalid length. [ 618.985223][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056d5e800: rx timeout, send abort [ 618.993783][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880565e8c00: abort rx timeout. Force session deactivation [ 619.079819][T25312] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5575'. [ 619.092903][T25314] netlink: 'syz.7.5577': attribute type 1 has an invalid length. [ 619.346169][T25318] sctp: [Deprecated]: syz.1.5578 (pid 25318) Use of int in maxseg socket option. [ 619.346169][T25318] Use struct sctp_assoc_value instead [ 619.493463][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056d5e800: abort rx timeout. Force session deactivation [ 619.714515][T25353] IPVS: set_ctl: invalid protocol: 1 172.20.20.26:20001 [ 619.892656][T25363] netlink: 'syz.1.5591': attribute type 1 has an invalid length. [ 619.985874][T25368] openvswitch: netlink: IPv4 tun info is not correct [ 619.998667][T25363] 8021q: adding VLAN 0 to HW filter on device bond6 [ 620.187777][T25374] bond6 (unregistering): Released all slaves [ 620.224047][T25383] vlan2: entered allmulticast mode [ 620.353381][T25385] netlink: 'syz.5.5597': attribute type 1 has an invalid length. [ 620.372727][T25385] netlink: 'syz.5.5597': attribute type 2 has an invalid length. [ 620.729943][T25404] netlink: 'syz.6.5600': attribute type 9 has an invalid length. [ 620.747817][T25405] netlink: 'syz.6.5600': attribute type 9 has an invalid length. [ 621.213537][T25421] openvswitch: netlink: Flow key attr not present in new flow. [ 621.247625][T25426] openvswitch: netlink: Flow key attr not present in new flow. [ 621.727381][T25448] xfrm1: entered allmulticast mode [ 621.892390][T25458] netlink: ct family unspecified [ 621.927860][T25458] openvswitch: netlink: Actions may not be safe on all matching packets [ 621.994928][T25463] netlink: ct family unspecified [ 622.006807][T25463] openvswitch: netlink: Actions may not be safe on all matching packets [ 622.142478][T25470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.187574][T25477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.250996][T25479] bond6: entered promiscuous mode [ 622.259968][T25479] bond6: entered allmulticast mode [ 622.265843][T25479] 8021q: adding VLAN 0 to HW filter on device bond6 [ 622.427471][T25487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.615863][T25499] tipc: Enabling of bearer rejected, failed to enable media [ 622.806047][T25516] smc: net device bridge_slave_1 applied user defined pnetid SYZ2 [ 622.886989][T25520] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001 [ 622.923335][T25522] __nla_validate_parse: 13 callbacks suppressed [ 622.923352][T25522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5642'. [ 623.405226][T25546] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5649'. [ 623.687917][T25560] validate_nla: 68 callbacks suppressed [ 623.687935][T25560] netlink: 'syz.8.5653': attribute type 4 has an invalid length. [ 623.731850][T25560] netlink: 17 bytes leftover after parsing attributes in process `syz.8.5653'. [ 623.736093][T25562] netlink: 'syz.8.5653': attribute type 3 has an invalid length. [ 623.757945][T25562] netlink: 201372 bytes leftover after parsing attributes in process `syz.8.5653'. [ 623.819598][T25562] netlink: 'syz.8.5653': attribute type 4 has an invalid length. [ 623.841929][T25562] netlink: 17 bytes leftover after parsing attributes in process `syz.8.5653'. [ 624.338457][T25600] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5664'. [ 624.363524][T25601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5665'. [ 624.457708][T25607] xt_l2tp: wrong L2TP version: 0 [ 624.465416][T25607] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5667'. [ 624.588968][T25612] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 624.642739][T25619] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5668'. [ 624.773393][T25609] syzkaller1: entered promiscuous mode [ 624.779543][T25609] syzkaller1: entered allmulticast mode [ 625.017664][T25628] hsr0 speed is unknown, defaulting to 1000 [ 625.036733][T25628] C speed is unknown, defaulting to 1000 [ 625.043923][T25632] netlink: 'syz.6.5671': attribute type 1 has an invalid length. [ 625.138108][T25642] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5675'. [ 625.514040][T25659] syzkaller0: create flow: hash 2960088506 index 1 [ 625.540370][T25628] vxcan1 speed is unknown, defaulting to 1000 [ 625.554482][T10644] syzkaller0: tun_net_xmit 76 [ 625.655513][T25663] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 625.676637][T10644] syzkaller0: tun_net_xmit 48 [ 625.681522][ T7539] syzkaller0: tun_net_xmit 76 [ 625.779057][T25648] syzkaller0: delete flow: hash 2960088506 index 1 [ 626.149944][T25675] sctp: [Deprecated]: syz.5.5682 (pid 25675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 626.149944][T25675] Use struct sctp_sack_info instead [ 627.462155][T25666] syzkaller0: entered promiscuous mode [ 627.467696][T25666] syzkaller0: entered allmulticast mode [ 627.481588][T25628] hsr0 speed is unknown, defaulting to 1000 [ 629.053287][T25672] dvmrp0: entered allmulticast mode [ 629.322552][T25701] __nla_validate_parse: 1 callbacks suppressed [ 629.322569][T25701] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5690'. [ 629.470784][T25701] lo: entered promiscuous mode [ 629.496081][T25701] netlink: 'syz.5.5690': attribute type 2 has an invalid length. [ 629.514989][T25701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 629.680813][T25711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5693'. [ 629.788752][T25711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.142688][T25728] netlink: 'syz.7.5699': attribute type 1 has an invalid length. [ 