last executing test programs: 5.813405085s ago: executing program 4 (id=2857): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 5.58180514s ago: executing program 4 (id=2860): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)={0x100, 0x9, 0x6, 0x301, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x80, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7f}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0x20040090}, 0x44800) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4c8a1d469a3db1f5}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xb}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x840) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78}}], 0x2, 0x3404c8d4) (async) sendmmsg$inet6(r6, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78}}], 0x2, 0x3404c8d4) preadv(r3, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000640)=""/19, 0x13}], 0x2, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x1000000c}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000140)) (async) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x7, 0x7, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', r7, r8, 0x2, 0x1, 0x3, 0xd}, 0x50) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) (async) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) 5.313237457s ago: executing program 4 (id=2863): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090605df0000800000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaaaaaaabaa0000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) accept4(r1, 0x0, 0x0, 0x80000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000580)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000440)="18349ff0707314657eaa8c2904dd1d1d86dd", 0x12, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xff}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r13, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0xa}}}}]}, 0x44}}, 0x840b0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x2, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0xb}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc090) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r3, 0x0, 0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) 4.840862883s ago: executing program 4 (id=2871): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000300)=0x1, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0xfffffffffffffee5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 4.653359839s ago: executing program 4 (id=2875): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 4.520934144s ago: executing program 4 (id=2879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x22}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c1}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x134, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x100, 0x3, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xea, 0x2, "8563412ef1ef95826d8ef154a01676f9daa4f25418581d8ea8a6d45f96bdb259eaacd25a48f5d65f4d87865038fc4c6407800a4050cca02122a775eb287f8cef38ba4485d7a72b92795da1484ed1112c78210866e1b3031ccc1de7aa79861083403661b439278d02fc79cddc39d5261bb24afeb390b32c88b8cb54ae4e458283d9eb372a860d42fded7a15c54164a806977670b940a3965ca96300db45733efbb526c3ee9c0f1ae535d39e54b4f82a676659d34fdc7276126dcefc0d287397869addc022fa5cba7a6f1eab068d841fb9ea234f68e6235ddc18ad65ee27776310e7a622fcf6be"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000003c0)={@remote, 0x0}, &(0x7f0000000400)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@loopback}}, &(0x7f0000000540)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)=@allocspi={0x160, 0x16, 0x200, 0x70bd2c, 0x25dfdbfd, {{{@in=@multicast2, @in=@private=0xa010100, 0x4e20, 0x1, 0x4e20, 0x0, 0xa, 0x20, 0x0, 0x32, r4, r5}, {@in6=@local, 0x4d4, 0x3c}, @in=@dev={0xac, 0x14, 0x14, 0x27}, {0x8, 0x2, 0x10000, 0x9, 0x0, 0x4dc, 0x5, 0xffffffffffffff48}, {0x6, 0xfffffffffffffff9, 0x9, 0x10000000000000}, {0xc0d, 0x7, 0x3}, 0x70bd2b, 0x3506, 0x2, 0x2, 0x3, 0x84}, 0x6, 0x9}, [@algo_auth={0x67, 0x1, {{'xcbc-aes-neon\x00'}, 0xf8, "2cfdea6a8c1c98f3ec118577f5b8331d0d176b890a45583d542d8283ce098f"}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20048804}, 0x200040c0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000780)={0x0, 0x1}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000800)={r7}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000840)={0x1ff, 0x8009, 0x0, 0xa, r7}, &(0x7f0000000880)=0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000008c0)="45eaae74ddf42e13a9be85e6a88e5919fa458970d784bd58df9bc7a9311fe9a297ddbaf3615f0bf0bb5ce65dc24502aed1181c9d509b7163aaf3e526f90acc531d196dddb966d90c3ca0c077bab3576031242daa257b1ed5b35c4df09e8d42da588ef0635a1c91", 0x67) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000a40)={r3, &(0x7f0000000940)='xcbc-aes-neon\x00', 0x42080, &(0x7f0000000980)={@align=0x10, {0x6, 0xb440, 0x7fff, 0x5}}, 0x148, &(0x7f00000009c0)={@_ha_fsid}, &(0x7f0000000a00)=0x2}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000a80)={r8, 0x1, 0x200}, &(0x7f0000000ac0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000b00)={r8, 0x1000, "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"}, &(0x7f0000001b40)=0x1008) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000001d40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001bc0)=@report={0x114, 0x20, 0x8, 0x70bd2b, 0x25dfdbfd, {0xff, {@in=@empty, @in6=@private0, 0x4e21, 0x1, 0x4e20, 0x0, 0x2, 0x20, 0x80, 0x33, 0x0, r5}}, [@policy_type={0xa, 0x10, {0x1}}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x0, 0xa}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e21, 0x4e20, @in6=@loopback}}, @algo_auth_trunc={0x6c, 0x14, {{'sha256-neon\x00'}, 0x100, 0xc0, "1c5d17c9cced71c87e4f66a61fe2352d5d0dbcf66edd0e96c4c396d9555e38ee"}}, @proto={0x5, 0x19, 0x2b}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x44040000) sendmsg$nl_route(r9, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)=@ipmr_delroute={0x94, 0x19, 0x214, 0x70bd28, 0x25dfdbfb, {0x80, 0x10, 0x80, 0x8, 0xfc, 0x3, 0xc8, 0x8, 0x3100}, [@RTA_METRICS={0x66, 0x8, 0x0, 0x1, "4a75e1084d055c52572b073ef1d67d3da582aeef539872a4389d9d48ebb21c0dac40dcd89c65dc044e977faca567649947ea94db10f43118c76f8a5246bd75373efccd83bfa67bbabe3f141e0c7032156185a6839967659b4029a17572baffbeab70"}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010100}, @RTA_UID={0x8, 0x19, r5}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_route_sched(r9, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)=@getchain={0x4c, 0x66, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0x1}, {0xfff1, 0x4}}, [{0x8, 0xb, 0x7f}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x3}, {0x8}, {0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c811}, 0x4044844) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000002040)={r10}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000002080)={r7, 0x9703, 0x661}, &(0x7f00000020c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000002100)={r10, 0x0, 0x3, 0x4, 0x8001, 0x7}, &(0x7f0000002140)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000002180)={r12, 0x7, 0x30}, &(0x7f00000021c0)=0xc) ioctl$SIOCGIFHWADDR(r9, 0x8927, &(0x7f0000002200)={'netdevsim0\x00'}) sendmsg$xdp(r9, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000002240)="d874611ec5cdec01f7397b8231f1564f3313cb5c39fc56747ee3a21ae3925c964036b705df83124a548d2cee053408960ee4c917e3af8d7a3f3b37", 0x3b}, {&(0x7f0000002280)="f7658e5b3fe753cca4bb7cb0a89cc5a0c4e636af611be8fb29fbd33dcb46ddf736aa8cb2a4babca9f6e45ee24a083772d4bdd8fc63c2e87a08bcde92551c0139ed6c5dcf6e981e590c9febb354d5acb4a9f0977f46c9900dd38c", 0x5a}, {&(0x7f0000002300)="895aea30264b", 0x6}], 0x3, 0x0, 0x0, 0x4040800}, 0x90) accept4$llc(0xffffffffffffffff, &(0x7f00000023c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000002400)=0x10, 0x800) 1.796711685s ago: executing program 2 (id=2921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x14000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x10}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r1, 0x24, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e98}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc4}, 0x4001) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000002c0)={{r2}, "0bab7ab2c7c58154277aeacf382edc7f83e4853a042b91523f74dbf3c6bf508db3050709315ba65231f1fdb60023239713473e83528eb0dffaf31451e9488e277546a116dd3158d2198c63b765cc422ff145a651144234163899c1bd963cc736eed74dcf4ee4cf5a002050cabcc3006b591747847c266e6975d82a11b026bdf8c85db9720b486edf497467bc0c0fc3aecf8a62cd902cb857389d2f1f569cb721c2122592559185ef9e1421c57935207516b2ffadf5c338f28f9fb1b06a7ff177f30d0147a6e04deb31dbd47d7633148aa408eba80dfaeedf7c3066ce9b42bb19fb9b991f7547c731c3f12bcc61b6fa30a6b9ed494ef173aeb62bc1166555306994abeae0f5ef57a0f75d2a73fd4687d9239dcd866c81e5fd4d54728ecebddbca56dd1064e49cf383f38a9ad94bf44e0084b8810bc9b4b2ef0dda0912b5e7c4f76c1da35aeb4f55d82704e688a1c351c0c2d62b741bed1c0b40b4fdddfa8e728c8b96f30d5d95665f343e4ff7798fc3a5d356066fc2c81713e4b09a42d16155c7e531cf8326df14a0172b8fc9118710be1ad02aeb24cdb3e88260c73f8f806c455f0f5f9d99c8bcbe79eacae556923bd14dc646dea26835a256e238a7d84390e64900f3d98a2ea01c3576dcd2263b56e076392e0a822db235570d1a659168f5e27f8e0974074ed4df51661785b2545c65d595fa651fd9f6ac05a84c0ddf829c48215d49ffb65064386a3ac548767a169eaa4378684ee355ea9b797c40bfed1d7ccf71ae7bb255883dac63339f21f971ec0bf91c3eeecd3017ecb761b64cfbd8ced304b91285b76570735df721984a01d79a8746dc1b8e2cb210ae7bc77087005c6b3d89f2399d4243852b84350cd60df67110d0f839eee8a6d4103116b7c91c77aadb6038cb691b4905e1679a65f5f9680e24b52212d7be0e942c7d78129fae8605bbe6071d7da0cc74e6172d0bd1b05d8b066074e0cddff5573aa860221ec929a89a9594c271c236c2a6adf46ad8aeeafd90856f00f89815f460888df8e4331e3e30ab3952f10cfbaabfc926755416c46ce15b99a1c0a60d7c80856e216a761f77fa2850f6a4c895c1276dc64300f8b3fb210b3fc2ee43f3d71beb30c868f209abab8b1e489cce86c56ff7f373d377c185bb1abb75a035046e1231cfe1dd126d88a4199185b6fff3081884c26d462b7f88c04d0703f8651c9c35735d77c9b3958285673bcb722e230f3a21780ef76023f938c4f6731f9a9098f7ba52f3e7a164d38175b5942c72db316ee97d0a06caa12f2ce72aec7d5829230ef41c812aec6585b27fa17267b0e5137ab41e3b6460715c303002f53988e18172c312bb7e5e3bf37e14bd0a472c1333a73221efe5c39c80ae0a585dda85a7e75ce87f56bfa0941bcd14ac4e1499b041842a991409a24eef681cd00605d98e5c72fe58a7e29a76d4cc7ff4615e7f1ff84665dc005d3bc3e5bed8cab82c461f78face4609d3e642b4eefb966e620b796ab4ee126b1e496943d9b50e4bfad22693e0d5885c68b6f64f8e2f220a4a7f866b8598e4243e42e8028309386b7b62059b552564450a8f4ddcd2c003576731d057617dead88d675dd9faedb61f205dca9d8c7be0652b743095a8b3764cfb5d47f3cc96db4c64d4ac5defbf6383c4435e9392253678e3d49da5e93e6ce152edcc871b308c66820186eccc8e9a2f9e19c0938e4224a63cc1cbafe6236a9f377d0d0d06a8d0e8c974cf4cc4764dacf2ed012365bde9eb0c5c6d78e0e6d5c179238a894ef74e744f28afb8d1ef26840d232ddcbefd3d39c28fa80ad570394da7d24e7574a00a2a5840257d35415fc24153d75aa0a787fac986e35e7b539b3c7b6308c526ef381eb8bee3d2395efb8f067800daf342e7f69e3d8799ef1307ff57f57ce55d074bdd732d22d8ab27d0e2b057fc07f0f3b94e9a5ebae22bd300dc3311242c091b68643dbd8a6ee81182f29b5b08ec43924552ca97130865193552eea7233a947feeb4dcecf9ebaf6329168100cb5a259c78b85fd15c517781441982b84c761855927ca3625d5ef3f04265466f8a01fa79a7561a18840c54085a0d5ec228fbb506501c075fbb0473dc968a3ac71505c7589bb7892d4750c17a0b791ece1e6f0de2c8efb5ae8c995f0ad3531aa347997d6b797860b4ae613872628e34f237a891dc39a19934ecd83ad86672d58854c038865c88889334a491f34ba7ef54877f8cc1976dbd66069268d4b175c1224a65aea545f8be4cdab1e7e6ad1028b7b984048c56f099ec2cf0b5bf190dd8e651efe3b5ae2d77ea01ef57a0892e62d04f436dcdf4178a5e4378bbf58b2d2252891efa4f253c4a7f7278697e80e5fd14c6bdda55fd649b33dbedbe73642f25143b03101cdc566ad33c881bd16d7396086b50f209c0b7fb47d4df5aafecc07c8753a29c7c9a9c0cf03f301ff648aa9617c7ec7ee45134be77f27ff90a277b6a295fb576956b7b9037f463b8e92892e782bbe29ba3a5ff8c368b371024fdd0bd7d62b194435aabc4535375d8cbeb2541e62a62c90ad1fc7ae7a07af0d2a100a8f486c5eab583756265e3d2fba4789defe2965a68086e25fc57e0f91bdf9f3e94f078ec3c76aca3ca2bdfe6783e952a994cac995cfc1994206d05aba10e6aba345594788242c5198041f60261ee0cc1e0265cc58feddf076d9d673730b763ca823a2af0eaf5c8be9d6ebcbfcc573206902b18af0d336eddfb2e52acd7650d865dfeeeb9ffc14c9ca123ccca00c672bc25a2fa980a5bf94f848dabe8afecb41ecb920f5c44ac585b15b52affb35b8b20d1a1b45dbe05e1d75a965f2841a1e9e3069f030a7ec4371bccd18058982f5d16238d64f334644948688a23a4c6e1ffa993b2dce07e145c04d1e98702b9553e7f880af47a0627c0fe0e22b247661b303294cbe825dc7060eb15fff3f4834ae0ffc3d1ef3bcc3bd18ad51e6956af922eb26505e75eb303c0f85344a8a1732658bd0cb36085cf0466625256c53ef14c91b0cde0e62904d5757a48cecf3d1d039c9fac6bfd2555bbe45e4d6d1a31dbc760e24a35e7944ceb76689ba242f92a7c5e521f09b9b7b181628625a40025937dcdf429da90c654532b2d29d5df39928475353e1782f34555b2e589ce1382891ad44ba37791de4eb989713a867c0388391b17ef1bd57c2939c3e2b9592ee5f53f88ae725bc0aface3422b56cc0fc9a6c186e7f7cc5cdd607c28d24ea7be3fcbfd5f822a5e91741011bbb41ca4123f76345596b2fe03ceea3fcb574ba5c9e2b2a516bb07dbac90f6a0c3cdef4e52d13daec5c6495bb766092da51e63077eedffabc64a29228666d137b762c1ca81213fd725163521e7830158034d2edf7bb9c670f6163b6e65f5c92ab02ab5a6cc9e0add71d296f843af33d5d2ef61e949bf10bf0444943330e8dbd83147c3304016d6536550c4e08f4f9dba1172bf7b9b5dd8c9baf34397f6f52e5e252cb1048b796329a76640d573ecc36ee74c9b2f808147fd3ea98bd28f04350b6f332780d1757096dbb472ff3d21cc2dc0f70fa1bdadbaec049d511a0bc072f2f760517618fa3d274518d98b0acde21bc13d59a979e62eb448e4e5e6855c9eac18caf51b71bf053eb9842425f79bd00a604041c88cc22b2b532028c15b487b429ae00d75a57c3e3ec6e75cbc396b96d8781e634f7693732691cb664d66362a414871efe460171d5dc1ead88d16bbca1b801fede56e48033f81b8c9110165985e5dd436b6e2340e04f07e202fe96b1c8a29bf4d68ed32b93a10069e7f1d1f2094c1e7ef55decd0af0bfc715836ffc24ad6206652d87efa90506cb55ac3f43535eb265b6681c0e843187c6a7a31dc5fa94c0778377427cc5f5d9754726ff78c238e8301b6a6d9e85e49deb1489f8e4c01a6abca042b1ac3dd17826e95994890c42955b99519be729193e23a70ad1bd42d4781c05519bac780a1c6ff369515f210e48eb1239e20b6ba3ea87fb67dacbb25192a298099dfbd9d9895cfbb60345555a7c9ac6becb15fb4742423bfe3e85813e2554393c5b9abbc6ec39431c6be54fd803cfeb73181c55fa0e8998c32ac6b253139718ae232b147cdfec49690227cc86cf9dc4ff25e47c58d633b7cde0eca464b5a879ff9894da24bff85acdc0e00ce057190d9f392ae17e015a6156e5274cc5b225ef6d43de78d13be8ea9be94034db0f24d0e64ec7c7ce1b3bec3c30409c56abe1453122e37e7b48c2350c98e7efabbf761d50154c5937c8706d8ad6334e9428491a652a7e5d8928311e4572d3bcf1612eede0588800a2213d0679a931431eb455d634af74b1e30c81ba9d00ff1b6701292090cbffd61f705d44675615cd085be31a93bb2a09a94d76598a6c10d72184ba226a7e0e91b58efb5c38d7cf7315518b3c836b850200e4935d46bfb077799f77ca523798c201dfc6c44dea4e0010155d78645a46d19edef3701d1fc972cb1d09b3896d2969ce0004114005d2312dc6106551c2500fd078fef512155b2f3f44c31e1e7cd6d2a00c1cb4933956b884febb688333ac51734a67a7c78c10689536a2094f85603b3abb13750057b45bb5fbfd093e2e51074887e44deea2c89ef92ae197276631e86ffa69f21e78b471196a0cde0a83ce87693d66ef8aaaf6c70f7b179ff832346e1c503eb58d4296801ef7c65b75cf018d066e77ea45bcfc8ff6836bbef34333a638aab424d863fb94dbdf84a0630c90f5af95b78344df194db539774d8831400ea69462ff516f2d2a41de24fcd417bce00adb7855f0c1e4120871ebdcd86a949f40238c9e2e040185ef95a4c866ffafa2de70d33016ad0b5d48fb28975b70c5eabb25d95b4ae9d11a056db51251844702f32afcbb15865a2cadc78cce3067be975213b3fd3497979955937eff79b9379dbfd94f381f79882fbb53e92f80a088a75ffce22bd18e3f637b2d4e512d7a9adc1b26047c7728233a2a52bffd2f23aba9dd7c3fb12dda462d54a2a4e130bb4155a8675537b2fe8494c93278ab1735644c89c49fbcd5b1f6bc79356a85e2d6ab05aa043ada9fce76718f43c8acaa3c97d0a8425bb41a8659533bd8c89ce0d6c1aeeefbe0c0bdbf53a75352fdd5b6af66c8bd1f02425a772dad76ff53dc77068ec937d8b3a871252b1e8b6fcc05555c175e0247e2f1fe220502c65e48208b4c1c78abc2de2a9f2e1f698619b6359466d5cf133bb53b862b7a14b82c16bb5285796e37327f64c85ac1f39ebf9020915f16fc90ef863592e5f9707e3904103ab669be7ce670fabde40e1039cc5ed136117b397d859e9d226e7a994519cb4e89c7712785536c004a9b010b8084e0d8bf56e468dd1f3845814a5a50013bb711bf7f337b22dc7252c7880a867217c0c35d068ee262c41be87009b60993859afbdec487d797f16b6749e5198cf31c3fba0b4311e5c1bd7a3b3153292c6c8d4c07dbfc43e0588d8f4956e325527e1d6ff00311be30a957edfe3971316c12603007588437d005240f8dec513e3d298e9f4b0fac75ab1a768d41ea07a54a1651cb41d456e91ecd793128aefbb1fc86311c3b63bff3542260e7b78d9ac3fb480bba1941255b8564cabff91aa079304d2f799eec939420039a31d1d4f58402d2c3bc64374d4020d8084477f776f702e16915dd7bce55aae209849fffbe69fea5de94c5d1e6b459a951b6b44b2dcbc3946db026be4eb12d4d5faeb7e91cb606783697315d0659d893dada4dcbdc7707188e0ae7787d17858ed6daa6e95e225f19f117397c95a44dbbb2fc3b62f9"}) r3 = accept4(r2, &(0x7f00000012c0)=@x25={0x9, @remote}, &(0x7f0000001340)=0x80, 0x800) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x81}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001480)="fe757e6c279260282d4caf074fedd44ecefc12246ee1500220a476e041164d45e070c9a8ed19a5670d1a71484def30a00cf1a47b5cccf9b642a3f600140f729ec811c04fac4267bafa4399fc79be612989a12a9747016cc13324cd1e27f0175b13292ba6b5c7955f8c3cdfc64184efab2903ac38bde960ccc47611aa1055c6095728917303e9c71a0f6d32c54cf6411d9e449ee13c946bfed1978af86e5b2b78c24e4bf7ce21d35a501ea9dc927d8b28cb3ee20e8ff13a417966d8f693ca1a991a2dc2190dfd4c440bbc3cbda59090363d49fb5e02c8fdceea06452e2382", 0xde}, {&(0x7f0000001580)="5ca73a27c92bb3e6ffa9b4c799803886ea0dc49468b1000b2aca596f01d5b24e1fc534a073dc2a918280398de6c2dae5d972c14c801fef72842fd45acd0a443ed20ed15517393e015a16a74c54767e4d38f40079f23db4f4f96baf86777dcfec1b9e1926774286f82dab9b4a2b613ddf9d68aa6d79bb99e2a93f4bf8fff07d65ed601dec6a615378c0be901a70fcd175554e872b19925459a7dd59f78eb3694916964059c184919e986b96ade218826d8e76d193dcf20b9106e429c72d6056fa1913f38b1e9df09ed055f4f71439c03d9434ff517872890e9b4c75a027eb3c4f8a8d943bdc", 0xe5}, {&(0x7f0000001680)="63838efd0c01b1cb77341cf1a0d72791d698b4c5bd1e9a1eb6c713e4919fd774d464678e3d73aaee61f14b88e27c27ee49f8e12624173553225179ab68e1cd3d01b214ee2843431e83c4e561ac39171cf5d70e8e0c134c56106118e2a8185eac9721404f4fef09e4ea177538ed15c8deff181ca3eade82c68bf5c5c00e961e9933dd7967fa0b91510fd65039d6cd93b3078e25d1d80a5fb35e09903ccda2e9e592b08e38cd4ebe7a7811cefe3c6d82f8eea000a768b6dc413efd3ba0d1809f6ecaef2a48272fc05bee91f30d5277c635959880a51f80e1932edd2213fb96ed4f2a035de82857eaf724b05af5f8dfd0146bef7de50e704de9", 0xf8}, {&(0x7f0000001780)="c6e7d7ffc6ee628ef98fd2143ffbc24a7d9ba9155e0a0e93e3c41558da5deb3805b9bbe794c49ce4aa06dabcdebc9804a74f90706effccd3c3b9b636f83959c06d5b3ccd4698268b5fb24de2733630e16ae5a95b3415f746de09c25d70e19dd2e2aef144d459b27d9e1e435196526f63e1df770364f1c645c3e204d5658b253e3f63a1fcc788b3dfb62423646cd350892e720ea248638d4c7a3cac5ab0164377c415005e1633401c0b93b3f039261f55105bbd146d15670b5c43128d91884967e5387a6edc0f96ed541ee60415363f772ddd857599da7976a2c6f71bdbf907b86a50d86ff3e131e3ab07", 0xea}, {&(0x7f0000001880)="fbd84b9ccf9479968f75fb5dd8a6bdd758419cc4564c5891d3fc09eee1e0e5a237f06603583c30a6a347591dadf91b2ad53c1b0b012d48adcaa0bb75fc4683e7502f7f14f8c54ced79ee63120a5dd5d6f1b0242345402e40c3f4c4e8fd79f3cb2d38ab38e0e54b69920dc6b24aee9c6c01ca6cbdbbcea1beb8a4f552dfba", 0x7e}], 0x5, &(0x7f0000001980)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x4f, 0x0, 0x1, [0x0, 0xe26a, 0x6, 0x5, 0x1, 0x3e90, 0x0, 0x7]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0xcd, 0x3, 0x4, [{@rand_addr=0x64010100, 0x654c}, {@multicast1, 0x6}, {@remote, 0x9}, {@broadcast, 0x7fffffff}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x64, 0x0, 0x7, {[@generic={0x4a, 0x9, "249f72903784f8"}, @noop, @noop, @timestamp_prespec={0x44, 0x44, 0x2c, 0x3, 0x6, [{@multicast1, 0x5}, {@broadcast, 0x2}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffe}, {@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0x9}, {@multicast2}]}, @end, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x178}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000001b40)={'filter\x00', 0xd, "a386f024eca49d1d0d386e842b"}, &(0x7f0000001b80)=0x31) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c00)={0xd0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_FILTER={0x54, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x140}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x500}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x5a0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x497}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x209}]}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xa}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_MARK_MASK={0x8}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x44, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xffffffd9}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xb7}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4f}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x80}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x20044090) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000001d80)=""/64, &(0x7f0000001dc0)=0x40) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e40)={0xb8, 0x2, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xab}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x63}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x60000000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001fc0), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x28, r5, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000020c0)='ip6tnl0\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000002200)={'syztnl0\x00', &(0x7f0000002140)={'gre0\x00', 0x0, 0x80, 0x10, 0xa4b, 0x400, {{0x25, 0x4, 0x3, 0x0, 0x94, 0x67, 0x0, 0x4, 0x4, 0x0, @broadcast, @empty, {[@cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x1, 0x11, "a6e4dbd22b02177d5497fec8f76e5e"}, {0x2, 0x4, "3799"}]}, @ssrr={0x89, 0xf, 0xc2, [@multicast2, @dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x3a}]}, @timestamp={0x44, 0x1c, 0x89, 0x0, 0xd, [0x8, 0x2, 0x2, 0x5, 0x4, 0xba4]}, @ssrr={0x89, 0x2b, 0xb0, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x40}, @empty, @broadcast, @loopback, @local, @remote, @loopback, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0x1f, [@multicast2, @private=0xa010102, @empty]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002540)={0xffffffffffffffff, 0xe0, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000002280)=[0x0, 0x0], &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcf, &(0x7f0000002300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000002380), &(0x7f00000023c0), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000002400)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000002680)={'syztnl1\x00', &(0x7f0000002580)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x3, 0xfffffff3, {{0x2a, 0x4, 0x0, 0x7, 0xa8, 0x65, 0x0, 0x35, 0x29, 0x0, @local, @broadcast, {[@ssrr={0x89, 0x1f, 0x50, [@remote, @private=0xa010100, @private=0xa010100, @rand_addr=0x64010102, @remote, @local, @dev={0xac, 0x14, 0x14, 0x37}]}, @ssrr={0x89, 0x7, 0xfa, [@multicast2]}, @noop, @timestamp_addr={0x44, 0x14, 0x8c, 0x1, 0x2, [{@multicast2, 0x4}, {@multicast2, 0x101}]}, @generic={0x86, 0x10, "3e1682a75af1b1c5cdddcb191d8c"}, @timestamp={0x44, 0x18, 0xf1, 0x0, 0x0, [0xfffffffd, 0x6, 0x800, 0xfffffffc, 0xfffffffa]}, @generic={0x86, 0x8, "11d2d80684f2"}, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x0, 0x4, "900e"}, {0x7, 0xe, "9c75c36a22166b3df10f402e"}, {0x1, 0x10, "ca34e964217b95f25caee9086119"}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002e40)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002e00)={&(0x7f00000026c0)={0x70c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x27c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x20, 0x4, "b33c54f124877923ce00305337b49cf72844f886ea5d21462fefc481"}, @ETHTOOL_A_BITSET_MASK={0xd, 0x5, "1adca40875874e137e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe7, 0x4, "f1742686710f2bad018e81554a3220d9f2b50e8b3e9e2ebc448c827e24d0e94bea544645382543f9d2c7dff4332c2165549eaa9ec96e572c8d3b4b47c7ccd38214f44aea4c98efbe690c24dcc1b3e36db8985aed31f6673fa7c81805a0b7230c701090d82d1e4ef02a6599d1e5a0f4b38073b285eda5d8b31d62b04d7d71a7c474dda21970fcb37dd8ffb360d8b8741fd83006a00fc89097f3b980db1130fd8ecfecbcba1af98fc448e7b28f21b0e40ce376d08ed1a205016fde649b18b4827c40d5cffd888c31b85068b0615cea87522538e86a196514d31c542d6d943bc306b5e76e"}, @ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "0bcdfa05e2831f4aad3ef4488440feb31fe91a8dcc96dda4417e7189ff74354d1cecdd9d7351a8800032d8ad65759c78c2ee4633b821dab5e838efab38849e06289de365bf2b5f3a"}, @ETHTOOL_A_BITSET_MASK={0xe, 0x5, "fd997350ca5916ef133e"}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fe2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf977}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '7%!