last executing test programs: 3m57.450682082s ago: executing program 1 (id=832): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c00018008000140000000020800014000000003"], 0x364}}, 0x0) sendto$inet6(r0, &(0x7f0000001380)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x4000000, @mcast2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c00018008000140000000020800014000000003"], 0x364}}, 0x0) (async) sendto$inet6(r0, &(0x7f0000001380)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x4000000, @mcast2}, 0x1c) (async) 3m57.343223537s ago: executing program 1 (id=836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x810, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x1, 0xf) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000800000000000000000000000031c57fbd3fad23c3fcddbf09264701df887d9ec3c083ff9ae", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000100"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%ps \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x8000, 0x1000000, 0xfffffffb, 0x10, r7, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r11) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB='*\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="040028bd7000fddbdf250300000008000200030000000800040007000000050005000a0000000800020006000000080004000300000008000200000000000800020004000000"], 0x4c}}, 0x40) 3m57.083570158s ago: executing program 1 (id=840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0xffffffffffffffe0, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0xdcee729b7a9f2e48) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 3m56.819530483s ago: executing program 1 (id=845): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000240)={0x0, 0xffffff3a, &(0x7f0000000100)={&(0x7f0000003180)=ANY=[], 0x588}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) recvfrom(r2, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0xb40, 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000107000000000000000001"], 0x114}], 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x0, 0x0, 0x148, 0x0, 0x148, 0x170, 0x240, 0x240, 0x170, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @local, 0xffffffff, 0xffffffff, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11, 0x0, 0x22}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x5b, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 3m56.700130368s ago: executing program 1 (id=849): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m56.334342981s ago: executing program 1 (id=857): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xd0d4, 0x50}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/76, 0x4c}], 0x1}, 0x0) listen(r0, 0x3) 3m56.110557816s ago: executing program 32 (id=857): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xd0d4, 0x50}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/76, 0x4c}], 0x1}, 0x0) listen(r0, 0x3) 3.224855509s ago: executing program 5 (id=3744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x40}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x31, 0xe, 0xffffffff}}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000002440)={'nat\x00', 0x0, [0x632, 0x9, 0x7fff, 0x80008000, 0x4]}, &(0x7f00000003c0)=0x54) r3 = socket(0x3, 0x4, 0xe14) sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x10}, @assoc={0x18, 0x117, 0x4, 0xf2bf}], 0x48, 0x1000}, 0x4040040) unshare(0x20000400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) pwrite64(r4, &(0x7f0000000000)="e7030014000816112ee73cfe11f0102b510b2e73fce8a190dd2958d5", 0xfffffffffffffe34, 0x8001) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001800)=@nat={'nat\x00', 0x670, 0x5, 0xb68, 0x8b0, 0xa00, 0xffffffff, 0x0, 0xa00, 0xad0, 0xad0, 0xffffffff, 0xad0, 0xad0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'macsec0\x00', {0xff}, {}, 0x16, 0x1}, 0x0, 0x878, 0x8b0, 0x48, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x400, 0x1}, {0x0, 0x1}, {0x5, 0x31ad6b86d1e81068}, {0x92, 0x3}, {0x1d3, 0x2}, {0x3}, {0x1, 0x2}, {}, {0x5, 0x1}, {0x80000001, 0x1}, {0xffffffff, 0x3}], [{0x3, 0x9}, {0x6, 0x1}, {0x7, 0x5}, {0x7, 0x7}, {0x200, 0x6}, {0x420, 0x89f}, {0x3, 0xffffffff}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x7}], 0x6, 0x3}, {[{0x5}, {0x40, 0x2}, {0xf37b, 0x3}, {0x6, 0x3}, {0x9, 0x2}, {0xd175}, {0xb, 0x3}, {0x80000000, 0x3}, {0x7, 0x1}, {0x80000000, 0x3}, {0x9, 0x1}], [{0xfffff915, 0x7}, {0x4, 0x7fff}, {0x7, 0x6}, {0x5, 0x1}, {0x7, 0x3}, {0x9, 0x3}, {0xfffffffe, 0x6}, {0x8, 0x3}, {0x5fd42ece, 0x7}, {0x1, 0x6}, {0xfffffff9, 0xe}], 0x4, 0x4}, {[{0x1000, 0x2}, {0x80000001}, {0x4, 0x2}, {0x1}, {0x2, 0x1}, {0x8001, 0x1}, {0x0, 0x2}, {0x80000001, 0x3}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x1}], [{0x7f, 0x4}, {0xa, 0x6}, {0x80, 0x400}, {0x6, 0xbcdd}, {0xe, 0x40}, {0x9016, 0x1}, {0x0, 0x7ff}, {0x40, 0x1}, {0x5, 0x7}, {0x7, 0x7f}, {0x7, 0x5}], 0x9, 0x2}, {[{0xdb, 0x1}, {0x4}, {0xc, 0x2}, {0xfd0f, 0x1}, {0x4, 0x1}, {0x85bf, 0x2}, {0x5, 0x3}, {0x8}, {0x1000}, {0x6, 0x3}, {0x9e20, 0x2}], [{0x9, 0x4}, {0xfffffff8, 0x1}, {0x3ff, 0x800}, {0x3, 0xd2}, {0x9, 0x400}, {0x6, 0xcf7}, {0x3, 0x7}, {0x5, 0x3}, {0x275, 0x3}, {0x9, 0x4}, {0x1, 0x59a}], 0x7, 0x9}, {[{0x8, 0x1}, {0x1, 0x26cf73c538c095eb}, {0xff}, {0x8, 0x3}, {0x100, 0x2}, {0x7f}, {0x8, 0x1}, {0x821a, 0x1}, {0x10, 0x1}, {0x39c}, {0x2, 0x3}], [{0x4c2a, 0xffff}, {0x1, 0x4}, {0x0, 0x9}, {0x9, 0x3ff}, {0x8, 0x3c}, {0x4, 0x3}, {0x80000001, 0x7}, {0x69, 0x2}, {0xfe4, 0x944a}, {0x3}, {0x49, 0xe8b7}], 0x9, 0x3}, {[{0xfffffffc, 0x2}, {0x98}, {0xea}, {0x970c, 0x2}, {0xf}, {0x8001, 0x1}, {0x9}, {0x8000, 0x3}, {0x3}, {0x9, 0x1}, {0x5}], [{0xb, 0x247}, {0x1, 0x9}, {}, {0x581, 0x3}, {0x2}, {0x4, 0x33}, {0x6, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x7ff, 0xffffffff}, {0x8, 0x401}], 0x6, 0x1}, {[{0x89, 0x2}, {0xfcd, 0x3}, {0x2, 0x2}, {0xdd, 0x1}, {0x5ec6, 0x2}, {0xfffffffd, 0x3}, {0x7f, 0x2}, {0x8}, {0x7fff, 0x1}, {0x8, 0x1}, {0x4, 0x1}], [{0x1, 0x81}, {0x7fff, 0x8}, {0x0, 0x7fffffff}, {0x4, 0x1000}, {0x0, 0x1}, {0x3c, 0x80000000}, {0xff, 0x2}, {0x6, 0xe4}, {0x1cc43331, 0x80000000}, {0x8, 0x3}, {0x6bf9, 0x7}], 0xf, 0x7}, {[{0xe, 0x2}, {0x9, 0x2}, {0x9, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x4de7, 0x3}, {0x3, 0x3}, {0x56}, {0x7, 0x3}, {0xdc6, 0x2}, {0x5, 0x2}], [{0x200000, 0x9}, {0xffff, 0xca}, {0x1, 0x4}, {0x9, 0xd3}, {0x7fffffff}, {0x6, 0x7}, {0x1400, 0x1}, {0x8, 0x2}, {0x7, 0x9}, {0x6, 0xa37}, {0x9, 0x6}], 0x7, 0x3}, {[{0xffff, 0x3}, {0x6, 0x2}, {}, {0x3ff, 0x2}, {0x9b09, 0x2}, {0x80000001, 0x1}, {0xb, 0x3}, {0x4}, {0x46d1ae2e, 0x1}, {0x0, 0x2}, {0x8, 0x3}], [{0x6, 0x83}, {0x1, 0x8001}, {0x4, 0x80}, {0x4, 0x4}, {0xdd, 0x8}, {0x10000, 0xffe}, {0x8, 0x3}, {0x3, 0x4}, {0x45db, 0x6}, {0x200, 0x9}, {0x82, 0x7}], 0x6, 0x6}, {[{0x2, 0x2}, {0x2a, 0x2}, {0x8, 0x2}, {0x6, 0x1}, {0xc82, 0x3}, {0x4, 0x3}, {0x4}, {0x10001, 0x3}, {0xaa31, 0x1}, {0x9, 0x2}, {0x2, 0x1}], [{0x2a, 0x3}, {0x1, 0x9e}, {}, {0x5, 0xfffff001}, {0x5, 0x8}, {0x8, 0x2}, {0x10, 0x7}, {0xff, 0x5}, {0x1, 0x400}, {0x4f, 0xf2b2}, {0x6, 0x1}], 0x6, 0xfd}, {[{0x48}, {0x7, 0x3}, {0xffe, 0x1}, {0x2, 0x1}, {0x6}, {0x40, 0x1}, {0x5, 0x2}, {0x7ff, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x51}], [{0x7ec7, 0xf}, {0x3, 0x954}, {0xbe}, {0x57, 0x663}, {0x2, 0x3}, {0x8, 0x9}, {0xd, 0x2}, {0x40, 0x1000}, {0x1101, 0x9}, {0x800, 0x8}, {0x5, 0x92}], 0xb, 0x1}], 0x9}}, @common=@icmp={{0x28}, {0xd, 'qt'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @multicast2, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x11, 0x2, 0x59}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @rand_addr=0x64010100, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@multicast2, @private=0xa010102, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @port=0x4e23, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @rand_addr=0x64010100, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xbc8) r7 = accept4(r0, &(0x7f0000000080)=@sco={0x1f, @fixed}, &(0x7f0000000100)=0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 3.009199576s ago: executing program 0 (id=3747): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000080), 0x80800) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="017b35fe8dbd29d51830140a02543a000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) 2.868047753s ago: executing program 5 (id=3748): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) listen(r1, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'macvlan0\x00', 0x200}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) close(r4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0xe}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r6 = accept4(r1, 0x0, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r7, &(0x7f0000000ec0)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@rthdrdstopts={{0x11, 0x29, 0x37, {0x1}}}], 0x18}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xfffd}, 0x90) 2.775877934s ago: executing program 2 (id=3749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a00000005000000", @ANYRES32, @ANYBLOB="00080000000000007320bb2fac7ee7aa00000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000440)="71aa5a574098d6a7ca834916c606210bf6bed133674633504315fc495b5f49a2bc82348a96dd7d351ee6c5ff7fbad28b73ccad6adcfde35e9eb953709ba84b8ef863d44d981be756b0a948d26a030d104617a9383f7e3c937d515c61d9851ef7a1a483da5991d05cac7d986d49b08d34445e8e6a754b4e52f5e02e5bc65e67205809553352dd", 0x86}, {&(0x7f0000000500)="eddbf6f681be1608ab39f9e16588e003d11630e34955bcec2362241a3270855fdb7bd0f1a15f13578efc5f97b55ae20663abf0e99555b1719973f929586319e164bc33e4fd07aed608c052e784a3b96ac63e40f087b9c39e6de135876466a568f8bafd2616d10ce1644be007b0ca248c302df90f1dd58022fde537fab61ae1b7425c586c35f28f2d3d91f861abf83853341283efcec4ba", 0x97}, {&(0x7f00000005c0)="346580705ecc30ce84afe173454ecb0fc24b2de29160d84bc951f3c2a752ade86e10b0bbb42f2acaf24125527d7f4313acea2e42ab16b77028076d1541f100934aa5a9ccf419b0ea18755866aa08efa9edd7905805d776eb6717b40ee5c3f7e1f01e8d0ede3398b4be99b2999a1b42e0bea40b914899181708892b183d5b39793c9e4eff6c5f4b67", 0x88}, {&(0x7f0000000700)="98e0c7d1a77050a9d10e5213f199e1856288f604429b169fbc8a33d0499e908491f5eba9b81f48d2b613380abc48db59fd2a0ae74f6c7af01fe5cf2b895177367ef8cee6b10bc1ae28943afbe989e02d7a533b37800e85d56b7fa6df2f3387a04d7e8019de50225c2428f85d326ac7f12717b9b1b99e8aa00f641d46eb3c", 0x7e}, {&(0x7f0000000780)="bb107c4bbb18d1daf4abce5a3d34d70f7dbb067e73e0f9a5ce6bc896ab88a484b52e631bc0e43b70ec2e6f2c5f5bf5abc328d99a5344c0d60d2f5fce362e29790bffc333fa90d9fa100a15fa4677bffa232c3d7a3fcb54c577ec9d766a22e93f82b27061beed01ebac988608", 0x6c}, {&(0x7f0000001140)="4192fef08f79d98c6241f1e1eb810c963b5f540471b8badbe17dbdbcac4070227639854aac010120067e8cea813b4a6fbaa7e7846eb7e665f1b26b612b0ffdf8a4e9ff41dc0bfdc20a4d011400b2ca9a6f05d643e031d102d122b6e65b6c9bcdf26b1c310bcc3d32348770b5ccda2a3f40d2e2389718c3dfb871e351cf18c8dd51be17f41308a88675068db5901667cf9ffe207903a0232d5a792a5c87dbc351860b28f2b1d21f7f7643ec65cb815306e3f0e107e78524ab1d31fe99c2a5c85e25a6b2139b1577ff1d282e8ac798954e84d901bad2fcff3df8294141e2bd05f3e469b188f7", 0xe5}], 0x6, &(0x7f00000014c0)=[@assoc={0x18, 0x117, 0x4, 0x400}, @op={0x18}, @iv={0x88, 0x117, 0x2, 0x6d, "aee625503767c75ee490912f9bdf726fa9b51ad662794a75b862c0d5119d79a71c3878f9620af3ee21d72d5fe84f166287d0fa2da7d42298d6cc7f292f3784925a25def5775298ef58557d9ec8748c44f544254a1f20c5c29792c02ce0ff81168e0aa366181c8adee3d8cb3e4f"}], 0xb8, 0x4001}], 0x1, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@deltfilter={0x938, 0x2d, 0x8, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x7, 0xc}, {0x79fa5119c6d524a6, 0x5}, {0xfffc, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x7f7}, @filter_kind_options=@f_flow={{0x9}, {0x900, 0x2, [@TCA_FLOW_ACT={0x4d4, 0x9, 0x0, 0x1, [@m_connmark={0x158, 0xc, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x19, 0x9, 0xffffffffffffffff, 0xbe29, 0x800}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7f, 0x6, 0x80000001, 0x8}, 0x8}}]}, {0xee, 0x6, "5b2e15b88fc2cc3c0dd63e2ac5b81679b564a2f0ade36e3746683c790e0f1cbddc5dc311abce35e8a11996a77bdf3b48b0711fb63889c3c8a51b7d237d168a63dfc287707294f6e56da1d6ee799993b1645f0c51c724fd56314615613bfc7f2a94924e77821e70540b988c1ce4ba6b08757ed02fab54c3097667f805096e5501a86dd25af455450305985f78bc738a604d8de2b9fd17b67dcf0a738f3591123538540659b1046053d96c7a1e88a82f2b7d78cf279bec333eba84d38edaeb338612927f963ae7f06947f1c91f2a11409650e4a6a960968bae98eacbd6d5da8d6fc3404ab76fda6a8af3d5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x160, 0x4, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xeb, 0x6, "8bbef81d60c5e40fe189b472a9ac773aa6c23b4529966b0d71b71aedefd2cf4f9bee6961662dbbcd092c15d74138eb3eacf5e8c11096489528957bb19ab109c1cf8a7e1a46f901221cb8d7f5238dd8264dae8bceed7fd6d239bf5050411b54fe9342730cfde93e71473d3eb539b7de1451350dc26596f568e1a932a33caa99050ad4f8140d464772473da70b274ce057777b05fdda00439fd6647eac0c0d7568bde6c8f2c15d6bc67b6d331d1b19638fbd33a6b17c23a87aabf77c22b626207d48429383384e2bcdae52c7149fd5e66ee1110ba6ae00e417ca37a358eb0c4780a56c1e3bb2211c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xbd597f591983402f, 0x1}}}}, @m_nat={0x80, 0xb, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xc09, 0x3, 0x0, 0xabbc}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}]}, {0x2d, 0x6, "bbe4f234b9225ecd67179aff016409989b8906a07751e29cb5a791d85cd4d77ba691ab45976158032c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x100, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="e71cd39e0117"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0xb4, 0x6, "183dec4233919091aa711d56f3ae5aa64c8410eed77f110df2868708fa35f4957c306feb8b0d5a6547e214ca57b3a1fdc79441c2ed070b5083b274f176fe55c92910ba4e4be56feb028bd250584fcbc71f48664bb39b1709b108889327560c9cfffdb6225ab7eb99615467221ed8b93043c9497e2c949f5abcea18cf5e36a7419968a2a20c84c0a5718ed58f3142bed26dc7877241076ba0ad1cc5847760e41046934c0d33b318b1f7a5d8fad1274469"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x98, 0x16, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x0, 0x10000000, 0xd2, 0xdde}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff9}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0x2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0xffe0}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0x12, 0x6, "b759256d99a7cf75218cdd047106"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x3}, @TCA_FLOW_ACT={0x418, 0x9, 0x0, 0x1, [@m_pedit={0x164, 0x5, 0x0, 0x0, {{0xa}, {0xc4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xc0, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xbaf9ed389b7c19d7}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x76, 0x6, "cb0d6337bdb754d7212d1d68cb454e5299cb57753cbc2ebe57c465632ceecdb477d59a7d7a54fef22451eaf9af13a4fd667102062e7585da6e9392ec760294b2e598bc2a53600f86bc956ea4ff85acf8db020f77428bdd9ff8f9b6946002b4bd086bfa1049735a138912c10b6dd76ed59c8d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x80, 0xf, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbe8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10, 0x80, 0xffffffffffffffff, 0x9, 0xfff}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0xc, 0x1, 0x1, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x100, 0x5, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb66a}]}, {0xc9, 0x6, "a8e028c0f74dbb96b196cafc6d0f3d541f9cb0420412bf20b4fe4fd520afa0881359301c25fe814a601713d6d22598ed8688d7f4b0160dda5a34d4546714cf5f4cfbe4bcba8778547675f44ea4c7ea5eebe73b589ffb58a7e1cc9da370dd49c6e826b5d303fecda8cc16b288e3452f2a688f8b704f559e1c0d8bcbc49a0391041ecc36fd051663704951b96c06a23ff3c248ee931c8f53aeeaf58da687d2d1e647a516aaa879aaf4be23b5343cf300f6b4c98177a8d0e5a3f67ad7a188b2a1b30046541afc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x130, 0x1e, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x2, 0x20000000, 0x2, 0x2a0}, @multicast1, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x401, 0x6, 0x10000000, 0x5}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xef93, 0x7, 0x4, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x80000001, 0x1, 0x3, 0x1}, @private=0xa0100ff, @remote, 0xffffffff, 0x1}}]}, {0x68, 0x6, "59ff78665ecf235f36386153b5b51c634b42755866d7c20d3ff7f04dab9fa3072026f8e79bed5d95d1ed588e45bd33e087873451ddf0fc2c0df5327acfd3331b1b10b61077e9af2f9584d743bcead9ea66d30ab9f6205082a39509ccbc88abb8ce6d17cb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d1a}]}}]}, 0x938}, 0x1, 0x0, 0x0, 0x88d1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000200)="d9", 0x1, 0x8040, &(0x7f00000001c0)={0x11, 0xf7, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r7, &(0x7f0000000080)={0xa, 0x0, 0x6, @mcast2, 0xffff8001}, 0x20) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x804) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r15], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000001300)=ANY=[@ANYBLOB="88010000", @ANYRES16=r10, @ANYBLOB="000323bd7005bb4c116f080001002a847c0d91366333e46b", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.723979801s ago: executing program 0 (id=3751): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000400)=0x14) getsockopt$packet_buf(r3, 0x107, 0x16, &(0x7f0000000440)=""/182, &(0x7f0000000540)=0xb6) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) r4 = gettid() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x148, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x148}, 0x1, 0x0, 0x0, 0x5}, 0x1) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x54, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0x1ff}, {0x8, 0x13, 0xffffffff}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2406c004}, 0x4000804) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000003a00290229bd7000000000000a000000756b3545ad000200"], 0x1c}}, 0x20000000) 2.559511148s ago: executing program 3 (id=3753): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0x0, 0x5}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$cgroup(r1, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2.525443707s ago: executing program 5 (id=3754): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @empty, 0x47}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) accept(r1, 0x0, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0x10001}, 0x1c) 2.443616786s ago: executing program 5 (id=3755): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c00000310002eff0091f05bf52351c80a0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028008000f0006000000050010008f0000000600180000000000"], 0x4c}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x3a8, 0x1c0, 0x310, 0xffffffff, 0x268, 0x268, 0x310, 0x310, 0xffffffff, 0x310, 0x310, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0x64010100, @remote, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x96, 0x0, 0x1}}, @common=@unspec=@limit={{0x48}, {0xf, 0x101, 0x5, 0x3, 0x400005, 0x1, 0x81}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7d4, 0x4, 0x2939, 0x2}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @multicast2, @multicast2, @gre_key=0x4, @port=0x4e20}}}}, {{@ip={@remote, @local, 0xffffff00, 0x0, 'veth0_to_team\x00', 'batadv0\x00', {}, {0xff}, 0x62, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @empty, @empty, @icmp_id=0x64, @gre_key=0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000240)="94", 0x1) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r5, r7, 0x2, 0x100000000000003) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r8, 0x0) readv(r8, &(0x7f0000000500)=[{&(0x7f0000000740)=""/127, 0x7f}], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b40)=[@in6={0xa, 0x4e22, 0x6, @mcast2, 0x10}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, @in={0x2, 0x4e22, @rand_addr=0x64010100}], 0x4c) getsockopt$bt_hci(r4, 0x84, 0x14, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000880)="8f6982b23f342330a00b438d5da951b717ce97b3683e55bd69a3b87c5471a367e9871bc3e797a7556873ea71d4605e2e58f6c9b9e2b98a6fdcb23ff594558f19ea6ac5a56f4022402f3c94b5cd2e031cec3f84a36a8c1704cb6d24ec04ca9fb863947ad96b5db20abc7a4a09eb69c679b7a7bff15d00836742f460dc219bd9b355eb535834542bf4670799c5997737dbd5c04c79f88ddd07b27cde5c684745ec3ccb35b59531ec58182e8a8204057ed45f617c232f0c5a743a1014da54448e01c566edb0561d0c7ff1cc551648d56f5018455bb126fa689cde3f45f1a9e5b4c53d0d0ca9abe403000011f44b25ce51a537c00c9a491374dc", 0xf8}, {&(0x7f0000000980)="b31286c56205204da087532debc072236c519bf46f85f6d050afee47a6f02cbb877321d23fdca91a5dc72342e9e0393e676430453df24a4f4896ad0716f9edd321dddcbe27f756aee5fc2c76a2998bccada225491631a9a5d36d0bb6777cfcd2fd8ac39185a5ec16beb67f8bb089e683ebd973fd968f4bf92488bdf616fc86fe9846676f3c9caeb25ade55e3881c58fba1ff46c0e40edce6655068eace6ad5a83750b68c90b1f8e87e11c3ca453f005dac6f671d533bf6f332fca47d04431874758e835f22d60895", 