630.351006][T25727] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.358714][T25727] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.521716][T25747] netlink: 'syz.1.5702': attribute type 21 has an invalid length. [ 630.592847][T25727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.607927][T25727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.701956][T25728] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 630.802512][ T1112] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.831825][ T1112] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.856336][ T1112] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.874329][ T1112] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.884124][ T1112] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.894266][ T1112] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.903640][ T1112] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.940082][ T1112] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.025911][T25769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5706'. [ 631.328618][T25789] netlink: 'syz.5.5714': attribute type 29 has an invalid length. [ 631.363723][T25789] netlink: 'syz.5.5714': attribute type 29 has an invalid length. [ 631.392046][T25795] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.5715'. [ 631.418150][T25793] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5716'. [ 631.453072][T25793] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5716'. [ 631.568975][T25797] tipc: Enabled bearer , priority 0 [ 631.623230][T25810] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5721'. [ 631.650340][T25810] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5721'. [ 631.758026][T25817] netlink: 'syz.1.5718': attribute type 1 has an invalid length. [ 631.766240][T25817] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5718'. [ 631.776167][T25797] syzkaller0: entered promiscuous mode [ 631.781666][T25797] syzkaller0: entered allmulticast mode [ 631.825504][T25797] tipc: Resetting bearer [ 631.857459][T25820] block nbd7: not configured, cannot reconfigure [ 632.695052][T22454] tipc: Node number set to 1935717204 [ 633.682497][ T60] tipc: Resetting bearer [ 633.699312][T25796] tipc: Resetting bearer [ 633.767147][T25796] tipc: Disabling bearer [ 633.994845][T25853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5732'. [ 634.611872][T25889] C: renamed from lo (while UP) [ 634.622660][T25889] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 634.669764][T25890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5740'. [ 634.688662][T25896] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5742'. [ 634.878004][T25904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5744'. [ 634.917605][ T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.917740][T25904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5744'. [ 634.951076][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.964513][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.990409][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.042263][T25912] team0: No ports can be present during mode change [ 635.064346][T25912] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5748'. [ 635.265580][T25924] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5750'. [ 635.403254][T25932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5753'. [ 635.428795][T25933] tipc: Failed to remove unknown binding: 66,1,1/0:415144435/415144437 [ 635.464449][T25933] tipc: Failed to remove unknown binding: 66,1,1/0:415144435/415144437 [ 636.228139][T25961] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5764'. [ 636.289419][T25962] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5764'. [ 637.845959][T25974] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5767'. [ 638.016752][T25991] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 638.057066][T25991] gretap1: entered promiscuous mode [ 638.062419][T25991] gretap1: entered allmulticast mode [ 638.316295][T26010] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 638.332380][T26012] netlink: 'syz.6.5777': attribute type 1 has an invalid length. [ 638.348177][T26012] nbd: couldn't find device at index 1048576 [ 638.517115][T26024] netlink: 'syz.8.5779': attribute type 1 has an invalid length. [ 638.525495][T26024] netlink: 'syz.8.5779': attribute type 1 has an invalid length. [ 638.535775][T26024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.607457][T26028] openvswitch: netlink: Actions may not be safe on all matching packets [ 638.678351][T26030] : entered promiscuous mode [ 638.709169][T26032] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001 [ 638.728729][T26032] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0 [ 638.898134][T26042] netlink: 'syz.1.5785': attribute type 1 has an invalid length. [ 639.309202][T26060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 639.316515][T26060] IPv6: NLM_F_CREATE should be set when creating new route [ 639.323867][T26060] IPv6: NLM_F_CREATE should be set when creating new route [ 639.331165][T26060] IPv6: NLM_F_CREATE should be set when creating new route [ 639.349567][T26054] syzkaller0: entered promiscuous mode [ 639.383554][T26054] syzkaller0: entered allmulticast mode [ 639.391072][T26067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 639.585953][T26075] netlink: 'syz.8.5791': attribute type 21 has an invalid length. [ 639.710997][T26083] __nla_validate_parse: 8 callbacks suppressed [ 639.711017][T26083] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5794'. [ 641.711973][T26110] team0: Device ip6gre1 is of different type [ 641.817242][T26113] nbd7: detected capacity change from 0 to 63 [ 641.850498][T26113] block nbd7: NBD_DISCONNECT [ 641.864013][T26113] block nbd7: Disconnected due to user request. [ 641.865732][T26120] netlink: 