last executing test programs: 36.413282189s ago: executing program 2 (id=7445): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000600)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000240)=""/127, 0x7f}], 0x1) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1402, 0x800, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20000005) 34.905055476s ago: executing program 2 (id=7450): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x30, r1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0xd1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x100000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x30, r1, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) (async) socket$igmp6(0xa, 0x3, 0x2) (async) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0xd1) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x100000000) (async) 33.453703806s ago: executing program 1 (id=7456): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x402c0}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001000000"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) setsockopt$inet6_buf(r5, 0x29, 0x3e, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000008000100020000"], 0x1c}}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r10 = socket$netlink(0x10, 0x3, 0x34) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r10, &(0x7f0000002980)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002940)={&(0x7f0000002780)={0x198, r11, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_WOL_MODES={0xa8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "fab7aaff8284bd5599c68f9a4a1c2c5f4c729711ff5fe3a3114817fd984e51c4b93348662e1b6a1c67cebb64f2573cb193b2199f83acdfeb7eff4ba3c72b344bb8a72e6b795fdbd3874d023bf97e17858fda0e2786cf056cf2fb14d9fdafd5b305affa68f8fc1557903b4d8602adb428c0ada00857eb1bc8ffab82ddb926591f7121b2247184828d9dd70b74ef8e700b3e14a087559abba8a76a7e1a47bc90"}]}, @ETHTOOL_A_WOL_SOPASS={0x52, 0x3, "ed33a90d191d79645a64dd9d1b27306242e76933c4b63b1f9374e532a0120e533606c2e55fd659baa5c4857f8427b6035cd995a6282a8ceceec81365a0042670d34ad1a356b0e5819e3375512902"}, @ETHTOOL_A_WOL_SOPASS={0xe, 0x3, "d67175a3cea6128d3d22"}]}, 0x198}, 0x1, 0x0, 0x0, 0x4004001}, 0x4800) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000340)=0x1) sendmmsg$inet6(r9, &(0x7f00000026c0)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x5709, @loopback, 0x10000}, 0x1c, &(0x7f0000002680)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="f7ff94d1ad5e1d1ed3fa6fd72e940f5df5b830297c25cd492dfd5093d24c52954f8f81406a4510d3eb8c658b759dbb882e04b55b699dec8cab62419d52879919518b21cc687887a91b857053f95ec7180803b2dccf9a3b6ce8ff2db70d4f300fe0d5d02cb0f80d450e5c387624847116b63b3bfdc8f39ad35f21129a008562e2a6b04275f3ad8bb821fabfc406bec2d1ad200d6bc2d0d599622a88143c0f", 0x9e}, {&(0x7f0000001680)="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", 0x1000}], 0x3}}], 0x1, 0x4014) setsockopt$inet6_int(r6, 0x29, 0x11, &(0x7f0000000180)=0xd74b, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r12, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r13, 0x4, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10010) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x3, 0xc00, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x8044) 33.065398862s ago: executing program 2 (id=7458): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004090) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, 0x0, 0x0) recvmmsg(r8, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001740)=""/234, 0xea}], 0x1}, 0x5}], 0x1, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000001840), 0x3b, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x3ff, 0x12) 31.529600568s ago: executing program 3 (id=7462): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) bind$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfea9, 0xa) sendto$inet(r1, &(0x7f0000000600)="5a16e87a192f99c4d24674c041c016d98faedfc72b6cc4cc4979d9c645ece40b5e26db073d6377112dbf9db42ccc79aaf5fc1bb4ce695a6861d88c6ea93e54713ea01bc9924efa27a4cfd01efae381d8a1cdf7b9c8f99a4a287f4add2a5b657a509bad3f3d3a757c82886f1744935ba9bd59c5d559275b9cf33e402d09cff6e4cf782e8a057fb8b3f7894007dc5b8a3466c0c8ae717874db49bcc0f073454afa5ccd07b81f09a2ea7593322ac8e8b9f090687f0cf24598746c", 