%,\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'filter\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\\\\'^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-\xd8{@}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}}!\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xc3,&Z)}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb3a8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2aa}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.@!*\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '$(![-%.\xf0(:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']+#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xba\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{[\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x94, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8d, 0x5, "4f025ee3b8b36acda25e32ccfecd8cb96e886f29b0731ccae3022d60bdad67f1bdb367ccda21b0f4f4ca9280b5205bf3ec641f8b9b36573f5ee84dc7a5d90cfb37307eb129ad8c40f772805d6241913aca2935bb77a2453d625015b863f9e2473f8265d8ee9d8a33446ab858e400075bc4fdac3f00b1e56a801d3e2ea278fccaf7ed7110369d973173"}]}, @ETHTOOL_A_FEATURES_WANTED={0x24c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '{*(+,#,$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "60ccf05a3e15571468617d1a9607fa520fc521ebe82b70d05c7fcc64445b5ff89be227eeeaf8080cf76951d14b835096a7b2a6961768fd3f1ef9284caea3db9453a56a40c2d1cf800c7f7767623c7d172f1b876bc4d55551cc22094af1d08dc3fddce0dbeb7df0e2dc2ab23a6fdb3177e011971b0b158057a2574bc51f8f98d261d6fcf4467686a508eaba0420966985493a84e8c7674596fc58b8ac60359853480387aa3050e55c9cbceb7c2f5f6bbd7944b847b7117f58ea25b920ab07c683"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "e31b0506"}, @ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "50c3cfbda8a3834d7417c531c951f126b3521e253c2c678ba1acad339d5041c1b92086f4ab823c167f3693d4e5aed01fb4eba1d2cedae5bcb8559a98ca882ebe3627189f943b95e51128868cb5bfd2ba638417ae290157ceae25bb76b2769467920244684e3398d41363447e59baf285c5036e5f98cf5ee62520611ec4bce42b0a129eb97bdc007de22c45d1d08c824bd432f87e1184357d39431d7cb8bb0b11e62adcb41994c7f6c9fa14ee5dc0d9072f3963aac3dd3c192ee0f54dd1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x8c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, ']@^&,\\\'-i!.%(>\x04@-.-($-%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '))&^}:\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x70c}, 0x1, 0x0, 0x0, 0x20000000}, 0x600c0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000002e80)) accept$inet6(r3, &(0x7f0000002ec0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000002f00)=0x1c) r9 = socket$netlink(0x10, 0x3, 0xf) sendmsg$DEVLINK_CMD_SB_POOL_GET(r9, &(0x7f00000030c0)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003080)={&(0x7f0000002f80)={0xfc, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7081}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x3ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0xc000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000003280)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003240)={&(0x7f0000003140)={0xd0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x10}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x80}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x10}, {0xc, 0x90, 0x9}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4045}, 0x8000) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000003740)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003700)={&(0x7f0000003300)={0x3f8, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99e6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd85}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x97c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0x230, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xdd, 0x3, "483cf5a7a90f68fec1bd5c9cb11c41f95a21ffb488935d4c518731070de934d560177d2e50714a5cb7086768e268516a5294738348a786dc63170c10498764629bd6390e373db9f3ad6517e41aff8cf8599f1e6bb93e4fcdbb8565d5f26aafc48c8a97971b0f00f97d5d41aa8a54321d57251cf8da9114173142b951d6ebfb6fe8721b8699c9ae6b1ee4061b67b156f514f036c982f3c383286bcc3a9aff5396d978270ea6863d0f5869c4a882933e247f08b4c76da042401b84d96d7dff08b5b9c6c2868b1930f593bf8fde090ae20f1f48bb8e5c5cbda310"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "085d70cab4f5650f404a2c211b3588c230e33ee048d88ed9f20789026159bd2e20990949abde67dfd79a877c2279dde57d2e8e70036b11a5b10aabe89d0c65713d7d0438583a78602b97e3461d627eebb85210d0f9280f3598889fe9e74f1fa403a424789f28ed949c82644896a18ed582a09f5bd8bea8e86e53a938515e15d940ff35ab31fcc7f3b9c38c9adecd0a2c542be8289e9324996f1273045a1dd9fdadcb94a5cae439edcb90b4eafe696db637f8f0db57dba7cc53c1df2256da6bb8ab6a6f20a223cd780d653556275c3e508dd9ae9cd6fea70e08b7569ff546ab7ecf18723293"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "b5cd0b0f263e09bba235b536f3bccc94544fc8e4520a292b8ea7abfd5778"}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb7e}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x32f}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000037c0)={&(0x7f0000003780)=""/55, 0x3000, 0x800, 0x101}, 0x20) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000003940)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003900)={&(0x7f0000003880)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 1.770830436s ago: executing program 2 (id=2923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8b1c}]}, 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r1, &(0x7f0000000080)='\'%.u(/%\x00', 0x5f1000, &(0x7f00000000c0)={@align=0x3, {0x7fff, 0x100, 0x100, 0xf}}, 0x8001, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x12}) write$tun(r3, &(0x7f0000000600)={@val={0x0, 0x9}, @val={0x7, 0x0, 0x8, 0x1000, 0xff, 0x3}, @ipv6=@icmpv6={0x3, 0x6, "61b533", 0x6ec, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x42}, @loopback, {[@fragment={0x67, 0x0, 0x88, 0x1, 0x0, 0x4, 0x65}, @routing={0x8, 0x6, 0x2, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @mcast1]}, @hopopts={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}]}, @hopopts={0x2, 0x20, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x17}}, @generic={0x0, 0xef, "f7bdd3c16bb442c6fd5ef8f84175f8c4f0e234f2e116d991dfec262260767b454dbae48fb25d3ba0420ebdb3f5ca081e54d5ae0ee43c3bb85f3f0e7118156de279d49c2643f98cf28ddcd365b425961f034abf1f9564904c9c2b1e1015587023a175781744d981aba8e5dc107ef32d13951b8f5da87268cbb20f28dcb21895cd9b5b4e1584ea76fcf8784d5bb04119180cdf26ba7d259c0dfdeb2a4946c29a3adf89ef3c65e42005d3cdfc954073d27d89f55852f1553cf371526b55df613e90d81648141f44d515bb68dd5c07ea71ad0fe5796ba08da36c9eb2e7aa7d456c1f32fe8e9a5f6104fa594d330dd17c6a"}, @pad1]}, @hopopts={0x84, 0x2f, '\x00', [@calipso={0x7, 0x58, {0x2, 0x14, 0x0, 0x3, [0xb, 0xc3, 0x7414, 0x5, 0xfffffffffffffff7, 0x7, 0x7fffffff, 0x9, 0x1, 0x6]}}, @generic={0x90, 0x21, "384e6967388a6bc9271424abed6f2b932c2c78474ad8d3d6af92b0c47648fde6c8"}, @generic={0x3, 0xe3, "f64a64cdcecd3a3ecb88911da707d3e2a9d69448ed849f257eea5a16a77535e752ee82e79d75f26e8a580e9330f08aad4708384a6c2dd0bd9f90e462c563690e775b2b5664ded6b34966f8798902e9f5810e571ac5ada8fe076dc10697255237c95afa0360d925d3ef60061f4790a3b57e0d7b66007f4ef885682d2f9028d72cf62590d16965b71800816bc3b92dad3eab7cbf60d8bbdd13c1035bb16acfc547ce3f1735613fdfff1a1efc51d878cefd29d41dd70e40f54a1d1a061a1027430b10229aefa999dba5418967aa20080f5a3d0cf5bd887d26b9ad58cd197fde3bd29fd0f2"}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @local}]}, @dstopts={0x2f, 0x14, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x2}, @pad1, @generic={0x2, 0x7c, "f0c7de2902a37acf19436cc6a91b89b1c9f129c4315fb6c486d873dfb39dc233ad0abb251276e684a600685b6561721119b283e501200cc3ef616d9f574eb6edf053042031fef1817a23d0cb4ff8da57eef722e8a4226edefa74753c6aafe03c06a679d58cb9a74d2ee9e1efc79fbb283b57dad60318c0defe66c027"}, @ra={0x5, 0x2, 0xf72}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}]}, @hopopts={0x3b}, @routing={0xb, 0x0, 0x2, 0x6}, @srh={0x16, 0x6, 0x4, 0x3, 0x4, 0x68, 0x13, [@private0, @remote, @local]}], @mlv2_report={0x8f, 0x0, 0x0, 0xe, 0x7, [{0x9, 0x7, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, [@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}], [0x5, 0x400, 0x7fff, 0xf, 0x3ff, 0x8, 0x3a90000]}, {0x0, 0x0, 0x2, @loopback, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, {0x2, 0x4, 0x7, @mcast1, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @local, @mcast1, @private0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}], [0x8, 0x9, 0x8000, 0x4]}, {0x4, 0x6, 0x2, @mcast2, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00'], [0x8001, 0x2, 0x3, 0x401, 0x6, 0x8]}, {0x3, 0x1, 0x8, @empty, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @mcast2, @dev={0xfe, 0x80, '\x00', 0x42}, @remote, @remote, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], [0x6]}, {0x1, 0x3, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [@loopback, @local, @private2], [0xffff, 0x2800, 0x7fff]}, {0x5, 0x3, 0xa, @private0, [@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, @dev={0xfe, 0x80, '\x00', 0x3b}, @remote], [0x7, 0xf, 0x0]}]}}}}, 0x722) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r2) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x40440d0) 1.574184482s ago: executing program 2 (id=2926): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x8c}}, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd74000000000003000000400001802c0004001400010002004e000000000000001400020002004e246401010000000000000000000d0001007564703a73797a300000000020182c2540d813bc8b662dae8c429fbd30fa720c545d523594de8d340ca4aa537668cb154cf1516edece8da335beb653e9f500ad9b0d564fd10ea9b5169e573110ce2f8071a26e5119095161b13bb8e8b596d714c870d55894c5b4da3c0fa416f065e7cd6b205048e345938ee40de3f3ab79dacf47799baf7d7ee956333da3"], 0x54}}, 0x80) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0xb}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x14, r5, 0x1}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x8c}}, 0x0) (async) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd74000000000003000000400001802c0004001400010002004e000000000000001400020002004e246401010000000000000000000d0001007564703a73797a300000000020182c2540d813bc8b662dae8c429fbd30fa720c545d523594de8d340ca4aa537668cb154cf1516edece8da335beb653e9f500ad9b0d564fd10ea9b5169e573110ce2f8071a26e5119095161b13bb8e8b596d714c870d55894c5b4da3c0fa416f065e7cd6b205048e345938ee40de3f3ab79dacf47799baf7d7ee956333da3"], 0x54}}, 0x80) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0xb}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) 1.437279454s ago: executing program 3 (id=2930): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) (async) socket(0x10, 0x803, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 1.396687093s ago: executing program 2 (id=2931): unshare(0x22020400) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0xad7f585b85390de9) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0xd8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x97}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}]}]}, @CTA_EXPECT_NAT={0x54, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmsg$can_j1939(r1, &(0x7f00000006c0)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/179, 0xb3}, {&(0x7f0000000300)=""/60, 0x3c}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000880)=""/141, 0x8d}, {&(0x7f0000000a00)=""/215, 0xd7}], 0x5}, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.289619739s ago: executing program 3 (id=2934): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.077086127s ago: executing program 3 (id=2936): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x63, 0x0, &(0x7f0000000200)=""/99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x4, 0x2, 0x20, r0, 0x4, '\x00', 0x0, r7, 0x5, 0x5, 0x4, 0xd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x40) 1.026648403s ago: executing program 1 (id=2938): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newsa={0xfc, 0x10, 0x401, 0x0, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x2b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {}, {0x0, 0x0, 0x2000}, {}, 0x70bd2a, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000018}, 0x4000) 967.847759ms ago: executing program 0 (id=2939): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60040d1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b0400000000000000000200ffff5c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000001608000240000000100900010073797a30000000000900020073797a32"], 0x240}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}}], 0x1, 0x4040880) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xe, &(0x7f0000000040), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18230000", @ANYRES32, @ANYBLOB="00000000ffff000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000860000009578f8ff080000006111f2ff000000001811ee663ff6ee4b6438134789dd4b055ffc8bb89dec3e5f97047028800d4aad3639ece61b63", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000a00)=""/4096, 0x0, 0x20, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x46, 0x10, 0x6, 0xfffffff9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$xdp(r5, &(0x7f0000000280)={0x2c, 0x2, 0x0, 0x39, r5}, 0x10) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x22051, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcc4}, 0x94) 917.294444ms ago: executing program 1 (id=2940): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x2000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x104, 0x2e, 0x20, 0x0, 0x25dfdbfc, "", [@nested={0xf2, 0xf2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @pid}, @typed={0x4, 0x1}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0x7}]}]}, 0x104}], 0x1, 0x0, 0x0, 0x5}, 0x0) 863.751304ms ago: executing program 1 (id=2941): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x20000040}, 0x20020014) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}], 0x18, 0x2000ccd0}, 0x10) r3 = socket(0x840000000002, 0x1, 0x100) setsockopt$inet_msfilter(r3, 0x0, 0x30, 0x0, 0x2000000) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) sendmsg$unix(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x20000040}, 0x20020014) (async) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}], 0x18, 0x2000ccd0}, 0x10) (async) socket(0x840000000002, 0x1, 0x100) (async) setsockopt$inet_msfilter(r3, 0x0, 0x30, 0x0, 0x2000000) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) (async) 843.996969ms ago: executing program 3 (id=2942): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='c r'], 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 721.1602ms ago: executing program 3 (id=2943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@dev, @in=@dev}, {@in6=@private0, 0xfffffffc, 0x6c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x20040040}, 0x4c005) (async) recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/169, 0xa9}], 0x2}, 0x2}], 0x1, 0x20, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_DST={0x8, 0x1, @broadcast}]}, 0x2c}}, 0x0) 720.3566ms ago: executing program 0 (id=2944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0x5}]}]}, 0x4c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}, {&(0x7f0000000200)="aebb00684b8f394a3e68427e988470"}, {&(0x7f0000000340)="0b9e332cde00445ceea186d6fa3c8f74e341c337999ed16649585042cd0502900d72fd039e7b9f88c620e5a8f7c8973dbb0d3c392397378c65e34a073b7526b26901a46b"}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x9}}], 0x2, 0x20004086) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r7}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x75, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x10048808) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 649.702689ms ago: executing program 3 (id=2945): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000410000004001d00080017000200000083b605b4e060eb2980495be6071039de4fd5383fdd66e4dc13801bfd1fdc53b3a0cc18cf7818b92611ba138f327fb4ef5c658b7a9f5fba0820736b09180f01d71c3ee8fab4a51b6e64534e97e9fcb51cb3b25d9835182e03eef27f96e184cc3cfd5a74d913e99eda1f562c280857478ed9206d0896136f952a3a78a8cb593aa85f57c42353bb34551fc66c71803e697985b852ef4ddea4cf9598d474"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x50}}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) close(0x3) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r7, 0x80) accept$netrom(r7, 0x0, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0xfdef) close(0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0xac, 0x12, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@typed={0x8, 0x11, 0x0, 0x0, @uid=r8}, @generic="30e1484409818f9b550f5b402a84da4ed8d50c76d80ec1885a061a92795a8eb4aff14d138470025dbc09e46750e7c8374af5fa29ec92149fa84e229d7829422095ea8c3c1297990bcb815393c51841468ce8e1dea2c66ade23bf122334f06398aee53204d94bc9e501fd10da3352c40dccb1d14db93bc0870698f95ea02b651b69f2ec399381fb3bdd37ad93cb0df889"]}, 0xac}, 0x1, 0x0, 0x0, 0x110}, 0x4) recvmmsg(r0, &(0x7f0000002100)=[{{&(0x7f0000000600)=@x25={0x9, @remote}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000200)=""/53, 0x35}], 0x2, &(0x7f00000016c0)=""/254, 0xfe}, 0x12000000}, {{&(0x7f00000017c0)=@rc, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001840)=""/138, 0x8a}, {&(0x7f0000001900)=""/154, 0x9a}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f0000001ac0)=""/182, 0xb6}, {&(0x7f0000001b80)=""/132, 0x84}], 0x5}, 0x6}, {{&(0x7f0000001cc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001d40)=""/163, 0xa3}, {&(0x7f0000001e00)=""/184, 0xb8}, {&(0x7f0000001ec0)=""/75, 0x4b}, {&(0x7f0000001f40)=""/155, 0x9b}], 0x4, &(0x7f0000002040)=""/168, 0xa8}, 0xc}], 0x3, 0x10001, &(0x7f00000021c0)) ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, &(0x7f0000000040)) syz_emit_ethernet(0x76, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@hopopts={0xbe}], "7bf354a4d44f873e"}}}}}}}, 0x0) 564.662888ms ago: executing program 1 (id=2946): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x8000f28, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x14, r4, 0x1, 0xfffffffe, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ppoll(&(0x7f0000000240)=[{r2, 0x309}], 0x1, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="81e29cb3c9ba5b2d24b0a7096d536910ac6c3c9870d450a465345307d0a279ca68273b82b5ca4040886a76b22f615db7d3460cee0b", 0x35}, {&(0x7f0000000280)="0cabdb64a0692a7d3c2657cd243c7c4dcecd8985c0adf813349e8f8038dff18dca7446a29757a4fd3649c88a04a9df9458fda696b19c62014ef071f058c7ace9187517430adf883b3f295507d278b9348ffd811923c49713e417b624f1237741de0adc433344966c803b74f3a0c2461f96e772838af902000000c1fdb15aa6b4e4609e642650fb3d4f93a9326e5092d8000000", 0x93}], 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000003000), 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) pipe(&(0x7f0000000080)) (async) splice(r1, 0x0, r0, 0x0, 0x8000f28, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x14, r4, 0x1, 0xfffffffe, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) ppoll(&(0x7f0000000240)=[{r2, 0x309}], 0x1, 0x0, 0x0, 0x0) (async) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="81e29cb3c9ba5b2d24b0a7096d536910ac6c3c9870d450a465345307d0a279ca68273b82b5ca4040886a76b22f615db7d3460cee0b", 0x35}, {&(0x7f0000000280)="0cabdb64a0692a7d3c2657cd243c7c4dcecd8985c0adf813349e8f8038dff18dca7446a29757a4fd3649c88a04a9df9458fda696b19c62014ef071f058c7ace9187517430adf883b3f295507d278b9348ffd811923c49713e417b624f1237741de0adc433344966c803b74f3a0c2461f96e772838af902000000c1fdb15aa6b4e4609e642650fb3d4f93a9326e5092d8000000", 0x93}], 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000003000), 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 497.32391ms ago: executing program 0 (id=2947): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b901036000400500009e0fa208001f", 0x0, 0x22000102, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) socket$netlink(0x10, 0x3, 0x13) 464.986424ms ago: executing program 2 (id=2948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4018, r0}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000002c0)="2eb80e9a60892804a9af411a8bf35101f6bf4e64a696afb620c81d20d4afa66b8fa4fb3ffb5f7d462ecd47313efcb3f001ef3ea8223b90501e6136f33ea17b2602408a80b5113b9c40ac1774d03e976ef3f2c0ea3031b7947e03cf24b439f67d7b223ee8c8fb0b50dec86f8d50b21f157837bbd88d0905ed483e1966c155e4993c2a01b372cafc346af5f7f0102d9b3ea74b955c478313c1ad5f07a9ddf931042369cb6243a6dcb802b3a3e6230e0b734a01b56548ab7d025c5e8ba2d2ca017b926bc44cd411ee14b713856b76d283c186219cd202", &(0x7f0000000100)=@tcp=r2}, 0x20) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000030303"], 0x20}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaa"], 0x0) 416.64242ms ago: executing program 1 (id=2949): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000300)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="550a00001800000095000000000000000000001280b868b146ae5710716aee7acf9bf6942c41725ea0a0475cf86abfb83c0f0d016e5073b1ca47614e247a4bc977ff15719c362d6981ff02b8577595119dc37ebc5ced50308cbc7f69cb2c6fa4c54963defe15e31a8a492da9eb9aaf34b1fbb5725f316a6f297a838af8d9f5219b94d2ac2b3ca7e23037f281514612f9fd2369f50ac6ebbb80b84ee36afd1387eeae4f1ee22a41a6de464997d184ff53e174a904de925527e4c456284c3a235276946ee02c9c0aac4558201da4d3f9e350dcd3bb00"/235], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 329.011623ms ago: executing program 0 (id=2950): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) syz_emit_ethernet(0xd6e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0xd38, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x17, "122b472e41e24b11f34b608816e522a7f3032efcb5633a3983e172d7dbb1cedeea00156dbf01dbd8e49e39e8fd54a9300113f16b56fd3ece899e2dff0f1443afc40da882e5a3d76d593c09402a0de4f7b9fcbd9c0f4b968122455e34e1afa222c60b04a9f2bfd548605a711678755475861538b9de80bb31e39fd8d5ba7fc1988c850ba77307a7519940fc99f9a55be09c10cf4bce1ecfeb8a12772325a7c3d35e786a6518357d8754da82aac43dba342a23914b38c05e"}, {0x22, 0x18c, "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"}]}}}}}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@getlink={0x50, 0x12, 0x300, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8, 0x8188}, [@IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_PHYS_PORT_ID={0x24, 0x22, "6f1e2a54a2200ce31754d4f6b0e1027ffd709bf1eed96afcd9824f9a042e996e"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x40010) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x10000000, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) (rerun: 32) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) (async) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040)=0x81, &(0x7f00000000c0)=0x1) 209.46495ms ago: executing program 2 (id=2951): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x10000b9}]}}]}, 0x3c}}, 0x20000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x10, &(0x7f0000000900)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x7, 0x3, 0x6, 0x7ff, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @exit], &(0x7f0000000480)='GPL\x00'}, 0x94) r6 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$sock(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="9cf2fed598e30364a11340a12f85402e9e8fa0da63c5777dc08557223c87b3003b607cf6b842c90ded82d56bdd005b1576ea3059e88eca018a51d23d6646f1aaebdaaf6c1ad01a716a445ca781e667023895442e8e78675292b4f8083ae7bd70d9021751d549286be14f23f42db19a76732e0a221d37228e78157c34a1c0570ce2b9ede64f39553fd46029435121abb1749c5bc8bb2f2b32fdbab80e22c3b9a62f1df296ab4164e461c3d80df203c529d3bdeb8ebef6648a58355ccf5a9404dffc81512db4ee4d", 0xc7}, {&(0x7f0000000180)="15b16caa7720d3456cd5f0d19eaa98f342a2074656a0a03da107d6e3e9ef4839e4e98055b5be6a59748d51176522a90033015adb04263e4534ffcc887875537613c3af657f12a392e1fbb67679608530d3468531e4e9283d731d084beaa221aecf9cf9204dcce611a4a0018b27085f76a9db8e27b93c6117e0e506ae890bcec4a72f5d7ecda563fb63a92e2729d388f7d7f92c4fc29e2bec5e833188d2926f4e7bbe8c2b411c55e31e513c36f981fd4723ee3f8f680aa18aa05249a72f03c12b8d37538c9cb43f3513236b42deb28a929ce35cde899d0e882519accae351425c557e44aee71442ad3b291e01eabaeb09c1cb8c4ad3507f4ea9", 0xf9}, {&(0x7f0000000280)="cd7c5864a4024c78b66e5a521cbf093cc454d1130af93a5ca1e1c50b6214d8e10b43bf5df2cb7b917aecd0186ac3a32e6b449389b1d7ab858d8f72ab358bd407a30d3d6a1a633f21e8eb93d71b4f7b", 0x4f}, {&(0x7f0000000300)="a12e37cc48491d20f67a99a21a4b80c3ca4d0e1d50bf1ba25f75d46a0358455ba3625a87f31f43167216edd074d9affada9dabcb420a2ec2ac35a7985acdee9eb2ad0f17449c46699762d1fc8c318bcbe6c899077e6c7d602dcbc7c149a9059217c671b845402c7d7dd1dad6930544e604d3b201ef9aa4def5d2e489e013a8ba559369f47d4536888eefa22df385b349f7e7391ecac3e1c13253b7b391141d76063b659065021ec01759ff1173476dcb090ffdee7d27c0477e8a70c63335de4591d59945c3a484982747396bf85e7c99", 0xd0}, {&(0x7f0000000400)="5c1be60e167d20d31e43031409fd776b158f3437a909c3af16040812cd076b97a4db70ae614d5d3af3813991fc43993a75f84400e46ce505cf3dc9dd64cab7dfa476c06af065624f8973b9f619b60def1563a760bcdf", 0x56}, {&(0x7f00000004c0)="4eed488d94884cdadda9deae6fe6a43fe8dafc58fb0d9e05a747316d08e1357421d2434115c671bf7dc3afe9fc785d8772059210fcba0f1e386255a69ea0e9d00c334c2741e6636ad8930d128e2171db62bb0ea45daeae4128a8d705f5d5b7eb38691f777efcc3c6734bea9a83f298d0551d593b40cfe0666d8c610dae90d6e83c64a68cc482f9f1bba61f74a435ab3b476cc86a132dfd3d7ee53162d21fdcba6d63399f711f0decd16058", 0xab}], 0x6, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x60}, 0x5) 164.036176ms ago: executing program 0 (id=2952): getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f0000000080)) (async, rerun: 32) r0 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) (async) bind$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b36, &(0x7f0000000240)={'wlan1\x00', @random="8dffffffebff"}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 48.76078ms ago: executing program 1 (id=2953): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000001e40)={0x106c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x60}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x184, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x17c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xd3, 0xa, "7c9564c465eb09eae1d811fe7f6e64b825d1496ef42befa37b9cc4a7b9e06efd9585dc09e1ac6598b27ff79533a9d0de1fdcb9656af615ea6656db998aead16f425368beacfef40d36ee0ae530d8e4a5fb1fb54e661d8583864279255c4793267bc99c3ee0955a0ad5951011420381dfcae9bf13733b011b9dee8994dd8733286058d4ef8e67aa8b8eb168505a74b9fb2a28ad88d94f12c31780aa243a2da1bd13a7ac7d4cecc9445d3b4fb86072c93f5ce0fc3e4c1d158604e9227bc2cc02b507a1cd082cbd30cb1a4d2a46f55c78"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x9, 0x4, 0x4}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x56, 0x6, "f3017529415a2f37ba14d0bb52225468485ed03652802739d7236163160a00cd0fb9e499af614662d38710ccc579d4c6232b619279d383e73ba38f0b79ebcea80da6caf61cde124b5bf037a14a82aba50501"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x2}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x27, 0x8, {0x0, 0x4, "5467cb7512c1485598bb756984fd2cad1788342c53e44285b77257"}}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xb, 0xa, "07a317998565ff"}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x54, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x48, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x202b}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8001}, {0x8, 0x0, 0xb865}, {0x8, 0x0, 0xfffffffe}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x10000}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0xffffffff}]}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x4a4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x354, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xed, 0x6, "1bb9881de23f62fd596ec116a912121ccaa02953092022b58c4047caf32cdb70ef02747b8dcde492e072bcfdab3c771870978240d35103de131970aa219257b16d0c587fbc4f8852c0df345d6820b469201ac19f18aae6469916c8085047e0477ec65cd35f087a7f0d463fdcaebd220ebd51a38312ddb0dd6fc6e57240f354eeaa98f962def09a32d4fb9f4b26f0436756ec4691c8c7db0e71cac6ca28199c96106e62839521d7dcc809f6378d839a931cdcca6dca10daf2f444c6c0d563908d3c3dfaac624c353d0081a1342a833afa47458f32e8ea8c473c64d5435d32a343c0f785c5d0b9b2360c"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xe4, 0x8, {0x8aab, 0x1, "c3cd97e2a698896b2dad93510fa0f5de731c3a17501561eb90acbbe8408e294bed9d944c2f00c06da4bc506a68b487b7760994539794058f657622602773f0899959a70d28fd1764732c9665d290650d71204bd4b1e0a4c66c5078a1aba72828922d9e73359059f1e5017cc1f147672681edeaf7428ee099e4e42bcdf453d36a6b3d4136f592a58d47121e569bac18d38b3d370f3301f6f3e99a7f3b1dde7a01a0ade0049b4aa40828bd9a97ece5a9efd0d2f6b4b0772bc3c94f0a3399241ea2b1acf60797bfc9f353a2f664be357afb3817c86154986445"}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @rand_addr=0x64010102}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x43, 0x8, {0x9, 0x66, "2e273ebbed4ca75d1125dbcb5627e750ba82b86893197d8dd18223697522ccd70cf9f1246f57cdf95fec03cd290e383ea306cd44ea0e0a"}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @private=0xa010101}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x65, 0x6, "ee4480ccf5d260cb4f58d2f44746c2a013d2f985cac35bac69893aa898c807a85035f06a69c2a8abb276fb1a683fd1a440ba3dd6baadfa0523314d328e311aaec85ae644035c27b1c8bdad660fd116a7b45aa78d15e5609816fd6ab51cc3f51e94"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xb4, 0x6, "3923d1fbfd12d769c1624a24b50c4321d3a4e13103aeb24018b33d3277d4ff22d1ca8a41e064fa516ece05c5e8624d063052d3d4851aed3c2c6cb70bec92c723f3eaacbab5424b8563e533e4ae58b8da390360d2d4cd958d0406d7f1a691abd4ddc5287067075c694ff0bb032d85f082796e0c72d19743f9cc05af091507a55470a494cd7b01202d50640980833239b62e77564651c32b4173ae09435070df5f45869e61517223f5d01b9b625e44c69b"}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x7c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCAN_SSIDS={0x70, 0x2d, 0x0, 0x1, [{0x1d, 0x0, @random="0ce541c0a14a5256f96e6494f305246556dc65f170bbfe435f"}, {0xf, 0x0, @random="053bae025feeebd469d24a"}, {0x21, 0x0, @random="beb5dd57bff18812f6fde88dcfc28ee340f346c92106c6c628dbce7823"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xd0, 0x4, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x15, 0x1, "b8e34e9fbedd154bd03892a5c4986b76a9"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf2cf}, @NL80211_PKTPAT_PATTERN={0xa6, 0x2, "2e088b34b7e3f86668807e88b6817575d1f0467cc49d6784b8b64e1d6a5afbdf115e4d8e0ab9096056887bcd21d89278dd2c41edcdcf5ac12e5a486d5b0af5ce575e38ccda74c2f9de261ba695a4610890815c11b6af948154e5376b8f2cccabede3af872d3d7a1cb76c55e416ad5ab48e6c22df3a358136265bc764741467c7bbf7d816325436f37afe44511f9ae47d6e80e1ec07a660a2e94a5bd48cd033d1a028"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x408, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x278, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0x171, 0x2a, [@fast_bss_trans={0x37, 0x132, {0xa5, 0x9, "6d1953391b90cae3fcdfc23d7259b49a", "86751e4a661745d3f9fc57db65c25c693783af138d3c429426a4e33b9b7604cf", "367efe616805d933c0ff3d18d4d06a069fd8229a453c2f98183edd47541f751c", [{0x2, 0x1c, "2df2b84153f06ada2d7e76dff1c0d3c23f4e25ddc3abf7fcfcb6bf23"}, {0x2, 0x17, "dba0de5833d7d127d030c67629fb85f145172fe3915f60"}, {0xff, 0x23, "b67392337098a776ed4c622e3f7e0429426e5168198fca40b2dbc0ed7cad8d31ad9b42"}, {0x3, 0x22, "262f1c5a95b3351922fd79d706a672b9d5728f2d22cb649c74e04a7b9da9de293ecc"}, {0x1, 0xc, "7ff677cb7afb171361b9db4e"}, {0x4, 0x14, "2d50da95a91812de70701a3f911aff01fc1b670c"}, {0x3, 0xd, "200d39f920229ce845b5f9e8f5"}, {0x3, 0x25, "8cd5eabc05bc2b663641abd3a3099f2f24ae1e4e8df29f0029fbc85e67d918ecc540ee9f02"}, {0x1, 0x4, "45ecf64e"}]}}, @mesh_id={0x72, 0x6}, @mic={0x8c, 0x10, {0x8a4, "f1a49caf4ec4", @short="127790b585742a05"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ssid={0x0, 0xb, @random="f42e04b61bc2eb2e221c8d"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x28, 0x80}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x5, 0xf7}}, @challenge={0x10, 0x1, 0xf2}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0x7f}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xf8, 0x84, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x78}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x80000001}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4d8f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xffe}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x100}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x959b}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7fff}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x47d4}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xec}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fffffff}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0xfff}, @NL80211_BAND_2GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffffff}]}]}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x180, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0xf9}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x200}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x148, 0x84, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0xf8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="4fb0dd2d678e"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7fff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1c}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffff9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xcf}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xa3c6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xb}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xbc}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0xf81}, {0x8, 0x0, 0x5}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x5c8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x5c4, 0x4, 0x0, 0x1, [{0x1f4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0xe2, 0x1, "93e1e87ec9ffca2d1df0709b6f82a517e76315db5d04d83ab028d8349ebb4e66c8dc4f433a1a56bea6805f1c5bf4d5ba57379e65615a854cb91c324c212954b262ce92bcada0a6505e696d05c619354b6d7e7465c833912284d46da8a6f79d4e217b967599cb1878d0c2d31d018d4c3e4759357683789344a978a248c4d2c4cad780611b6e440166686805c9f9abd5ebf5f05693c487228eac890bc44cd3fde14856157d9c71094cd587819b7ff517b31a087063940f763e800a055e026c04941a41f907d6070bb4e8053cc1ca9fb77c707347c24cb7d6245f97e02ad870"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xfb, 0x2, "6bbb3576a2149d3a48ee853b9f04131f24cbdbd683adb0be06a787b3c14c19d8843cf89e0ef5a8ec187f5889c269a7c801ac50563773b90126bd2710b823a31d0015f1b5c8cb1105ff8679c436ec2d4736022925a753e6797e4f055d09840ca3cf9992a20b28936cadf4e559076a84035cb2be873870e9ec322668a886cfc3aa5aee9bac6e9fa522cd199599fd2199808a3062c1eedf1e9275e8aa352965c600fe6b318ee05cc6cf85974dd4b2404619b779bb43981b90ded95b142216a5db5382802d6baf519e38321d1eb9dcd898ecfc68cc83f1ad98956e1e0586cfc4d9d434c1bb07ff04cf0e6b70957422d49353406847ae788076"}]}, {0x3cc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_PATTERN={0xfd, 0x2, "c5a32c210a8676cf1999b6ba91768e5289332a85ea4481fe179f565bf86a15280a358cececd0654202744b4c46b0e83cdd996bbac9c462385546b43ac56be2cf3ede23fe1217833ee2221cb00d319ce1107331af776b3bbff585b47d6099a481e798948f5ac413772683f4a65c6c7822034a7805f48602caa5eb4d4b47f00b6019d15f046166a8556388bde3df3d24d83c1a5d3df57460ebb9f98d4580edfb3463515bb2e82a521d935d731973702ce7ac3d20450c32edc429c10c8158116b7e99f7844e814b1fcf4fe646c738044b96ef7baff59a7948a613dd27241c0e0262aeff720c9da6f88c928860203e536cd7fddd289e8dff16543c"}, @NL80211_PKTPAT_MASK={0x69, 0x1, "52f4fd5c8f51565f13ab8cc20de1d23dbacf4c24c8a1ff9d29e9220a194fa1eccdd2943988875748151858985e32ff76c9100f714db78b88e2b276bc0d99fd860d9b757a95933950c4b9f3197688e2289c637e121b69cd4cfae1f7bf57f9fcb6d880148651"}, @NL80211_PKTPAT_PATTERN={0xa6, 0x2, "3673830721574233b16d1397bdb2861b2ce0bfdbc401e56cf14007a1d6580218a44e7104181c193d747c0477575d1d2f9ac3e366b6e80e2848a474f89d85920ddf07c3d0f3593ee85dfe8181bdf529bcf0dfc6685685ef16c223a2bff074fd99abf8b47f7a140468ba2ea870e7cb3def8b6895519ae59310152f80cbdb0a95f3fbb99a04b8378b14c5730b08d8866cef4e30a5d5a040893d24415506ba59ec582fae"}, @NL80211_PKTPAT_PATTERN={0x9e, 0x2, "d8b011d284cac2fd2afb40fff1f696a8e511c409cc211b97ba9f886da6729d976d0ebc49124f141d28a7c9a394ebece5a3c48e20d3365b32ec71505d45fa5d667afdf7c49c86724a387aa9f6dced3f8fa01ca2e09c659497b251ce874e400bab99719554405eb199fe2edd992f2b8cce209d3d79d9c026d1687391a718a29b5027ba0469da2c9eb65369ba54d357fa3d3b879388b639803adfa7"}, @NL80211_PKTPAT_MASK={0x44, 0x1, "d8bf10afb7930b478a3fa16751daf1d377b8c395f9e3791e634c4c3e8b59d0671cb6aaa489955f4ae5f2e9c0e093e5636c1c9550c54a54fbd26ba6b929d6fff1"}, @NL80211_PKTPAT_PATTERN={0x99, 0x2, "0322387ba696391b88e7c6ae9d5d266be4e008c2a0d2bd4c7ea983307442cbe31af9da88c05815ea7eece85afb30a1d3b109c463ff8c95e071469e7f8a0db0e0fe42bcd6ad8ad055710fa40ab4b5d5a5d7743d66fa357a91c8148330c3a47410d52a4628aeb5af3af7baf5cc5457d748123457194de7b0ab3a6458411c3f0986879eb101f2ba5421d4453321c8de6a58b74af7302d"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffffffc8}, @NL80211_PKTPAT_PATTERN={0x1c, 0x2, "b4b41715e6baf4552e9420b82ddb4be2f036d50c59a555e0"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x808}]}]}]}]}, 0x106c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/151, 0x97}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000003c0)=""/3, 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001d40)=""/219, 0xdb}], 0x1}}], 0x4, 0x400122a0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="a53c39077ece90746adb8b9ef73bd9c06a5f86e027dce2e5f4f1214b4537c9156657007c5af1b2411818c7f2cd854748317578f62c81f87c24a78f376deb64a1d547943e5b2a45a408c04b9993033fcb7376f0315dd8bab13dae2f885f5b85a768d7183c315710d157049ba9560470e7697b41c977e3c8fea9009bcc820ed19d6733ee34a45c80c8d32e53bf54c63a28d48cf59e48fddfc79e606c41dc3f5d5f693182edf4e457227c02cfad7600777aa3041ce4791edc53d7ca00ae7937fc57636d38ea241e20e2b2daf835a5c749b99cde1cdf06bf48c1a2317496b019a6e81219c97e9147f0943730", 0xea}, {&(0x7f0000000840)="0768f5b54e3672c9b8a2dc0d63be86ec959824648a721105e00edc7d19d2d913012335c868af718dfd857883ae3e3c62d3bf5f7cf7b2afcef6d8a45c212e03da95f57eeabf848aa223553c50e4df011275e3c4c1592fa64ca8920df837254467b8e8293fd1da879092d1b8a740886d85709ce2d787d0555eeec2c480d445880667f7a8f867c43236ca4a9b5d77853333d609b5ea92bffb0acea7b30b2cc3eb859294df00cf008d96913ee96e415434cdeb6b6345fe64cdd02861c4439b615a59397e7679a48408780b5f17ee367a9d5779f08e0688f6c53b559d05b70acb598daee6e20a38b386108bb7802d7b629b6abee93f08aadc", 0xf6}, {&(0x7f0000000940)="23b62d100efd0a85775fae31c09f9b5329bafa8ea4a30f67512f6b9ec3bee2c2e6bd23d04d51bf447078b9bb08020ba472f88ab9d540e1fcf4e59352a68d1e7a93677639cb7bbedc53d23f6b4f91206a483d5dee2ec9e0793edcb831b1e321cbac7db077a9ef44e57d21f287ac9fe8b8b58ffd050cdb952fa28e6578d9595620073b9333df7fa95e3006425d68f83241d4b6b5a1208abfcf7c5d00f8e41f24e90b63b4256953b87a1f3b2b6388ec7d034acc5b9b6330d6ea346927940d5bb7dc3547aabadae7370cb7dfd9352fc2a68bd99f737324c1b5dfe1e74e91e1b66089ddb61b8ae0d0a2c76159", 0xea}, {&(0x7f0000001a80)="6da80454460553d64e685e4c4e15f86d58e391538aae813ab662a4e7becbfe4925c981b1c1169a51ea3c68e4e191311fb484f376a5bdca3c1aa486e1f53388833cdcbe15be88237fc688bb9cd3e6f2a52d21", 0x52}], 0x4}}], 0x1, 0x9200000000000000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x800) 0s ago: executing program 0 (id=2954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x111}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab4", 0x15}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde", 0x47}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="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", 0x146}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x800000, 0xffffffffffffffff, 0x5, 0xfffffffb}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) kernel console output (not intermixed with test programs): 105.656365][ T7405] tipc: Disabling bearer [ 105.728176][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 106.044051][ T7447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.408'. [ 106.188502][ T7453] team0: Device ip6gre1 is of different type [ 106.437940][ T7470] delete_channel: no stack [ 106.459724][ T7474] syz_tun: refused to change device tx_queue_len [ 106.606914][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 106.652210][ T7482] xt_socket: unknown flags 0x50 [ 106.717477][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.423'. [ 106.861981][ T7484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.892566][ T7487] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 107.079621][ T7512] validate_nla: 8 callbacks suppressed [ 107.079641][ T7512] netlink: 'syz.2.429': attribute type 9 has an invalid length. [ 107.261179][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 107.331706][ T7526] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.433'. [ 107.365928][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 107.407073][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 107.547081][ T7533] syzkaller0: entered promiscuous mode [ 107.558815][ T7533] syzkaller0: entered allmulticast mode [ 107.708009][ T7550] s5ÿÿø: renamed from vlan1 (while UP) [ 107.720037][ T7542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.750226][ T7553] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 107.764755][ T7553] netlink: 'syz.2.442': attribute type 2 has an invalid length. [ 107.790995][ T7553] veth1_to_bond: entered allmulticast mode [ 107.805446][ T7556] netlink: 'syz.0.443': attribute type 2 has an invalid length. [ 107.837311][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 107.846901][ T7557] netlink: 'syz.0.443': attribute type 2 has an invalid length. [ 107.931709][ T7565] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 108.261609][ T7565] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 108.273313][ T7565] gretap1: entered promiscuous mode [ 108.280067][ T7565] gretap1: entered allmulticast mode [ 108.287253][ T7551] veth1_to_bond: left allmulticast mode [ 108.376251][ T7569] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 108.619295][ T7592] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 109.385585][ T7645] bond3: option resend_igmp: invalid value (32767) [ 109.419273][ T7645] bond3: option resend_igmp: allowed values 0 - 255 [ 109.433869][ T7645] bond3 (unregistering): Released all slaves [ 109.493264][ T7665] netlink: 'syz.2.471': attribute type 5 has an invalid length. [ 109.534158][ T7662] syzkaller0: entered promiscuous mode [ 109.541408][ T7662] syzkaller0: entered allmulticast mode [ 109.548894][ T7662] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 109.685295][ T7675] team0: Cannot enslave team device to itself [ 109.793055][ T7680] netlink: 'syz.3.476': attribute type 4 has an invalid length. [ 109.807655][ T7680] .