last executing test programs: 3m19.136545409s ago: executing program 1 (id=604): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x4000010) 3m18.822248871s ago: executing program 1 (id=607): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000440)="1a425f3770b268af205c2096cf3a0b353c28019586fa75f943c682a9b3c128851c1c2fe1350a5b994766bce1e24b59d3262ec578e70cb8295b3cee57fb4c161429a2bff8fbf5647da75032c187832a049fea981c7b864465de6bce7661e604adc7fca93f6062578fb4719a710f8870b4586c893ae3d978e64922e14638584262c24a8af7b6ee9678504342", 0x3, r0, 0x4}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffd44, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da", &(0x7f0000000100), 0x1003, r0}, 0x38) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_RATE={0x14}]}}}]}, 0x8c}}, 0x0) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) getsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0xa, 0x0, &(0x7f0000000180)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) bind$rxrpc(r10, &(0x7f0000000540)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r0, &(0x7f00000003c0)="7b536a3b26f3c108a5f965b199a79929b2a99c29f3ef29112a5aeb510a3161ebc26f219818d67f7c02b13b7b0c3da696e54d9bd0538495e0866cb8885aaa8503b2be86b74c0eb5bfb6f31ba55221ce19"}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r9, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$inet6_tcp_int(r9, 0x6, 0x19, &(0x7f0000000140)=0x9, 0x4) 3m18.258196282s ago: executing program 1 (id=611): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000008000200feff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x3, r3}, 0x38) r4 = socket(0x10, 0x80003, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56459, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="27031600160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'tunl0\x00', r1, 0x20, 0x0, 0x40000000, 0x101, {{0x1b, 0x4, 0x1, 0x8, 0x6c, 0x64, 0x0, 0x7, 0x29, 0x0, @empty, @local, {[@cipso={0x86, 0x2d, 0x3, [{0x7, 0x8, "c6566fee4130"}, {0x1, 0x7, "c7720410ab"}, {0x7, 0xe, "0cec9243268c5ef843d66710"}, {0x6, 0xa, "d30bd07d6f5c44e9"}]}, @cipso={0x86, 0x2a, 0x0, [{0x1, 0x9, "36ae4efec69c1a"}, {0x2, 0xc, "0aac9ee9cbbbd3b347cb"}, {0x6, 0xa, "8433005cb465b274"}, {0x0, 0x5, "f9743d"}]}]}}}}}) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) r9 = socket$inet(0xa, 0x801, 0x84) listen(r9, 0xfffffffd) r10 = socket$inet(0xa, 0x801, 0x84) listen(r10, 0x8) r11 = socket$inet(0xa, 0x801, 0x84) listen(r11, 0x8) r12 = socket$inet(0xa, 0x801, 0x84) listen(r12, 0x1) r13 = socket$netlink(0x10, 0x3, 0x4) r14 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r14, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r13) writev(r13, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0x8}, {0x5, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x4, 0x0, 0x1], 0x0, [0x8, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000004}, 0x48004) 3m17.543753154s ago: executing program 1 (id=615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x9, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0xa, 0x4) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x35288}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) 3m17.265915725s ago: executing program 1 (id=619): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xe, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0x801c581f, 0x30000002000005c) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000008000000040000000100000001000000", @ANYRES32, @ANYBLOB="9a840000000000000000009e07c6738754460e6c", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="04000000030000000500"/28], 0x50) r2 = epoll_create(0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="021326bd7000fddbdf25650000000c009900ff0f000004000000080002000100000008000200010088f1ffffffffffff00000800020001000000080002000100080001200d00000008000200010000000800020001000000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000000329078000000000000000000004e20009c90780100000004000000d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390cbb4e2d8157cddfb9792c8e37bafb99e31a950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb6738f5e54b3dc7c070b4d66f0f9565df74d2653a13d554fee0e7be27c873db314d"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f00000007c0)='io_uring_register\x00', r6, 0x0, 0x80009}, 0x18) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x3c, r7, 0x20, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket(0x25, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000d40)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000001) connect$inet(r10, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a"], 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r9}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3m16.541132732s ago: executing program 1 (id=625): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r3, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3m1.399572339s ago: executing program 32 (id=625): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r3, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m36.786382025s ago: executing program 0 (id=1010): r0 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x80805, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x400040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xfffff4b7, 0x0, 0x1}, 0x48) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x800000) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) (async) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) close(0x3) 2m36.507294011s ago: executing program 0 (id=1012): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x74000000, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x30, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @u32}]}, 0x28}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x2, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x5, 0xc99, 0x58, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x8000, 0x1, 0xf7}}) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000640)="abd210a15853f7745b8f1f975c349fc011e1eeda61704e96af20d0108c20e79ac48f82fa811bf0c3892676907cf430f53c1aa10b02f7430fe698532eb4f4d7694c132fb228f0257199351fc8cc3a0df6b747acaf498be0ad86dd", 0x5a}, {&(0x7f00000006c0)="b5aaaec74fd28533c666cff2b225cf08e2221b3f56fa4c48c328a2aba544c828208ffe4d6f05192200fe663ac01d8a9db3564f72e6237b57d97cb4f989d7cde09dc9aa15446acd79568c6631f7ed5d255560064dc638755c330e69b1b894aa85b086d4e1202f32886e183a292d7fdca33b596f718dfda5fb220e9db9d6c5679a24d2d15d18d43822c9a179174a45bb84c6468ea36397ff78f14567eb923276465635bd6907a5e6c020f99bd9c1a31c16f9959884d6ed7884788e7b125974d9769b4d9bf77c499766f84bd941fce2b801", 0xd0}, {&(0x7f00000007c0)="25fc42f4a44990107447afbf365dbb6dbb2660301a5da958a845b19ee97dea32294d3d66d3cd7e3d16dfcad82905ed0b9f0b31743312f0bc8f9630a6b028035c2e", 0x41}], 0x3}, 0x44000) (async) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000640)="abd210a15853f7745b8f1f975c349fc011e1eeda61704e96af20d0108c20e79ac48f82fa811bf0c3892676907cf430f53c1aa10b02f7430fe698532eb4f4d7694c132fb228f0257199351fc8cc3a0df6b747acaf498be0ad86dd", 0x5a}, {&(0x7f00000006c0)="b5aaaec74fd28533c666cff2b225cf08e2221b3f56fa4c48c328a2aba544c828208ffe4d6f05192200fe663ac01d8a9db3564f72e6237b57d97cb4f989d7cde09dc9aa15446acd79568c6631f7ed5d255560064dc638755c330e69b1b894aa85b086d4e1202f32886e183a292d7fdca33b596f718dfda5fb220e9db9d6c5679a24d2d15d18d43822c9a179174a45bb84c6468ea36397ff78f14567eb923276465635bd6907a5e6c020f99bd9c1a31c16f9959884d6ed7884788e7b125974d9769b4d9bf77c499766f84bd941fce2b801", 0xd0}, {&(0x7f00000007c0)="25fc42f4a44990107447afbf365dbb6dbb2660301a5da958a845b19ee97dea32294d3d66d3cd7e3d16dfcad82905ed0b9f0b31743312f0bc8f9630a6b028035c2e", 0x41}], 0x3}, 0x44000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'geneve0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x800, 0x2202}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x92}, @IFLA_ADDRESS={0xa, 0x1, @random="344144d63fab"}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x2, 0x6, 0xc1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x2, 0x6, 0xc1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0x5}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x168, r1, 0xe11, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x1}, 0x2000004) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r12, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r12, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x2}, {0x0}, &(0x7f0000001880)=[{0x0}], 0x1}}], 0x48, 0x24080080}, 0x0) (async) sendmsg$rds(r12, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x2}, {0x0}, &(0x7f0000001880)=[{0x0}], 0x1}}], 0x48, 0x24080080}, 0x0) 2m36.22334937s ago: executing program 0 (id=1015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x54}, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) pipe(&(0x7f00000004c0)) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @loopback, 0x8001}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000002060102000000000000000000ac048f949709f95d0000000900020073797a3000000000100003006269746d61703a706f7274001c00078006c7ba61470000000600044000000000080008000000000005000100070000000500040000000000"], 0x64}}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c06018a0000000000000000000000000900020073797a32000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40008d0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x10, 0x10, 0xfffffffc, 0x10, {{0x16, 0x4, 0x2, 0x3, 0x58, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x14, 0x7e, 0x3, 0x3, [{@remote, 0x3}, {@loopback, 0x40}]}, @timestamp={0x44, 0x8, 0x8b, 0x0, 0x4, [0xffffc824]}, @ssrr={0x89, 0x27, 0xbc, [@private=0xa010102, @private=0xa010102, @empty, @multicast2, @remote, @loopback, @multicast2, @multicast1, @private=0xa010100]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000009c0)=0x0, &(0x7f0000000a00)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x3, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000088}, 0x40005) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r7, @ANYBLOB="14000100ff05000000000000dfce000000000001"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000a80)={@private2, 0x0}, &(0x7f0000000ac0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x0, 0x5, 0x2e, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x700, 0x1, 0x1ff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c00)={'batadv_slave_1\x00', 0x0}) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r12, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r12, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r12, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r12, &(0x7f0000000100)={0x2c, 0x2, r14}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d8020000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf2513000000280001800800030000000000140002006970366772653000000000000000000008000300010000005400018014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f62617461647600080003000200000008000300010000002c000180140002007866726d300000000000000000000000140002006772657461703000000000000000000054000180080003000100000014000200736974300000000000000000000000001400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000090000180140002000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r3, @ANYBLOB="080003000000000008000300020000001400020065727370616e300000000000000000001400020070696d7265673000000000000000000014000200626174616476300000000000000000006c00018008000100", @ANYRES32=r4, @ANYBLOB="14000200626f6e645f736c6176655f3100000000080003000300000008000100", @ANYRES32=r5, @ANYBLOB="1400020073797a5f74756e00000000000000000008000100", @ANYRES32=r7, @ANYBLOB="080003000200000008000100", @ANYRES32=r8, @ANYBLOB="080003000300000008000100", @ANYRES32=r9, @ANYBLOB="200001800800030002000000140002006e657464657673696d3000000000000050000180080003000100000014000200766c616e31000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="5f76746930000000000000000014000200776730000000000000000000000000005c000400000000000000000008000300020000000800010000000000000000", @ANYRES32, @ANYBLOB="1400020076657468305f746f5f62617461647600080003000100000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="1400020069703667726530000000000000000000"], 0x2d8}, 0x1, 0x0, 0x0, 0x24000085}, 0x80c0) 2m35.604659071s ago: executing program 0 (id=1023): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x3602}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x3602}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 2m35.230289861s ago: executing program 0 (id=1028): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0xfe}]}]}]}}]}, 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf250900000008000300", @ANYRES32=r4, @ANYBLOB="08003729000000000a000600080211000001"], 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x40) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113400000000008510000002000000b70089bd000000009500c2000000000095000012697e0800"], &(0x7f0000000080)='GPL\x00', 0x4, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)={0x40, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m34.906891398s ago: executing program 0 (id=1033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4}) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r4) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x11c, r3, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x11c}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r6, 0x0, 0xf69}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 2m19.723949358s ago: executing program 33 (id=1033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4}) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r4) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x11c, r3, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x11c}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r6, 0x0, 0xf69}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 4.791191334s ago: executing program 6 (id=2351): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000200000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470580800000900010073797a30000000000900020073797a320000"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xe0, r4, 0x300, 0x70bd28, 0x7fffffff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_FRAME={0xb0, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xc}, @device_b, @broadcast, @from_mac=@device_b, {0x3}, "", @void, @value=@ver_80211n={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0x81, "be76032b313d9030677304cccb3e01368d51874ed4139e5e812371a56afac19fce0077f43339ae14e31a21d10b865e8b7c4575e5ac8972dd47ed045d2138e5da61011ebd94e51c3839f6ae78a319cce4df82f008b2c63e99ee99e29ba6f5e0cdfb45bddbe5ef04e4a4b8c906dfa5d7899da2a43403c7a829459ba1604981c229d9"}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x48080}, 0x20044804) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa08001900ffffffff14001b00fe"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x439, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_CARRIER={0x5, 0x21, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4040) 3.969862722s ago: executing program 6 (id=2357): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6d, 0x200, 0x1}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r3, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe2}]}, 0x30}, 0x1, 0x0, 0x0, 0x42094}, 0x20004050) 3.801378834s ago: executing program 6 (id=2361): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x1, 0x4a61ca45, 0x3}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000000)=0x100000001, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000740)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x94) 3.700075459s ago: executing program 6 (id=2362): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) 3.522250606s ago: executing program 6 (id=2365): syz_emit_ethernet(0xa2, &(0x7f0000000440)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "fb3519", 0x68, 0x3, 0x0, @loopback, @remote, {[@hopopts={0x33, 0xb, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x5, 0x2, [0x665c, 0x4c, 0x1, 0xd9, 0x6b1daa84, 0x2]}}, @pad1, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0xfffb, [0x1]}}, @pad1]}, @dstopts={0x32}]}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9100000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x10, 0x12, 0x1}, 0x10}], 0x1}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00', 0x400}) 3.360971933s ago: executing program 6 (id=2370): r0 = socket$netlink(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000081}, 0x2000100) 3.169591425s ago: executing program 4 (id=2374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r6, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x80}, 0x1, 0xba01}, 0x8044) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x2}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8080"], 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0) 3.020154377s ago: executing program 5 (id=2377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0xc4}, 0x40004) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)=0xd, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x13, 0x1, 'broadcast-link\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="b73095f82c76"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x32, 0x2a, [@dsss={0x3, 0x1, 0x78}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xd, 0x65, @device_a, 0xa4, @value, 0x7fffffff, 0x67}}, @ibss={0x6, 0x2, 0x437}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40801) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc820) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000980)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', 0x0, 0x40, 0x80, 0x7ff, 0x7, {{0x29, 0x4, 0x1, 0x17, 0xa4, 0x68, 0x0, 0x4, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@generic={0x83, 0x9, "33efdef4548340"}, @ssrr={0x89, 0x23, 0xfb, [@multicast2, @broadcast, @local, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @broadcast]}, @lsrr={0x83, 0x7, 0x67, [@broadcast]}, @generic={0x89, 0x2}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xa8, 0x1, 0x3, [{@local, 0x52e}, {@multicast2, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast2, 0x5}]}, @lsrr={0x83, 0x27, 0x93, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @private=0xa010102, @loopback, @loopback, @multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0xde, 0x0, 0x3, [0x101, 0x5]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a00)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'gretap0\x00', 0x0, 0x1, 0x740, 0x400, 0x2, {{0xc, 0x4, 0x3, 0x3f, 0x30, 0x64, 0x0, 0xfd, 0x4, 0x0, @multicast1, @empty, {[@end, @generic={0x88, 0x3, "da"}, @rr={0x7, 0x13, 0x5b, [@dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010102, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000b00)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0x28, 0x0, {{0x24, 0x4, 0x3, 0x20, 0x90, 0x64, 0x0, 0x9, 0x29, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0x2d, 0x1, 0x7, [{@empty, 0x7ff}, {@local, 0x5}, {@private=0xa010100}, {@rand_addr=0x64010101, 0x1}, {@broadcast}]}, @generic={0x82, 0xd, "b6b04667fca223a21b8f46"}, @cipso={0x86, 0x29, 0x0, [{0x0, 0x6, "223c280e"}, {0x1, 0xc, "cf2923bb6d705c5385b5"}, {0x2, 0x11, "476efd06b90b66b806318118a8f6b5"}]}, @timestamp={0x44, 0x18, 0xf3, 0x0, 0x8, [0xfffffffc, 0x5, 0x7, 0x1, 0x3]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x4, 0x4, 0x40, @local, @mcast2, 0x8000, 0x7, 0x1e90, 0x5}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000cc0)={0x0, @rand_addr, @empty}, &(0x7f0000000d00)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000dc0)={'erspan0\x00', &(0x7f0000000d40)={'tunl0\x00', 0x0, 0x7800, 0x7, 0x1, 0x9, {{0xb, 0x4, 0x3, 0x25, 0x2c, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x7f, 0x0, 0xd, [0x8]}, @timestamp={0x44, 0xc, 0x67, 0x0, 0x0, [0x823f, 0x3]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e80)={'ip6tnl0\x00', &(0x7f0000000e00)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x8, 0xc5, 0x18, @remote, @local, 0x10, 0x83e1, 0x0, 0xfffffff7}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000ec0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000001100)={&(0x7f0000000840), 0xc, &(0x7f00000010c0)={&(0x7f0000000f00)={0x194, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000884) r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001180), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000011c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001200)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x68, r17, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x38, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xf06f}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r19}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x48010) bind$inet(0xffffffffffffffff, &(0x7f0000001340)={0x2, 0x4e20, @local}, 0x10) 2.890291272s ago: executing program 4 (id=2378): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c0002800800034000000002080001400000001408000240000000120800064000000000080006400000000a0900010073797a30"], 0x110}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) getsockname$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f00000002c0)=0x6e) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='+\a\x00\x00\x00'], 0x5) r7 = openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="2d63edcd514073d0ce2d6cc9c72cbdfa82707520"], 0x5) (async) write$cgroup_int(r7, 0x0, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) (async) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, r9, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:scsi_generic_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x6}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x4c, r11, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044885}, 