'syz.8.5805': attribute type 58 has an invalid length. [ 641.873340][T26113] block nbd7: shutting down sockets [ 641.898799][T26120] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5805'. [ 641.947933][T26123] IPVS: set_ctl: invalid protocol: 0 172.20.20.32:20003 [ 642.098030][T26132] netlink: 666 bytes leftover after parsing attributes in process `syz.7.5808'. [ 642.256892][T26152] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5812'. [ 642.450742][T26167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5816'. [ 642.748902][T26184] syzkaller1: entered promiscuous mode [ 642.760293][T26184] syzkaller1: entered allmulticast mode [ 642.779507][T26183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5824'. [ 642.830729][T26183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5824'. [ 642.962051][T26202] netlink: 'syz.8.5829': attribute type 1 has an invalid length. [ 643.129497][T26204] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5831'. [ 643.885013][T26236] syzkaller0: entered promiscuous mode [ 643.896550][T26236] syzkaller0: entered allmulticast mode [ 643.943692][T26245] tipc: Enabled bearer , priority 0 [ 644.017958][T26235] tipc: Resetting bearer [ 644.048469][T26250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5844'. [ 644.202837][T26259] netlink: 'syz.7.5846': attribute type 12 has an invalid length. [ 645.801193][T26235] tipc: Disabling bearer [ 645.919635][T26269] macvtap2: entered promiscuous mode [ 645.944353][T26269] macvtap2: entered allmulticast mode [ 645.964443][T26270] macvtap3: entered promiscuous mode [ 645.971389][T26270] macvtap3: entered allmulticast mode [ 646.009138][T26276] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5851'. [ 646.010855][T26280] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5852'. [ 646.056227][T26280] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5852'. [ 646.465472][ T7540] vxcan1 speed is unknown, defaulting to 1000 [ 646.503197][T22473] hsr0 speed is unknown, defaulting to 1000 [ 646.651508][T26307] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5861'. [ 646.678586][T26307] netlink: 'syz.8.5861': attribute type 1 has an invalid length. [ 646.714430][T26307] gtp1: entered promiscuous mode [ 646.725210][T26307] gtp1: entered allmulticast mode [ 646.877800][ T5885] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 646.880826][T26313] netlink: 'syz.8.5864': attribute type 7 has an invalid length. [ 646.900864][T20923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 646.914429][T20923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 646.932078][T20923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 646.943270][T20923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 646.969030][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 646.981755][T26316] netlink: 'syz.8.5864': attribute type 21 has an invalid length. [ 646.998915][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 647.010245][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 647.022549][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 647.036610][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 647.144530][T26314] hsr0 speed is unknown, defaulting to 1000 [ 647.162626][T26314] C speed is unknown, defaulting to 1000 [ 647.481773][T26314] vxcan1 speed is unknown, defaulting to 1000 [ 647.700658][T26345] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5868'. [ 647.835510][T26314] hsr0 speed is unknown, defaulting to 1000 [ 648.116709][T26355] openvswitch: netlink: Missing key (keys=40, expected=100) [ 648.144604][T26314] chnl_net:caif_netlink_parms(): no params data found [ 648.314070][T26367] netlink: 'syz.5.5875': attribute type 1 has an invalid length. [ 648.410684][T26367] 8021q: adding VLAN 0 to HW filter on device bond5 [ 648.464447][T26314] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.481602][T26314] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.487043][T26367] netlink: 'syz.5.5875': attribute type 1 has an invalid length. [ 648.504990][T26314] bridge_slave_0: entered allmulticast mode [ 648.523120][T26314] bridge_slave_0: entered promiscuous mode [ 648.537067][T26314] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.544310][T26314] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.552351][T26314] bridge_slave_1: entered allmulticast mode [ 648.560289][T26314] bridge_slave_1: entered promiscuous mode [ 648.590237][T26371] bond5: option mode: unable to set because the bond device is up [ 648.668351][T26314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.692187][T26314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.787517][T26314] team0: Port device team_slave_0 added [ 648.808234][T26386] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 648.823256][T26314] team0: Port device team_slave_1 added [ 648.881111][T26314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.899392][T26314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.965504][T26314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.005753][T26314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.015405][T26314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.041839][T26314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.056775][T26398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.064553][T26398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.072048][T20923] Bluetooth: hci0: command tx timeout [ 649.082428][T26398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.090164][T26398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.280084][T26314] hsr_slave_0: entered promiscuous mode [ 649.296243][T26314] hsr_slave_1: entered promiscuous mode [ 649.303316][T26314] debugfs: 'hsr0' already exists in 'hsr' [ 649.312235][T26314] Cannot