last executing test programs: 58.059337829s ago: executing program 4 (id=889): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f00000001c0)=0xffffffff, 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="3f030e0033e6140006001e0089e9", 0xe, 0x8041, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000040000000000000800040000000000"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x40}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b000400"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x24040005}, 0x800) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r13) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r13, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x24, r14, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x24}}, 0x20040040) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x84, r14, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:pam_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:anacron_exec_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0xfc, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_MARK_MASK={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x5, 0xdc4, 0x1, 0x9, 0xba, 0x1]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x64094}, 0x84) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 48.249368971s ago: executing program 4 (id=889): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f00000001c0)=0xffffffff, 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="3f030e0033e6140006001e0089e9", 0xe, 0x8041, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000040000000000000800040000000000"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x40}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b000400"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x24040005}, 0x800) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r13) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r13, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x24, r14, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x24}}, 0x20040040) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x84, r14, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:pam_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:anacron_exec_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0xfc, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_MARK_MASK={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x5, 0xdc4, 0x1, 0x9, 0xba, 0x1]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x64094}, 0x84) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 38.05668363s ago: executing program 4 (id=889): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f00000001c0)=0xffffffff, 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="3f030e0033e6140006001e0089e9", 0xe, 0x8041, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000040000000000000800040000000000"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x40}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b000400"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x24040005}, 0x800) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r13) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r13, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x24, r14, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x24}}, 0x20040040) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x84, r14, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:pam_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:anacron_exec_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0xfc, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_MARK_MASK={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x5, 0xdc4, 0x1, 0x9, 0xba, 0x1]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x64094}, 0x84) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 27.445514808s ago: executing program 4 (id=889): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f00000001c0)=0xffffffff, 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="3f030e0033e6140006001e0089e9", 0xe, 0x8041, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000040000000000000800040000000000"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x40}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b000400"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x24040005}, 0x800) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r13) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r13, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x24, r14, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x24}}, 0x20040040) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x84, r14, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:pam_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:anacron_exec_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0xfc, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_MARK_MASK={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x5, 0xdc4, 0x1, 0x9, 0xba, 0x1]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x64094}, 0x84) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 18.11375211s ago: executing program 4 (id=889): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f00000001c0)=0xffffffff, 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="3f030e0033e6140006001e0089e9", 0xe, 0x8041, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000040000000000000800040000000000"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x40}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b000400"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x24040005}, 0x800) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r13) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r13, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x24, r14, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x24}}, 0x20040040) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x84, r14, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:pam_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:anacron_exec_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0xfc, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_MARK_MASK={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x5, 0xdc4, 0x1, 0x9, 0xba, 0x1]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x64094}, 0x84) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 8.421094288s ago: executing program 4 (id=889): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f00000001c0)=0xffffffff, 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="3f030e0033e6140006001e0089e9", 0xe, 0x8041, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000040000000000000800040000000000"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x40}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b000400"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x24040005}, 0x800) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r13) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r13, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x24, r14, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x24}}, 0x20040040) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x84, r14, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:pam_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:anacron_exec_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0xfc, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_MARK_MASK={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x5, 0xdc4, 0x1, 0x9, 0xba, 0x1]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x64094}, 0x84) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.026317381s ago: executing program 2 (id=1787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009880)=@newlink={0x3c, 0x10, 0x401, 0x4000000, 0x25dfdbfb, {0x0, 0x0, 0x2, 0x0, 0x40a18}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r1 = accept4(r0, &(0x7f00000000c0)=@tipc=@id, &(0x7f0000000000)=0x80, 0x800) sendto$inet6(r1, &(0x7f0000000140)="6416ebcd712c7d5216db099d1db05ae208e7f5d376", 0x15, 0x0, &(0x7f0000000180)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x3}, 0x1c) 2.880046608s ago: executing program 2 (id=1789): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@private1}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000002740)=ANY=[], 0x14}, {&(0x7f0000000000)={0x5c, 0x1d, 0x20, 0x70bd2c, 0x25dfdbfc, "", [@typed={0xc, 0x9, 0x0, 0x0, @u64}, @generic="94290fd1bee4df94e48ecb2fb3f9cabcc12e36aaaa055e413c5cc462b5a46e431085be4785621c49b12f046c9229abf472025c107fac0309c5d6e8f4442c59ff"]}, 0x5c}, {&(0x7f0000001980)={0x149c, 0x2f, 0x200, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x5, 0x0, 0x0, @fd=r0}, @nested={0x1136, 0x57, 0x0, 0x1, [@nested={0x4, 0x138}, @nested={0x4, 0x53}, @typed={0x8, 0x119, 0x0, 0x0, @uid=r1}, @generic="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", @typed={0x4, 0x13d}, @typed={0x55, 0x2b, 0x0, 0x0, @binary="720d4b0bc968693e0c55c33d68fa956c40a5ce06e7aad13e962db759acfb2c8afd35589d66a58b39fb2812ace9e49ec6448d073a154f2bf720d21f229a9beac11ff7016041707a37c759df387bd1683018"}, @generic="77b36c7bea47d6355cffde7b997053f9fa0047fc6d6d35289714e36829c91542faebe640b632f0dfcdfdca5b1a4e7ca80a79e85d5becd0b8e021ac6a884573963c61292a8aeeddcc85a4851c0df32a54f90764e298f31e0f0ddfef9c4f4e24993dd715ea04ddc51012dadd46860ad40fb1ac79466d9bec0ed657f9063654774520b9924c056940c39f5a4310ac49d50be9787cd6a30c1acf87e569d09ccfcc30f60029889a568e55304f304317fc2f57cd576ab21f3275cef4d476908ae4bb62841bdf0aaefb"]}, @nested={0xe2, 0xfb, 0x0, 0x1, [@nested={0x4, 0x55}, @generic="825eae8b793645ff4d8efce32e66bc43fa6aee0cba309a432e36006fde42", @generic="059ae26c830a25ad0772777d7e1cc3dd80adfae1c50d", @generic="d38b1ae4b5fd3fc9fb5b2bf9a22372c365c12ce8b6a02c7b6ac603aec3ac91afe9e57d2fa2d435aa8c91967bbe3e62e8c64ca7293baaa43aaf4836632ea1ee364c125fbd7ea4fbd7e5f4049ebb10e9b573384268c696d75e035ad693968f48aa63efce4623034382e0ca813b2ac9d7b2e521842a495d4885fef7aa0072a8b0584b4c904f1a0422d93ac42d99fbda7944dd839476d3fe86769ce426faa6cfe4f8db88e9dcf4a9"]}, @generic, @typed={0x5, 0xed, 0x0, 0x0, @str='\x00'}, @generic="4a27b44b3b968abd0f43c25e215aa12ef36a803181002f30de5af8ec3c39ff331dcfa0711bf258d02b7eb203b71ff30ba3a88e39ff68d9", @nested={0x151, 0x129, 0x0, 0x1, [@generic="ee1d49bb144a7b362da9266cc342be110d781653dfdd0febb2dffaf23d302aadd9b4ec240889bf4e1606b0c5cebaadf2f05a60b5f6fcb46e265efac793881b42c0f9121fdda8258f82867d92620d1c87a79f0c5abec5a069441a1d9bb39f79127e887b3c54add78d90f439a39161ea63f8df98d9c00c609e6fb183615dd6335ff759b7c08b7288d274dcc42fa5f8c4bd4c76a189577ee6bbcd59d43b78eb76c892011dd24de9e98b5462f439d484166b02af98", @typed={0x4, 0x5b}, @generic="640153eaa6da918d37609410a273358c1a656b3c2a28135c3b1c014d30263108e29242cb8e2f834e12b86d4b4925279630", @generic="eee8e01938181ebbcb5e382f72234f02da83b5ba43e301352d37306e1bc48e42c0130ced13c75fda3a6a71613b", @generic="1540f28bbe2691071aa96702f3ad5bd0364b08fcf0ad61cf9d73670d014e5192e104ed418f8eb93d772fe3ba", @nested={0x4, 0x111}, @typed={0x8, 0x92, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @generic="49760f3aaef6b6ec30062c41a0c0befaac9f83f36b30ad371aab3ff2d1932e10cfab331f2e5255ccb0d1f78f4b62a0e900d46ae4682447ede62bf58bc81d2e795ad1f6bb9eccf0d05efc73077e2f54140cbd5e8103cbb763f9fdea198342e682ad2560bd775865542999d526028ca018a095c30425b77f7f7669c535fe6746ed4157273ecf4e767aa0142d971095fef50ba2856a7534181c068a3a25aa69067e7a8cf23c7bf2cd3c1f3071b37e8d1e95c88f0b19c5694e78f7765f330f92fcda19e9d846271906abcd4edcdaf39736f0163becec"]}, 0x149c}, {&(0x7f0000000700)={0x10a4, 0x37, 0x82f, 0x70bd2c, 0x25dfdbfe, "", [@generic="b7fd15012ea92b06366265dc4a2bcdc0c9bb027ef3bfbf609b90bf2fbd983ea200ed1ad6b0db06f1e5cebc9ae7cd6caa2fc5751e727b11be9140b2d8e11fce87ecb3802759f2aab7c7ff6a6081e15ed0deb18f4c6ec47deaf48b9d2b3fbd2d8f1147ff32f84eafb73b5e1332aefdd54e11", @nested={0x1010, 0x56, 0x0, 0x1, [@typed={0x5, 0x31, 0x0, 0x0, @str='\x00'}, @generic="85393f8137294347089cda366b07ad65ccb2e2c99b8f1dff28c8965839794a58840fb9aa1fe3f9b53c22a8fb914386a5e382224b6925630fffdc57eb3cd8bc36bcf42caf54abe199241b4effaf72bd4b215ff8c4f6b3d83a2afb952380993cc3dcfce07d479ba39486c5da255f6d91ff55ddaf106343ad6a367cae4a2a0f7f50626ea8ab77d1cc1c921338b0b66f2c2fba015949bcbc6befa21bc464489209223678b4dd2e97349c5eee746a810bfb8e2bd092a349c9e3adee3fba82066c841d1faafc88ca9d692d58ad7dec9b66ae23fe919cac3becf2b8e81aa1c2b8d67eb0fe234058cfdd2c6edd0a912ac403a58d20b0b163560884a2d13535fb28ffd7f66bb8e88e2d1a9394917b9e8f41ee258547b58e538df488c54ad4533d2f69f1c6e90e986477c0efda77802eeb81d34e705b11b0d24ab5a7fedaf3a22772fa09bba44bc8108cc04da1de4e52d28c5106534752f222bbf7314c0f59346b063aade2f68a65763e82a514b61cc9d243b00af041691b7545d6a6bd5aef14521dd5cdc40fe8d98a294d1cf4914f82591779eb5943f9a498c1b2bdb8f86f74a8937fdbd1e49bf7d7f4bfb5f769000d1ae0f86218efed60744658ac983bc5d6b5e5406e4d7f14a2ce360a985c688a0ff8ca0bc6f5d41cc0feb773c96f63ba135a37c6346eecb9941b9ffbab525379dad07f501520b0ec3e1608abe41d53acc62c1192704fbce525d0d6d219433311e80ddc48cd5ee21f390fe820c54b5c91e6fe11224cf663f844dac2527272b9d5727f7ced9681d8310eca5dc570a716d59460997fa89c81d467e4ec081db8ece9367609de9ca375b91e12ae66b3fd4f9e3144850a1a8c8d86d32a4cff3f3ae9ea8f9f72b3a07995d85401065c82cedd4c74034b8d088ffffb143b583f8ce2e002eba595a37bb147323343b08c5c1cd0e93bbf31d4b0a84e70a9f943a34ce1d4466f241b50cbfc30dc5fee8accfadff3fe248db41dbb3f15d06aa810e9ec325d15ea36237740c42a2f240612e475ced816d53907495b29637cc837cf83905c839b6bc9ca63f6ee70450350d80bea4d6e18dd236388734b9964ca6cad3c48420bc71648380d209c1f4f896f99b97f0882ee94ee7a6166ec09dfa703ad514d1df8da7d8264bf454a8800a580c7b40b5b8d5b972a56fb9e95a51889dda88a344eb1a70058643e0dc94d3338bdec71abeeee21e55f75e0d5085c5d484b2c42fb4579ed2e7232ab8f61411bda611ed4c4890e3c27bf08647a8a872e3dcbc2f536f94e0b37f6d69afe64a1b0ce5ff1ff3d67d6822a5e9f9e5f20fc1042c004fd2e3b6a23bcc7113727f7fa409265f175ef5c3b08b1755ec833c18696539e702fe1b1fcbcd0673dbf0dfda93145b07fb7a747227168070bf13c50ac04ba4e532fd8061e5b6fedb3f3a39e23081589ea8c3b88cbf744fe48a534da8a671cf7108e03534e7b33be1bc6a16338fad910c459d58307e17dfc89a65aa0b0c21ec07a3216e89392e65ff940563a09c9de5e7776c1b1d80b35b549982e32041c1c447b72075fd5672b177b6b1c4e81e32e92898da787fa78d412ead58ecaaf73030e9006b4df00d62fc2a8433fb827966d306bf28d57d65feb3f947ea2f35a86f69cb490467e5f80bca4ad9fe652bb95f99b91329d4ccfe36cd0767f3780380894bb680fb729500cf8343c3c42d4da1a22f126b7fa7dd99b6741d12bc4b47dce6ade6430afd946caa82329ff41c999db9759faf3febffd71bf1cf4464e0df9bd6c9def0b9987490e17fdab87a28383df476adab04ba9f05a1ba0c1639cf10fcc02592d376e10ce3b1b5f4e14a265b7e955a6c40b6df6517208e7dcd705b733a3a2eafab18c3399f217a173ca6a84d0d5c931a4ef01effe68cbeea8546abab7d101ade107d2444c44d5ff1840879f78076df55066c07577b28b8fa0eeb7b6b34c4fdccfd1cfb24f11c00c1f0b71ad1938e39dc70f0e37cd94c4a9230e304998ce991a82b910853154e250ffdac92af4ff06bd50bfebd3d9f7ab12a04b348b6a4473a225c5804ff4d03cd10e834884b370c6802c13fea64a366c6d1412449f3123664f3322fc746b070d9aec618d05d0572f89b228babd156d8ab087a389c9f7d6a7594f30ed4ccb356896b6f3aaf0bdc71c5e9d2c727009746cb69c0aa89e93c69f4b6809ebb5ccac212cd8e85a9732a131f3ce1d93a9197fb07a2782d529fb0a88c6d6a5bc6ab322d946a6ead5aee8785421a1a1f8aea401f92392af1a16898a231c607df61f4b6d557ee24cf38dc2cd5beb3a1d8f9e3b91421ea54d1b110794fe7d8353b90ef1aa71a7554151f0b18d5c1436a455d794cd0e4ab379ac217038f85dd0def8a2cab4f3bdea79493912762d1091436ae89167092ce92e0dcd461144822f571ec13b050e267ebc9ab66e99d7fc2fcc4d7bc7c9e227a79d4ef8f8b77f5687e1f2fe7c79f814b054ca6b359e54d141c079d3d35747a2188e55e78bc6f4e419f9a6193ed212374f6df5445ff071388cec7dbd303805de15ed73e3f95283856d5456c37c01a8a9f2dfde83b9b6b7c6026387c45134edf3589c9dd8659d7f96247df6d974c1a2da7a694b6e04936482bad465badb723ece8cf5f8ce6c5516442d3b2842bcbbffa4ab35329df6d0f5feccab26e679670e16e27e3e025ac4268822a92e5dd957f0913247b2d2fb5d3bc389f1490b80fa914e7e5af98494537757c5c2d7efc9ac6e81141efe7cf739699d4cd1cef60a95a39c125433000b14240e176487b72d6767226c70ce85d4b30694e8efcd9574c694ae1535724d02be76a6ceff7f9c8d88d50133184b6731db5547669619bf9340231b22e19e633aceb9d68a5146ab27b6a8467de1b84ae7928444a305cd7f10e9e4b28384f86089d39296fe0c3b728d6d0914625e722754bfd3b0986bfaa1f9e86fbdbb377e10a61f05eae9ffd7f2cb5fceda55e5a26d30952632bede3b0c47fe722a7d03334245abecb3b3a72130ef4409f5c137e6b69689b3b371a0ab32b629729caf54d4c664961b5d07b761f3929b94e7ff3c1570a38cb8f4a6b65247dc8ad118130770aedd83241269465bfd2e5a4038385309e1fde87518f8bd717cf1c3d001312e3587061a56c91a43f11964601485e905e1f6cd67ff5e2ca602c3486f850c6f8882d51ad3318ae7a2febe3fe56ee9f0662623db5fd2ac4b24d6136a9bd2897bdf3abba0293826255e38e37386fe0d956b1ab0d967df4a19f53ad71330e391758aaffe5b2b15b49cc2c608841f10626e1d3a67fa60cfc2634b88033b6f94b0b1b0566aded3165a928b6a771bf2fd201286a2b3aefaf147aa63d2ab4a1202e668aacd2e342479402b65f779de5a36c19873489233b7e478a030655268f5221ee3341adf081a0e2008c76428345ed2647b8dd78d7c1b5d1ec08e7cb3277f8fec849c157a0e2322dc729c8fc6087f654b825f7675414106dee7ce00376f6d28cd2e31227636132ca35321ff2e38f1687c3664cc2b57fb18237540296a817277f70427073cbbf4ef22075a04dc1a3801b854225a7e335596ba7b31ae7fb9d134ec44e9ebba7752b6976f2213a0c0d81de6a7795b31f409c785f7f455437916231061c96c26c5fd76f6aea1ac673f7a534f02430f83b262c0fea369573bcf19cd2598e16b3c2570079ec1e2e8158c1171c7c9fc188745341a7df0ab4afdb73e0e1f01b0e9dd8268d17b98f00efa62f2597fc821f5b5c0b8681d46f8e40763c20cb94591d4d265c64de285dca3f2bf720a857c555b6f9fdbcaa68c03685e11a31c8d9cf99d7dac8205461e98814712f559e4d2260a45103556e0baada8d7c57baae24fb5a2bb212ef5b98609fef07b7962ea0414e7b9ffeac79d43fe53b657aa8d17d00b2a30c2735920dbd733bb06155a76331998abc873e895d85aa1e167eb5014c0c5d138025868ff00d62eddd9f90a6d404ecae8a2ed6aaf55e09e056391da4e15dc01614c4bd3e1c8e80eb9a38e9c0c1543c03a8dc45ca29db164f4d7c586c3d884192957e3eca8a0a22897203d03be8cbe05469bf71c52c297f652b15f9aeca603b8b8b17e5a40db298fbe84b64ba48b1c61c24561b2ea70d3c8212b4583cf0a772050e1d56c05df0d01692673257bd680f8ce333588b12e0edfdf625423bc36d3bf3a42b5365c31f67a83500ec42e143fad4c789dc9afa9f143cc5a15dcc28fa0553e6989758146b2268631fb3c42569748d57205a795eaeb5c67e59e97451e1ff3efd30d0acf65a7268714290f09a5a798a74c1f921aaf578a5b3b9501de124994a6ceeb505b326821aa60cd37d274363b1379083750cd010e9e4a02c7389e63c401fccf91bdd1540fd7f6cc0d11b3e208595d656e4922f2538f2c1a85a0341d7f7b2e7de764fda18e7e2cd87ddbe533034d7fed9d68da4f21e169552a47a778787d98528f8c75d637b62bce4642660135adc278045234316c09d5a7c6ac6df74226c0bc58618c1c3b079c7e9585131afbd2b3a1d3106f3748d183f499be5d41bc1e3e3ad4499316246cf0d31cecb94e5a056e5d3226087cf432c15e2ec6defd1c2fb4491962a0b8eba6beb494a5e3845516f7d2a6bc7a2aba89493db482d42a69ae9cc0e82d718dde1cd9f023149b7a8e92cb9db497d2cd05382b31b7ab03432545295165b1b2319f9d509579d4051d8ea4db24cb0b08da3fe7250bb0868816f25c416ec2bd59ccf18917adeccb4c851cc3ebc36dd5bc240a668283e4dd1cde13cacdb685492056ae5aa48691b9baccc848ef1712bfbe9e82f66a7ded3da1b76b05a5e8ed9e3e082cfbdb73c26b9572611b6b0202e46d13dc9b47051d5b1f676382f8955acd3a42ea109772b4dcf02e32cfea1d5ef612f01012cd22416d0a2d4452b5a04a74b298cf690f86b2267c638858155b8d97e18a68d5cb8bc0c2f071060c83c99e0e50973b78e80c02b9e23fc0629166348a3568da16eb42839f1d04d536ec63d886ca7b94e1fc6fb98b03ccf89de42472163b516d4070fdac59e75ab4d14801fae68e4d505646f05fcbeab08f9ee2f3010fa2f6fdf9b22d5808745a5bf82e51a612bd2e6171e2624e061ed1ec6562e904aca9b634d728aff30beb4075f0d1f692d27ce3ac1f90918c8985b4855fea5fd035a0aab1eaefa665a4024e73973340724528e049e3c3a2506174dccae50edc38bba04ca777fda2ac60cf5a745debfcc0d3397cebd2685517d03e27c1c1e766de7dbf8ed2172b1d12e8fa6fa9614dd2815b98a16f3deb4afe27a00d7ac340530824c4d47a38be39cd5a9ef5e020aaa5e7026e194094a311cd26c4261ec984881bd23fbda11020afb970b12565811ee9c8c1a77070769580c796b918d688d8c07447bd124d17d5962d16cdbfea37d7b86e052c5fbe5e148cea65a84260232f7a280263827f12b574b63dc907e044e8fc55a1c78d9cbbad47d23c8dca7052cbd50d213c77b8abaf97e52231887f88264a16763a88d20ec74bc48e857ad3408e858e65a0821bd850483d8fccabf9afb1501083663f48027f697a6bc191f34fbcff4b7b1f68c76fef7328d87767390c53d09a928791d6bf24ea6ef9e5eb1d602158d17df844e36d564c3233ae52f28e776cb0ffd46de8769ebcd6ccb5c3b89979609140fa1b97dabad8889fde0c1320ac2ef2472df1cf55ac80a563cdff104c23ad8954164ab5889ac16ded8e28a8165edf5556152acd3883d58caa9ee4f5509e7de0dab1b8833d99d6eed2c3fd6b8b29223427df8c7c5c9d88bcaa7955170092654f4f90953589e9d44fdad6af4ee4", @nested={0x4, 0xec}]}, @typed={0xc, 0xc1, 0x0, 0x0, @u64=0x1ff}, @typed={0x4, 0x84}, @generic="61d91b"]}, 0x10a4}], 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.702659746s ago: executing program 3 (id=1792): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private0, 0x0}, &(0x7f0000000080)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'syztnl0\x00', &(0x7f0000000f80)={'sit0\x00', r0, 0x7800, 0x80, 0xfadd, 0x3, {{0x1c, 0x4, 0x1, 0x6, 0x70, 0x67, 0x0, 0x4, 0x4, 0x0, @local, @private=0xa010101, {[@generic={0x82, 0xa, "087ff1531bec462a"}, @generic={0x83, 0x11, "8bbd7b2a9ac2a503a5bee86ef0e297"}, @timestamp_addr={0x44, 0xc, 0x63, 0x1, 0x6, [{@empty, 0x2}]}, @cipso={0x86, 0x1e, 0x3, [{0x5, 0x6, 'I]{.'