0x2040) 2.402229991s ago: executing program 4 (id=2381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/30, 0x1f) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/30, 0x1f) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) 2.220733989s ago: executing program 5 (id=2382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYBLOB, @ANYRES8=r0], 0x38}}, 0x20044810) 2.056861526s ago: executing program 4 (id=2384): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x21, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$rds(r1, 0x0, 0x40800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1701, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="d76e", 0x1}, 0x50) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x21, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$rds(r1, 0x0, 0x40800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) write$rfkill(r2, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1}, 0x8) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1701, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="d76e", 0x1}, 0x50) (async) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) 1.961601441s ago: executing program 5 (id=2386): r0 = socket(0x2, 0x6, 0xfffffefb) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000004dc0), &(0x7f0000004e00)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0x11}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006200000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000300000000002604fdffff02000016010000033800001d13f8ff000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.814318042s ago: executing program 3 (id=2387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x3a4, 0xb, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_USERDATA={0xac, 0xd, 0x1, 0x0, "dfbd11a8cc4d2bef15c7ca31fcfa83635475cdb8cc2f9759fc7c114e1396414dcd72419b4308787891396550bccd254d1a4f90c951f4ec9a9e62dd7072a9cba72687496c70d3b98baa05b6c6a0a1d6124df2be127cf4028120cc01fd134e369a44bfda2d39e42c89cd33939043ff18970de906153ce53a920bb68ae8c5bfbf9163f445e4dbf50480757cf2d6d431c3f5cf596ee763a898f1f1b6db9e53391cfb9c439fa15ac77565"}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_USERDATA={0xbf, 0xd, 0x1, 0x0, "c7a4372ed26c90d44a9f848efb8941c6683b08fe35c0c7922a8c86e672c47b1c0e241885e4c1da82b700e18a657ccfd0bb83d2f199992b2dbf8c4e95b7961892379751c41199eb9af3acaa643139e98ed5aadc5be78884fd691bc24f97ccd1fee69d13236fe7caa23d7bdbe66612f53e7a4495df047d4f09d80e651f10f79b42e0108befebdcee580c648e0c799ff3b063cb455e07e1e4967e921d6441780e14a1c613ce224962b86e0ea3bf36b47f7dd668a9e7441d52264c3961"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x64, 0x11, 0x0, 0x1, @tunnel={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, @NFTA_SET_DESC={0x190, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x18c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x444f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f16b3ef}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb4a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb08}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}, @NFT_MSG_DELTABLE={0x7c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x5e, 0x6, "abc2d13e96fe82b582f7b5aa5e1501134876c3ba4cb30eb4cdf97da2a00b99f61a8fb4c53a1ef00b7881cc7f0ac54c8464fea737dc8b2269c8aef8a57ecb0b61dae8012b80a47c25c172ece9a43bb9a73a789720945296d40963"}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4dc}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09050000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000001"], 0x74}}, 0x0) 1.673625607s ago: executing program 2 (id=2389): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x71, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.636741902s ago: executing program 3 (id=2390): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000180)="6e54922475cc82ac929c77e2efee814133c8cef498f82ac131d79c4a43707d0ada99235f87de5e0c77", 0x29) r1 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) connect$tipc(r1, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x2, 0x2}}, 0x10) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6erspan0\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001100050000200000fddbdf2507000000", @ANYRES32=r7, @ANYBLOB="005000005219000014001a80100004800c00068008000100"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0) 1.445369431s ago: executing program 2 (id=2391): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000003c0)={0x9506, 0x0, 0x2, 0x81, 0x6, 0xe475, 0x6c, 0x7, r2}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r8, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xfdf7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x11) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.445128507s ago: executing program 3 (id=2392): setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001008210404000000070000000000000036099dc6b82074ccff7cd8ef6df6", @ANYRES32=0x0, @ANYBLOB="adffa888d2260000240012"], 0x50}}, 0xc080) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'veth0_to_batadv\x00', 0xfffffff9}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 1.229640296s ago: executing program 3 (id=2393): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000600000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0xcd1, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x9) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000cff500000000ffffffff00000700", @ANYRES32=0x0, @ANYBLOB="000000000140060030001280080001006873720024000280050007000100000008000100", @ANYRES32=r11, @ANYBLOB="08000200", @ANYRES32=r9], 0x50}}, 0x0) bind$tipc(r3, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0}, 0x1) r12 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r13 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b40)=@deltclass={0x1bb8, 0x29, 0x800, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xb}, {0xb, 0xa}, {0xb, 0x7}}, [@c_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3d, 0x0, 0x5, 0x3, 0x5, 0x6, 0x8001, 0xfffffffc}}]}}, @c_cbq={{0x8}, {0x81c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0xa, 0x7f, 0x3, 0x7, 0x3, 0x8d5, 0x6, 0xd9c, 0x5, 0x2, 0xe, 0x8, 0x5, 0xc, 0x10, 0x23f8a42, 0x8, 0x401, 0xffffffc8, 0x2, 0x8c5, 0x3, 0x5, 0x1, 0x6, 0xd0cb, 0x9, 0x4, 0x800, 0x9, 0x6, 0x80000001, 0xc, 0x4, 0x1, 0x9, 0x8, 0x8, 0xd5d, 0x800, 0x40, 0x5, 0x8, 0x7, 0x7ff, 0x732, 0x0, 0x80000001, 0x81, 0x9, 0xd2, 0x40, 0xcbf0, 0xd08, 0x8, 0xc888, 0x7, 0xc8cb, 0x7a7, 0x4, 0xfffffff8, 0x6, 0xf, 0x4, 0x3, 0x2, 0x80, 0x4, 0xd, 0x3, 0xfffffff9, 0xf0, 0xf, 0x6, 0xf6, 0x1, 0x9e5, 0x0, 0xdd4, 0x9, 0xa0, 0x1, 0x401, 0x9, 0x3, 0xfffffffb, 0x0, 0x3, 0xffff, 0x3, 0x3, 0x906, 0x81, 0x40, 0xffffffff, 0x1, 0x0, 0x6, 0x5, 0xe, 0x2, 0x9, 0x9, 0xfffffff0, 0x5, 0x2, 0xe, 0x80000001, 0x0, 0x1, 0x8, 0xf, 0x0, 0xfffffffd, 0x5, 0x9, 0xfffffff7, 0x7, 0xfff, 0x8, 0xb269, 0xfff, 0x3, 0x2, 0x1000, 0x6f47, 0x8, 0x800, 0x8, 0xc43d, 0x81, 0x6, 0x0, 0x100, 0x10000, 0x5, 0x5, 0x3, 0x5cc, 0xc, 0xa, 0xe20, 0xffffffff, 0x1, 0x8000, 0xaf, 0x3, 0x4d, 0x2, 0x1000, 0x3ff, 0x1ef, 0x75a, 0xffffffff, 0x4, 0x3, 0x2, 0x4, 0xec32, 0xc2c3, 0x2, 0x80, 0x800, 0x61, 0x2, 0x8, 0x7, 0x69f5, 0x9, 0x4, 0xc2c, 0xdffcd7a, 0xb391, 0x8001, 0x5, 0x0, 0x6, 0x910, 0xc, 0x0, 0xaa, 0xffff7fff, 0x6, 0xd9ac, 0x2, 0x80000000, 0x5, 0x5, 0x10000, 0x0, 0x2, 0x9, 0x1, 0x6, 0xa, 0x3, 0xbbd2, 0x0, 0x8, 0x3, 0x5, 0x800, 0x238, 0x10001, 0x80, 0x9, 0xfff, 0x7, 0x4, 0x5, 0x100000, 0x400, 0x4, 0x72f2, 0x1, 0x0, 0xff, 0x4, 0x3, 0x2, 0x0, 0x400, 0x7, 0x200, 0x0, 0x395f, 0x3, 0x2, 0x80000000, 0x1cd719f8, 0x8747, 0x1, 0x0, 0x1, 0x4, 0x0, 0x7, 0x0, 0x2, 0x2, 0x80000000, 0x2, 0xbcc1, 0x800, 0x8, 0xfffffffe, 0x5, 0x0, 0x1, 0x6, 0x0, 0x2, 0x6, 0x8, 0x80000000]}, @TCA_CBQ_RATE={0x10, 0x5, {0x8, 0x3, 0x1, 0x28d1, 0x8000, 0x6}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1e67, 0x4, 0x10, 0x7, 0x7, 0x250, 0xff, 0x82, 0x1000, 0xeb, 0xee9, 0x2, 0x9, 0x2ff3, 0x0, 0x64d, 0x9, 0x271df28e, 0x5, 0x4, 0x764a2dc4, 0x9, 0xe313778d, 0x4, 0x9, 0xb, 0xd8, 0x10001, 0x401, 0x9d, 0xfffffffe, 0x8000, 0x7, 0x5ba83adf, 0x5b, 0x1, 0x4, 0x7f, 0x4, 0x5, 0x6, 0x7, 0x5, 0x5, 0x0, 0x1, 0x2d, 0x40fd, 0x0, 0x9a36, 0x1, 0x9, 0x7fff, 0x2, 0x1, 0xffffffff, 0x3, 0xdad2, 0x40, 0x8000, 0x6, 0x6, 0x0, 0x0, 0x6e41, 0x10000, 0x80000000, 0x3fb243f7, 0x6c1, 0xaed, 0x32, 0xf, 0x2, 0x8001, 0x6, 0xf0000000, 0x0, 0x14000000, 0x6, 0x0, 0x9, 0x7f, 0x8, 0x1, 0x8001, 0x1, 0x401, 0x7f, 0xe5, 0x3ff, 0x56, 0x4, 0x8bfe, 0x5, 0xffffffff, 0x3, 0x3, 0x1000, 0x0, 0x90ed, 0x0, 0x0, 0x1, 0x2, 0x3, 0x7, 0x4, 0xfff, 0x7, 0x3, 0x6, 0x2, 0x8b2, 0x3ff, 0x3, 0x3, 0x3, 0x400, 0x1, 0x603, 0x6, 0xb, 0x9, 0x200, 0x4, 0x4, 0x372, 0x5, 0x1, 0xa529, 0x7fff, 0x7, 0x2, 0xbc, 0x80000000, 0x7a, 0x2, 0x8, 0x0, 0x73800000, 0xcc2, 0xccbbe780, 0x1, 0xfffffffb, 0x79c78b6e, 0xfffffffc, 0x430, 0x0, 0x10000, 0xf8, 0x3, 0xfffffffb, 0x4d, 0x200, 0x8000, 0x4, 0x0, 0x3, 0x7, 0x8001, 0x2, 0x3, 0x9, 0x6, 0xb4a, 0x4, 0x2, 0x40, 0x5, 0x6, 0x71c7, 0x85d, 0x7, 0x0, 0x0, 0x3, 0x8, 0x5, 0x6, 0x6, 0x4, 0x966b, 0x9b, 0x8, 0x8, 0xffffffff, 0x80000000, 0x6, 0x2, 0x4, 0x0, 0x41, 0x5, 0x7, 0x4, 0x2, 0x4, 0x80, 0x7ff, 0x8, 0x3, 0x8, 0x4, 0x401, 0x1, 0x80000000, 0x8, 0xfffffffe, 0x4, 0x5, 0x7, 0xffff, 0x7, 0x4, 0xf, 0x800, 0x6, 0x2, 0x80000001, 0x1, 0x9, 0x2, 0x8000000, 0x7, 0xe, 0xd, 0x6, 0x7fffffff, 0x9, 0x5, 0x7ab, 0x1, 0x1, 0x2, 0x8, 0xffffff81, 0x1ff, 0x0, 0x6b751583, 0x9cd5, 0x7ff, 0xfffffffe, 0x0, 0x7ff, 0x1, 0x1, 0x1, 0x6, 0x400, 0x6, 0xa, 0x1, 0x7fff, 0xa2, 0x9, 0x4]}]}}, @c_atm={{0x8}, {0x158, 0x2, [@TCA_ATM_HDR={0x17, 0x3, "6120d3aed61fc52e8df6ffd8e83993dddbf32d"}, @TCA_ATM_HDR={0x3b, 0x3, "33b3055471c3ff745f8e0048467d7ee60966cef1d02ae50f4812449b7bf691e86ccdd5d5a486119638d8a8409c4dad46eb6a1c212a261b"}, @TCA_ATM_HDR={0x1e, 0x3, "17216f8716ee47e077c3001de2d0e122e92ecc8cd8a8ccd31300"}, @TCA_ATM_HDR={0x3d, 0x3, "782caa0fbd29b51f7a68e6ee9ee2cad3dc45e638c6ecb7bfeb8ecf81058393d22eba7e82581b8736dba0c3ffb7919e05b1f932569be69d01f4"}, @TCA_ATM_HDR={0x9, 0x3, "15bf1e19fa"}, @TCA_ATM_HDR={0x44, 0x3, "9bc1606966a69a7fac9113bcb8c144fb0f76219c299d6c2cda13e2fec3713b05e07163bb1ff54e5f42d5067a5d4658dfb14cde754d28ce4cafb9552fc41e5a39"}, @TCA_ATM_FD={0x8, 0x1, r12}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_HDR={0x36, 0x3, "f1f8772997ee9a5b5484f507c57053af1b310b55979152635edeb26d911f90a76009034c6bc1d1633207b2d8b7b29273472b"}]}}, @c_cbq={{0x8}, {0x3c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x20, 0x2, 0x10, 0xff, 0x3be, 0x6, 0x7, 0x5}}, @TCA_CBQ_RATE={0x10, 0x5, {0xa2, 0x2, 0x4, 0x1, 0x5, 0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7f, 0x2, 0x1, 0xb, 0x8, 0x2}}]}}, @c_cbq={{0x8}, {0x7c, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0xc}, 0x7fff, 0xb4bf4b08}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2c, 0x2, 0x3, 0xaa, 0x5, 0x1734, 0x5d, 0x10001}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x10, 0x3, 0x6, 0x9, 0xe, 0x400, 0x10, 0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x0, 0xf, 0x8000, 0xe, 0x9}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x35, 0x3, 0xd, 0x7, 0x7, 0x8, 0x9, 0x3}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x8, 0xe}, 0x4, 0x27}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x1}}}, @c_atm={{0x8}, {0x24, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0xf, 0x3, "0d7c7054ed39c9c3e502be"}]}}, @c_atm={{0x8}, {0x54, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xffe0, 0x3}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_FD={0x8, 0x1, r13}, @TCA_ATM_EXCESS={0x8, 0x4, {0x9}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0xa}}, @TCA_ATM_HDR={0x7, 0x3, "e97ae1"}]}}, @c_cbq={{0x8}, {0x107c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x4, 0x2, 0x3, 0x401, 0x0, 0x6b, 0x1, 0x6, 0x3, 0x7, 0x9, 0x6, 0x8, 0x1, 0xffffffb0, 0xff, 0x75000000, 0x7, 0x4, 0x3823bf63, 0x7a9, 0xc8, 0x10001, 0xffffff2b, 0x9, 0xffff0000, 0x3, 0xc986, 0x8, 0x6d, 0x8, 0x4e76, 0x4, 0xb, 0x8000, 0xd5c, 0x4, 0x6, 0x264, 0x7, 0x1, 0xf, 0x7, 0x7, 0x0, 0x6, 0x9, 0x8, 0x9, 0x1, 0x2, 0x929, 0x7f, 0x1, 0x6, 0x2, 0xb2, 0x6407, 0x19, 0x10, 0x4, 0x2, 0x800, 0x4, 0xff, 0x7, 0x0, 0x3ff, 0x4, 0x8b, 0x2, 0x0, 0xffff33e4, 0x7, 0x101, 0x3, 0x12e, 0x0, 0x5, 0xffffffff, 0x7, 0x5, 0x3, 0xff, 0x8, 0x1, 0x7, 0x75, 0xffff, 0xc4, 0xacf, 0xcc, 0x3, 0x0, 0x5, 0x7, 0x4, 0x2, 0x8, 0xe, 0x3, 0xc, 0x5, 0x100, 0xefb0, 0x3, 0x8, 0x10001, 0xdae7, 0xf, 0x0, 0x9, 0x101, 0x2, 0x4, 0x7, 0xd, 0xffffff7f, 0xfffffff8, 0x2, 0xd, 0x9574644a, 0x63b4, 0x9, 0xfffffffe, 0x1ff, 0x9, 0x0, 0x6, 0x8, 0x931, 0x200, 0x80, 0x3ff, 0x80000000, 0x3, 0x6, 0x7, 0x3ff, 0x205a, 0x0, 0x1, 0x400, 0x4, 0x1ff, 0x6, 0x7ff, 0x3, 0x2, 0x6, 0x9, 0x1, 0x0, 0x401, 0x7369, 0x2, 0x1, 0x2, 0x4640, 0x5, 0x0, 0x3, 0xf, 0x2, 0x3ffd, 0xffff8001, 0x80000000, 0x4, 0x0, 0x7, 0x10000, 0x8, 0x80, 0x1, 0x0, 0x5, 0x0, 0x1, 0x8, 0x3dc4, 0x4, 0x490, 0x4, 0x2, 0xebb, 0x9, 0x10, 0x3, 0x1, 0x7fffffff, 0x1, 0x9, 0x3, 0x7, 0x4, 0x6, 0xf, 0x0, 0x98f, 0x59a, 0x942, 0x3ff, 0x10000, 0x1, 0x9, 0x7, 0x10001, 0x6f57, 0x2, 0x7, 0x4, 0x2, 0x101, 0x2, 0x0, 0x4, 0x9, 0xf, 0x5, 0x3, 0x1, 0x0, 0x3a29, 0x5de5, 0xc, 0x3, 0x3, 0x1, 0x5, 0xc, 0xd, 0x0, 0x4, 0x2, 0x200, 0x1, 0x1, 0xc, 0xfffffc57, 0x7, 0x94, 0x9, 0x9, 0x7, 0x5, 0x9, 0x7, 0xa7b, 0x8, 0x3, 0x80000000, 0xac1d, 0x1, 0x8, 0x7fff, 0x2]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xc, 0x8}, 0x1ceb, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffffffff, 0xffffffff, 0x3, 0x2, 0xe4, 0xd4c, 0x7ff, 0x5, 0x0, 0x6, 0x3f2d, 0x8, 0x3, 0x80, 0x7fff, 0x1200000, 0x3, 0x2, 0x7, 0x7, 0x8a, 0x7, 0x2, 0x3, 0xa, 0x5, 0x0, 0x1fffc00, 0x1, 0x8001, 0x7, 0x6, 0x6, 0x5, 0x9, 0x7, 0x9, 0x2, 0x41b, 0x4, 0xa, 0x6, 0x617ec5a0, 0xd5c6, 0x9, 0x8, 0xcd5, 0x10001, 0x800, 0xffff, 0x8001, 0x8, 0xa, 0xb, 0x6, 0xd42d, 0x6, 0x0, 0x85, 0xb66, 0x1, 0x80000000, 0x3, 0x4, 0x83, 0x7, 0xfffffff9, 0x4, 0x1, 0x0, 0x3, 0x6, 0xe, 0x3, 0x7, 0xd, 0x99, 0x6, 0xd04f, 0x5, 0x4, 0x4c, 0xffff, 0x5, 0x2, 0xc94, 0x1, 0xbe, 0x7, 0x5, 0x1, 0x3, 0x92b2, 0x7, 0x4, 0x3, 0x7f, 0x60d, 0xffe00, 0xa, 0x8, 0x35, 0xfffffffe, 0x6, 0x6, 0x5, 0x1, 0xa9, 0x3, 0x1, 0x8, 0xc, 0x7, 0x3, 0x80000000, 0x7, 0x40, 0x5a, 0x8, 0x4, 0xcda1, 0x2, 0x5, 0x8, 0xc9, 0xfffffff8, 0xb15b, 0x3, 0x200, 0x1, 0x0, 0x3, 0xe98, 0x24c, 0xcead, 0xfffffffe, 0xfffffffc, 0xa, 0x6, 0x7fff, 0x1, 0x83c9, 0x70c7, 0x80000001, 0x1, 0x9, 0x8001, 0x80000001, 0x0, 0xfffffffb, 0x0, 0xfffffa2f, 0x1, 0x2, 0x3, 0x6, 0x1, 0x3, 0x1, 0x6, 0xc, 0x6dbe, 0xb2e, 0x81, 0x1a00000, 0x9, 0x44, 0x10001, 0x91b, 0x6, 0x9, 0x1, 0x80000000, 0x1, 0x1, 0xf83, 0x6, 0xfffffffe, 0x80000001, 0xfffffffe, 0x0, 0x3, 0x1, 0x4, 0xc, 0x8, 0x800, 0x2, 0x8, 0x2, 0xab2, 0xfffffc00, 0x3111, 0x1ff, 0x1, 0x2, 0x5, 0xb, 0x1f3, 0x7ff, 0x0, 0x100, 0x1, 0x5, 0x0, 0x400, 0x9, 0xb, 0x5, 0x1, 0x2, 0x6, 0x8, 0xf4f9, 0x3, 0x9, 0x6, 0x8, 0xef, 0x8, 0xffff, 0x2, 0x0, 0x1, 0x2, 0x7fff, 0xc, 0x2, 0xf, 0x9, 0x100, 0x401, 0x2, 0x2, 0x1aa, 0x28, 0x1, 0xfff, 0x7, 0x6, 0x4, 0x0, 0x2, 0x8, 0x3, 0x2, 0x7, 0x81, 0x0, 0x2, 0x5, 0x89c7, 0x80, 0x10001, 0x2]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x34, 0x0, 0x1e, 0x2, 0x9, 0x1000, 0x4, 0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0x5, 0x7, 0x3, 0x101}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x9, 0xc}, 0x5746340e, 0x5}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x4, 0x2, 0x2, 0xffffffff, 0x6, 0x5d2540, 0x0, 0x4, 0xa, 0x7, 0x2, 0x10000, 0x7, 0x0, 0x72a, 0x7ff, 0xffffff01, 0xffffffff, 0x80000001, 0xfffffffa, 0x3ff, 0x4, 0x8, 0x0, 0x2, 0x414, 0x600, 0x2, 0x56, 0x1, 0x7, 0x95, 0xffff, 0x3, 0x5, 0x7, 0x2, 0x435e88fc, 0x7f, 0x8000, 0xc, 0x7ff, 0xffffffff, 0xbf0, 0x3, 0x7, 0x0, 0xf, 0xe4, 0x4, 0x0, 0xd, 0x67be, 0x91, 0x1, 0x43, 0x10000, 0x7fff, 0x2, 0x3, 0xdcf4, 0x40, 0xfc8b, 0x80, 0x7fffffff, 0x2, 0x4, 0x4, 0x6, 0x5, 0xfff, 0x2e, 0x5, 0x0, 0xf4, 0x10, 0x5, 0x1, 0x3, 0x6, 0x6, 0x80000001, 0xd, 0x5, 0xe, 0x4, 0x7, 0x4, 0x716, 0x9, 0x2, 0x8, 0x4, 0x7f, 0x54, 0x5, 0x5, 0x3, 0x0, 0x9, 0x6, 0x46, 0xdb, 0x7, 0x9, 0x9a, 0x5, 0x2, 0xffffff00, 0x2, 0x45d0000, 0x4, 0x8, 0x6, 0x4, 0x4, 0x6, 0x1, 0x4, 0x7f, 0x2, 0x9bde, 0x8, 0x2, 0x7, 0x5, 0x8, 0x9, 0x8a, 0x4, 0x4, 0x82, 0x240, 0xd594, 0x8000, 0x1, 0xb9, 0xfffffff7, 0x4, 0xa2, 0x9, 0x49361ba7, 0x1, 0x4, 0x0, 0x1ff, 0x80000000, 0x5, 0x8, 0x3891, 0x5, 0x5, 0x81, 0x40, 0x964b, 0x0, 0xc, 0x40, 0x40, 0x200, 0x991, 0x0, 0xe, 0x10, 0x2, 0x3, 0x0, 0x9, 0x8, 0xa8, 0x83, 0x0, 0x1, 0x0, 0xfffff3a2, 0x10000, 0x5, 0xfffffffb, 0x400, 0x3, 0x400, 0x100, 0x7, 0x6, 0x80, 0x2fa, 0x4800, 0x4, 0xab9, 0xc4080b4, 0x8, 0x3, 0x7fff, 0x6, 0xc1, 0x2, 0x4, 0xf, 0x2, 0x8, 0x4, 0x7, 0x8, 0x6, 0x3, 0x5044a46c, 0x2, 0xc, 0x6, 0x401, 0xffff, 0x51c3, 0xf, 0x1, 0x2, 0x8, 0x7, 0x9, 0x7fff, 0x6, 0x862, 0x10, 0x6, 0x4, 0x9, 0x2, 0x5, 0x401, 0x9, 0x7, 0x9, 0x6, 0x5, 0xffffffff, 0x5, 0x8, 0x81, 0x601b, 0x4, 0x7, 0xfff, 0x5, 0x3, 0x3, 0x8, 0xc, 0xffffffff, 0x10001, 0x3, 0x8001, 0x3, 0x2, 0x0, 0x2, 0x2]}, @TCA_CBQ_RATE={0x10, 0x5, {0x2, 0x1, 0x5, 0x7, 0x2, 0x9}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x8, 0x7, 0x8, 0x0, 0x2, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x9, 0xfffffffc, 0xaace, 0x8, 0x1, 0x9, 0x1, 0x5fd06fa7, 0x7fffffff, 0xd, 0x5, 0x42, 0xe, 0x7, 0xf2a, 0x0, 0x0, 0xa, 0x4, 0x40, 0x6, 0x5, 0x4139, 0x8000, 0x3, 0x3, 0x6, 0x7, 0x0, 0x1f, 0xb, 0x0, 0x3, 0x80000000, 0x2, 0xfc, 0xb0a, 0x2, 0x4, 0x8, 0x87, 0x4, 0x3, 0xffffffee, 0x10001, 0x100, 0x7ff, 0x9, 0x70000, 0x2, 0x80000001, 0x70f, 0x2, 0x5, 0xb, 0x0, 0x6, 0x2, 0x6, 0x2, 0x2, 0x1, 0x0, 0x6, 0x2, 0x4, 0x5, 0x7, 0x3, 0x7a6d, 0x400, 0x1, 0x9, 0xe, 0x4, 0x7, 0x0, 0x10, 0x3d, 0x9, 0x3, 0x9, 0x40, 0x2, 0x2, 0xc, 0x0, 0x9, 0x9, 0x1ff, 0x8, 0xfffff583, 0x8, 0x40, 0x3ff, 0x2, 0x5, 0xc, 0x1000, 0x5, 0x6, 0xa, 0x6, 0x1, 0x0, 0x4, 0xc52, 0x1000, 0x2, 0x7, 0x5, 0x0, 0x6, 0x9, 0x1, 0x0, 0x9, 0x7, 0xecc7, 0xa906, 0x1, 0x0, 0x3, 0x80000001, 0xfffffffc, 0x7, 0x3, 0x80000000, 0x8, 0x0, 0x80, 0x7, 0x3, 0x8, 0x6, 0x6, 0xdaf0, 0x6e9c2af9, 0x6, 0x4, 0x6, 0x2, 0x2, 0x9, 0x2, 0x3, 0x9, 0xc15, 0x8000, 0x8, 0x5, 0x7, 0x4, 0x1, 0x1, 0x0, 0x6a, 0x63b, 0x0, 0xf0, 0x7ff, 0x80000000, 0x800, 0x1, 0x7, 0x6, 0x8, 0xc, 0x5, 0x3, 0x7cf, 0x5, 0x9, 0x1, 0xc2, 0x9, 0x6e, 0x6, 0x1, 0x7, 0x4, 0x101, 0x1, 0x0, 0x12, 0x7e68, 0x41, 0x9355, 0x9, 0x8d3, 0xffff6735, 0x6, 0x9, 0x2, 0x400, 0x3800000, 0x8, 0x44ba, 0xb, 0x7, 0x8, 0x1, 0xa, 0x40000000, 0x8, 0x9, 0xff, 0x5, 0x8, 0x6, 0x290, 0x6, 0x9, 0x8, 0x8, 0x2, 0x4, 0x6, 0x4800, 0x7fff, 0x0, 0x4, 0x7f, 0x200, 0x87, 0x1, 0x2, 0x4, 0xfffffffc, 0x320a, 0x3, 0x3, 0xf0, 0x6, 0x40, 0x7, 0x7fff, 0xe028, 0x0, 0x9, 0x5, 0x1000, 0x6aea, 0x7, 0x6, 0x2, 0x8000, 0x1, 0x6, 0x29ea, 0x3e, 0xed, 0x6, 0x4, 0xb]}]}}]}, 0x1bb8}, 0x1, 0x0, 0x0, 0x850}, 0xc0000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1.186242043s ago: executing program 2 (id=2394): socket$inet6(0x10, 0x3, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xca) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf}, 0x94) (async) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYBLOB="480000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="a11001000000000098701093449b81d424d748d71c253b6fd3405149b1240cae746b0e641ccefd321912f476b8b18595e551db103c39c0e6fc9e07c255b3cc8426838d49d36a3cb06b4d688d19ac17c953676e4deb374be2e1b616b1c51cd8926ea8e3caa1b1eebb9ad9"], 0x48}}, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000240)={0x1ff, 0x8, 0x8001, 0x5}, 0x10) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x83, 0x0, 0x0) (async) r13 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x36, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0xb0, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x12, r14, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4], 0x0, [0x8, 0x4, 0x0, 0x1], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x27ffffffffffffc}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x23fba}]}, 0xb0}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2008200}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="b57b26bd7000fedbdf251e0000000800010030923231070478835ef30d19c525599ffa62a0a82fba1dc49783550eccf47d358e24543cf88df1b27922137aa61c6c3646244149ae075a9915337f8221fb04ab7d856b503b38b403bb0dec175b17496ed7b88050725b6f0d", @ANYRES32=r4, @ANYBLOB="080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="080004000100000008000100", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x60044055) 874.437247ms ago: executing program 2 (id=2395): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1}}) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) splice(r1, &(0x7f0000000000)=0x1, r2, &(0x7f0000000100)=0x893, 0x1, 0xf) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000069000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x94) 873.895867ms ago: executing program 5 (id=2396): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0x1f8, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0xab, 0x14, {{'cmac(aes)\x00'}, 0x2f8, 0x0, "5b32bf570101702619aaae799d7f7518600304f247f65fd29038bab88df24c3e0067bb08dc0b822d30061d922b97303b4bec69182eb5908e3fb11bbf82b20ba5d600bf7f537003eaa8430728f2789fdb674cd9d846e6195e183c99d0e4f03e"}}, @algo_auth={0x59, 0x1, {{'cmac(aes)\x00'}, 0x88, "b6f3e543e3ff15c934decfda52def2c9f2"}}]}, 0x1f8}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e7eb6c7bfec843ee5be42bf74a0afa5ab2f2bbbe5626400a8ac765808dad4e23829e1ef29e2ceddf1de56d7fd8ab33b39f84bf38d", @ANYRES16=r1, @ANYBLOB="2000fefffffffddbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 873.516039ms ago: executing program 3 (id=2397): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) 638.479971ms ago: executing program 5 (id=2398): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x1, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, 0x8, 0xa, 0x3}}) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@migrate={0x134, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@sa={0xe4, 