create hsr debugfs directory [ 649.380464][T26411] syzkaller1: entered promiscuous mode [ 649.399129][T26411] syzkaller1: entered allmulticast mode [ 649.616573][T26426] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 649.664972][T26428] netlink: 'syz.5.5890': attribute type 1 has an invalid length. [ 649.775416][T26435] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5893'. [ 649.787051][T26435] netlink: 'syz.8.5893': attribute type 2 has an invalid length. [ 649.794977][T26435] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5893'. [ 649.804344][T26435] netlink: 'syz.8.5893': attribute type 2 has an invalid length. [ 649.812349][T26435] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5893'. [ 649.817783][T26314] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.845276][T26314] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.872759][T26436] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5890'. [ 649.884109][T26436] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5890'. [ 649.931096][T26314] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.941259][T26314] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.976012][T26436] 8021q: adding VLAN 0 to HW filter on device bond6 [ 650.011188][T26314] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.035886][T26314] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.120828][T26314] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.142008][T26314] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.372666][T26314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 650.383935][T26314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 650.394546][T26314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 650.414934][T26314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 650.426089][T26462] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 650.571797][T26470] netlink: 'syz.5.5902': attribute type 4 has an invalid length. [ 650.609819][T26314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.662651][T26314] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.689031][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.696218][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.728247][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.735604][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.861901][T26483] netlink: 'syz.5.5907': attribute type 6 has an invalid length. [ 651.037013][T26499] openvswitch: netlink: IPv4 tun info is not correct [ 651.071338][T26497] __nla_validate_parse: 2 callbacks suppressed [ 651.071357][T26497] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5909'. [ 651.099279][T26496] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5909'. [ 651.105000][T26497] netlink: 'syz.5.5909': attribute type 7 has an invalid length. [ 651.123931][T26496] netlink: 'syz.5.5909': attribute type 7 has an invalid length. [ 651.134997][T26497] netlink: 'syz.5.5909': attribute type 8 has an invalid length. [ 651.145388][T20923] Bluetooth: hci0: command tx timeout [ 651.151773][T26496] netlink: 'syz.5.5909': attribute type 8 has an invalid length. [ 651.179224][T26496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5909'. [ 651.198488][T26497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5909'. [ 651.248726][T26506] team0: Device wireguard0 is of different type [ 651.318652][T26314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.436224][T26314] veth0_vlan: entered promiscuous mode [ 651.465068][T26314] veth1_vlan: entered promiscuous mode [ 651.549011][T26314] veth0_macvtap: entered promiscuous mode [ 651.559735][T26521] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5916'. [ 651.572149][T26314] veth1_macvtap: entered promiscuous mode [ 651.600427][T26314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.643642][T26314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.679358][T21256] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.693033][T21256] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.713833][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.730908][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.915614][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.925796][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.929023][T26533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5920'. [ 651.986006][T26538] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5922'. [ 652.001380][T26539] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5922'. [ 652.038851][T21256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.056909][T21256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.480538][T26565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5930'. [ 652.524209][T26568] sysfs: cannot create duplicate filename '/class/ieee80211/!ã' [ 652.547092][T26568] CPU: 1 UID: 0 PID: 26568 Comm: syz.6.5929 Not tainted syzkaller #0 PREEMPT(full) [ 652.547119][T26568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 652.547131][T26568] Call Trace: [ 652.547139][T26568] [ 652.547147][T26568] dump_stack_lvl+0x189/0x250 [ 652.547181][T26568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.547206][T26568] ? __pfx__printk+0x10/0x10 [ 652.547240][T26568] ? kernfs_path_from_node+0x2f/0x290 [ 652.547263][T26568] ? kernfs_path_from_node+0x250/0x290 [ 652.547283][T26568] ? kernfs_path_from_node+0x2f/0x290 [ 652.547311][T26568] sysfs_warn_dup+0x8e/0xa0 [ 652.547332][T26568] sysfs_do_create_link_sd+0xc0/0x110 [ 652.547357][T26568] device_add_class_symlinks+0x1cf/0x240 [ 652.547386][T26568] device_add+0x475/0xb50 [ 652.547423][T26568] wiphy_register+0x1ba6/0x28d0 [ 652.547463][T26568] ? __pfx_wiphy_register+0x10/0x10 [ 652.547482][T26568] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 