}, {0x7, 0x7, "efb1c4cc5a"}, {0x0, 0xb, "e3f9ac4c587eaedcf4"}]}, @timestamp={0x44, 0x14, 0x41, 0x0, 0x5, [0xd65, 0x5, 0x400000, 0x9]}, @end, @end, @noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYRES16=r2], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xd, 0x3}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) connect$ax25(r3, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 2.632135312s ago: executing program 3 (id=1793): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) accept4(r0, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000040)=0x80, 0x80000) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0xa, &(0x7f0000000040)=0x7f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x8}, @jmp={0x6, 0x0, 0x7}]}, &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$kcm(0xa, 0x1, 0x106) r9 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r9) sendmsg$kcm(r8, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x4c}, 0x1, 0xba01}, 0x0) 2.529195859s ago: executing program 3 (id=1795): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x0, 0x78, 0x0, 0x1, [@typed={0x0, 0x2f}, @generic="ca6bb5e897287e89b12294b61144d47abad47218ef760ff3a7232043a090ff3f51053b972b0f3b363a16545c4b6bcc50a05f1959fc00b5fd3f753878973c569e54a2df8c93e3d8c3179c1adf2cd5671ddd081bd00348541255eeedd803debf3df2604dcf20e40ac81c19ad129723256782cbc1a4974f34b728f41b7cacee49ba440322db3448d4a3611b915a9c6cd9d1451bde93abfc1467fe86ef32cdf26a7d3167679f331f912dcf06dd5255fe181b9dda38c40da0661e9e267bac99bc0d108bcee21b30d3389113a1983926af", @nested={0x0, 0xdc, 0x0, 0x1, [@typed={0x0, 0xe2, 0x0, 0x0, @u32=0x7ff}, @generic="c6e1f058a9f3e30864c59b2437148d83d44268fb06bd8b03bfdc7dd06d1d731c71e500b300e489df7e4017", @generic="93055705d16bfc35b1de0fa04480f9b0bfc0728f1b948e51ed901cf5e46e66f2210ff8d8bcd114c1c43c0f84d281102132c045329986f0f2b9afae0f8809eb8537a8d18e85b9a669c4e533ca81c5000c1d4ec48e044f98cc49a9c1ff5f6e4d07f1acd62f6574f9e1dfc786f72e8db58ccbe6", @nested={0x0, 0xe5}, @nested={0x0, 0x129}, @generic="a060c2b1368cf3e54313"]}, @typed={0x0, 0x7a, 0x0, 0x0, @pid}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x18}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010000100000000000000000053000000", @ANYRES32=r4, @ANYBLOB="efdd0e4af11f02000a0001"], 0x2c}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r9, 0x1000) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000ff000000feffffff0703020000100000", @ANYRES32=r9, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="040000000200"/28], 0x50) ioctl$int_in(r0, 0x5421, &(0x7f00000003c0)=0x891c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r6, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x1, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) close(0x4) 2.269833587s ago: executing program 1 (id=1798): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neonbs\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0xd}], 0x18, 0x800}, 0x4000010) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmsg$qrtr(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000a00)=""/165, 0xa5}, {&(0x7f00000005c0)=""/181, 0xb5}], 0x3}, 0x38, 0x0) socket(0x22, 0x2, 0x4) 2.267592861s ago: executing program 0 (id=1799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x10000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000005c0)=ANY=[], 0x8) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700260a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf2508000000140002002001000000000000000000000000000108000400ac14141114000200fe80000000000004000000000000002514000300ff0100000000000000000000000000012f00070073797374656d5f753a6f626a6563745f723a73797374656d645f6c6f676765725f657865635f743a733000001400030000000000000000000000ffff0a01010214000300fc02000000000000000000000000000108000500ac1414bb"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x2000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x1, 0xa67, 0x5212}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'pimreg0\x00'}]}, 0x4c}}, 0x0) 2.171690951s ago: executing program 0 (id=1800): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000000)=0x6, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"698999ce660000400000000200", 0x0, 0x0, {0x4, 0xc}, {0x7, 0xc00000}, 0x5, [0x3, 0x6, 0x5, 0x0, 0x8000000000, 0x10000400, 0x8, 0x2, 0x8, 0x6, 0xfffe, 0x8000081, 0x0, 0x8de, 0x7]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r4, 0x0, 0x0) readv(r4, 0x0, 0x0) writev(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000200), 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = gettid() r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @mcast2}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r5, r8, 0x0, 0x0, 0x0}, 0x30) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCNRDECOBS(r9, 0x89e2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00'}, 0x10) 2.014155471s ago: executing program 1 (id=1801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110000"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000000b20e109d09f6894959c47e02767be14df40d1196bc27019d7b6761b32292c3c8f8b781c8cac646309a3453abd7552deabc4481cf95327b689a6991667ca289ede27aa4350cd01df4a4ccfe355ac5feb1a361c0de9351e5e368d6ac29b3e1b00e0be13dc145424538d45fd18fb1347c36798523c3a9db975f37feeecb324dc25f255ac63616699b5921b1ff7eadd1189275c38edb98f690add763eb1cb42ed184e0c878954483195b08e475d9bb3ebf83c2d24743960cc920164f61d4e6a3e35fdb6a8836f6948e9df26dbc0ac15f40a3de8cd55", @ANYRES16=r4, @ANYBLOB="000126bd7000fedbdf255500000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000000008003000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$netlink(r1, 0x10e, 0x2, &(0x7f0000000240)=""/174, &(0x7f00000000c0)=0xae) r9 = socket$inet(0x2, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a090400000020000000000200fffd0900020073797a32000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080003400000000b080002400000001314"], 0x7c}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x0, 0x12, r11, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0xffffc000) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r12, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x48) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r6, @ANYBLOB="00000000000000002c0012800b00010065727370616e00001c000280050016000000000006000f000000000006000e0040"], 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001c0000042abd7000fcdbdf250a000000", @ANYRES32=r6, @ANYBLOB="08001905080009003d320080d0744a000400000008000d0012000000080009000d0000000a00090008000d00070300000300000000000005000000000000000000000000000000006ae108fdc49f84aca5629201b940a29dd6d8e77d8d235df8246d882e9fe459"], 0x64}}, 0x20004004) 1.98223316s ago: executing program 2 (id=1802): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a000000014000100100000000000008010"], 0xa0}}, 0x0) r1 = socket(0xa, 0x800, 0x957) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x415f9025}, 0x8) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xfffffee5}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="470d00000000fbdbdf250800000000000000040001"], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[], 0x184}}, 0x4) 1.846143894s ago: executing program 1 (id=1803): unshare(0x22020600) r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000e00)={0x1d, 0x0, 0x100000000000000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d03000000000000000013000000140009"], 0x28}}, 0x0) 1.750234813s ago: executing program 2 (id=1804): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000600)={r1, r1, 0xe4e8, 0x11, &(0x7f00000006c0)="ce5d0384651ed485dd1d81415fdbc27c33", 0x9, 0x49, 0x46d, 0xa0c, 0x0, 0x2, 0x7, 'syz1\x00'}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x3, @none}, 0xe) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="120000007d000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="80000000000000eef98de77bcbdd8e5be15324627fee36a68b72e8aa70d178ab94d6c72756401740a62539c0a183880000000000000000000000000000000000f5ff33ee139e"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r6, &(0x7f0000000200)="edfc17240356daadc511c2b13f9ad8b4e18334fd98a64f6aa7d20ed9f0757fd9bd37f802d789a08e0b7abdef79610cde7d01f50b4b944af89c87d975e9d9dad1833363b0778c86d87190682ca59eb474731a0b93d5a266697c1f5822d6d22eaa32a618ecface88a29df0bfc4928c8bda8baae6664a75939e9e3ff37f76", &(0x7f0000000080)=""/133}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000001000000010000000a00000000000000fc"], 0x110) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e22, 0x5, @loopback, 0x8000}, {0xa, 0x4e22, 0x78f0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6}, 0x0, {[0xb56, 0x2a3a, 0x3, 0x8, 0x8000, 0xffff419f, 0x4, 0x66]}}, 0x5c) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.742353126s ago: executing program 1 (id=1805): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) r3 = socket(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r5 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000280)=@ethtool_gstrings={0x4b, 0x1}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) sendfile(r0, r6, &(0x7f00000001c0)=0x3, 0x4800000000000000) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r10 = socket$netlink(0x10, 0x3, 0x400000000000004) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8}]}}}]}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) writev(r10, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.628872815s ago: executing program 3 (id=1806): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendto$inet(r1, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x26}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000280)=@framed={{}, [@exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.458195255s ago: executing program 2 (id=1807): syz_emit_ethernet(0x52, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3f}, @local, {[], @mlv2_query={0x82, 0x0, 0x0, 0xd7ac, 0x3, @mcast2, 0x5, 0x1, 0x3, 0x5}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x4000084) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x1d, 0x1000, 0x4a}, 0x2c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x491, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000200), 0x4) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x6, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010024bd7087c6091eb4397a4d86fef711a34d6aa1f149f4fd2f8fdf46e721d6826f3ff4ad5dcf2c47a9d9b41b076105908f8e81c512631b62e7c3fb47629e4f838c7963f905cfff51b9826e655d1448b406db61a03ef55c5237fd5959019fd92db4506063265c4ce690", @ANYRES32=r14, @ANYBLOB="08009e0002100000"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x4, 'lc\x00', 0xb, 0x323b, 0x25}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0xc3, 0x12d5c, 0x12d5f}}, 0x44) 1.349467217s ago: executing program 1 (id=1808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x64, 0xb, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x50d9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}}}]}]}, 0x64}}, 0x4800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001"], 0x7c}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89fb, &(0x7f0000000900)={'veth0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r5, &(0x7f0000000480)={0x1d, r7}, 0x10) close(r5) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)={0x68, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x40000) 1.264526882s ago: executing program 3 (id=1809): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001740)="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", 0x2fa}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x82, 0xc, "3a047e2aae56e4b9eab8"}]}}}], 0x48}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xc08, 0x3, 0x398, 0xd8, 0x5002004a, 0x10030000, 0x0, 0xc203007a, 0x300, 0x3c8, 0x3c8, 0x300, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0xb8, 0xd8, 0x0, {0x0, 0x1200}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@ipv4=@dev, [], @ipv4=@private}, {@ipv4, [], @ipv4=@remote}, {@ipv6=@loopback, [], @ipv6=@mcast1}], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) (async) connect$pppoe(r3, 0x0, 0x0) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) (async) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) (async) listen(r5, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x1) (async) shutdown(r5, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async) ppoll(&(0x7f0000000080)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.166428906s ago: executing program 0 (id=1810): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000740)=0x4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x3, @mcast2}, 0x1c, 0x0}}], 0x1, 0x1) 1.054558155s ago: executing program 1 (id=1811): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280), 0xff0a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d80)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) 1.051501641s ago: executing program 0 (id=1812): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000240)={0x3a, 0x0, '\x00', [@pad1]}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r4 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r4, r0}) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)="0280cfa95e42223abf2f9b560ff8f7bef91c358dfe891b116f2698c0b57fed6e13972d79eae9cbd4d66351483f1731d9eebd7373ed2d88f127688678303fe9bca4a42c844ba75e04b608979301c918d8850c3cd7049e15b1e11510fe9670a51ca4240a8f8f7985f840931362252cc81a9653", 0x72}, {&(0x7f0000000380), 0x1100}, {0x0}], 0x3}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x130}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x9}]}]}, 0x2c}}, 0xc000) 675.689231ms ago: executing program 0 (id=1813): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)='g', 0x1}, {&(0x7f0000000240)="ed", 0x1}], 0x2}}], 0x1, 0x4010050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000005500e501000000000000000007000000ba"], 0x38}, 0x1, 0xf0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32=0x0, @ANYRESOCT=r7], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000003, @void, @value}, 0x94) 346.13915ms ago: executing program 0 (id=1814): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a03090000000000000000070000000900017f73797a306b09800000000000090a010400000000000000000a000000080003"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20008844) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x300, 0x2, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x2, 0xffff}, {0x1bc139cd7c71763b, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4014}, 0x20004000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000240)='syzkaller\x00', 0xfffffffa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1030000, 0x1000, 0x5, 0x4}, 0x20) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x6a040000) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000000)=@raw=[@generic={0x2, 0x2, 0x4, 0x9, 0x2a6}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x10000}, @jmp={0x5, 0x1, 0x5, 0x4, 0x5, 0x4, 0xfffffffffffffffc}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc6, &(0x7f0000000700)=""/198, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000016000000080000007f00000000100000", @ANYRES32, @ANYBLOB="000000000000000000000000000000b9d4450300000000006124e80b11f1ffea7a3f600da0d973a217a2afae8d7c15df5e3f632db450905c5a89b86168a067e747e515001c855b81061fb4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f0000000800)}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r6, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r7, 0x106, 0x1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a310000000060000000160a03000000000000000000020000000900010073797a31000000000900020073797a31000000002c000380080002400000000008000140000000001800038014000100776c616e3100000000000000000000000800074000000001"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 255.384863ms ago: executing program 3 (id=1815): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e80)=ANY=[@ANYBLOB="200000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000360de07b78544445a7f60a26bb1df5e2b951567eeadb92514ee22fcebb35dc676bedef1e1c0fb0b00b46cdbb4b4aca38995a40b6188d93597ae427dc8a4b8c3e8c3da3c84a3a259e57e83c5932dc"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000580)=ANY=[@ANYBLOB="ff00000000000800450000b00000000000119078000000006401010100001b59009c90780100000004000000fbb21a45d76f90027b0ef0c2e3cfc4ca9906c7112e27f27a2c086f6c9fe7827e52aa2145dd2002954f253c51856691c6dae33708d1ee94df87c4d56dc08f30c78ae1cd2bccbf060487bf39897cc11adbe98914bc40a34f8703586ff4225a999e345f0a3f58505296e5b5bd9197d3ccb7f2720f3e461e34919a13dcb55280d4da1a9c8fd8899e11b7775d3027000000000000"], 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@cgroup, 0xffffffffffffffff, 0x6, 0x6c, 0x0, @void, @void, @void, @value}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmmsg$sock(r1, &(0x7f00000084c0)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001540)="13766f6c28aedafe578ac5c670663368131ad657bb87c934e6043ff267b9c3aba84a098c5b3df44c19ae98c166f4da6d8c39c6edc5e66d1a2d2a2642133b20555ed103797ded9b7e4a02069b082a4d5e9a833fa05be7c1548d978c9f43f09548ecc394328166133a516e13a7bd8234aee2ea4bb647ed992b9f817d0d1e2322c4e99bc2c6353f3b44317f7f3bfd5c3bf022c05a4105e1acac9339d484dc4f4d4a04ec7adbc8eb4e0b0e714894701728bb16fe0cec4743569bf6058422141971b674797aeac5000293bf6c0ab1c6058d8cec3c7b0c99cf4e4c36f25ccdc197a8f9e54c4a", 0xe3}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x408c011) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="ba8b543587f656b3ef6376d10152477851923182f0aa3fae00"/39, @ANYRES64=0x0], 0x10) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={r6}, &(0x7f0000000140)=0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000340), &(0x7f00000003c0)=0x14) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000300)='batadv_slave_1\x00', 0x10) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x50, 0x0, 0x0, 0xe0000000}, 0x8000) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1816): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x1c0, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x1ad, 0x0, 0x0, 0x1, [@typed={0xc, 0x81, 0x0, 0x0, @u64=0x2}, @nested={0x126, 0x64, 0x0, 0x1, [@nested={0x8d, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @u32=0xb6ee}, @nested={0x4, 0x1d}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e", @nested={0x5d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f", @typed={0x8, 0x94, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x30}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b94825658"]}]}, 0x1c0}], 0x1}, 0x24000001) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000014000100000000fc025aab60b192fb00bd2feda413fe213b96953c334ff3eaa0ed62478ba99233901aba7caa707d186fde9a7a83e8677dcd75578f87c7fc57eefe9cb73ceb99d37a8db6a2176f215ec6820a8379260e028065905fbbbd26a5926608b988", @ANYRES32, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r4) recvmsg$can_j1939(r2, &(0x7f0000000380)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/80, 0x50}], 0x1, &(0x7f0000000280)=""/245, 0xf5}, 0x2040) kernel console output (not intermixed with test programs): 6][ T9422] bond10: entered allmulticast mode [ 239.431873][ T9422] 8021q: adding VLAN 0 to HW filter on device bond10 [ 239.695826][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'. [ 239.705560][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1030'. [ 