`: renamed from bond0 (while UP) [ 110.335168][ T7693] syzkaller0: entered promiscuous mode [ 110.342460][ T7693] syzkaller0: entered allmulticast mode [ 111.007131][ T7730] __nla_validate_parse: 8 callbacks suppressed [ 111.007153][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'. [ 111.765477][ T7743] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 112.289575][ T7784] netlink: 208 bytes leftover after parsing attributes in process `syz.0.505'. [ 112.338050][ T7784] netlink: 'syz.0.505': attribute type 3 has an invalid length. [ 112.427927][ T7793] s5ÿÿø: renamed from vlan1 (while UP) [ 112.598139][ T7810] netlink: 'syz.3.510': attribute type 2 has an invalid length. [ 112.618480][ T7814] netlink: 'syz.0.511': attribute type 10 has an invalid length. [ 112.646938][ T7814] bridge_slave_1: left allmulticast mode [ 112.670716][ T7814] bridge_slave_1: left promiscuous mode [ 112.676551][ T7814] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.694391][ T7815] netlink: 'syz.0.511': attribute type 21 has an invalid length. [ 112.724423][ T7815] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.752337][ T7814] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 113.144424][ T7839] netlink: 224 bytes leftover after parsing attributes in process `syz.2.518'. [ 113.189203][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.521'. [ 113.240281][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.521'. [ 113.387624][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 113.432235][ T7856] hsr_slave_0: left promiscuous mode [ 113.452419][ T7856] hsr_slave_1: left promiscuous mode [ 113.535751][ T7839] tipc: Started in network mode [ 113.544123][ T7839] tipc: Node identity d24c0f3a0d7e, cluster identity 6 [ 113.562033][ T7839] tipc: Enabled bearer , priority 0 [ 113.658821][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 113.702423][ T7864] openvswitch: netlink: Unknown nsh attribute 0 [ 113.717047][ T7868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.526'. [ 113.810830][ T7868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.526'. [ 113.821866][ T7868] netlink: 27 bytes leftover after parsing attributes in process `syz.3.526'. [ 113.850458][ T7835] tipc: Disabling bearer [ 113.877135][ T7875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.316295][ T7901] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.511795][ T7918] netlink: 'syz.0.539': attribute type 1 has an invalid length. [ 114.595431][ T7920] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 114.722323][ T7920] team1: entered promiscuous mode [ 114.732889][ T7920] team1: entered allmulticast mode [ 114.927749][ T7935] bond0: Invalid ad_actor_system MAC address. [ 114.940497][ T7935] bond0: option ad_actor_system: invalid value (1) [ 114.956478][ T7935] bond0 (unregistering): Released all slaves [ 115.785051][ T8000] netlink: 'syz.3.565': attribute type 24 has an invalid length. [ 115.824865][ T7998] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 115.839588][ T7998] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 115.849056][ T7998] team0: Failed to send options change via netlink (err -105) [ 115.857052][ T7998] team0: Port device batadv1 added [ 116.101692][ T5952] IPVS: starting estimator thread 0... [ 116.212798][ T8018] IPVS: using max 29 ests per chain, 69600 per kthread [ 116.380715][ T8035] __nla_validate_parse: 11 callbacks suppressed [ 116.380731][ T8035] netlink: 32 bytes leftover after parsing attributes in process `syz.4.576'. [ 116.529145][ T8043] veth0: entered promiscuous mode [ 116.537252][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'. [ 116.599844][ T8043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.682331][ T8047] macvlan2: entered promiscuous mode [ 116.696695][ T8053] netlink: 'syz.2.583': attribute type 1 has an invalid length. [ 116.706417][ T8047] macvlan2: entered allmulticast mode [ 116.721084][ T8047] bond4: entered allmulticast mode [ 116.730785][ T8047] bond4: entered promiscuous mode [ 116.739260][ T8047] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 116.753123][ T8047] team0: Port device macvlan2 added [ 116.765628][ T8042] veth0: left promiscuous mode [ 116.869292][ T8056] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 116.897394][ T8056] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 116.929219][ T8056] bond3: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 116.942337][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.581'. [ 117.003782][ T8060] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 117.030064][ T8060] bond3: (slave vcan0): making interface the new active one [ 117.039692][ T8060] bond3: (slave vcan0): Enslaving as an active interface with an up link [ 117.256696][ T8081] pimreg3: entered allmulticast mode [ 117.323188][ T8094] netlink: 108 bytes leftover after parsing attributes in process `syz.2.591'. [ 117.424214][ T8100] syzkaller0: entered promiscuous mode [ 117.437308][ T8100] syzkaller0: entered allmulticast mode [ 117.451411][ T8100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.592'. [ 117.503273][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 117.538546][ T8108] vlan0: entered allmulticast mode [ 117.543919][ T8108] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 118.051593][ T8139] netlink: 208 bytes leftover after parsing attributes in process `syz.1.603'. [ 118.068197][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'. [ 118.090617][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 118.168233][ T8149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.601'. [ 118.239343][ T8155] netlink: 'syz.3.601': attribute type 16 has an invalid length. [ 118.967816][ T5146] Bluetooth: hci2: command 0x0419 tx timeout [ 119.016123][ T8190] IPv6: sit1: Disabled Multicast RS [ 119.829347][ T8251] netlink: 'syz.4.627': attribute type 4 has an invalid length. [ 119.863704][ T8251] .`: renamed from bond0 (while UP) [ 119.934788][ T8253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.974222][ T8253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.160772][ T8267] netlink: 'syz.1.636': attribute type 11 has an invalid length. [ 120.201265][ T8267] syzkaller0: entered promiscuous mode [ 120.206764][ T8267] syzkaller0: entered allmulticast mode [ 120.219777][ T8265] netlink: 'syz.4.635': attribute type 25 has an invalid length. [ 120.971039][ T8293] xt_hashlimit: size too large, truncated to 1048576 [ 121.449456][ T8301] syzkaller1: entered promiscuous mode [ 121.455036][ T8301] syzkaller1: entered allmulticast mode [ 121.530876][ T8307] __nla_validate_parse: 12 callbacks suppressed [ 121.530894][ T8307] netlink: 40 bytes leftover after parsing attributes in process `syz.1.645'. [ 121.898900][ T8331] netlink: 'syz.0.651': attribute type 30 has an invalid length. [ 121.983640][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 122.115141][ T8348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.658'. [ 122.167923][ T8348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.658'. [ 122.390190][ T8365] netlink: 'syz.4.663': attribute type 9 has an invalid length. [ 122.619769][ T8374] netlink: 'syz.0.666': attribute type 1 has an invalid length. [ 122.638254][ T8378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.668'. [ 122.655312][ T8376] delete_channel: no stack [ 122.912396][ T8399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.674'. [ 122.924780][ T8397] netlink: 'syz.3.673': attribute type 21 has an invalid length. [ 123.014339][ T8404] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.675'. [ 123.021963][ T8399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.674'. [ 123.049528][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 123.131180][ T8407] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_tx_wq": -EINTR [ 123.548205][ T8454] syzkaller0: entered promiscuous mode [ 123.568974][ T8454] syzkaller0: entered allmulticast mode [ 123.687782][ T8454] lo speed is unknown, defaulting to 1000 [ 123.842805][ T8469] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 123.865151][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.689'. [ 124.048867][ T8485] netlink: 'syz.4.693': attribute type 1 has an invalid length. [ 124.195610][ T8491] netlink: zone id is out of range [ 124.233176][ T8493] netlink: zone id is out of range [ 124.249793][ T8491] netlink: del zone limit has 4 unknown bytes [ 124.277366][ T8493] netlink: del zone limit has 4 unknown bytes [ 124.695355][ T8529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.803599][ T8536] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 124.859697][ T8538] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 125.065399][ T8552] vlan2: entered allmulticast mode [ 125.075199][ T8554] delete_channel: no stack [ 125.085375][ T8552] bridge4: entered allmulticast mode [ 125.109206][ T8563] netlink: 'syz.3.712': attribute type 83 has an invalid length. [ 125.168363][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.186432][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.215225][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.253301][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.329871][ T8568] team0: Device gtp0 is up. Set it down before adding it as a team port [ 125.394625][ T8569] team0: Device gtp0 is up. Set it down before adding it as a team port [ 126.040369][ T8621] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 126.058911][ T8621] bond3 (unregistering): Released all slaves [ 126.463217][ T8655] netlink: 'syz.1.742': attribute type 21 has an invalid length. [ 126.471260][ T8655] netlink: 'syz.1.742': attribute type 4 has an invalid length. [ 126.479113][ T8655] netlink: 'syz.1.742': attribute type 5 has an invalid length. [ 126.479870][ T8653] netlink: 'syz.4.743': attribute type 1 has an invalid length. [ 126.588509][ T8653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.636435][ T8660] bond0: (slave geneve2): making interface the new active one [ 126.645701][ T8660] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 126.759548][ T8667] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 126.982390][ T8675] __nla_validate_parse: 24 callbacks suppressed [ 126.982407][ T8675] netlink: 40 bytes leftover after parsing attributes in process `syz.4.749'. [ 127.178457][ T8683] netlink: 'syz.4.751': attribute type 1 has an invalid length. [ 127.325085][ T8689] netlink: 'syz.2.752': attribute type 10 has an invalid length. [ 127.344658][ T8689] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.631629][ T8712] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 127.673498][ T8712] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.759'. [ 127.769891][ T8716] netlink: 'syz.3.761': attribute type 1 has an invalid length. [ 127.843542][ T8716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.856359][ T8725] netlink: 'syz.4.764': attribute type 9 has an invalid length. [ 127.864419][ T8725] netlink: 212256 bytes leftover after parsing attributes in process `syz.4.764'. [ 127.882680][ T8716] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 127.893378][ T8721] bond0: (slave geneve2): making interface the new active one [ 127.902780][ T8721] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 127.927264][ T3612] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.939487][ T3612] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.973240][ T3612] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.012192][ T3612] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.250557][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 128.306482][ T8741] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.385449][ T8750] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 128.473010][ T8741] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 128.496679][ T8741] bond3 (unregistering): Released all slaves [ 128.552695][ T8756] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 128.588609][ T8769] pim6reg: entered allmulticast mode [ 128.726448][ T8775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.781'. [ 128.924944][ T8791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.787'. [ 129.013566][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 129.076093][ T8802] netlink: 52 bytes leftover after parsing attributes in process `syz.0.788'. [ 129.119101][ T8806] validate_nla: 3 callbacks suppressed [ 129.119118][ T8806] netlink: 'syz.2.791': attribute type 2 has an invalid length. [ 129.150479][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 129.385168][ T8806] netlink: 64 bytes leftover after parsing attributes in process `syz.2.791'. [ 129.400673][ T8819] netlink: 'syz.0.792': attribute type 29 has an invalid length. [ 129.445532][ T8819] netlink: 'syz.0.792': attribute type 29 has an invalid length. [ 129.470656][ T8823] bridge0: entered allmulticast mode [ 129.584341][ T8830] macvlan0: entered promiscuous mode [ 129.594945][ T8830] bond0: entered promiscuous mode [ 129.606005][ T8830] bond_slave_0: entered promiscuous mode [ 129.627873][ T8830] bond_slave_1: entered promiscuous mode [ 129.643933][ T8830] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 129.701528][ T8830] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 129.807720][ T8851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.974759][ T8869] openvswitch: netlink: IP tunnel dst address not specified [ 130.107016][ T8875] vlan1: entered allmulticast mode [ 130.112550][ T8875] gretap0: entered allmulticast mode [ 130.253578][ T8882] block nbd0: not configured, cannot reconfigure [ 130.338600][ T8887] Cannot find add_set index 65532 as target [ 130.590564][ T5146] block nbd0: Receive control failed (result -32) [ 130.609198][ T8903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.686321][ T8908] : renamed from hsr0 [ 130.729320][ T8908] netlink: 'syz.3.817': attribute type 29 has an invalid length. [ 130.907890][ T8913] bond4: (slave gre0): Device is not bonding slave [ 130.914926][ T8913] bond4: option active_slave: invalid value (gre0) [ 130.923569][ T8913] bond4 (unregistering): Released all slaves [ 130.989262][ T8900] syz_tun: entered allmulticast mode [ 131.145050][ T8899] syz_tun: left allmulticast mode [ 131.372134][ T8938] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.522812][ T8938] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.605330][ T8938] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.626238][ T8957] tipc: Enabling of bearer rejected, media not registered [ 131.671897][ T8938] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.730755][ T8961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.761923][ T8963] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 131.853981][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.875023][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.894710][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.916147][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.983208][ T8966] Cannot find add_set index 0 as target [ 131.990692][ T8966] veth0: entered promiscuous mode [ 132.004182][ T8966] __nla_validate_parse: 14 callbacks suppressed [ 132.004200][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.834'. [ 132.398268][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 132.486802][ T8991] x_tables: unsorted underflow at hook 3 [ 132.511333][ T8991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.843'. [ 132.722266][ T9007] syzkaller0: entered promiscuous mode [ 132.738382][ T9007] syzkaller0: entered allmulticast mode [ 132.770055][ T9007] netlink: 32 bytes leftover after parsing attributes in process `syz.4.847'. [ 132.989903][ T8997] openvswitch: netlink: Tunnel attr 31 out of range max 16 [ 133.205303][ T8996] mpoa:mpoad_close: () going down [ 133.249163][ T9023] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 133.466970][ T9040] netlink: 'syz.3.856': attribute type 4 has an invalid length. [ 133.487756][ T9040] netlink: 17 bytes leftover after parsing attributes in process `syz.3.856'. [ 133.583083][ T9051] netlink: 44 bytes leftover after parsing attributes in process `syz.2.857'. [ 133.659081][ T9052] netlink: 44 bytes leftover after parsing attributes in process `syz.1.859'. [ 133.777763][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.860'. [ 133.811360][ T9057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.950860][ T9077] netlink: 144 bytes leftover after parsing attributes in process `syz.1.864'. [ 134.081763][ T9087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.867'. [ 134.199843][ T9097] syzkaller1: entered promiscuous mode [ 134.205573][ T9097] syzkaller1: entered allmulticast mode [ 134.323999][ T9107] block nbd0: Unsupported socket: should be TCP or UNIX. [ 134.502575][ T9115] netlink: 'syz.1.871': attribute type 6 has an invalid length. [ 134.839160][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'. [ 135.254940][ T9170] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 135.470134][ T9185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.382331][ T9238] netlink: 'syz.3.900': attribute type 21 has an invalid length. [ 136.414244][ T9238] netlink: 'syz.3.900': attribute type 21 has an invalid length. [ 137.198035][ T9278] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 137.280655][ T9278] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.358364][ T9282] __nla_validate_parse: 12 callbacks suppressed [ 137.358382][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 137.403680][ T9285] netlink: 144 bytes leftover after parsing attributes in process `syz.4.913'. [ 137.568196][ T9294] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.916'. [ 137.691823][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 137.721414][ T9301] netlink: 32 bytes leftover after parsing attributes in process `syz.3.918'. [ 137.940719][ T9307] syzkaller0: entered promiscuous mode [ 137.947037][ T9307] syzkaller0: entered allmulticast mode [ 138.056779][ T9316] netlink: 16 bytes leftover after parsing attributes in process `syz.4.925'. [ 138.056800][ T9312] dvmrp1: entered allmulticast mode [ 138.122331][ T9318] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 138.331753][ T9328] netlink: 'syz.0.928': attribute type 1 has an invalid length. [ 138.466554][ T9329] bond5: (slave gretap2): making interface the new active one [ 138.475502][ T9329] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 138.562871][ T9338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.929'. [ 138.752376][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'. [ 138.776320][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 138.966179][ T9352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.186400][ T6018] lo speed is unknown, defaulting to 1000 [ 139.193596][ T796] lo speed is unknown, defaulting to 1000 [ 139.200768][ T9363] nbd: must specify at least one socket [ 139.402023][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'. [ 139.411491][ T9374] netlink: 'syz.0.945': attribute type 4 has an invalid length. [ 139.573478][ T9386] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 139.878302][ T9404] bridge_slave_0: left allmulticast mode [ 139.884271][ T9404] bridge_slave_0: left promiscuous mode [ 139.890590][ T9404] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.913205][ T9404] bond0: (slave bridge_slave_1): Releasing backup interface [ 139.962719][ T9404] bond0: (slave bond_slave_0): Releasing backup interface [ 140.005661][ T9404] bond0: (slave bond_slave_1): Releasing backup interface [ 140.045183][ T9404] team0: Port device team_slave_0 removed [ 140.087136][ T9404] team0: Port device team_slave_1 removed [ 140.109599][ T9404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.121557][ T9404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.130688][ T9404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.140440][ T9404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.149786][ T9404] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.357454][ T9423] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.400566][ T9429] tc_dump_action: action bad kind [ 140.611002][ T9436] netlink: 'syz.0.961': attribute type 1 has an invalid length. [ 140.628352][ T9436] netlink: 'syz.0.961': attribute type 1 has an invalid length. [ 140.648117][ T9436] netlink: 'syz.0.961': attribute type 8 has an invalid length. [ 141.121110][ T9472] netlink: 'syz.2.972': attribute type 10 has an invalid length. [ 141.156840][ T10] hid-generic 0005:0458:0000.0001: item fetching failed at offset 0/1 [ 141.172022][ T10] hid-generic 0005:0458:0000.0001: probe with driver hid-generic failed with error -22 [ 141.213678][ T9476] bond2 (unregistering): Released all slaves [ 141.423652][ T9477] netlink: 'syz.2.972': attribute type 10 has an invalid length. [ 141.664677][ T9502] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 141.827289][ T9518] Cannot find add_set index 46338 as target [ 142.266159][ T9542] batadv_slave_0: entered promiscuous mode [ 142.395156][ T9543] batadv_slave_0: left promiscuous mode [ 142.456228][ T9565] __nla_validate_parse: 13 callbacks suppressed [ 142.456245][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 142.550268][ T9565] netlink: 68 bytes leftover after parsing attributes in process `syz.2.995'. [ 142.575646][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 142.726360][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 142.916779][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 143.080560][ T9605] netem: change failed [ 143.100512][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 143.222558][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 143.350539][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 143.355923][ T9620] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1010'. [ 143.641586][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 143.713191][ T9640] netlink: 'syz.2.1015': attribute type 1 has an invalid length. [ 144.223853][ T9659] lo speed is unknown, defaulting to 1000 [ 145.004721][ T9665] openvswitch: netlink: Tunnel attr 31 out of range max 16 [ 145.237940][ T9660] mpoa:mpoad_close: () going down [ 145.360776][ T9725] syzkaller0: entered promiscuous mode [ 145.373138][ T9725] syzkaller0: entered allmulticast mode [ 146.395222][ T9785] xt_hashlimit: size too large, truncated to 1048576 [ 146.403744][ T9784] xt_hashlimit: size too large, truncated to 1048576 [ 146.564888][ T9783] pimreg: entered allmulticast mode [ 146.766921][ T9790] syzkaller0: entered promiscuous mode [ 146.796506][ T9790] syzkaller0: entered allmulticast mode [ 147.046775][ T9776] openvswitch: netlink: Tunnel attr 31 out of range max 16 [ 147.330414][ T9770] mpoa:mpoad_close: () going down [ 147.425452][ T9838] netlink: 'syz.1.1058': attribute type 7 has an invalid length. [ 147.443927][ T9838] netlink: 'syz.1.1058': attribute type 8 has an invalid length. [ 147.467275][ T9838] __nla_validate_parse: 35 callbacks suppressed [ 147.467289][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'. [ 148.379690][ T9846] netlink: 'syz.2.1060': attribute type 1 has an invalid length. [ 148.615113][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1064'. [ 148.630856][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1064'. [ 148.653150][ T9867] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1065'. [ 148.822984][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'. [ 148.855567][ T9873] netlink: 'syz.3.1065': attribute type 21 has an invalid length. [ 148.879586][ T9873] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1065'. [ 149.219603][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 149.262456][ T9885] openvswitch: netlink: Tunnel attr 31 out of range max 16 [ 149.452794][ T9943] netlink: 'syz.0.1077': attribute type 12 has an invalid length. [ 149.590631][ T9943] bond6: option primary_reselect: invalid value (255) [ 149.608787][ T9943] bond6 (unregistering): Released all slaves [ 149.635556][ T9938] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1076'. [ 149.645418][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1076'. [ 149.676409][ T9948] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 (while UP) [ 149.687388][ T9938] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1076'. [ 149.701545][ T9938] netlink: 'syz.1.1076': attribute type 3 has an invalid length. [ 149.713037][ T9938] netlink: 'syz.1.1076': attribute type 2 has an invalid length. [ 149.792747][ T9877] mpoa:mpoad_close: () going down [ 149.860633][ T9956] syzkaller0: entered promiscuous mode [ 149.866149][ T9956] syzkaller0: entered allmulticast mode [ 170.296119][ T9992] __nla_validate_parse: 1 callbacks suppressed [ 170.296136][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1080'. [ 170.297259][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 170.336010][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 170.496205][T10002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1085'. [ 170.733183][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1091'. [ 170.908022][ T5146] block nbd1: Receive control failed (result -32) [ 171.104748][T10039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1096'. [ 171.206448][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1096'. [ 171.252527][T10041] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 171.267373][T10041] syzkaller1: Refused to change device type [ 171.426119][T10014] openvswitch: netlink: Tunnel attr 31 out of range max 16 [ 171.700317][T10013] mpoa:mpoad_close: () going down [ 171.785690][T10073] pim6reg527: entered allmulticast mode [ 171.834804][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1104'. [ 172.134291][T10102] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 172.168249][T10102] team0: Device macvlan3 is already an upper device of the team interface [ 172.260899][T10105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1110'. [ 172.460640][T10116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1115'. [ 172.719861][T10134] netlink: 'syz.0.1119': attribute type 2 has an invalid length. [ 172.742188][T10088] x_tables: duplicate underflow at hook 3 [ 172.750296][T10129] erspan0: entered promiscuous mode [ 172.881790][T10141] sctp: [Deprecated]: syz.4.1122 (pid 10141) Use of int in max_burst socket option deprecated. [ 172.881790][T10141] Use struct sctp_assoc_value instead [ 172.921020][T10144] set match dimension is over the limit! [ 172.952653][T10145] gtp0: entered promiscuous mode [ 172.997398][T10145] gtp0: entered allmulticast mode [ 173.064063][T10149] veth0: entered promiscuous mode [ 173.075571][T10147] veth0: left promiscuous mode [ 173.158466][T10159] openvswitch: netlink: Flow actions attr not present in new flow. [ 173.193023][T10160] netlink: 'syz.4.1130': attribute type 1 has an invalid length. [ 173.248918][T10168] netlink: 'syz.1.1131': attribute type 1 has an invalid length. [ 173.274596][T10160] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.402854][T10168] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 173.416293][T10172] hsr0: entered promiscuous mode [ 173.461907][T10172] macvlan3: entered allmulticast mode [ 173.471796][T10172] hsr0: entered allmulticast mode [ 173.476871][T10172] hsr_slave_0: entered allmulticast mode [ 173.483946][T10172] hsr_slave_1: entered allmulticast mode [ 173.493175][T10180] tipc: Enabled bearer , priority 10 [ 173.528236][T10178] netlink: 'syz.2.1134': attribute type 5 has an invalid length. [ 174.067615][T10215] netlink: 'syz.0.1147': attribute type 7 has an invalid length. [ 174.110251][T10215] netlink: 'syz.0.1147': attribute type 8 has an invalid length. [ 174.243950][T10224] sctp: [Deprecated]: syz.1.1150 (pid 10224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.243950][T10224] Use struct sctp_sack_info instead [ 174.516098][ T9] IPVS: starting estimator thread 0... [ 174.609968][ T9] tipc: Node number set to 408658192 [ 174.617278][T10246] IPVS: using max 29 ests per chain, 69600 per kthread [ 175.360553][T10303] xt_hashlimit: size too large, truncated to 1048576 [ 175.431026][T10311] netlink: 'syz.3.1175': attribute type 1 has an invalid length. [ 175.449217][T10311] __nla_validate_parse: 17 callbacks suppressed [ 175.449236][T10311] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1175'. [ 175.603793][T10317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1179'. [ 175.687700][T10317] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1179'. [ 175.699265][T10323] netlink: 'syz.1.1180': attribute type 1 has an invalid length. [ 175.755744][T10323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.941494][T10333] syzkaller0: entered promiscuous mode [ 175.947023][T10333] syzkaller0: entered allmulticast mode [ 176.162007][T10351] netlink: 'syz.0.1189': attribute type 1 has an invalid length. [ 176.181705][T10351] netlink: 'syz.0.1189': attribute type 1 has an invalid length. [ 176.470613][T10370] openvswitch: netlink: Duplicate or invalid key (type 0). [ 176.480622][T10370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.650114][T10377] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1194'. [ 176.827061][T10385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1199'. [ 176.836762][T10383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1198'. [ 177.099264][T10394] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1202'. [ 177.136942][T10394] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1202'. [ 177.158049][T10394] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1202'. [ 177.181836][T10394] netlink: 606 bytes leftover after parsing attributes in process `syz.4.1202'. [ 177.557455][T10410] bond3: entered promiscuous mode [ 177.568364][T10415] xt_hashlimit: size too large, truncated to 1048576 [ 177.598279][T10410] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.935543][ T5838] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 178.067464][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 178.067490][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.067502][ T5838] Call Trace: [ 178.067510][ T5838] [ 178.067519][ T5838] dump_stack_lvl+0xe8/0x150 [ 178.067551][ T5838] dump_header+0xd3/0x4c0 [ 178.067578][ T5838] oom_kill_process+0x3ab/0x970 [ 178.067604][ T5838] out_of_memory+0x106c/0x1410 [ 178.067623][ T5838] ? percpu_ref_put+0x19/0x180 [ 178.067649][ T5838] ? __pfx___mutex_lock+0x10/0x10 [ 178.067677][ T5838] ? __pfx_out_of_memory+0x10/0x10 [ 178.067695][ T5838] ? do_raw_spin_unlock+0xf5/0x210 [ 178.067725][ T5838] try_charge_memcg+0xc53/0x1560 [ 178.067751][ T5838] ? __lock_acquire+0x6b5/0x2cf0 [ 178.067790][ T5838] ? __pfx_try_charge_memcg+0x10/0x10 [ 178.067809][ T5838] ? xa_load+0x60/0x210 [ 178.067838][ T5838] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 178.067866][ T5838] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 178.067892][ T5838] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 178.067919][ T5838] __swap_cache_prepare_and_add+0x52a/0x700 [ 178.067968][ T5838] swap_cache_alloc_folio+0xf1/0x240 [ 178.068000][ T5838] swap_cluster_readahead+0x53a/0x690 [ 178.068036][ T5838] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 178.068079][ T5838] ? get_vma_policy+0x27b/0x3c0 [ 178.068108][ T5838] swapin_readahead+0x196/0xc50 [ 178.068150][ T5838] ? __pfx_swapin_readahead+0x10/0x10 [ 178.068181][ T5838] ? swap_table_get+0x1e/0x260 [ 178.068208][ T5838] ? swap_table_get+0x1e/0x260 [ 178.068242][ T5838] ? swap_table_get+0x1e/0x260 [ 178.068270][ T5838] ? swap_table_get+0x216/0x260 [ 178.068309][ T5838] ? swap_cache_get_folio+0x513/0x520 [ 178.068360][ T5838] do_swap_page+0x56f/0x5a20 [ 178.068430][ T5838] ? do_swap_page+0x127/0x5a20 [ 178.068458][ T5838] ? __pfx_do_swap_page+0x10/0x10 [ 178.068485][ T5838] ? __pte_offset_map+0x1ae/0x240 [ 178.068541][ T5838] ? pte_offset_map_rw_nolock+0xea/0x160 [ 178.068578][ T5838] handle_mm_fault+0x12d2/0x3310 [ 178.068627][ T5838] ? handle_mm_fault+0xee/0x3310 [ 178.068669][ T5838] ? __pfx_handle_mm_fault+0x10/0x10 [ 178.068700][ T5838] ? lock_vma_under_rcu+0x45a/0x500 [ 178.068752][ T5838] do_user_addr_fault+0xa73/0x1340 [ 178.068799][ T5838] ? rcu_is_watching+0x15/0xb0 [ 178.068829][ T5838] ? trace_page_fault_user+0x84/0x210 [ 178.068861][ T5838] exc_page_fault+0x6a/0xc0 [ 178.068896][ T5838] asm_exc_page_fault+0x26/0x30 [ 178.068917][ T5838] RIP: 0033:0x7fa92255cfce [ 178.068950][ T5838] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 178.068968][ T5838] RSP: 002b:00007ffd7b3ccb38 EFLAGS: 00010246 [ 178.068997][ T5838] RAX: 0000000000000000 RBX: 000055556ac91500 RCX: 00007fa92255cfce [ 178.069012][ T5838] RDX: 00007ffd7b3ccb90 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.069025][ T5838] RBP: 00007ffd7b3ccbfc R08: 0000000000000000 R09: 0000000000000000 [ 178.069038][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 178.069050][ T5838] R13: 00000000000927c0 R14: 000000000002b352 R15: 00007ffd7b3ccc50 [ 178.069085][ T5838] [ 178.069099][ T5838] memory: usage 307200kB, limit 307200kB, failcnt 561 [ 178.436187][ T5838] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 178.464379][ T5838] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 178.616719][ T5838] Memory cgroup stats for /syz0: [ 178.616971][ T5838] cache 0 [ 178.645704][ T5838] rss 16384 [ 178.676262][ T5838] rss_huge 0 [ 178.679587][ T5838] shmem 0 [ 178.682546][ T5838] mapped_file 0 [ 178.686021][ T5838] dirty 0 [ 178.726583][ T5838] writeback 0 [ 178.741627][ T5838] workingset_refault_anon 17 [ 178.757036][ T5838] workingset_refault_file 1 [ 178.777272][ T5838] swap 163840 [ 178.780598][ T5838] swapcached 229376 [ 178.803561][ T5838] pgpgin 18221 [ 178.827224][ T5838] pgpgout 18215 [ 178.837465][ T5838] pgfault 35661 [ 178.840983][ T5838] pgmajfault 19 [ 178.844462][ T5838] inactive_anon 0 [ 178.866306][T10453] erspan0: entered promiscuous mode [ 178.886926][ T5838] active_anon 24576 [ 178.894837][ T5838] inactive_file 0 [ 178.909433][ T5838] active_file 0 [ 178.913541][ T5838] unevictable 0 [ 178.922788][ T5838] hierarchical_memory_limit 314572800 [ 178.955696][ T5838] hierarchical_memsw_limit 9223372036854771712 [ 178.972348][ T5838] total_cache 0 [ 178.976780][ T5838] total_rss 16384 [ 179.007226][ T5838] total_rss_huge 0 [ 179.010988][ T5838] total_shmem 0 [ 179.015144][ T5838] total_mapped_file 0 [ 179.064280][ T5838] total_dirty 0 [ 179.092994][ T5838] total_writeback 0 [ 179.096872][ T5838] total_workingset_refault_anon 17 [ 179.117511][ T5838] total_workingset_refault_file 1 [ 179.122571][ T5838] total_swap 163840 [ 179.126392][ T5838] total_swapcached 229376 [ 179.160660][ T5838] total_pgpgin 18221 [ 179.164679][ T5838] total_pgpgout 18215 [ 179.191202][ T5838] total_pgfault 35661 [ 179.195209][ T5838] total_pgmajfault 19 [ 179.217220][ T5838] total_inactive_anon 0 [ 179.222057][ T5838] total_active_anon 24576 [ 179.237879][ T5838] total_inactive_file 0 [ 179.242066][ T5838] total_active_file 0 [ 179.246057][ T5838] total_unevictable 0 [ 179.269177][ T5838] anon_cost 0 [ 179.275440][ T5838] file_cost 0 [ 179.282568][ T5838] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1189,pid=10350,uid=0 [ 179.338063][ T5838] Memory cgroup out of memory: OOM victim 10350 (syz.0.1189) is already exiting. Skip killing the task [ 179.575774][T10478] team_slave_0: entered allmulticast mode [ 180.302708][T10506] x_tables: duplicate underflow at hook 1 [ 180.322158][T10509] x_tables: duplicate underflow at hook 1 [ 180.372882][T10510] Bluetooth: MGMT ver 1.23 [ 181.674077][T10512] __nla_validate_parse: 6 callbacks suppressed [ 181.674096][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 181.696591][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 181.808913][T10516] validate_nla: 4 callbacks suppressed [ 181.808931][T10516] netlink: 'syz.2.1236': attribute type 17 has an invalid length. [ 181.823050][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'. [ 181.832238][T10516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1236'. [ 182.665684][T10492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.884116][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1238'. [ 182.899597][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 183.031969][T10524] bond5: Invalid ad_actor_system MAC address. [ 183.055862][T10524] bond5: option ad_actor_system: invalid value (1) [ 183.064334][T10524] bond5 (unregistering): Released all slaves [ 183.132442][T10523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.429496][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1246'. [ 183.521594][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'. [ 183.774951][T10572] syzkaller1: entered promiscuous mode [ 183.797475][T10572] syzkaller1: entered allmulticast mode [ 183.830789][T10574] batadv_slave_0: entered promiscuous mode [ 183.865314][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 184.042011][T10573] batadv_slave_0: left promiscuous mode [ 184.242809][T10590] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 184.260128][T10594] xt_TPROXY: Can be used only with -p tcp or -p udp [ 184.387891][T10571] openvswitch: netlink: Tunnel attr 31 out of range max 16 [ 184.422616][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1262'. [ 184.494286][T10604] openvswitch: netlink: IP tunnel dst address not specified [ 184.609534][T10566] mpoa:mpoad_close: () going down [ 184.788833][T10617] netlink: 'syz.2.1266': attribute type 1 has an invalid length. [ 184.946606][T10617] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.026455][T10626] bond4: (slave batadv1): Opening slave failed [ 185.269522][T10633] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 185.287094][T10606] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 185.342175][T10633] bond5: (slave lo): Enslaving as an active interface with an up link [ 185.398954][T10633] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 186.242173][T10679] openvswitch: netlink: Flow key attr not present in new flow. [ 186.567670][ T5146] Bluetooth: hci0: command 0x0c20 tx timeout [ 186.628881][T10691] netlink: 'syz.2.1285': attribute type 9 has an invalid length. [ 186.662531][T10691] netlink: 'syz.2.1285': attribute type 9 has an invalid length. [ 186.685281][T10691] __nla_validate_parse: 7 callbacks suppressed [ 186.685302][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'. [ 186.700405][T10695] tls_set_device_offload: netdev not found [ 186.701079][T10695] syzkaller1: entered promiscuous mode [ 186.729631][T10695] syzkaller1: entered allmulticast mode [ 186.799541][T10698] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.1288'. [ 186.826559][T10701] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:19999 [ 187.048856][T10713] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 2, id = 0 [ 187.092435][T10717] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 187.109481][T10719] tipc: Can't bind to reserved service type 2 [ 187.133190][T10719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1292'. [ 187.154712][T10725] netlink: 'syz.4.1294': attribute type 3 has an invalid length. [ 187.163545][T10725] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1294'. [ 187.175894][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 187.198304][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 187.237969][T10725] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 187.433519][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1295'. [ 187.561842][T10746] netlink: 'syz.1.1301': attribute type 3 has an invalid length. [ 187.703663][T10754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'. [ 187.761202][T10758] netlink: 'syz.1.1305': attribute type 4 has an invalid length. [ 187.779017][ T5961] lo speed is unknown, defaulting to 1000 [ 187.785010][T10758] netlink: 'syz.1.1305': attribute type 4 has an invalid length. [ 187.787122][T10760] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 187.793326][ T5961] syz2: Port: 1 Link DOWN [ 187.808782][T10760] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:3 [ 187.811255][ T9] lo speed is unknown, defaulting to 1000 [ 187.823086][ T9] syz2: Port: 1 Link ACTIVE [ 187.977123][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 188.188078][T10789] netlink: 'syz.3.1313': attribute type 1 has an invalid length. [ 188.196128][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1313'. [ 188.206715][T10789] netlink: 'syz.3.1313': attribute type 1 has an invalid length. [ 188.334217][T10792] netlink: 'syz.1.1315': attribute type 1 has an invalid length. [ 188.652896][T10812] syzkaller0: entered promiscuous mode [ 188.659555][T10812] syzkaller0: entered allmulticast mode [ 189.052984][T10833] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 189.063566][T10830] bond7: Removing last ns target with arp_interval on [ 189.218913][T10843] IPVS: set_ctl: invalid protocol: 41 100.1.1.2:20000 [ 189.692408][T10876] vlan1: entered allmulticast mode [ 189.764358][T10880] openvswitch: netlink: Flow key attr not present in new flow. [ 190.014225][T10889] syzkaller0: entered promiscuous mode [ 190.019864][T10889] syzkaller0: entered allmulticast mode [ 190.445266][T10910] macvlan0: entered promiscuous mode [ 190.831601][T10932] openvswitch: netlink: IPv4 tunnel dst address is zero [ 192.198961][T10972] __nla_validate_parse: 17 callbacks suppressed [ 192.198979][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1372'. [ 192.355308][ T3521] bond0: (slave bond_slave_0): interface is now down [ 192.377653][ T3521] bond0: (slave bond_slave_1): interface is now down [ 192.400941][ T3521] bond0: now running without any active interface! [ 192.540489][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'. [ 192.578895][T10996] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 192.642331][T10996] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 192.686559][T10996] gretap1: entered promiscuous mode [ 192.697912][T10996] gretap1: entered allmulticast mode [ 192.746907][T11004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1379'. [ 192.781606][T11004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1379'. [ 192.815241][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 192.888371][T11022] netlink: 'syz.1.1384': attribute type 12 has an invalid length. [ 193.186474][T11036] delete_channel: no stack [ 193.243015][T11042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1390'. [ 193.323597][T11048] netem: change failed [ 193.507041][T11060] syzkaller0: entered promiscuous mode [ 193.512637][T11060] syzkaller0: entered allmulticast mode [ 193.808905][T11082] lo speed is unknown, defaulting to 1000 [ 193.812459][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 194.408369][ T5842] Bluetooth: hci2: command 0x0419 tx timeout [ 194.494772][T11125] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1409'. [ 194.577291][T11128] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1409'. [ 194.589397][T11122] vlan3: entered promiscuous mode [ 194.594459][T11122] bridge0: entered promiscuous mode [ 194.607057][T11133] delete_channel: no stack [ 194.740739][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1415'. [ 194.766477][T11144] geneve3: entered promiscuous mode [ 194.773083][T11144] geneve3: entered allmulticast mode [ 194.875486][T11146] tipc: Enabled bearer , priority 0 [ 194.907826][T11146] syzkaller0: entered promiscuous mode [ 194.923541][T11146] syzkaller0: entered allmulticast mode [ 194.952180][T11146] tipc: Resetting bearer [ 194.975038][T11145] tipc: Resetting bearer [ 195.006051][T11145] tipc: Disabling bearer [ 195.049138][T11158] syzkaller1: entered promiscuous mode [ 195.054656][T11158] syzkaller1: entered allmulticast mode [ 195.106847][T11160] netlink: 'syz.4.1419': attribute type 3 has an invalid length. [ 195.249526][T11172] netlink: 'syz.4.1422': attribute type 13 has an invalid length. [ 195.298759][T11172] veth0_macvtap: left promiscuous mode [ 195.326339][T11172] macvtap0: entered allmulticast mode [ 195.336941][T11172] macvtap0: refused to change device tx_queue_len [ 195.419192][T11183] netlink: 'syz.1.1426': attribute type 2 has an invalid length. [ 195.458213][T11187] ±ÿ: renamed from team_slave_1 [ 195.478441][ T5842] block nbd2: Receive control failed (result -32) [ 196.008570][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 196.014777][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 196.023275][ T5832] Bluetooth: hci0: command 0x0c20 tx timeout [ 196.025694][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 196.428838][T11254] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 196.459330][ T6019] hid-generic 0005:07C0:0000.0002: item fetching failed at offset 0/1 [ 196.484299][ T6019] hid-generic 0005:07C0:0000.0002: probe with driver hid-generic failed with error -22 [ 196.732252][T11263] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 196.779202][T11263] bond4 (unregistering): Released all slaves [ 197.007275][T11283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.112579][T11295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.179739][T11299] netlink: 'syz.2.1461': attribute type 1 has an invalid length. [ 197.192871][T11300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.224631][T11290] __nla_validate_parse: 8 callbacks suppressed [ 197.224644][T11290] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1459'. [ 197.240192][T11291] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1459'. [ 197.293497][T11302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.487048][T11323] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 197.504751][T11323] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 197.623616][T11330] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1468'. [ 197.883086][T11343] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1472'. [ 197.901725][T11343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1472'. [ 197.917093][T11343] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1472'. [ 197.926569][T11343] netlink: 'syz.3.1472': attribute type 2 has an invalid length. [ 197.940800][T11343] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1472'. [ 198.088279][T11353] macvlan1: entered promiscuous mode [ 198.094291][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1474'. [ 198.104046][T11353] veth1_vlan: left promiscuous mode [ 198.114251][T11353] macvlan1 (unregistering): left promiscuous mode [ 198.238738][T11360] xt_l2tp: wrong L2TP version: 0 [ 198.735921][T11393] Unsupported ieee802154 address type: 0 [ 198.828615][T11399] netlink: 