0xc8}, {&(0x7f0000000100)}, {&(0x7f0000000a80)="065c93ffbb54c6b051c4435568a9457a2c2a58a84b6ef76d4d737a2d49640552a5390f3c5c7fdb8f6a04cbdcef3b004a0409597eec99d69685eda45e9c40b307394b72e4403cdad151ee5d22d0ff6de012b6754acc3525169e66cd2dc0372560a4fa8bc0ab31ace51345cfe141cc84bca41d557371ca5ae5ee94e0b1ec0090af73", 0x81}, {&(0x7f0000000200)="52c1b084c4", 0x5}], 0x5) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002680)=ANY=[@ANYBLOB="18000000520001c700001000000000101c"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.441117839s ago: executing program 5 (id=3756): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(0x3) 1.832410188s ago: executing program 0 (id=3757): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xf8, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff3, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xbc, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xa8, 0x1, [@m_tunnel_key={0x70, 0x2, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}]}, {0x5, 0x6, 'g'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x34, 0xc05, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="050000000000eeffffff0e00000008000300", @ANYRES32=r2], 0xac}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000080606000000000000000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) close(r3) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000540)=r11, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0xfffffffffffffcb1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r15, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r10) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.828845178s ago: executing program 3 (id=3758): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xffffffff}, 0x10}, 0x94) socket$netlink(0x10, 0x3, 0xa) (async) socket$netlink(0x10, 0x3, 0xa) 1.781284353s ago: executing program 5 (id=3760): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x69}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x4880) ioctl$sock_SIOCGIFINDEX(r0, 0x61e5, 0x0) 1.667560256s ago: executing program 3 (id=3761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x7f81, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x800012, r1}, 0x6) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 1.576908583s ago: executing program 2 (id=3763): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)={0x18, 0x5a, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) 1.427837985s ago: executing program 2 (id=3764): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0xfffffffffffffffc, 0xfffffffffffffdfe) 1.387162787s ago: executing program 0 (id=3765): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x5) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x8040) (async) r6 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) sendto$inet(r6, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) (async) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES16=r4, @ANYBLOB="f78c00000000000000000100000008000200030000001200010076657468305f6d616376746170000000"], 0x30}}, 0x0) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x6}]}) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x28, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000240035b90000000000000000000000000600040000ef00000600030000000000576b7ce4234bbc5ee3a30607347bf1c8daffc00bf0888aec2473632e240c2d5e3a08d53dfbb13a3628885bb613a8d72f86a3fdd973f2977cd6ebd64d70218e63d828cadc4b136298bc51d131d3d525ca5c5d58c762dbebcd685a7172915eb61c05ed149f2a3432ebd70e6f3226e657e705"], 0x24}}, 0x0) 1.383075819s ago: executing program 3 (id=3766): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000340)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x80000020b7ee}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x11003000) writev(r5, &(0x7f0000000080)=[{0x0}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001d00010000000000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="800007000a0002000180c200000300f505000500"], 0x30}}, 0x48080) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0x6}, {0x1c, 0x2, [@TCA_FQ_PIE_ECN_PROB={0x0, 0x9, 0x24}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x10}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x4c}}, 0x4002) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20049090}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000b40)="172a8f81ab8806e350731e9401c4874f8aafbac6e7847c7206a76e92b876c81bd47ca29b8a2b8e1760de10d666896d62c14ed6ab96cc6a4a55fd837b850b8715502aebbee5c161e0e277861588197b8db172093f009f1cdaf227a4271de200b6ae3dc599be91314c2a3d46268dac6da02db6a1fffa3c04be523bea7880fcaace696411ff27ea7be13862f9440de54223f5e36b9dab9c40606828a38932d1ab40fe19635c902050c0b4b45d7d0c472aacf07ffbaf3e93bc43ac3a9fcf252c73c3f244a2b3d57c4379eec5c211f9131744c5b1b8d1c321f31b6a1e77b2defee8159f05c0f98dfa1c8d5eb3a51568562079711e1aaf36f6800245e876026e0a3995049a35743cdc334ae86863c7a58960ab1f1da8bbb71c522ce862efc2738c5492dc43ffd9bb7f84c70ee48f9bf9067ff9064f106eb20ddcc6ee5d7d5d85095aea5e8c94f55fd227bc1e264e6d2131bee5a496f60d7691696dfb3d021dcea6b1acc8a09c9fe74deabae4dd9fd11a86296deeed78c2ae028d74537c833371798db1dcf499908185559356e6de1a72856c14c25d317ebb950a1d44a92e6d17be44a553d9666d8613ba523e983556d679ca41f23966d16c87a0bf02489cbdd54d28073e2f3ce323cb79e263f6bb43e70dad8e0dab6a680e96be94c9be25c2ba5f8469f4320648bcea4384bdf9487aed93a8b94287138f7b37d0f053683f61052f028ea445d3adc4f3ce5c84b65d51506164bb2bdfa1f050afaf8fcee0141c83d2f040b18cfb0de8727775292b2db86387d089822ba4e7d212ffa262a39acf2aa3c8b1774307ce75ec2dd45cb2020763d4d7b15870c9137bc3c621161e43aed71f47d5103418a2957c75bae01ad204e255f53c5b8267832464bff161536f5848e3a1fdea918902ed3c19ee536352eabcdedb4e00b29f2f5cebd0ab90d9616325fa9bbc3ead1b173f1d75ec95cbbeb786924cf5175c19660ca3edac7ae3c05338d730797fb7d325629dd3cafd486e2a6943ee55bedf2f371f2789cb1e4d6e3b3f91db16f21fab92528977f6f7c30233a7fd837a4c60cfb2e5fc4bacad60827a4c99d4a7d3a5e4a3b0ccf785a4b0e64ca82fdbf20d9ff5114180377b962385837dc3245700cd92776d93299e5591f20e2f9a16b6f1695dbe2fdb8ee193a1de0bb74b9c708f422432e1ef9f5e5607b903254b1c39d092f23ec5f5ee72bcd2b470129c6adb4b8ee506efaf0daf897ae6e83738ca67f3b8f0cfbee8a95d1cd0dc459137e8d27f5b5c2303a82bced5f1ee695fc8dca74dfbff3b10ca03084bd0c1d8f417c839db95a8ff0184a8eed2de468395e3df3f5335ba91a8a98a712a97e88d5d373f1496b4fc00b4f75ed2891ab5dad962451f66f7798127f0122746817cdfa3f6f4ca495870b0bc75bbdfb2fc68e1c1aca69d73239d67275ca7bca026301af1eca2d654b3cd56c69f4f8944e2b659f417dac6e03a77502a508cf9cd416dbb9ad1371a22498218dcba629a7151666d902a5132036a35a00d2b28f25d7a54ac6db4040ae8f8b219a972604bdadb1ccc9f5f05dff8a3d2a069b2dff2c69669be3228d9c17fa440b732945172291a2304d1775895baed7e35b69f3edc8f9e9669bb28787bf4efc6d841355dd38949883fcc61c16afd24422f35034b8e7170c0190c277a54ea54c974273e9e5fba4dd824accbc921aaa4a823c2c8a5be0d168c1ea2ddb9ef746bd7500e1d636b8bfd9ccae353749b96fe38206474e8c025f973fdbd7b602fb0effa67be41df658b996b38bd7f45f47de987cd9c8c214bb914608ddb5c69e44b8e3bdd859d483c875edeb7ad3de2ba336d1adafab44bc96c0436ef3125905a7eb45fdaeefe1b89423b6cd6fe8826f6f95181a240668680e8e08da6ff6b404451aefd872a852220b660adfcaaf12f506bb8ab9716f41f0eac5d5669657307d984dc47826c613784a3ade212ed0e1be76075b68138690fe896af9ea1c8f6ce58624c64ecc9df3e936d81acc604d1de6ae552aef6b4cf17f0756755408b69d251ad2256241ed561a1962a74e66529614be6dd938e6916b15a326fbeeac117a615af8faa98d2cf772f38f3ffc4576d44ada8643a9538b77b7f3b68422d01cb26f4f6f2223bc99042beb21463d2c69a22ad2ab02b0b31c1492a364d715f5086b9208925e88951457bf32a0097f571bb9cbc190520e386100e73d470ec3beeec51796e306dcfd25986d5e422df0f517644f752f73587ca0025620abe1b10cdf353704e69023d18fc46387d50c14e52a509b468ee1625e3d141c247e67a9fe94cc78304380f7136657d63f162b74a804039e814fb2c71d3f95b04c610687de325283d30e38e933c9a03813afc1c2ecc1a28d1c298ed7218f2d29b0ec22e1a7b08dcc763976b5769151bf2cc9133f49f9148caf47fc2bfd7fdc82837ffe8a60f3feae0ef2695c522bb88da7556748f6119ac60022ec4603711ab06cdcf5dbaeccfe9399c6f3d7ccb958a04c9c4a80f8fc23624183921583e151eb32f732e6ffa40ef0d02f3255249cf2104780e711e2b19a863c43249aa51f703890ab71e39d32baa1127f0552e01ea7b9970703acf8e6387e877a651d243bb19accf571f9c8ab1a5f4e74c5ff4c8a966b1fb76f7d98f13e8d159d5379fca3947ff4cddde9dabbb895443a3cc9bc22c0ec821259d27dccb06faf01e130925822fea682752e96f109ab79c74d61a70ee829d4032e767050a1b228fb286cef9c21bec62c7a31c9a0d5e7a80c01f18f73a1288fbbcbed80baa59477f0e2f824b8823c75023fa9867a76acda63b022f210e826bd51a11d6b42a264b55a5a8cd2e32a41e8913f83c8630710fad671a8e4075a519887995618ccb3ace8b4b65f14ce286ff6c1e0433796113e3466e5d402d9fb7b4dea35994985c8bd5eb95828f68fa2a547336f93335d12e57f36fca1c7ac9263b7c097b75a618d9537662868ee57d69b602b39e3c9ab5577dda9ae21b628579ccc0332ae537ad5fd0a5125891b612d49dfe6cd6485f493472f7425f88e4462d72ffe3d350584878a35a638752abd0a0e2390e618c132e45742a5eeee563ab58130c4736a35fb407ecafd2fba01b96508d5c5b42b55b597a6a8c92ef9ecb3ffb983d2416f5c2a3c1c66996e503e938fd5a6f765ba724d22d5d808e8066e7c9eb142a076d7bd9a08f7ec9d3add5287c13487b3e97f4fcdd68572ee339e46732b3de1ba642c457af0134a79ada32801311b4dbb694116a68929d66f7a2cf0667d453919f13a4c4c12b0863092e353df5c8efb4c74969d4833c7afc805ba44af1d5a0aae8c65b4ce2323186b8d0022e25d0f30adac468458f5176c3b3de51247082337aaac32effd1d96fb6fcf220308139a83fefa2252526bb61c3ca65a161d7164cab6f8b016107adf8a440edb080e7cf37291e1da67c03599f94b091883c276a105373ddefef9b16bd1b7b3031a07d58286b2ce4c15505a9ef390ec6c44a82474c045334d2c8432ad43fc331bad7123f47761cc1c2b14cf804693532a730f7011f7f0c9d38732bcd1e7c9398a5e817b4543b7cf1dd8b73572bf29fee1dc4ab19537a62a59dfe17fff709b4b232a7831f16a5bec2dcd1b52981f4c7b2d16d939b0d709a8f9fbbc3b011ac9579ed572a2e24768c387a4b2e8ed24365384f43c0619d09c59dfe93fbce9220a44d8ad6ee0f5fb4a2244c8bbef1df99a1461077d33f586ca03b50347f5edcc129a52b33aa70ee527edd3c9013b41fde143c20c0e735184c99833b81b1fca6f74559ce9c8c2c8a82a5a3c0d3905fa0686e5d677aa6234c41a594c4be5556cf011a3e7706a6dd6cc3f2b078a54618f157fd9692b71a49185b95111b6eb5d54e0191a07cd61e1f45b9da9c941bfcb521169f4c150005853e2b4a6c190a29ef5268f188de78d0da3a2de098b166b8a0f87c6a79fb51412ac19b72205091936007fdee3f09b4153976aebd1701f679818b89f9537d72a21c5c3abcb48580927c9318d9cb9c0a6bed0a83cc42b472e92130a02cfb60b6433e582ce407111adaad57a5f13b61cb5608dcdba1ba99dbfb52fd765989b5bd8acd2b05f6667cfb8df3997a73d4c72389881b0f01b1a6b8c61dc4d363f8ac9208fd018e6522a2fdbc1b18280c497a1588d6e9df950257bebe2cf82753eaa4bf712cd6724900efa205c2e65938708b8c4a992e26050ed95410cb1a83e06b62e788da58168720af497eb6cfee491dc713f1c38807febb37422917991867330154ec6bcbb544dcfe9bc8f55a62034fccfdcf3dae5c49f1e91c63c98303fa79c505e3e12dae0bd0884c7d75bb73ad9c1978a96a96ed7f3376563a839916c4b28a8cfb613dcae28fe044214dc14ebbb42b90b1ea9378fb7e65d17897e6c84a81fc940b8b6d172104b5df3f089ec439d2e4786b9779d51dc193857206a0f7930fff0ce5a9833f813eb9b1daf35cb2298c3038dca172e9c8d33832250ee7612c45425abf97f8b59fa06d6969d8ca5a4c514fd6c12d738ec6df6ed18c8e5f7d615c8d3a7726e0af7d9496528c514d9d75ddc193cfd0e07997958bae94e45c87a049e85fcca306cf62564259b3ec8c43280c9f0d58762cd6f4c3b1c2fe9d94e42b69deae49090f228b393ce93fd00edf7235cf8d8076ee705805af8efb695dc9c06ac972211b7e54f00db03e7333cb9d4171806be250a51f5e8375cf656fccb80a3f5334c2c2c52cff9ba12b2b88842bb64189a9ac401b176676aadcfa4263609ad1b43015ef15dde515898fc0cb00d75128facd6e46b94eb0d26b6e803784083d342425a22c33ecf56e5227e57a048f369dc315455b58405682353233657c5605a7fed35539db2f9d4d53cbaeb827c12cc94fad48ca1ac4f85312568a9978f655ad0893141a5a5795d8fa487ee43451b8c328e3435301826a177091a589c7a6262a9b4c60fad6d7e0139018a12d5fcf5c676d72e7e7b30781080f087777bff03bd49ea70a590492f996c16dde16c6a12da57f678533e8a524e3f7fb1538f862c916f441ba57e9377148a7b451e1c2963a4cf7140c4f428462ca62c0098eb6ac08a45908463a672c400ecdf385345d16d6d25345f74bcac3e737decb42c4a1eb5eb895761478f65ff3641272d255a567b066ce846dc44c5ecfce32ec5843cefa51162eddae9cf4c41f381fe9e33bab32a557adcd8f3919b21f6bc48daa7f90c841c12abe7783253bd037c75680f4b4370a3038b0bde8b2d6ae031ecc6395817143295d5a39b6e13cc9ad33525f285db1c93925732a8eef7719295d6d4f1fdbc760b8d00d8dc79282c023c84a85023bf133576377edd3e49fab1845b627898e8c149ec22d09e09d52a8ee7178e041d20c418bab60d57ee8cb7267674dfc3d9428fdbae0f68d66e26639bb35844c62d56d408ba9c3129bd180ccfcf63b99ad6962e023acc4b7131fa4daa42415ad96d1deb8a8b1b17f73115bf0f1d1cb9119198880b5819d4e076d55fc23201d9c51a413202e4516ed02e94f64a2f30edb301f65d27ad9f0a0eb183d6c7f0da51f24e1106cd182102d54bc534794078458b0f4b672f98b70905565194ec197ef162faa4609cb6ad6ff929a8cb27a13c299e4554e08be604da0d2c597eb3793df98636cd29a3df6cca1f204910f351cb38ae3319ae6ed5fc89f5d7ae4e66c5043e753ae126524cd1669e608e905f656fbb001584198322bb8b0c80282ecffe4f46e4e4abb55644c0bf724a595a5bb45fc11593827b9491ebf7a2fd67da36db0e631308e4dec269e244a8fe84c7da94ddb0e1409", 0x1000}, {&(0x7f00000005c0)="d709bee972b1935d159769f97dc5c94e9694ab6a1aa0ace9ad9b8d6d860cb35650bc0b83050bf1b15fafe258bb462e001c06d037ac9238f41e365594b36d2a156f006ed6395a970c5744ef9ec659b2ca8ee540e2707a08ce401733d6d0eab4c6dac84b9480fd6115888cb9b5c7cb88c53e82bb5a194c502d8dd9b4b71a08ff9f417e4ff6f28df0c4ede5173f4b06b5d743ce12ec3195661d24ec23675dbee9c81aa56995b623ca2e1e00ef3616d7f194bbef01b8109a50aaf9fac2771bf0d38fe244998f21d820cc4cd6f064396271d0e2e8a0629fb0860bcb4789", 0xdb}, {&(0x7f00000004c0)="e4b3bf85c1d9606f43d80ea4256e0b0161dfbc494e69a7f0a701da00050cf8ef05bc332cebdd11a97045f4d2dd4a053d54fb53c4dca2881ecad8133d20f78592638c7b9f7448bcc38e1e628edd5f79c8985eb7253bf34f787359fe5bec7781b8010ff7aa6db39de64d6e786b982b01f4f8d3d9829b3f5606568e48f1f25900a77d5e8e46f85f874a1f2ce3edad05", 0x8e}, {&(0x7f00000006c0)="6678593b5def70ef33e01aa6d23e478009628c8928af1570704b292b58cb3b3644b62e8138455630e3d2c91536a51e808fc7e3ba2a2a9d1573c343100477ca906bd948f926e9feb8d1b377b1e4ec88d07d044b4467d15f5be89a0f296dbe25bb3d66e2d6331bd353348ee6bb46b34221d21e82bb66fa8ae819ea64aaf6c25acbdb806077c66b6fa45f8c98885709f2eec1a7", 0x92}], 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="64010102ac141442000000001100000000000000000000000100000002000000000000001c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="ac1414aae0000001230000001c000000000015000000000008000000", @ANYRES32=r10, @ANYBLOB="ac1414aaac1e0001000000003000000000000000000000000700000089033d44140c10000000070000000200000009000000b6019404010001000000"], 0xa8}, 0x20008000) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', 0x0}) r13 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r12, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x2}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r13, r3, 0x4, r2}, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1000}) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.360072809s ago: executing program 2 (id=3767): r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x90, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r5, 0x118, 0x1, 0x0, &(0x7f00000003c0)) getsockopt$packet_buf(r4, 0x107, 0xd, 0x0, &(0x7f00000002c0)) 1.303291853s ago: executing program 4 (id=3768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x38, 0x0, r3, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c4}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000740)={@ipv4={""/10, ""/2, @private}, 0x0}, &(0x7f0000000780)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x4, 0x9, 0xfc, 0x6a, 0xdca480dced2e41bd, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8000, 0xfffffffa, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000900)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'ip6tnl0\x00', 0x0, 0x4, 0x5a, 0x6, 0x1, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x700, 0x8, 0x34, 0x100000}}) (async, rerun: 64) r10 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r11 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r12}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0) (async) r13 = socket(0x2a, 0x2, 0x0) getsockname$packet(r13, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0x20, 0xffffffff, 0xfffffffc, {0x0, 0x0, 0x0, r14, {0x4, 0x9}, {}, {0x1c, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x20054004) r15 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r15, 0x1, 0x41, &(0x7f0000000180)=0x3886, 0x4) (async, rerun: 32) bind$packet(r15, &(0x7f0000000080)={0x11, 0x0, r16, 0x1, 0x0, 0x6, @link_local}, 0x14) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x101, 0x8, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x68, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@lsrr={0x83, 0x17, 0x93, [@private=0xa010102, @local, @remote, @empty, @empty]}]}}}}}) (async) r18 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r19 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r19, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$nl_route(r18, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r20, @ANYBLOB="00000000000000000c001a800800028004000180080004"], 0x34}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000ac0)={0xcf4, 0x0, 0x100, 0x70bd2b, 0x8000, {}, [{{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x3, 0x3, 0x4}, {0x0, 0x3, 0x91, 0xd}, {0x8, 0x0, 0x2, 0xffff}, {0x7, 0x0, 0x1, 0x200}, {0x8, 0x40, 0x7, 0xffffffff}, {0xb, 0x80, 0x6, 0x9}, {0x868, 0x1, 0x9, 0x80000001}, {0xa0c, 0x2, 0x0, 0x751}, {0xe, 0x4, 0x0, 0x6}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xbb1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x6, 0xc, 0x40}, {0x7, 0x0, 0x0, 0x3ff}, {0xa, 0x10, 0x81, 0x6c8}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xb, 0x5, 0xd, 0x1}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9649}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2dc, 0x4, 0x6, 0x7f}, {0x0, 0x0, 0xfe, 0xb}, {0x7, 0x3, 0x9, 0x800}, {0x6, 0x1, 0x5, 0x8}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r12}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xbd}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8, 0x1, 0xa, 0xfff}, {0x9, 0x6, 0x78, 0x5}, {0x7, 0x2, 0x7f}, {0x8, 0x24, 0xa, 0x2}, {0xe593, 0x7, 0x7, 0x3}, {0x7f, 0xc, 0x6, 0x8}, {0x9, 0x7f, 0x0, 0x8}, {0xe76, 0x7, 0x9, 0x3}]}}}]}}]}, 0xcf4}, 0x1, 0x0, 0x0, 0x81}, 0x40) (async, rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000717754b7f7729b41000008000300", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}}, 0x0) (rerun: 64) 1.215550702s ago: executing program 4 (id=3769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x7c}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x200000000114, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x140, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x104, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x168}}, 0x800) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020200000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000000ac0)={&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/171, 0xab}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f0000000500)=""/210, 0xd2}, {&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000000600)=""/185, 0xb9}, {&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f00000006c0)=""/239, 0xef}], 0x7, &(0x7f0000000980)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9463, 0x4}, &(0x7f00000001c0)=0x3, &(0x7f0000000840)=0x3, 0x4, 0x0, 0x6, 0x8000000000000000, 0x44, 0x4}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}, @fadd={0x58, 0x114, 0x6, {{0x4, 0x14e}, &(0x7f0000000880)=0x2, &(0x7f00000008c0), 0x4, 0x3, 0x81, 0x8001, 0x2, 0x80000000}}, @fadd={0x58, 0x114, 0x6, {{0xd}, &(0x7f0000000900)=0x1000, &(0x7f0000000940)=0x7ff, 0x1, 0x4, 0x9f, 0xaa4, 0x23, 0x5}}], 0x120, 0xc0}, 0x40004) 1.170096965s ago: executing program 2 (id=3770): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="85adb9ff1d8e809a65e5", 0xa}, {&(0x7f0000000ac0)="4986e59d3df6b0823023b228123af1af02dddf7368c29b3c419bcf52058cedbf760b8db46d089fe741e912929c1f5f37eb79d4ff10b2a1c1bbfca0dc905871e8ad536eb1760eb73e0f8c2a910da2ac96f053487ebb51d93c2efa4831dcb162f169380935fc5ea4b88312f358dee08c0795a862b7ab704023a0e75fdf84624b857bec96467abe347a45b207f3fc88f551d1c841972ccc5b2cb31a16739cf966ceee81ea8a12eb9c4da26388855527d9998641df9fb49f1b73d86bd23a2c6f868bca8b557e", 0xc4}, {&(0x7f0000000e40)="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", 0x13b}, {&(0x7f0000001d00)="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", 0x3a4}], 0x4}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="d90000000306010200000000002f000000000000"], 0x14}}, 0x8081) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d00)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000fbf5609f17a6cb6c0000000000060000000000000002000000000000000000000000000000efffff0f00000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r6, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x80003, 0x6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="02060200020000803d00000000400000"], 0x10}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r8}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f00000016c0)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3}, 0xe35}], 0x2, 0x40000002, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r10, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r11, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000040}, 