0x6, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x7f, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x3c, r1, 0xee01}, {@in6=@mcast2, 0x4d3, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {0x7, 0x7, 0xb, 0xbd6, 0x2, 0xe38, 0xff, 0x3}, {0x7, 0x3ff, 0x6, 0xf}, {0x0, 0x1, 0x2a}, 0x70bd2c, 0x3507, 0xa, 0x4, 0xf7, 0x8}}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 636.419159ms ago: executing program 2 (id=2399): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, r0, 0x0, 0x70bd25, 0x80}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4044414) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b00)=@can_delroute={0x2c, 0x19, 0x1, 0xfffffffe, 0x80000, {0x1d, 0x1, 0x7}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0x4, 0x2, 0xcc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2b}, @in6=@private2, {}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x31638d34}, 0x0, 0x4, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x4804) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001940)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000001ac0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0x90, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x8041}, 0x4001) r12 = socket$pptp(0x18, 0x1, 0x2) sendmmsg(r4, &(0x7f0000001880)=[{{&(0x7f00000000c0)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="f002cff7223e98da07f72c4adf7ded1bf18597c42890d097528fb8374003", 0x1e}, {&(0x7f0000000180)="ed8338bfb7487287e33a9e47423aea994a5fbbc556613d4b983a30e448104d4c2b3a1bd3d1b916a779f0bb9f3dc590a91d307d04052a71c6599aac", 0x3b}, {&(0x7f00000001c0)="979d15a657040bdca78d375da6a200a245f81b66701f0516c2ee168c2cca", 0x1e}, {&(0x7f0000000200)="33becefe58a34b447cbfa2ed92da7bee82f458edc211e668b734328282815d948f", 0x21}, {&(0x7f0000000240)="a0b9ea31a4d33a79e69efb37373620fe24b222d1b31243f5caa12bcfcc4dd160f33e0880", 0x24}, {&(0x7f0000000280)="02955cb7eebd1701383eea0f66f8952e63a6b8eca0e60488338cb8990a8f03abe4e211ce72ec66f92723b854290db8445a2de6715a686fe532ff791147bce81f86bac2ebbf26b505019f9d0b4b86a7867e01c9dc3177b8d2bdda07109530f72ae3aaa05c6170345d5ff827ac8537d520fb2001ae09903dfa28511db0769c5248bfad4e74c21c473918185354c7", 0x8d}], 0x3a}}, {{&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r12, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x2, 0x0, 0x4, 0x4}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000440)="f7d0283fe015d6ab758ac04d5d97d838ce50f157232744b4a071b5541cffa9068a1ae36c8e7149", 0x27}, {&(0x7f0000000480)="f7a63ecbab6bf1be40aa155f176bec91092c98b3e3b145a0b14b129b29e36c86a01265b85ac7d4b4c0cc643149bf0ee5b8d188ca4ac5388b4c7fa9e698d8a4289631e76d8228c4d3e83d2ca2718c5e038d62bf7f6b6da90832453f9546b59b471d8828434f630fd9b917c89ffa97377111cb61d500350fed3cec07d30a0b8a49ea9d4f692021ef504da72aae4719212e45f504c3577111a489a2d0e2bf8aba08848aaf949e1cca72506bd0056abfa57c941c52b030dbc35c37ebf5c72a21969f84d15d0919b9567fd5175b89441b2bb15fff06b7b8002490c00f84b4a7", 0xdd}, {&(0x7f0000001600)="5d6e21fd948100fef4f90b350cab0c8076b6e8e810fdb3cb70a177e8d4858c43f7096e78f7403f0d9acde88ecb00d89a2b590deb7379837ba336c931a1b423bd2052061653c6247cba8887e667ab66161cc77aa8feacd93292fa3835bf75ae495e1285952d804a6859efb82dded1d02f3a36bcb6dfba58c3ece453057a861d6398dc50af0a24105965fa3e7c7c5d92d2099f7ef130553987455e6c1b75d8bda62ffec7d3305e1d85bf7bc36b98cd6fccb0b2a4f84cd02c29df8fefcf82cbca8ee269d1e6b5700e38646d9c0d162ee9d3d1e4c35ecfce67c9a5422d3463c966ae2b6a8f", 0xe3}, {&(0x7f0000001700)="972c091d6398726dcc45b861bcdc1232bf221ba46520c6dcc66055c0ce71e3f87ba1e245b79b8cb1f33da35e4914402e5013737171b329d920a2aeb74e", 0x3d}, {&(0x7f0000001740)="f7b8d1b18a293968a2ddc9efe19b74f5dd2058999378050c980e41e4401fcc29a9b64f81ff427dd0a89224b34c593e4a964cbb9a9e5d91dd3526647a5e52e1cdfdcb", 0x42}, {&(0x7f00000017c0)="7de95fe6639e7a122f9bb79b2dd5e8610174eaafc7d679026721d179996e01436b71", 0x22}], 0x7}}], 0x2, 0x4008901) 543.431937ms ago: executing program 3 (id=2400): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "e8ffff0700", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b16000000e8fe55a11800150006001400030000120800040043000000a80016000a0001400d000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) syz_emit_ethernet(0xd1, &(0x7f0000000800)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x9b, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @remote, [{0x1f, 0xd, "a6f84b52c1d11f4bf6376d14771d019cd074c3bdc85aa7fb52f7b1676a55a94617ffad4ccc481a6aefe1c4f4e212e801fb0d3e463bcf6bc18232f00b42ba4efaeff3b601cc182ef13cbf6aecbf71716e19d8bb458bb554daa92eef8807e4719943dffdea9716946c246f"}, {0x5, 0x3, "4a97c14742461b5fc0567333667946f9f71730b9937d5e"}, {0x2}]}}}}}}, 0x0) 499.578592ms ago: executing program 5 (id=2401): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x48}}, 0x0) 218.25704ms ago: executing program 4 (id=2402): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002740)=""/4075, 0xfeb}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/96, 0x60}, {&(0x7f0000001740)=""/4090, 0xffa}, {&(0x7f0000003740)=""/4089, 0xff9}, {&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000280)=""/123, 0x7b}], 0x5}, 0x8000}], 0x3, 0x40002122, 0x0) 19.01169ms ago: executing program 2 (id=2403): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x40) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="80010000100013070000000000000000fe880000000000000000000000000001fe8000000000000000000000000000414e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d4330000002001000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000a00000000000000000000008d001400736861310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000802000000000000b01fb673e402897de53f8607befd59c34031658fd87baff04f012138bf51e42dd27d5a7ba6d81a61fa481731c1a993da6cf3ec79d3767409b63af2c8cc54637c3d7545c6b42a31f9b7ef21000000"], 0x180}}, 0x1000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x29c0afbc01f4ae7}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)={0xc4, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4085}, 0x20008050) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000000)) 0s ago: executing program 4 (id=2404): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f", 0x5c}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000100000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) kernel console output (not intermixed with test programs): dit(1759102629.180:2): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.119" name="/newroot/26/cgroup.controllers" dev="tmpfs" ino=149 res=1 errno=0 [ 107.425029][ T6392] netlink: 'syz.4.121': attribute type 7 has an invalid length. [ 107.464426][ T30] audit: type=1800 audit(1759102629.180:3): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.119" name="cgroup.controllers" dev="tmpfs" ino=149 res=0 errno=0 [ 107.533528][ T6399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.123'. [ 107.555282][ T6392] : entered promiscuous mode [ 107.633914][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 107.663334][ T6407] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.963211][ T5878] Bluetooth: hci4: command 0x0405 tx timeout [ 109.356864][ T6451] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 109.367955][ T6451] nbd: couldn't find device at index 1048576 [ 109.430394][ T6452] lo speed is unknown, defaulting to 1000 [ 109.508998][ T6452] lo speed is unknown, defaulting to 1000 [ 109.530902][ T6452] lo speed is unknown, defaulting to 1000 [ 109.571799][ T6452] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.621875][ T6452] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.700445][ T6452] lo speed is unknown, defaulting to 1000 [ 109.732160][ T6452] lo speed is unknown, defaulting to 1000 [ 109.740246][ T6452] lo speed is unknown, defaulting to 1000 [ 109.752275][ T6452] lo speed is unknown, defaulting to 1000 [ 109.760341][ T6452] lo speed is unknown, defaulting to 1000 [ 109.945943][ T6471] nbd0: detected capacity change from 0 to 63 [ 109.957461][ T51] block nbd0: Receive control failed (result -32) [ 109.980439][ T6265] block nbd0: Dead connection, failed to find a fallback [ 110.024986][ T6265] block nbd0: shutting down sockets [ 110.048953][ T6265] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.091392][ T6265] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.114236][ T6265] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.128277][ T6265] Buffer I/O error on dev nbd0, logical block 1, async page read [ 110.140101][ T6265] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.158443][ T6485] netlink: 'syz.1.147': attribute type 8 has an invalid length. [ 110.168993][ T6265] Buffer I/O error on dev nbd0, logical block 2, async page read [ 110.184897][ T6265] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.199688][ T6265] Buffer I/O error on dev nbd0, logical block 3, async page read [ 110.234870][ T6265] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.270955][ T6265] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.306783][ T6265] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.327934][ T6265] Buffer I/O error on dev nbd0, logical block 1, async page read [ 110.350192][ T6265] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.369558][ T6265] Buffer I/O error on dev nbd0, logical block 2, async page read [ 110.386559][ T6265] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.409102][ T6265] Buffer I/O error on dev nbd0, logical block 3, async page read [ 110.423280][ T6265] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.433419][ T6265] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.455250][ T6265] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.498745][ T6265] Buffer I/O error on dev nbd0, logical block 1, async page read [ 110.516629][ T6265] ldm_validate_partition_table(): Disk read failed. [ 110.527336][ T6265] Dev nbd0: unable to read RDB block 0 [ 110.555643][ T6265] nbd0: unable to read partition table [ 110.600788][ T6265] ldm_validate_partition_table(): Disk read failed. [ 110.647665][ T6265] Dev nbd0: unable to read RDB block 0 [ 110.680973][ T6265] nbd0: unable to read partition table [ 110.923411][ T6506] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 110.946986][ T6507] __nla_validate_parse: 9 callbacks suppressed [ 110.947005][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 110.996993][ T6507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.153'. [ 111.034014][ T6507] geneve2: entered promiscuous mode [ 111.056736][ T6507] geneve2: entered allmulticast mode [ 111.108719][ T6515] netlink: 52 bytes leftover after parsing attributes in process `syz.3.156'. [ 111.118761][ T24] IPVS: starting estimator thread 0... [ 111.145889][ T6515] team0: No ports can be present during mode change [ 111.163716][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 111.222139][ T6517] IPVS: using max 27 ests per chain, 64800 per kthread [ 111.338900][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 111.565660][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 112.044217][ T6560] netlink: 232 bytes leftover after parsing attributes in process `syz.2.169'. [ 112.250869][ T6574] netlink: 188 bytes leftover after parsing attributes in process `syz.1.172'. [ 112.314546][ T6573] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 112.707156][ T6606] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 112.748861][ T6606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.182'. [ 112.814122][ T6610] netlink: 'syz.3.184': attribute type 15 has an invalid length. [ 112.849842][ T6611] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 112.864205][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 112.943655][ T6616] netlink: 'syz.0.187': attribute type 7 has an invalid length. [ 112.944803][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 113.024474][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 113.041273][ T6628] netlink: 'syz.0.187': attribute type 7 has an invalid length. [ 113.059208][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 113.080691][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 113.423466][ T6647] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 113.497483][ T6649] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 113.594327][ T6649] netlink: 'syz.3.192': attribute type 33 has an invalid length. [ 113.837593][ T6662] ip6erspan0: entered promiscuous mode [ 113.843328][ T6662] ip6erspan0: entered allmulticast mode [ 114.043090][ T6672] warning: `syz.4.202' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.135432][ T6679] bond1: entered promiscuous mode [ 114.140693][ T6679] bond1: entered allmulticast mode [ 114.162914][ T6679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.234319][ T6683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.897075][ T6703] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 115.595677][ T6742] netlink: 'syz.4.227': attribute type 17 has an invalid length. [ 115.837774][ T6763] netlink: 'syz.2.230': attribute type 21 has an invalid length. [ 116.257436][ T6752] netlink: 'syz.1.226': attribute type 11 has an invalid length. [ 116.266036][ T6752] netlink: 'syz.1.226': attribute type 11 has an invalid length. [ 116.302792][ T6752] __nla_validate_parse: 11 callbacks suppressed [ 116.302814][ T6752] netlink: 224 bytes leftover after parsing attributes in process `syz.1.226'. [ 116.353402][ T6765] netlink: 'syz.3.232': attribute type 10 has an invalid length. [ 116.396176][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.468500][ T6765] bridge_slave_1: left allmulticast mode [ 116.493707][ T6765] bridge_slave_1: left promiscuous mode [ 116.499590][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.569518][ T6765] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 116.872940][ T6783] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 116.892429][ T6783] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 116.919184][ T6789] netlink: 52 bytes leftover after parsing attributes in process `syz.3.238'. [ 117.342968][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 117.600379][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 117.641587][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 117.675556][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 117.736489][ T6795] infiniband syz0: set down [ 117.741307][ T6795] infiniband syz0: added ipvlan1 [ 117.807915][ T6795] RDS/IB: syz0: added [ 117.814711][ T6795] smc: adding ib device syz0 with port count 1 [ 117.821293][ T6795] smc: ib device syz0 port 1 has pnetid [ 118.209345][ T6844] bridge2: entered promiscuous mode [ 118.217555][ T6844] bridge2: entered allmulticast mode [ 118.237713][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 118.409770][ T6850] netlink: 'syz.2.253': attribute type 13 has an invalid length. [ 118.687055][ T6866] !: renamed from dummy0 (while UP) [ 119.052898][ T6875] bond0: entered allmulticast mode [ 119.058100][ T6875] bond_slave_0: entered allmulticast mode [ 119.064114][ T6875] bond_slave_1: entered allmulticast mode [ 119.209737][ T6882] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 119.257506][ T6882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.267'. [ 119.268220][ T6884] netlink: 48 bytes leftover after parsing attributes in process `syz.2.266'. [ 119.324315][ T6884] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.266'. [ 119.556658][ T6890] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 119.587298][ T6890] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 119.685427][ T6896] netlink: 'syz.0.272': attribute type 21 has an invalid length. [ 120.036493][ T6910] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 121.353818][ T6924] erspan0: entered allmulticast mode [ 121.555097][ T6931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.580316][ T6931] __nla_validate_parse: 5 callbacks suppressed [ 121.580336][ T6931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.283'. [ 122.008630][ T6954] netlink: 60 bytes leftover after parsing attributes in process `syz.2.289'. [ 122.052368][ T6956] netlink: 224 bytes leftover after parsing attributes in process `syz.2.289'. [ 122.563417][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 122.670466][ T6983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.300'. [ 123.050002][ T6998] syzkaller1: entered promiscuous mode [ 123.072510][ T6998] syzkaller1: entered allmulticast mode [ 123.150355][ T7006] IPv6: sit1: Disabled Multicast RS [ 123.182885][ T7006] sit1: entered allmulticast mode [ 123.305213][ T7013] IPVS: set_ctl: invalid protocol: 103 172.20.20.39:20000 [ 138.006110][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.012914][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.819822][ T7043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.137257][ T7070] netlink: 156 bytes leftover after parsing attributes in process `syz.2.320'. [ 146.311058][ T7077] netlink: 36 bytes leftover after parsing attributes in process `syz.4.322'. [ 146.415538][ T7085] netlink: 'syz.1.324': attribute type 1 has an invalid length. [ 146.467727][ T7085] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 146.669960][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.327'. [ 146.696971][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.327'. [ 146.773064][ T7101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.329'. [ 146.814122][ T7102] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 146.886888][ T7102] bond2: entered promiscuous mode [ 146.894847][ T7102] bond2: entered allmulticast mode [ 146.900539][ T7102] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.911376][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 147.080028][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 147.141177][ T7120] openvswitch: netlink: Message has 2 unknown bytes. [ 147.160657][ T7120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.160804][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 147.373637][ T7125] pim6reg: entered allmulticast mode [ 147.396940][ T7126] pim6reg: left allmulticast mode [ 147.591890][ T7140] netlink: 27 bytes leftover after parsing attributes in process `syz.3.339'. [ 147.722300][ T7144] netlink: 48 bytes leftover after parsing attributes in process `syz.3.339'. [ 147.950129][ T7144] veth3: entered promiscuous mode [ 148.887001][ T7197] bridge_slave_1: left allmulticast mode [ 148.903564][ T7197] bridge_slave_1: left promiscuous mode [ 148.938741][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.990231][ T7197] bridge_slave_0: left allmulticast mode [ 149.012956][ T7197] bridge_slave_0: left promiscuous mode [ 149.029027][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.297721][ T7216] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 149.315653][ T7216] netlink: 'syz.0.360': attribute type 3 has an invalid length. [ 149.353507][ T7216] NCSI netlink: No device for ifindex 131080 [ 149.566962][ T7229] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 149.600877][ T7226] syzkaller0: entered allmulticast mode [ 149.798045][ T7241] netlink: 'syz.3.367': attribute type 8 has an invalid length. [ 150.332138][ T7263] sctp: [Deprecated]: syz.2.373 (pid 7263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.332138][ T7263] Use struct sctp_sack_info instead [ 150.646671][ T7280] 8021q: VLANs not supported on lo [ 151.411598][ T7312] syzkaller1: entered promiscuous mode [ 151.431840][ T7312] syzkaller1: entered allmulticast mode [ 151.675962][ T7320] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 151.691959][ T7323] __nla_validate_parse: 16 callbacks suppressed [ 151.691981][ T7323] netlink: 9 bytes leftover after parsing attributes in process `syz.4.390'. [ 151.699641][ T7320] netlink: 'syz.2.392': attribute type 4 has an invalid length. [ 151.716635][ T7320] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.392'. [ 151.785378][ T7334] netlink: 5 bytes leftover after parsing attributes in process `syz.4.390'. [ 151.794754][ T7334] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 151.835851][ T7334] 0ªî{X¹¦: entered allmulticast mode [ 151.847731][ T7334] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 151.873354][ T7331] netlink: 156 bytes leftover after parsing attributes in process `syz.3.389'. [ 151.902467][ T7323] 0ªî{X¹¦: entered promiscuous mode [ 151.913225][ T7323] 0ªî{X¹¦: left allmulticast mode [ 152.313933][ T7353] bond0: entered promiscuous mode [ 152.321126][ T7353] bond_slave_0: entered promiscuous mode [ 152.352864][ T7353] bond_slave_1: entered promiscuous mode [ 153.002958][ T7386] netlink: 'syz.0.405': attribute type 1 has an invalid length. [ 153.158899][ T7386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.186412][ T7378] bond0: left promiscuous mode [ 153.191357][ T7378] bond_slave_0: left promiscuous mode [ 153.242963][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 153.254618][ T7378] bond_slave_1: left promiscuous mode [ 153.309124][ T7378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.747405][ T7406] team0 (unregistering): Port device team_slave_0 removed [ 153.760522][ T7406] team0 (unregistering): Port device team_slave_1 removed [ 154.003873][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'. [ 154.040433][ T7434] netlink: 'syz.0.417': attribute type 2 has an invalid length. [ 154.706683][ T7452] delete_channel: no stack [ 154.992630][ T7457] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x5 [ 155.870879][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 155.964720][ T7462] netlink: 'syz.0.428': attribute type 21 has an invalid length. [ 155.976848][ T7462] netlink: 156 bytes leftover after parsing attributes in process `syz.0.428'. [ 156.160119][ T7469] netlink: 'syz.0.431': attribute type 12 has an invalid length. [ 156.183490][ T7470] netlink: 56 bytes leftover after parsing attributes in process `syz.2.432'. [ 156.197961][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 156.203697][ T7470] (unnamed net_device) (uninitialized): (slave ip6_vti0): Device is not bonding slave [ 156.230831][ T7470] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6_vti0) [ 156.736383][ T7496] __nla_validate_parse: 3 callbacks suppressed [ 156.736404][ T7496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.441'. [ 156.753881][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.439'. [ 156.801481][ T7496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.441'. [ 156.925172][ T7507] netlink: 'syz.1.442': attribute type 1 has an invalid length. [ 156.950000][ T7507] netlink: 172 bytes leftover after parsing attributes in process `syz.1.442'. [ 156.960005][ T7507] netlink: 'syz.1.442': attribute type 1 has an invalid length. [ 157.174556][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.445'. [ 157.363546][ T7521] netlink: 'syz.3.448': attribute type 5 has an invalid length. [ 157.576793][ T7531] netlink: 'syz.3.452': attribute type 11 has an invalid length. [ 157.586284][ T7527] veth5: entered allmulticast mode [ 157.586850][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 157.605848][ T7531] netlink: 224 bytes leftover after parsing attributes in process `syz.3.452'. [ 157.616377][ T7535] sctp: [Deprecated]: syz.4.453 (pid 7535) Use of int in maxseg socket option. [ 157.616377][ T7535] Use struct sctp_assoc_value instead [ 157.740666][ T7534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.454'. [ 157.954263][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 157.991359][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 158.031589][ T7551] netlink: 'syz.3.456': attribute type 15 has an invalid length. [ 158.033527][ T7548] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 158.198662][ T7561] netlink: zone id is out of range [ 158.213601][ T7561] netlink: zone id is out of range [ 158.219738][ T7561] netlink: zone id is out of range [ 158.232414][ T7561] netlink: zone id is out of range [ 158.248832][ T7561] netlink: zone id is out of range [ 158.284674][ T7563] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 158.312117][ T7561] netlink: zone id is out of range [ 158.318047][ T7561] netlink: zone id is out of range [ 158.350654][ T7561] netlink: zone id is out of range [ 158.361599][ T7561] netlink: zone id is out of range [ 158.367757][ T7561] netlink: zone id is out of range [ 158.747579][ T7583] tipc: Started in network mode [ 158.762216][ T7583] tipc: Node identity 080211, cluster identity 4711 [ 158.793507][ T7583] tipc: Enabled bearer , priority 0 [ 158.906741][ T7583] lo speed is unknown, defaulting to 1000 [ 159.170393][ T7600] ip6erspan1: entered promiscuous mode [ 159.183269][ T7600] ip6erspan1: entered allmulticast mode [ 159.756020][ T7630] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 159.847208][ T7633] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 159.912299][ T24] tipc: Node number set to 134353152 [ 159.967648][ T7633] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.070753][ T7644] netlink: 'syz.4.487': attribute type 10 has an invalid length. [ 160.103850][ T51] block nbd1: Receive control failed (result -32) [ 160.799261][ T7667] bridge_slave_0: left allmulticast mode [ 160.845822][ T7667] bridge_slave_0: left promiscuous mode [ 160.876631][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.928698][ T7667] bond0: (slave bridge_slave_1): Releasing backup interface [ 160.947938][ T7667] bond0: (slave bond_slave_0): Releasing backup interface [ 160.964992][ T7667] bond0: (slave bond_slave_1): Releasing backup interface [ 160.988466][ T7667] team0: Port device team_slave_0 removed [ 161.005056][ T7667] team0: Port device team_slave_1 removed [ 161.012817][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.020473][ T7667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.045453][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.063125][ T7667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.929138][ T7705] tc_dump_action: action bad kind [ 161.941250][ T7698] lo speed is unknown, defaulting to 1000 [ 162.181504][ T7715] __nla_validate_parse: 9 callbacks suppressed [ 162.181526][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 162.734106][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'. [ 162.831036][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'. [ 162.949970][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 163.937306][ T7772] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.025589][ T7786] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 164.034080][ T7786] netlink: 212 bytes leftover after parsing attributes in process `syz.3.530'. [ 164.045141][ T7786] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 164.055295][ T7788] netlink: 9 bytes leftover after parsing attributes in process `syz.2.529'. [ 164.065105][ T7778] net_ratelimit: 24 callbacks suppressed [ 164.065125][ T7778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.122251][ T7772] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.148151][ T7784] netlink: 'syz.2.529': attribute type 2 has an invalid length. [ 164.156839][ T7784] netlink: 244 bytes leftover after parsing attributes in process `syz.2.529'. [ 164.167596][ T7788] gretap0: entered promiscuous mode [ 164.183740][ T24] lo speed is unknown, defaulting to 1000 [ 164.207838][ T7772] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.223918][ T7788] netlink: 5 bytes leftover after parsing attributes in process `syz.2.529'. [ 164.276087][ T7788] 0ªî{X¹¦: renamed from gretap0 [ 164.330566][ T7788] 0ªî{X¹¦: left promiscuous mode [ 164.336033][ T7788] 0ªî{X¹¦: entered allmulticast mode [ 164.344265][ T7788] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 164.468442][ T7772] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.715165][ T7808] netlink: 256 bytes leftover after parsing attributes in process `syz.3.535'. [ 164.752273][ T1096] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.797158][ T1096] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.807276][ T7813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.537'. [ 164.923955][ T3503] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.011757][ T1096] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.159030][ T7828] netlink: 'syz.1.542': attribute type 10 has an invalid length. [ 165.187894][ T7828] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 165.473481][ T7839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.720814][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.838432][ T7860] netlink: 'syz.0.553': attribute type 5 has an invalid length. [ 165.850485][ T7863] netlink: 'syz.3.554': attribute type 8 has an invalid length. [ 166.193830][ T7874] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 166.207077][ T7874] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 166.255304][ T7868] macvlan0: entered promiscuous mode [ 166.260796][ T7868] macvlan0: entered allmulticast mode [ 166.267715][ T7868] bond5: (slave macvlan0): Error -98 calling set_mac_address [ 166.286568][ T7879] netlink: 'syz.2.559': attribute type 1 has an invalid length. [ 166.306980][ T7879] netlink: 'syz.2.559': attribute type 3 has an invalid length. [ 167.136786][ T7908] delete_channel: no stack [ 167.141615][ T7908] delete_channel: no stack [ 167.297572][ T7914] team0 (unregistering): Port device team_slave_0 removed [ 167.345113][ T7914] team0 (unregistering): Port device team_slave_1 removed [ 167.429491][ T7918] netlink: 'syz.1.571': attribute type 29 has an invalid length. [ 167.447353][ T7918] netlink: 'syz.1.571': attribute type 29 has an invalid length. [ 167.731487][ T7931] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.776389][ T7940] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.829920][ T7937] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 167.876869][ T7937] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 168.030650][ T7930] gretap0: entered promiscuous mode [ 168.312508][ T7962] __nla_validate_parse: 12 callbacks suppressed [ 168.312532][ T7962] netlink: 132 bytes leftover after parsing attributes in process `syz.2.581'. [ 168.486818][ T7982] Bluetooth: MGMT ver 1.23 [ 168.501472][ T7965] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.511020][ T7965] bond2: (slave bond3): making interface the new active one [ 168.534873][ T7965] bond2: (slave bond3): Enslaving as an active interface with an up link [ 168.595977][ T7970] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 168.965367][ T7998] sctp: [Deprecated]: syz.3.590 (pid 7998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.965367][ T7998] Use struct sctp_sack_info instead [ 169.435658][ T8024] validate_nla: 4 callbacks suppressed [ 169.435681][ T8024] netlink: 'syz.0.595': attribute type 21 has an invalid length. [ 169.474859][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 170.153604][ T8012] ip6erspan0: entered promiscuous mode [ 170.159854][ T8012] ip6erspan0: entered allmulticast mode [ 170.178945][ T5532] veth0_vlan: left promiscuous mode [ 170.196952][ T5532] veth0_vlan: entered promiscuous mode [ 170.222408][ T8017] netlink: 'syz.3.596': attribute type 1 has an invalid length. [ 170.261824][ T8017] netlink: 'syz.3.596': attribute type 1 has an invalid length. [ 170.269858][ T8024] netlink: 'syz.0.595': attribute type 21 has an invalid length. [ 170.286933][ T153] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.302564][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 170.318302][ T153] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.361171][ T153] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.412433][ T153] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.569049][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 170.576837][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 170.966666][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.608'. [ 170.997541][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 171.017284][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.608'. [ 171.023609][ T8062] netlink: 88 bytes leftover after parsing attributes in process `syz.1.607'. [ 171.122436][ T8062] netem: invalid attributes len -24 [ 171.148304][ T8062] netem: change failed [ 171.541540][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 171.553066][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 171.776222][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 172.343685][ T8102] netlink: 'syz.4.617': attribute type 10 has an invalid length. [ 172.391319][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.457218][ T8102] bridge_slave_1: left allmulticast mode [ 172.504133][ T8102] bridge_slave_1: left promiscuous mode [ 172.571346][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.622748][ T8121] netlink: 'syz.1.619': attribute type 10 has an invalid length. [ 172.696862][ T8102] bridge_slave_1: entered allmulticast mode [ 172.759075][ T8102] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 172.789601][ T8116] : entered promiscuous mode [ 172.810141][ T8121] dummy0: entered promiscuous mode [ 172.839041][ T8121] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 172.866622][ T8102] syzkaller0: entered promiscuous mode [ 172.897190][ T8102] syzkaller0: entered allmulticast mode [ 173.676115][ T8170] __nla_validate_parse: 2 callbacks suppressed [ 173.676135][ T8170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.632'. [ 173.707584][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.632'. [ 174.655153][ T8217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.643'. [ 174.898838][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 174.986790][ T8238] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.650'. [ 175.087121][ T8241] netlink: 244 bytes leftover after parsing attributes in process `syz.3.651'. [ 175.130013][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 175.245663][ T8245] netlink: 'syz.3.652': attribute type 8 has an invalid length. [ 175.367664][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 175.911279][ T8258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.549252][ T8238] ªªªªªª: renamed from wg2 (while UP) [ 176.590617][ T8247] veth0_macvtap: left promiscuous mode [ 177.140959][ T8280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.216331][ T8284] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.662'. [ 177.514054][ T8294] netlink: 68 bytes leftover after parsing attributes in process `syz.4.667'. [ 178.247188][ T8334] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 178.253070][ T30] audit: type=1107 audit(1759102700.040:4): pid=8332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='æ÷£žäµòÿ‹w†]W,s¡ø×«—a~•ú·¨<óªêb®úš,/8–y¢µÖ…á/å#v!ÁôÌŽ{ Lc¼HîÁA¿ü-GߥrFHñ´ºÚA£/%~Šé:ñÆ`¸] [ 178.253070][ T30] ~F˜»ì€äÒ{ ÃJžÌËMN€Wƒ|bbÒÛ¼\ö$}ò ‚{§€ê[–é1@AaŸ…ŽJ±mÑ»fR:Ä’I=Û¼°ü2?P ïÐ=&o2Üq_LÈÝíñ‡ÎˆyfÓ^ù†I:ªc`)ÉLon¤~F¦´]R Þ ³¾î u2WžLqZ- dò B½_{ò8õ´±N¡š›pþtDÿþ„tØkRÒÝžiœCv‰Ò­4,‰­%H3GÍ7íþæïmxMjYG‘ãÊVèmGE™>6¶qÉbµýÜw÷ÓPùÎw»B²ÖúáL3‚é+¹/åÊ 6œËÝõ¥5ÃìWl1[—ÚÈlÁ7ºùõáÊM¶N¦hÝ{‹Q„gb´ùüb-ž!ý Œ7‚ÚHtPp}Ÿn|}Ši%ûžò’è%–íTÝ}mpc£š†Æ›%‡$A”tœµÎ#\"ë‚, [ 178.253070][ T30] *Áº5ä!O{¾êkæ­¦' [ 178.256237][ T8334] netlink: 'syz.2.680': attribute type 4 has an invalid length. [ 178.753905][ T8352] __nla_validate_parse: 4 callbacks suppressed [ 178.753929][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.683'. [ 178.843760][ T8357] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 179.077570][ T8370] veth0: entered promiscuous mode [ 179.091303][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 179.283575][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'. [ 179.321525][ T8374] netlink: 'syz.3.691': attribute type 1 has an invalid length. [ 179.330156][ T8374] netlink: 224 bytes leftover after parsing attributes in process `syz.3.691'. [ 179.346326][ T8374] netlink: 'syz.3.691': attribute type 1 has an invalid length. [ 179.728814][ T8393] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 179.824565][ T8397] bond2: (slave bridge5): making interface the new active one [ 179.834794][ T8397] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 180.003107][ T8397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.450171][ T8424] netlink: 'syz.3.705': attribute type 1 has an invalid length. [ 180.461171][ T8425] netlink: 'syz.3.705': attribute type 1 has an invalid length. [ 180.515468][ T8425] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.755204][ T8441] netlink: 'syz.4.706': attribute type 1 has an invalid length. [ 180.786466][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 180.813097][ T8441] netlink: 40 bytes leftover after parsing attributes in process `syz.4.706'. [ 180.984390][ T8449] netlink: 100 bytes leftover after parsing attributes in process `syz.2.708'. [ 181.010457][ T8451] Unsupported ieee802154 address type: 0 [ 181.763840][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.715'. [ 182.279135][ T8485] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.376524][ T8492] ip6erspan0: entered allmulticast mode [ 182.537331][ T8485] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.709310][ T8484] delete_channel: no stack [ 182.727053][ T8485] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.889316][ T8485] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.110393][ T1156] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.165189][ T1156] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.272503][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.280891][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.746408][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 183.757571][ T8551] netlink: 'syz.4.730': attribute type 15 has an invalid length. [ 183.771231][ T8551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.730'. [ 184.029745][ T8563] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 184.540324][ T8582] syzkaller1: entered promiscuous mode [ 184.564049][ T8582] syzkaller1: entered allmulticast mode [ 184.665138][ T8588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.741'. [ 184.823123][ T8594] netlink: 52 bytes leftover after parsing attributes in process `syz.3.743'. [ 185.046895][ T8603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 185.096636][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.746'. [ 185.368406][ T8617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.749'. [ 185.449119][ T8622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.749'. [ 185.845791][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 185.863941][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.755'. [ 186.083971][ T8650] netlink: 'syz.0.756': attribute type 1 has an invalid length. [ 186.392768][ T8666] syzkaller1: entered promiscuous mode [ 186.429484][ T8666] syzkaller1: entered allmulticast mode [ 186.512530][ T8663] lo speed is unknown, defaulting to 1000 [ 186.718426][ T8681] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.762'. [ 188.015228][ T8729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.771'. [ 188.054475][ T8731] ipvlan0: entered promiscuous mode [ 188.474638][ T8744] syz_tun: entered allmulticast mode [ 188.564492][ T8744] lo speed is unknown, defaulting to 1000 [ 188.796775][ T8752] netlink: 36 bytes leftover after parsing attributes in process `syz.0.777'. [ 188.858387][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 188.994869][ T8756] netlink: 'syz.3.778': attribute type 2 has an invalid length. [ 189.309461][ T8742] syz_tun: left allmulticast mode [ 189.409838][ T8767] tipc: Started in network mode [ 189.416325][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.427184][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.431223][ T8767] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 189.447020][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.453752][ T8767] tipc: Enabled bearer , priority 10 [ 189.487613][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.499220][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.848177][ T8789] netlink: 204 bytes leftover after parsing attributes in process `syz.2.786'. [ 189.973954][ T8789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.115205][ T8789] bond0: (slave rose0): Error: Slave does not support XDP [ 190.196486][ T8771] lo speed is unknown, defaulting to 1000 [ 190.443182][ T8812] tipc: Enabled bearer , priority 0 [ 190.472448][ T8812] syzkaller0: entered promiscuous mode [ 190.487099][ T8812] syzkaller0: entered allmulticast mode [ 190.567717][ T8812] tipc: Resetting bearer [ 190.585540][ T5869] tipc: Node number set to 4269801492 [ 190.606292][ T8811] tipc: Resetting bearer [ 190.671480][ T8811] tipc: Disabling bearer [ 190.679956][ T8821] netlink: 64 bytes leftover after parsing attributes in process `syz.2.792'. [ 191.283296][ T8843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.798'. [ 191.522647][ T8855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.800'. [ 191.605590][ T5878] Bluetooth: hci5: command tx timeout [ 191.724861][ T8861] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.732510][ T8861] IPv6: NLM_F_CREATE should be set when creating new route [ 192.086927][ T8875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.199332][ T8880] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 192.224120][ T8880] netlink: 184 bytes leftover after parsing attributes in process `syz.0.804'. [ 192.247668][ T8880] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 192.294118][ T8878] netlink: 'syz.0.804': attribute type 62 has an invalid length. [ 192.737942][ T8771] chnl_net:caif_netlink_parms(): no params data found [ 193.020886][ T8913] netlink: 'syz.4.810': attribute type 1 has an invalid length. [ 193.220384][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.239282][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.253160][ T8771] bridge_slave_0: entered allmulticast mode [ 193.276909][ T8771] bridge_slave_0: entered promiscuous mode [ 193.303166][ T8932] netlink: 104 bytes leftover after parsing attributes in process `syz.3.815'. [ 193.319063][ T8771] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.338784][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.356159][ T8771] bridge_slave_1: entered allmulticast mode [ 193.367775][ T8771] bridge_slave_1: entered promiscuous mode [ 193.436664][ T8939] netlink: 360 bytes leftover after parsing attributes in process `syz.4.816'. [ 193.486004][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 193.600934][ T8771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.636663][ T8771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.683222][ T5878] Bluetooth: hci5: command tx timeout [ 194.015127][ T8771] team0: Port device team_slave_0 added [ 194.029872][ T8771] team0: Port device team_slave_1 added [ 194.072558][ T8952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.821'. [ 194.203034][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.269323][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.412466][ T8972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'. [ 194.454777][ T8771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.542005][ T8952] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 194.612496][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.619611][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.797505][ T8771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.477373][ T8972] hsr_slave_0 (unregistering): left promiscuous