'syz.1.1490': attribute type 2 has an invalid length. [ 198.837505][T11399] sock: sock_set_timeout: `syz.1.1490' (pid 11399) tries to set negative timeout [ 199.025617][ T9915] tipc: Subscription rejected, illegal request [ 199.100311][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1494'. [ 199.116643][T11414] netlink: 'syz.3.1494': attribute type 7 has an invalid length. [ 199.136554][T11414] netlink: 'syz.3.1494': attribute type 8 has an invalid length. [ 199.155099][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 199.386742][T11431] sctp: [Deprecated]: syz.2.1498 (pid 11431) Use of int in maxseg socket option. [ 199.386742][T11431] Use struct sctp_assoc_value instead [ 199.882541][T11454] netlink: 'syz.2.1506': attribute type 18 has an invalid length. [ 199.898449][T11455] netlink: 'syz.0.1507': attribute type 1 has an invalid length. [ 199.974003][T11455] bond8: entered promiscuous mode [ 199.987871][T11455] 8021q: adding VLAN 0 to HW filter on device bond8 [ 200.002050][T11455] bond8: entered allmulticast mode [ 200.144303][T11460] bond8: (slave bridge8): making interface the new active one [ 200.162128][T11460] bridge8: entered promiscuous mode [ 200.201116][T11460] bridge8: entered allmulticast mode [ 200.221632][T11460] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 200.371538][T11483] netlink: 'syz.0.1514': attribute type 1 has an invalid length. [ 200.382997][T11483] team0: No ports can be present during mode change [ 200.575791][T11495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.955050][T11523] syzkaller0: entered promiscuous mode [ 200.961331][T11523] syzkaller0: entered allmulticast mode [ 200.989248][T11523] 0: reclassify loop, rule prio 0, protocol 800 [ 201.311212][T11546] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 201.389239][T11551] openvswitch: netlink: Duplicate key (type 2). [ 201.565928][T11562] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 201.634092][T11566] netlink: 'syz.1.1542': attribute type 4 has an invalid length. [ 202.238945][T11599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.778233][T11637] IPVS: stopping backup sync thread 10713 ... [ 202.844117][T11639] gre0: entered promiscuous mode [ 202.884624][T11639] gre0: entered allmulticast mode [ 202.988804][T11649] syzkaller0: entered promiscuous mode [ 202.997058][T11649] syzkaller0: entered allmulticast mode [ 203.474699][T11671] bridge0: port 3(team0) entered blocking state [ 203.481690][T11671] bridge0: port 3(team0) entered disabled state [ 203.507384][T11671] team0: entered allmulticast mode [ 203.522765][T11671] team_slave_0: entered allmulticast mode [ 203.543974][T11671] team_slave_1: entered allmulticast mode [ 203.559314][T11671] team0: entered promiscuous mode [ 203.574608][T11671] team_slave_0: entered promiscuous mode [ 203.587566][T11671] team_slave_1: entered promiscuous mode [ 203.594548][T11671] bridge0: port 3(team0) entered blocking state [ 203.601184][T11671] bridge0: port 3(team0) entered forwarding state [ 203.672069][T11675] __nla_validate_parse: 20 callbacks suppressed [ 203.672088][T11675] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1573'. [ 203.701858][T11675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1573'. [ 203.733886][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1576'. [ 203.835635][T11692] veth1_macvtap: left promiscuous mode [ 203.841632][T11692] macsec0: entered promiscuous mode [ 203.846959][T11692] macsec0: entered allmulticast mode [ 203.860586][T11687] syzkaller0: entered promiscuous mode [ 203.890970][T11687] syzkaller0: entered allmulticast mode [ 203.930679][T11697] veth1_macvtap: entered promiscuous mode [ 203.943825][T11697] veth1_macvtap: entered allmulticast mode [ 203.977493][T11697] macsec0: left promiscuous mode [ 203.988380][T11697] macsec0: left allmulticast mode [ 203.997359][T11697] veth1_macvtap: left allmulticast mode [ 204.318364][T11724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1585'. [ 204.422124][T11724] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1585'. [ 204.478516][T11733] netlink: 'syz.3.1585': attribute type 21 has an invalid length. [ 204.557375][T11733] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1585'. [ 204.585416][T11740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1588'. [ 204.618659][T11740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1588'. [ 204.643458][T11740] syzkaller0: entered promiscuous mode [ 204.664253][T11740] syzkaller0: entered allmulticast mode [ 204.683624][T11740] 0: reclassify loop, rule prio 0, protocol 800 [ 204.835557][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1593'. [ 205.129681][T11764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1595'. [ 205.147631][T11772] syzkaller0: entered promiscuous mode [ 205.168161][T11772] syzkaller0: entered allmulticast mode [ 205.238227][T11777] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 205.255586][T11762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.385044][T11786] bond2: entered allmulticast mode [ 205.394925][T11786] vti0: entered allmulticast mode [ 205.427560][T11784] bond2: left allmulticast mode [ 205.437991][T11784] vti0: left allmulticast mode [ 205.455588][T11788] lo speed is unknown, defaulting to 1000 [ 206.060735][T11824] sctp: [Deprecated]: syz.2.1613 (pid 11824) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.060735][T11824] Use struct sctp_sack_info instead [ 206.203235][T11829] bond9 (unregistering): Released all slaves [ 206.407235][ T29] audit: type=1804 audit(1773814980.029:6): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1617" name="/newroot/351/cgroup.controllers" dev="tmpfs" ino=1806 res=1 errno=0 [ 206.522445][ T29] audit: type=1800 audit(1773814980.029:7): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1617" name="cgroup.controllers" dev="tmpfs" ino=1806 res=0 errno=0 [ 206.621537][T11855] netlink: 'syz.3.1618': attribute type 4 has an invalid length. [ 206.964106][T11878] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.992564][T11881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.271921][T11892] netlink: 'syz.2.1630': attribute type 14 has an invalid length. [ 207.440857][T11899] netlink: 'syz.3.1633': attribute type 2 has an invalid length. [ 207.537291][ T9915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.131273][T11949] netlink: 'syz.0.1648': attribute type 1 has an invalid length. [ 208.201420][T11957] Dead loop on virtual device ip6_vti0, fix it urgently! [ 208.228974][T11958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.683167][T11987] netlink: 'syz.1.1661': attribute type 2 has an invalid length. [ 208.703557][T11989] __nla_validate_parse: 19 callbacks suppressed [ 208.703574][T11989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1660'. [ 208.793805][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1660'. [ 209.016878][T12003] netlink: 'syz.3.1665': attribute type 2 has an invalid length. [ 209.030630][T12003] netlink: 'syz.3.1665': attribute type 2 has an invalid length. [ 209.051692][T12003] netlink: 'syz.3.1665': attribute type 2 has an invalid length. [ 209.059780][T12003] netlink: 'syz.3.1665': attribute type 2 has an invalid length. [ 209.115874][T12010] tap0: tun_chr_ioctl cmd 2148553947 [ 209.151149][T12012] bond5: option mode: unable to set because the bond device has slaves [ 209.201811][T12011] bond5: option mode: unable to set because the bond device has slaves [ 209.425164][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'. [ 209.428991][T12023] lo speed is unknown, defaulting to 1000 [ 209.466670][T12025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1670'. [ 209.977180][T12057] veth1_macvtap: left promiscuous mode [ 209.982740][T12057] macsec0: entered promiscuous mode [ 210.031359][T12057] macsec0: entered allmulticast mode [ 210.082224][T12063] veth1_macvtap: entered promiscuous mode [ 210.091455][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1679'. [ 210.111228][T12063] veth1_macvtap: entered allmulticast mode [ 210.132964][T12063] macsec0: left promiscuous mode [ 210.138613][T12063] macsec0: left allmulticast mode [ 210.144247][T12063] veth1_macvtap: left allmulticast mode [ 210.152332][T12067] validate_nla: 2 callbacks suppressed [ 210.152345][T12067] netlink: 'syz.3.1680': attribute type 1 has an invalid length. [ 210.179985][T12067] netlink: 'syz.3.1680': attribute type 1 has an invalid length. [ 210.422603][T12084] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1685'. [ 210.456932][T12084] unsupported nlmsg_type 40 [ 210.787800][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 210.807031][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 210.817395][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1692'. [ 211.027109][T12129] netlink: 'syz.0.1696': attribute type 9 has an invalid length. [ 211.096023][T12129] netlink: 'syz.0.1696': attribute type 6 has an invalid length. [ 211.215298][T12144] Unknown options in mask b7f2 [ 211.419398][T12159] xt_NFQUEUE: number of total queues is 0 [ 212.050569][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1714'. [ 212.090024][ T29] audit: type=1800 audit(1773814985.719:8): pid=12202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1715" name="memory.events" dev="tmpfs" ino=1682 res=0 errno=0 [ 212.298975][T12212] syzkaller0: entered promiscuous mode [ 212.304493][T12212] syzkaller0: entered allmulticast mode [ 212.386455][T12212] syzkaller1: entered promiscuous mode [ 212.407590][T12212] syzkaller1: entered allmulticast mode [ 212.456880][T12223] netlink: 'syz.3.1721': attribute type 1 has an invalid length. [ 212.631198][T12237] gtp0: entered promiscuous mode [ 212.638142][T12237] gtp0: entered allmulticast mode [ 212.686169][T12243] netem: change failed [ 213.084904][T12213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.244333][T12256] pim6reg1: entered promiscuous mode [ 213.263037][T12256] pim6reg1: entered allmulticast mode [ 213.369162][T12260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.482345][T12268] netlink: 'syz.0.1737': attribute type 32 has an invalid length. [ 213.494083][T12268] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 213.811116][T12282] syzkaller0: entered promiscuous mode [ 213.825292][T12282] syzkaller0: entered allmulticast mode [ 213.860340][T12296] __nla_validate_parse: 5 callbacks suppressed [ 213.860355][T12296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1743'. [ 213.936664][T12302] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1742'. [ 213.957569][T12294] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1742'. [ 213.966547][T12294] netlink: 2064 bytes leftover after parsing attributes in process `syz.3.1742'. [ 213.975950][T12294] netlink: 5984 bytes leftover after parsing attributes in process `syz.3.1742'. [ 213.996881][T12294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1742'. [ 214.077772][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1745'. [ 214.561405][T12321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1747'. [ 214.801583][T12329] IPVS: length: 8 != 1152 [ 215.283566][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 215.303454][T12337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1751'. [ 215.419548][T12346] netlink: 'syz.2.1754': attribute type 3 has an invalid length. [ 215.562652][T12358] erspan0: entered allmulticast mode [ 215.749019][T12367] netlink: 'syz.3.1760': attribute type 1 has an invalid length. [ 215.863361][T12382] netlink: 'syz.1.1762': attribute type 1 has an invalid length. [ 215.901109][T12379] bond5: (slave gretap2): making interface the new active one [ 215.933345][T12379] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 215.946518][T12380] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.954178][T12380] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.022124][T12382] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.143674][T12378] bond5: (slave geneve3): making interface the new active one [ 216.171755][T12378] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 216.206432][ T9918] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.228265][ T9918] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.236594][ T9918] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.342623][T12402] x_tables: unsorted entry at hook 2 [ 216.363887][T12397] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 216.367473][ T9915] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.504223][T12411] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 216.517610][T12411] bond6 (unregistering): Released all slaves [ 216.608147][T12419] dvmrp1: left allmulticast mode [ 216.786285][T12428] netlink: 'syz.2.1775': attribute type 7 has an invalid length. [ 216.817918][T12428] netlink: 'syz.2.1775': attribute type 8 has an invalid length. [ 217.399294][T12469] netlink: 'syz.4.1785': attribute type 4 has an invalid length. [ 217.439517][T12469] netlink: 'syz.4.1785': attribute type 1 has an invalid length. [ 217.516020][T12473] netlink: 'syz.0.1786': attribute type 21 has an invalid length. [ 217.565634][T12473] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 217.589768][T12473] bond9 (unregistering): Released all slaves [ 217.652235][T12484] netlink: 'syz.1.1789': attribute type 9 has an invalid length. [ 217.660456][T12484] netlink: 'syz.1.1789': attribute type 11 has an invalid length. [ 219.312571][T12519] __nla_validate_parse: 10 callbacks suppressed [ 219.312590][T12519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1801'. [ 219.369620][T12523] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.400974][T12523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.408301][T12523] IPv6: NLM_F_CREATE should be set when creating new route [ 219.415589][T12523] IPv6: NLM_F_CREATE should be set when creating new route [ 219.423059][T12523] IPv6: NLM_F_CREATE should be set when creating new route [ 219.485233][T12526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.682171][T12541] syzkaller0: entered promiscuous mode [ 219.693527][T12545] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1811'. [ 219.703451][T12541] syzkaller0: entered allmulticast mode [ 219.724164][T12545] bridge0: port 3(team0) entered disabled state [ 219.730817][T12545] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.738123][T12545] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.761895][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1811'. [ 220.068830][T12569] xt_ecn: cannot match TCP bits for non-tcp packets [ 220.615022][T12609] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1823'. [ 220.661943][T12609] erspan0: left allmulticast mode [ 220.753001][T12616] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1825'. [ 220.772901][T12618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1827'. [ 220.856252][T12622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1828'. [ 221.284191][T12652] xt_l2tp: invalid flags combination: 8 [ 221.684052][T12689] validate_nla: 4 callbacks suppressed [ 221.684071][T12689] netlink: 'syz.2.1844': attribute type 1 has an invalid length. [ 221.741625][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1844'. [ 221.767573][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1844'. [ 221.833247][T12665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.846243][T12665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.163241][ T9914] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.179476][ T9914] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.201514][ T9914] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.229214][T12708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1848'. [ 222.266990][ T9914] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.317455][ T9914] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.326510][ T9914] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.372870][ T9914] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.419687][ T9914] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.571893][T12726] delete_channel: no stack [ 222.972202][T12744] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 222.988758][T12744] bond7 (unregistering): Released all slaves [ 223.303866][T12775] netlink: 'syz.2.1869': attribute type 4 has an invalid length. [ 223.343474][T12780] netlink: 'syz.1.1868': attribute type 4 has an invalid length. [ 223.405270][ T5836] lo speed is unknown, defaulting to 1000 [ 223.416744][ T5836] syz2: Port: 1 Link DOWN [ 223.612366][T12802] tipc: Started in network mode [ 223.617531][T12802] tipc: Node identity 5276dbfca818, cluster identity 4711 [ 223.624967][T12802] tipc: Enabled bearer , priority 0 [ 223.711635][T12802] syzkaller0: entered promiscuous mode [ 223.727390][T12802] syzkaller0: entered allmulticast mode [ 223.735597][T12802] tipc: Resetting bearer [ 223.764933][T12801] tipc: Resetting bearer [ 224.724668][T12837] __nla_validate_parse: 6 callbacks suppressed [ 224.724765][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'. [ 225.070454][T12801] tipc: Disabling bearer [ 225.095313][ T5836] tipc: Node number set to 4201569276 [ 225.107283][T12841] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 225.328265][T12858] netlink: 'syz.4.1891': attribute type 1 has an invalid length. [ 225.338591][T12847] netlink: 'syz.2.1887': attribute type 3 has an invalid length. [ 225.383494][T12858] bond6: entered promiscuous mode [ 225.387445][T12864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1891'. [ 225.389668][T12858] 8021q: adding VLAN 0 to HW filter on device bond6 [ 225.439945][T12858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1891'. [ 225.450305][T12858] tipc: Enabling of bearer rejected, failed to enable media [ 225.461779][T12864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1891'. [ 225.543653][T12861] "syz.3.1892" (12861) uses obsolete ecb(arc4) skcipher [ 226.000433][T12903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1904'. [ 226.043085][T12911] ±ÿ: renamed from team_slave_1 [ 226.226144][T12924] netlink: 'syz.2.1907': attribute type 39 has an invalid length. [ 226.367654][T12926] bond7: option fail_over_mac: invalid value (16) [ 226.375311][T12926] bond7 (unregistering): Released all slaves [ 226.504086][T12930] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 226.790961][T12906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.105504][T12943] x_tables: duplicate underflow at hook 1 [ 227.144089][T12950] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 227.180628][T12948] syzkaller0: entered promiscuous mode [ 227.202752][T12948] syzkaller0: entered allmulticast mode [ 227.322580][T12958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1921'. [ 227.332225][T12961] netlink: 'syz.2.1922': attribute type 13 has an invalid length. [ 227.340888][T12961] gretap0: refused to change device tx_queue_len [ 227.347824][T12961] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 227.787475][T13001] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 227.846933][T13007] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 228.116419][T13021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.136181][T13021] x_tables: duplicate underflow at hook 3 [ 228.143156][T13024] x_tables: duplicate underflow at hook 3 [ 228.155888][T13025] x_tables: duplicate underflow at hook 3 [ 228.290937][T13028] tipc: Started in network mode [ 228.301518][T13028] tipc: Node identity 6e13a9e4588a, cluster identity 4711 [ 228.309331][T13028] tipc: Enabled bearer , priority 0 [ 228.317046][T13028] syzkaller0: entered promiscuous mode [ 228.323518][T13028] syzkaller0: entered allmulticast mode [ 228.333476][T13028] netlink: 'syz.4.1941': attribute type 1 has an invalid length. [ 228.341602][T13028] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1941'. [ 228.390860][T13028] tipc: Resetting bearer [ 228.415996][T13027] tipc: Resetting bearer [ 228.451354][T13027] tipc: Disabling bearer [ 228.857625][T13058] netlink: 'syz.1.1951': attribute type 5 has an invalid length. [ 228.890576][T13049] : renamed from veth0_to_team [ 229.314087][T13094] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1959'. [ 229.341091][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 229.356388][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 229.445813][T13102] IPVS: set_ctl: invalid protocol: 141 100.1.1.0:20002 [ 229.701289][T13112] hsr_slave_0 (unregistering): left promiscuous mode [ 229.721882][T13123] netlink: 'syz.1.1970': attribute type 1 has an invalid length. [ 230.003207][T13137] netlink: 'syz.2.1973': attribute type 2 has an invalid length. [ 230.039232][T13137] netlink: 'syz.2.1973': attribute type 1 has an invalid length. [ 230.061691][T13137] netlink: 'syz.2.1973': attribute type 2 has an invalid length. [ 230.095672][T13137] netlink: 'syz.2.1973': attribute type 1 has an invalid length. [ 230.121322][T13137] netlink: 'syz.2.1973': attribute type 1 has an invalid length. [ 230.137436][T13143] netlink: 'syz.1.1975': attribute type 1 has an invalid length. [ 230.176476][T13147] __nla_validate_parse: 5 callbacks suppressed [ 230.176496][T13147] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1977'. [ 230.279075][T13152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1975'. [ 230.296925][T13154] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1979'. [ 230.349768][T13157] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1979'. [ 230.380079][T13148] bond8: (slave gretap2): making interface the new active one [ 230.389415][T13148] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 230.403762][T13152] 8021q: adding VLAN 0 to HW filter on device bond8 [ 231.155055][T13196] x_tables: duplicate underflow at hook 2 [ 231.382643][T13203] xt_CT: No such helper "pptp" [ 231.393352][T13210] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1992'. [ 231.462497][T13213] 8021q: adding VLAN 0 to HW filter on device bond9 [ 231.600040][T13221] vlan2: entered allmulticast mode [ 231.622518][T13221] veth0_to_bond: entered allmulticast mode [ 231.636087][T13221] bond9: (slave vlan2): making interface the new active one [ 231.646843][T13221] bond9: (slave vlan2): Enslaving as an active interface with an up link [ 231.666615][T13215] syzkaller1: entered promiscuous mode [ 231.672340][T13215] syzkaller1: entered allmulticast mode [ 231.759876][T13230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1996'. [ 231.937720][T13244] PKCS7: Unknown OID: [4] (bad) [ 231.942636][T13244] PKCS7: Only support pkcs7_signedData type [ 231.957568][T13246] PKCS7: Unknown OID: [4] (bad) [ 231.964748][T13246] PKCS7: Only support pkcs7_signedData type [ 232.706869][T13283] netlink: 960 bytes leftover after