0xb9, 0x800, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) 30.934392121s ago: executing program 2 (id=7464): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', r1, 0x29, 0x5, 0xfc, 0x5, 0x16, @mcast1, @loopback, 0x8, 0x10, 0x8, 0x8}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x60, r3, 0x731, 0x0, 0x25dfdbff, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}, 0x1, 0x2}, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1, 0xc0, 0x101, {r5, r6/1000+60000}, {0x77359400}, {0x4}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "01704bc67d612d86"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004004}, 0x43391e8237283d08) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) (async) r7 = socket(0x10, 0x3, 0x1) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async, rerun: 64) r9 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) splice(r8, 0x0, r9, 0x0, 0x10500, 0x0) (async) close(0x4) (async) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r7) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="7607f249", @ANYRES16=r10, @ANYBLOB="040028bd7000fedbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b004afd00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0002000000"], 0x60}, 0x1, 0x0, 0x0, 0x44800}, 0x4000) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7}}, 0x1c}}, 0x40000) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r11, 0x8920, &(0x7f0000000040)={'bridge0\x00', @ifru_ivalue=0x4}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000780)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f00098027bd7000fbdbdf25040000000c00170001"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) (async) sendmmsg$sock(r12, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f418490309860762750", 0x13}], 0x4}}], 0x2, 0x0) (async) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x1, 0x5, 0x5, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r14, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 25.497752474s ago: executing program 3 (id=7468): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003b00617cfe7da49f6fa1df2511"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40800) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0x3d9, 0x8000, 0xffff, 0x5, 0x8ef, 0x6, 0x5, 0x695e1ad0, 0x80000000, 0x1, 0x7, 0xffffffff, 0x7602, 0xfffffffffffffffb}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000280)={r1, 0xffff}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8) 23.443722252s ago: executing program 0 (id=7469): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x30, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x4, 0x0, 0x1, [@generic="f3"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) 23.396427629s ago: executing program 1 (id=7470): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x40104) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 23.08650727s ago: executing program 4 (id=7471): r0 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000b70000000200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000b70000000200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x1000) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="d6b53d69b7", 0x5}], 0x1, 0x0, 0x0, 0x10}, 0xc1) (async) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="d6b53d69b7", 0x5}], 0x1, 0x0, 0x0, 0x10}, 0xc1) close(0x3) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x2090) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) getpeername(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000000c0)=0x80) (async) getpeername(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000000c0)=0x80) 23.005331649s ago: executing program 3 (id=7472): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=0x50) connect$can_bcm(r0, &(0x7f00000004c0), 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) close(0x3) 22.508629449s ago: executing program 0 (id=7473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea4400000000000000000000000000000000000000000000ef000100000000000000090000000000000002000000000000000000000000000000010000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) 