239.950074][ T9443] wg1 speed is unknown, defaulting to 1000 [ 240.289895][ T9289] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 240.315220][ T9289] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.358319][ T9289] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.453362][ T9289] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.502022][ T9460] bond11: entered promiscuous mode [ 240.507343][ T5838] Bluetooth: hci1: command tx timeout [ 240.509868][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1040'. [ 240.515113][ T9460] bond11: entered allmulticast mode [ 240.537170][ T9460] 8021q: adding VLAN 0 to HW filter on device bond11 [ 240.722204][ T9463] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1040'. [ 240.734624][ T9289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.748560][ T9463] netlink: 'syz.1.1040': attribute type 2 has an invalid length. [ 240.756357][ T9289] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.778760][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.785992][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.803272][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.810490][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.913640][ T9475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1043'. [ 241.104311][ T9289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.417821][ T1557] hid (null): report_id 0 is invalid [ 241.426180][ T1557] hid (null): unknown global tag 0xd [ 241.432765][ T1557] hid-generic 0005:046D:0A0C.0008: report_id 0 is invalid [ 241.461392][ T1557] hid-generic 0005:046D:0A0C.0008: item 0 0 1 8 parsing failed [ 241.475374][ T9507] bond11: entered promiscuous mode [ 241.491693][ T1557] hid-generic 0005:046D:0A0C.0008: probe with driver hid-generic failed with error -22 [ 241.509151][ T9507] bond11: entered allmulticast mode [ 241.525418][ T9507] 8021q: adding VLAN 0 to HW filter on device bond11 [ 241.642565][ T9520] 8021q: VLANs not supported on nlmon0 [ 241.649927][ T9289] veth0_vlan: entered promiscuous mode [ 241.697865][ T9289] veth1_vlan: entered promiscuous mode [ 241.741333][ T9289] veth0_macvtap: entered promiscuous mode [ 241.758285][ T9289] veth1_macvtap: entered promiscuous mode [ 241.802656][ T9289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.893539][ T9532] bond0: (slave vxlan0): Releasing backup interface [ 241.911075][ T9525] netlink: 'syz.0.1056': attribute type 2 has an invalid length. [ 241.925060][ T9532] vxlan0: left allmulticast mode [ 241.932149][ T9532] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.941309][ T9532] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.949847][ T9532] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.958497][ T9532] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.982009][ T9289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.025319][ T9289] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.066141][ T9289] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.074966][ T9289] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.102073][ T9289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.277265][ T9550] wg1 speed is unknown, defaulting to 1000 [ 242.283019][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.288368][ T9553] netlink: 'syz.0.1067': attribute type 1 has an invalid length. [ 242.303244][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.346565][ T9553] bond8: entered promiscuous mode [ 242.351753][ T9553] bond8: entered allmulticast mode [ 242.387235][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.395648][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.495159][ T9561] bond9: entered promiscuous mode [ 242.501201][ T9561] bond9: entered allmulticast mode [ 242.507135][ T9561] 8021q: adding VLAN 0 to HW filter on device bond9 [ 242.576303][ T5838] Bluetooth: hci1: command 0x0419 tx timeout [ 243.049279][ T9577] bond0: (slave team0): Releasing backup interface [ 243.176548][ T9583] __nla_validate_parse: 12 callbacks suppressed [ 243.176566][ T9583] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1076'. [ 243.192907][ T9582] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1076'. [ 243.199548][ T9587] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1077'. [ 243.202678][ T9582] veth0_to_bond: entered promiscuous mode [ 243.226970][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 243.248403][ T9579] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1075'. [ 243.262403][ T9583] veth0_to_bond (unregistering): left promiscuous mode [ 243.299625][ T9579] netlink: 'syz.3.1075': attribute type 2 has an invalid length. [ 243.312583][ T9582] wg1 speed is unknown, defaulting to 1000 [ 243.468358][ T9592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1078'. [ 243.486220][ T9593] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1078'. [ 243.551079][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 243.560476][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'. [ 243.581378][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.601689][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 243.888766][ T9605] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 244.116900][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.203177][ T9621] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 244.219033][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.232979][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.248185][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.257563][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.265691][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 244.274548][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.341116][ T9622] wg1 speed is unknown, defaulting to 1000 [ 244.436423][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.443857][ T9627] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 244.474439][ T9629] bond12: entered promiscuous mode [ 244.482690][ T9629] bond12: entered allmulticast mode [ 244.488453][ T9629] 8021q: adding VLAN 0 to HW filter on device bond12 [ 244.499451][ T9632] FAULT_INJECTION: forcing a failure. [ 244.499451][ T9632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.523231][ T9632] CPU: 0 UID: 0 PID: 9632 Comm: syz.1.1091 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 244.523257][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.523267][ T9632] Call Trace: [ 244.523274][ T9632] [ 244.523281][ T9632] dump_stack_lvl+0x241/0x360 [ 244.523308][ T9632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.523326][ T9632] ? __pfx__printk+0x10/0x10 [ 244.523345][ T9632] ? __pfx_lock_release+0x10/0x10 [ 244.523374][ T9632] should_fail_ex+0x40a/0x550 [ 244.523402][ T9632] _copy_from_user+0x2d/0xb0 [ 244.523423][ T9632] move_addr_to_kernel+0x82/0x150 [ 244.523444][ T9632] __sys_sendto+0x268/0x4c0 [ 244.523472][ T9632] ? __pfx___sys_sendto+0x10/0x10 [ 244.523508][ T9632] ? __fget_files+0x2a/0x410 [ 244.523538][ T9632] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 244.523562][ T9632] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.523590][ T9632] __x64_sys_sendto+0xde/0x100 [ 244.523609][ T9632] do_syscall_64+0xf3/0x230 [ 244.523628][ T9632] ? clear_bhb_loop+0x35/0x90 [ 244.523652][ T9632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.523672][ T9632] RIP: 0033:0x7f5b6338d169 [ 244.523688][ T9632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.523702][ T9632] RSP: 002b:00007f5b64196038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 244.523720][ T9632] RAX: ffffffffffffffda RBX: 00007f5b635a5fa0 RCX: 00007f5b6338d169 [ 244.523733][ T9632] RDX: 000000000000d888 RSI: 0000400000000180 RDI: 0000000000000005 [ 244.523743][ T9632] RBP: 00007f5b64196090 R08: 0000400000000140 R09: 0000000000000014 [ 244.523753][ T9632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.523764][ T9632] R13: 0000000000000000 R14: 00007f5b635a5fa0 R15: 00007ffc5beeac98 [ 244.523790][ T9632] [ 244.552221][ T9633] 8021q: adding VLAN 0 to HW filter on device bond13 [ 244.717840][ T9633] bond12: (slave bond13): making interface the new active one [ 244.726212][ T9633] bond12: (slave bond13): Enslaving as an active interface with an up link [ 244.770157][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.921901][ T9639] netlink: 'syz.1.1092': attribute type 2 has an invalid length. [ 245.040815][ T11] bridge_slave_1: left allmulticast mode [ 245.055422][ T11] bridge_slave_1: left promiscuous mode [ 245.082942][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.164651][ T11] bridge_slave_0: left allmulticast mode [ 245.186024][ T11] bridge_slave_0: left promiscuous mode [ 245.191785][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.700046][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.711511][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.721843][ T11] bond0 (unregistering): Released all slaves [ 245.754122][ T9680] bond14: entered promiscuous mode [ 245.759559][ T9680] bond14: entered allmulticast mode [ 245.765249][ T9680] 8021q: adding VLAN 0 to HW filter on device bond14 [ 245.829570][ T9690] FAULT_INJECTION: forcing a failure. [ 245.829570][ T9690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.843422][ T9690] CPU: 1 UID: 0 PID: 9690 Comm: syz.3.1106 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 245.843447][ T9690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.843457][ T9690] Call Trace: [ 245.843464][ T9690] [ 245.843472][ T9690] dump_stack_lvl+0x241/0x360 [ 245.843497][ T9690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.843515][ T9690] ? __pfx__printk+0x10/0x10 [ 245.843537][ T9690] ? snprintf+0xda/0x120 [ 245.843562][ T9690] should_fail_ex+0x40a/0x550 [ 245.843590][ T9690] _copy_to_user+0x31/0xb0 [ 245.843612][ T9690] simple_read_from_buffer+0xca/0x150 [ 245.843638][ T9690] proc_fail_nth_read+0x1e9/0x250 [ 245.843661][ T9690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.843685][ T9690] ? rw_verify_area+0x243/0x630 [ 245.843701][ T9690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.843724][ T9690] vfs_read+0x1f8/0xb40 [ 245.843741][ T9690] ? fdget_pos+0x254/0x320 [ 245.843763][ T9690] ? __pfx___mutex_lock+0x10/0x10 [ 245.843783][ T9690] ? __pfx_vfs_read+0x10/0x10 [ 245.843803][ T9690] ? __fget_files+0x2a/0x410 [ 245.843826][ T9690] ? __fget_files+0x395/0x410 [ 245.843845][ T9690] ? __fget_files+0x2a/0x410 [ 245.843875][ T9690] ksys_read+0x18f/0x2b0 [ 245.843893][ T9690] ? __pfx_ksys_read+0x10/0x10 [ 245.843911][ T9690] ? do_syscall_64+0x100/0x230 [ 245.843933][ T9690] ? do_syscall_64+0xb6/0x230 [ 245.843954][ T9690] do_syscall_64+0xf3/0x230 [ 245.843973][ T9690] ? clear_bhb_loop+0x35/0x90 [ 245.844008][ T9690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.844028][ T9690] RIP: 0033:0x7fb21918bb7c [ 245.844044][ T9690] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 245.844058][ T9690] RSP: 002b:00007fb219f16030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.844076][ T9690] RAX: ffffffffffffffda RBX: 00007fb2193a5fa0 RCX: 00007fb21918bb7c [ 245.844089][ T9690] RDX: 000000000000000f RSI: 00007fb219f160a0 RDI: 0000000000000006 [ 245.844099][ T9690] RBP: 00007fb219f16090 R08: 0000000000000000 R09: 0000000000000014 [ 245.844110][ T9690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.844120][ T9690] R13: 0000000000000000 R14: 00007fb2193a5fa0 R15: 00007ffe6afdee58 [ 245.844149][ T9690] [ 245.861099][ T9622] chnl_net:caif_netlink_parms(): no params data found [ 246.149466][ T9692] netlink: 'syz.0.1107': attribute type 1 has an invalid length. [ 246.213950][ T9692] 8021q: adding VLAN 0 to HW filter on device bond10 [ 246.270489][ T9698] 8021q: adding VLAN 0 to HW filter on device bond10 [ 246.277632][ T9698] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 246.292081][ T9698] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 246.346341][ T5838] Bluetooth: hci1: command tx timeout [ 246.376477][ T9694] netlink: 'syz.3.1108': attribute type 2 has an invalid length. [ 246.462985][ T9622] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.473437][ T9622] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.481170][ T9622] bridge_slave_0: entered allmulticast mode [ 246.488563][ T9622] bridge_slave_0: entered promiscuous mode [ 246.523120][ T11] hsr_slave_0: left promiscuous mode [ 246.529434][ T11] hsr_slave_1: left promiscuous mode [ 246.535409][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.553243][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.562773][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.575548][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.632049][ T11] veth1_macvtap: left promiscuous mode [ 246.637786][ T11] veth0_macvtap: left promiscuous mode [ 246.651207][ T11] veth1_vlan: left promiscuous mode [ 246.659201][ T11] veth0_vlan: left promiscuous mode [ 246.979212][ T9726] netlink: 'syz.1.1114': attribute type 3 has an invalid length. [ 247.224366][ T11] team0 (unregistering): Port device team_slave_1 removed [ 247.269749][ T11] team0 (unregistering): Port device team_slave_0 removed [ 247.713168][ T9622] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.720630][ T9622] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.728083][ T9622] bridge_slave_1: entered allmulticast mode [ 247.735931][ T9622] bridge_slave_1: entered promiscuous mode [ 247.945282][ T9622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.965301][ T9733] bond12: (slave bond13): Releasing backup interface [ 248.035291][ T9622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.179496][ T9622] team0: Port device team_slave_0 added [ 248.216817][ T9745] bond13: entered promiscuous mode [ 248.224452][ T9745] bond13: entered allmulticast mode [ 248.231847][ T9745] 8021q: adding VLAN 0 to HW filter on device bond13 [ 248.244786][ T9622] team0: Port device team_slave_1 added [ 248.251355][ T9741] wg1 speed is unknown, defaulting to 1000 [ 248.335194][ T9622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.344782][ T9622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.350462][ T9748] __nla_validate_parse: 15 callbacks suppressed [ 248.350480][ T9748] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1122'. [ 248.371163][ T9622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.401763][ T9753] netlink: 'syz.2.1122': attribute type 2 has an invalid length. [ 248.416160][ T5838] Bluetooth: hci1: command tx timeout [ 248.433361][ T9622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.452879][ T9622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.479482][ T9622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.543109][ T9622] hsr_slave_0: entered promiscuous mode [ 248.549656][ T9622] hsr_slave_1: entered promiscuous mode [ 248.555817][ T9622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.566369][ T9622] Cannot create hsr debugfs directory [ 248.597965][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 248.618153][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 248.742558][ T9770] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1127'. [ 249.141431][ T9783] netlink: 'syz.0.1130': attribute type 7 has an invalid length. [ 249.230597][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1131'. [ 249.397840][ T9794] bond11: entered promiscuous mode [ 249.403020][ T9794] bond11: entered allmulticast mode [ 249.413294][ T9794] 8021q: adding VLAN 0 to HW filter on device bond11 [ 249.455135][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1136'. [ 249.513803][ T9804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 249.523152][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 249.536909][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 249.643293][ T9807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1137'. [ 249.721766][ T9622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.741784][ T9622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.761329][ T9622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.789067][ T9800] netlink: 'syz.3.1136': attribute type 2 has an invalid length. [ 249.789102][ T9622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 249.960192][ T9825] netlink: 'syz.3.1143': attribute type 1 has an invalid length. [ 249.982232][ T9825] netlink: 'syz.3.1143': attribute type 1 has an invalid length. [ 250.014198][ T9622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.194158][ T9622] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.239115][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.246301][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.273968][ T9835] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 250.281448][ T9835] batman_adv: batadv0: Removing interface: ip6gretap1 [ 250.300545][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.307735][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.319944][ T9831] dummy0: entered promiscuous mode [ 250.330082][ T9835] vlan2: entered allmulticast mode [ 250.338886][ T9830] dummy0: left promiscuous mode [ 250.501352][ T5838] Bluetooth: hci1: command tx timeout [ 250.539951][ T9843] bond12: entered promiscuous mode [ 250.545245][ T9843] bond12: entered allmulticast mode [ 250.551040][ T9843] 8021q: adding VLAN 0 to HW filter on device bond12 [ 250.632780][ T9847] pimreg: entered allmulticast mode [ 250.659793][ T9622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.687192][ T9846] pimreg: left allmulticast mode [ 250.922254][ T9865] xt_l2tp: invalid flags combination: c [ 251.070226][ T9622] veth0_vlan: entered promiscuous mode [ 251.082361][ T9622] veth1_vlan: entered promiscuous mode [ 251.132542][ T9622] veth0_macvtap: entered promiscuous mode [ 251.154755][ T9622] veth1_macvtap: entered promiscuous mode [ 251.155017][ T9882] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 251.198659][ T9869] netlink: 'syz.3.1154': attribute type 2 has an invalid length. [ 251.259797][ T9622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.352619][ T9622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.378959][ T9622] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.392478][ T9622] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.404662][ T9622] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.421601][ T9622] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.459521][ T9894] bond14: entered promiscuous mode [ 251.470829][ T9894] bond14: entered allmulticast mode [ 251.477258][ T9894] 8021q: adding VLAN 0 to HW filter on device bond14 [ 251.603110][ T9903] syz_tun: left promiscuous mode [ 251.616966][ T9903] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 251.624821][ T9903] vlan2: left allmulticast mode [ 251.630264][ T9903] bond1: left promiscuous mode [ 251.635224][ T9903] bond1: left allmulticast mode [ 251.640783][ T9903] bond2: left promiscuous mode [ 251.645738][ T9903] bond2: left allmulticast mode [ 251.650956][ T9903] bond3: left promiscuous mode [ 251.655895][ T9903] bond3: left allmulticast mode [ 251.661751][ T9903] bond4: left promiscuous mode [ 251.667244][ T9903] bond4: left allmulticast mode [ 251.672634][ T9903] bond5: left promiscuous mode [ 251.678499][ T9903] bond5: left allmulticast mode [ 251.683908][ T9903] bond7: left promiscuous mode [ 251.689131][ T9903] bond7: left allmulticast mode [ 251.695434][ T9903] bond8: left promiscuous mode [ 251.700567][ T9903] bond8: left allmulticast mode [ 251.720471][ T9903] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.734826][ T9903] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.744184][ T9903] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.753847][ T9903] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.764085][ T9903] geneve2: left allmulticast mode [ 251.781193][ T9903] bond9: left promiscuous mode [ 251.786094][ T9903] bond9: left allmulticast mode [ 251.795693][ T9903] bond10: left promiscuous mode [ 251.801923][ T9903] bond10: left allmulticast mode [ 251.813436][ T9903] bond11: left promiscuous mode [ 251.818616][ T9903] bond11: left allmulticast mode [ 251.832943][ T9903] bond14: left promiscuous mode [ 251.839011][ T9903] bond14: left allmulticast mode [ 251.929230][ T9910] syzkaller0: entered promiscuous mode [ 251.935438][ T9910] syzkaller0: entered allmulticast mode [ 251.952210][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.965795][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.578296][ T5838] Bluetooth: hci1: command tx timeout [ 252.622609][ T9934] netlink: 'syz.3.1171': attribute type 2 has an invalid length. [ 253.948800][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.957189][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.121618][ T9945] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 254.253716][ T9953] __nla_validate_parse: 12 callbacks suppressed [ 254.253736][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1176'. [ 254.261085][ T9948] bond14: entered promiscuous mode [ 254.269852][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 254.281926][ T9948] bond14: entered allmulticast mode [ 254.301006][ T9948] 8021q: adding VLAN 0 to HW filter on device bond14 [ 254.348394][ T9957] netlink: 'syz.1.1177': attribute type 9 has an invalid length. [ 254.363934][ T9957] netlink: 'syz.1.1177': attribute type 9 has an invalid length. [ 254.418207][ T9960] netlink: 'syz.2.1179': attribute type 1 has an invalid length. [ 254.426568][ T9960] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1179'. [ 254.512052][ T9964] netlink: 'syz.3.1181': attribute type 1 has an invalid length. [ 254.532989][ T9964] netlink: 'syz.3.1181': attribute type 1 has an invalid length. [ 254.690734][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1185'. [ 254.888300][ T9978] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1185'. [ 254.898216][ T9978] netlink: 'syz.3.1185': attribute type 2 has an invalid length. [ 254.987547][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.087475][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.193571][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.433538][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.510560][ T52] bridge_slave_1: left allmulticast mode [ 255.517793][ T52] bridge_slave_1: left promiscuous mode [ 255.523530][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.582003][ T52] bridge_slave_0: left allmulticast mode [ 255.604004][ T52] bridge_slave_0: left promiscuous mode [ 255.632409][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.670486][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1190'. [ 255.684783][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 255.977422][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.990090][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.005444][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.020876][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.028922][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.039499][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.050656][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 256.061846][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.212019][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.224256][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.234692][ T52] bond0 (unregistering): Released all slaves [ 256.251729][ T9993] vlan2: entered allmulticast mode [ 256.310299][T10001] wg1 speed is unknown, defaulting to 1000 [ 256.412619][T10004] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 256.461927][T10009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1194'. [ 256.504200][T10004] bond15: entered promiscuous mode [ 256.515086][T10004] bond15: entered allmulticast mode [ 256.525863][T10004] 8021q: adding VLAN 0 to HW filter on device bond15 [ 256.706905][ T52] hsr_slave_0: left promiscuous mode [ 256.720079][ T52] hsr_slave_1: left promiscuous mode [ 256.729513][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.737062][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.744782][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.752568][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.785313][ T52] veth1_macvtap: left promiscuous mode [ 256.791205][ T52] veth0_macvtap: left promiscuous mode [ 256.797128][ T52] veth1_vlan: left promiscuous mode [ 256.802490][ T52] veth0_vlan: left promiscuous mode [ 257.275215][ T52] team0 (unregistering): Port device team_slave_1 removed [ 257.326668][ T52] team0 (unregistering): Port device team_slave_0 removed [ 257.937033][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1200'. [ 258.097447][ T5838] Bluetooth: hci1: command tx timeout [ 258.130588][T10001] chnl_net:caif_netlink_parms(): no params data found [ 258.150816][T10045] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1200'. [ 258.167898][T10045] netlink: 'syz.1.1200': attribute type 2 has an invalid length. [ 258.246838][T10063] netlink: 'syz.3.1202': attribute type 21 has an invalid length. [ 258.496491][T10001] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.515017][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.540717][T10001] bridge_slave_0: entered allmulticast mode [ 258.551545][T10001] bridge_slave_0: entered promiscuous mode [ 258.576691][T10001] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.594114][T10001] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.616756][T10001] bridge_slave_1: entered allmulticast mode [ 258.642787][T10001] bridge_slave_1: entered promiscuous mode [ 258.757071][T10083] bond15: entered promiscuous mode [ 258.762257][T10083] bond15: entered allmulticast mode [ 258.797408][T10083] 8021q: adding VLAN 0 to HW filter on device bond15 [ 258.828926][T10001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.848399][T10001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.865402][T10094] netlink: 'syz.2.1210': attribute type 13 has an invalid length. [ 258.890530][T10001] team0: Port device team_slave_0 added [ 258.901407][T10001] team0: Port device team_slave_1 added [ 258.956115][T10001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.987083][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.052397][T10001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.092959][T10001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.108051][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.147498][T10001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.262949][T10112] __nla_validate_parse: 6 callbacks suppressed [ 259.262967][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1214'. [ 259.309164][T10001] hsr_slave_0: entered promiscuous mode [ 259.328438][T10001] hsr_slave_1: entered promiscuous mode [ 259.349654][T10001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.371165][T10001] Cannot create hsr debugfs directory [ 259.455554][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1217'. [ 259.472291][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1217'. [ 259.514465][T10112] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1214'. [ 259.565200][T10118] netlink: 'syz.2.1214': attribute type 2 has an invalid length. [ 259.729767][T10138] netlink: 'syz.3.1218': attribute type 1 has an invalid length. [ 259.763012][T10138] netlink: 'syz.3.1218': attribute type 1 has an invalid length. [ 259.788970][T10138] netlink: 'syz.3.1218': attribute type 1 has an invalid length. [ 259.807857][T10138] netlink: 'syz.3.1218': attribute type 1 has an invalid length. [ 259.821808][T10138] netlink: 'syz.3.1218': attribute type 1 has an invalid length. [ 259.830830][T10138] netlink: 'syz.3.1218': attribute type 1 has an invalid length. [ 259.860105][T10138] netlink: 'syz.3.1218': attribute type 1 has an invalid length. [ 259.870277][T10138] netlink: 'syz.3.1218': attribute type 1 has an invalid length. [ 259.898737][T10138] netlink: 'syz.3.1218': attribute type 1 has an invalid length. [ 259.915161][T10144] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1220'. [ 260.051725][T10150] bond16: entered promiscuous mode [ 260.057173][T10150] bond16: entered allmulticast mode [ 260.063708][T10150] 8021q: adding VLAN 0 to HW filter on device bond16 [ 260.071328][T10001] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 260.082894][T10001] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 260.096701][T10001] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 260.146174][T10001] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 260.177143][ T5852] Bluetooth: hci1: command tx timeout [ 260.285428][T10001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.341042][T10001] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.370717][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.377915][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.407661][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.414938][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.430725][T10166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1227'. [ 260.458609][T10160] wg1 speed is unknown, defaulting to 1000 [ 260.530814][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1229'. [ 260.561284][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1230'. [ 260.572429][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'. [ 260.753462][T10170] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1230'. [ 261.051688][T10191] bond13: entered promiscuous mode [ 261.058123][T10191] bond13: entered allmulticast mode [ 261.063774][T10191] 8021q: adding VLAN 0 to HW filter on device bond13 [ 261.107197][T10001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.401419][T10204] wg1 speed is unknown, defaulting to 1000 [ 261.686482][T10001] veth0_vlan: entered promiscuous mode [ 261.723005][T10001] veth1_vlan: entered promiscuous mode [ 261.836438][T10001] veth0_macvtap: entered promiscuous mode [ 261.844360][T10001] veth1_macvtap: entered promiscuous mode [ 261.952590][T10001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.003438][T10001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.041113][T10225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.041835][T10001] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.068749][T10225] xt_hashlimit: overflow, try lower: 0/0 [ 262.105094][T10001] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.126108][T10001] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.134851][T10001] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.256163][ T5852] Bluetooth: hci1: command 0x040f tx timeout [ 262.402212][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.434460][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.506094][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.520303][T10237] macvlan3: entered promiscuous mode [ 262.525729][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.551567][T10237] bond0: entered promiscuous mode [ 262.577004][T10237] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 262.669763][T10243] bond14: entered promiscuous mode [ 262.675205][T10243] bond14: entered allmulticast mode [ 262.709492][T10243] 8021q: adding VLAN 0 to HW filter on device bond14 [ 262.920866][T10261] 8021q: adding VLAN 0 to HW filter on device bond16 [ 262.947634][T10261] bond16: (slave ip6gretap2): making interface the new active one [ 262.957168][T10261] bond16: (slave ip6gretap2): Enslaving as an active interface with an up link [ 263.827918][T10261] vlan3: entered promiscuous mode [ 263.833130][T10261] bond16: entered promiscuous mode [ 263.839276][T10261] ip6gretap2: entered promiscuous mode [ 263.845071][T10261] vlan3: entered allmulticast mode [ 263.850662][T10261] bond16: entered allmulticast mode [ 263.857014][T10261] ip6gretap2: entered allmulticast mode [ 264.096803][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.635115][T10282] __nla_validate_parse: 10 callbacks suppressed [ 264.635136][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 264.769706][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.909550][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.958973][T10282] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1260'. [ 264.962478][T10302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1265'. [ 264.989759][T10282] validate_nla: 59 callbacks suppressed [ 264.989778][T10282] netlink: 'syz.1.1260': attribute type 2 has an invalid length. [ 265.123654][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 265.135445][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 265.148138][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 265.158344][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 265.166158][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 265.173584][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 265.184745][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.207669][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1267'. [ 265.217351][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 265.277075][T10318] bond17: entered promiscuous mode [ 265.282667][T10318] bond17: entered allmulticast mode [ 265.289042][T10318] 8021q: adding VLAN 0 to HW filter on device bond17 [ 265.296976][T10309] wg1 speed is unknown, defaulting to 1000 [ 265.474164][ T12] bridge_slave_1: left allmulticast mode [ 265.482444][ T12] bridge_slave_1: left promiscuous mode [ 265.489504][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.499603][ T12] bridge_slave_0: left allmulticast mode [ 265.505270][ T12] bridge_slave_0: left promiscuous mode [ 265.511876][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.897422][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.908539][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.919011][ T12] bond0 (unregistering): Released all slaves [ 265.955133][T10330] vlan2: entered allmulticast mode [ 266.134241][T10335] netlink: 2602 bytes leftover after parsing attributes in process `syz.2.1274'. [ 266.149394][T10309] chnl_net:caif_netlink_parms(): no params data found [ 266.156486][T10335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.358347][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1279'. [ 266.371814][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 266.383625][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1278'. [ 266.394403][T10352] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1278'. [ 266.513808][ T12] hsr_slave_0: left promiscuous mode [ 266.528832][ T12] hsr_slave_1: left promiscuous mode [ 266.534905][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.542571][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.550816][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.558471][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.585356][T10364] netlink: 'syz.2.1282': attribute type 39 has an invalid length. [ 266.602843][ T12] veth1_macvtap: left promiscuous mode [ 266.608595][ T12] veth0_macvtap: left promiscuous mode [ 266.614414][ T12] veth1_vlan: left promiscuous mode [ 266.620003][ T12] veth0_vlan: left promiscuous mode [ 266.622240][T10358] netlink: 'syz.1.1279': attribute type 2 has an invalid length. [ 267.094600][ T12] team0 (unregistering): Port device team_slave_1 removed [ 267.162940][ T12] team0 (unregistering): Port device team_slave_0 removed [ 267.300395][ T5852] Bluetooth: hci1: command tx timeout [ 267.642398][T10309] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.651668][T10309] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.659519][T10309] bridge_slave_0: entered allmulticast mode [ 267.669718][T10309] bridge_slave_0: entered promiscuous mode [ 267.720064][T10366] gretap0: entered promiscuous mode [ 267.742231][T10309] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.754088][T10309] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.776487][T10309] bridge_slave_1: entered allmulticast mode [ 267.783771][T10309] bridge_slave_1: entered promiscuous mode [ 267.909878][T10309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.934187][ T25] hid (null): report_id 0 is invalid [ 267.943674][T10309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.946090][ T25] hid (null): unknown global tag 0xd [ 267.960031][ T25] hid-generic 0005:046D:0A0C.0009: report_id 0 is invalid [ 267.967362][ T25] hid-generic 0005:046D:0A0C.0009: item 0 0 1 8 parsing failed [ 267.976634][ T25] hid-generic 0005:046D:0A0C.0009: probe with driver hid-generic failed with error -22 [ 268.076419][T10382] bond15: entered promiscuous mode [ 268.081591][T10382] bond15: entered allmulticast mode [ 268.087226][T10382] 8021q: adding VLAN 0 to HW filter on device bond15 [ 268.137104][T10309] team0: Port device team_slave_0 added [ 268.176992][T10309] team0: Port device team_slave_1 added [ 268.263981][T10309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.279867][T10309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.327801][T10393] IPVS: Scheduler module ip_vs_sip not found [ 268.366368][T10309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.406692][T10309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.413673][T10309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.461717][T10309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.619106][T10309] hsr_slave_0: entered promiscuous mode [ 268.635835][T10309] hsr_slave_1: entered promiscuous mode [ 268.642779][T10309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.652271][T10309] Cannot create hsr debugfs directory [ 268.728195][T10415] wg1 speed is unknown, defaulting to 1000 [ 268.815157][T10410] netlink: 'syz.0.1296': attribute type 2 has an invalid length. [ 269.165036][T10425] vlan2: entered allmulticast mode [ 269.285439][T10309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 269.299025][T10309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 269.319676][T10309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 269.339137][T10309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 269.387273][ T5852] Bluetooth: hci1: command tx timeout [ 269.414692][T10431] bond18: entered promiscuous mode [ 269.420110][T10431] bond18: entered allmulticast mode [ 269.425914][T10431] 8021q: adding VLAN 0 to HW filter on device bond18 [ 269.575680][T10309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.658188][T10309] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.684821][T10444] __nla_validate_parse: 11 callbacks suppressed [ 269.684841][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1306'. [ 269.689361][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.707225][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.710826][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1309'. [ 269.736377][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.743495][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.743770][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 269.953954][T10446] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1309'. [ 269.964893][T10446] netlink: 'syz.0.1309': attribute type 2 has an invalid length. [ 269.973232][T10460] bridge0: port 1(veth0_to_bridge) entered blocking state [ 269.988773][T10460] bridge0: port 1(veth0_to_bridge) entered disabled state [ 269.997008][T10460] veth0_to_bridge: entered allmulticast mode [ 270.004521][T10460] veth0_to_bridge: entered promiscuous mode [ 270.011727][T10460] bridge0: port 1(veth0_to_bridge) entered blocking state [ 270.019097][T10460] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 270.115324][ T5916] IPVS: starting estimator thread 0... [ 270.170602][T10309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.216090][T10468] IPVS: using max 28 ests per chain, 67200 per kthread [ 270.328833][T10477] bond15: entered promiscuous mode [ 270.333998][T10477] bond15: entered allmulticast mode [ 270.340411][T10477] 8021q: adding VLAN 0 to HW filter on device bond15 [ 270.363066][T10480] veth0_to_bridge: left allmulticast mode [ 270.377192][T10480] veth0_to_bridge: left promiscuous mode [ 270.387723][T10480] bridge0: port 1(veth0_to_bridge) entered disabled state [ 270.412403][T10480] bond16: (slave ip6gretap2): Releasing active