parsing attributes in process `syz.0.2015'. [ 232.716263][T13283] openvswitch: netlink: Flow key attr not present in new flow. [ 232.749295][T13253] mpoa:mpoad_close: () going down [ 232.765258][T13286] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.2014'. [ 232.854893][T13291] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2014'. [ 232.879505][T13290] pim6reg: entered allmulticast mode [ 232.978796][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2018'. [ 233.418326][T13309] syzkaller0: entered promiscuous mode [ 233.423940][T13309] syzkaller0: entered allmulticast mode [ 233.752078][T13338] dvmrp0: entered allmulticast mode [ 234.048244][T13353] vlan1: left allmulticast mode [ 234.053273][T13353] veth0_vlan: left allmulticast mode [ 234.456148][T13382] openvswitch: netlink: EtherType 50a is less than min 600 [ 234.503834][T13382] ipvlan0: entered allmulticast mode [ 234.514845][T13382] batadv_slave_1: entered allmulticast mode [ 234.533513][T13382] batman_adv: batadv0: Adding interface: ipvlan0 [ 234.554439][T13382] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.601765][T13382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.626409][T13382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.636698][T13382] batman_adv: batadv0: Interface activated: ipvlan0 [ 234.817093][T13405] validate_nla: 3 callbacks suppressed [ 234.835369][T13405] netlink: 'syz.4.2053': attribute type 10 has an invalid length. [ 234.854830][T13405] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 235.647373][T13451] netlink: 'syz.2.2064': attribute type 1 has an invalid length. [ 235.665489][T13455] __nla_validate_parse: 2 callbacks suppressed [ 235.665504][T13455] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2065'. [ 235.691988][T13451] bond7: entered promiscuous mode [ 235.697729][T13451] 8021q: adding VLAN 0 to HW filter on device bond7 [ 235.720188][T13451] 8021q: adding VLAN 0 to HW filter on device bond7 [ 235.739633][T13451] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 235.751245][T13451] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 235.780444][T13451] bond7: (slave vti0): making interface the new active one [ 235.813733][T13451] vti0: entered promiscuous mode [ 235.821855][T13451] bond7: (slave vti0): Enslaving as an active interface with an up link [ 235.894952][T13463] netlink: 'syz.2.2069': attribute type 3 has an invalid length. [ 235.927513][T13463] netlink: 'syz.2.2069': attribute type 10 has an invalid length. [ 235.935395][T13463] netlink: 396 bytes leftover after parsing attributes in process `syz.2.2069'. [ 236.084157][T13472] syzkaller1: entered allmulticast mode [ 236.237062][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 236.380687][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'. [ 236.473796][T13504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2081'. [ 236.610302][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2083'. [ 236.806119][T13526] netlink: 'syz.0.2086': attribute type 1 has an invalid length. [ 236.817574][T13526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2086'. [ 236.860544][T13526] can: request_module (can-proto-0) failed. [ 239.314143][T13488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.507395][T13547] netlink: set zone limit has 4 unknown bytes [ 239.594660][T13554] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2093'. [ 239.741473][T13561] syzkaller0: entered promiscuous mode [ 239.747082][T13561] syzkaller0: entered allmulticast mode [ 240.007534][ T9919] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 242.421235][T13536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.781836][T13585] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2102'. [ 242.812245][T13585] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2102'. [ 242.916542][T13590] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 242.950139][T13596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2105'. [ 242.959590][T13590] bond9 (unregistering): Released all slaves [ 242.976053][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2105'. [ 243.157358][T13594] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 243.169710][T13607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2107'. [ 243.213135][T13610] netlink: 'syz.4.2108': attribute type 1 has an invalid length. [ 243.310875][T13605] netlink: 'syz.2.2109': attribute type 1 has an invalid length. [ 243.342308][T13615] syz.3.2110 (13615) used greatest stack depth: 17472 bytes left [ 243.383899][T13605] 8021q: adding VLAN 0 to HW filter on device bond8 [ 244.064872][T13637] syzkaller1: entered promiscuous mode [ 244.084323][T13640] netlink: 'syz.1.2117': attribute type 1 has an invalid length. [ 244.093985][T13637] syzkaller1: entered allmulticast mode [ 244.203803][T13640] bond11: entered promiscuous mode [ 244.219287][T13640] 8021q: adding VLAN 0 to HW filter on device bond11 [ 244.255071][T13644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.360491][T13640] bond11: (slave bridge13): making interface the new active one [ 244.368294][T13640] bridge13: entered promiscuous mode [ 244.376726][T13640] bond11: (slave bridge13): Enslaving as an active interface with an up link [ 244.582880][T13671] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2125'. [ 245.770602][T13693] bond6: Removing last arp target with arp_interval on [ 245.783402][T13690] lo: entered promiscuous mode [ 245.797577][T13700] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 245.809119][T13690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.913031][T13705] netlink: 'syz.3.2133': attribute type 83 has an invalid length. [ 246.125311][T13716] veth0: entered promiscuous mode [ 246.154349][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2137'. [ 246.246487][T13716] veth0 (unregistering): left promiscuous mode [ 246.291637][T13722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.462726][T13731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2142'. [ 246.544980][T13731] vlan1: entered allmulticast mode [ 246.557156][T13731] bridge7: entered allmulticast mode [ 246.685159][T13739] bridge7: port 1(erspan0) entered blocking state [ 246.692344][T13739] bridge7: port 1(erspan0) entered disabled state [ 246.699318][T13739] erspan0: entered allmulticast mode [ 246.718013][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'. [ 246.721926][T13739] erspan0: entered promiscuous mode [ 246.726895][T13743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2147'. [ 246.939076][T13753] netlink: zone id is out of range [ 246.944472][T13750] netlink: zone id is out of range [ 246.953836][T13748] netlink: set zone limit has 4 unknown bytes [ 246.961136][T13753] netlink: zone id is out of range [ 246.966271][T13753] netlink: zone id is out of range [ 246.972109][T13750] netlink: zone id is out of range [ 246.978832][T13750] netlink: zone id is out of range [ 246.984124][T13753] netlink: zone id is out of range [ 247.074340][T13765] netlink: 'syz.4.2153': attribute type 8 has an invalid length. [ 247.093495][T13765] bond0: entered promiscuous mode [ 247.106965][T13765] geneve2: entered promiscuous mode [ 247.122343][T13765] gretap0: entered promiscuous mode [ 247.136332][T13765] erspan0: entered promiscuous mode [ 247.154668][T13765] debugfs: 'hsr0' already exists in 'hsr' [ 247.174168][T13765] Cannot create hsr debugfs directory [ 247.189687][T13765] hsr0: entered promiscuous mode [ 247.639890][T13806] netlink: 'syz.1.2163': attribute type 1 has an invalid length. [ 247.720535][T13814] sctp: [Deprecated]: syz.2.2165 (pid 13814) Use of int in maxseg socket option. [ 247.720535][T13814] Use struct sctp_assoc_value instead [ 247.741824][T13806] 8021q: adding VLAN 0 to HW filter on device bond12 [ 247.798902][T13815] bond12: (slave geneve4): making interface the new active one [ 247.829348][T13815] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 247.860251][T13829] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20004 [ 248.023870][T13840] netlink: 'syz.1.2171': attribute type 1 has an invalid length. [ 248.061955][T13838] netlink: 'syz.1.2171': attribute type 1 has an invalid length. [ 248.095153][T13840] bond13: entered promiscuous mode [ 248.100806][T13840] 8021q: adding VLAN 0 to HW filter on device bond13 [ 248.125187][T13840] bond13: (slave bridge14): making interface the new active one [ 248.133235][T13840] bridge14: entered promiscuous mode [ 248.140815][T13840] bridge14: left promiscuous mode [ 248.274434][T13850] bond13: (slave bridge14): making interface the new active one [ 248.289197][T13850] bridge14: entered promiscuous mode [ 248.297079][T13850] bridge14: left promiscuous mode [ 248.511956][T13864] __nla_validate_parse: 9 callbacks suppressed [ 248.511975][T13864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2178'. [ 248.642120][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2178'. [ 248.761991][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2178'. [ 248.799925][T13870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2179'. [ 248.815862][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2180'. [ 248.817869][T13863] lo speed is unknown, defaulting to 1000 [ 249.422192][T13891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.590076][ T9915] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.602387][ T9915] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 249.807418][ T9915] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.834657][ T9915] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 249.847663][ T9915] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.865107][ T9915] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 249.931663][ T9915] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.953459][ T9915] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 250.088503][T13936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2191'. [ 250.143041][T13932] bond9 (unregistering): Released all slaves [ 250.169108][T13934] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 250.244489][ T9918] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 250.592730][T13962] tipc: Enabled bearer , priority 0 [ 250.852558][T13962] tipc: Disabling bearer [ 250.974124][T13996] macvtap1: entered promiscuous mode [ 250.993009][T13996] macvtap1: entered allmulticast mode [ 251.008311][T13996] veth1_vlan: entered allmulticast mode [ 251.551798][T14045] ksmbd: Unknown IPC event: 4, ignore. [ 252.961573][T14115] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2242'. [ 252.987247][T14113] netlink: 'syz.3.2241': attribute type 3 has an invalid length. [ 252.995011][T14113] netlink: 'syz.3.2241': attribute type 1 has an invalid length. [ 253.017619][T14113] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2241'. [ 253.144605][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2244'. [ 253.166719][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2244'. [ 253.507845][T14137] netlink: 'syz.0.2249': attribute type 142 has an invalid length. [ 253.528813][ T5829] Bluetooth: hci2: command 0x0419 tx timeout [ 253.544768][T14139] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2250'. [ 253.790574][T14148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2252'. [ 253.836328][ T9914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.845516][ T9914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.122778][T14173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2260'. [ 254.142042][T14173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2260'. [ 254.278256][T14186] net_ratelimit: 45 callbacks suppressed [ 254.278276][T14186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.553672][T14193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2263'. [ 254.583195][T14193] netlink: 'syz.3.2263': attribute type 7 has an invalid length. [ 254.601666][T14193] netlink: 'syz.3.2263': attribute type 8 has an invalid length. [ 254.625438][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2263'. [ 254.836953][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2268'. [ 254.862257][T14167] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.928683][T14213] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.962975][T14204] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 255.084385][T14212] syzkaller1: entered promiscuous mode [ 255.102013][T14212] syzkaller1: entered allmulticast mode [ 255.248699][T14232] netlink: 'syz.0.2275': attribute type 21 has an invalid length. [ 255.305808][T14232] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2275'. [ 255.428949][T14246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2278'. [ 255.509680][T14247] netlink: 'syz.2.2272': attribute type 4 has an invalid length. [ 255.602633][T14251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2280'. [ 255.874817][T14270] xt_hashlimit: size too large, truncated to 1048576 [ 255.929869][T14272] –: renamed from vxcan1 [ 256.088841][ T5829] Bluetooth: hci2: command 0x0419 tx timeout [ 256.368581][T14285] syzkaller0: entered promiscuous mode [ 256.374197][T14285] syzkaller0: entered allmulticast mode [ 256.610883][T14311] tipc: New replicast peer: 255.255.255.255 [ 256.618532][T14311] tipc: Enabled bearer , priority 10 [ 256.671722][T14320] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 256.684449][T14319] GUP no longer grows the stack in syz.4.2297 (14319): 200000003000-20000000a000 (200000001000) [ 256.696079][T14315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.706232][T14319] CPU: 1 UID: 0 PID: 14319 Comm: syz.4.2297 Not tainted syzkaller #0 PREEMPT(full) [ 256.706262][T14319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.706278][T14319] Call Trace: [ 256.706286][T14319] [ 256.706294][T14319] dump_stack_lvl+0xe8/0x150 [ 256.706326][T14319] __get_user_pages+0x2453/0x29d0 [ 256.706357][T14319] ? __lock_acquire+0x6b5/0x2cf0 [ 256.706400][T14319] ? __gup_longterm_locked+0xc4e/0x1630 [ 256.706440][T14319] ? down_read_killable+0x1bb/0x340 [ 256.706467][T14319] __gup_longterm_locked+0xdcf/0x1630 [ 256.706544][T14319] gup_fast_fallback+0x1d82/0x22e0 [ 256.706604][T14319] ? __pfx_gup_fast_fallback+0x10/0x10 [ 256.706639][T14319] ? futex_unqueue+0x22/0x240 [ 256.706662][T14319] ? futex_unqueue+0x22/0x240 [ 256.706684][T14319] ? is_valid_gup_args+0x11f/0x200 [ 256.706714][T14319] ? get_user_pages_fast+0x4d/0xb0 [ 256.706745][T14319] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 256.706783][T14319] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 256.706807][T14319] iov_iter_get_pages2+0x5e/0xa0 [ 256.706840][T14319] __se_sys_vmsplice+0x7b3/0x1490 [ 256.706889][T14319] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 256.706919][T14319] ? __pfx_futex_wait+0x10/0x10 [ 256.706976][T14319] ? vm_mmap_pgoff+0x3b1/0x4f0 [ 256.707039][T14319] do_syscall_64+0x14d/0xf80 [ 256.707061][T14319] ? trace_irq_disable+0x3b/0x150 [ 256.707090][T14319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.707110][T14319] ? clear_bhb_loop+0x40/0x90 [ 256.707134][T14319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.707161][T14319] RIP: 0033:0x7fe9ca59c799 [ 256.707179][T14319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.707196][T14319] RSP: 002b:00007fe9cb3ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 256.707217][T14319] RAX: ffffffffffffffda RBX: 00007fe9ca815fa0 RCX: 00007fe9ca59c799 [ 256.707231][T14319] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 256.707244][T14319] RBP: 00007fe9ca632c99 R08: 0000000000000000 R09: 0000000000000000 [ 256.707255][T14319] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 256.707267][T14319] R13: 00007fe9ca816038 R14: 00007fe9ca815fa0 R15: 00007ffe009b0978 [ 256.707299][T14319] [ 256.936486][T14315] Unsupported ieee802154 address type: 0 [ 257.010484][T14323] x_tables: duplicate underflow at hook 3 [ 257.102135][T14333] veth5: entered promiscuous mode [ 257.107416][T14333] veth5: entered allmulticast mode [ 257.171053][T14338] syzkaller1: entered promiscuous mode [ 257.176706][T14338] syzkaller1: entered allmulticast mode [ 257.202673][T14340] openvswitch: netlink: IP tunnel dst address not specified [ 257.931586][T14385] tipc: Failed to remove unknown binding: 66,0,0/408658192:3533097133/3533097135 [ 257.991081][T14385] tipc: Failed to remove unknown binding: 66,0,0/408658192:3533097133/3533097134 [ 258.039248][T14385] tipc: Failed to remove unknown binding: 66,0,0/408658192:3533097133/3533097135 [ 258.133339][T14385] tipc: Failed to remove unknown binding: 66,0,0/408658192:3533097133/3533097134 [ 258.159755][T14400] netlink: 'syz.1.2314': attribute type 11 has an invalid length. [ 258.382354][T14424] sctp: [Deprecated]: syz.3.2319 (pid 14424) Use of int in max_burst socket option. [ 258.382354][T14424] Use struct sctp_assoc_value instead [ 258.830128][T14450] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.2325:14450 [ 258.989446][T14464] gre0: left promiscuous mode [ 258.990520][T14460] __nla_validate_parse: 12 callbacks suppressed [ 258.990576][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2328'. [ 259.014857][T14464] gre0: left allmulticast mode [ 259.062939][T14464] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 259.283674][T14470] bridge0: port 4(batadv1) entered blocking state [ 259.290928][T14470] bridge0: port 4(batadv1) entered disabled state [ 259.300493][T14470] batadv1: entered allmulticast mode [ 259.309568][T14470] batadv1: entered promiscuous mode [ 259.333360][T14478] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 259.638351][ T9914] batman_adv: batadv1: IGMP Querier appeared [ 259.644804][ T9914] batman_adv: batadv1: MLD Querier appeared [ 259.746169][T14512] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.356323][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2348'. [ 260.365698][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2348'. [ 260.580279][T14539] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2349'. [ 261.403755][T14543] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2351'. [ 262.496273][T14489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.690803][T14557] !: renamed from dummy0 [ 262.709599][T14558] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2354'. [ 262.781060][T14563] syzkaller0: entered promiscuous mode [ 262.786601][T14563] syzkaller0: entered allmulticast mode [ 262.923541][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2355'. [ 262.964379][T14575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2359'. [ 262.974457][T14575] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 263.299592][T14593] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2363'. [ 263.505931][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2367'. [ 263.839466][T14624] Cannot find del_set index 0 as target [ 263.893954][T14624] raw_sendmsg: syz.0.2371 forgot to set AF_INET. Fix it! [ 263.978615][T14631] --map-set only usable from mangle table [ 264.132866][T14635] tipc: Bearer : already 2 bearers with priority 10 [ 264.140467][T14635] tipc: Bearer : trying with adjusted priority [ 264.157268][T14635] tipc: Enabling of bearer rejected, failed to enable media [ 264.281263][T14642] tc_dump_action: action bad kind [ 264.602650][T14659] netlink: 'syz.3.2382': attribute type 9 has an invalid length. [ 264.814589][T14669] __nla_validate_parse: 1 callbacks suppressed [ 264.814608][T14669] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.2387'. [ 264.972691][T14680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2392'. [ 265.014710][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2393'. [ 265.291321][T14697] tipc: Enabled bearer , priority 0 [ 265.308990][T14697] syzkaller0: entered promiscuous mode [ 265.327283][T14697] syzkaller0: entered allmulticast mode [ 265.376872][T14697] tipc: Resetting bearer [ 265.408784][T14697] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2396'. [ 265.482363][T14693] tipc: Resetting bearer [ 265.568538][T14693] tipc: Disabling bearer [ 265.595733][T14711] sctp: [Deprecated]: syz.4.2402 (pid 14711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.595733][T14711] Use struct sctp_sack_info instead [ 265.762900][T14715] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2403'. [ 265.844616][T14695] mpoa:mpoad_close: () going down [ 266.117747][T14743] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2410'. [ 266.127386][T14743] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 266.339210][T14751] netlink: 'syz.1.2411': attribute type 1 has an invalid length. [ 266.490378][T14746] syzkaller1: entered promiscuous mode [ 266.495985][T14746] syzkaller1: entered allmulticast mode [ 266.501915][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2414'. [ 266.822741][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2421'. [ 266.957959][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2423'. [ 267.176578][T14793] openvswitch: netlink: Flow actions attr not present in new flow. [ 267.304793][T14801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2429'. [ 268.226795][T14832] mpoa:mpoad_close: () going down [ 268.639233][T14893] syzkaller0: entered promiscuous mode [ 268.644869][T14893] syzkaller0: entered allmulticast mode [ 268.953713][T14914] nbd: nbd2 already in use [ 269.034676][T14919] block nbd2: NBD_DISCONNECT [ 269.097264][T14919] block nbd2: Send disconnect failed -32 [ 269.117216][T14919] block nbd2: shutting down sockets [ 269.481887][T14944] netlink: 'syz.4.2472': attribute type 1 has an invalid length. [ 269.638599][T14908] mpoa:mpoad_close: () going down [ 269.644840][T14956] netlink: 'syz.2.2475': attribute type 11 has an invalid length. [ 269.953953][T14979] x_tables: unsorted underflow at hook 4 [ 269.971245][T14978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.982292][T14982] __nla_validate_parse: 11 callbacks suppressed [ 269.982309][T14982] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2481'. [ 269.998824][T14979] netlink: 'syz.1.2480': attribute type 21 has an invalid length. [ 270.006664][T14979] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.016209][T14982] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2481'. [ 270.028025][T14979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.035282][T14979] IPv6: NLM_F_CREATE should be set when creating new route [ 270.042574][T14979] IPv6: NLM_F_CREATE should be set when creating new route [ 270.049860][T14979] IPv6: NLM_F_CREATE should be set when creating new route [ 270.220719][T14991] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2484'. [ 270.256567][T14991] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2484'. [ 271.072780][T15050] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2499'. [ 