22.339455478s ago: executing program 4 (id=7474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000640)={0x14, 0x19, 0x1, 0x0, 0x0, {0x1c, 0xd601, 0x9}}, 0x14}}, 0x0) syz_emit_ethernet(0x6d, &(0x7f0000000ec0)={@link_local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x1, 0x6, "21c85d", 0x37, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x62}], @payload_mcast={{{{{{0x2f, 0x0, 0x0, 0x1, 0x0, 0xb, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x5, 0x1, 0x0, 0x4, 0x4, 0x4e20, 0x4e22}, 0x0, 0x1}, 0x2}, 0x4}}, [0x0, 0x0, 0x0]}}}}}}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) nanosleep(&(0x7f00000006c0)={r3, r4+60000000}, &(0x7f0000001200)) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_tracing={0x1a, 0x27, &(0x7f00000018c0)=ANY=[@ANYBLOB="1800000008000000000000008012000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b70300c09dd521937b033a07000000bef7841c78e016edd1eff300008500000083000000bf090000000000005509010000000000950000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085100000f9ffffffb7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000007fa6500010000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000f40)='syzkaller\x00', 0xba3, 0x45, &(0x7f0000000f80)=""/69, 0x40f00, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001000)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001040)={0x5, 0x10, 0x3, 0x9}, 0x10, 0x259ad, 0xffffffffffffffff, 0x5, &(0x7f0000001080)=[0x1, 0x1], &(0x7f00000010c0)=[{0x5, 0x5, 0x7, 0x7}, {0x1, 0x4, 0xd, 0x1}, {0x3, 0x5, 0x7, 0xb}, {0x2, 0x5, 0x3, 0xc}, {0x0, 0x3, 0x7, 0x8}], 0x10, 0xffffffff}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001280)=@filter={'filter\x00', 0xe, 0x4, 0x538, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0xffffffff, 0x4a0, 0x4a0, 0x4a0, 0xffffffff, 0x4, &(0x7f0000000580), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x7f, 0x6], 0x1}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x18, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xba5}}}, {{@uncond, 0x0, 0x2c8, 0x2f0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x9}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r5}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x598) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000900)=0xe1d, 0x4) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}, 0xc}}, {{0xa, 0x4e20, 0x8a, @remote, 0x1000}}}, 0x108) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x5c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}, 0x1, 0x0, 0x0, 0x480c0}, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r11 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r11, &(0x7f0000001880)=[{&(0x7f00000005c0)="06c3", 0x2}, {&(0x7f0000000880)="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", 0x632}], 0x2) setsockopt$inet6_int(r11, 0x29, 0x38, &(0x7f0000000600)=0x1, 0x4) 22.035812982s ago: executing program 0 (id=7475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)={0x3c, 0x1, 0x8, 0x3, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xb9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4000010) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e00010000006ed06dbb2f8b58e9"], 0x14}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x4) close(0x3) 21.861216571s ago: executing program 1 (id=7476): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000015000100faffffff0000002002180000", @ANYRES32=r1, @ANYBLOB="0c0003"], 0x2c}}, 0x4000850) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000340)={"7fe2d837f06bc36dc0d7775fb48c5f46", 0x0, 0x0, {0x6, 0xffffffff}, {0x7, 0x2}, 0x1, [0xfffffffffffffd47, 0x100000001, 0x2, 0x0, 0x0, 0x7, 0x0, 0x7, 0xffffffffffffffff, 0xad, 0x2, 0x0, 0x8, 0x5, 0x100000001, 0x9]}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'macvlan1\x00', 0x2000}) 21.319690068s ago: executing program 2 (id=7477): syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_batadv\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) sendmmsg$inet(r5, &(0x7f0000006f00), 0x0, 