652.547518][T26568] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 652.547549][T26568] ieee80211_register_hw+0x3484/0x4100 [ 652.547594][T26568] ? ieee80211_register_hw+0x13e1/0x4100 [ 652.547652][T26568] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 652.547687][T26568] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 652.547731][T26568] ? __hrtimer_setup+0x187/0x210 [ 652.547750][T26568] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 652.547777][T26568] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 652.547845][T26568] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 652.547874][T26568] ? trace_kmalloc+0x1f/0xd0 [ 652.547911][T26568] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 652.547958][T26568] ? kstrndup+0xbf/0x160 [ 652.547993][T26568] hwsim_new_radio_nl+0xea4/0x1b10 [ 652.548029][T26568] ? __pfx___nla_validate_parse+0x10/0x10 [ 652.548100][T26568] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 652.548148][T26568] ? __nla_parse+0x40/0x60 [ 652.548178][T26568] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 652.548219][T26568] genl_family_rcv_msg_doit+0x212/0x300 [ 652.548258][T26568] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 652.548305][T26568] ? bpf_lsm_capable+0x9/0x20 [ 652.548333][T26568] ? security_capable+0x7e/0x2e0 [ 652.548375][T26568] genl_rcv_msg+0x60e/0x790 [ 652.548421][T26568] ? __pfx_genl_rcv_msg+0x10/0x10 [ 652.548449][T26568] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 652.548498][T26568] netlink_rcv_skb+0x208/0x470 [ 652.548518][T26568] ? __lock_acquire+0xab9/0xd20 [ 652.548551][T26568] ? __pfx_genl_rcv_msg+0x10/0x10 [ 652.548582][T26568] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 652.548629][T26568] ? down_read+0x1ad/0x2e0 [ 652.548657][T26568] genl_rcv+0x28/0x40 [ 652.548684][T26568] netlink_unicast+0x82f/0x9e0 [ 652.548728][T26568] ? __pfx_netlink_unicast+0x10/0x10 [ 652.548764][T26568] ? netlink_sendmsg+0x642/0xb30 [ 652.548785][T26568] ? skb_put+0x11b/0x210 [ 652.548815][T26568] netlink_sendmsg+0x805/0xb30 [ 652.548850][T26568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.548879][T26568] ? aa_sock_msg_perm+0xf1/0x1d0 [ 652.548903][T26568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 652.548926][T26568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.548951][T26568] __sock_sendmsg+0x21c/0x270 [ 652.548988][T26568] ____sys_sendmsg+0x505/0x830 [ 652.549022][T26568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 652.549061][T26568] ? import_iovec+0x74/0xa0 [ 652.549094][T26568] ___sys_sendmsg+0x21f/0x2a0 [ 652.549125][T26568] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.549197][T26568] ? __fget_files+0x2a/0x420 [ 652.549214][T26568] ? __fget_files+0x3a0/0x420 [ 652.549247][T26568] __x64_sys_sendmsg+0x19b/0x260 [ 652.549278][T26568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 652.549319][T26568] ? rcu_is_watching+0x15/0xb0 [ 652.549346][T26568] ? do_syscall_64+0xbe/0x3b0 [ 652.549376][T26568] do_syscall_64+0xfa/0x3b0 [ 652.549413][T26568] ? lockdep_hardirqs_on+0x9c/0x150 [ 652.549433][T26568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.549452][T26568] ? clear_bhb_loop+0x60/0xb0 [ 652.549477][T26568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.549496][T26568] RIP: 0033:0x7ffac598eba9 [ 652.549513][T26568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.549531][T26568] RSP: 002b:00007ffac6814038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.549552][T26568] RAX: ffffffffffffffda RBX: 00007ffac5bd5fa0 RCX: 00007ffac598eba9 [ 652.549566][T26568] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 652.549579][T26568] RBP: 00007ffac5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 652.549591][T26568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.549603][T26568] R13: 00007ffac5bd6038 R14: 00007ffac5bd5fa0 R15: 00007fffc666ea28 [ 652.549637][T26568] [ 653.039370][T26568] sysfs: cannot create duplicate filename '/class/ieee80211/!ã' [ 653.047085][T26568] CPU: 1 UID: 0 PID: 26568 Comm: syz.6.5929 Not tainted syzkaller #0 PREEMPT(full) [ 653.047105][T26568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 653.047114][T26568] Call Trace: [ 653.047121][T26568] [ 653.047128][T26568] dump_stack_lvl+0x189/0x250 [ 653.047154][T26568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.047173][T26568] ? __pfx__printk+0x10/0x10 [ 653.047199][T26568] ? kernfs_path_from_node+0x2f/0x290 [ 653.047217][T26568] ? kernfs_path_from_node+0x250/0x290 [ 653.047233][T26568] ? kernfs_path_from_node+0x2f/0x290 [ 653.047253][T26568] sysfs_warn_dup+0x8e/0xa0 [ 653.047269][T26568] sysfs_do_create_link_sd+0xc0/0x110 [ 653.047289][T26568] device_add_class_symlinks+0x1cf/0x240 [ 653.047312][T26568] device_add+0x475/0xb50 [ 653.047335][T26568] wiphy_register+0x1ba6/0x28d0 [ 653.047366][T26568] ? __pfx_wiphy_register+0x10/0x10 [ 653.047382][T26568] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 653.047410][T26568] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 653.047435][T26568] ieee80211_register_hw+0x3484/0x4100 [ 653.047469][T26568] ? ieee80211_register_hw+0x13e1/0x4100 [ 653.047498][T26568] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 653.047534][T26568] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 653.047563][T26568] ? __hrtimer_setup+0x187/0x210 [ 653.047577][T26568] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 653.047595][T26568] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 653.047646][T26568] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 653.047667][T26568] ? trace_kmalloc+0x1f/0xd0 [ 653.047685][T26568] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 653.047705][T26568] ? kstrndup+0xbf/0x160 [ 653.047729][T26568] hwsim_new_radio_nl+0xea4/0x1b10 [ 653.047770][T26568] ? __pfx___nla_validate_parse+0x10/0x10 [ 653.047800][T26568] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 653.047834][T26568] ? __nla_parse+0x40/0x60 [ 653.047853][T26568] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 653.047883][T26568] genl_family_rcv_msg_doit+0x212/0x300 [ 653.047911][T26568] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 653.047945][T26568] ? bpf_lsm_capable+0x9/0x20 [ 653.047966][T26568] ? security_capable+0x7e/0x2e0 [ 653.047998][T26568] genl_rcv_msg+0x60e/0x790 [ 653.048024][T26568] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.048045][T26568] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 653.048084][T26568] netlink_rcv_skb+0x208/0x470 [ 653.048099][T26568] ? __lock_acquire+0xab9/0xd20 [ 653.048123][T26568] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.048146][T26568] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 653.048181][T26568] ? down_read+0x1ad/0x2e0 [ 653.048204][T26568] genl_rcv+0x28/0x40 [ 653.048223][T26568] netlink_unicast+0x82f/0x9e0 [ 653.048257][T26568] ? __pfx_netlink_unicast+0x10/0x10 [ 653.048284][T26568] ? netlink_sendmsg+0x642/0xb30 [ 653.048300][T26568] ? skb_put+0x11b/0x210 [ 653.048324][T26568] netlink_sendmsg+0x805/0xb30 [ 653.048349][T26568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.048372][T26568] ? aa_sock_msg_perm+0xf1/0x1d0 [ 653.048393][T26568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 653.048410][T26568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.048428][T26568] __sock_sendmsg+0x21c/0x270 [ 653.048458][T26568] ____sys_sendmsg+0x505/0x830 [ 653.048484][T26568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.048514][T26568] ? import_iovec+0x74/0xa0 [ 653.048544][T26568] ___sys_sendmsg+0x21f/0x2a0 [ 653.048567][T26568] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.048636][T26568] ? __fget_files+0x2a/0x420 [ 653.048654][T26568] ? __fget_files+0x3a0/0x420 [ 653.048683][T26568] __x64_sys_sendmsg+0x19b/0x260 [ 653.048711][T26568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 653.048748][T26568] ? rcu_is_watching+0x15/0xb0 [ 653.048774][T26568] ? do_syscall_64+0xbe/0x3b0 [ 653.048800][T26568] do_syscall_64+0xfa/0x3b0 [ 653.048819][T26568] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.048836][T26568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.048853][T26568] ? clear_bhb_loop+0x60/0xb0 [ 653.048874][T26568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.048890][T26568] RIP: 0033:0x7ffac598eba9 [ 653.048905][T26568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.048921][T26568] RSP: 002b:00007ffac6814038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.048940][T26568] RAX: ffffffffffffffda RBX: 00007ffac5bd5fa0 RCX: 00007ffac598eba9 [ 653.048954][T26568] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 653.048966][T26568] RBP: 00007ffac5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 653.048978][T26568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.048989][T26568] R13: 00007ffac5bd6038 R14: 00007ffac5bd5fa0 R15: 00007fffc666ea28 [ 653.049022][T26568] [ 653.519636][T20923] Bluetooth: hci0: command tx timeout [ 653.525448][T26568] sysfs: cannot create duplicate filename '/class/ieee80211/!ã' [ 653.533168][T26568] CPU: 1 UID: 0 PID: 26568 Comm: syz.6.5929 Not tainted syzkaller #0 PREEMPT(full) [ 653.533190][T26568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 653.533201][T26568] Call Trace: [ 653.533208][T26568] [ 653.533215][T26568] dump_stack_lvl+0x189/0x250 [ 653.533241][T26568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.533261][T26568] ? __pfx__printk+0x10/0x10 [ 653.533288][T26568] ? kernfs_path_from_node+0x2f/0x290 [ 653.533306][T26568] ? kernfs_path_from_node+0x250/0x290 [ 653.533322][T26568] ? kernfs_path_from_node+0x2f/0x290 [ 653.533344][T26568] sysfs_warn_dup+0x8e/0xa0 [ 653.533361][T26568] sysfs_do_create_link_sd+0xc0/0x110 [ 653.533380][T26568] device_add_class_symlinks+0x1cf/0x240 [ 653.533404][T26568] device_add+0x475/0xb50 [ 653.533427][T26568] wiphy_register+0x1ba6/0x28d0 [ 653.533458][T26568] ? __pfx_wiphy_register+0x10/0x10 [ 653.533473][T26568] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 653.533502][T26568] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 653.533526][T26568] ieee80211_register_hw+0x3484/0x4100 [ 653.533587][T26568] ? ieee80211_register_hw+0x13e1/0x4100 [ 653.533620][T26568] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 653.533647][T26568] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 653.533682][T26568] ? __hrtimer_setup+0x187/0x210 [ 653.533697][T26568] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 653.533717][T26568] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 653.533770][T26568] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 653.533794][T26568] ? trace_kmalloc+0x1f/0xd0 [ 653.533814][T26568] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 653.533838][T26568] ? kstrndup+0xbf/0x160 [ 653.533865][T26568] hwsim_new_radio_nl+0xea4/0x1b10 [ 653.533893][T26568] ? __pfx___nla_validate_parse+0x10/0x10 [ 653.533925][T26568] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 653.533962][T26568] ? __nla_parse+0x40/0x60 [ 653.533993][T26568] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 653.534024][T26568] genl_family_rcv_msg_doit+0x212/0x300 [ 653.534052][T26568] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 653.534086][T26568] ? bpf_lsm_capable+0x9/0x20 [ 653.534125][T26568] ? security_capable+0x7e/0x2e0 [ 653.534158][T26568] genl_rcv_msg+0x60e/0x790 [ 653.534187][T26568] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.534210][T26568] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 653.534249][T26568] netlink_rcv_skb+0x208/0x470 [ 653.534264][T26568] ? __lock_acquire+0xab9/0xd20 [ 