0x8010) 840.242998ms ago: executing program 4 (id=3771): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448e3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010103}}, 0x0, 0x0, 0x39, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x50, 0x24, 0x400, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0xf}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0x401, 0x6, 0x1, 0x1, 0x2, 0x4}}, {0xc, 0x2, [0xa4, 0xffff, 0x72, 0x1]}}]}]}, 0x50}}, 0x0) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) (async) r7 = accept4(r0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x80, 0x800) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f00000001c0)=0x2, 0x4) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r8, 0x89f7, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@private=0xa010101, 0x1, 0x0, 0x60, 0x0, [{@dev}, {@broadcast}, {}, {}, {@multicast2}, {@loopback}]}}) (async) vmsplice(r8, &(0x7f0000000cc0), 0x0, 0x8) 751.977742ms ago: executing program 4 (id=3772): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x37}], {0x95, 0x0, 0x700}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 456.725804ms ago: executing program 3 (id=3774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x3, 0x4) 392.185443ms ago: executing program 4 (id=3775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000000c0)={r5, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x4, 0x7, 0x200, 0x8001, 0x7, 0x40, 0xe, 0x3, r5}, 0x20) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x48, r6, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT]}]}, 0x48}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, r11, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8880) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x154, r6, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3d}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x52}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x104, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x100, 0x4, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x3e, 0x1, "80166b002356771debb5e354b63d4a9347a3e512a92457e358510d940cf98898f2e379b552d21d1e9292412f078ff712b43a087b295c4731bfe9"}, @NL80211_PKTPAT_MASK={0xb5, 0x1, "ec39fab0c8a542ed3c6ea40e714e728c6b856b5853505ffa4f3d8cddd172e92321a0a6337a93c0de8e219542c00772fc989d674703fc4bd9ba0ba1dcc4a1423f1dfc935a729af840f4dff40835764e7092bf2fdb0020e9ca927e26ba0154225b111ed62e63f0768d241924c09951fc3704b7ade02adc68714da0615197ce847c0d16fece2c4c20c25721e21e083bf2ea60b07ebc056b49113c35d1a9335a18a6ff1ed169fc14aa84f4d6e48e1ba85b0e60"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x400005d}, 0x4000810) 239.536095ms ago: executing program 3 (id=3776): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x30, 0x3f, 0x9, 0x0, 0x0, {0x3}, [@typed={0x4, 0x37fd}, @typed={0x15, 0x9, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x30}}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 190.297298ms ago: executing program 0 (id=3777): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) 95.461931ms ago: executing program 4 (id=3778): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000001d80)={0x0, 0x8001}, &(0x7f0000001dc0)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0x1, r6, 0x0, r4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xff7c, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xd0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40fffffffc0800034000000004400000000c0a010100260000000000000a0000060900020073797a31000000000900010073790b7a310000000014000380100000800c000440000000000000000514000000020a0103000000000000000000000002140000401100010000000000000000000100000a"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 22.992284ms ago: executing program 2 (id=3779): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000018c0), 0x0, 0xc041) r4 = accept4$llc(r1, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000300)=0x10, 0x80800) getsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000300)) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 0 (id=3780): r0 = socket(0x8, 0x0, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) close(r0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x200, 0x12}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x48030) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1f0, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6af4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ec2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfb6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6bbc}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd9c6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5059}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x40) openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x4000, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa4, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3e4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2ce0}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x20008080) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r3, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040851}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000a40)={'sit0\x00', &(0x7f0000000a00)={@local, 0x1, 0x0, 0x20, 0x0, [{@dev}, {@loopback}]}}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xc4, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xb3e}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x78}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x97e}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2b}, @CTA_LABELS_MASK={0x18, 0x17, [0x800, 0x7, 0x6, 0x10000, 0xfffffffe]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000c80)={0x278, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x577eed5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc82d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000001}, 0x8040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, r4, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4f}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f00000010c0)={'ip6gre0\x00', 0x6, 0x2}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001200), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000014c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x128, r4, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5a6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}], @key_params=[@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, 'S)*['}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_MAC={0xa, 0x6, @random="3b2a34b3deaa"}, @NL80211_ATTR_SSID={0x12, 0x34, @random="b554f4bc9bff94475970d3cdd342"}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}], @NL80211_ATTR_SSID={0x19, 0x34, @random="908f4eb30c42d853876f8a22d97ee8c0579fc5a06f"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x128}}, 0x20008010) syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x48}}, 0x800) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000001b40)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b00)={&(0x7f00000016c0)={0x434, 0x3f3, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x20, [0x9, 0x3, 0xcda0, 0x4, 0xbbfe, 0xa9, 0xffffffff, 0x4, 0x0, 0x7, 0xfffffffe, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8001, 0x9, 0xffffffff, 0x7, 0x0, 0x9, 0xf0000000, 0x9, 0x9, 0x9939, 0x9, 0x1ff80000, 0x4, 0x5, 0xe600, 0x2, 0xe97, 0x0, 0x8001, 0xdf, 0x40, 0x5, 0x2, 0x3a4f, 0x6, 0x6, 0xfffffff7, 0x7, 0xfffffff9, 0x7, 0x76, 0x0, 0x9, 0x5, 0x5, 0x6, 0x3, 0x9, 0x2, 0x8000, 0x4, 0x36, 0xffffff7f, 0xfffff000, 0x4, 0x0, 0x80, 0x7fff], [0xfffffffd, 0x7, 0x6, 0x9, 0x1, 0x6, 0x2, 0x5c, 0x8, 0x4, 0xcc97, 0xa4, 0x0, 0x0, 0x81, 0xffffffff, 0xff, 0x7, 0x6, 0x1, 0x7, 0x4, 0x3cf1d933, 0x6, 0x8, 0x1, 0x7, 0xff, 0x7, 0x1, 0x1, 0x1, 0x20000, 0x8, 0x2, 0x8, 0x902, 0xd, 0xe9a4, 0x8, 0x8, 0x9, 0xffff7fff, 0x1, 0x2, 0x6, 0xc, 0xe, 0x9, 0x20400000, 0x5, 0x4, 0x3, 0x3, 0xffffc20a, 0x5, 0x4, 0x2, 0x4, 0x3, 0x0, 0x3, 0x200, 0x7f], [0x8, 0x101, 0x0, 0x2, 0x437, 0x4, 0xf29, 0x101, 0x4, 0x1, 0x2, 0xff, 0x9446, 0x81, 0x3, 0x6, 0x4, 0x0, 0x2, 0xddc00000, 0x7, 0x1, 0x6, 0x0, 0x80, 0x2, 0x9cb5, 0x8, 0x5, 0x9, 0x1, 0x58, 0x80000001, 0x10001, 0xae49, 0x8001, 0x2, 0x4, 0x0, 0xfffffff8, 0xffffff5e, 0xacc, 0x2, 0x7, 0x2, 0x10000, 0x4, 0x4, 0x1, 0x5, 0xdd55, 0xffffffff, 0xf, 0x30d, 0x1000, 0x81, 0xd, 0x7, 0x4, 0xa96f, 0x1000, 0x2, 0x1000, 0x3], [0x101, 0x10, 0x4, 0x7, 0x0, 0x24, 0x5, 0x99a7, 0x0, 0xb72, 0x1, 0x5, 0x8, 0x9, 0x5, 0x7, 0x94f, 0x2, 0x4, 0x4, 0x13cba84c, 0x80000000, 0x62000000, 0x8001, 0x3, 0x3, 0x4b22, 0xfffffff8, 0x0, 0x4, 0x1, 0x2, 0x3, 0x8, 0x7, 0xf8, 0x1, 0x7ff, 0x9, 0x674, 0x6, 0x1, 0x7, 0x8, 0x88cb, 0x0, 0xb2, 0xe, 0x80000001, 0x400, 0x9, 0xa5, 0x401, 0x2, 0x3, 0x6, 0x6, 0x7f, 0x5, 0x8, 0x8000, 0x10, 0x5, 0xe4e4], 0x13, ['\x00', '/dev/ppp\x00', '!^^\x00', '.)\x00', '-\x00']}, ["", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x88c4}, 0x40000) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000001b80)={0x0, @in6={{0xa, 0x4e23, 0x5, @local, 0x3a89a700}}}, 0x84) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001d00)=@get={0x1, &(0x7f0000001c40)=""/185, 0x64d}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001f40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xcc, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x2}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x401}, @NL80211_ATTR_FRAME_MATCH={0x9c, 0x5b, "146d292c5b2bcde402bee99dadd99fb4be76cc8d5f1c1ff563d0da1c1f1e40f36339c3fe744c51b8fc825c88976241ba9bfae973e699fc825cf75eda8b5c2997fc2248bf7e688839691afe1493bda0e8df792347ec5411c0063a9ae97b97b66fb72019bee52663914e41698601c9ed990be553710e01300de5b9ff0de80a79bc961a70c3a023b79b1d03635c1d5ba7dff8fc2629d5142056"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004010}, 0x100) kernel console output (not intermixed with test programs): 6.302604][T12437] tipc: Disabling bearer [ 216.357621][T12462] af_packet: tpacket_rcv: packet too big, clamped from 3948 to 3944. macoff=96 [ 216.402922][T12472] xt_hashlimit: overflow, try lower: 3/0 [ 216.425903][T12474] netlink: 'syz.3.1850': attribute type 4 has an invalid length. [ 216.452872][T12476] netlink: 'syz.0.1852': attribute type 10 has an invalid length. [ 216.472355][T12476] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1852'. [ 216.491525][T12474] netlink: 'syz.3.1850': attribute type 1 has an invalid length. [ 216.499787][T12474] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1850'. [ 216.903786][T12509] xt_SECMARK: invalid mode: 9 [ 217.080875][T12527] netlink: 'syz.4.1864': attribute type 24 has an invalid length. [ 217.265649][T12541] veth0: entered promiscuous mode [ 218.038028][T12597] x_tables: duplicate underflow at hook 2 [ 218.079251][T12599] block nbd0: Unsupported socket: should be TCP or UNIX. [ 218.165318][T12605] team0: Port device geneve0 added [ 218.317686][T12611] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 218.703815][T12634] syzkaller0: entered promiscuous mode [ 218.709498][T12634] syzkaller0: entered allmulticast mode [ 218.739208][T12642] team0: Port device geneve0 added [ 218.762271][T12644] validate_nla: 3 callbacks suppressed [ 218.762291][T12644] netlink: 'syz.2.1893': attribute type 8 has an invalid length. [ 218.850112][T10301] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.813667][T10301] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.823066][T10301] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.860834][T10301] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.282390][T12685] "syz.2.1909" (12685) uses obsolete ecb(arc4) skcipher [ 221.442889][T12701] ip6gre0: Master is either lo or non-ether device [ 221.549999][T12717] __nla_validate_parse: 8 callbacks suppressed [ 221.550018][T12717] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1915'. [ 222.013658][T12738] netlink: 'syz.0.1920': attribute type 1 has an invalid length. [ 222.025164][T12738] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1920'. [ 222.189292][T12750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1925'. [ 222.348419][T12759] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1928'. [ 222.405138][T12765] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1929'. [ 222.799113][T12780] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.956832][T12794] 8021q: VLANs not supported on ip_vti0 [ 222.963676][T12793] 8021q: VLANs not supported on ip_vti0 [ 223.011881][T12797] bond0: (slave rose0): Enslaving as an active interface with an up link [ 223.197442][T12816] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1946'. [ 223.224047][T12780] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.283741][T12818] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 223.341788][T12780] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.362854][T12820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.363129][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1946'. [ 223.419737][T12780] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.473041][T12827] block nbd0: not configured, cannot reconfigure [ 223.587525][T10298] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.597257][T12833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1952'. [ 223.628312][T10298] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.658274][T10281] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.677166][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1953'. [ 223.707503][T12835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.847710][T12835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.905635][T12841] IPVS: nq: FWM 3 0x00000003 - no destination available [ 223.917788][T10281] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.144504][T12853] vlan1: entered promiscuous mode [ 224.183798][T12859] netlink: 'syz.2.1959': attribute type 1 has an invalid length. [ 224.306456][T12859] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.392658][T12858] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.399823][T12858] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 224.438439][T12858] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 224.797160][T12900] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1970'. [ 224.856529][T12902] v: renamed from dummy0 (while UP) [ 225.365723][T12935] bond5 (unregistering): Released all slaves [ 225.449318][T12942] netlink: 'syz.5.1983': attribute type 1 has an invalid length. [ 225.589423][T12951] veth3: entered promiscuous mode [ 225.846890][T12972] openvswitch: netlink: Flow actions attr not present in new flow. [ 226.119076][T12986] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 226.128444][T12986] bond3: option packets_per_slave: allowed values 0 - 65535 [ 226.139444][T12986] bond3 (unregistering): Released all slaves [ 226.383052][T13004] syz.5.1999 uses old SIOCAX25GETINFO [ 226.431930][T13006] netlink: 'syz.0.1997': attribute type 1 has an invalid length. [ 226.761849][T13027] __nla_validate_parse: 10 callbacks suppressed [ 226.761868][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2005'. [ 226.767680][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2007'. [ 226.850804][T13031] netlink: 'syz.2.2007': attribute type 1 has an invalid length. [ 226.853549][T13035] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2009'. [ 226.858685][T13031] netlink: 'syz.2.2007': attribute type 7 has an invalid length. [ 226.886587][T13031] netlink: 'syz.2.2007': attribute type 8 has an invalid length. [ 226.895253][T13031] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2007'. [ 227.016606][T13041] netlink: 'syz.3.2011': attribute type 11 has an invalid length. [ 227.040640][T13041] netlink: 'syz.3.2011': attribute type 11 has an invalid length. [ 227.074526][T13041] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2011'. [ 227.384364][T13067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.439912][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2019'. [ 227.490841][T13074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2020'. [ 227.586639][T13079] netlink: 'syz.2.2021': attribute type 3 has an invalid length. [ 227.648599][T13085] SET target dimension over the limit! [ 227.662215][T13078] bond3: option all_slaves_active: invalid value (222) [ 227.679289][T13078] bond3 (unregistering): Released all slaves [ 228.066274][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2033'. [ 228.091769][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2033'. [ 228.134618][T13112] bridge0: port 2(dummy0) entered blocking state [ 228.141404][T13112] bridge0: port 2(dummy0) entered forwarding state [ 228.203918][T13121] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2037'. [ 228.221608][T13121] openvswitch: netlink: Flow key attr not present in new flow. [ 228.225558][T13115] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.752419][T13158] bond6: Removing last ns target with arp_interval on [ 228.778216][T13166] netlink: 'syz.4.2047': attribute type 1 has an invalid length. [ 228.932559][T13169] syzkaller0: entered promiscuous mode [ 228.938372][T13169] syzkaller0: entered allmulticast mode [ 229.078535][T10281] tipc: Subscription rejected, illegal request [ 230.919509][T13190] netlink: 'syz.3.2056': attribute type 1 has an invalid length. [ 230.957363][T13193] netlink: 'syz.4.2057': attribute type 1 has an invalid length. [ 231.013632][T13195] syzkaller1: entered promiscuous mode [ 231.019688][T13195] syzkaller1: entered allmulticast mode [ 231.061400][T13193] 8021q: adding VLAN 0 to HW filter on device bond13 [ 231.076452][T13193] bond12: (slave bond13): making interface the new active one [ 231.091552][T13193] bond12: (slave bond13): Enslaving as an active interface with an up link [ 231.113862][T13195] IPv6: sit2: Disabled Multicast RS [ 231.135991][T13208] bond12: (slave gretap3): Enslaving as a backup interface with an up link [ 231.192070][T13193] 8021q: adding VLAN 0 to HW filter on device bond12 [ 231.362331][T13214] bond3: option mode: invalid value (133) [ 231.377176][T13214] bond3 (unregistering): Released all slaves [ 231.400493][T13218] tipc: Enabling of bearer rejected, failed to enable media [ 231.686666][T13236] bond3 (unregistering): Released all slaves [ 231.826995][T13248] __nla_validate_parse: 8 callbacks suppressed [ 231.827014][T13248] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2072'. [ 231.911939][T13248] netlink: 'syz.0.2072': attribute type 10 has an invalid length. [ 231.961964][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'. [ 231.988137][T13254] sctp: [Deprecated]: syz.5.2073 (pid 13254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.988137][T13254] Use struct sctp_sack_info instead [ 232.024360][T13251] bond0: (slave v): Releasing backup interface [ 232.057433][T13251] bond0: (slave batadv0): Releasing backup interface [ 232.102249][T13251] bond0: (slave bond_slave_0): Releasing backup interface [ 232.117068][T13251] bond0: (slave bond_slave_1): Releasing backup interface [ 232.139931][T13251] team0: Port device team_slave_0 removed [ 232.158583][T13251] team0: Port device team_slave_1 removed [ 232.165797][T13251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.173985][T13251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.185388][T13251] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.208534][T13254] tc_dump_action: action bad kind [ 232.448156][T13278] netlink: 'syz.5.2079': attribute type 1 has an invalid length. [ 232.463011][T13277] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2080'. [ 232.697862][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2081'. [ 232.734327][T13286] netlink: 'syz.5.2083': attribute type 1 has an invalid length. [ 232.802871][T13288] tun0: tun_chr_ioctl cmd 1074025675 [ 232.818931][T13288] tun0: persist disabled [ 233.085043][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2087'. [ 233.085455][T13304] nft_compat: unsupported protocol 0 [ 233.378325][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2093'. [ 233.447224][T13330] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 233.729152][T13350] netlink: 401 bytes leftover after parsing attributes in process `syz.4.2101'. [ 233.763162][T13353] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2102'. [ 234.187650][T13378] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2109'. [ 234.564903][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2116'. [ 234.894819][T13410] SET target dimension over the limit! [ 235.077626][T13419] syzkaller0: entered promiscuous mode [ 235.107579][T13419] syzkaller0: entered allmulticast mode [ 235.356720][T13442] netlink: 'syz.2.2132': attribute type 13 has an invalid length. [ 235.398326][T13442] gretap0: refused to change device tx_queue_len [ 235.411378][T13442] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 