interface [ 270.421631][T10480] ip6gretap2: left promiscuous mode [ 270.431666][T10480] ip6gretap2: left allmulticast mode [ 270.591289][T10494] team0: Cannot enslave team device to itself [ 270.715314][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'. [ 270.724931][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'. [ 270.735347][T10309] veth0_vlan: entered promiscuous mode [ 270.755933][T10309] veth1_vlan: entered promiscuous mode [ 270.822327][T10309] veth0_macvtap: entered promiscuous mode [ 270.834752][T10309] veth1_macvtap: entered promiscuous mode [ 270.862730][T10309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.892677][T10309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.920820][T10309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.940507][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'. [ 270.956146][T10309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.965718][T10309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.982082][T10309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.012018][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 271.085695][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.116142][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.153988][T10507] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1324'. [ 271.175154][T10507] netlink: 'syz.2.1324': attribute type 2 has an invalid length. [ 271.176850][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.210454][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.348075][T10520] bond17: entered promiscuous mode [ 271.368150][T10520] bond17: entered allmulticast mode [ 271.400184][T10520] 8021q: adding VLAN 0 to HW filter on device bond17 [ 271.467643][ T5852] Bluetooth: hci1: command tx timeout [ 271.640252][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1334'. [ 272.062756][T10553] netlink: 'syz.0.1342': attribute type 2 has an invalid length. [ 272.116521][ T5831] hid (null): report_id 0 is invalid [ 272.123316][ T5831] hid (null): unknown global tag 0xd [ 272.130770][ T5831] hid-generic 0005:046D:0A0C.000A: report_id 0 is invalid [ 272.138539][ T5831] hid-generic 0005:046D:0A0C.000A: item 0 0 1 8 parsing failed [ 272.146837][ T5831] hid-generic 0005:046D:0A0C.000A: probe with driver hid-generic failed with error -22 [ 272.174584][T10565] bond19: entered promiscuous mode [ 272.197002][T10565] bond19: entered allmulticast mode [ 272.210677][T10565] 8021q: adding VLAN 0 to HW filter on device bond19 [ 272.249518][T10573] netlink: 'syz.3.1347': attribute type 4 has an invalid length. [ 272.274420][T10569] can: request_module (can-proto-5) failed. [ 272.301130][T10569] bridge0: port 1(batadv1) entered blocking state [ 272.310511][T10569] bridge0: port 1(batadv1) entered disabled state [ 272.325302][T10569] batadv1: entered allmulticast mode [ 272.341525][T10569] batadv1: entered promiscuous mode [ 272.356405][T10574] netlink: 'syz.0.1346': attribute type 21 has an invalid length. [ 272.414556][T10578] wg1 speed is unknown, defaulting to 1000 [ 272.534749][T10592] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 272.710864][ T2943] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.811451][ T52] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 272.821198][ T52] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 273.193820][ T2943] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.497372][T10597] wg1 speed is unknown, defaulting to 1000 [ 273.705469][ T2943] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.739294][T10609] netlink: 'syz.3.1356': attribute type 2 has an invalid length. [ 273.938020][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.950496][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.959563][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.967564][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.975248][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 273.982997][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.069030][ T2943] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.158454][T10628] bond16: entered promiscuous mode [ 274.163641][T10628] bond16: entered allmulticast mode [ 274.171092][T10628] 8021q: adding VLAN 0 to HW filter on device bond16 [ 274.194141][T10624] wg1 speed is unknown, defaulting to 1000 [ 274.332230][T10624] chnl_net:caif_netlink_parms(): no params data found [ 274.613579][ T2943] bridge_slave_1: left allmulticast mode [ 274.626024][ T2943] bridge_slave_1: left promiscuous mode [ 274.631760][ T2943] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.655628][ T2943] bridge_slave_0: left allmulticast mode [ 274.662107][ T2943] bridge_slave_0: left promiscuous mode [ 274.668141][ T2943] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.781122][T10654] __nla_validate_parse: 17 callbacks suppressed [ 274.781141][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'. [ 274.913780][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1369'. [ 275.104783][T10659] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1369'. [ 275.163322][T10660] netlink: 'syz.3.1369': attribute type 2 has an invalid length. [ 275.253248][ T2943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.264780][ T2943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.276746][ T2943] bond0 (unregistering): Released all slaves [ 275.309906][T10652] macvlan1: entered promiscuous mode [ 275.497901][T10654] macvlan1 (unregistering): left promiscuous mode [ 275.556670][T10624] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.574212][T10624] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.594599][T10624] bridge_slave_0: entered allmulticast mode [ 275.612583][T10624] bridge_slave_0: entered promiscuous mode [ 275.633726][T10624] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.645051][T10624] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.688537][T10624] bridge_slave_1: entered allmulticast mode [ 275.736325][T10624] bridge_slave_1: entered promiscuous mode [ 275.747786][T10672] vlan3: entered promiscuous mode [ 275.850518][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1376'. [ 275.865931][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 275.899929][T10676] bond20: entered promiscuous mode [ 275.905084][T10676] bond20: entered allmulticast mode [ 275.915568][T10676] 8021q: adding VLAN 0 to HW filter on device bond20 [ 275.957933][T10624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.979635][T10624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.096552][ T5838] Bluetooth: hci1: command tx timeout [ 276.187878][T10624] team0: Port device team_slave_0 added [ 276.211173][T10689] syzkaller0: entered allmulticast mode [ 276.283276][ T2943] hsr_slave_0: left promiscuous mode [ 276.306079][ T2943] hsr_slave_1: left promiscuous mode [ 276.317390][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.324924][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.333730][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.345790][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.433844][ T2943] veth1_macvtap: left promiscuous mode [ 276.448116][ T2943] veth0_macvtap: left promiscuous mode [ 276.453767][ T2943] veth1_vlan: left promiscuous mode [ 276.466183][ T2943] veth0_vlan: left promiscuous mode [ 276.502426][T10706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1383'. [ 276.700699][T10706] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1383'. [ 276.753755][T10707] netlink: 'syz.2.1383': attribute type 2 has an invalid length. [ 276.799419][T10723] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.1387'. [ 276.811097][T10723] openvswitch: netlink: Message has 8 unknown bytes. [ 277.200273][ T2943] team0 (unregistering): Port device team_slave_1 removed [ 277.250321][ T2943] team0 (unregistering): Port device team_slave_0 removed [ 277.721858][T10624] team0: Port device team_slave_1 added [ 277.798803][T10725] bond21: entered promiscuous mode [ 277.803986][T10725] bond21: entered allmulticast mode [ 277.810755][T10725] 8021q: adding VLAN 0 to HW filter on device bond21 [ 277.811508][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1390'. [ 277.842389][T10727] batadv1: left allmulticast mode [ 277.856325][T10727] batadv1: left promiscuous mode [ 277.862558][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1390'. [ 277.871972][T10727] bridge0: port 1(batadv1) entered disabled state [ 277.900828][T10729] vlan0: entered allmulticast mode [ 278.049771][T10624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.066535][T10624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.108939][T10624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.131061][T10747] FAULT_INJECTION: forcing a failure. [ 278.131061][T10747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.155268][T10747] CPU: 0 UID: 0 PID: 10747 Comm: syz.1.1395 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 278.155296][T10747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 278.155305][T10747] Call Trace: [ 278.155311][T10747] [ 278.155317][T10747] dump_stack_lvl+0x241/0x360 [ 278.155341][T10747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.155357][T10747] ? __pfx__printk+0x10/0x10 [ 278.155373][T10747] ? __pfx_lock_release+0x10/0x10 [ 278.155392][T10747] ? __lock_acquire+0x1397/0x2100 [ 278.155416][T10747] should_fail_ex+0x40a/0x550 [ 278.155440][T10747] _copy_from_user+0x2d/0xb0 [ 278.155458][T10747] kstrtouint_from_user+0xc6/0x190 [ 278.155476][T10747] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 278.155494][T10747] ? __pfx_lock_acquire+0x10/0x10 [ 278.155521][T10747] proc_fail_nth_write+0xaa/0x2d0 [ 278.155540][T10747] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 278.155557][T10747] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 278.155580][T10747] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 278.155600][T10747] vfs_write+0x29f/0xd10 [ 278.155618][T10747] ? fdget_pos+0x254/0x320 [ 278.155635][T10747] ? __mutex_unlock_slowpath+0x227/0x800 [ 278.155655][T10747] ? __pfx_vfs_write+0x10/0x10 [ 278.155667][T10747] ? do_sys_openat2+0x17a/0x1d0 [ 278.155689][T10747] ? __fget_files+0x2a/0x410 [ 278.155709][T10747] ? __fget_files+0x395/0x410 [ 278.155729][T10747] ? __fget_files+0x2a/0x410 [ 278.155757][T10747] ksys_write+0x18f/0x2b0 [ 278.155775][T10747] ? __pfx_ksys_write+0x10/0x10 [ 278.155792][T10747] ? do_syscall_64+0x100/0x230 [ 278.155824][T10747] ? do_syscall_64+0xb6/0x230 [ 278.155844][T10747] do_syscall_64+0xf3/0x230 [ 278.155862][T10747] ? clear_bhb_loop+0x35/0x90 [ 278.155887][T10747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.155906][T10747] RIP: 0033:0x7f5b6338bc1f [ 278.155921][T10747] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 278.155934][T10747] RSP: 002b:00007f5b64196030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 278.155952][T10747] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b6338bc1f [ 278.155966][T10747] RDX: 0000000000000001 RSI: 00007f5b641960a0 RDI: 0000000000000003 [ 278.155975][T10747] RBP: 00007f5b64196090 R08: 0000000000000000 R09: 0000000000000000 [ 278.155984][T10747] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 278.155992][T10747] R13: 0000000000000000 R14: 00007f5b635a5fa0 R15: 00007ffc5beeac98 [ 278.156018][T10747] [ 278.180922][T10753] netlink: 'syz.3.1397': attribute type 21 has an invalid length. [ 278.184568][ T5838] Bluetooth: hci1: command tx timeout [ 278.272639][T10756] netlink: 'syz.3.1397': attribute type 5 has an invalid length. [ 278.429561][T10624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.439393][T10624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.476623][T10624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.711079][T10771] netlink: 'syz.0.1399': attribute type 10 has an invalid length. [ 278.730335][T10624] hsr_slave_0: entered promiscuous mode [ 278.737427][T10624] hsr_slave_1: entered promiscuous mode [ 278.743664][T10624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.753239][T10624] Cannot create hsr debugfs directory [ 278.765699][T10771] team0: Port device bridge0 added [ 278.954512][T10781] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 279.010126][T10775] netlink: 'syz.3.1401': attribute type 2 has an invalid length. [ 279.408734][T10787] netlink: 'syz.3.1405': attribute type 5 has an invalid length. [ 279.552275][T10624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.582851][T10624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.634976][T10791] bond16: entered promiscuous mode [ 279.641325][T10791] bond16: entered allmulticast mode [ 279.647334][T10794] netlink: 'syz.2.1408': attribute type 6 has an invalid length. [ 279.655189][T10794] nbd: must specify at least one socket [ 279.664203][T10791] 8021q: adding VLAN 0 to HW filter on device bond16 [ 279.708382][T10624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.758879][T10624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 280.017314][T10624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.024288][T10813] __nla_validate_parse: 10 callbacks suppressed [ 280.024306][T10813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1413'. [ 280.071527][T10624] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.123724][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.131867][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.155327][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.162539][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.205690][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1414'. [ 280.245918][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1416'. [ 280.284247][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1416'. [ 280.337052][ T5838] Bluetooth: hci1: command tx timeout [ 280.480415][T10819] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1414'. [ 280.494473][T10819] netlink: 'syz.2.1414': attribute type 2 has an invalid length. [ 280.560348][T10624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.591857][T10843] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1420'. [ 280.603830][T10843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1420'. [ 280.755820][ T25] hid (null): report_id 0 is invalid [ 280.761793][ T25] hid (null): unknown global tag 0xd [ 280.769596][ T25] hid-generic 0005:046D:0A0C.000B: report_id 0 is invalid [ 280.776980][ T25] hid-generic 0005:046D:0A0C.000B: item 0 0 1 8 parsing failed [ 280.785147][ T25] hid-generic 0005:046D:0A0C.000B: probe with driver hid-generic failed with error -22 [ 280.827590][T10854] bond17: entered promiscuous mode [ 280.832748][T10854] bond17: entered allmulticast mode [ 280.838477][T10854] 8021q: adding VLAN 0 to HW filter on device bond17 [ 280.975579][T10624] veth0_vlan: entered promiscuous mode [ 280.992378][T10624] veth1_vlan: entered promiscuous mode [ 281.041100][T10624] veth0_macvtap: entered promiscuous mode [ 281.051783][T10624] veth1_macvtap: entered promiscuous mode [ 281.075064][T10624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.119696][T10624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.143170][T10624] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.162454][T10624] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.162522][T10867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1426'. [ 281.172728][T10624] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.197632][T10624] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.223286][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 281.338252][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.356203][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.406336][T10872] netlink: 7084 bytes leftover after parsing attributes in process `syz.1.1428'. [ 281.413170][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.426481][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.741932][T10883] bond18: entered promiscuous mode [ 281.749606][T10883] bond18: entered allmulticast mode [ 281.755390][T10883] 8021q: adding VLAN 0 to HW filter on device bond18 [ 281.804515][T10893] team0: Port device bridge0 removed [ 281.889068][T10887] netlink: 'syz.3.1432': attribute type 2 has an invalid length. [ 281.903751][T10893] vlan0: entered allmulticast mode [ 282.151759][T10921] Set syz1 is full, maxelem 65536 reached [ 282.470577][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.476991][ T25] hid (null): report_id 0 is invalid [ 282.494496][ T25] hid (null): unknown global tag 0xd [ 282.507590][ T25] hid-generic 0005:046D:0A0C.000C: report_id 0 is invalid [ 282.524783][T10933] bond18: entered promiscuous mode [ 282.536332][ T25] hid-generic 0005:046D:0A0C.000C: item 0 0 1 8 parsing failed [ 282.544369][ T25] hid-generic 0005:046D:0A0C.000C: probe with driver hid-generic failed with error -22 [ 282.566606][T10933] bond18: entered allmulticast mode [ 282.572172][T10933] 8021q: adding VLAN 0 to HW filter on device bond18 [ 283.205097][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.617974][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.638786][T10942] netlink: 'syz.3.1451': attribute type 2 has an invalid length. [ 283.652677][T10953] wg1 speed is unknown, defaulting to 1000 [ 283.660016][T10954] vlan0: entered allmulticast mode [ 283.827883][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.844491][T10956] tipc: Enabled bearer , priority 0 [ 283.904045][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.912780][T10959] syzkaller0: entered promiscuous mode [ 283.920432][T10959] syzkaller0: entered allmulticast mode [ 283.921631][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.935288][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.947592][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.957692][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 283.965045][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.017490][T10956] tipc: Resetting bearer [ 284.055665][T10965] wg1 speed is unknown, defaulting to 1000 [ 284.076796][T10955] tipc: Resetting bearer [ 284.138976][T10955] tipc: Disabling bearer [ 284.243600][T10973] veth1_to_hsr: left allmulticast mode [ 284.331720][T10973] bond10: left promiscuous mode [ 284.344610][T10973] bond10: left allmulticast mode [ 284.358526][T10973] bond11: left promiscuous mode [ 284.363514][T10973] bond11: left allmulticast mode [ 284.377607][T10973] bond12: left promiscuous mode [ 284.382720][T10973] bond12: left allmulticast mode [ 284.396667][T10973] bond13: left promiscuous mode [ 284.402055][T10973] bond13: left allmulticast mode [ 284.415948][T10973] bond14: left promiscuous mode [ 284.430527][T10973] bond14: left allmulticast mode [ 284.450302][T10973] bond15: left promiscuous mode [ 284.455547][T10973] bond15: left allmulticast mode [ 284.474544][T10973] bond16: left promiscuous mode [ 284.485214][T10973] bond16: left allmulticast mode [ 284.504793][T10973] bond17: left promiscuous mode [ 284.510005][T10973] bond17: left allmulticast mode [ 284.522861][T10973] bond18: left promiscuous mode [ 284.528299][T10973] bond18: left allmulticast mode [ 284.653557][ T12] bridge_slave_1: left allmulticast mode [ 284.686185][ T12] bridge_slave_1: left promiscuous mode [ 284.691967][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.708069][ T12] bridge_slave_0: left allmulticast mode [ 284.713758][ T12] bridge_slave_0: left promiscuous mode [ 284.725214][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.205046][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.216145][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.226939][ T12] bond0 (unregistering): Released all slaves [ 285.253178][T10985] bond22: entered promiscuous mode [ 285.262492][T10985] bond22: entered allmulticast mode [ 285.268534][T10985] 8021q: adding VLAN 0 to HW filter on device bond22 [ 285.286582][T10995] __nla_validate_parse: 15 callbacks suppressed [ 285.286598][T10995] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1464'. [ 285.302392][T10995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1464'. [ 