653.534290][T26568] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.534315][T26568] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 653.534352][T26568] ? down_read+0x1ad/0x2e0 [ 653.534374][T26568] genl_rcv+0x28/0x40 [ 653.534395][T26568] netlink_unicast+0x82f/0x9e0 [ 653.534430][T26568] ? __pfx_netlink_unicast+0x10/0x10 [ 653.534457][T26568] ? netlink_sendmsg+0x642/0xb30 [ 653.534474][T26568] ? skb_put+0x11b/0x210 [ 653.534497][T26568] netlink_sendmsg+0x805/0xb30 [ 653.534524][T26568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.534546][T26568] ? aa_sock_msg_perm+0xf1/0x1d0 [ 653.534565][T26568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 653.534587][T26568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.534607][T26568] __sock_sendmsg+0x21c/0x270 [ 653.534644][T26568] ____sys_sendmsg+0x505/0x830 [ 653.534676][T26568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.534712][T26568] ? import_iovec+0x74/0xa0 [ 653.534743][T26568] ___sys_sendmsg+0x21f/0x2a0 [ 653.534771][T26568] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.534838][T26568] ? __fget_files+0x2a/0x420 [ 653.534854][T26568] ? __fget_files+0x3a0/0x420 [ 653.534885][T26568] __x64_sys_sendmsg+0x19b/0x260 [ 653.534908][T26568] ? _raw_spin_unlock_irq+0x23/0x50 [ 653.534940][T26568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 653.534978][T26568] ? rcu_is_watching+0x15/0xb0 [ 653.535004][T26568] ? do_syscall_64+0xbe/0x3b0 [ 653.535031][T26568] do_syscall_64+0xfa/0x3b0 [ 653.535051][T26568] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.535071][T26568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.535090][T26568] ? clear_bhb_loop+0x60/0xb0 [ 653.535115][T26568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.535133][T26568] RIP: 0033:0x7ffac598eba9 [ 653.535151][T26568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.535167][T26568] RSP: 002b:00007ffac6814038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.535188][T26568] RAX: ffffffffffffffda RBX: 00007ffac5bd5fa0 RCX: 00007ffac598eba9 [ 653.535203][T26568] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 653.535216][T26568] RBP: 00007ffac5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 653.535228][T26568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.535240][T26568] R13: 00007ffac5bd6038 R14: 00007ffac5bd5fa0 R15: 00007fffc666ea28 [ 653.535273][T26568] [ 654.172548][T26581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.218389][T26584] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5935'. [ 655.126570][T26632] pim6reg: entered allmulticast mode [ 655.136378][T26632] pim6reg: left allmulticast mode [ 655.188078][T26635] net veth1_virt_wifi .: renamed from virt_wifi0 [ 655.545221][T20923] Bluetooth: hci0: command tx timeout [ 655.842389][T26679] sctp: [Deprecated]: syz.5.5964 (pid 26679) Use of int in max_burst socket option deprecated. [ 655.842389][T26679] Use struct sctp_assoc_value instead [ 656.083686][T26693] __nla_validate_parse: 8 callbacks suppressed [ 656.083705][T26693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5969'. [ 656.735986][T26742] veth0_to_bond: entered allmulticast mode [ 656.771350][T26744] netlink: 'syz.5.5985': attribute type 58 has an invalid length. [ 656.847899][T26744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5985'. [ 656.900750][T26750] netlink: 'syz.5.5985': attribute type 58 has an invalid length. [ 656.916511][T26750] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5985'. [ 657.008415][T26742] ip6gre1: entered allmulticast mode [ 657.037596][T26748] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5987'. [ 657.162552][T26757] netlink: 'syz.1.5988': attribute type 11 has an invalid length. [ 657.180483][T26757] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5988'. [ 657.211760][T26760] netlink: 'syz.1.5988': attribute type 11 has an invalid length. [ 657.250507][T26760] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5988'. [ 657.399540][T26778] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5994'. [ 657.482391][T26772] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5994'. [ 657.518244][T26772] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5994'. [ 657.641108][T26790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5999'. [ 657.704893][T26791] nbd6: detected capacity change from 0 to 63 [ 657.723360][T26793] block nbd6: NBD_DISCONNECT [ 657.729692][T26793] block nbd6: Disconnected due to user request. [ 657.736288][T26793] block nbd6: shutting down sockets [ 658.252425][T26818] netlink: 'syz.5.6008': attribute type 1 has an invalid length. [ 658.468268][T26828] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 658.551861][T26831] IPVS: ip_vs_edit_dest(): server weight less than zero [ 658.561509][T22473] IPVS: starting estimator thread 0... [ 658.618183][T26831] vlan0: entered allmulticast mode [ 658.623626][T26831] erspan0: entered allmulticast mode [ 658.674730][T26835] IPVS: using max 28 ests per chain, 67200 per kthread [ 659.302394][T26886] tipc: Enabled bearer , priority 0 [ 659.316183][T26890] sch_tbf: burst 88 is lower than device geneve1 mtu (1514) ! [ 659.376285][T26886] syzkaller0: entered promiscuous mode [ 659.405819][T26886] syzkaller0: entered allmulticast mode [ 659.510090][T26887] tipc: Resetting bearer [ 659.578541][T26887] tipc: Disabling bearer [ 659.867870][ T5876] Bluetooth: hci0: command 0x0405 tx timeout [ 659.932517][T26930] netlink: 'syz.5.6042': attribute type 1 has an invalid length. [ 660.468034][T26959] tipc: Started in network mode [ 660.473089][T26959] tipc: Node identity 7a8e2558856c, cluster identity 4711 [ 660.481125][T26959] tipc: Enabled bearer , priority 0 [ 660.489406][T26960] syzkaller0: entered promiscuous mode [ 660.495918][T26960] syzkaller0: entered