236.042884][T13492] netlink: 'syz.3.2150': attribute type 142 has an invalid length. [ 236.249956][T13497] bond14: option xmit_hash_policy: invalid value (64) [ 236.287664][T13497] bond14 (unregistering): Released all slaves [ 236.381496][T13507] netlink: 'syz.0.2151': attribute type 1 has an invalid length. [ 236.516164][T13520] netlink: 'syz.2.2158': attribute type 2 has an invalid length. [ 236.628293][T13524] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 236.660967][T13524] team0: Port device batadv2 added [ 236.901507][T13549] __nla_validate_parse: 10 callbacks suppressed [ 236.901528][T13549] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2169'. [ 236.952721][T13555] ip6tnl0: entered promiscuous mode [ 237.138937][T13554] ip6tnl0: left promiscuous mode [ 237.173351][T13564] netlink: 'syz.3.2173': attribute type 1 has an invalid length. [ 237.264650][T13578] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2177'. [ 237.274609][T13578] netlink: 'syz.0.2177': attribute type 11 has an invalid length. [ 237.283960][T13578] netlink: 'syz.0.2177': attribute type 1 has an invalid length. [ 237.519621][T13591] ipt_REJECT: TCP_RESET invalid for non-tcp [ 237.726781][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2186'. [ 237.929590][T13618] xt_hashlimit: overflow, try lower: 3/0 [ 237.945069][T13618] netlink: 'syz.5.2188': attribute type 10 has an invalid length. [ 237.955833][T13618] veth0_macvtap: left promiscuous mode [ 237.963532][T13618] team0: Device veth0_macvtap failed to register rx_handler [ 238.309359][T13632] syzkaller0: entered promiscuous mode [ 238.325484][T13632] syzkaller0: entered allmulticast mode [ 238.656296][T13640] netlink: 'syz.5.2196': attribute type 1 has an invalid length. [ 238.708478][T13645] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.2197'. [ 238.728416][T13645] syzkaller1: entered promiscuous mode [ 238.738939][T13645] syzkaller1: entered allmulticast mode [ 239.388605][T13698] x_tables: unsorted underflow at hook 3 [ 239.778200][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2218'. [ 239.793885][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2218'. [ 239.828653][T13715] netlink: 'syz.5.2218': attribute type 3 has an invalid length. [ 239.856044][T13717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2219'. [ 239.924454][T13724] netlink: 'syz.4.2221': attribute type 10 has an invalid length. [ 239.950899][T13724] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2221'. [ 239.978369][T13728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.993466][T13724] geneve0: entered promiscuous mode [ 240.015454][T13724] team0: Port device geneve0 added [ 240.173145][T13738] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2225'. [ 240.238828][T13742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2227'. [ 240.459034][T13755] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 240.662326][ T5947] hid-generic 0005:046D:0A0E.0003: item fetching failed at offset 0/1 [ 240.698714][ T5947] hid-generic 0005:046D:0A0E.0003: probe with driver hid-generic failed with error -22 [ 240.972887][T13790] blkio.reset_stats is deprecated [ 241.128262][T13804] netlink: 'syz.2.2246': attribute type 5 has an invalid length. [ 241.150382][T13804] geneve2: entered promiscuous mode [ 241.157056][T13804] geneve2: entered allmulticast mode [ 241.181051][T13806] : entered promiscuous mode [ 241.188334][ T2219] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 241.203043][ T2219] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 241.215775][ T2219] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 241.235386][ T2219] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 241.266457][T13809] syzkaller0: entered promiscuous mode [ 241.273010][T13809] syzkaller0: entered allmulticast mode [ 241.916414][T13836] __nla_validate_parse: 4 callbacks suppressed [ 241.916431][T13836] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2259'. [ 242.272062][T13864] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2270'. [ 242.355220][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2269'. [ 242.539842][T13884] netlink: 'syz.3.2274': attribute type 3 has an invalid length. [ 242.770350][T13884] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.784186][T13884] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.808844][T13884] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 242.823155][T13884] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 242.837223][T13892] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2278'. [ 242.846903][T13892] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2278'. [ 242.879365][T13892] gretap0: entered promiscuous mode [ 242.889331][T13892] gretap0: left promiscuous mode [ 242.969361][T13884] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.011062][T13884] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.031710][T13884] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 243.054997][T13884] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 243.086975][T13894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.253645][T13884] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.281382][T13884] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.350939][T13884] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 243.380837][T13884] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 243.467766][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2284'. [ 244.129101][T13919] smc: net device team0 applied user defined pnetid SYZ2 [ 244.275603][T13884] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.296862][T13884] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.354539][T13884] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 244.381023][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2292'. [ 244.381742][T13884] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 244.451072][T13947] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 244.574674][T10298] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.584933][T10298] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.598803][T10298] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 244.609733][T10298] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 19999 - 0 [ 244.642118][T10297] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.673274][T10297] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.702064][T10297] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 244.715170][T10297] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 19999 - 0 [ 244.725393][T13962] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2297'. [ 244.773607][T10297] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.815305][T10297] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.834667][T10297] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 244.844182][T10297] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 19999 - 0 [ 244.891637][T10301] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.907444][T10301] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.912624][T13968] xt_recent: Unsupported userspace flags (000000b1) [ 244.920665][T10301] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 244.937226][T10301] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 19999 - 0 [ 245.079816][T13978] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2303'. [ 245.220510][T13993] tipc: Enabling of bearer rejected, failed to enable media [ 245.467035][T14012] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2311'. [ 245.498107][T14012] syzkaller0: entered promiscuous mode [ 245.511600][T14012] syzkaller0: entered allmulticast mode [ 245.564590][T14019] : entered promiscuous mode [ 245.588819][T14021] 0: reclassify loop, rule prio 0, protocol 800 [ 245.703909][T14025] openvswitch: netlink: Message has 592 unknown bytes. [ 245.711294][T14025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.445477][T14070] syzkaller0: entered promiscuous mode [ 246.451107][T14070] syzkaller0: entered allmulticast mode [ 246.593525][T14083] siw: device registration error -23 [ 246.733492][T14091] syzkaller0: entered promiscuous mode [ 246.739012][T14091] syzkaller0: entered allmulticast mode [ 246.806864][T14096] syzkaller0: mtu greater than device maximum [ 246.859914][T14100] netlink: 'syz.4.2337': attribute type 1 has an invalid length. [ 246.940311][T14100] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 246.954198][T14100] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 247.004479][T14108] netlink: 'syz.0.2339': attribute type 11 has an invalid length. [ 247.038758][T14106] gretap4: entered promiscuous mode [ 247.050060][T14106] bond14: (slave gretap4): making interface the new active one [ 247.058913][T14106] bond14: (slave gretap4): Enslaving as an active interface with an up link [ 247.113199][T14100] __nla_validate_parse: 9 callbacks suppressed [ 247.155229][T14114] netlink: 'syz.2.2343': attribute type 10 has an invalid length. [ 247.156157][T14100] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2337'. [ 247.163764][T14114] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2343'. [ 247.202349][T14114] v: entered promiscuous mode [ 247.213780][T14114] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 247.246337][T14122] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2344'. [ 247.442271][T14131] syzkaller0: entered promiscuous mode [ 247.447766][T14131] syzkaller0: entered allmulticast mode [ 247.466628][T14128] netlink: 'syz.2.2348': attribute type 11 has an invalid length. [ 247.474934][T14131] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2347'. [ 247.486632][T14131] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2347'. [ 247.598406][T14133] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2350'. [ 248.102830][T14174] netlink: 'syz.0.2363': attribute type 1 has an invalid length. [ 248.116020][T14174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2363'. [ 248.286309][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 248.301062][T14182] openvswitch: netlink: Missing key (keys=40, expected=80) [ 248.418533][T14186] netlink: 'syz.0.2367': attribute type 2 has an invalid length. [ 248.426989][T14186] netlink: 'syz.0.2367': attribute type 8 has an invalid length. [ 248.439554][T14186] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2367'. [ 248.593294][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2372'. [ 248.679996][T14212] netlink: 'syz.0.2373': attribute type 10 has an invalid length. [ 248.892374][T14227] sock: sock_set_timeout: `syz.4.2377' (pid 14227) tries to set negative timeout [ 248.939386][T14233] netlink: 'syz.2.2379': attribute type 1 has an invalid length. [ 249.037811][T14233] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 249.355461][T14256] 8021q: VLANs not supported on ip6_vti0 [ 249.382570][T14259] IPv6: sit2: Disabled Multicast RS [ 249.388988][T14259] sit2: entered allmulticast mode [ 249.889802][T14292] veth1_to_bond: entered allmulticast mode [ 249.934713][T14292] veth1_to_bond (unregistering): left allmulticast mode [ 250.560236][T14308] 8021q: VLANs not supported on ipvlan1 [ 250.678583][T14312] nbd: socks must be embedded in a SOCK_ITEM attr [ 250.699486][T14312] nbd: must specify an index to disconnect [ 250.952123][T14336] netlink: 'syz.0.2411': attribute type 12 has an invalid length. [ 250.989941][T14336] netlink: 'syz.0.2411': attribute type 29 has an invalid length. [ 251.101984][T14346] SET target dimension over the limit! [ 251.206533][T14353] x_tables: duplicate underflow at hook 1 [ 251.303574][T14357] tipc: Enabled bearer , priority 0 [ 251.322022][T14357] syzkaller0: entered promiscuous mode [ 251.327927][T14357] syzkaller0: entered allmulticast mode [ 251.342301][T14357] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 251.371873][T14356] tipc: Resetting bearer [ 251.395124][T14356] tipc: Disabling bearer [ 251.759736][T10281] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 251.785975][T10281] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 251.798758][T10281] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 251.814005][T10281] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 252.260666][T14409] validate_nla: 4 callbacks suppressed [ 252.260690][T14409] netlink: 'syz.2.2437': attribute type 3 has an invalid length. [ 252.303864][T14412] __nla_validate_parse: 51 callbacks suppressed [ 252.303882][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2440'. [ 252.504548][T14426] netlink: 'syz.5.2444': attribute type 10 has an invalid length. [ 252.531015][T14429] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2445'. [ 252.573733][T14429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2445'. [ 252.786793][T14439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.862398][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 252.915622][T14450] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2454'. [ 252.920239][T14445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2452'. [ 253.178566][T14470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2460'. [ 253.255033][T14478] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2462'. [ 253.702501][T14507] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2472'. [ 253.719791][T14507] block nbd0: not configured, cannot reconfigure [ 253.854420][T14513] netlink: 'syz.0.2473': attribute type 1 has an invalid length. [ 253.929453][T14513] bond7: entered promiscuous mode [ 253.957584][T14513] 8021q: adding VLAN 0 to HW filter on device bond7 [ 254.010472][T14524] batadv1: entered promiscuous mode [ 254.016178][T14524] batadv2: entered promiscuous mode [ 254.050321][T14524] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 254.104082][T14527] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 254.127223][T14521] bond7: (slave bridge3): making interface the new active one [ 254.135553][T14521] bridge3: entered promiscuous mode [ 254.142911][T14521] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 254.153717][T14529] lo: entered promiscuous mode [ 254.236255][T14536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2481'. [ 254.580699][T14555] syzkaller0: entered promiscuous mode [ 254.596933][T14555] syzkaller0: entered allmulticast mode [ 254.698256][T14568] vlan0: entered promiscuous mode [ 254.722948][T14568] vlan0: entered allmulticast mode [ 254.728209][T14568] veth0_vlan: entered allmulticast mode [ 254.806621][T14577] xt_l2tp: invalid flags combination: 8 [ 254.958452][T14585] netlink: 'syz.3.2498': attribute type 9 has an invalid length. [ 254.970233][T14586] tipc: Enabled bearer , priority 0 [ 254.982448][T14585] netlink: 'syz.3.2498': attribute type 6 has an invalid length. [ 255.001663][T14586] syzkaller0: entered promiscuous mode [ 255.011851][T14586] syzkaller0: entered allmulticast mode [ 255.079590][T14595] ipvlan3: entered promiscuous mode [ 255.104508][T14586] tipc: Resetting bearer [ 255.126363][T14582] tipc: Resetting bearer [ 255.204077][T14582] tipc: Disabling bearer [ 255.230459][T14601] bond0: entered promiscuous mode [ 255.235734][T14601] bond_slave_0: entered promiscuous mode [ 255.241841][T14601] bond_slave_1: entered promiscuous mode [ 255.249409][T14601] batadv0: entered promiscuous mode [ 255.260194][T14601] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 255.270500][T14601] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 255.284875][T14601] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 255.365709][T14609] syzkaller1: entered promiscuous mode [ 255.418671][T14609] syzkaller1: entered allmulticast mode [ 255.457582][T14617] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 255.460175][T14619] netlink: 'syz.5.2505': attribute type 19 has an invalid length. [ 255.489271][T14617] tipc: Enabling of bearer rejected, failed to enable media [ 255.619127][T14625] netlink: 'syz.4.2507': attribute type 1 has an invalid length. [ 255.638156][T14625] netdevsim netdevsim4 : renamed from netdevsim0 [ 256.089726][T14655] can: request_module (can-proto-4) failed. [ 256.320572][T14674] netlink: 'syz.5.2523': attribute type 21 has an invalid length. [ 256.439668][T14687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.072680][T14723] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 257.223028][T14726] netlink: 'syz.2.2541': attribute type 18 has an invalid length. [ 257.367688][T14740] __nla_validate_parse: 9 callbacks suppressed [ 257.367710][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'. [ 257.411339][T10299] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.440607][T10299] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.496637][ T6122] udevd[6122]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 257.510934][T10301] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.544919][T10301] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.655055][T14751] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2546'. [ 257.824697][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2552'. [ 258.237850][T14796] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2560'. [ 258.721912][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2572'. [ 258.926320][T14836] netlink: 'syz.0.2575': attribute type 25 has an invalid length. [ 258.937999][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2575'. [ 259.107802][T14842] xt_hashlimit: size too large, truncated to 1048576 [ 259.262460][T14857] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2582'. [ 259.481766][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2587'. [ 259.559901][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2587'. [ 259.645997][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2587'. [ 259.762139][T14895] netlink: 'syz.3.2593': attribute type 4 has an invalid length. [ 261.059504][T14969] ipt_ECN: cannot use operation on non-tcp rule [ 261.204425][T14978] netlink: 'syz.2.2616': attribute type 29 has an invalid length. [ 261.231463][T14978] netlink: 'syz.2.2616': attribute type 29 has an invalid length. [ 261.437420][T14996] netlink: 'syz.0.2621': attribute type 33 has an invalid length. [ 261.502885][T14996] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 261.537186][T14996] bond8 (unregistering): Released all slaves [ 261.696663][T15012] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 262.083147][T15032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.107065][T15032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.278727][T15046] bridge0: port 2(dummy0) entered disabled state [ 262.328008][T15049] xt_hashlimit: size too large, truncated to 1048576 [ 262.435166][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 262.572070][T15055] netlink: 'syz.0.2638': attribute type 3 has an invalid length. [ 263.037643][T15088] __nla_validate_parse: 74 callbacks suppressed [ 263.037663][T15088] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2647'. [ 263.117585][T15093] syzkaller0: entered promiscuous mode [ 263.124129][T15093] syzkaller0: entered allmulticast mode [ 263.163177][T15093] netlink: 'syz.3.2650': attribute type 26 has an invalid length. [ 263.181560][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2650'. [ 263.193758][T15100] xt_l2tp: missing protocol rule (udp|l2tpip) [ 263.202629][T15093] netlink: 'syz.3.2650': attribute type 26 has an invalid length. [ 263.210508][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2650'. [ 263.239314][T15105] netlink: 'syz.2.2653': attribute type 4 has an invalid length. [ 263.357532][T15108] tipc: New replicast peer: 255.255.255.255 [ 263.381388][T15111] netlink: 'syz.4.2655': attribute type 1 has an invalid length. [ 263.396659][T15108] tipc: Enabled bearer , priority 10 [ 263.489601][T15111] 8021q: adding VLAN 0 to HW filter on device bond15 [ 263.620085][T15132] tipc: Enabled bearer , priority 0 [ 263.634409][T15132] syzkaller0: entered promiscuous mode [ 263.639974][T15132] syzkaller0: entered allmulticast mode [ 263.669650][T15132] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2658'. [ 263.687941][T15132] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 263.703542][T15138] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2659'. [ 263.744923][T15132] tipc: Resetting bearer [ 263.762597][T15130] tipc: Resetting bearer [ 263.799352][T15130] tipc: Disabling bearer [ 263.813767][T15145] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 263.844238][T15138] geneve2: entered promiscuous mode [ 263.999780][T15156] IPVS: Error joining to the multicast group [ 264.139231][T15157] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2665'. [ 264.262506][T15169] bond16: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 264.289432][T15169] bond16 (unregistering): Released all slaves [ 