0x40d0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x60, r8, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xec}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090325bd7000fcdbdf250800000008000300", @ANYRES32=r9, @ANYBLOB="08000600", @ANYRES32=r10, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) (async) syz_emit_ethernet(0x12d, &(0x7f0000000240)={@local, @remote, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x6, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x117, 0xfff6, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0xfffd, 0x4e22, r0, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1001}, {"e19ffcc45e77a637d2ad0fe046d19782bc7757b5bbad8eec9dcd71cfa70824793f4e36dba4b23d7ae6270d038bce629b6f3e3c689730c61050a83095c84b924a104674fece8c8022a64b37a369b556be553ef83b9b9a8b367e04edec91f189d20b319edbfc8f1d8a951139776570bd57a1df0283b282c17e487404ec711ec89e2a98bd8f34b8077a480cb503167af9113831fe6f1da5c0fbc6fdb651bf6ce7ddb6bf192a9a4852a40fb9ec9ec733abce18a001c373791f210b9b71f7294e28d1ee8f539c7f58864d9440915483c0424aa450018604f9345b465d6294ec71ab05747dc8b3a212f22d233304ec4025a8"}}}}}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r12, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fcce4e9f0153b791470099000000000032000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r14 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f6, 0x8, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) 21.185835765s ago: executing program 0 (id=7478): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x114, 0xe) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x14160819, @mcast1, 0x3}}}, 0x84) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000a00000007b0a00ff000000001d0a000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="10000000fd08c2ba4ee359afbd0000002500000ae63e3201"], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000004060107000000000000000007000009050001000710d52e35b13a0000000900020073797f9c46f22375e8791004db6b3474fff901b3cb1a78cf33983dfba671599e195d561c7c50b2ebef63af7c9d5008bdf203a7f4d6d77419e02a4997569e59cd821f896ec02b75d77b9334e7d3b4d1854454c969171bae23d45bc9aa02e10101963e471149034e79a562d9a0c5b9ad0a6b35662eb5c3761e194b04921c7a62189781b16e66f2efea28e557131716c995e1b424dbe2c718fd5efb16da6cc57150d1a924527edf5b60cc1b8c0a0d9061df65fcae02ab20107140320110b4ec1133abbc1d432b4b190ba050efb5ff34292304be2d"], 0x28}, 0x1, 0x0, 0x0, 0x4044810}, 0x804) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x7d, &(0x7f0000000080), &(0x7f00000000c0)=0x18) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x400c080}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x29, 0xf8, 0x9, 0x4, 0x31, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x80, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="65082000fcffffff18150000", @ANYRES32=r5, @ANYBLOB="0700000000000000852000000200000066515100fcffffff95803000010000009500fc04a976c71fff3d0400ab0000008520000003000000186900000c0000000000000007000000"], &(0x7f0000000580)='GPL\x00', 0x3ff, 0x2e, &(0x7f0000000340)=""/46, 0x40f00, 0x29, '\x00', r8, 0x0, r5, 0x8, &(0x7f00000006c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000740)=[{0x2, 0x1, 0x2, 0x4}, {0x2, 0x3, 0xb, 0x3}, {0x4, 0x4, 0x5, 0x7}, {0x1, 0x2, 0x1, 0x2}, {0x5, 0x5, 0x5}, {0x2, 0x3, 0xc, 0x8}, {0x3, 0x3, 0x4, 0x8}, {0x1, 0x1, 0xd, 0x2}, {0x3, 0x400004, 0xb}], 0x10, 0xff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) sendmsg$netlink(r9, &(0x7f0000004200)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000040c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r10}}}], 0x20}, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000000000000008aa026dd43e3f42f176b736cff1ccbc6b312931322c6b21f419105fd5ced0a2631de826e4930a8df05be3c", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) 20.953808798s ago: executing program 4 (id=7479): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200088d0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r3, 0x8000000000000003}, 0x18) recvmsg$can_raw(r1, &(0x7f0000000b00)={&(0x7f0000000440)=@tipc=@id, 0x80, &(0x7f0000000980)=[{&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000000600)=""/13, 0xd}, {&(0x7f0000000700)=""/115, 