mode [ 195.499977][ T9008] netlink: 2 bytes leftover after parsing attributes in process `syz.0.824'. [ 195.516480][ T9008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.824'. [ 195.594797][ T8771] hsr_slave_0: entered promiscuous mode [ 195.624118][ T8771] hsr_slave_1: entered promiscuous mode [ 195.679187][ T8771] debugfs: 'hsr0' already exists in 'hsr' [ 195.708754][ T8771] Cannot create hsr debugfs directory [ 195.763250][ T5878] Bluetooth: hci5: command tx timeout [ 195.907617][ T9010] netlink: 'syz.2.827': attribute type 10 has an invalid length. [ 196.037307][ T9010] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 196.373394][ T9039] netlink: 'syz.3.833': attribute type 1 has an invalid length. [ 196.395834][ T9039] netlink: 220 bytes leftover after parsing attributes in process `syz.3.833'. [ 196.433132][ T9034] netlink: 96 bytes leftover after parsing attributes in process `syz.3.833'. [ 196.520761][ T9044] netlink: 72 bytes leftover after parsing attributes in process `syz.2.836'. [ 196.550067][ T9034] 8021q: VLANs not supported on ip6_vti0 [ 196.558479][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 196.622886][ T9046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.835'. [ 196.809464][ T9051] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 197.137378][ T8771] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.205719][ T8771] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 197.329138][ T8771] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 197.429808][ T8771] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 197.849053][ T5878] Bluetooth: hci5: command tx timeout [ 197.900731][ T8771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.925925][ T8771] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.967768][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.975184][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.006036][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.013268][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.024933][ T9111] netlink: 'syz.3.846': attribute type 9 has an invalid length. [ 198.076742][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 198.105150][ T9111] netlink: 'syz.3.846': attribute type 14 has an invalid length. [ 198.127176][ T9111] netlink: 'syz.3.846': attribute type 13 has an invalid length. [ 198.940237][ T8771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.214755][ T9156] __nla_validate_parse: 2 callbacks suppressed [ 199.214776][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.857'. [ 199.448992][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.459032][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.656381][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.860'. [ 199.746916][ T9173] netlink: 7 bytes leftover after parsing attributes in process `syz.4.860'. [ 199.809390][ T9173] : renamed from bridge_slave_0 (while UP) [ 200.019780][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 200.117193][ T8771] veth0_vlan: entered promiscuous mode [ 200.215203][ T8771] veth1_vlan: entered promiscuous mode [ 200.295628][ T9200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.361876][ T9206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.868'. [ 200.483637][ T8771] veth0_macvtap: entered promiscuous mode [ 200.528355][ T8771] veth1_macvtap: entered promiscuous mode [ 200.641623][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.695221][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.716363][ T9219] netlink: 72 bytes leftover after parsing attributes in process `syz.3.872'. [ 200.755181][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.770964][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 200.809547][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 200.838026][ T9227] netlink: 'syz.3.872': attribute type 28 has an invalid length. [ 200.883205][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 200.893713][ T9227] netlink: 'syz.3.872': attribute type 3 has an invalid length. [ 200.940656][ T9233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.872'. [ 200.982408][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.990351][ T9219] netlink: 'syz.3.872': attribute type 12 has an invalid length. [ 201.088215][ T3467] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.113482][ T3467] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.445379][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.460707][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.557459][ T9256] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 201.633150][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.659866][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.037380][ T9275] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 202.615710][ T9264] mpoa:mpoad_close: () going down [ 202.951294][ T9312] openvswitch: netlink: Actions may not be safe on all matching packets [ 203.203889][ T9322] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 203.972357][ T9353] syz.4.897 (9353) used greatest stack depth: 17864 bytes left [ 204.299797][ T9372] delete_channel: no stack [ 204.624414][ T9391] __nla_validate_parse: 10 callbacks suppressed [ 204.624436][ T9391] netlink: 44 bytes leftover after parsing attributes in process `syz.2.908'. [ 204.703280][ T9391] netlink: 43 bytes leftover after parsing attributes in process `syz.2.908'. [ 204.784063][ T9391] netlink: 'syz.2.908': attribute type 6 has an invalid length. [ 204.847146][ T9394] lo speed is unknown, defaulting to 1000 [ 204.875931][ T9391] netlink: 'syz.2.908': attribute type 5 has an invalid length. [ 204.892452][ T9391] netlink: 43 bytes leftover after parsing attributes in process `syz.2.908'. [ 205.165568][ T9412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.912'. [ 205.228151][ T9411] netlink: 84 bytes leftover after parsing attributes in process `syz.5.913'. [ 205.779993][ T9435] tipc: Started in network mode [ 205.787338][ T9435] tipc: Node identity aa217ad46494, cluster identity 4711 [ 205.795327][ T9435] tipc: Enabled bearer , priority 0 [ 205.814038][ T9435] syzkaller0: entered promiscuous mode [ 205.815077][ T30] audit: type=1800 audit(1759102727.610:5): pid=9428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.917" name="memory.events" dev="tmpfs" ino=54 res=0 errno=0 [ 205.831793][ T9435] syzkaller0: entered allmulticast mode [ 205.891150][ T9435] netlink: 84 bytes leftover after parsing attributes in process `syz.2.919'. [ 205.970270][ T9436] tipc: Resetting bearer [ 206.028021][ T9434] tipc: Resetting bearer [ 206.066275][ T9434] tipc: Disabling bearer [ 206.293225][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 206.334886][ T9443] netlink: 'syz.2.922': attribute type 1 has an invalid length. [ 206.350987][ T9443] netlink: 'syz.2.922': attribute type 4 has an invalid length. [ 206.371328][ T9443] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.922'. [ 206.567143][ T9456] netlink: 'syz.4.926': attribute type 25 has an invalid length. [ 206.815999][ T9469] syz_tun: entered allmulticast mode [ 206.833309][ T5869] IPVS: starting estimator thread 0... [ 206.839446][ T9473] netlink: 'syz.4.931': attribute type 1 has an invalid length. [ 206.907784][ T9468] syz_tun: left allmulticast mode [ 206.942657][ T9475] IPVS: using max 24 ests per chain, 57600 per kthread [ 207.219972][ T9489] netlink: 'syz.5.936': attribute type 1 has an invalid length. [ 207.253162][ T9489] netlink: 'syz.5.936': attribute type 10 has an invalid length. [ 207.260960][ T9489] netlink: 'syz.5.936': attribute type 4 has an invalid length. [ 207.328901][ T9489] netlink: 136 bytes leftover after parsing attributes in process `syz.5.936'. [ 207.405471][ T9491] netlink: 'syz.0.937': attribute type 5 has an invalid length. [ 207.780838][ T9520] netlink: 64 bytes leftover after parsing attributes in process `syz.2.944'. [ 208.113084][ T9526] 8021q: adding VLAN 0 to HW filter on device bond6 [ 208.252190][ T9532] 8021q: adding VLAN 0 to HW filter on device bond6 [ 208.264233][ T9551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.277275][ T9532] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 208.326338][ T9532] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 208.409968][ T9539] dvmrp0: entered allmulticast mode [ 208.421568][ T9546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.670737][ T9615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.816483][ T9622] __nla_validate_parse: 4 callbacks suppressed [ 209.816508][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'. [ 210.133630][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.974'. [ 210.293098][ T30] audit: type=1800 audit(1759102732.080:6): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.976" name="memory.events" dev="tmpfs" ino=1142 res=0 errno=0 [ 210.585580][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 210.608596][ T9645] sctp: [Deprecated]: syz.4.978 (pid 9645) Use of int in max_burst socket option deprecated. [ 210.608596][ T9645] Use struct sctp_assoc_value instead [ 210.671213][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 211.043676][ T9675] netlink: 36 bytes leftover after parsing attributes in process `syz.4.986'. [ 211.160622][ T9683] netlink: 9 bytes leftover after parsing attributes in process `syz.2.988'. [ 211.207152][ T9683] 0ªî{X¹¦: entered promiscuous mode [ 211.216663][ T9683] 0ªî{X¹¦: left allmulticast mode [ 211.256159][ T9683] netlink: 5 bytes leftover after parsing attributes in process `syz.2.988'. [ 211.303301][ T9683] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 211.319685][ T9683] 1ªî{X¹¦: left promiscuous mode [ 211.325219][ T9683] 1ªî{X¹¦: entered allmulticast mode [ 211.334607][ T9683] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 211.355023][ T9690] bridge0: port 1(bridge_slave_0) entered learning state [ 211.593651][ T9705] netlink: 128 bytes leftover after parsing attributes in process `syz.3.994'. [ 211.650687][ T9705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.994'. [ 211.679345][ T9706] netlink: 128 bytes leftover after parsing attributes in process `syz.3.994'. [ 211.764179][ T5884] Bluetooth: hci3: command 0x0406 tx timeout [ 211.765009][ T5875] Bluetooth: hci1: command 0x0406 tx timeout [ 211.770431][ T5884] Bluetooth: hci2: command 0x0401 tx timeout [ 212.051623][ T9715] validate_nla: 1 callbacks suppressed [ 212.078555][ T9715] netlink: 'syz.2.998': attribute type 1 has an invalid length. [ 212.189690][ T9715] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.257440][ T9732] netlink: 'syz.0.1004': attribute type 13 has an invalid length. [ 212.267455][ T9719] vlan1: entered allmulticast mode [ 212.286073][ T9719] bond3: entered allmulticast mode [ 212.410292][ T9728] netlink: 'syz.5.1003': attribute type 29 has an invalid length. [ 212.507606][ T9728] netlink: 'syz.5.1003': attribute type 29 has an invalid length. [ 212.783564][ T9749] netlink: 'syz.3.1009': attribute type 1 has an invalid length. [ 213.100629][ T9757] bond5: (slave gretap2): making interface the new active one [ 213.151548][ T9757] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 213.190596][ T9749] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.227159][ T9764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.523791][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.534444][ T9782] syzkaller1: entered promiscuous mode [ 213.540057][ T9782] syzkaller1: entered allmulticast mode [ 213.720937][ T9787] tipc: Enabled bearer , priority 0 [ 213.745887][ T9787] syzkaller0: entered promiscuous mode [ 213.759735][ T9787] syzkaller0: entered allmulticast mode [ 213.799325][ T9787] sch_tbf: burst 127 is lower than device ipvlan1 mtu (1514) ! [ 213.824827][ T9787] tipc: Resetting bearer [ 213.872301][ T9783] tipc: Resetting bearer [ 213.940952][ T9783] tipc: Disabling bearer [ 214.000261][ T9809] veth1_macvtap: left promiscuous mode [ 214.032486][ T9809] macsec0: entered allmulticast mode [ 214.082970][ T9809] veth1_macvtap: entered promiscuous mode [ 214.088769][ T9809] veth1_macvtap: entered allmulticast mode [ 214.102411][ T9809] macsec0: left allmulticast mode [ 214.127781][ T9809] veth1_macvtap: left allmulticast mode [ 214.216800][ T9817] netlink: 'syz.2.1025': attribute type 3 has an invalid length. [ 214.226372][ T9817] netlink: 'syz.2.1025': attribute type 3 has an invalid length. [ 214.247780][ T9817] netlink: 'syz.2.1025': attribute type 3 has an invalid length. [ 214.304962][ T9817] netlink: 'syz.2.1025': attribute type 3 has an invalid length. [ 214.328605][ T9817] netlink: 'syz.2.1025': attribute type 3 has an invalid length. [ 214.400917][ T9828] openvswitch: netlink: Unknown key attributes 2 [ 214.412487][ T9827] : entered promiscuous mode [ 214.422587][ T9827] chnl_net:caif_netlink_parms(): no params data found [ 214.746986][ T9837] bridge_slave_1: left allmulticast mode [ 214.765464][ T9837] bridge_slave_1: left promiscuous mode [ 214.771702][ T9837] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.789463][ T9837] bridge_slave_0: left allmulticast mode [ 214.827064][ T9837] bridge_slave_0: left promiscuous mode [ 214.857594][ T9837] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.058967][ T9854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.237697][ T9828] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 215.273487][ T9828] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 215.314852][ T9828] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.332483][ T9828] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 215.387711][ T9828] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 215.442919][ T9828] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 215.480045][ T9828] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 215.499433][ T9828] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 215.677554][ T9880] __nla_validate_parse: 12 callbacks suppressed [ 215.677578][ T9880] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1040'. [ 215.719505][ T9883] vlan0: entered promiscuous mode [ 215.728701][ T9883] bridge0: entered promiscuous mode [ 215.763616][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 215.960214][ T8992] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.980193][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 215.989421][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 216.013506][ T8992] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.024373][ T8992] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.105208][ T9889] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1043'. [ 216.204121][ T8992] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.344665][ T9828] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 216.371054][ T9828] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 216.552521][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 216.885820][ T9887] infiniband syz1: set down [ 216.891899][ T9887] infiniband syz1: added bond0 [ 216.904894][ T9887] syz1: rxe_create_cq: returned err = -12 [ 216.910858][ T9887] infiniband syz1: Couldn't create ib_mad CQ [ 216.929978][ T9887] infiniband syz1: Couldn't open port 1 [ 217.006681][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 217.065034][ T9887] RDS/IB: syz1: added [ 217.073622][ T9887] smc: adding ib device syz1 with port count 1 [ 217.079988][ T9887] smc: ib device syz1 port 1 has pnetid [ 217.426691][ T9948] syzkaller0: entered promiscuous mode [ 217.440022][ T9948] syzkaller0: entered allmulticast mode [ 219.964553][T10001] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.1060'. [ 220.224439][T10015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1063'. [ 220.946180][T10044] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1068'. [ 221.083945][T10047] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1069'. [ 221.352755][T10059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.627449][T10070] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1073'. [ 221.662406][T10068] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1074'. [ 221.944306][T10083] validate_nla: 52 callbacks suppressed [ 221.944329][T10083] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 221.978663][T10083] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1076'. [ 222.007854][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'. [ 222.339041][T10098] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1080'. [ 222.367266][T10098] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1080'. [ 222.417950][T10098] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1080'. [ 222.457698][T10098] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1080'. [ 223.601530][T10143] netlink: 'syz.5.1089': attribute type 32 has an invalid length. [ 223.998935][T10160] openvswitch: netlink: IP tunnel dst address not specified [ 224.314261][T10173] netdevsim netdevsim5: Direct firmware load for /.€ failed with error -2 [ 224.434420][T10173] netdevsim netdevsim5: Falling back to sysfs fallback for: /.€ [ 224.514533][T10179] netlink: 'syz.2.1098': attribute type 9 has an invalid length. [ 224.786089][T10187] tipc: Enabled bearer , priority 0 [ 224.797512][T10191] tipc: Started in network mode [ 224.812777][T10191] tipc: Node identity 966c83e4868c, cluster identity 4711 [ 224.827965][T10191] tipc: Enabled bearer , priority 0 [ 224.851170][T10187] syzkaller0: entered promiscuous mode [ 224.860273][T10187] syzkaller0: entered allmulticast mode [ 224.870452][T10193] syzkaller0: entered promiscuous mode [ 224.877242][T10193] syzkaller0: entered allmulticast mode [ 224.897153][T10191] tipc: Resetting bearer [ 224.917203][T10188] tipc: Resetting bearer [ 224.935131][T10188] tipc: Disabling bearer [ 225.057774][T10195] tipc: Resetting bearer [ 225.137164][T10206] netlink: 'syz.4.1105': attribute type 3 has an invalid length. [ 225.183526][T10201] tipc: Resetting bearer [ 225.233862][T10210] netlink: 'syz.3.1106': attribute type 12 has an invalid length. [ 225.275791][T10201] tipc: Disabling bearer [ 225.628065][T10228] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 225.764979][T10236] (unnamed net_device) (uninitialized): (slave ip6_vti0): Device is not bonding slave [ 225.777516][T10236] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6_vti0) [ 226.095437][T10241] __nla_validate_parse: 11 callbacks suppressed [ 226.095457][T10241] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1114'. [ 226.254643][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1116'. [ 226.616663][T10275] netlink: 'syz.2.1123': attribute type 27 has an invalid length. [ 226.631619][T10277] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1121'. [ 226.640446][T10276] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 226.701261][T10276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.080146][T10297] netlink: 'syz.4.1127': attribute type 29 has an invalid length. [ 227.119911][T10297] netlink: 'syz.4.1127': attribute type 29 has an invalid length. [ 227.588421][T10313] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1130'. [ 227.608896][T10313] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1130'. [ 227.852638][T10328] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 227.905300][T10327] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1134'. [ 227.917055][T10328] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 227.951299][T10336] sctp: [Deprecated]: syz.3.1137 (pid 10336) Use of int in maxseg socket option. [ 227.951299][T10336] Use struct sctp_assoc_value instead [ 228.017685][T10339] netlink: 'syz.2.1136': attribute type 1 has an invalid length. [ 228.157370][T10339] bond4: (slave bridge0): making interface the new active one [ 228.173287][T10339] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 228.616846][T10369] netlink: 'syz.5.1144': attribute type 1 has an invalid length. [ 228.740286][T10374] C: renamed from lo (while UP) [ 229.384078][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1152'. [ 230.065912][T10434] lo speed is unknown, defaulting to 1000 [ 230.207679][T10437] netem: change failed [ 230.374539][T10440] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 230.438607][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 230.458099][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 230.843248][T10453] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1166'. [ 230.986700][ T5187] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 230.997525][ T5187] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 231.006430][ T5187] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 231.018159][ T5187] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.032407][ T5187] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 231.086504][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 231.098274][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 231.107655][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 231.118680][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.130479][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 231.298547][T10469] netlink: 'syz.5.1168': attribute type 1 has an invalid length. [ 231.483596][T10471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.600760][T10469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.648114][T10458] lo speed is unknown, defaulting to 1000 [ 231.812399][T10487] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1170'. [ 232.007508][T10492] netlink: 'syz.2.1171': attribute type 1 has an invalid length. [ 232.145393][T10492] bond5 (unregistering): Released all slaves [ 232.309748][T10499] ip6tnl1: entered promiscuous mode [ 232.319091][T10499] ip6tnl1: entered