264.338735][T15177] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2673'. [ 264.512879][ T10] tipc: Node number set to 3014657 [ 264.694828][T15193] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2679'. [ 264.743736][T15196] netlink: 'syz.3.2680': attribute type 18 has an invalid length. [ 265.000683][T15211] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2684'. [ 265.013610][T15211] openvswitch: netlink: Key type 218 is out of range max 32 [ 265.025856][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2684'. [ 265.250669][T15224] IPVS: length: 24 != 393240 [ 265.305618][T15231] netlink: 'syz.2.2692': attribute type 3 has an invalid length. [ 265.990424][T15280] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 266.123487][T15292] netlink: 'syz.4.2709': attribute type 1 has an invalid length. [ 266.209818][T15292] 8021q: adding VLAN 0 to HW filter on device bond16 [ 266.348191][T15296] bond16: (slave veth5): Enslaving as an active interface with a down link [ 266.367323][T15292] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 266.399053][T15305] bond16: entered promiscuous mode [ 266.408129][T15305] bond16: entered allmulticast mode [ 266.510056][T15317] netlink: 'syz.4.2716': attribute type 18 has an invalid length. [ 266.672362][T15327] vxcan1: entered promiscuous mode [ 266.680276][T15327] vxcan1: entered allmulticast mode [ 266.897300][T15341] netlink: 'syz.3.2722': attribute type 10 has an invalid length. [ 266.990068][T15348] netlink: 'syz.2.2724': attribute type 3 has an invalid length. [ 267.044529][T15350] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 267.178998][T15358] IPVS: Unknown mcast interface: veth0_macvtap [ 267.202796][T15363] netlink: 'syz.4.2729': attribute type 21 has an invalid length. [ 267.252887][T15363] bond17: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 267.274759][T15363] bond17 (unregistering): Released all slaves [ 267.651391][T15390] TCP: TCP_TX_DELAY enabled [ 267.749991][T15397] IPVS: nq: FWM 3 0x00000003 - no destination available [ 267.772386][T15397] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 267.873294][T15404] ip6t_srh: unknown srh match flags 4000 [ 268.589914][T15454] __nla_validate_parse: 13 callbacks suppressed [ 268.589936][T15454] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2756'. [ 268.768602][T15461] netlink: 'syz.5.2759': attribute type 12 has an invalid length. [ 268.812040][T15461] netlink: 'syz.5.2759': attribute type 29 has an invalid length. [ 268.846366][T15461] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2759'. [ 268.876567][T15461] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2759'. [ 268.989195][T15484] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.2766'. [ 269.008556][T15484] openvswitch: netlink: Missing key (keys=40, expected=100) [ 269.142531][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 269.182746][T15497] sit1: entered promiscuous mode [ 269.187718][T15497] sit1: entered allmulticast mode [ 269.915899][T15521] syzkaller0: entered promiscuous mode [ 269.934557][T15521] syzkaller0: entered allmulticast mode [ 270.014549][T15536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2774'. [ 270.047441][T15536] : renamed from hsr0 (while UP) [ 270.376725][T15555] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2784'. [ 270.643492][T15569] xt_ecn: cannot match TCP bits for non-tcp packets [ 270.669571][T15553] lo speed is unknown, defaulting to 1000 [ 270.818947][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2794'. [ 271.062405][T15587] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2797'. [ 271.083674][T15587] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2797'. [ 271.105926][T15587] x_tables: unsorted entry at hook 1 [ 271.434704][T15554] lo speed is unknown, defaulting to 1000 [ 271.745109][T15620] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 271.756682][T15623] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 272.041052][T15634] bridge5: entered promiscuous mode [ 272.096273][T15634] bridge5: entered allmulticast mode [ 272.138120][T15634] team0: Port device bridge5 added [ 272.248368][T15636] bridge0: port 1(team0) entered blocking state [ 272.264656][T15636] bridge0: port 1(team0) entered disabled state [ 272.285052][T15636] team0: entered allmulticast mode [ 272.300950][T15636] geneve0: entered allmulticast mode [ 272.749595][T15648] bond3 (unregistering): Released all slaves [ 272.837905][T15656] netlink: 'syz.5.2816': attribute type 12 has an invalid length. [ 272.859694][T15656] netlink: 'syz.5.2816': attribute type 29 has an invalid length. [ 272.915096][T15656] netlink: 'syz.5.2816': attribute type 2 has an invalid length. [ 272.963812][T15656] netlink: 'syz.5.2816': attribute type 3 has an invalid length. [ 273.282897][T15672] pim6reg1: entered promiscuous mode [ 273.298549][T15672] pim6reg1: entered allmulticast mode [ 273.418050][T15687] bridge_slave_0: entered promiscuous mode [ 273.439506][T15687] bridge_slave_0: left promiscuous mode [ 273.470628][T15687] openvswitch: netlink: Flow key attr not present in new flow. [ 273.594971][T15699] __nla_validate_parse: 15 callbacks suppressed [ 273.594991][T15699] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2827'. [ 273.684362][T15707] netlink: 'syz.3.2830': attribute type 4 has an invalid length. [ 274.072769][T15735] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2839'. [ 274.233835][T15743] netlink: 'syz.5.2841': attribute type 2 has an invalid length. [ 274.256446][T15743] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2841'. [ 274.268720][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2841'. [ 274.499408][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2847'. [ 274.556069][T15763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2850'. [ 274.577552][T15754] dummy0 (unregistering): left allmulticast mode [ 274.581931][T15763] netlink: 'syz.4.2850': attribute type 7 has an invalid length. [ 274.585252][T15754] bridge0: port 2(dummy0) entered disabled state [ 274.606962][T15760] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 274.619090][T15763] netlink: 'syz.4.2850': attribute type 8 has an invalid length. [ 274.662005][T15763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2850'. [ 274.885174][T15787] netlink: 'syz.5.2854': attribute type 1 has an invalid length. [ 274.926204][T15787] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2854'. [ 274.962757][T15793] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2854'. [ 275.265499][T15813] openvswitch: netlink: IP tunnel TTL not specified. [ 275.425822][T15822] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2863'. [ 275.649611][T15834] netlink: 'syz.4.2867': attribute type 1 has an invalid length. [ 275.724749][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.738126][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.751929][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.759948][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.776323][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.911390][T15847] tipc: Enabled bearer , priority 0 [ 275.961916][T15847] syzkaller0: entered promiscuous mode [ 275.967437][T15847] syzkaller0: entered allmulticast mode [ 276.005125][T15847] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 276.172113][T15858] tipc: Resetting bearer [ 276.221660][T10297] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.241578][T10297] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.257641][T10297] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 276.270053][T10297] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 276.324325][T15846] tipc: Resetting bearer [ 276.361649][T15846] tipc: Disabling bearer [ 276.429894][T10297] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.461607][T10297] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.474187][T10297] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 276.488228][T10297] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 276.506074][T15840] lo speed is unknown, defaulting to 1000 [ 276.506093][T15869] lo: left promiscuous mode [ 276.531377][T15875] openvswitch: netlink: IP tunnel dst address not specified [ 276.554362][T15869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.563941][T15869] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.574108][T15869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.612726][T15870] bond17: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 276.626723][T15870] bond17 (unregistering): Released all slaves [ 276.758010][T15884] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 276.788114][T15884] bond3 (unregistering): Released all slaves [ 276.821488][T10297] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.832104][T10297] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.847656][T10297] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 276.866296][T15894] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 276.867478][T10297] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 277.013616][T10297] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.024380][T10297] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.043889][T10297] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 277.074294][T10297] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 277.185966][T15900] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.375912][T15916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.435997][T15872] lo speed is unknown, defaulting to 1000 [ 277.668604][T15933] x_tables: unsorted underflow at hook 1 [ 277.871661][ T5840] Bluetooth: hci5: command tx timeout [ 278.205892][T10297] dvmrp0 (unregistering): left allmulticast mode [ 278.225929][T10297]  (unregistering): (slave geneve3): Releasing active interface [ 278.268422][T10297] team0: Port device geneve0 removed [ 278.644849][T10297] bond1 (unregistering): Released all slaves [ 278.657289][T10297]  (unregistering): Released all slaves [ 278.755207][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 278.804541][T10297] bond2 (unregistering): Released all slaves [ 278.816641][T10297] bond0 (unregistering): Released all slaves [ 279.006288][T15840] chnl_net:caif_netlink_parms(): no params data found [ 279.042749][T15964] xt_TCPMSS: Only works on TCP SYN packets [ 279.331866][T15979] __nla_validate_parse: 6 callbacks suppressed [ 279.331884][T15979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2906'. [ 279.411898][T15840] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.419207][T15840] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.426902][T15840] bridge_slave_0: entered allmulticast mode [ 279.435953][T15840] bridge_slave_0: entered promiscuous mode [ 279.466497][T15840] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.512745][T15840] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.538198][T15840] bridge_slave_1: entered allmulticast mode [ 279.548029][T15840] bridge_slave_1: entered promiscuous mode [ 279.693715][T15840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.726777][T15840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.871563][T15840] team0: Port device team_slave_0 added [ 279.879851][T16002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2914'. [ 279.908353][T16005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.914849][T15840] team0: Port device team_slave_1 added [ 279.951124][ T52] Bluetooth: hci5: command tx timeout [ 279.984522][T16011] syzkaller0: entered promiscuous mode [ 279.992050][T16011] syzkaller0: entered allmulticast mode [ 279.998378][T10285] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 280.091675][T15840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.098747][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.103186][ T30] audit: type=1107 audit(1767205295.960:2): pid=16018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 280.125771][T15840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.127845][T15840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.268938][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.296428][T15840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.030980][ T52] Bluetooth: hci5: command tx timeout [ 282.250433][T15840] hsr_slave_0: entered promiscuous mode [ 282.268109][T15840] hsr_slave_1: entered promiscuous mode [ 282.290059][T15840] debugfs: 'hsr0' already exists in 'hsr' [ 282.297166][T15840] Cannot create hsr debugfs directory [ 282.366619][T16054] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2925'. [ 282.435043][T16055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2926'. [ 282.571121][T10297] : left promiscuous mode [ 282.608053][T16061] validate_nla: 6 callbacks suppressed [ 282.608072][T16061] netlink: 'syz.5.2928': attribute type 10 has an invalid length. [ 282.625383][T16064] ipt_ECN: cannot use operation on non-tcp rule [ 282.636922][T16061] bridge_slave_1: left allmulticast mode [ 282.656663][T16064] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2927'. [ 282.656893][T16061] bridge_slave_1: left promiscuous mode [ 282.679697][T16061] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.700325][T16061] bridge_slave_1: entered promiscuous mode [ 282.707725][T16061] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 282.735873][T10297] tipc: Disabling bearer [ 282.747267][T10297] tipc: Left network mode [ 282.809874][T16076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.815956][T10297] IPVS: stopping master sync thread 8387 ... [ 282.855328][T10297] IPVS: stopping backup sync thread 9633 ... [ 283.033674][T16084] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 283.049166][T16084] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 283.052650][T16096] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2938'. [ 283.075717][T16084] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.087663][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2933'. [ 283.355008][T16084] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 283.373819][T16084] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 283.389840][T16113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2941'. [ 283.400177][T16084] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.433475][T16111] xt_hashlimit: size too large, truncated to 1048576 [ 283.555027][T16084] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 283.582002][T16084] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 283.603302][T16084] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.854941][T16084] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 283.878115][T16084] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 283.906969][T16084] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.112074][ T52] Bluetooth: hci5: command tx timeout [ 284.216997][T10299] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.225546][T16144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2948'. [ 284.241519][T10299] netdevsim netdevsim5 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 284.267650][T10299] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.310606][T16148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2951'. [ 284.412792][T16154] netlink: 'syz.2.2954': attribute type 1 has an invalid length. [ 284.427507][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2951'. [ 284.442788][T10297] hsr_slave_0: left promiscuous mode [ 284.450165][T10297] hsr_slave_1: left promiscuous mode [ 284.471651][T10297] veth1_vlan: left allmulticast mode [ 284.477362][T10297] veth1_vlan: left promiscuous mode [ 284.895899][T10297] team0 (unregistering): Port device team_slave_1 removed [ 284.943048][T10297] team0 (unregistering): Port device team_slave_0 removed [ 285.052267][T10300] smc: removing ib device sy [ 285.339793][T10297] vcan0 (unregistering): left allmulticast mode [ 285.375442][ T2219] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.384413][ T2219] netdevsim netdevsim5 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 285.395006][ T2219] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.497700][ T2219] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.530314][ T2219] netdevsim netdevsim5 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 285.562021][ T2219] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.663331][T10296] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.690672][T10296] netdevsim netdevsim5 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 285.699773][T10296] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.735217][T16170] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2959'. [ 286.168249][T15840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 286.201062][ T52] Bluetooth: hci5: command tx timeout [ 286.213279][T15840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 286.243883][T15840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 286.265433][T15840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 286.452434][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2966'. [ 286.535021][T15840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.599033][T15840] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.636856][T10285] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.644202][T10285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.709985][T10301] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.717227][T10301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.955736][T15840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.269440][T16216] tipc: Enabled bearer , priority 0 [ 287.285556][T16216] syzkaller0: entered promiscuous mode [ 287.293880][T16216] syzkaller0: entered allmulticast mode [ 287.303662][T16216] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 287.397455][T16228] IPv6: sit3: Disabled Multicast RS [ 287.421919][T16228] sit3: entered allmulticast mode [ 287.502086][T16216] tipc: Resetting bearer [ 287.534604][T16215] tipc: Resetting bearer [ 287.621936][T16215] tipc: Disabling bearer [ 287.735555][T16242] nft_compat: unsupported protocol 0 [ 287.777323][T15840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.835289][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2978'. [ 287.877727][T15840] veth0_vlan: entered promiscuous mode [ 287.897951][T15840] veth1_vlan: entered promiscuous mode [ 288.024454][T16256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2982'. [ 288.058481][T16258] tipc: New replicast peer: 255.255.255.255 [ 288.064700][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 288.074415][T16258] tipc: Enabled bearer , priority 10 [ 288.086884][T15840] veth0_macvtap: entered promiscuous mode [ 288.093942][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 288.115836][T15840] veth1_macvtap: entered promiscuous mode [ 288.148017][T10297] IPVS: stop unused estimator thread 0... [ 288.166024][T15840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.207470][T15840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.233705][T16265] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2985'. [ 288.255210][T10296] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.275871][T10296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.286734][T16269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2986'. [ 288.314864][T16265] sctp: [Deprecated]: syz.0.2985 (pid 16265) Use of int in maxseg socket option. [ 288.314864][T16265] Use struct sctp_assoc_value instead [ 288.330590][T10296] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.370652][T10296] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.467676][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2990'. [ 288.506320][T10296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.531180][T10296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.582656][T10297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.604279][T10297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.811462][T16289] siw: device registration error -23 [ 288.827936][T16289] sctp: [Deprecated]: syz.0.2993 (pid 16289) Use of int in max_burst socket option. [ 288.827936][T16289] Use struct sctp_assoc_value instead [ 289.097394][T16307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.337707][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 289.348636][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 289.357767][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 289.366797][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 289.375559][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.530051][T16309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.548415][T16309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.565848][T16309] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 289.581928][T16309] bond0 (unregistering): Released