285.311645][T10995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1464'. [ 285.320848][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'. [ 285.451971][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'. [ 285.645044][T10965] chnl_net:caif_netlink_parms(): no params data found [ 285.673697][T11004] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1466'. [ 285.726647][T11007] netlink: 'syz.1.1466': attribute type 2 has an invalid length. [ 285.770513][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1469'. [ 285.781227][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'. [ 285.795284][ T12] hsr_slave_0: left promiscuous mode [ 285.811578][ T12] hsr_slave_1: left promiscuous mode [ 285.819064][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.827094][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.835301][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.844151][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.889691][ T12] veth1_macvtap: left promiscuous mode [ 285.895307][ T12] veth0_macvtap: left promiscuous mode [ 285.905675][ T12] veth1_vlan: left promiscuous mode [ 285.911392][ T12] veth0_vlan: left promiscuous mode [ 286.025441][ T5838] Bluetooth: hci1: command tx timeout [ 286.465543][ T12] team0 (unregistering): Port device team_slave_1 removed [ 286.524007][ T12] team0 (unregistering): Port device team_slave_0 removed [ 286.540576][T11026] netlink: 'syz.3.1471': attribute type 1 has an invalid length. [ 287.308449][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 287.390312][T10965] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.419415][T10965] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.438392][T10965] bridge_slave_0: entered allmulticast mode [ 287.445429][T10965] bridge_slave_0: entered promiscuous mode [ 287.473322][T10965] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.484535][T10965] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.492067][T10965] bridge_slave_1: entered allmulticast mode [ 287.498960][T10965] bridge_slave_1: entered promiscuous mode [ 287.555363][T11056] bond19: entered promiscuous mode [ 287.564780][T11056] bond19: entered allmulticast mode [ 287.571025][T11056] 8021q: adding VLAN 0 to HW filter on device bond19 [ 287.602105][T10965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.647142][T10965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.770726][T10965] team0: Port device team_slave_0 added [ 287.798245][T10965] team0: Port device team_slave_1 added [ 287.892140][T10965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.899912][T10965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.934091][T10965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.947792][T10965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.954965][T10965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.004419][T10965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.025683][T11067] vlan0: entered allmulticast mode [ 288.096456][ T5838] Bluetooth: hci1: command tx timeout [ 288.113712][T10965] hsr_slave_0: entered promiscuous mode [ 288.125703][T10965] hsr_slave_1: entered promiscuous mode [ 288.135031][T10965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.146265][T10965] Cannot create hsr debugfs directory [ 288.250267][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'. [ 288.507468][T11084] netlink: 'syz.3.1485': attribute type 2 has an invalid length. [ 288.616792][T11101] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 288.640296][T11099] bond17: entered promiscuous mode [ 288.645463][T11099] bond17: entered allmulticast mode [ 288.681658][T11099] 8021q: adding VLAN 0 to HW filter on device bond17 [ 288.724482][T11105] geneve0: entered allmulticast mode [ 288.779150][T11110] 8021q: adding VLAN 0 to HW filter on device bond20 [ 289.052216][T11110] bond20 (unregistering): Released all slaves [ 289.264804][T11129] wg1 speed is unknown, defaulting to 1000 [ 289.517336][T10965] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.532669][T10965] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.558646][T10965] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.593706][T10965] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.775071][T10965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.820622][T10965] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.856358][T11152] netlink: 'syz.0.1501': attribute type 2 has an invalid length. [ 289.864909][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.872091][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.910096][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.917276][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.135060][ T1557] hid (null): report_id 0 is invalid [ 290.156233][ T1557] hid (null): unknown global tag 0xd [ 290.170819][ T1557] hid-generic 0005:046D:0A0C.000D: report_id 0 is invalid [ 290.177284][ T5838] Bluetooth: hci1: command tx timeout [ 290.189949][T11171] bond23: entered promiscuous mode [ 290.226120][ T1557] hid-generic 0005:046D:0A0C.000D: item 0 0 1 8 parsing failed [ 290.233809][T11171] bond23: entered allmulticast mode [ 290.241488][T11175] Cannot find add_set index 3 as target [ 290.246705][ T1557] hid-generic 0005:046D:0A0C.000D: probe with driver hid-generic failed with error -22 [ 290.248042][T11171] 8021q: adding VLAN 0 to HW filter on device bond23 [ 290.280027][T11181] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.338279][T10965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.376761][T11175] tipc: Cannot configure node identity twice [ 290.439911][T11185] netlink: zone id is out of range [ 290.456262][T11185] netlink: zone id is out of range [ 290.461432][T11185] netlink: zone id is out of range [ 290.479666][T11185] netlink: zone id is out of range [ 290.485041][T11185] netlink: zone id is out of range [ 290.493856][T11185] netlink: zone id is out of range [ 290.519198][T11185] netlink: zone id is out of range [ 290.540926][T11185] netlink: zone id is out of range [ 290.562113][T11185] netlink: zone id is out of range [ 290.579213][T11197] nbd: must specify at least one socket [ 290.607889][T11200] __nla_validate_parse: 14 callbacks suppressed [ 290.607909][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1513'. [ 290.674119][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'. [ 290.824904][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 290.834387][T10965] veth0_vlan: entered promiscuous mode [ 290.849129][T10965] veth1_vlan: entered promiscuous mode [ 290.862916][T11211] tipc: Can't bind to reserved service type 2 [ 290.912209][T10965] veth0_macvtap: entered promiscuous mode [ 290.938004][T10965] veth1_macvtap: entered promiscuous mode [ 290.964901][T10965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.976956][T10965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.023711][T11208] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1515'. [ 291.037726][T11208] netlink: 'syz.2.1515': attribute type 2 has an invalid length. [ 291.047184][T10965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.055919][T10965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.066996][T10965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.075859][T10965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.080364][T11227] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1519'. [ 291.188434][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.203904][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.234522][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.245907][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.373363][T11235] bond19: entered promiscuous mode [ 291.384225][T11235] bond19: entered allmulticast mode [ 291.392041][T11235] 8021q: adding VLAN 0 to HW filter on device bond19 [ 291.464648][T11239] netlink: 'syz.1.1522': attribute type 3 has an invalid length. [ 291.511297][T11241] netlink: 'syz.2.1523': attribute type 1 has an invalid length. [ 291.521089][T11243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'. [ 291.529228][T11241] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1523'. [ 291.577161][T11246] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1524'. [ 291.655571][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1526'. [ 291.664811][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'. [ 292.044185][T11266] vlan0: entered allmulticast mode [ 292.083184][ T5916] hid (null): report_id 0 is invalid [ 292.092099][ T5916] hid (null): unknown global tag 0xd [ 292.099613][ T5916] hid-generic 0005:046D:0A0C.000E: report_id 0 is invalid [ 292.119473][T11271] bond20: entered promiscuous mode [ 292.124653][T11271] bond20: entered allmulticast mode [ 292.130157][ T5916] hid-generic 0005:046D:0A0C.000E: item 0 0 1 8 parsing failed [ 292.140034][ T5916] hid-generic 0005:046D:0A0C.000E: probe with driver hid-generic failed with error -22 [ 292.151791][T11271] 8021q: adding VLAN 0 to HW filter on device bond20 [ 292.180682][T11264] netlink: 'syz.1.1531': attribute type 2 has an invalid length. [ 292.278340][T11282] netlink: 'syz.1.1536': attribute type 30 has an invalid length. [ 292.532650][T11284] netlink: 'syz.0.1535': attribute type 10 has an invalid length. [ 292.713730][ T1142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.797516][T11295] syzkaller1: entered promiscuous mode [ 292.803048][T11295] syzkaller1: entered allmulticast mode [ 293.303511][ T1142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.762652][T11308] wg1 speed is unknown, defaulting to 1000 [ 293.815282][T11311] wg1 speed is unknown, defaulting to 1000 [ 293.923586][ T1142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.113343][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.125108][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.134233][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.146580][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.156196][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 294.167275][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.211359][ T1142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.246650][T11325] netlink: 'syz.1.1547': attribute type 2 has an invalid length. [ 294.254855][T11324] bond18: entered promiscuous mode [ 294.264534][T11324] bond18: entered allmulticast mode [ 294.270444][T11324] 8021q: adding VLAN 0 to HW filter on device bond18 [ 294.501958][T11328] wg1 speed is unknown, defaulting to 1000 [ 294.655223][ T1142] bridge_slave_1: left allmulticast mode [ 294.674319][ T1142] bridge_slave_1: left promiscuous mode [ 294.680989][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.698591][ T1142] bridge_slave_0: left allmulticast mode [ 294.704790][ T1142] bridge_slave_0: left promiscuous mode [ 294.711461][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.085773][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.097042][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.111884][ T1142] bond0 (unregistering): Released all slaves [ 295.517767][T11377] netlink: 'syz.2.1559': attribute type 9 has an invalid length. [ 295.558248][ T1142] hsr_slave_0: left promiscuous mode [ 295.576286][ T1142] hsr_slave_1: left promiscuous mode [ 295.582082][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.594284][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.602663][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.631641][T11382] __nla_validate_parse: 13 callbacks suppressed [ 295.631661][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1562'. [ 295.633092][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.663518][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'. [ 295.725600][ T1142] veth1_macvtap: left promiscuous mode [ 295.733782][ T1142] veth0_macvtap: left promiscuous mode [ 295.742323][ T1142] veth1_vlan: left promiscuous mode [ 295.751930][ T1142] veth0_vlan: left promiscuous mode [ 295.778342][T11385] can: request_module (can-proto-3) failed. [ 295.809911][T11385] can: request_module (can-proto-3) failed. [ 296.275031][ T5838] Bluetooth: hci1: command tx timeout [ 296.312168][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 296.358594][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 296.821736][T11328] chnl_net:caif_netlink_parms(): no params data found [ 296.855229][T11379] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR [ 297.024274][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1565'. [ 297.201342][T11412] netlink: 'syz.1.1568': attribute type 1 has an invalid length. [ 297.243047][T11328] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.252064][T11328] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.277346][T11328] bridge_slave_0: entered allmulticast mode [ 297.281712][T11412] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1568'. [ 297.284402][T11328] bridge_slave_0: entered promiscuous mode [ 297.305076][T11328] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.323129][T11328] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.332051][T11328] bridge_slave_1: entered allmulticast mode [ 297.342087][T11328] bridge_slave_1: entered promiscuous mode [ 297.395791][T11403] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1565'. [ 297.413470][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'. [ 297.434175][T11403] netlink: 'syz.3.1565': attribute type 2 has an invalid length. [ 297.484389][T11328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.498912][T11328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.519780][T11409] wg1 speed is unknown, defaulting to 1000 [ 297.970225][T11328] team0: Port device team_slave_0 added [ 298.020126][T11328] team0: Port device team_slave_1 added [ 298.067181][T11328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.094717][T11328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.132443][T11328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.178778][T11328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.185897][T11328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.219272][T11328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.346720][ T5838] Bluetooth: hci1: command tx timeout [ 298.378731][T11328] hsr_slave_0: entered promiscuous mode [ 298.390685][T11328] hsr_slave_1: entered promiscuous mode [ 298.397343][T11328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.405026][T11328] Cannot create hsr debugfs directory [ 298.502378][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1575'. [ 298.518762][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'. [ 298.711522][T11442] bond20: entered promiscuous mode [ 298.722766][T11442] bond20: entered allmulticast mode [ 298.731735][T11442] 8021q: adding VLAN 0 to HW filter on device bond20 [ 299.051839][T11455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1581'. [ 299.220318][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1582'. [ 299.227520][T11328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 299.250511][T11328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 299.300800][T11455] netlink: 'syz.2.1581': attribute type 2 has an invalid length. [ 299.346739][T11328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 299.374016][T11328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 299.572250][T11328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.629262][T11328] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.702855][ T5916] hid (null): report_id 0 is invalid [ 299.712194][ T5916] hid (null): unknown global tag 0xd [ 299.742564][ T5916] hid-generic 0005:046D:0A0C.000F: report_id 0 is invalid [ 299.758676][T11483] bond21: entered promiscuous mode [ 299.774149][ T5916] hid-generic 0005:046D:0A0C.000F: item 0 0 1 8 parsing failed [ 299.792823][T11483] bond21: entered allmulticast mode [ 299.812605][ T5916] hid-generic 0005:046D:0A0C.000F: probe with driver hid-generic failed with error -22 [ 299.833010][T11483] 8021q: adding VLAN 0 to HW filter on device bond21 [ 299.900509][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.907680][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.940258][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.947454][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.105290][T11496] netlink: 'syz.2.1591': attribute type 34 has an invalid length. [ 300.250540][T11328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.416921][ T5838] Bluetooth: hci1: command tx timeout [ 300.727266][T11328] veth0_vlan: entered promiscuous mode [ 300.747019][T11328] veth1_vlan: entered promiscuous mode [ 300.848451][T11328] veth0_macvtap: entered promiscuous mode [ 300.869475][T11328] veth1_macvtap: entered promiscuous mode [ 300.950893][T11328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.973722][T11328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.002768][T11328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.027386][T11328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.046453][T11328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.074080][T11328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.250490][T11525] net_ratelimit: 75 callbacks suppressed [ 301.250511][T11525] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 301.317368][T11528] __nla_validate_parse: 3 callbacks suppressed [ 301.317389][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1597'. [ 301.385489][T11524] vxcan1: entered allmulticast mode [ 301.402592][T11525] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1596'. [ 301.412322][T11525] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1596'. [ 301.606383][T11528] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1597'. [ 301.658523][T11531] netlink: 'syz.2.1597': attribute type 2 has an invalid length. [ 302.282669][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.300796][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.339689][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1601'. [ 302.375328][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'. [ 302.376546][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.426717][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.460002][T11544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1603'. [ 302.491102][T11547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1603'. [ 302.500602][ T5838] Bluetooth: hci1: command tx timeout [ 302.551928][T11546] bond25: entered promiscuous mode [ 302.603971][T11546] bond25: entered allmulticast mode [ 302.609742][T11546] 8021q: adding VLAN 0 to HW filter on device bond25 [ 302.945420][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1608'. [ 303.000886][T11568] vlan0: entered allmulticast mode [ 303.127833][T11564] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1608'. [ 303.146736][T11564] netlink: 'syz.1.1608': attribute type 2 has an invalid length. [ 303.277675][ T2943] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.404239][ T2943] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.501111][T11582] pimreg: entered allmulticast mode [ 303.519626][T11579] pimreg: left allmulticast mode [ 303.850812][ T2943] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.954450][ T2943] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.065455][ T2943] bridge_slave_1: left allmulticast mode [ 304.071411][ T2943] bridge_slave_1: left promiscuous mode [ 304.077249][ T2943] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.085903][ T2943] bridge_slave_0: left allmulticast mode [ 304.091980][ T2943] bridge_slave_0: left promiscuous mode [ 304.098197][ T2943] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.629768][ T2943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.641545][ T2943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.655134][ T2943] bond0 (unregistering): Released all slaves [ 304.895752][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.907946][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.915796][ T5910] hid (null): report_id 0 is invalid [ 304.923906][ T5910] hid (null): unknown