271.128168][T15053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.007627][ T9918] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 272.107907][T15061] netlink: 'syz.2.2502': attribute type 12 has an invalid length. [ 272.120555][T15061] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2502'. [ 272.216193][T15067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2504'. [ 272.295402][T15073] syzkaller0: entered promiscuous mode [ 272.308706][T15073] syzkaller0: entered allmulticast mode [ 272.308727][T15079] netlink: 'syz.4.2507': attribute type 1 has an invalid length. [ 272.352645][T15079] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2507'. [ 272.377979][T15084] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2509'. [ 272.399933][T15084] sctp: [Deprecated]: syz.3.2509 (pid 15084) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.399933][T15084] Use struct sctp_sack_info instead [ 273.093750][T15090] mpoa:mpoad_close: () going down [ 273.114427][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2518'. [ 273.266011][T15131] Bluetooth: MGMT ver 1.23 [ 273.277030][T15131] Bluetooth: hci1: too big key_count value 32778 [ 273.406119][T15135] netlink: 'syz.4.2524': attribute type 21 has an invalid length. [ 273.426590][T15135] netlink: 'syz.4.2524': attribute type 6 has an invalid length. [ 273.544573][T15144] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.628920][T15144] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.696768][T15154] netlink: 'syz.0.2530': attribute type 12 has an invalid length. [ 273.769939][T15154] bond9: option primary_reselect: invalid value (255) [ 273.779228][T15154] bond9 (unregistering): Released all slaves [ 273.811216][T15144] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.904835][T15144] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.079532][ T9919] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.134635][ T9917] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.260488][ T9886] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.287434][ T9918] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.386425][T15190] netlink: 'syz.4.2543': attribute type 3 has an invalid length. [ 274.547786][T15166] mpoa:mpoad_close: () going down [ 275.005463][T15228] __nla_validate_parse: 6 callbacks suppressed [ 275.005482][T15228] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2551'. [ 275.116584][T15237] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2555'. [ 275.250765][T15247] netlink: 'syz.0.2557': attribute type 3 has an invalid length. [ 275.300537][T15247] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2557'. [ 275.362235][T15247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2557'. [ 275.416091][T15260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2557'. [ 275.461167][T15256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2560'. [ 275.541448][T15256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2560'. [ 275.596825][T15271] netlink: 'syz.3.2564': attribute type 3 has an invalid length. [ 275.654627][T15256] bond9: option arp_validate: invalid value (134217728) [ 275.669960][T15256] bond9 (unregistering): Released all slaves [ 275.942608][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2570'. [ 276.095222][T15304] xt_hashlimit: size too large, truncated to 1048576 [ 276.223597][T15317] syzkaller1: entered promiscuous mode [ 276.234469][T15317] syzkaller1: entered allmulticast mode [ 276.277772][T15268] mpoa:mpoad_close: () going down [ 276.782080][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2588'. [ 276.795807][T15363] tipc: Enabling of bearer rejected, already enabled [ 276.851306][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2590'. [ 277.125451][T15385] netlink: 'syz.3.2595': attribute type 32 has an invalid length. [ 277.192839][T15385] bond8: Setting coupled_control to off (0) [ 277.542087][T15396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.833394][T15428] netlink: 'syz.2.2608': attribute type 14 has an invalid length. [ 277.851044][T15428] netlink: 'syz.2.2608': attribute type 14 has an invalid length. [ 278.051284][T15436] syzkaller0: entered promiscuous mode [ 278.066231][T15436] syzkaller0: entered allmulticast mode [ 278.087449][T15436] syzkaller1: entered promiscuous mode [ 278.105121][T15436] syzkaller1: entered allmulticast mode [ 278.340529][T15457] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.980581][T15500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.024668][T15491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.076452][T15490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.248005][T15540] netlink: 'syz.1.2638': attribute type 1 has an invalid length. [ 280.360133][T15553] __nla_validate_parse: 3 callbacks suppressed [ 280.360152][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2638'. [ 280.388577][T15556] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.2641'. [ 280.402304][T15540] bond15: entered promiscuous mode [ 280.408348][T15540] 8021q: adding VLAN 0 to HW filter on device bond15 [ 280.442978][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2638'. [ 280.550250][T15540] bond15: (slave bridge18): making interface the new active one [ 280.575199][T15540] bridge18: entered promiscuous mode [ 280.591506][T15540] bond15: (slave bridge18): Enslaving as an active interface with an up link [ 280.748093][T15569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2649'. [ 281.183198][T15567] mpoa:mpoad_close: () going down [ 281.234477][T15612] netlink: 'syz.2.2655': attribute type 16 has an invalid length. [ 281.243171][T15612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2655'. [ 281.319688][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2657'. [ 281.329160][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2657'. [ 281.339417][T15615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2657'. [ 284.010554][T15593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.199278][T15631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.256156][T15638] netlink: 'syz.4.2664': attribute type 17 has an invalid length. [ 284.269706][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2664'. [ 284.295113][T15638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2664'. [ 284.669638][T15668] netlink: 'syz.2.2670': attribute type 83 has an invalid length. [ 284.947765][T15681] netlink: 'syz.0.2677': attribute type 4 has an invalid length. [ 285.601223][T15729] __nla_validate_parse: 5 callbacks suppressed [ 285.601241][T15729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2691'. [ 285.647261][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2691'. [ 285.932835][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'. [ 285.953776][T15750] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 285.963824][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'. [ 285.979036][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'. [ 286.117391][T15760] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2701'. [ 286.165472][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2701'. [ 286.244233][T15770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2703'. [ 286.291265][T15730] mpoa:mpoad_close: () going down [ 286.318569][T15760] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2701'. [ 286.330509][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2701'. [ 286.572303][T15778] x_tables: duplicate underflow at hook 2 [ 286.709286][T15786] netlink: 'syz.1.2706': attribute type 1 has an invalid length. [ 286.763871][T15786] bond16: entered promiscuous mode [ 286.773164][T15786] 8021q: adding VLAN 0 to HW filter on device bond16 [ 286.849126][T15786] bond16: (slave bridge19): making interface the new active one [ 286.857014][T15786] bridge19: entered promiscuous mode [ 286.863877][T15786] bond16: (slave bridge19): Enslaving as an active interface with an up link [ 287.056955][T15796] syzkaller0: entered promiscuous mode [ 287.064089][T15796] syzkaller0: entered allmulticast mode [ 287.143691][T15801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.181920][T15810] netlink: 'syz.2.2714': attribute type 10 has an invalid length. [ 288.191847][T15810] bridge_slave_1: left allmulticast mode [ 288.197862][T15810] bridge_slave_1: left promiscuous mode [ 288.203595][T15810] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.215849][T15810] bridge_slave_1: entered promiscuous mode [ 288.222597][T15810] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 288.656674][T15827] netlink: 'syz.2.2719': attribute type 21 has an invalid length. [ 289.515686][T15777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.913486][T15864] netlink: 'syz.3.2730': attribute type 1 has an invalid length. [ 289.949900][T15864] bond10: entered promiscuous mode [ 289.955541][T15864] 8021q: adding VLAN 0 to HW filter on device bond10 [ 290.008117][T15864] 8021q: adding VLAN 0 to HW filter on device bond10 [ 290.056930][T15864] bond10: (slave vcan0): The slave device specified does not support setting the MAC address [ 290.112496][T15864] bond10: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 290.125801][T15864] bond10: (slave vcan0): making interface the new active one [ 290.134974][T15864] vcan0: entered promiscuous mode [ 290.144970][T15864] bond10: (slave vcan0): Enslaving as an active interface with an up link [ 290.840859][T15919] __nla_validate_parse: 12 callbacks suppressed [ 290.840878][T15919] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2750'. [ 291.111783][T15930] lo speed is unknown, defaulting to 1000 [ 291.147780][T15935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2757'. [ 291.171137][T15935] sit0: entered promiscuous mode [ 291.176146][T15935] sit0: entered allmulticast mode [ 291.200296][T15939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2760'. [ 291.904922][T15973] xt_hashlimit: size too large, truncated to 1048576 [ 292.068096][T15983] xt_hashlimit: size too large, truncated to 1048576 [ 292.827413][T16021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.855166][T16021] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.974352][T16021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.003829][T13911] lo speed is unknown, defaulting to 1000 [ 293.021597][T13911] syz2: Port: 1 Link ACTIVE [ 293.293339][T16033] netlink: 'syz.1.2802': attribute type 1 has an invalid length. [ 293.470121][T16041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2805'. [ 293.658419][T16054] netlink: 'syz.3.2809': attribute type 7 has an invalid length. [ 293.735070][T16058] netlink: 'syz.4.2811': attribute type 1 has an invalid length. [ 293.762256][T16057] syzkaller0: entered promiscuous mode [ 293.786601][T16057] syzkaller0: entered allmulticast mode [ 293.830199][T16062] syzkaller0: entered promiscuous mode [ 293.835709][T16062] syzkaller0: entered allmulticast mode [ 293.837457][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2811'. [ 293.853863][T16062] tipc: Enabled bearer , priority 0 [ 293.862179][T16060] tipc: Resetting bearer [ 293.884010][T16060] tipc: Disabling bearer [ 293.908007][T16058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2811'. [ 293.923035][T16058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2811'. [ 294.441817][T16102] xt_l2tp: wrong L2TP version: 0 [ 295.187580][T16144] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 295.250158][T16150] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2831'. [ 295.307056][T16152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2834'. [ 295.346001][T16156] netlink: get zone limit has 4 unknown bytes [ 295.476497][T16162] lo speed is unknown, defaulting to 1000 [ 295.857787][T16137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.066256][T16189] netlink: 'syz.4.2838': attribute type 1 has an invalid length. [ 296.081346][T16189] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.2838'. [ 296.144908][T16198] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 296.251779][T16209] netlink: 'syz.1.2844': attribute type 3 has an invalid length. [ 296.271456][T16209] netlink: 'syz.1.2844': attribute type 3 has an invalid length. [ 296.526705][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2848'. [ 296.577059][T16229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2850'. [ 296.829381][T16261] x_tables: duplicate underflow at hook 1 [ 296.985174][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2859'. [ 297.293519][T16291] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2864'. [ 297.304352][T16287] syzkaller0: entered promiscuous mode [ 297.310345][T16287] syzkaller0: entered allmulticast mode [ 297.333520][T16292] netlink: 'syz.2.2865': attribute type 1 has an invalid length. [ 297.385818][T16295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2866'. [ 297.438142][T16299] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2867'. [ 297.447569][T16299] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2867'. [ 297.460395][T16292] 8021q: adding VLAN 0 to HW filter on device bond9 [ 297.480349][T16296] bond9: (slave geneve3): making interface the new active one [ 297.489741][T16296] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 297.515022][T16299] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2867'. [ 297.524238][T16299] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2867'. [ 297.589051][ T9912] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 297.609231][ T9912] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 297.625458][ T9912] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 297.648684][T16306] netlink: 'syz.3.2868': attribute type 18 has an invalid length. [ 297.677472][ T9912] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 297.981812][T16337] openvswitch: netlink: Key type 80 is out of range max 32 [ 298.260050][T16352] ip6gre1: entered allmulticast mode [ 298.317189][T16345] delete_channel: no stack [ 298.328868][T16345] netem: change failed [ 298.510487][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.530594][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.538940][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.558233][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.569845][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.656375][T16366] lo speed is unknown, defaulting to 1000 [ 298.709316][T16370] syzkaller0: entered promiscuous mode [ 298.714893][T16370] syzkaller0: entered allmulticast mode [ 298.938707][T16366] chnl_net:caif_netlink_parms(): no params data found [ 299.067052][T16366] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.074492][T16366] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.081833][T16366] bridge_slave_0: entered allmulticast mode [ 299.090175][T16366] bridge_slave_0: entered promiscuous mode [ 299.099021][T16366] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.106281][T16366] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.113974][T16366] bridge_slave_1: entered allmulticast mode [ 299.121730][T16366] bridge_slave_1: entered promiscuous mode [ 299.169001][T16366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.181504][T16366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.221604][T16366] team0: Port device team_slave_0 added [ 299.230118][T16366] team0: Port device team_slave_1 added [ 299.264258][T16366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.271607][T16366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.297985][T16366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.358022][T16366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.365016][T16366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.408231][T16366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.449057][T16372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.546452][T16366] hsr_slave_0: entered promiscuous mode [ 299.557583][T16366] hsr_slave_1: entered promiscuous mode [ 299.574155][T16366] debugfs: 'hsr0' already exists in 'hsr' [ 299.587558][T16366] Cannot create hsr debugfs directory [ 299.625460][T16414] syzkaller0: entered promiscuous mode [ 299.631241][T16414] syzkaller0: entered allmulticast mode [ 299.774433][T16429] netlink: 'syz.0.2904': attribute type 8 has an invalid length. [ 299.785836][T16429] sch_fq: defrate 0 ignored. [ 299.797523][T16429] Cannot find set identified by id 65534 to match [ 299.833840][T16430] lo speed is unknown, defaulting to 1000 [ 299.896181][T16434] openvswitch: netlink: Message has 6 unknown bytes. [ 299.952645][T16433] bridge: RTM_NEWNEIGH with invalid ether address [ 300.046283][T16438] syzkaller1: entered promiscuous mode [ 300.053734][T16438] syzkaller1: entered allmulticast mode [ 300.651286][ T5844] Bluetooth: hci5: command tx timeout [ 300.859560][T16366] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 300.896031][T16366] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 300.982891][T16366] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 301.054888][T16366] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 301.276081][T16366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.302198][T16366] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.360770][T16534] bond11: entered promiscuous mode [ 301.366050][T16534] bond11: entered allmulticast mode [ 301.373758][T16534] 8021q: adding VLAN 0 to HW filter on device bond11 [ 301.406393][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.413622][ T9913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.438818][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.445981][ T9913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.492405][T16540] __nla_validate_parse: 15 callbacks suppressed [ 301.492480][T16540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2936'. [ 301.546403][T16544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2936'. [ 301.864429][T16567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2944'. [ 301.930555][T16366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.239976][T16594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2948'. [ 302.255456][T16596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2950'. [ 302.283635][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2950'. [ 302.293499][T16596] netlink: 'syz.0.2950': attribute type 14 has an invalid length. [ 302.320968][T16596] netlink: 'syz.0.2950': attribute type 13 has an invalid length. [ 302.483565][T16366] veth0_vlan: entered promiscuous mode [ 302.512337][T16366] veth1_vlan: entered promiscuous mode [ 302.584013][T16366] veth0_macvtap: entered promiscuous mode [ 302.610131][T16366] veth1_macvtap: entered promiscuous mode [ 302.639226][T16366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.657709][T13911] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 302.669640][T13911] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 302.678067][T13911] CPU: 1 UID: 0 PID: 13911 Comm: kworker/1:16 Not tainted syzkaller #0 PREEMPT(full) [ 302.687615][T13911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 302.697676][T13911] Workqueue: events l2cap_info_timeout [ 302.703154][T13911] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 302.709056][T13911] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 302.728666][T13911] RSP: 0018:ffffc90006bf7828 EFLAGS: 00010202 [ 302.734741][T13911] RAX: dffffc0000000000 RBX: ffffffff8973f078 RCX: 0000000080000001 [ 302.742731][T13911] RDX: 0000000000000000 RSI: ffffffff8973f078 RDI: 000000000000004c [ 302.750715][T13911] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 302.758700][T13911] R10: dffffc0000000000 R11: ffffffff8aadd650 R12: 0000000000000000 [ 302.766678][T13911] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 302.774658][T13911] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 302.783592][T13911] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.790177][T13911] CR2: 0000200000001240 CR3: 000000005a9f0000 CR4: 00000000003526f0 [ 302.798164][T13911] Call Trace: [ 302.801449][T13911] [ 302.804385][T13911] __kasan_check_byte+0x12/0x40 [ 302.809243][T13911] lock_acquire+0x79/0x2e0 [ 302.813669][T13911] lock_sock_nested+0x48/0x100 [ 302.818447][T13911] ? l2cap_sock_ready_cb+0x46/0x160 [ 302.823658][T13911] l2cap_sock_ready_cb+0x46/0x160 [ 302.828691][T13911] l2cap_conn_start+0x779/0xff0 [ 302.833555][T13911] ? __pfx_l2cap_conn_start+0x10/0x10 [ 302.838962][T13911] ? l2cap_info_timeout+0x60/0xa0 [ 302.843986][T13911] ? do_raw_spin_lock+0x12b/0x2f0 [ 302.849013][T13911] ? __pfx___mutex_lock+0x10/0x10 [ 302.854067][T13911] l2cap_info_timeout+0x68/0xa0 [ 302.858921][T13911] ? process_scheduled_works+0xa25/0x1830 [ 302.864650][T13911] process_scheduled_works+0xb02/0x1830 [ 302.870208][T13911] ? __pfx_process_scheduled_works+0x10/0x10 [ 302.876193][T13911] ? assign_work+0x3d5/0x5e0 [ 302.880795][T13911] worker_thread+0xa50/0xfc0 [ 302.885416][T13911] kthread+0x388/0x470 [ 302.889491][T13911] ? __pfx_worker_thread+0x10/0x10 [ 302.894611][T13911] ? __pfx_kthread+0x10/0x10 [ 302.899201][T13911] ret_from_fork+0x51e/0xb90 [ 302.903799][T13911] ? __pfx_ret_from_fork+0x10/0x10 [ 302.908918][T13911] ? __switch_to+0xc7d/0x1450 [ 302.913600][T13911] ? __pfx_kthread+0x10/0x10 [ 302.918186][T13911] ret_from_fork_asm+0x1a/0x30 [ 302.922964][T13911] [ 302.925996][T13911] Modules linked in: [ 302.933238][T13911] ---[ end trace 0000000000000000 ]--- [ 302.939240][T16366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.953151][ T9886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.961984][ T9886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.967827][ T5844] Bluetooth: hci5: command tx timeout [ 302.977868][ T9886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 302.993262][T13911] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 302.999292][T13911] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 303.019466][T13911] RSP: 0018:ffffc90006bf7828 EFLAGS: 00010202 [ 303.025573][T13911] RAX: dffffc0000000000 RBX: ffffffff8973f078 RCX: 0000000080000001 [ 303.033730][T13911] RDX: 0000000000000000 RSI: ffffffff8973f078 RDI: 000000000000004c [ 303.041846][T13911] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 303.050116][T13911] R10: dffffc0000000000 R11: ffffffff8aadd650 R12: 0000000000000000 [ 303.058510][T13911] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 303.066525][T13911] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 303.076736][T13911] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.085950][T13911] CR2: 00007fa92338cff8 CR3: 00000000540a8000 CR4: 00000000003526f0 [ 303.094078][T13911] Kernel panic - not syncing: Fatal exception [ 303.100753][T13911] Kernel Offset: disabled [ 303.105080][T13911] Rebooting in 86400 seconds..