all slaves [ 289.601307][ T5947] tipc: Node number set to 23061106 [ 289.702975][T16320] lo speed is unknown, defaulting to 1000 [ 289.736956][T16329] __nla_validate_parse: 4 callbacks suppressed [ 289.737036][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3006'. [ 289.779547][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3006'. [ 289.835464][T16333] bond0: ARP target 1.0.0.0 is already present [ 289.842009][T16333] bond0: option arp_ip_target: invalid value (1) [ 289.849815][T16333] bond0 (unregistering): Released all slaves [ 289.929200][T16339] netlink: 512 bytes leftover after parsing attributes in process `syz.5.3009'. [ 290.067400][T16347] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3011'. [ 290.212061][T16354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3013'. [ 290.279206][T16320] chnl_net:caif_netlink_parms(): no params data found [ 290.505537][T16377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3020'. [ 290.571272][T16384] nft_compat: unsupported protocol 0 [ 290.576044][T16380] netlink: 'syz.5.3021': attribute type 8 has an invalid length. [ 290.604967][T16320] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.622741][T16320] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.630057][T16320] bridge_slave_0: entered allmulticast mode [ 290.652900][T16320] bridge_slave_0: entered promiscuous mode [ 290.684995][T16320] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.692696][T16320] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.700323][T16320] bridge_slave_1: entered allmulticast mode [ 290.708114][T16320] bridge_slave_1: entered promiscuous mode [ 290.768969][T16320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.793735][T16320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.882633][T16320] team0: Port device team_slave_0 added [ 290.895700][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3026'. [ 290.896494][T16320] team0: Port device team_slave_1 added [ 290.910840][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3026'. [ 290.987329][T16400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3029'. [ 291.026260][T16320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.041400][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.085158][T16320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.110033][T16320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.117709][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.144901][T16320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.235582][T16412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3033'. [ 291.257688][T16320] hsr_slave_0: entered promiscuous mode [ 291.265307][T16320] hsr_slave_1: entered promiscuous mode [ 291.272560][T16320] debugfs: 'hsr0' already exists in 'hsr' [ 291.278435][T16320] Cannot create hsr debugfs directory [ 291.342929][T16412] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 291.471512][ T52] Bluetooth: hci1: command tx timeout [ 291.657789][T16432] netlink: 'syz.0.3039': attribute type 1 has an invalid length. [ 291.683281][T16320] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.700946][T16433] netlink: 'syz.0.3039': attribute type 1 has an invalid length. [ 291.722732][T16320] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.740918][T16320] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 291.797877][T16432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.799048][T16442] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 291.842567][T16320] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.853778][T16320] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.863760][T16320] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 291.898179][T16440] bond0: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 291.922005][T16440] bond0: entered allmulticast mode [ 291.955734][T16432] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 291.988910][T16320] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.023944][T16320] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.056803][T16320] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 292.112326][T16457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.164159][T16320] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.209683][T16320] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.223074][T16320] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 292.379165][T16466] Bluetooth: MGMT ver 1.23 [ 292.503832][T16320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 292.528470][T16320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 292.552490][T16320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.578585][T16320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.842032][T16320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.922152][T16320] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.955342][T10285] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.962669][T10285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.980763][T10289] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.987978][T10289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.554014][ T52] Bluetooth: hci1: command tx timeout [ 293.614056][T16320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.706526][T16320] veth0_vlan: entered promiscuous mode [ 293.741888][T16320] veth1_vlan: entered promiscuous mode [ 293.783485][T16544] netlink: 'syz.0.3065': attribute type 12 has an invalid length. [ 293.789885][T16320] veth0_macvtap: entered promiscuous mode [ 293.806548][T16320] veth1_macvtap: entered promiscuous mode [ 293.830498][T16320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.849251][T16320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.874093][T10285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.903687][T10285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.935542][T10285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.959311][T10285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.197559][T10297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.213379][T10297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.283938][T10299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.304003][T10299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.325463][T16562] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 294.773799][T16585] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 294.914636][T16594] xt_hashlimit: invalid rate [ 294.948433][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.958187][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.970922][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.985954][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.001507][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.162468][T16607] __nla_validate_parse: 11 callbacks suppressed [ 295.162487][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3085'. [ 295.176993][T16595] lo speed is unknown, defaulting to 1000 [ 295.632897][ T52] Bluetooth: hci1: command tx timeout [ 295.659613][T16628] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3091'. [ 295.697935][T16628] block nbd0: not configured, cannot reconfigure [ 295.775288][T16595] chnl_net:caif_netlink_parms(): no params data found [ 296.109298][T16642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3094'. [ 296.216365][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3094'. [ 296.680956][T16647] netlink: 'syz.3.3095': attribute type 1 has an invalid length. [ 296.779659][T16595] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.788483][T16595] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.796079][T16595] bridge_slave_0: entered allmulticast mode [ 296.807316][T16595] bridge_slave_0: entered promiscuous mode [ 296.827240][T16595] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.884092][T16595] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.899566][T16595] bridge_slave_1: entered allmulticast mode [ 296.924636][T16595] bridge_slave_1: entered promiscuous mode [ 297.007223][T16595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.045791][T16595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.085208][ T52] Bluetooth: hci0: command tx timeout [ 297.126478][T16671] netlink: 'syz.2.3103': attribute type 10 has an invalid length. [ 297.155513][T16671] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.165493][T16671] bond0: (slave team0): Enslaving as an active interface with an up link [ 297.241296][T16595] team0: Port device team_slave_0 added [ 297.253922][T16595] team0: Port device team_slave_1 added [ 297.309555][T16595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.317296][T16595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.343717][T16595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.357317][T16595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.366239][T16595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.393305][T16595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.455859][T16595] hsr_slave_0: entered promiscuous mode [ 297.464663][T16595] hsr_slave_1: entered promiscuous mode [ 297.474138][T16595] debugfs: 'hsr0' already exists in 'hsr' [ 297.479923][T16595] Cannot create hsr debugfs directory [ 297.686453][T16687] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3108'. [ 297.712089][ T52] Bluetooth: hci1: command tx timeout [ 297.804059][T16696] netlink: 'syz.3.3112': attribute type 8 has an invalid length. [ 297.970470][T16595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.993339][T16595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.997663][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3114'. [ 298.035737][T16714] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3113'. [ 298.046866][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3115'. [ 298.066836][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3115'. [ 298.196381][T16595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.207369][T16595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.319159][T16595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.355317][T16595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.421254][T16595] netdevsim netdevsim4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.439124][T16595] netdevsim netdevsim4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.643331][T16595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.655897][T16595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 298.667869][T16595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.688183][T16595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 298.726097][T16739] netlink: 'syz.2.3123': attribute type 1 has an invalid length. [ 298.735353][T16739] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3123'. [ 298.749745][T16739] xt_l2tp: missing protocol rule (udp|l2tpip) [ 298.843289][T16595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.868540][T16595] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.887113][T10300] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.894363][T10300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.929563][T10300] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.936820][T10300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.194603][T16731] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 299.316286][T16763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.389086][T16595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.075826][T16820] sctp: [Deprecated]: syz.0.3138 (pid 16820) Use of int in max_burst socket option deprecated. [ 300.075826][T16820] Use struct sctp_assoc_value instead [ 300.091949][T16817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.114570][T16814] syzkaller0: entered promiscuous mode [ 300.120108][T16814] syzkaller0: entered allmulticast mode [ 300.161580][T16595] veth0_vlan: entered promiscuous mode [ 300.203814][T16595] veth1_vlan: entered promiscuous mode [ 300.256525][T16825] lo speed is unknown, defaulting to 1000 [ 300.347786][T16595] veth0_macvtap: entered promiscuous mode [ 300.391411][T16595] veth1_macvtap: entered promiscuous mode [ 300.392120][T16834] __nla_validate_parse: 4 callbacks suppressed [ 300.392135][T16834] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3144'. [ 300.436831][T16595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.492361][T16838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3146'. [ 300.542882][T16595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.605534][T10286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.632146][T10286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.659393][T10286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.675898][T10286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.711610][T16845] netlink: 'syz.3.3148': attribute type 12 has an invalid length. [ 300.719743][T16845] netlink: 'syz.3.3148': attribute type 29 has an invalid length. [ 300.729629][T16850] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 300.751521][T16845] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3148'. [ 300.774655][T16845] netlink: 'syz.3.3148': attribute type 2 has an invalid length. [ 300.793413][T16845] netlink: 23 bytes leftover after parsing attributes in process `syz.3.3148'. [ 300.807621][T16854] erspan0: entered allmulticast mode [ 300.978875][T16862] netlink: 'syz.3.3153': attribute type 2 has an invalid length. [ 301.114830][ T394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.143112][ T394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.168891][T16866] vlan1: entered allmulticast mode [ 301.174486][T16866] veth0_vlan: entered allmulticast mode [ 301.189468][T16866] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3154'. [ 301.239384][T16870] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 301.296136][T16870] bond1 (unregistering): Released all slaves [ 301.369979][T16868] netlink: 'syz.0.3157': attribute type 2 has an invalid length. [ 301.379135][T10303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.389636][T16868] 9: entered promiscuous mode [ 301.401229][T10303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.488996][T16883] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3161'. [ 301.513189][T16886] dvmrp0: entered allmulticast mode [ 301.523155][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3160'. [ 301.596789][T16886] bond1: option xmit_hash_policy: invalid value (64) [ 301.606316][T16886] bond1 (unregistering): Released all slaves [ 301.746467][T16900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.886995][T16900] bond3: Unable to set down delay as MII monitoring is disabled [ 301.912050][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.923919][T16900] bond3 (unregistering): Released all slaves [ 301.933658][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.942768][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.952177][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.960052][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.027327][T16914] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3167'. [ 302.126600][T16908] lo speed is unknown, defaulting to 1000 [ 302.253468][T16924] tipc: Enabling of bearer rejected, failed to enable media [ 302.569768][T10296] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.583637][T10296] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.627535][T16942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3176'. [ 302.736063][T10296] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.746411][T10296] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.822806][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3178'. [ 302.864758][T10296] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.900334][T10296] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.987457][T16908] chnl_net:caif_netlink_parms(): no params data found [ 303.027296][T10296] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.047526][T10296] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.052928][T16967] Bluetooth: MGMT ver 1.23 [ 303.343234][T16983] netlink: 'syz.5.3186': attribute type 1 has an invalid length. [ 303.358875][T16974] pim6reg1: entered promiscuous mode [ 303.366267][T16974] pim6reg1: entered allmulticast mode [ 303.385521][T16983] netlink: 'syz.5.3186': attribute type 1 has an invalid length. [ 303.393916][T16908] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.406291][T16908] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.413931][T16908] bridge_slave_0: entered allmulticast mode [ 303.421830][T16908] bridge_slave_0: entered promiscuous mode [ 303.470358][T16908] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.478452][T16988] sctp: [Deprecated]: syz.2.3187 (pid 16988) Use of int in max_burst socket option deprecated. [ 303.478452][T16988] Use struct sctp_assoc_value instead [ 303.495966][T16974] netlink: 'syz.3.3184': attribute type 7 has an invalid length. [ 303.509372][T16908] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.516995][T16908] bridge_slave_1: entered allmulticast mode [ 303.525744][T16908] bridge_slave_1: entered promiscuous mode [ 303.533732][T16988] netlink: 'syz.2.3187': attribute type 12 has an invalid length. [ 303.589628][T10279] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.625213][T10279] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.653427][T16908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.701365][T10279] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.717006][T16908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.753108][T10279] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.887307][T16908] team0: Port device team_slave_0 added [ 303.901459][T10296] batadv3: left allmulticast mode [ 303.909128][T10296] batadv3: left promiscuous mode [ 303.929321][T10296] bridge0: port 4(batadv3) entered disabled state [ 303.945656][T10296] batadv1: left allmulticast mode [ 303.952556][T10296] batadv1: left promiscuous mode [ 303.958252][T10296] bridge0: port 3(batadv1) entered disabled state [ 303.972520][T10296] bridge_slave_0: left allmulticast mode [ 303.978515][T10296] bridge_slave_0: left promiscuous mode [ 303.987598][T10296] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.029074][T17004] netlink: 'syz.3.3190': attribute type 1 has an invalid length. [ 304.041886][ T52] Bluetooth: hci2: command tx timeout [ 304.229211][T10296] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 304.298000][T17011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.506325][T10296] bond1 (unregistering): (slave gretap1): Releasing active interface [ 304.528884][T10296] bond3 (unregistering): (slave gretap2): Releasing active interface [ 304.803454][T10296] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 304.813187][T10296] bridge3 (unregistering): left promiscuous mode [ 304.990001][T10296] bond1 (unregistering): Released all slaves [ 305.116637][T10296] bond2 (unregistering): Released all slaves [ 305.128961][T10296] bond3 (unregistering): Released all slaves [ 305.258598][T10296] bond4 (unregistering): Released all slaves [ 305.271499][T10296] bond5 (unregistering): Released all slaves [ 305.284045][T10296] bond6 (unregistering): Released all slaves [ 305.411321][T10296] bond7 (unregistering): Released all slaves [ 305.538428][T10296] bond0 (unregistering): Released all slaves [ 305.560521][T16908] team0: Port device team_slave_1 added [ 305.587941][T17008] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 305.695774][T10296] 9: left promiscuous mode [ 305.747854][T16908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.757410][T16908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.784375][T16908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.798063][T16908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.806367][T16908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.833074][T16908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.844593][T10296] tipc: Disabling bearer [ 305.851323][T10296] tipc: Left network mode [ 305.899929][T16908] hsr_slave_0: entered promiscuous mode [ 305.907088][T16908] hsr_slave_1: entered promiscuous mode [ 305.914434][T16908] debugfs: 'hsr0' already exists in 'hsr' [ 305.920193][T16908] Cannot create hsr debugfs directory [ 306.115467][ T52] Bluetooth: hci2: command tx timeout [ 306.419563][T10296] hsr_slave_0: left promiscuous mode [ 306.425715][T10296] hsr_slave_1: left promiscuous mode [ 306.432680][T10296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.440124][T10296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.456396][T10296] veth1_vlan: left allmulticast mode [ 306.462099][T10296] veth1_macvtap: left promiscuous mode [ 306.467599][T10296] veth0_macvtap: left promiscuous mode [ 