0x73}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000880)=""/241, 0xf1}], 0x5, &(0x7f0000000a00)=""/215, 0xd7}, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x25, &(0x7f0000000040)=0x10000ce, 0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000815) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240400c0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x140a, 0x10, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x40) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd00000000000003ff00000800090002"], 0x34}}, 0x20) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f7, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) 20.162399721s ago: executing program 1 (id=7480): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r2, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0xc0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000180)=r6) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x800007ff}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) syz_emit_ethernet(0x46, &(0x7f00000005c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, "a3a439743b6fe7a8"}}}}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f00000001c0)=0x6, 0xffffffffffffff4f) 20.106728031s ago: executing program 0 (id=7481): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x2000000000000164, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000071122e000000000095", @ANYRES64, @ANYRES16=r0, @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x24}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x30}}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 19.721697303s ago: executing program 2 (id=7482): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@timestamp={0x44, 0x8, 0x6, 0x0, 0x1, [0x4]}]}}, @redirect={0x4, 0x0, 0x0, @broadcast=0x100e000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0xc000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r8, 0x5000943a, &(0x7f00000022c0)={{r5}, r9, 0x18, @inherit={0x50, &(0x7f0000000780)={0x0, 0x1, 0x4, 0xa, {0x5, 0xddc, 0x3, 0x7, 0x5}, [0xa774]}}, @subvolid=0x9}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="a5010000", @ANYRES16=r11, @ANYBLOB="01002dbd7000fddbdf254d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a8007365636f6e646e616d650000080003000000000008000300030000000f00a8007365636f6e646e616d650000"], 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x25}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="ac", 0x1}], 0x1}, 0x8804) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000fcdadf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 19.079865229s ago: executing program 3 (id=7483): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0xa18, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x602, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000004c0)="93d90400000300b5b5", 0x9}], 0x1) close(r1) read$rfkill(r1, &(0x7f00000003c0), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x3, 0x88) socket$inet(0x2, 0x801, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xfffb, 0x1}, 0x6) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r9], 0xc4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x84}]}}]}, 0x170}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) 18.659915568s ago: executing program 4 (id=7484): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r4, 0x2, 0x8}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x4000000) 18.430065691s ago: executing program 1 (id=7485): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea4400000000000000000000000000000000000000000000f0000100000000000000090000000000000002000000000000000000000000000000010000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) 18.263044765s ago: executing program 0 (id=7486): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) close(r4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r10}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x19) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r2, 0x53f63307afa5bb95, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x880) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x3, &(0x7f0000000000)=""/224, &(0x7f0000000500)=0xe0) r12 