allmulticast mode [ 232.691559][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1176'. [ 232.778091][T10518] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1176'. [ 233.202025][ T51] Bluetooth: hci6: command tx timeout [ 233.223765][T10535] tap0: tun_chr_ioctl cmd 2148553947 [ 233.267892][T10535] tap0: tun_chr_ioctl cmd 1074025673 [ 233.306171][T10539] tap0: tun_chr_ioctl cmd 2148553947 [ 234.266343][T10575] netlink: 'syz.2.1191': attribute type 1 has an invalid length. [ 234.291370][T10575] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1191'. [ 234.323723][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 234.682701][T10586] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1192'. [ 235.018307][T10600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1195'. [ 235.023750][T10458] chnl_net:caif_netlink_parms(): no params data found [ 235.289207][ T51] Bluetooth: hci6: command tx timeout [ 235.313806][T10611] netlink: 'syz.3.1197': attribute type 1 has an invalid length. [ 235.342781][T10611] netlink: 'syz.3.1197': attribute type 1 has an invalid length. [ 235.440822][T10611] netlink: 'syz.3.1197': attribute type 1 has an invalid length. [ 235.484684][T10611] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1197'. [ 235.609847][T10611] netlink: 'syz.3.1197': attribute type 1 has an invalid length. [ 235.671031][T10611] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1197'. [ 235.696361][T10458] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.725165][T10458] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.752630][T10458] bridge_slave_0: entered allmulticast mode [ 235.774455][T10458] bridge_slave_0: entered promiscuous mode [ 235.805557][T10622] veth0_vlan: left promiscuous mode [ 235.828057][T10622] vlan0: entered promiscuous mode [ 235.834149][T10622] veth0_vlan: entered promiscuous mode [ 235.859963][T10622] vlan0: entered allmulticast mode [ 235.874947][T10622] veth0_vlan: entered allmulticast mode [ 235.908301][T10458] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.935996][T10458] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.962720][T10458] bridge_slave_1: entered allmulticast mode [ 235.978261][T10458] bridge_slave_1: entered promiscuous mode [ 236.101003][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1204'. [ 236.479585][T10458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.517040][T10458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.771245][T10458] team0: Port device team_slave_0 added [ 236.826134][T10458] team0: Port device team_slave_1 added [ 236.923031][T10665] tap0: tun_chr_ioctl cmd 1074025677 [ 236.944197][T10665] tap0: linktype set to 65534 [ 236.954891][T10665] netlink: 'syz.4.1207': attribute type 2 has an invalid length. [ 236.976583][T10665] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1207'. [ 236.997302][T10665] nbd: must specify a device to reconfigure [ 237.077410][T10458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.128338][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.201512][T10458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.287688][T10458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.320125][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.362846][ T51] Bluetooth: hci6: command tx timeout [ 237.379587][T10458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.431393][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 237.535742][T10692] hsr_slave_1: left promiscuous mode [ 237.636981][T10458] hsr_slave_0: entered promiscuous mode [ 237.659490][T10458] hsr_slave_1: entered promiscuous mode [ 237.672873][T10704] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1214'. [ 237.723228][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1214'. [ 238.363270][T10737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1223'. [ 238.389907][T10458] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 238.419543][T10458] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 238.467340][T10458] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 238.502565][T10743] netlink: 'syz.2.1224': attribute type 1 has an invalid length. [ 238.506677][T10458] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 238.624429][T10743] bond5: entered promiscuous mode [ 238.630066][T10743] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.699313][T10748] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.700666][T10755] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1226'. [ 238.709505][T10748] bond5: (slave bond6): making interface the new active one [ 238.724562][T10748] bond6: entered promiscuous mode [ 238.730676][T10748] bond5: (slave bond6): Enslaving as an active interface with an up link [ 238.794549][T10749] 8021q: adding VLAN 0 to HW filter on device bond7 [ 238.806130][T10749] bond5: (slave bond7): Enslaving as a backup interface with an up link [ 239.271224][T10458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.325384][T10458] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.374714][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.381973][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.442895][ T51] Bluetooth: hci6: command tx timeout [ 239.456649][T10780] netlink: 'syz.3.1231': attribute type 2 has an invalid length. [ 239.494280][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.501541][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.314971][T10811] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1237'. [ 240.536505][T10458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.914480][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1246'. [ 240.967889][T10830] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 241.322758][T10851] netlink: 'syz.2.1250': attribute type 1 has an invalid length. [ 241.336030][T10852] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 241.566806][T10458] veth0_vlan: entered promiscuous mode [ 241.610761][T10458] veth1_vlan: entered promiscuous mode [ 241.755600][T10458] veth0_macvtap: entered promiscuous mode [ 241.768345][T10458] veth1_macvtap: entered promiscuous mode [ 241.842892][T10458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.887504][T10458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.941329][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.970907][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.984470][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.997876][T10874] bridge_slave_0: invalid flags given to default FDB implementation [ 242.012625][T10871] netlink: 'syz.5.1258': attribute type 3 has an invalid length. [ 242.045463][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.183830][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1261'. [ 242.268679][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.293758][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.492556][T10891] netlink: 'syz.2.1265': attribute type 16 has an invalid length. [ 242.503235][T10891] netlink: 'syz.2.1265': attribute type 17 has an invalid length. [ 242.522484][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.540895][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.648481][T10891] 1ªî{X¹¦: left allmulticast mode [ 242.668349][T10891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.895166][T10909] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 242.926088][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1158'. [ 242.950981][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1158'. [ 243.217417][T10918] netlink: 11562 bytes leftover after parsing attributes in process `syz.6.1270'. [ 243.547469][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1273'. [ 243.724396][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1275'. [ 243.796028][T10943] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1277'. [ 243.818297][T10943] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1277'. [ 243.844767][T10940] tipc: Enabling of bearer rejected, already enabled [ 243.857819][T10947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1278'. [ 244.029400][T10952] ip6gre1: entered allmulticast mode [ 244.303450][T10966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1285'. [ 260.885973][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.894112][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.956041][T11019] netlink: 576 bytes leftover after parsing attributes in process `syz.5.1287'. [ 266.106343][T11023] netlink: 'syz.3.1292': attribute type 10 has an invalid length. [ 266.145030][T11023] team0: Device ipvlan1 failed to register rx_handler [ 266.478024][T11047] syzkaller0: entered promiscuous mode [ 266.504237][T11047] syzkaller0: entered allmulticast mode [ 266.531929][T11054] syz.3.1300 uses old SIOCAX25GETINFO [ 266.595161][T11057] netlink: 'syz.5.1303': attribute type 1 has an invalid length. [ 266.605762][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1303'. [ 266.628308][T11059] netlink: 'syz.5.1303': attribute type 1 has an invalid length. [ 266.639010][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1303'. [ 266.699092][T11062] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 266.795648][T11058] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.1302'. [ 267.086843][T11076] veth1_macvtap: left promiscuous mode [ 267.268900][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 267.330151][T11086] gtp0: entered promiscuous mode [ 267.346717][T11086] gtp0: entered allmulticast mode [ 267.546130][T11102] tipc: Started in network mode [ 267.568108][T11102] tipc: Node identity 2a81b4764537, cluster identity 4711 [ 267.576419][T11102] tipc: Enabled bearer , priority 0 [ 267.603843][T11109] syzkaller0: entered promiscuous mode [ 267.618415][T11109] syzkaller0: entered allmulticast mode [ 267.666473][T11102] tipc: Resetting bearer [ 267.675932][T11101] tipc: Resetting bearer [ 267.705724][T11101] tipc: Disabling bearer [ 267.933682][T11117] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1321'. [ 268.076499][T11125] vlan0: entered promiscuous mode [ 268.103899][T11125] vlan0: entered allmulticast mode [ 268.109084][T11125] veth0_vlan: entered allmulticast mode [ 268.241577][T11135] netlink: 'syz.2.1325': attribute type 28 has an invalid length. [ 268.272076][T11135] netlink: 'syz.2.1325': attribute type 3 has an invalid length. [ 268.313655][T11135] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1325'. [ 268.609172][T11156] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1330'. [ 268.727345][T11156] bond4: entered allmulticast mode [ 268.740005][T11156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 268.752066][T11156] bridge0: port 2(bond4) entered blocking state [ 268.758559][T11156] bridge0: port 2(bond4) entered disabled state [ 268.785059][T11156] bond4: entered promiscuous mode [ 268.810179][T11156] bridge0: port 2(bond4) entered blocking state [ 268.817009][T11156] bridge0: port 2(bond4) entered forwarding state [ 269.099400][T11180] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1338'. [ 269.190705][T11185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1340'. [ 269.369305][T11192] sctp: [Deprecated]: syz.6.1343 (pid 11192) Use of int in max_burst socket option deprecated. [ 269.369305][T11192] Use struct sctp_assoc_value instead [ 269.557366][ T3467] bridge0: port 2(bond4) entered disabled state [ 269.883627][T11219] openvswitch: netlink: Multiple metadata blocks provided [ 270.404724][T11245] netlink: 'syz.4.1358': attribute type 1 has an invalid length. [ 270.590441][T11252] nbd: must specify a device to reconfigure [ 270.639989][T11245] bond5: entered promiscuous mode [ 270.645854][ T51] Bluetooth: hci6: command tx timeout [ 270.662561][T11245] 8021q: adding VLAN 0 to HW filter on device bond5 [ 270.764208][T11255] bond5: (slave bridge5): making interface the new active one [ 270.776709][T11264] netlink: 'syz.6.1365': attribute type 1 has an invalid length. [ 270.825031][T11255] bridge5: entered promiscuous mode [ 270.846504][T11255] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 270.966177][T11270] netlink: 'syz.3.1366': attribute type 3 has an invalid length. [ 271.241114][T11288] tipc: Enabled bearer , priority 0 [ 271.274906][T11288] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 271.305012][T11294] __nla_validate_parse: 40 callbacks suppressed [ 271.305031][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1369'. [ 271.314297][T11288] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 271.377087][T11288] tipc: Resetting bearer [ 271.501524][T11301] netlink: 'syz.5.1374': attribute type 1 has an invalid length. [ 271.826310][T11314] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1378'. [ 271.956667][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1378'. [ 271.977875][T11320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1380'. [ 272.036825][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1380'. [ 272.249071][T11327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1381'. [ 272.262633][ T10] tipc: Node number set to 283149284 [ 272.407352][T11334] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1381'. [ 272.432131][T11339] openvswitch: netlink: Actions may not be safe on all matching packets [ 272.994198][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 273.219199][T11365] syzkaller0: entered promiscuous mode [ 273.240974][T11365] syzkaller0: entered allmulticast mode [ 273.336526][T11378] ip6gre2: entered allmulticast mode [ 273.521375][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1401'. [ 273.577758][T11396] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 273.602447][T11395] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 275.330574][T11414] tipc: Started in network mode [ 275.336663][T11414] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 275.348802][T11414] tipc: Enabled bearer , priority 10 [ 275.362724][T11416] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 275.525037][T11421] netlink: 'syz.6.1409': attribute type 1 has an invalid length. [ 275.597371][T11421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.620015][T11429] bond1: (slave geneve2): making interface the new active one [ 275.630340][T11429] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 275.894602][T11440] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 276.093195][T11446] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1418'. [ 276.380972][T11461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.462636][ T24] tipc: Node number set to 4269801492 [ 276.916668][T11486] Bluetooth: MGMT ver 1.23 [ 276.939297][T11486] __nla_validate_parse: 1 callbacks suppressed [ 276.939321][T11486] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1430'. [ 277.321289][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1436'. [ 277.345700][T11516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1438'. [ 277.389070][ T5237] udevd[5237]: worker [11031] terminated by signal 33 (Unknown signal 33) [ 277.560387][T11526] netlink: 'syz.6.1441': attribute type 10 has an invalid length. [ 277.593789][T11526] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.622123][T11526] bridge_slave_1: left allmulticast mode [ 277.638446][T11526] bridge_slave_1: left promiscuous mode [ 277.648531][T11526] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.688182][T11526] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 277.772985][T11534] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1443'. [ 277.897233][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1443'. [ 277.906641][T11534] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 278.138842][T11550] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1447'. [ 278.166994][T11550] netlink: 'syz.5.1447': attribute type 3 has an invalid length. [ 278.187134][T11550] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1447'. [ 278.230305][T11553] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20002 [ 278.256944][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1448'. [ 278.288348][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1448'. [ 278.383088][T11557] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1449'. [ 278.587718][T11565] netlink: 'syz.4.1453': attribute type 7 has an invalid length. [ 278.955260][T11589] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 279.731174][T11631] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 279.893648][T11640] netlink: 'syz.6.1471': attribute type 1 has an invalid length. [ 280.132237][T11655] macvtap1: entered promiscuous mode [ 280.151718][T11655] macvtap1: entered allmulticast mode [ 280.440509][T11677] netlink: 'syz.4.1479': attribute type 4 has an invalid length. [ 280.451455][T11678] netlink: 'syz.4.1479': attribute type 4 has an invalid length. [ 280.558495][T11687] veth1_macvtap: left promiscuous mode [ 280.940450][T11708] netlink: 'syz.5.1489': attribute type 1 has an invalid length. [ 281.025308][T11708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.085731][T11708] vlan2: entered allmulticast mode [ 281.090921][T11708] bond2: entered allmulticast mode [ 281.197394][T11728] netlink: 'syz.2.1493': attribute type 26 has an invalid length. [ 282.313396][T11779] netlink: 'syz.3.1509': attribute type 2 has an invalid length. [ 282.609133][T11797] __nla_validate_parse: 10 callbacks suppressed [ 282.609176][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1514'. [ 283.054976][T11825] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1521'. [ 283.071519][T11826] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1521'. [ 283.201553][T11835] netem: incorrect ge model size [ 283.214635][T11835] netem: change failed [ 283.230056][T11835] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1524'. [ 283.389555][T11845] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1527'. [ 283.728223][T11844] netlink: 'syz.6.1529': attribute type 5 has an invalid length. [ 283.781403][T11856] netlink: 'syz.4.1534': attribute type 1 has an invalid length. [ 283.795654][T11856] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1534'. [ 283.806868][T11856] netlink: 'syz.4.1534': attribute type 1 has an invalid length. [ 284.285979][T11890] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 284.296602][T11890] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 284.493620][T11896] netlink: 'syz.2.1544': attribute type 10 has an invalid length. [ 284.843510][T11907] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1548'. [ 284.852780][T11907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1548'. [ 285.019512][T11918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1552'. [ 285.116772][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'. [ 285.685495][T11934] virtio_net virtio1 eth0: entered promiscuous mode [ 285.710221][T11934] ifb1: entered promiscuous mode [ 285.718888][T11934] debugfs: 'hsr0' already exists in 'hsr' [ 285.728164][T11934] Cannot create hsr debugfs directory [ 285.993851][T11960] netlink: 'syz.3.1564': attribute type 1 has an invalid length. [ 286.015403][T11964] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 286.328362][T11976] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 286.367784][T11976] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 286.616955][T11988] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 286.699657][T11996] bond0: entered promiscuous mode [ 286.710599][T11996] bond_slave_0: entered promiscuous mode [ 286.718731][T11996] bond_slave_1: entered promiscuous mode [ 286.731539][T11996] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 286.806292][T11994] netlink: 'syz.5.1577': attribute type 1 has an invalid length. [ 286.845701][T11994] nbd: couldn't find device at index 1048576 [ 287.240160][T12013] syzkaller1: entered promiscuous mode [ 287.246665][T12013] syzkaller1: entered allmulticast mode [ 287.329481][T12020] netlink: 'syz.2.1587': attribute type 2 has an invalid length. [ 287.490119][T12030] openvswitch: netlink: Flow actions attr not present in new flow. [ 287.554644][T12036] netlink: 'syz.5.1593': attribute type 21 has an invalid length. [ 287.628448][T12036] __nla_validate_parse: 7 callbacks suppressed [ 287.628468][T12036] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1593'. [ 287.736148][T12050] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1595'. [ 287.782356][T12050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1595'. [ 287.922530][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1596'. [ 288.063875][T12055] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 288.284873][T12083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.292222][T12083] IPv6: NLM_F_CREATE should be set when creating new route [ 288.310057][T12084] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1600'. [ 289.270174][T12119] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1610'. [ 289.332501][T12126] wg1: entered promiscuous mode [ 289.347784][T12126] wg1: entered allmulticast mode [ 289.370952][T12124] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1611'. [ 289.569491][T12131] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1614'. [ 290.347910][T12169] netlink: 'syz.4.1627': attribute type 39 has an invalid length. [ 290.716704][T12185] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 290.778490][T12185] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.914546][T12192] netlink: 'syz.2.1632': attribute type 21 has an invalid length. [ 290.931879][T12192] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1632'. [ 290.940518][T12185] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.013972][T12192] netlink: 'syz.2.1632': attribute type 5 has an invalid length. [ 