306.474799][T10296] veth1_vlan: left promiscuous mode [ 306.480166][T10296] veth0_vlan: left promiscuous mode [ 306.935553][T10296] team0 (unregistering): Port device team_slave_1 removed [ 306.978286][T10296] team0 (unregistering): Port device team_slave_0 removed [ 307.289375][T16908] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.301139][T16908] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.310450][T16908] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.322980][T16908] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.388733][T16908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.417056][T16908] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.429744][T10301] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.437048][T10301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.453429][T10297] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.460535][T10297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.675851][T16908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.695376][T10296] IPVS: stop unused estimator thread 0... [ 307.744102][T16908] veth0_vlan: entered promiscuous mode [ 307.756369][T16908] veth1_vlan: entered promiscuous mode [ 307.781711][T16908] veth0_macvtap: entered promiscuous mode [ 307.790313][T16908] veth1_macvtap: entered promiscuous mode [ 307.809297][T16908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.824327][T16908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.837328][T10296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.847279][T10296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.857456][T10296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.867827][T10296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.934929][ T2219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.943625][ T2219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.974022][T10287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.982595][T10287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.191789][ T52] Bluetooth: hci2: command tx timeout [ 310.272895][ T52] Bluetooth: hci2: command tx timeout [ 330.421636][T17038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.958998][T17086] __nla_validate_parse: 4 callbacks suppressed [ 330.959018][T17086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3209'. [ 330.966075][T17089] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 331.029474][T17094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3211'. [ 331.144920][T17101] IPv6: sit1: Disabled Multicast RS [ 331.153485][T17101] sit1: entered allmulticast mode [ 331.184769][T17103] netlink: 'syz.2.3215': attribute type 21 has an invalid length. [ 331.198083][T17103] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3215'. [ 331.288544][T17103] netlink: 'syz.2.3215': attribute type 21 has an invalid length. [ 331.318358][T17103] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3215'. [ 331.468284][T17119] gre0: entered promiscuous mode [ 331.521416][T17119] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3220'. [ 331.526254][T17123] syz.4.3222: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 331.548042][T17119] netlink: 199008 bytes leftover after parsing attributes in process `syz.3.3220'. [ 331.566856][T17123] CPU: 1 UID: 0 PID: 17123 Comm: syz.4.3222 Not tainted syzkaller #0 PREEMPT(full) [ 331.566885][T17123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.566905][T17123] Call Trace: [ 331.566914][T17123] [ 331.566923][T17123] dump_stack_lvl+0xe8/0x150 [ 331.566955][T17123] warn_alloc+0x214/0x310 [ 331.566978][T17123] ? stack_trace_save+0x9c/0xe0 [ 331.567012][T17123] ? __pfx_warn_alloc+0x10/0x10 [ 331.567039][T17123] ? kasan_save_track+0x4f/0x80 [ 331.567057][T17123] ? kasan_save_track+0x3e/0x80 [ 331.567075][T17123] ? __kasan_kmalloc+0x93/0xb0 [ 331.567094][T17123] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 331.567112][T17123] ? xskq_create+0x56/0x170 [ 331.567139][T17123] ? xsk_setsockopt+0x4dc/0x8d0 [ 331.567171][T17123] ? do_sock_setsockopt+0x17c/0x1b0 [ 331.567192][T17123] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 331.567212][T17123] ? do_syscall_64+0xec/0xf80 [ 331.567235][T17123] __vmalloc_node_range_noprof+0x134/0x16a0 [ 331.567288][T17123] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.567315][T17123] ? __kasan_kmalloc+0x93/0xb0 [ 331.567342][T17123] vmalloc_user_noprof+0xad/0xf0 [ 331.567362][T17123] ? xskq_create+0xbf/0x170 [ 331.567390][T17123] xskq_create+0xbf/0x170 [ 331.567422][T17123] xsk_init_queue+0xb0/0x110 [ 331.567450][T17123] xsk_setsockopt+0x4dc/0x8d0 [ 331.567480][T17123] ? __pfx_xsk_setsockopt+0x10/0x10 [ 331.567507][T17123] ? __pfx_aa_sk_perm+0x10/0x10 [ 331.567534][T17123] ? aa_sock_opt_perm+0xff/0x1a0 [ 331.567563][T17123] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 331.567583][T17123] ? __pfx_xsk_setsockopt+0x10/0x10 [ 331.567612][T17123] do_sock_setsockopt+0x17c/0x1b0 [ 331.567639][T17123] __x64_sys_setsockopt+0x13f/0x1b0 [ 331.567669][T17123] do_syscall_64+0xec/0xf80 [ 331.567689][T17123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.567708][T17123] ? trace_irq_disable+0x37/0x100 [ 331.567734][T17123] ? clear_bhb_loop+0x60/0xb0 [ 331.567758][T17123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.567782][T17123] RIP: 0033:0x7f6aa4b8f749 [ 331.567801][T17123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.567820][T17123] RSP: 002b:00007f6aa5ad2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 331.567843][T17123] RAX: ffffffffffffffda RBX: 00007f6aa4de5fa0 RCX: 00007f6aa4b8f749 [ 331.567859][T17123] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 331.567873][T17123] RBP: 00007f6aa4c13f91 R08: 0000000000000004 R09: 0000000000000000 [ 331.567886][T17123] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.567900][T17123] R13: 00007f6aa4de6038 R14: 00007f6aa4de5fa0 R15: 00007fff47dede68 [ 331.567932][T17123] [ 331.840978][T17123] Mem-Info: [ 331.845167][T17123] active_anon:4441 inactive_anon:0 isolated_anon:0 [ 331.845167][T17123] active_file:3142 inactive_file:39985 isolated_file:0 [ 331.845167][T17123] unevictable:768 dirty:52 writeback:0 [ 331.845167][T17123] slab_reclaimable:12208 slab_unreclaimable:118216 [ 331.845167][T17123] mapped:29091 shmem:1361 pagetables:1065 [ 331.845167][T17123] sec_pagetables:0 bounce:0 [ 331.845167][T17123] kernel_misc_reclaimable:0 [ 331.845167][T17123] free:1305367 free_pcp:14489 free_cma:0 [ 331.896191][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3220'. [ 331.905830][T17129] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 331.938510][T17123] Node 0 active_anon:17664kB inactive_anon:0kB active_file:12568kB inactive_file:159736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116364kB dirty:204kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15096kB pagetables:4096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 332.031165][T17123] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 332.062415][T17123] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.094802][T17123] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 332.101741][T17123] Node 0 DMA32 free:1318408kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17964kB inactive_anon:0kB active_file:12568kB inactive_file:159736kB unevictable:1536kB writepending:204kB zspages:0kB present:3129332kB managed:2559516kB mlocked:0kB bounce:0kB free_pcp:40328kB local_pcp:19308kB free_cma:0kB [ 332.142811][T17123] lowmem_reserve[]: 0 0 1 1 1 [ 332.147728][T17123] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.180560][T17123] lowmem_reserve[]: 0 0 0 0 0 [ 332.185590][T17123] Node 1 Normal free:3887700kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16964kB local_pcp:7392kB free_cma:0kB [ 332.219445][T17123] lowmem_reserve[]: 0 0 0 0 0 [ 332.226878][T17123] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 332.239969][T17123] Node 0 DMA32: 6532*4kB (UM) 3837*8kB (UME) 1577*16kB (UME) 1309*32kB (UME) 185*64kB (UME) 28*128kB (UME) 13*256kB (UME) 102*512kB (UM) 107*1024kB (U) 35*2048kB (UM) 230*4096kB (M) = 1318248kB [ 332.262972][T17123] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 332.266692][T17142] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 332.281382][T17123] Node 1 Normal: 199*4kB (UM) 53*8kB (UME) 53*16kB (UME) 154*32kB (UME) 40*64kB (UME) 10*128kB (UM) 4*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3887700kB [ 332.305028][T17123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 332.315372][T17123] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 332.325270][T17123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 332.336938][T17123] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 332.347121][T17123] 44485 total pagecache pages [ 332.352305][T17123] 0 pages in swap cache [ 332.356480][T17123] Free swap = 124996kB [ 332.368458][T17142] bond3 (unregistering): Released all slaves [ 332.374440][T17123] Total swap = 124996kB [ 332.379533][T17123] 2097051 pages RAM [ 332.383603][T17123] 0 pages HighMem/MovableOnly [ 332.388401][T17123] 425082 pages reserved [ 332.392901][T17123] 0 pages cma reserved [ 332.673031][ T52] Bluetooth: hci2: command tx timeout [ 332.893561][T17180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3235'. [ 333.063198][T17188] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 333.114286][T17193] xt_TCPMSS: Only works on TCP SYN packets [ 333.191693][T17194] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20000 [ 333.216606][T17196] siw: device registration error -23 [ 333.258000][T17188] xt_CT: No such helper "snmp_trap" [ 333.355099][T17202] : entered promiscuous mode [ 333.445410][T17211] netlink: 'syz.4.3242': attribute type 1 has an invalid length. [ 333.620213][T17216] netlink: 'syz.5.3248': attribute type 1 has an invalid length. [ 333.635185][T17216] netlink: 'syz.5.3248': attribute type 2 has an invalid length. [ 333.706056][T17233] syzkaller1: entered promiscuous mode [ 333.716356][T17233] syzkaller1: entered allmulticast mode [ 333.733218][T10298] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 333.741241][T17224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.879542][T17243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3252'. [ 334.577883][T17292] lo: entered allmulticast mode [ 334.686239][T17300] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3267'. [ 334.711524][T17304] "syz.4.3265" (17304) uses obsolete ecb(arc4) skcipher [ 334.776630][T17298] lo speed is unknown, defaulting to 1000 [ 334.796640][T17292] lo: left allmulticast mode [ 334.964275][ T52] block nbd0: Receive control failed (result -32) [ 335.453108][T17348] nbd: illegal input index 2958377 [ 335.512438][T17342] netlink: 'syz.4.3280': attribute type 3 has an invalid length. [ 335.901459][T17388] unsupported nla_type 33542 [ 335.994751][T17395] __nla_validate_parse: 7 callbacks suppressed [ 335.994773][T17395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3298'. [ 336.051467][T17397] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3299'. [ 336.093089][T17395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.293604][T17416] netlink: 'syz.4.3307': attribute type 15 has an invalid length. [ 336.382366][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3308'. [ 336.386690][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3306'. [ 336.727945][T17449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.774057][T17451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3319'. [ 336.973334][T17466] tipc: Started in network mode [ 336.981010][T17466] tipc: Node identity 22aedf795fb1, cluster identity 4711 [ 337.013597][T17466] tipc: Enabled bearer , priority 0 [ 337.060569][T17466] syzkaller0: entered promiscuous mode [ 337.082483][T17466] syzkaller0: entered allmulticast mode [ 337.096593][T17466] tipc: Resetting bearer [ 337.109784][T17461] tipc: Resetting bearer [ 337.222393][T17481] netlink: 'syz.0.3327': attribute type 1 has an invalid length. [ 337.352042][T17486] netlink: 'syz.2.3331': attribute type 11 has an invalid length. [ 337.361592][T17486] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3331'. [ 339.618225][T17461] tipc: Disabling bearer [ 339.689274][ T10] tipc: Node number set to 2099240825 [ 339.989760][T17548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3346'. [ 340.029430][T17558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3349'. [ 340.117761][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3348'. [ 340.138361][T17555] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3348'. [ 340.393607][T17574] delete_channel: no stack [ 340.451674][T10268] hid-generic 0005:046D:0A0E.0004: item fetching failed at offset 0/1 [ 340.465030][T10268] hid-generic 0005:046D:0A0E.0004: probe with driver hid-generic failed with error -22 [ 340.634013][T17588] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 340.688170][T17239] udevd[17239]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 341.089983][T17604] __nla_validate_parse: 3 callbacks suppressed [ 341.090003][T17604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3359'. [ 341.176242][T17610] lo: entered allmulticast mode [ 341.181709][T17610] tunl0: entered allmulticast mode [ 341.189778][T17610] gre0: entered allmulticast mode [ 341.202914][T17610] gretap0: entered allmulticast mode [ 341.211221][T17610] ip_vti0: entered allmulticast mode [ 341.218111][T17610] ip6_vti0: entered allmulticast mode [ 341.229233][T17610] sit0: entered allmulticast mode [ 341.249654][T17610] ip6tnl0: entered allmulticast mode [ 341.259787][T17610] ip6gre0: entered allmulticast mode [ 341.268107][T17610] syz_tun: entered allmulticast mode [ 341.276524][T17610] ip6gretap0: entered allmulticast mode [ 341.292333][T17610] bridge0: entered allmulticast mode [ 341.299856][T17610] bond0: entered allmulticast mode [ 341.305402][T17610] bond_slave_0: entered allmulticast mode [ 341.313571][T17610] bond_slave_1: entered allmulticast mode [ 341.322344][T17610] bridge_slave_1: entered allmulticast mode [ 341.334038][T17610] team0: entered allmulticast mode [ 341.339306][T17610] team_slave_0: entered allmulticast mode [ 341.346569][T17610] team_slave_1: entered allmulticast mode [ 341.353980][T17610] geneve0: entered allmulticast mode [ 341.362395][T17610] dummy0: entered allmulticast mode [ 341.369380][T17610] nlmon0: entered allmulticast mode [ 341.376767][T17610] caif0: entered allmulticast mode [ 341.382795][T17610] batadv0: entered allmulticast mode [ 341.388655][T17610] vxcan0: entered allmulticast mode [ 341.396245][T17610] vxcan1: entered allmulticast mode [ 341.407157][T17610] veth0: entered allmulticast mode [ 341.413287][T17610] veth1: entered allmulticast mode [ 341.418714][T17610] wg0: entered allmulticast mode [ 341.424114][T17610] wg1: entered allmulticast mode [ 341.430261][T17610] wg2: entered allmulticast mode [ 341.436808][T17610] veth0_to_bridge: entered allmulticast mode [ 341.443461][T17610] veth1_to_bridge: entered allmulticast mode [ 341.457398][T17610] veth0_to_bond: entered allmulticast mode [ 341.486040][T17610] veth1_to_bond: entered allmulticast mode [ 341.501283][T17610] veth0_to_team: entered allmulticast mode [ 341.507513][T17610] veth1_to_team: entered allmulticast mode [ 341.529966][T17610] veth0_to_batadv: entered allmulticast mode [ 341.536398][T17610] batadv_slave_0: entered allmulticast mode [ 341.547977][T17610] veth1_to_batadv: entered allmulticast mode [ 341.558611][T17610] batadv_slave_1: entered allmulticast mode [ 341.566190][T17610] xfrm0: entered allmulticast mode [ 341.575983][T17610] veth0_to_hsr: entered allmulticast mode [ 341.587707][T17610] hsr_slave_0: entered allmulticast mode [ 341.595220][T17610] veth1_to_hsr: entered allmulticast mode [ 341.620169][T17610] hsr_slave_1: entered allmulticast mode [ 341.626934][T17610] hsr0: entered allmulticast mode [ 341.633832][T17610] veth1_virt_wifi: entered allmulticast mode [ 341.640049][T17610] veth0_virt_wifi: entered allmulticast mode [ 341.653344][T17610] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 341.711104][T17610] veth1_vlan: entered allmulticast mode [ 341.716893][T17610] veth0_vlan: entered allmulticast mode [ 341.724197][T17610] vlan0: entered allmulticast mode [ 341.729626][T17610] vlan1: entered allmulticast mode [ 341.735346][T17610] macvlan0: entered allmulticast mode [ 341.741465][T17610] macvlan1: entered allmulticast mode [ 341.746990][T17610] ipvlan0: entered allmulticast mode [ 341.752721][T17610] ipvlan1: entered allmulticast mode [ 341.758165][T17610] veth1_macvtap: entered allmulticast mode [ 341.764413][T17610] veth0_macvtap: entered allmulticast mode [ 341.770343][T17610] macvtap0: entered allmulticast mode [ 341.776054][T17610] macsec0: entered allmulticast mode [ 341.784010][T17610] geneve1: entered allmulticast mode [ 341.789569][T17610] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 341.802788][T17610] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 341.810125][T17610] syztnl2: entered allmulticast mode [ 341.815824][T17610] ipvlan2: entered allmulticast mode [ 341.821626][T17610] vxcan2: entered allmulticast mode [ 341.827010][T17610] geneve2: entered allmulticast mode [ 341.833885][T17610] vlan0.3: entered allmulticast mode [ 341.839576][T17610] gtp0: entered allmulticast mode [ 341.845285][T17610] vcan1: entered allmulticast mode [ 341.850529][T17610] bond1: entered allmulticast mode [ 341.856135][T17610] gretap1: entered allmulticast mode [ 341.864781][T17610] bond2: entered allmulticast mode [ 341.870028][T17610] ip6gre1: entered allmulticast mode [ 341.876855][T17610] vxlan0: entered allmulticast mode [ 341.884362][T17610] gretap2: entered allmulticast mode [ 341.901044][T17610] macsec1: entered allmulticast mode [ 341.908342][T17610] mac80211_hwsim hwsim27 wlan2: entered allmulticast mode [ 341.917447][T17610] ip6gre2: entered allmulticast mode [ 341.941654][T17610] vxlan1: entered allmulticast mode [ 341.950238][T17610] ipvlan3: left promiscuous mode [ 341.957615][T17610] ipvlan3: entered allmulticast mode [ 341.967079][T17610] hsr1: entered allmulticast mode [ 341.975081][T17610] sit1: entered allmulticast mode [ 341.980255][T17610] vlan0.2: entered allmulticast mode [ 341.985901][T17610] vxcan4: entered allmulticast mode [ 341.992633][T17610] vxcan5: entered allmulticast mode [ 341.997995][T17610] netdevsim netdevsim5 eth0: entered allmulticast mode [ 342.006681][T17610] netdevsim netdevsim5 eth1: entered allmulticast mode [ 342.014009][T17610] netdevsim netdevsim5 eth2: entered allmulticast mode [ 342.021315][T17610] netdevsim netdevsim5 eth3: entered allmulticast mode [ 342.028300][T17610] ip6tnl1: entered allmulticast mode [ 342.035187][T17610] ipvlan4: entered allmulticast mode [ 342.043489][T17610] : entered allmulticast mode [ 342.049779][T17610] bridge1: entered allmulticast mode [ 342.055448][T17610] batadv_slave_1.: entered allmulticast mode [ 342.062067][T17610] wireguard0: entered allmulticast mode [ 342.067730][T17610] bridge2: entered allmulticast mode [ 342.073316][T17610] bridge3: entered allmulticast mode [ 342.078695][T17610] veth2: entered allmulticast mode [ 342.084309][T17610] veth3: entered allmulticast mode [ 342.090242][T17610] bridge4: entered allmulticast mode [ 342.099093][T17610] bridge5: entered allmulticast mode [ 342.147677][T17645] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3373'. [ 342.167411][T17617] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 342.183693][T17629] veth0: entered promiscuous mode [ 342.189759][T10282] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.211663][T10282] netdevsim netdevsim5 eth0: unset [0, 1] type 1 family 0 port 256 - 0 [ 342.226630][T10282] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.238957][T10282] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.248753][T10282] netdevsim netdevsim5 eth1: unset [0, 1] type 1 family 0 port 256 - 0 [ 342.257749][T10282] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.273637][T10282] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.285933][T10282] netdevsim netdevsim5 eth2: unset [0, 1] type 1 family 0 port 256 - 0 [ 342.295882][T10282] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.314376][T10282] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.322997][T10282] netdevsim netdevsim5 eth3: unset [0, 1] type 1 family 0 port 256 - 0 [ 342.350485][T10282] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.367056][T17629] veth0: left promiscuous mode [ 342.372972][T17650] netlink: 'syz.0.3375': attribute type 83 has an invalid length. [ 342.507696][T17658] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3378'. [ 342.626502][T17667] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3379'. [ 342.692209][T17676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3383'. [ 