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x1, 0x1234}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socketpair(0x6, 0x800, 0x100, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r13) sendmsg$NL80211_CMD_TDLS_OPER(r13, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, r14, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0xe}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xce980413f5414486}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x40880}, 0x0) r15 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r13, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r15, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}]}, 0x3c}}, 0x4001) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 17.960174794s ago: executing program 1 (id=7487): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xa1, "0870b46940c399d5a95c7417a06fc5338d0dbfd3d5f08435b38c0882dc94575683d38cdd6c40ead92a211eeef8540354d130032aca504dbcb2b7d3bc24baca9629f17a3603ab3603a0dd3278fc8addf83958da9fafac9b789d8d4dc48d80c473a6f6e8495db344c353382fa3271e724411f4b23b101bda4646abbc9b0154e204851469e711cec64c825570f70895d6d54e0ca085fea7c09baa91bbd995ee7b51f6"}, &(0x7f0000000000)=0xa9) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) socket(0x11, 0x2, 0x0) (async) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) (async) close(r1) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xa1, "0870b46940c399d5a95c7417a06fc5338d0dbfd3d5f08435b38c0882dc94575683d38cdd6c40ead92a211eeef8540354d130032aca504dbcb2b7d3bc24baca9629f17a3603ab3603a0dd3278fc8addf83958da9fafac9b789d8d4dc48d80c473a6f6e8495db344c353382fa3271e724411f4b23b101bda4646abbc9b0154e204851469e711cec64c825570f70895d6d54e0ca085fea7c09baa91bbd995ee7b51f6"}, &(0x7f0000000000)=0xa9) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async) 17.677875029s ago: executing program 3 (id=7488): socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0xf, 0x3, 0x3c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 17.607996814s ago: executing program 4 (id=7489): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000005c0)=0x2, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "51edef7214e4ff93", "42635001e90003a25f49631e467e1074", "6bbc39e1", "e01cf9ab6c03e72d"}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x800e, 0xfffffffe, 0x7, 0x9, 0x151, 0x10000101}, 0x20) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 16.862731891s ago: executing program 3 (id=7490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20700, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x8080) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'netdevsim0\x00'}) pread64(r0, &(0x7f0000000140)=""/1, 0x1, 0x7) 16.597421349s ago: executing program 4 (id=7491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f00000027c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x5, @mcast1, 0x4}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000080)="c4abfd2fc19f40042be79de66033015900e3be68f254780587e0876064c740d52c0c19893d8916a9a8c9d1126dd83aca8975b8a6812f7a2ca83112cec26de868b77db2d1aa262bedda3692275437c1db8673e9b5ba280c3ab317686d11ac42dcd849733521998b5efe83dbe06c78c2d600ef9c61d64b2c8e17f45a43fc35d6d5b2d6b543467d219688a71ba0f2aa80a53d3614d8c2273c091a0d346db5afd8cfb1f08563d7eaf2ed19190e1c87262a3470de5144ad21542bf1659a72820b656be396", 0xc2}, {&(0x7f0000000240)="e626c34dba8f2fe94dabe1c882d76dd7075ba6b92e7bdeb5222efad60d671f97af5cfeef857add7c505e4f666dc02d056b3285612b0542e1d09d0ed9364d349dea1f0c66286003f5e074a14aabd33cf3dfa4004740d70d0a42b1a4799b689f4043a4228e89ed06fa636f7ee034f1aa6bf59b8b1ce745eb6d1c194f086634906fcbe2889690d5e5e97dd1a705dd0ae0951e259210d21ae927437c522968877b8c9e5abf5765d0c25e991e0c204a80b15f", 0xb0}, {&(0x7f0000000380)="8b15af1e7c752cd64ffbe0d28ba94327d9ed6b88d6c3ffe0fadd0da3805902b6f815918b390833ab52a7b89b12f9e591e073e4fc5c82d03e8087e2137fd34b999b213ae0dcc459059d4617551325615451c864494b371d3ad80f7cc97ff413ecd70fff6a3a8b05b273d534217283bfaed1fb4eb37df4914134573b5e887e06ff99fc5a1ab334f0c7e4d3f2271970274debe7c38712c39098382600a7", 