allmulticast mode [ 660.513465][T26957] tipc: Resetting bearer [ 661.046486][T26968] netlink: 'syz.5.6054': attribute type 5 has an invalid length. [ 661.322932][T26973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.499404][ T7540] tipc: Node number set to 4293010776 [ 661.945689][ T5876] Bluetooth: hci0: command 0x0405 tx timeout [ 662.452410][T26956] tipc: Resetting bearer [ 662.466165][T26956] tipc: Disabling bearer [ 662.491560][T26968] geneve2: entered promiscuous mode [ 662.510106][T26968] geneve2: entered allmulticast mode [ 662.568496][T26978] geneve3: entered promiscuous mode [ 662.581604][T26978] geneve3: entered allmulticast mode [ 662.590207][T26984] netlink: 'syz.1.6058': attribute type 1 has an invalid length. [ 662.612008][ T12] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 662.634349][ T12] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 662.673248][T26984] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 662.695037][ T12] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 662.749912][ T12] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 662.864274][T27004] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 662.939747][T27006] netlink: 'syz.5.6062': attribute type 4 has an invalid length. [ 662.942452][T26989] team0 (unregistering): Port device team_slave_0 removed [ 662.957545][T26989] team0 (unregistering): Port device team_slave_1 removed [ 662.998080][T27008] netlink: 'syz.5.6062': attribute type 4 has an invalid length. [ 663.008496][T26998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 663.029933][T27002] team0: Device gtp0 is of different type [ 663.423844][T27029] __nla_validate_parse: 18 callbacks suppressed [ 663.423863][T27029] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6073'. [ 663.444548][T27030] netlink: 'syz.7.6072': attribute type 5 has an invalid length. [ 663.460990][T27030] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6072'. [ 663.659243][T27037] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6076'. [ 664.556191][T27047] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 664.581946][T27051] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 664.799352][T27061] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6086'. [ 664.846290][T27068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6083'. [ 664.867308][T21256] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 664.885122][T27068] hsr_slave_1: left promiscuous mode [ 664.968052][T27082] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6089'. [ 664.977669][T27082] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6089'. [ 665.208253][T27094] netlink: 13 bytes leftover after parsing attributes in process `syz.1.6090'. [ 665.880842][T27114] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6096'. [ 665.909301][T27114] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6096'. [ 666.039855][T27116] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 666.048352][T27116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.444403][T27133] netlink: 'syz.7.6103': attribute type 64 has an invalid length. [ 668.305284][T27144] syzkaller1: entered promiscuous mode [ 668.321114][T27144] syzkaller1: entered allmulticast mode [ 668.340195][T27147] netlink: 'syz.7.6109': attribute type 21 has an invalid length. [ 668.400397][T27142] netlink: 'syz.1.6105': attribute type 5 has an invalid length. [ 668.539895][T27160] netlink: 'syz.6.6111': attribute type 1 has an invalid length. [ 668.579742][T27162] __nla_validate_parse: 7 callbacks suppressed [ 668.579759][T27162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6112'. [ 668.698194][T27165] netlink: 'syz.7.6113': attribute type 2 has an invalid length. [ 668.794089][T27175] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6117'. [ 668.950448][T27182] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 669.469703][T27201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6122'. [ 669.575364][T27208] netlink: 'syz.5.6125': attribute type 1 has an invalid length. [ 669.617704][ T30] audit: type=1800 audit(1758174453.304:10): pid=27208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6125" name="memory.events" dev="tmpfs" ino=1867 res=0 errno=0 [ 669.619673][T27208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6125'. [ 669.640855][ T3006] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 669.684014][ T3006] ref_tracker: netdev@ffff88801f6ee610 has 1/1 users at [ 669.684014][ T3006] dst_init+0xd9/0x450 [ 669.684014][ T3006] dst_alloc+0x12a/0x170 [ 669.684014][ T3006] ip_route_input_rcu+0x1ed5/0x2ff0 [ 669.684014][ T3006] ip_route_input_noref+0x167/0x250 [ 669.684014][ T3006] ip_rcv_finish_core+0x5af/0x1c00 [ 669.684014][ T3006] ip_rcv_finish+0x14c/0x2f0 [ 669.684014][ T3006] NF_HOOK+0x309/0x3a0 [ 669.684014][ T3006] __netif_receive_skb+0x143/0x380 [ 669.684014][ T3006] netif_receive_skb+0x1cb/0x790 [ 669.684014][ T3006] tun_rx_batched+0x1b9/0x730 [ 669.684014][ T3006] tun_get_user+0x2aa2/0x3e20 [ 669.684014][ T3006] tun_chr_write_iter+0x113/0x200 [ 669.684014][ T3006] vfs_write+0x5c6/0xb30 [ 669.684014][ T3006] ksys_write+0x145/0x250 [ 669.684014][ T3006] do_syscall_64+0xfa/0x3b0 [ 669.684014][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.684014][ T3006] [ 669.786451][ T30] audit: type=1804 audit(1758174453.314:11): pid=27208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.6125" name="/newroot/362/memory.events" dev="tmpfs" ino=1867 res=1 errno=0 [ 669.857220][T27217] syzkaller0: entered promiscuous mode [ 669.862748][T27217] syzkaller0: entered allmulticast mode [ 669.908875][T27217] tipc: Enabled bearer , priority 0 [ 669.929966][T27217] tipc: Resetting bearer [ 669.971704][T27215] tipc: Resetting bearer [ 670.000629][T27215] tipc: Disabling bearer