342.767348][T17681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3384'. [ 342.777893][T17681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3384'. [ 342.898905][T17686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3385'. [ 342.913782][T17685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3385'. [ 342.934818][T17691] netlink: 'syz.4.3387': attribute type 2 has an invalid length. [ 342.953104][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3387'. [ 343.020384][T17696] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 343.466704][T17719] sctp: [Deprecated]: syz.3.3396 (pid 17719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.466704][T17719] Use struct sctp_sack_info instead [ 343.513732][T17719] sctp: [Deprecated]: syz.3.3396 (pid 17719) Use of int in maxseg socket option. [ 343.513732][T17719] Use struct sctp_assoc_value instead [ 343.633564][T17730] netlink: 'syz.3.3402': attribute type 3 has an invalid length. [ 343.822328][T17749] IPv6: NLM_F_CREATE should be specified when creating new route [ 344.002362][T17764] syzkaller1: entered promiscuous mode [ 344.007881][T17764] syzkaller1: entered allmulticast mode [ 344.042085][T17765] netlink: 'syz.2.3408': attribute type 5 has an invalid length. [ 344.065593][T10299] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.085454][T10299] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.112182][T10299] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.211404][T10299] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.385795][T17793] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 344.542728][T17796] bond1: entered promiscuous mode [ 344.550074][T17796] bond1: entered allmulticast mode [ 344.575346][T17796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.795156][T17820] smc: removing net device team0 with user defined pnetid SYZ2 [ 344.806373][T17820] team0 (unregistering): Port device team_slave_0 removed [ 344.820359][T17820] team0 (unregistering): Port device team_slave_1 removed [ 344.829482][T17825] rdma_rxe: rxe_newlink: failed to add wg1 [ 344.836842][T17820] team0 (unregistering): Port device geneve0 removed [ 344.887707][T17830] netlink: 'syz.3.3430': attribute type 10 has an invalid length. [ 344.918514][T17830] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 344.942060][T17833] netlink: 'syz.3.3430': attribute type 4 has an invalid length. [ 345.165019][T17849] syzkaller0: entered promiscuous mode [ 345.201047][T17849] syzkaller0: entered allmulticast mode [ 345.554172][T17877] syzkaller0: entered promiscuous mode [ 345.577593][T17877] syzkaller0: entered allmulticast mode [ 345.621396][T17877] openvswitch: netlink: Flow key attr not present in new flow. [ 345.669736][T17877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.828446][T17890] veth0: entered promiscuous mode [ 345.897596][T10269] IPVS: starting estimator thread 0... [ 345.906498][T17890] veth0: left promiscuous mode [ 346.011495][T17900] IPVS: using max 31 ests per chain, 74400 per kthread [ 346.092904][T17913] openvswitch: netlink: IP tunnel dst address not specified [ 346.142033][T17915] __nla_validate_parse: 10 callbacks suppressed [ 346.142053][T17915] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3450'. [ 346.173069][T17915] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3450'. [ 346.193850][T17915] netlink: 'syz.0.3450': attribute type 4 has an invalid length. [ 346.338860][T17929] tipc: Enabled bearer , priority 0 [ 346.348632][T17929] syzkaller0: entered promiscuous mode [ 346.354854][T17929] syzkaller0: entered allmulticast mode [ 346.392011][T17929] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 346.472120][T17929] tipc: Resetting bearer [ 346.497387][T17928] tipc: Resetting bearer [ 346.541701][T17928] tipc: Disabling bearer [ 346.650076][T17950] xt_hashlimit: max too large, truncated to 1048576 [ 346.684710][T17950] bridge0: entered promiscuous mode [ 346.899577][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3470'. [ 346.939155][T17973] netlink: 'syz.3.3470': attribute type 10 has an invalid length. [ 346.939650][T17977] netlink: 'syz.3.3470': attribute type 10 has an invalid length. [ 346.958945][T17954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3467'. [ 346.970965][T17973] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3470'. [ 347.008427][T17977] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3470'. [ 347.028379][T17973] team0: entered promiscuous mode [ 347.050934][T17973] team_slave_0: entered promiscuous mode [ 347.056831][T17973] team_slave_1: entered promiscuous mode [ 347.077655][T17973] bridge0: port 3(team0) entered blocking state [ 347.084486][T17973] bridge0: port 3(team0) entered disabled state [ 347.091257][T17973] team0: entered allmulticast mode [ 347.096511][T17973] team_slave_0: entered allmulticast mode [ 347.106486][T17973] team_slave_1: entered allmulticast mode [ 347.116437][T17973] bridge0: port 3(team0) entered blocking state [ 347.123047][T17973] bridge0: port 3(team0) entered forwarding state [ 347.243103][T17994] netlink: 'syz.4.3478': attribute type 11 has an invalid length. [ 347.280217][T18002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3477'. [ 347.282742][T17994] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3478'. [ 347.322171][T17995] netlink: 'syz.4.3478': attribute type 11 has an invalid length. [ 347.339603][T17995] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3478'. [ 347.350042][T17994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3478'. [ 347.374527][T18006] netlink: 'syz.5.3479': attribute type 21 has an invalid length. [ 347.392836][T18006] netlink: 'syz.5.3479': attribute type 5 has an invalid length. [ 347.457296][T18011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.469047][T17995] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.813499][T18029] Bluetooth: MGMT ver 1.23 [ 348.097197][T18064] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 348.344998][T18069] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 348.363241][ T10] IPVS: starting estimator thread 0... [ 348.451619][T18085] IPVS: using max 35 ests per chain, 84000 per kthread [ 348.656775][T18100] tipc: Enabling of bearer rejected, media not registered [ 348.969870][T18119] netlink: 'syz.2.3508': attribute type 39 has an invalid length. [ 349.725966][T18177] netlink: 'syz.3.3522': attribute type 11 has an invalid length. [ 350.641141][T18238] netlink: 'syz.5.3544': attribute type 1 has an invalid length. [ 350.780402][T18238] bond3: entered promiscuous mode [ 350.804282][T18238] 8021q: adding VLAN 0 to HW filter on device bond3 [ 350.897035][T18241] bond3: (slave bridge6): making interface the new active one [ 351.027619][T18241] bridge6: entered promiscuous mode [ 351.080215][T18241] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 351.239846][T18260] syzkaller0: entered promiscuous mode [ 351.252385][T18260] syzkaller0: entered allmulticast mode [ 351.325435][T18275] netlink: 'syz.5.3551': attribute type 1 has an invalid length. [ 351.395981][T18278] __nla_validate_parse: 16 callbacks suppressed [ 351.396002][T18278] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3552'. [ 351.417879][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3551'. [ 351.429525][T18275] x_tables: duplicate underflow at hook 2 [ 351.772737][T18295] rdma_op ffff88807ac6b1f0 conn xmit_rdma 0000000000000000 [ 351.841781][T18272] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3550'. [ 351.866585][T18300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3559'. [ 351.953765][ T5840] Bluetooth: hci2: command 0x0405 tx timeout [ 352.093195][T18310] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3562'. [ 352.459706][T18335] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3570'. [ 352.545188][T18339] IPVS: Error connecting to the multicast addr [ 352.620173][T18349] netlink: 'syz.0.3575': attribute type 7 has an invalid length. [ 352.647140][T18351] netlink: 'syz.3.3576': attribute type 25 has an invalid length. [ 352.676211][T18354] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3577'. [ 352.700545][T18354] netlink: 12880 bytes leftover after parsing attributes in process `syz.4.3577'. [ 352.774693][T18362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3578'. [ 352.800088][T18362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3578'. [ 352.822887][T18365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.908187][T18370] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 352.993981][T18376] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.245441][T18396] bridge1: entered promiscuous mode [ 353.251872][T18396] bridge1: entered allmulticast mode [ 353.933365][T18438] x_tables: unsorted underflow at hook 1 [ 354.087738][T18443] openvswitch: netlink: Flow actions attr not present in new flow. [ 354.806730][T18487] veth0: entered promiscuous mode [ 354.875037][T18486] veth0: left promiscuous mode [ 354.935047][T18502] netlink: 'syz.2.3624': attribute type 9 has an invalid length. [ 354.972123][T18502] netlink: 'syz.2.3624': attribute type 11 has an invalid length. [ 354.980173][T18502] netlink: 'syz.2.3624': attribute type 12 has an invalid length. [ 355.056917][T18507] netlink: 'syz.4.3626': attribute type 4 has an invalid length. [ 355.069655][T18510] sctp: [Deprecated]: syz.3.3627 (pid 18510) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.069655][T18510] Use struct sctp_sack_info instead [ 355.128353][T18507] netlink: 'syz.4.3626': attribute type 17 has an invalid length. [ 355.154176][T18507] netlink: 'syz.4.3626': attribute type 4 has an invalid length. [ 355.185577][T18518] sctp: [Deprecated]: syz.2.3630 (pid 18518) Use of int in maxseg socket option. [ 355.185577][T18518] Use struct sctp_assoc_value instead [ 355.257251][T18519] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20001 [ 355.269966][T18518] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20001 [ 355.271174][T18521] netlink: 'syz.3.3632': attribute type 3 has an invalid length. [ 355.299890][T18521] netlink: 'syz.3.3632': attribute type 1 has an invalid length. [ 355.334608][T18521] NCSI netlink: No device for ifindex 813332851 [ 355.566747][T18541] gtp0: entered promiscuous mode [ 355.572195][T18541] gtp0: entered allmulticast mode [ 355.765779][T18550] syzkaller0: entered promiscuous mode [ 355.771576][T18550] syzkaller0: entered allmulticast mode [ 356.776152][T18568] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20003 [ 357.042277][T18578] __nla_validate_parse: 14 callbacks suppressed [ 357.042296][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3651'. [ 357.805059][ T5840] Bluetooth: hci1: command tx timeout [ 358.037186][T18563] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 358.184999][T18586] netlink: 'syz.4.3653': attribute type 21 has an invalid length. [ 358.216512][T18574] veth5: entered allmulticast mode [ 358.278327][T18586] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3653'. [ 382.934438][T18593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3657'. [ 382.937256][T18594] netlink: 'syz.3.3658': attribute type 3 has an invalid length. [ 382.953477][T18596] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3659'. [ 382.969466][T18598] netlink: 'syz.0.3655': attribute type 7 has an invalid length. [ 383.019106][T18598] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3655'. [ 383.167578][T18612] netlink: 'syz.4.3662': attribute type 83 has an invalid length. [ 383.488829][T18626] macsec0: left allmulticast mode [ 383.627843][T18636] sctp: [Deprecated]: syz.2.3669 (pid 18636) Use of int in max_burst socket option. [ 383.627843][T18636] Use struct sctp_assoc_value instead [ 383.685959][T18643] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3667'. [ 383.697573][T18643] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3667'. [ 383.717985][T18645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3666'. [ 383.729424][T18647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3670'. [ 383.756666][T18647] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3670'. [ 384.697796][T18669] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 384.985255][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3684'. [ 385.054235][T18696] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3684'. [ 385.116774][T18707] netlink: 'syz.3.3686': attribute type 2 has an invalid length. [ 385.182473][T18707] : entered promiscuous mode [ 385.905439][T18774] gre0: entered promiscuous mode [ 385.910534][T18774] gre0: entered allmulticast mode [ 386.100297][T18779] bond4: invalid ARP target 0.0.0.0 specified for addition [ 386.125024][T18779] bond4: option arp_ip_target: invalid value (0) [ 386.146571][T18779] bond4 (unregistering): Released all slaves [ 386.461868][T18807] netlink: 'syz.2.3717': attribute type 1 has an invalid length. [ 386.486603][T18807] xt_hashlimit: size too large, truncated to 1048576 [ 386.992477][T18830] hsr_slave_0 (unregistering): left promiscuous mode [ 387.069496][T18846] netlink: 'syz.3.3726': attribute type 9 has an invalid length. [ 387.341197][T18860] netlink: 'syz.5.3732': attribute type 1 has an invalid length. [ 387.490030][T18873] bond4: (slave gretap3): making interface the new active one [ 387.498928][T18873] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 387.576120][T18886] netlink: 'syz.2.3739': attribute type 21 has an invalid length. [ 387.600219][T18878] tipc: Started in network mode [ 387.610997][T18878] tipc: Node identity 080211, cluster identity 4711 [ 387.618306][T18878] tipc: Enabled bearer , priority 0 [ 387.625336][T18889] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 387.699411][T18889] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 387.784428][T18889] tipc: Resetting bearer [ 388.257144][T18921] syzkaller0: entered promiscuous mode [ 388.263918][T18921] syzkaller0: entered allmulticast mode [ 388.620902][T10268] tipc: Node number set to 134353152 [ 389.236018][T18950] __nla_validate_parse: 15 callbacks suppressed [ 389.236038][T18950] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3757'. [ 389.350520][T18957] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3757'. [ 389.711623][T18979] vlan2: entered promiscuous mode [ 389.716897][T18979] bridge0: entered promiscuous mode [ 389.939919][T18996] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3770'. [ 389.940247][T18997] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3766'. [ 390.123664][T19001] netlink: 'syz.4.3771': attribute type 2 has an invalid length. [ 390.147551][T19001] netlink: 119 bytes leftover after parsing attributes in process `syz.4.3771'. [ 390.391976][T19009] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 390.628156][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 390.630392][T19013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3775'. [ 390.652270][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 390.661536][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 390.676889][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 390.684950][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 390.757329][T19019] netlink: 'syz.3.3776': attribute type 9 has an invalid length. [ 390.792391][T19020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.839329][T19020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.847689][T19020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.858443][T19020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.959791][T19014] lo speed is unknown, defaulting to 1000 [ 391.035371][ T9093] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 391.041612][ T9093] CPU: 1 UID: 0 PID: 9093 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 391.051074][ T9093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.061136][ T9093] RIP: 0010:kernfs_rename_ns+0x3a/0x7a0 [ 391.066690][ T9093] Code: ec 48 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 f1 34 5d ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 06 55 c3 ff 49 83 3f 00 0f 84 [ 391.086294][ T9093] RSP: 0018:ffffc9001aea75e0 EFLAGS: 00010206 [ 391.092359][ T9093] RAX: ffffffff8263c2cf RBX: 0000000000000000 RCX: ffff888079d20000 [ 391.100331][ T9093] RDX: 0000000000000000 RSI: ffff888142aeef00 RDI: 0000000000000000 [ 391.108294][ T9093] RBP: 0000000000000006 R08: ffff888079d20000 R09: 0000000000000008 [ 391.116290][ T9093] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 391.124252][ T9093] R13: ffff888142aeef00 R14: 0000000000000000 R15: 0000000000000030 [ 391.132217][ T9093] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 391.141138][ T9093] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.147711][ T9093] CR2: 00007f71941304e8 CR3: 0000000075ec4000 CR4: 00000000003526f0 [ 391.155728][ T9093] Call Trace: [ 391.159002][ T9093] [ 391.161926][ T9093] ? trace_kmalloc+0x1f/0xb0 [ 391.166552][ T9093] ? kobject_move+0x368/0x6e0 [ 391.171223][ T9093] kobject_move+0x525/0x6e0 [ 391.175728][ T9093] ? __pfx_kobject_move+0x10/0x10 [ 391.180749][ T9093] ? do_raw_spin_unlock+0x122/0x240 [ 391.185947][ T9093] ? get_device_parent+0x366/0x3a0 [ 391.191053][ T9093] device_move+0xe0/0x730 [ 391.195383][ T9093] hci_conn_del_sysfs+0xb8/0x1a0 [ 391.200316][ T9093] hci_conn_del+0xc36/0x1240 [ 391.204906][ T9093] hci_conn_hash_flush+0x191/0x260 [ 391.210015][ T9093] hci_dev_close_sync+0x821/0x1100 [ 391.215216][ T9093] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 391.220757][ T9093] ? up_write+0x1ac/0x410 [ 391.225084][ T9093] ? rcu_is_watching+0x15/0xb0 [ 391.229845][ T9093] hci_unregister_dev+0x21a/0x5b0 [ 391.234867][ T9093] vhci_release+0x152/0x1a0 [ 391.239387][ T9093] ? __pfx_vhci_release+0x10/0x10 [ 391.244425][ T9093] __fput+0x44c/0xa70 [ 391.248421][ T9093] task_work_run+0x1d4/0x260 [ 391.253014][ T9093] ? __pfx_task_work_run+0x10/0x10 [ 391.258125][ T9093] ? kmem_cache_free+0x197/0x620 [ 391.263150][ T9093] ? do_exit+0x68f/0x22f0 [ 391.267483][ T9093] do_exit+0x694/0x22f0 [ 391.271639][ T9093] ? cgroup1_freezing+0x20/0x350 [ 391.276572][ T9093] ? __pfx_do_exit+0x10/0x10 [ 391.281178][ T9093] do_group_exit+0x21c/0x2d0 [ 391.285796][ T9093] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.291031][ T9093] get_signal+0x1285/0x1340 [ 391.295715][ T9093] arch_do_signal_or_restart+0x9a/0x7a0 [ 391.301264][ T9093] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 391.307417][ T9093] ? ksys_read+0x1e1/0x250 [ 391.311831][ T9093] exit_to_user_mode_loop+0x87/0x4e0 [ 391.317109][ T9093] ? rcu_is_watching+0x15/0xb0 [ 391.321962][ T9093] do_syscall_64+0x2b7/0xf80 [ 391.326543][ T9093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.332700][ T9093] ? trace_irq_disable+0x37/0x100 [ 391.337784][ T9093] ? clear_bhb_loop+0x60/0xb0 [ 391.342537][ T9093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.348443][ T9093] RIP: 0033:0x7f7e1df8e15c [ 391.352854][ T9093] Code: Unable to access opcode bytes at 0x7f7e1df8e132. [ 391.359860][ T9093] RSP: 002b:00007ffe1f3f3d70 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 391.368271][ T9093] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f7e1df8e15c [ 391.376251][ T9093] RDX: 0000000000000030 RSI: 00007ffe1f3f3e30 RDI: 00000000000000f9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 391.384402][ T9093] RBP: 00007ffe1f3f3ddc R08: 0000000000000000 R09: 0079746972756365 [ 391.392810][ T9093] R10: 00007ffe1f3f3730 R11: 0000000000000246 R12: 0000000000000258 [ 391.400775][ T9093] R13: 00000000000927c0 R14: 000000000005f2d8 R15: 00007ffe1f3f3e30 [ 391.408834][ T9093] [ 391.411855][ T9093] Modules linked in: [ 391.417938][ T9093] ---[ end trace 0000000000000000 ]--- [ 391.466130][ T9093] RIP: 0010:kernfs_rename_ns+0x3a/0x7a0 [ 391.472056][ T9093] Code: ec 48 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 f1 34 5d ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 06 55 c3 ff 49 83 3f 00 0f 84 [ 391.492209][ T9093] RSP: 0018:ffffc9001aea75e0 EFLAGS: 00010206 [ 391.498314][ T9093] RAX: ffffffff8263c2cf RBX: 0000000000000000 RCX: ffff888079d20000 [ 391.506363][ T9093] RDX: 0000000000000000 RSI: ffff888142aeef00 RDI: 0000000000000000 [ 391.514462][ T9093] RBP: 0000000000000006 R08: ffff888079d20000 R09: 0000000000000008 [ 391.522871][ T9093] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 391.530911][ T9093] R13: ffff888142aeef00 R14: 0000000000000000 R15: 0000000000000030 [ 391.538902][ T9093] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 391.620859][ T9093] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.627507][ T9093] CR2: 000055941aab6320 CR3: 00000000428dc000 CR4: 00000000003526f0 [ 391.636431][ T9093] Kernel panic - not syncing: Fatal exception [ 391.642975][ T9093] Kernel Offset: disabled [ 391.647324][ T9093] Rebooting in 86400 seconds..