291.021950][T12192] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1632'. [ 291.086015][T12185] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.237180][T12215] netlink: 'syz.5.1641': attribute type 10 has an invalid length. [ 291.342924][T12185] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.531453][T12215] team0: Port device dummy0 added [ 291.754191][ T56] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.819865][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.836046][T12234] netlink: 'syz.4.1646': attribute type 1 has an invalid length. [ 292.009096][ T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.049086][ T35] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.160939][T12246] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 292.270231][T12246] vlan0: entered promiscuous mode [ 292.292463][T12246] vlan0: entered allmulticast mode [ 292.318260][T12246] veth0_vlan: entered allmulticast mode [ 292.908780][T12285] __nla_validate_parse: 5 callbacks suppressed [ 292.908803][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1661'. [ 292.952814][T12285] ipvlan2: entered promiscuous mode [ 293.028333][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1661'. [ 293.084612][T12292] netlink: 'syz.6.1663': attribute type 4 has an invalid length. [ 293.134794][T12298] netlink: 'syz.4.1665': attribute type 3 has an invalid length. [ 293.157614][T12298] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1665'. [ 293.367709][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1667'. [ 293.583536][T12320] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1669'. [ 293.904720][T12332] veth5: entered promiscuous mode [ 293.945614][T12343] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1679'. [ 293.960537][T12341] IPv6: sit1: Disabled Multicast RS [ 293.987059][T12341] sit1: entered allmulticast mode [ 294.055453][T12337] lo speed is unknown, defaulting to 1000 [ 294.360655][T12368] netlink: 'syz.6.1687': attribute type 9 has an invalid length. [ 294.434838][T12368] netlink: 211988 bytes leftover after parsing attributes in process `syz.6.1687'. [ 294.629557][T12379] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1692'. [ 294.659688][T12379] NCSI netlink: No device for ifindex 0 [ 294.702738][T12384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.915610][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1697'. [ 294.926321][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1696'. [ 294.941418][T12395] netlink: 'syz.5.1696': attribute type 14 has an invalid length. [ 294.969750][T12395] netlink: 'syz.5.1696': attribute type 13 has an invalid length. [ 294.997227][T12396] team1: entered promiscuous mode [ 295.009540][T12396] team1: entered allmulticast mode [ 295.033201][T12395] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 295.144460][T12399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.449241][T12411] netlink: 'syz.5.1702': attribute type 1 has an invalid length. [ 295.942822][T12434] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 296.170147][T12439] tipc: Enabling of bearer rejected, already enabled [ 297.127034][T12484] netlink: 'syz.5.1727': attribute type 10 has an invalid length. [ 297.226659][T12484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.307554][T12484] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 297.985857][T12530] __nla_validate_parse: 8 callbacks suppressed [ 297.985880][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1738'. [ 298.050517][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1738'. [ 298.070510][T12530] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1738'. [ 298.095619][T12530] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1738'. [ 298.233575][T12544] lo speed is unknown, defaulting to 1000 [ 298.265811][T12546] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1743'. [ 298.394441][T12549] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1744'. [ 298.446960][T12551] netlink: 'syz.6.1745': attribute type 1 has an invalid length. [ 298.483462][T12551] netlink: 'syz.6.1745': attribute type 11 has an invalid length. [ 298.509832][T12551] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1745'. [ 298.645252][T12558] netlink: 'syz.6.1748': attribute type 8 has an invalid length. [ 298.959314][T12574] netlink: 'syz.4.1749': attribute type 1 has an invalid length. [ 299.077930][T12574] 8021q: adding VLAN 0 to HW filter on device bond6 [ 299.176109][T12577] 8021q: adding VLAN 0 to HW filter on device bond6 [ 299.184709][T12577] bond6: (slave vxcan9): The slave device specified does not support setting the MAC address [ 299.213704][T12577] bond6: (slave vxcan9): Error -95 calling set_mac_address [ 299.277090][T12574] vlan1: entered allmulticast mode [ 299.310464][T12574] bond6: entered allmulticast mode [ 299.709296][T12600] netlink: 'syz.4.1755': attribute type 1 has an invalid length. [ 300.067359][T12613] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1757'. [ 300.104330][T12613] vlan2: entered allmulticast mode [ 300.119744][T12613] gretap0: entered allmulticast mode [ 300.669655][T12635] smc: net device erspan0 applied user defined pnetid SYZ0 [ 300.867595][T12642] tipc: Enabled bearer , priority 0 [ 300.892848][T12642] syzkaller0: entered promiscuous mode [ 300.915924][T12642] syzkaller0: entered allmulticast mode [ 300.947020][T12642] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 301.088960][T12642] tipc: Resetting bearer [ 301.142927][T12641] tipc: Resetting bearer [ 301.224239][T12641] tipc: Disabling bearer [ 302.219755][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 302.302790][T12692] netlink: 'syz.4.1782': attribute type 1 has an invalid length. [ 302.506232][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1785'. [ 302.659663][T12705] team0: Device wireguard1 is of different type [ 303.113584][T12733] netlink: 'syz.6.1793': attribute type 1 has an invalid length. [ 303.290345][T12742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.304504][T12743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.395369][T12748] __nla_validate_parse: 2 callbacks suppressed [ 303.395392][T12748] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1799'. [ 303.420781][T12750] tipc: Enabled bearer , priority 0 [ 303.431362][T12750] syzkaller0: entered promiscuous mode [ 303.442718][T12750] syzkaller0: entered allmulticast mode [ 303.566644][T12750] tipc: Resetting bearer [ 303.593831][T12749] tipc: Resetting bearer [ 303.631370][T12763] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1806'. [ 303.661740][T12749] tipc: Disabling bearer [ 303.681129][T12758] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1803'. [ 303.882988][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1810'. [ 304.077785][T12787] tipc: Trying to set illegal importance in message [ 304.602218][T12814] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1818'. [ 304.710155][T12828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1821'. [ 304.750444][T12828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1821'. [ 304.778995][T12831] netlink: 816 bytes leftover after parsing attributes in process `syz.2.1822'. [ 304.780809][T12828] bridge0: port 3(vlan1) entered blocking state [ 304.828345][T12828] bridge0: port 3(vlan1) entered disabled state [ 304.846219][T12833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1822'. [ 304.856487][T12828] vlan1: entered allmulticast mode [ 304.866384][T12828] bridge0: entered allmulticast mode [ 304.878460][T12833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1822'. [ 304.890352][T12828] vlan1: left allmulticast mode [ 304.902410][T12828] bridge0: left allmulticast mode [ 305.062997][ T30] audit: type=1800 audit(1759102826.780:7): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1819" name="memory.events" dev="tmpfs" ino=1076 res=0 errno=0 [ 305.064009][T12833] 1ªî{X¹¦: entered promiscuous mode [ 305.177606][T12833] 1ªî{X¹¦: left promiscuous mode [ 305.621548][ T3557] tipc: Subscription rejected, illegal request [ 306.617807][T12931] vlan3: entered allmulticast mode [ 306.632400][T12931] erspan0: entered allmulticast mode [ 307.344740][T12979] rdma_op ffff8880592f49f0 conn xmit_rdma 0000000000000000 [ 307.396627][T12973] lo speed is unknown, defaulting to 1000 [ 307.775107][T12993] bridge6: entered promiscuous mode [ 307.789864][T12993] bridge6: entered allmulticast mode [ 307.867805][T12997] bond4: (slave bridge0): Releasing active interface [ 308.166358][T13009] netlink: 'syz.4.1861': attribute type 4 has an invalid length. [ 308.286700][T13018] netlink: 'syz.5.1874': attribute type 1 has an invalid length. [ 308.320310][T13019] netlink: 'syz.5.1874': attribute type 1 has an invalid length. [ 308.443843][T13018] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.520690][T13019] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.686009][T13032] tipc: Enabled bearer , priority 10 [ 309.254818][T13048] __nla_validate_parse: 11 callbacks suppressed [ 309.254840][T13048] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1881'. [ 309.318707][T13050] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 309.526893][T13060] sctp: Trying to GSO but underlying device doesn't support it. [ 309.862931][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1888'. [ 309.879643][ T5869] tipc: Node number set to 3467999956 [ 309.989959][T13078] veth1_vlan: mtu less than device minimum [ 310.241678][T13085] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 310.258007][T13086] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 310.487757][T13101] netlink: 'syz.4.1897': attribute type 1 has an invalid length. [ 310.523473][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1897'. [ 310.624872][T13111] netlink: 'syz.2.1900': attribute type 1 has an invalid length. [ 310.633543][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1900'. [ 310.767746][T13112] lo speed is unknown, defaulting to 1000 [ 310.939994][T13128] nbd: socks must be embedded in a SOCK_ITEM attr [ 311.617939][T13147] netlink: 'syz.2.1912': attribute type 3 has an invalid length. [ 311.712823][ T43] IPVS: starting estimator thread 0... [ 311.814694][T13154] IPVS: using max 23 ests per chain, 55200 per kthread [ 311.958620][T13169] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1919'. [ 312.119909][T13174] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20000 [ 312.127471][ T43] IPVS: starting estimator thread 0... [ 312.207958][T13183] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 312.245135][T13177] IPVS: using max 23 ests per chain, 55200 per kthread [ 312.297494][T13178] veth0_virt_wifi: renamed from team_slave_0 [ 312.553901][T13196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1924'. [ 313.045869][T13216] netlink: 'syz.2.1932': attribute type 1 has an invalid length. [ 313.087031][T13220] netlink: 'syz.4.1933': attribute type 4 has an invalid length. [ 313.132373][T13220] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1933'. [ 313.173425][T13216] 8021q: adding VLAN 0 to HW filter on device bond8 [ 313.231268][T13227] bond8: (slave geneve2): making interface the new active one [ 313.245493][T13227] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 313.362492][T13232] raw_sendmsg: syz.5.1936 forgot to set AF_INET. Fix it! [ 313.522424][ T153] nci: nci_rsp_packet: unsupported rsp opcode 0xf20 [ 313.576050][T13236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.589437][T13252] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 313.764328][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1943'. [ 313.776990][T13257] netlink: 'syz.2.1944': attribute type 1 has an invalid length. [ 313.797947][T13257] netlink: 'syz.2.1944': attribute type 1 has an invalid length. [ 313.827652][T13257] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1944'. [ 313.887700][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1946'. [ 314.273825][T13278] netlink: 'syz.5.1950': attribute type 10 has an invalid length. [ 314.293754][T13278] __nla_validate_parse: 1 callbacks suppressed [ 314.293779][T13278] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1950'. [ 314.319690][T13278] dummy0: entered promiscuous mode [ 314.397171][T13278] team0: Port device dummy0 removed [ 314.411164][T13278] bridge0: port 3(dummy0) entered blocking state [ 314.420944][T13278] bridge0: port 3(dummy0) entered disabled state [ 314.435715][T13278] dummy0: entered allmulticast mode [ 314.627717][T13304] netlink: 'syz.5.1959': attribute type 39 has an invalid length. [ 315.335605][T13339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.403075][T13347] veth1_macvtap: left promiscuous mode [ 315.417761][T13347] macsec0: entered promiscuous mode [ 315.478181][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1970'. [ 315.625121][T13355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1973'. [ 315.663687][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1974'. [ 316.075327][T13384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.100990][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1982'. [ 316.120627][T13384] netlink: 'syz.6.1982': attribute type 4 has an invalid length. [ 316.190512][T13386] tipc: Enabled bearer , priority 0 [ 316.330737][T13386] syzkaller0: entered promiscuous mode [ 316.338747][T13386] syzkaller0: entered allmulticast mode [ 316.349351][T13397] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 316.366560][T13386] tipc: Resetting bearer [ 316.610845][ T3467] tipc: Resetting bearer [ 316.641412][T13385] tipc: Resetting bearer [ 317.426222][T13420] netlink: 'syz.6.1993': attribute type 1 has an invalid length. [ 317.434938][T13419] netlink: 'syz.6.1993': attribute type 1 has an invalid length. [ 318.249596][T13385] tipc: Disabling bearer [ 318.267578][T13419] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 318.269052][T13420] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 318.439074][T13434] netlink: 'syz.3.1997': attribute type 14 has an invalid length. [ 318.752788][T13450] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2001'. [ 319.018335][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2004'. [ 319.191037][T13469] netlink: 'syz.6.2006': attribute type 4 has an invalid length. [ 319.371370][T13472] batadv_slave_0: entered promiscuous mode [ 319.401398][T13472] macvtap1: entered allmulticast mode [ 319.402964][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'. [ 319.427441][T13472] batadv_slave_0: entered allmulticast mode [ 319.645186][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2013'. [ 319.713831][T13492] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2011'. [ 319.774170][T13500] macvtap2: entered promiscuous mode [ 319.779614][T13500] macvtap2: entered allmulticast mode [ 319.881540][T13502] macvtap2: entered promiscuous mode [ 319.912199][T13505] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 319.925075][T13502] macvtap2: entered allmulticast mode [ 320.157310][T13519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2017'. [ 320.455565][T13541] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 320.492706][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2027'. [ 320.629956][T13554] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 320.772976][T13559] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2032'. [ 321.149344][T13588] tipc: Enabled bearer , priority 0 [ 321.166702][T13588] syzkaller0: entered promiscuous mode [ 321.172458][T13588] syzkaller0: entered allmulticast mode [ 321.181379][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2041'. [ 321.224103][T13588] tipc: Resetting bearer [ 321.256289][T13586] tipc: Resetting bearer [ 321.308140][T13586] tipc: Disabling bearer [ 321.411228][T13602] netlink: 364 bytes leftover after parsing attributes in process `syz.2.2044'. [ 321.512121][T13607] netlink: 'syz.6.2046': attribute type 1 has an invalid length. [ 321.626325][T13607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 321.646288][T13607] bond2: (slave bond3): making interface the new active one [ 321.661252][T13607] bond2: (slave bond3): Enslaving as an active interface with an up link [ 321.679846][T13607] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2046'. [ 321.686950][T13613] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 321.698421][T13616] tipc: Invalid UDP bearer configuration [ 321.698480][T13616] tipc: Enabling of bearer rejected, failed to enable media [ 321.720412][T13607] 8021q: adding VLAN 0 to HW filter on device bond2 [ 321.784365][T13618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2049'. [ 321.883383][T13624] netlink: 'syz.4.2050': attribute type 1 has an invalid length. [ 321.922631][ T51] Bluetooth: hci4: command tx timeout [ 321.983827][T13632] netlink: 'syz.4.2050': attribute type 10 has an invalid length. [ 322.069321][T13634] IPv6: NLM_F_REPLACE set, but no existing node found! [ 322.083149][T13632] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 322.099851][T13632] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 322.120778][T13632] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 322.328182][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.689728][T13657] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 323.055534][T13679] netlink: 'syz.3.2069': attribute type 1 has an invalid length. [ 323.099241][T13679] netlink: 'syz.3.2069': attribute type 2 has an invalid length. [ 323.334842][T13704] netlink: 'syz.3.2076': attribute type 19 has an invalid length. [ 323.373251][T13704] netlink: 'syz.3.2076': attribute type 19 has an invalid length. [ 323.690406][T13717] netlink: 'syz.4.2081': attribute type 3 has an invalid length. [ 323.730476][T13724] syzkaller1: entered promiscuous mode [ 323.737595][T13724] syzkaller1: entered allmulticast mode [ 323.791539][ T1096] nci: nci_rsp_packet: unsupported rsp opcode 0xf20 [ 324.406951][T13769] netlink: zone id is out of range [ 324.413436][T13769] netlink: zone id is out of range [ 324.418676][T13769] netlink: zone id is out of range [ 324.428161][T13769] netlink: zone id is out of range [ 324.434171][T13769] netlink: zone id is out of range [ 324.439471][T13769] netlink: zone id is out of range [ 324.445896][T13741] netlink: 'syz.4.2085': attribute type 1 has an invalid length. [ 324.453033][T13769] netlink: zone id is out of range [ 324.462491][T13741] __nla_validate_parse: 9 callbacks suppressed [ 324.462512][T13741] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2085'. [ 324.505346][T13741] netlink: 'syz.4.2085': attribute type 1 has an invalid length. [ 324.925396][T13792] sctp: [Deprecated]: syz.2.2099 (pid 13792) Use of int in maxseg socket option. [ 324.925396][T13792] Use struct sctp_assoc_value instead [ 324.947003][T13792] netlink: 'syz.2.2099': attribute type 1 has an invalid length. [ 325.059947][T13797] netlink: 'syz.4.2101': attribute type 1 has an invalid length. [ 325.245930][T13804] bond7: (slave geneve2): making interface the new active one [ 325.263830][T13804] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 325.292844][ T1096] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 325.323438][ T56] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 325.348476][ T56] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 325.400325][ T56] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 325.476995][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2111'. [ 325.713901][T13838] netem: change failed [ 326.049612][T13855] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2116'. [ 326.219393][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2116'. [ 326.334358][T13860] netlink: 'syz.5.2116': attribute type 12 has an invalid length. [ 326.381569][T13855] bond0: entered promiscuous mode [ 326.438103][T13855] bond_slave_0: entered promiscuous mode [ 326.472175][T13855] bond_slave_1: entered promiscuous mode [ 326.482415][T13855] batadv0: entered promiscuous mode [ 326.560402][T13869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2116'. [ 326.573943][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2116'. [ 326.659881][T13860] netlink: 'syz.5.2116': attribute type 12 has an invalid length. [ 326.703596][T13872] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2120'. [ 326.743765][T13873] lo speed is unknown, defaulting to 1000 [ 326.865411][T13878] lo speed is unknown, defaulting to 1000 [ 327.001356][T13891] net_ratelimit: 220 callbacks suppressed [ 327.001379][T13891] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 327.014109][T13891] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 327.036571][T13893] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2126'. [ 327.313439][T13898] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2129'. [ 328.046451][T13916] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 328.055660][T13916] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 328.227548][T13936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2139'. [ 328.693222][T13952] netlink: 'syz.3.2145': attribute type 1 has an invalid length. [ 328.744434][T13949] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 329.733914][T14019] __nla_validate_parse: 2 callbacks suppressed [ 329.733936][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2162'. [ 329.964196][T14027] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2165'. [ 330.152318][T14032] netlink: 'syz.3.2164': attribute type 4 has an invalid length. [ 330.278870][T14039] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2169'. [ 330.313476][T14043] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2169'. [ 330.460336][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2173'. [ 330.525216][T14050] erspan0: entered promiscuous mode [ 330.587461][T14057] netlink: 296 bytes leftover after parsing attributes in process `syz.2.2176'. [ 330.677885][T14061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2174'. [ 330.694788][T14064] atomic_op ffff88802901d198 conn xmit_atomic 0000000000000000 [ 330.922697][T14071] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2178'. [ 331.109098][T14083] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 331.119446][T14086] netlink: 'syz.5.2180': attribute type 11 has an invalid length. [ 331.185217][T14086] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2180'. [ 331.190553][T14090] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 331.747121][T14104] smc: removing ib device syz0 [ 331.777282][T14106] netlink: 'syz.2.2187': attribute type 1 has an invalid length. [ 331.791854][T14106] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2187'. [ 332.042997][T14117] gtp0: entered promiscuous mode [ 332.059011][T14117] gtp0: entered allmulticast mode [ 333.249622][T14151] tipc: Enabled bearer , priority 0 [ 333.310535][T14151] syzkaller0: entered promiscuous mode [ 333.341652][T14151] syzkaller0: entered allmulticast mode [ 333.391048][T14159] netlink: 'syz.3.2202': attribute type 58 has an invalid length. [ 333.610390][T14153] tipc: Resetting bearer [ 333.640546][T14150] tipc: Resetting bearer [ 333.797386][T14150] tipc: Disabling bearer [ 334.478687][T14195] gre2: entered promiscuous mode [ 334.492249][T14195] gre2: entered allmulticast mode [ 334.825556][T14211] tipc: Enabled bearer , priority 0 [ 334.840553][T14212] syzkaller0: entered promiscuous mode [ 334.869795][T14212] syzkaller0: entered allmulticast mode [ 334.915773][T14206] tipc: Resetting bearer [ 334.957787][T14205] tipc: Resetting bearer [ 335.028521][T14205] tipc: Disabling bearer [ 355.417716][T14229] netlink: 'syz.3.2222': attribute type 11 has an invalid length. [ 355.641441][T14238] lo speed is unknown, defaulting to 1000 [ 355.648058][T14243] netlink: 'syz.3.2226': attribute type 1 has an invalid length. [ 355.679989][T14243] __nla_validate_parse: 5 callbacks suppressed [ 355.680012][T14243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2226'. [ 355.727143][T14243] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 356.098904][T14264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2232'. [ 356.119945][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2232'. [ 356.237174][T14269] openvswitch: netlink: Missing key (keys=40, expected=100) [ 356.276156][T14264] macvtap0: entered promiscuous mode [ 356.286225][T14264] macvtap0: entered allmulticast mode [ 356.383136][T14275] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2235'. [ 356.580316][T14286] netlink: 'syz.4.2236': attribute type 10 has an invalid length. [ 356.602506][T14280] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 356.975953][T14310] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2242'. [ 357.036840][T14314] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2243'. [ 357.055006][T14314] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2243'. [ 357.075974][T14310] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2242'. [ 357.529065][T14335] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2248'. [ 357.627877][T14337] netlink: 'syz.5.2249': attribute type 3 has an invalid length. [ 357.652659][T14337] netlink: 'syz.5.2249': attribute type 3 has an invalid length. [ 357.671398][T14346] tipc: Failed to remove unknown binding: 66,1,1/4269801492:2441535658/2441535660 [ 357.681349][T14337] netlink: 'syz.5.2249': attribute type 3 has an invalid length. [ 357.685305][T14346] tipc: Failed to remove unknown binding: 66,1,1/4269801492:2441535658/2441535660 [ 357.690241][T14337] netlink: 'syz.5.2249': attribute type 3 has an invalid length. [ 357.708052][T14337] netlink: 'syz.5.2249': attribute type 3 has an invalid length. [ 357.718780][T14337] netlink: 'syz.5.2249': attribute type 3 has an invalid length. [ 357.725461][T14346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2251'. [ 357.739453][T14337] netlink: 'syz.5.2249': attribute type 3 has an invalid length. [ 358.253391][T14382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.260798][T14382] IPv6: NLM_F_CREATE should be set when creating new route [ 358.268248][T14382] IPv6: NLM_F_CREATE should be set when creating new route [ 358.275580][T14382] IPv6: NLM_F_CREATE should be set when creating new route [ 358.331925][T14382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.296808][T14427] tc_dump_action: action bad kind [ 359.363229][T14433] sctp: [Deprecated]: syz.2.2272 (pid 14433) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.363229][T14433] Use struct sctp_sack_info instead [ 359.460312][T14440] macsec0: entered promiscuous mode [ 359.501146][T14440] macsec0: entered allmulticast mode [ 359.693930][T14452] siw: device registration error -23 [ 360.357451][T14493] openvswitch: netlink: Flow actions attr not present in new flow. [ 360.797270][T14521] __nla_validate_parse: 44 callbacks suppressed [ 360.797294][T14521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2297'. [ 360.826126][T14515] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 360.895389][T14523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2297'. [ 361.000758][T14523] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 361.084198][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2297'. [ 361.416407][T14548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2303'. [ 362.048435][T14578] validate_nla: 44 callbacks suppressed [ 362.048463][T14578] netlink: 'syz.5.2313': attribute type 1 has an invalid length. [ 362.116157][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2315'. [ 362.380650][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2318'. [ 362.425302][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2321'. [ 362.451232][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2321'. [ 362.539716][T14601] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 362.626678][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'. [ 363.622831][T14645] openvswitch: netlink: IP tunnel TTL not specified. [ 363.649992][T14644] netlink: 'syz.3.2330': attribute type 1 has an invalid length. [ 363.686777][T14644] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2330'. [ 363.844617][T14656] netlink: 'syz.2.2333': attribute type 1 has an invalid length. [ 363.859327][T14659] netlink: 'syz.2.2333': attribute type 1 has an invalid length. [ 363.900568][T14656] bond9: entered promiscuous mode [ 363.907059][T14656] 8021q: adding VLAN 0 to HW filter on device bond9 [ 363.945297][T14646] netlink: 'syz.3.2330': attribute type 1 has an invalid length. [ 364.490580][T14689] netlink: 'syz.3.2342': attribute type 11 has an invalid length. [ 364.497656][T14694] 8021q: VLANs not supported on lo [ 364.517002][T14694] netlink: 'syz.6.2344': attribute type 83 has an invalid length. [ 364.771178][T14714] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 364.779522][T14714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.971498][T14726] netlink: 'syz.3.2352': attribute type 1 has an invalid length. [ 365.055263][T14729] netlink: 'syz.2.2353': attribute type 33 has an invalid length. [ 365.750787][T14756] netlink: 'syz.3.2359': attribute type 28 has an invalid length. [ 365.770643][T14756] netlink: 'syz.3.2359': attribute type 3 has an invalid length. [ 365.772910][T14758] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 365.808053][T14762] __nla_validate_parse: 9 callbacks suppressed [ 365.808078][T14762] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2359'. [ 365.925616][T14768] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2363'. [ 365.945511][T14768] nbd: couldn't find device at index 1048576 [ 366.118601][T14775] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2365'. [ 366.499916][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2374'. [ 366.598445][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2375'. [ 366.626085][T14799] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2375'. [ 366.690272][T14804] bond0: left allmulticast mode [ 366.704815][T14804] bond_slave_0: left allmulticast mode [ 366.721509][T14804] bond_slave_1: left allmulticast mode [ 366.728917][T14804] bridge_slave_1: left allmulticast mode [ 366.746999][T14804] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 366.864199][T14804] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 366.883336][T14786] infiniband syz0: set down [ 366.915935][T14804] ip6erspan0: left allmulticast mode [ 366.923116][T14786] infiniband syz0: added ipvlan1 [ 367.005193][T14804] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 367.203059][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2380'. [ 367.206352][T14786] RDS/IB: syz0: added [ 367.237257][T14786] smc: adding ib device syz0 with port count 1 [ 367.275000][T14786] smc: ib device syz0 port 1 has pnetid [ 367.425324][T14838] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2382'. [ 367.466896][T14838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.474253][T14838] IPv6: NLM_F_CREATE should be set when creating new route [ 367.744983][T14853] validate_nla: 6 callbacks suppressed [ 367.745006][T14853] netlink: 'syz.5.2386': attribute type 3 has an invalid length. [ 367.765558][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2387'. [ 367.784134][T14852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2387'. [ 368.270303][T14863] IPVS: Scheduler module ip_vs_sip not found [ 368.419412][T14868] netlink: 'syz.3.2393': attribute type 2 has an invalid length. [ 368.463668][T14868] macvlan0: entered promiscuous mode [ 368.484263][T14868] batadv_slave_1: entered promiscuous mode [ 368.494320][T14868] debugfs: 'hsr0' already exists in 'hsr' [ 368.517333][T14850] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 368.547179][T14868] Cannot create hsr debugfs directory [ 369.682420][ T31] INFO: task syz.0.1033:9843 blocked for more than 143 seconds. [ 369.722121][ T31] Not tainted syzkaller #0 [ 369.727163][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.766603][ T31] task:syz.0.1033 state:D stack:25864 pid:9843 tgid:9841 ppid:5873 task_flags:0x400140 flags:0x00004004 [ 369.815953][ T31] Call Trace: [ 369.831731][ T31] [ 369.834831][ T31] __schedule+0x1798/0x4cc0 [ 369.853923][ T31] ? __lock_acquire+0xab9/0xd20 [ 369.870912][ T31] ? __lock_acquire+0xab9/0xd20 [ 369.890821][ T31] ? __pfx___schedule+0x10/0x10 [ 369.914885][ T31] ? schedule+0x91/0x360 [ 369.930423][ T31] schedule+0x165/0x360 [ 369.942952][ T31] schedule_preempt_disabled+0x13/0x30 [ 369.958698][ T31] __mutex_lock+0x7e6/0x1350 [ 369.974073][ T31] ? __mutex_lock+0x5bb/0x1350 [ 369.991446][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 370.007463][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.018244][ T31] ? __asan_memset+0x22/0x50 [ 370.028488][ T31] ? ____sys_sendmsg+0x505/0x830 [ 370.039227][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 370.052165][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 370.060830][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 370.073453][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 370.085367][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 370.098643][ T31] ? __nla_parse+0x40/0x60 [ 370.118789][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 370.129707][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 370.138763][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 370.149135][ T31] ? bpf_lsm_capable+0x9/0x20 [ 370.157501][ T31] ? security_capable+0x7e/0x2e0 [ 370.166695][ T31] genl_rcv_msg+0x60e/0x790 [ 370.171350][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.179927][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 370.190078][ T31] netlink_rcv_skb+0x208/0x470 [ 370.198161][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.211068][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.220326][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.235370][ T31] ? down_read+0x1ad/0x2e0 [ 370.239979][ T31] genl_rcv+0x28/0x40 [ 370.247249][ T31] netlink_unicast+0x82f/0x9e0 [ 370.256160][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 370.264944][ T31] ? netlink_sendmsg+0x642/0xb30 [ 370.270006][ T31] ? skb_put+0x11b/0x210 [ 370.278293][ T31] netlink_sendmsg+0x805/0xb30 [ 370.286405][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.295796][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 370.300865][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 370.309453][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.318302][ T31] __sock_sendmsg+0x219/0x270 [ 370.324497][ T31] ____sys_sendmsg+0x505/0x830 [ 370.329414][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.335734][ T31] ? import_iovec+0x74/0xa0 [ 370.340386][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 370.346186][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.352318][ T31] ? __fget_files+0x2a/0x420 [ 370.357076][ T31] ? __fget_files+0x3a0/0x420 [ 370.362591][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 370.367732][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.373675][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.378704][ T31] ? do_syscall_64+0xbe/0x3b0 [ 370.384234][ T31] do_syscall_64+0xfa/0x3b0 [ 370.388927][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.394469][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.400698][ T31] ? clear_bhb_loop+0x60/0xb0 [ 370.406344][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.413270][ T31] RIP: 0033:0x7fe3e3d8eec9 [ 370.417839][ T31] RSP: 002b:00007fe3e4c9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.431108][ T31] RAX: ffffffffffffffda RBX: 00007fe3e3fe5fa0 RCX: 00007fe3e3d8eec9 [ 370.448837][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 370.457913][ T31] RBP: 00007fe3e3e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 370.475452][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.485978][ T31] R13: 00007fe3e3fe6038 R14: 00007fe3e3fe5fa0 R15: 00007ffc9e0b2988 [ 370.498765][ T31] [ 370.516758][ T31] [ 370.516758][ T31] Showing all locks held in the system: [ 370.574993][ T31] 1 lock held by khungtaskd/31: [ 370.579918][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 370.597870][ T31] 3 locks held by kworker/u8:11/3557: [ 370.606954][ T31] #0: ffff888145ebd148 ((wq_completion)gid-cache-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 370.619425][ T31] #1: ffffc9000b9f7bc0 ((work_completion)(&ndev_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 370.632681][ T31] #2: ffffffff8f28c970 (devices_rwsem){++++}-{4:4}, at: ib_enum_all_roce_netdevs+0x8c/0x160 [ 370.643778][ T31] 2 locks held by getty/5628: [ 370.648501][ T31] #0: ffff88803031b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 370.659632][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 370.679609][ T31] 2 locks held by syz.1.625/8137: [ 370.687590][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 370.701419][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 370.718734][ T31] 2 locks held by syz.0.1033/9843: [ 370.727534][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 370.743158][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 370.758576][ T31] 7 locks held by syz.6.2370/14786: [ 370.766166][ T31] 3 locks held by syz.3.2400/14897: [ 370.777778][ T31] #0: ffffffff99e70958 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 370.800688][ T31] #1: ffffffff8f29a190 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x341/0x5a0 [ 370.818794][ T31] #2: ffffffff8f28c970 (devices_rwsem){++++}-{4:4}, at: ib_register_device+0xb0/0x1380 [ 370.829421][ T31] 2 locks held by syz.5.2401/14902: [ 370.841021][ T31] #0: ffffffff8fa58a28 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 370.851502][ T31] #1: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 370.869424][ T31] [ 370.873821][ T31] ============================================= [ 370.873821][ T31] [ 370.890953][ T31] NMI backtrace for cpu 1 [ 370.890988][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 370.891014][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 370.891027][ T31] Call Trace: [ 370.891036][ T31] [ 370.891046][ T31] dump_stack_lvl+0x189/0x250 [ 370.891081][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.891115][ T31] ? __pfx__printk+0x10/0x10 [ 370.891162][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 370.891198][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 370.891234][ T31] ? __pfx__printk+0x10/0x10 [ 370.891270][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 370.891311][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 370.891349][ T31] watchdog+0xf93/0xfe0 [ 370.891387][ T31] ? watchdog+0x1de/0xfe0 [ 370.891426][ T31] kthread+0x70e/0x8a0 [ 370.891458][ T31] ? __pfx_watchdog+0x10/0x10 [ 370.891488][ T31] ? __pfx_kthread+0x10/0x10 [ 370.891518][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.891540][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.891566][ T31] ? __pfx_kthread+0x10/0x10 [ 370.891595][ T31] ret_from_fork+0x439/0x7d0 [ 370.891620][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 370.891650][ T31] ? __switch_to_asm+0x39/0x70 [ 370.891678][ T31] ? __switch_to_asm+0x33/0x70 [ 370.891705][ T31] ? __pfx_kthread+0x10/0x10 [ 370.891734][ T31] ret_from_fork_asm+0x1a/0x30 [ 370.891781][ T31] [ 371.034031][ T31] Sending NMI from CPU 1 to CPUs 0: [ 371.039322][ C0] NMI backtrace for cpu 0 [ 371.039342][ C0] CPU: 0 UID: 0 PID: 1096 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 371.039364][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 371.039378][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 371.039406][ C0] RIP: 0010:lockdep_hardirqs_on_prepare+0xb7/0x2a0 [ 371.039438][ C0] Code: a5 01 00 00 65 8b 05 24 d5 03 11 85 c0 0f 85 c8 01 00 00 65 48 8b 1c 25 08 e0 a0 92 48 8b 83 e0 0a 00 00 48 89 83 c8 0a 00 00 <48> c7 c7 83 e0 9c 8d e8 7d 4a dd 09 65 ff 05 26 d8 03 11 83 bb e8 [ 371.039455][ C0] RSP: 0018:ffffc90003d4f700 EFLAGS: 00000046 [ 371.039470][ C0] RAX: 35556217360ceb45 RBX: ffff88802693da00 RCX: 4b57d5fed78e9a00 [ 371.039484][ C0] RDX: 0000000000000000 RSI: ffffffff8be33f60 RDI: ffffffff8be33f20 [ 371.039504][ C0] RBP: ffffc90003d4f830 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506 [ 371.039518][ C0] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: dffffc0000000000 [ 371.039531][ C0] R13: ffff8880b8636310 R14: 0000000000000200 R15: ffff8880b8636360 [ 371.039545][ C0] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 371.039560][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.039573][ C0] CR2: 00005555865275c8 CR3: 0000000078fd6000 CR4: 00000000003526f0 [ 371.039589][ C0] Call Trace: [ 371.039596][ C0] [ 371.039606][ C0] trace_hardirqs_on+0x28/0x40 [ 371.039632][ C0] crng_make_state+0x34c/0x700 [ 371.039659][ C0] ? crng_make_state+0x13a/0x700 [ 371.039684][ C0] ? __pfx_crng_make_state+0x10/0x10 [ 371.039716][ C0] _get_random_bytes+0xd5/0x210 [ 371.039739][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 371.039778][ C0] nsim_dev_trap_report_work+0x6ac/0xb80 [ 371.039808][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 371.039827][ C0] process_scheduled_works+0xae1/0x17b0 [ 371.039861][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 371.039889][ C0] worker_thread+0x8a0/0xda0 [ 371.039922][ C0] kthread+0x70e/0x8a0 [ 371.039946][ C0] ? __pfx_worker_thread+0x10/0x10 [ 371.039964][ C0] ? __pfx_kthread+0x10/0x10 [ 371.039988][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.040005][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.040023][ C0] ? __pfx_kthread+0x10/0x10 [ 371.040047][ C0] ret_from_fork+0x439/0x7d0 [ 371.040068][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 371.040089][ C0] ? __switch_to_asm+0x39/0x70 [ 371.040120][ C0] ? __switch_to_asm+0x33/0x70 [ 371.040143][ C0] ? __pfx_kthread+0x10/0x10 [ 371.040166][ C0] ret_from_fork_asm+0x1a/0x30 [ 371.040200][ C0] [ 371.050719][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 371.050748][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 371.050777][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 371.050795][ T31] Call Trace: [ 371.050807][ T31] [ 371.050819][ T31] dump_stack_lvl+0x99/0x250 [ 371.050856][ T31] ? __asan_memcpy+0x40/0x70 [ 371.050889][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.050919][ T31] ? __pfx__printk+0x10/0x10 [ 371.050972][ T31] vpanic+0x281/0x750 [ 371.051005][ T31] ? __pfx_vpanic+0x10/0x10 [ 371.051033][ T31] ? preempt_schedule+0xae/0xc0 [ 371.051062][ T31] ? preempt_schedule_common+0x83/0xd0 [ 371.051097][ T31] panic+0xb9/0xc0 [ 371.051124][ T31] ? __pfx_panic+0x10/0x10 [ 371.051156][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 371.051200][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 371.051243][ T31] watchdog+0xfd2/0xfe0 [ 371.051285][ T31] ? watchdog+0x1de/0xfe0 [ 371.051328][ T31] kthread+0x70e/0x8a0 [ 371.051374][ T31] ? __pfx_watchdog+0x10/0x10 [ 371.051409][ T31] ? __pfx_kthread+0x10/0x10 [ 371.051443][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.051466][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.051492][ T31] ? __pfx_kthread+0x10/0x10 [ 371.051524][ T31] ret_from_fork+0x439/0x7d0 [ 371.051554][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 371.051594][ T31] ? __switch_to_asm+0x39/0x70 [ 371.051627][ T31] ? __switch_to_asm+0x33/0x70 [ 371.051659][ T31] ? __pfx_kthread+0x10/0x10 [ 371.051695][ T31] ret_from_fork_asm+0x1a/0x30 [ 371.051746][ T31] [ 371.451246][ T31] Kernel Offset: disabled [ 371.455590][ T31] Rebooting in 86400 seconds..