global tag 0xd [ 304.928441][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.931210][ T5910] hid-generic 0005:046D:0A0C.0010: report_id 0 is invalid [ 304.963286][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.973701][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 304.984730][T11605] bond22: entered promiscuous mode [ 304.991732][T11605] bond22: entered allmulticast mode [ 304.991868][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.997271][ T5910] hid-generic 0005:046D:0A0C.0010: item 0 0 1 8 parsing failed [ 305.012964][T11605] 8021q: adding VLAN 0 to HW filter on device bond22 [ 305.035082][ T5910] hid-generic 0005:046D:0A0C.0010: probe with driver hid-generic failed with error -22 [ 305.071906][T11612] macvtap1: entered promiscuous mode [ 305.077919][T11612] macvtap1: entered allmulticast mode [ 305.107087][T11616] netlink: 'syz.3.1620': attribute type 10 has an invalid length. [ 305.117379][T11618] netlink: 'syz.3.1620': attribute type 10 has an invalid length. [ 305.145353][T11616] team0: Port device netdevsim0 added [ 305.179132][T11618] team0: Port device netdevsim0 removed [ 305.281061][ T2943] hsr_slave_0: left promiscuous mode [ 305.294167][ T2943] hsr_slave_1: left promiscuous mode [ 305.301651][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.319179][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.330506][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.338581][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.403607][ T2943] veth1_macvtap: left promiscuous mode [ 305.409295][ T2943] veth0_macvtap: left promiscuous mode [ 305.415021][ T2943] veth1_vlan: left promiscuous mode [ 305.421232][ T2943] veth0_vlan: left promiscuous mode [ 305.783226][T11636] netlink: 'syz.0.1625': attribute type 2 has an invalid length. [ 305.958131][ T2943] team0 (unregistering): Port device team_slave_1 removed [ 306.014262][ T2943] team0 (unregistering): Port device team_slave_0 removed [ 306.645470][T11602] wg1 speed is unknown, defaulting to 1000 [ 306.747740][T11652] __nla_validate_parse: 8 callbacks suppressed [ 306.747758][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'. [ 306.807654][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 306.915243][T11602] chnl_net:caif_netlink_parms(): no params data found [ 307.023797][T11664] tipc: Enabled bearer , priority 0 [ 307.066370][ T5838] Bluetooth: hci1: command tx timeout [ 307.070052][T11666] bond19: entered promiscuous mode [ 307.078478][T11666] bond19: entered allmulticast mode [ 307.084101][T11666] 8021q: adding VLAN 0 to HW filter on device bond19 [ 307.094558][T11664] syzkaller0: entered promiscuous mode [ 307.104863][T11664] syzkaller0: entered allmulticast mode [ 307.202384][T11664] tipc: Resetting bearer [ 307.268182][T11602] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.289716][T11602] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.312885][T11602] bridge_slave_0: entered allmulticast mode [ 307.340991][T11602] bridge_slave_0: entered promiscuous mode [ 307.358088][T11602] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.365417][T11602] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.372999][T11602] bridge_slave_1: entered allmulticast mode [ 307.385484][T11602] bridge_slave_1: entered promiscuous mode [ 307.418545][T11602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.431485][T11602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.518214][T11602] team0: Port device team_slave_0 added [ 307.570461][T11602] team0: Port device team_slave_1 added [ 307.696293][T11602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.720135][T11602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.758657][T11602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.780402][T11602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.791469][T11602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.851044][T11602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.935331][T11602] hsr_slave_0: entered promiscuous mode [ 307.963907][T11602] hsr_slave_1: entered promiscuous mode [ 307.974344][T11602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.990282][T11602] Cannot create hsr debugfs directory [ 308.324670][T11663] tipc: Resetting bearer [ 308.368045][T11663] tipc: Disabling bearer [ 308.580918][T11697] netlink: 'syz.3.1639': attribute type 1 has an invalid length. [ 308.603196][T11697] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1639'. [ 308.619860][T11697] netlink: 'syz.3.1639': attribute type 1 has an invalid length. [ 308.635418][T11703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1640'. [ 308.685950][T11697] netlink: 'syz.3.1639': attribute type 1 has an invalid length. [ 308.746576][T11697] bond21: entered promiscuous mode [ 308.752064][T11697] 8021q: adding VLAN 0 to HW filter on device bond21 [ 308.795207][T11697] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1639'. [ 308.869731][T11719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1642'. [ 308.879857][T11719] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1642'. [ 308.891874][T11703] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1640'. [ 308.921945][T11703] netlink: 'syz.1.1640': attribute type 2 has an invalid length. [ 309.016237][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1643'. [ 309.023721][T11724] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1644'. [ 309.136764][ T5838] Bluetooth: hci1: command tx timeout [ 309.211728][T11726] bond22: entered promiscuous mode [ 309.220488][T11726] bond22: entered allmulticast mode [ 309.227577][T11726] 8021q: adding VLAN 0 to HW filter on device bond22 [ 309.274775][T11602] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 309.349591][T11602] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 309.363830][T11602] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 309.382772][T11602] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 309.559401][T11602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.614297][T11602] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.677793][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.684991][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.725798][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.733039][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.161217][T11602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.398076][T11767] netlink: 'syz.3.1654': attribute type 1 has an invalid length. [ 310.636968][T11783] bond26: entered promiscuous mode [ 310.642256][T11783] bond26: entered allmulticast mode [ 310.648692][T11783] 8021q: adding VLAN 0 to HW filter on device bond26 [ 310.692555][T11602] veth0_vlan: entered promiscuous mode [ 310.774812][T11602] veth1_vlan: entered promiscuous mode [ 310.884427][T11782] netlink: 'syz.3.1657': attribute type 2 has an invalid length. [ 310.898331][T11602] veth0_macvtap: entered promiscuous mode [ 310.932734][T11602] veth1_macvtap: entered promiscuous mode [ 310.992332][T11602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.004161][T11602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.040932][T11802] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 311.043631][T11602] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.076267][T11602] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.096336][T11602] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.105070][T11602] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.131739][T11805] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 311.145864][T11805] syzkaller1: Linktype set failed because interface is up [ 311.166446][ T5884] syzkaller1: tun_net_xmit 90 [ 311.216490][ T5838] Bluetooth: hci1: command tx timeout [ 311.323507][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.343585][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.395026][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.404006][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.663085][T11813] netlink: 'syz.0.1666': attribute type 1 has an invalid length. [ 311.809775][T11816] __nla_validate_parse: 3 callbacks suppressed [ 311.809793][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1668'. [ 311.866381][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 312.085065][T11827] bond20: entered promiscuous mode [ 312.090619][T11827] bond20: entered allmulticast mode [ 312.096283][T11827] 8021q: adding VLAN 0 to HW filter on device bond20 [ 312.225246][T11839] xt_hashlimit: size too large, truncated to 1048576 [ 312.653833][T11846] netlink: 'syz.1.1676': attribute type 4 has an invalid length. [ 312.689427][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.708253][T11847] netlink: 'syz.1.1676': attribute type 4 has an invalid length. [ 313.247828][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.565172][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.640546][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.722748][ T52] bridge_slave_1: left allmulticast mode [ 313.728894][ T52] bridge_slave_1: left promiscuous mode [ 313.734644][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.743533][ T52] bridge_slave_0: left allmulticast mode [ 313.749436][ T52] bridge_slave_0: left promiscuous mode [ 313.755124][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.224773][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.253850][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.268082][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.290828][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.301522][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 314.309432][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.487431][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.499691][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.510149][ T52] bond0 (unregistering): Released all slaves [ 314.536822][T11857] vlan0: entered allmulticast mode [ 314.607570][T11861] wireguard0: entered promiscuous mode [ 314.614618][T11861] wireguard0: entered allmulticast mode [ 314.688910][T11856] wg1 speed is unknown, defaulting to 1000 [ 314.765926][T11863] wg1 speed is unknown, defaulting to 1000 [ 314.848787][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1683'. [ 314.863628][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'. [ 314.886557][ T9] hid (null): report_id 0 is invalid [ 314.892015][ T9] hid (null): unknown global tag 0xd [ 314.900563][ T9] hid-generic 0005:046D:0A0C.0011: report_id 0 is invalid [ 314.908128][ T9] hid-generic 0005:046D:0A0C.0011: item 0 0 1 8 parsing failed [ 314.916951][ T9] hid-generic 0005:046D:0A0C.0011: probe with driver hid-generic failed with error -22 [ 314.983342][T11873] bond23: entered promiscuous mode [ 314.989258][T11873] bond23: entered allmulticast mode [ 314.994807][T11873] 8021q: adding VLAN 0 to HW filter on device bond23 [ 315.063274][ T52] hsr_slave_0: left promiscuous mode [ 315.075747][ T52] hsr_slave_1: left promiscuous mode [ 315.082109][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.089756][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.100427][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.108487][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.157741][ T52] veth1_macvtap: left promiscuous mode [ 315.164362][ T52] veth0_macvtap: left promiscuous mode [ 315.170282][ T52] veth1_vlan: left promiscuous mode [ 315.175559][ T52] veth0_vlan: left promiscuous mode [ 315.212485][T11890] netlink: 'syz.0.1686': attribute type 9 has an invalid length. [ 315.632921][ T52] team0 (unregistering): Port device team_slave_1 removed [ 315.683112][ T52] team0 (unregistering): Port device team_slave_0 removed [ 316.145257][T11888] veth1_to_bond: entered allmulticast mode [ 316.166302][T11888] veth1_to_bond: left allmulticast mode [ 316.336204][ T5852] Bluetooth: hci1: command tx timeout [ 316.369369][T11903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1691'. [ 316.405371][T11903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1691'. [ 316.461072][T11863] chnl_net:caif_netlink_parms(): no params data found [ 316.548833][T11908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1691'. [ 316.587344][T11908] nbd: device at index 64 is going down [ 316.645302][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1692'. [ 316.665857][T11914] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 316.724339][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1691'. [ 316.734214][T11903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1691'. [ 316.882037][T11863] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.901118][T11863] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.911568][T11863] bridge_slave_0: entered allmulticast mode [ 316.930879][T11863] bridge_slave_0: entered promiscuous mode [ 316.956316][T11928] wg1 speed is unknown, defaulting to 1000 [ 316.962868][T11863] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.980037][T11863] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.995276][T11863] bridge_slave_1: entered allmulticast mode [ 317.015314][T11863] bridge_slave_1: entered promiscuous mode [ 317.082513][T11863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.135918][T11863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.249495][T11863] team0: Port device team_slave_0 added [ 317.281962][T11943] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1700'. [ 317.290708][T11863] team0: Port device team_slave_1 added [ 317.437143][T11863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.464159][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.471572][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.485395][T11863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.533008][T11863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.573447][T11863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.583957][T11863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.656297][T11863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.750398][T11960] netlink: 'syz.2.1705': attribute type 1 has an invalid length. [ 317.766159][T11960] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1705'. [ 317.792668][T11950] wg1 speed is unknown, defaulting to 1000 [ 317.821249][T11863] hsr_slave_0: entered promiscuous mode [ 317.857534][T11863] hsr_slave_1: entered promiscuous mode [ 317.886884][T11863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.894500][T11863] Cannot create hsr debugfs directory [ 317.933128][T11966] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1707'. [ 317.996875][T11966] netlink: 'syz.1.1707': attribute type 9 has an invalid length. [ 318.187129][T11946] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1701'. [ 318.347519][T11978] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.355745][T11978] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.365242][T11978] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.374374][T11978] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.426555][ T5852] Bluetooth: hci1: command tx timeout [ 318.431012][T11982] netlink: 'syz.1.1711': attribute type 1 has an invalid length. [ 318.455045][T11982] 8021q: adding VLAN 0 to HW filter on device bond27 [ 318.478379][T11978] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 318.736112][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 318.760917][T11995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1713'. [ 318.776807][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 318.833335][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1715'. [ 319.020950][T11863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 319.028723][T11997] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1715'. [ 319.040064][T11863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 319.049388][T11997] netlink: 'syz.2.1715': attribute type 2 has an invalid length. [ 319.057910][T11863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 319.070276][T11863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 319.178338][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1718'. [ 319.208153][T11863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.274735][T11863] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.305748][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'. [ 319.327344][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.334545][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.374902][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.382111][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.399202][T12017] netlink: 'syz.0.1720': attribute type 29 has an invalid length. [ 319.458434][T12020] bond24: entered promiscuous mode [ 319.463635][T12020] bond24: entered allmulticast mode [ 319.479046][T12020] 8021q: adding VLAN 0 to HW filter on device bond24 [ 319.882187][T12040] ipip0: entered promiscuous mode [ 320.008184][T11863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.031468][T12042] netlink: 'syz.2.1729': attribute type 10 has an invalid length. [ 320.041039][T12042] team0: Device veth1_macvtap failed to register rx_handler [ 320.133484][T12055] netlink: 'syz.1.1733': attribute type 1 has an invalid length. [ 320.144764][T12056] wg1 speed is unknown, defaulting to 1000 [ 320.174958][T12055] netlink: 'syz.1.1733': attribute type 4 has an invalid length. [ 320.438249][T11863] veth0_vlan: entered promiscuous mode [ 320.469867][T12075] bond28: entered promiscuous mode [ 320.475651][T12075] bond28: entered allmulticast mode [ 320.496482][ T5852] Bluetooth: hci1: command tx timeout [ 320.502716][T12075] 8021q: adding VLAN 0 to HW filter on device bond28 [ 320.538530][T11863] veth1_vlan: entered promiscuous mode [ 320.638757][T11863] veth0_macvtap: entered promiscuous mode [ 320.664396][T11863] veth1_macvtap: entered promiscuous mode [ 320.730958][T11863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.743224][T11863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.774720][T11863] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.811422][T11863] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.836320][T11863] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.861348][T11863] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.113389][T12100] wg1 speed is unknown, defaulting to 1000 [ 321.121059][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.131117][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.255844][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.284667][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.363750][T12116] netlink: 'syz.1.1748': attribute type 4 has an invalid length. [ 321.493990][T12126] bond25: entered promiscuous mode [ 321.509531][T12126] bond25: entered allmulticast mode [ 321.517636][T12126] 8021q: adding VLAN 0 to HW filter on device bond25 [ 321.881701][T12100] ip6gre1: entered promiscuous mode [ 321.983189][T12141] bridge0: port 1(vlan5) entered blocking state [ 322.012951][T12141] bridge0: port 1(vlan5) entered disabled state [ 322.029963][T12141] vlan5: entered allmulticast mode [ 322.039863][T12141] bridge0: entered allmulticast mode [ 322.077995][T12141] vlan5: left allmulticast mode [ 322.086623][T12141] bridge0: left allmulticast mode [ 322.293401][T12156] 8021q: VLANs not supported on ip6tnl0 [ 322.628431][ T3496] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.984781][ T3496] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.064476][ T3496] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.143194][ T3496] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.242225][ T3496] bridge_slave_1: left allmulticast mode [ 323.248768][ T3496] bridge_slave_1: left promiscuous mode [ 323.254423][ T3496] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.263285][ T3496] bridge_slave_0: left allmulticast mode [ 323.269209][ T3496] bridge_slave_0: left promiscuous mode [ 323.274864][ T3496] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.674001][ T5884] hid (null): report_id 0 is invalid [ 323.679556][ T5884] hid (null): unknown global tag 0xd [ 323.686803][ T5884] hid-generic 0005:046D:0A0C.0012: report_id 0 is invalid [ 323.694078][ T5884] hid-generic 0005:046D:0A0C.0012: item 0 0 1 8 parsing failed [ 323.702791][ T5884] hid-generic 0005:046D:0A0C.0012: probe with driver hid-generic failed with error -22 [ 323.768939][ T3496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.871690][ T3496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.004206][ T3496] bond0 (unregistering): Released all slaves [ 324.004470][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.021269][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.030640][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.040281][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.050116][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 324.057665][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.487744][T12176] workqueue: Failed to create a rescuer kthread for wq "bond29": -EINTR [ 324.741905][T12188] wg1 speed is unknown, defaulting to 1000 [ 324.772808][T12199] wg1 speed is unknown, defaulting to 1000 [ 324.831941][T12213] __nla_validate_parse: 10 callbacks suppressed [ 324.831961][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1771'. [ 324.848746][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1771'. [ 324.975232][ T3496] hsr_slave_0: left promiscuous mode [ 324.992967][ T3496] hsr_slave_1: left promiscuous mode [ 325.002714][ T3496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.015850][ T3496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.027560][ T3496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.035319][ T3496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.115274][ T3496] veth1_macvtap: left promiscuous mode [ 325.123182][ T3496] veth0_macvtap: left promiscuous mode [ 325.161133][T12225] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1772'. [ 325.249067][ T3496] veth1_vlan: left promiscuous mode [ 325.262435][ T3496] veth0_vlan: left promiscuous mode [ 326.054346][ T3496] team0 (unregistering): Port device team_slave_1 removed [ 326.096781][ T5852] Bluetooth: hci1: command tx timeout [ 326.104860][ T3496] team0 (unregistering): Port device team_slave_0 removed [ 326.570347][T12227] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.579192][T12227] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.587468][T12227] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.595668][T12227] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.682278][T12236] netlink: 'syz.2.1776': attribute type 10 has an invalid length. [ 326.712645][T12236] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1776'. [ 326.733026][T12236] team0: entered promiscuous mode [ 326.753816][T12236] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.780572][T12241] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 326.782073][T12242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1776'. [ 326.796738][T12236] bridge0: port 1(team0) entered blocking state [ 326.806150][T12236] bridge0: port 1(team0) entered disabled state [ 326.809556][T12243] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 326.817374][T12236] team0: entered allmulticast mode [ 326.874709][T12239] bond29: entered promiscuous mode [ 326.883377][T12239] bond29: entered allmulticast mode [ 326.892525][T12239] 8021q: adding VLAN 0 to HW filter on device bond29 [ 326.937760][T12249] bond23: entered promiscuous mode [ 326.951866][T12249] bond23: entered allmulticast mode [ 326.958939][T12249] 8021q: adding VLAN 0 to HW filter on device bond23 [ 327.055515][T12188] chnl_net:caif_netlink_parms(): no params data found [ 327.242417][T12262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1781'. [ 327.264561][T12188] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.286168][T12188] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.297264][T12188] bridge_slave_0: entered allmulticast mode [ 327.310193][T12188] bridge_slave_0: entered promiscuous mode [ 327.335663][T12188] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.342616][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1784'. [ 327.343150][T12188] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.357429][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1784'. [ 327.361426][T12188] bridge_slave_1: entered allmulticast mode [ 327.380303][T12188] bridge_slave_1: entered promiscuous mode [ 327.425297][T12188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.458068][T12188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.524938][T12188] team0: Port device team_slave_0 added [ 327.544775][T12188] team0: Port device team_slave_1 added [ 327.613253][T12188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.627158][T12188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.654246][T12188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.667880][T12281] team0: left promiscuous mode [ 327.758913][T12188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.766424][T12188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.793201][T12188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.856937][T12188] hsr_slave_0: entered promiscuous mode [ 327.864019][T12188] hsr_slave_1: entered promiscuous mode [ 327.872215][T12188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.880951][T12188] Cannot create hsr debugfs directory [ 327.912243][T12292] bond30: entered promiscuous mode [ 327.924057][T12292] bond30: entered allmulticast mode [ 327.931295][T12292] 8021q: adding VLAN 0 to HW filter on device bond30 [ 327.940741][T12296] ax25_connect(): syz.3.1792 uses autobind, please contact jreuter@yaina.de [ 328.097531][T12300] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1794'. [ 328.117425][T12302] netlink: 'syz.3.1795': attribute type 1 has an invalid length. [ 328.139989][T12300] netlink: 'syz.1.1794': attribute type 10 has an invalid length. [ 328.174161][T12302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1795'. [ 328.176255][ T5852] Bluetooth: hci1: command tx timeout [ 328.216190][T12302] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 328.226289][T12300] dummy0: entered promiscuous mode [ 328.231576][T12300] dummy0: entered allmulticast mode [ 328.238661][T12300] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 328.584745][T12188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 328.605109][T12188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 328.637144][T12188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 328.651080][T12188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 328.685398][T12326] netlink: 'syz.2.1802': attribute type 1 has an invalid length. [ 328.774024][T12188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.795883][T12188] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.831790][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.839176][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.872057][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.879243][ T3496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.931735][T12332] bond26: entered promiscuous mode [ 328.938663][T12332] bond26: entered allmulticast mode [ 328.944290][T12332] 8021q: adding VLAN 0 to HW filter on device bond26 [ 329.001584][T12188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.195589][T12188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.212242][ T5841] IPVS: starting estimator thread 0... [ 329.230933][T12347] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.317766][T12347] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.346465][T12350] IPVS: using max 22 ests per chain, 52800 per kthread [ 329.439301][T12360] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 329.465222][T12347] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.612278][T12347] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.688214][T12371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.845744][T12347] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.905414][T12347] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.991642][T12347] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.037167][T12347] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.059184][T12353] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.069946][T12353] tipc: Enabled bearer , priority 10 [ 330.092436][T12379] __nla_validate_parse: 5 callbacks suppressed [ 330.092453][T12379] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1813'. [ 330.132373][T12188] veth0_vlan: entered promiscuous mode [ 330.150331][T12188] veth1_vlan: entered promiscuous mode [ 330.161087][T12353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1807'. [ 330.196536][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.250781][T12188] veth0_macvtap: entered promiscuous mode [ 330.258094][ T5852] Bluetooth: hci1: command tx timeout [ 330.269780][T12188] veth1_macvtap: entered promiscuous mode [ 330.286360][T12188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.297369][T12188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.315847][T12188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.330855][T12188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.361791][T12188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.374312][T12188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.384484][T12381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1814'. [ 330.466226][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.502613][T12382] wg1 speed is unknown, defaulting to 1000 [ 330.503819][T12384] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1815'. [ 330.546557][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.553852][T12385] ------------[ cut here ]------------ [ 330.560353][T12385] RTNL: assertion failed at net/core/dev.c (1769) [ 330.564660][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.616811][T12385] WARNING: CPU: 0 PID: 12385 at net/core/dev.c:1769 dev_setup_tc+0x315/0x360 [ 330.625657][T12385] Modules linked in: [ 330.630297][T12385] CPU: 0 UID: 0 PID: 12385 Comm: syz.0.1814 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 330.641346][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.651609][T12385] RIP: 0010:dev_setup_tc+0x315/0x360 [ 330.657169][T12385] Code: cc 49 89 ee e8 dc da f7 f7 c6 05 c0 39 5d 06 01 90 48 c7 c7 a0 5e 2e 8d 48 c7 c6 80 5e 2e 8d ba e9 06 00 00 e8 3c 97 b7 f7 90 <0f> 0b 90 90 e9 66 fd ff ff 89 d1 80 e1 07 38 c1 0f 8c aa fd ff ff [ 330.676997][T12385] RSP: 0018:ffffc9000b9f6ed0 EFLAGS: 00010246 [ 330.683092][T12385] RAX: 63a46592c9840600 RBX: 0000000000000000 RCX: 0000000000080000 [ 330.691571][T12385] RDX: ffffc9000e39f000 RSI: 0000000000008537 RDI: 0000000000008538 [ 330.699980][T12385] RBP: ffff888030c8c008 R08: ffffffff81818e32 R09: 1ffffffff28aa53d [ 330.708391][T12385] R10: dffffc0000000000 R11: fffffbfff28aa53e R12: ffffc9000b9f7070 [ 330.716489][T12385] R13: ffffffff8d4ab1c0 R14: ffff888030c8c008 R15: ffff888030c8c000 [ 330.724495][T12385] FS: 00007f1a054606c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 330.733646][T12385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.740487][T12385] CR2: 00007f1a0543fd58 CR3: 000000007dfa2000 CR4: 00000000003526f0 [ 330.748614][T12385] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.756791][T12385] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.764796][T12385] Call Trace: [ 330.768232][T12385] [ 330.771195][T12385] ? __warn+0x165/0x4d0 [ 330.775383][T12385] ? dev_setup_tc+0x315/0x360 [ 330.780242][T12385] ? report_bug+0x2b3/0x500 [ 330.784791][T12385] ? dev_setup_tc+0x315/0x360 [ 330.789591][T12385] ? handle_bug+0x60/0x90 [ 330.793959][T12385] ? exc_invalid_op+0x1a/0x50 [ 330.798780][T12385] ? asm_exc_invalid_op+0x1a/0x20 [ 330.803288][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.803859][T12385] ? __warn_printk+0x292/0x360 [ 330.817138][T12385] ? dev_setup_tc+0x315/0x360 [ 330.821859][T12385] nf_flow_table_offload_setup+0x2ff/0x710 [ 330.827811][T12385] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 330.830629][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.833978][T12385] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 330.834021][T12385] ? __pfx_lock_release+0x10/0x10 [ 330.852952][T12385] ? nft_pernet+0x23/0x240 [ 330.857502][T12385] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 330.863863][T12385] nft_register_flowtable_net_hooks+0x24c/0x570 [ 330.870219][T12385] nf_tables_newflowtable+0x19f4/0x23d0 [ 330.875806][T12385] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 330.881855][T12385] ? nfnl_pernet+0x23/0x240 [ 330.886442][T12385] ? __pfx_lock_release+0x10/0x10 [ 330.891599][T12385] ? __nla_parse+0x40/0x60 [ 330.896194][T12385] nfnetlink_rcv+0x14e3/0x2ab0 [ 330.900986][T12385] ? __pfx_validate_chain+0x10/0x10 [ 330.906338][T12385] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 330.911496][T12385] ? __lock_acquire+0x1397/0x2100 [ 330.916702][T12385] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.921932][T12385] ? __pfx_lock_release+0x10/0x10 [ 330.927091][T12385] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.932327][T12385] netlink_unicast+0x7f6/0x990 [ 330.937247][T12385] ? __pfx_netlink_unicast+0x10/0x10 [ 330.942569][T12385] ? __virt_addr_valid+0x45f/0x530 [ 330.947832][T12385] ? __phys_addr_symbol+0x2f/0x70 [ 330.952893][T12385] ? __check_object_size+0x47a/0x730 [ 330.958353][T12385] netlink_sendmsg+0x8de/0xcb0 [ 330.963177][T12385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.968695][T12385] ? aa_sock_msg_perm+0x91/0x160 [ 330.973681][T12385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.979155][T12385] __sock_sendmsg+0x221/0x270 [ 330.983871][T12385] ____sys_sendmsg+0x53a/0x860 [ 330.988800][T12385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.994118][T12385] ? futex_wake+0x523/0x5c0 [ 330.998760][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.005875][T12385] __sys_sendmsg+0x269/0x350 [ 331.010565][T12385] ? __pfx_futex_wake+0x10/0x10 [ 331.015447][T12385] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.020679][T12385] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 331.027152][T12385] ? do_syscall_64+0x100/0x230 [ 331.031943][T12385] ? do_syscall_64+0xb6/0x230 [ 331.036753][T12385] do_syscall_64+0xf3/0x230 [ 331.041298][T12385] ? clear_bhb_loop+0x35/0x90 [ 331.046129][T12385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.052077][T12385] RIP: 0033:0x7f1a0458d169 [ 331.056698][T12385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.076399][T12385] RSP: 002b:00007f1a05460038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.084923][T12385] RAX: ffffffffffffffda RBX: 00007f1a047a6160 RCX: 00007f1a0458d169 [ 331.093013][T12385] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 000000000000000c [ 331.101160][T12385] RBP: 00007f1a0460e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 331.109196][T12385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.117317][T12385] R13: 0000000000000000 R14: 00007f1a047a6160 R15: 00007ffeb255a978 [ 331.125411][T12385] [ 331.128499][T12385] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 331.135864][T12385] CPU: 0 UID: 0 PID: 12385 Comm: syz.0.1814 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 331.146617][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 331.156683][T12385] Call Trace: [ 331.159965][T12385] [ 331.162907][T12385] dump_stack_lvl+0x241/0x360 [ 331.167600][T12385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.172802][T12385] ? __pfx__printk+0x10/0x10 [ 331.177392][T12385] ? vscnprintf+0x5d/0x90 [ 331.181728][T12385] panic+0x349/0x880 [ 331.185705][T12385] ? __warn+0x174/0x4d0 [ 331.189863][T12385] ? __pfx_panic+0x10/0x10 [ 331.194295][T12385] __warn+0x344/0x4d0 [ 331.198274][T12385] ? dev_setup_tc+0x315/0x360 [ 331.202951][T12385] report_bug+0x2b3/0x500 [ 331.207306][T12385] ? dev_setup_tc+0x315/0x360 [ 331.211981][T12385] handle_bug+0x60/0x90 [ 331.216136][T12385] exc_invalid_op+0x1a/0x50 [ 331.220634][T12385] asm_exc_invalid_op+0x1a/0x20 [ 331.225496][T12385] RIP: 0010:dev_setup_tc+0x315/0x360 [ 331.230798][T12385] Code: cc 49 89 ee e8 dc da f7 f7 c6 05 c0 39 5d 06 01 90 48 c7 c7 a0 5e 2e 8d 48 c7 c6 80 5e 2e 8d ba e9 06 00 00 e8 3c 97 b7 f7 90 <0f> 0b 90 90 e9 66 fd ff ff 89 d1 80 e1 07 38 c1 0f 8c aa fd ff ff [ 331.250412][T12385] RSP: 0018:ffffc9000b9f6ed0 EFLAGS: 00010246 [ 331.256486][T12385] RAX: 63a46592c9840600 RBX: 0000000000000000 RCX: 0000000000080000 [ 331.264458][T12385] RDX: ffffc9000e39f000 RSI: 0000000000008537 RDI: 0000000000008538 [ 331.272421][T12385] RBP: ffff888030c8c008 R08: ffffffff81818e32 R09: 1ffffffff28aa53d [ 331.280388][T12385] R10: dffffc0000000000 R11: fffffbfff28aa53e R12: ffffc9000b9f7070 [ 331.288359][T12385] R13: ffffffff8d4ab1c0 R14: ffff888030c8c008 R15: ffff888030c8c000 [ 331.296332][T12385] ? __warn_printk+0x292/0x360 [ 331.301112][T12385] nf_flow_table_offload_setup+0x2ff/0x710 [ 331.306921][T12385] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 331.313067][T12385] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 331.319399][T12385] ? __pfx_lock_release+0x10/0x10 [ 331.324444][T12385] ? nft_pernet+0x23/0x240 [ 331.328853][T12385] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 331.335178][T12385] nft_register_flowtable_net_hooks+0x24c/0x570 [ 331.341426][T12385] nf_tables_newflowtable+0x19f4/0x23d0 [ 331.346986][T12385] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 331.352883][T12385] ? nfnl_pernet+0x23/0x240 [ 331.357391][T12385] ? __pfx_lock_release+0x10/0x10 [ 331.362424][T12385] ? __nla_parse+0x40/0x60 [ 331.366833][T12385] nfnetlink_rcv+0x14e3/0x2ab0 [ 331.371682][T12385] ? __pfx_validate_chain+0x10/0x10 [ 331.376892][T12385] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 331.382041][T12385] ? __lock_acquire+0x1397/0x2100 [ 331.387093][T12385] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.392293][T12385] ? __pfx_lock_release+0x10/0x10 [ 331.397425][T12385] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.402620][T12385] netlink_unicast+0x7f6/0x990 [ 331.407384][T12385] ? __pfx_netlink_unicast+0x10/0x10 [ 331.412661][T12385] ? __virt_addr_valid+0x45f/0x530 [ 331.417785][T12385] ? __phys_addr_symbol+0x2f/0x70 [ 331.422822][T12385] ? __check_object_size+0x47a/0x730 [ 331.428138][T12385] netlink_sendmsg+0x8de/0xcb0 [ 331.432917][T12385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.438235][T12385] ? aa_sock_msg_perm+0x91/0x160 [ 331.443187][T12385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.448475][T12385] __sock_sendmsg+0x221/0x270 [ 331.453158][T12385] ____sys_sendmsg+0x53a/0x860 [ 331.457927][T12385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.463211][T12385] ? futex_wake+0x523/0x5c0 [ 331.467721][T12385] __sys_sendmsg+0x269/0x350 [ 331.472303][T12385] ? __pfx_futex_wake+0x10/0x10 [ 331.477152][T12385] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.482288][T12385] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 331.488624][T12385] ? do_syscall_64+0x100/0x230 [ 331.493389][T12385] ? do_syscall_64+0xb6/0x230 [ 331.498060][T12385] do_syscall_64+0xf3/0x230 [ 331.502557][T12385] ? clear_bhb_loop+0x35/0x90 [ 331.507233][T12385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.513148][T12385] RIP: 0033:0x7f1a0458d169 [ 331.517557][T12385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.537159][T12385] RSP: 002b:00007f1a05460038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.545574][T12385] RAX: ffffffffffffffda RBX: 00007f1a047a6160 RCX: 00007f1a0458d169 [ 331.553540][T12385] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 000000000000000c [ 331.561506][T12385] RBP: 00007f1a0460e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 331.569473][T12385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.577438][T12385] R13: 0000000000000000 R14: 00007f1a047a6160 R15: 00007ffeb255a978 [ 331.585414][T12385] [ 331.588677][T12385] Kernel Offset: disabled [ 331.593069][T12385] Rebooting in 86400 seconds..