0x9c}, {&(0x7f0000000440)="952b4d4ab49e35c9c2c5896d70e3b5668a9e5d805e1f84bce58852dd86764fb21d81db9a42e65883a5b4e956afb7f22c5df088dd4f54463113360ebc55c00c725b7789386f5376409553020ccb80d622517aaeb87a1d299d7c36e7d179cf04a3e1a0dec5348a9e6e4a1839d4be3b76dcfd655d271df7b73fb64c08a1620106d5eb58ebbc2df6bf2cb75eadaf", 0x8c}, {&(0x7f0000000500)="47ddec8a3ce5c2fbe4ba1e3c5c72c31f3499a848e1f5a89e5ea887f4bc04ad0a314a1d7701a6589f9b5af43aa8eda13fb47949ac0c607e210dcf118e53c246a08a9b93f2b0f214bb3043e988adf748ae8cd9bb0668036255c44332b9ba12487b6b2018a818e141dd6960a636189f496d9b19b386594592772f742e255db08d9369d950ba7d3401491792459cf644773e5c20b91a3b36814e7f92f3f0717536d34da2a3fbb8179245a8ea13", 0xab}, {&(0x7f00000005c0)="1bea778e89f5cabe1ff1550b498342593fdf18d883d78d2d50c8188a40263f00aa25d66a9152bbc3bdcecd17189e8711bc7427316b8ee5c098f91d4e7e09e340b3d602f9e4ab4895391007471d8199102ee38f6b7b2ed0a6abc86731", 0x5c}], 0x6, &(0x7f00000006c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x8000}}, @dstopts={{0x30, 0x29, 0x37, {0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)=[@dontfrag={{0x14, 0x29, 0x3e, 0x40}}, @rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x0, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0xb}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @remote]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2b, 0x10, 0x1, 0xc, 0x0, [@local, @local, @dev={0xfe, 0x80, '\x00', 0x4}, @private2, @local, @mcast2, @dev={0xfe, 0x80, '\x00', 0x13}, @private1]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x5e, 0x8, 0x0, 0x10, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @remote]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x190}}, {{&(0x7f0000000940)={0xa, 0x4e22, 0xfffffbff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xcf5}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000980)="79b45669f525fe606f92a80d05d0cc181b9fd137d5b99b32df34f281c2fa9cdc6b243e56d9d6591ca03f06f5b49e241deb5dba34a1330e1bf83fb8066880918cc7bc83f5f41f86", 0x47}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)="ad95defe12c3b8c8c6e09215ff0d1b87ea8d365c3bc2f3f6380d396bd0bf7923e12ca2503560b65cd6fb7f6226430ded0a40e4df0286bf4814e7de24c7e9b62e96ab63e5db1c3887197a4417de337f43f9e09441f5d8414eaa2d6c79240a9aee784dc68a7fc296d76c367d303c123399423974f04be512147106175511a835840b300eee56c26ca54197765f5deb8fb7df574ab4e3b3c2d6a4e49d685cebe9ce920f54b124b7b38efbb94169a6c5fea4028d757aacd0790af30f611231689003473229c6", 0xc4}, {&(0x7f0000000b40)="db6a5bd2ad1235a4c61d6311c005b2464e32d486aa6ebee84c80198e31766ec2983316383579c2dd82e2efed35769ee173a1de33f263d10ac12c3d605aded4227d05dcfb15e6", 0x46}], 0x4}}, {{&(0x7f0000000c00)={0xa, 0x4e20, 0x5, @mcast1, 0x3}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000cc0)="c8d74cee4aca8cf40982c9c944a1aceabdbad64a8151348032ed252c76312505bdb0c662c16e25730e64cf24dea4517cecd53e0015c216650a2c4bae4d814112d2078bbfcfd19cccc9932ce1c8aa8880d5b3ed37b1833d82db73368736d4613558c25e4837489164a33321d739df272b8b669f3e17ac85f22dbb89714e02698f5f553e02b97310bf05b9a862a36ba05ac1aa8f15235cc295710513493774bb464e414d705ebc7245b979f6d794d65e98a495b032ba3268e61e4dc3b7e17efe17bd0ee30b662903ca17bfa8b8ed4733e2ae799f9169ae450978128a4d789657efe2682ae2bb9c74b714b048ca477c664c", 0xf0}, {&(0x7f0000000dc0)="71de1b9d602ecd846786373b5aeb8790a5b201f890c37cfa321ae623072fcecc008c6fe77851c3b66afd52bca42a76c03fcb13defb3cb6e3194bfd1fd9063c1a8b0f574c2385d11c97ebbe37667bf9f1c5eba3f872a1cc2041e75bbbace39281afa1fb73ed012a4988b7c32aeba718c1db42f2671c8461327f9b1db386fd41788cdee3ac763fbf6ba9f1b3233e09bfe6e237f841c7e706fcd81c7c6ee3b46aef2d7b073a9b3ec8507fcfd9e9d196d4de29575cd1b2e0571828ba3e8c1157f676d17c8fca609c7be69b182c4cbdf68f246712117d1dc9d20f995cc61c6674a9f8b29e757db4eecf7336b4a7899d8873774394f7", 0xf3}, {&(0x7f0000000ec0)="488c954187f76a214bf92e2aeec53ac3bcf62335a24e145ec262b98e412d5d66e113d3995bbde5c8a970dd26cc8f2907313f9365311f5981f2ac4ee27b5c1ceef0a52a0bdb85af07fb80826c097338da11d8601f28f834c0724a6a0f55e64870169eb89f6575cb755fb255e110423617f910ac484e4b83832f80cc792eef7d6fcbf38d2963ade8a67e63432c76739a09aa8ea9b0c1237036c4a33afb0456bada0ee4494e4230101447bffba54e5e4cf432b54a5a5d", 0xb5}, {&(0x7f0000000f80)="3f29bffe18d3032e6baa192a5859be84840b8fac94deac2517df4efc1c73e4d3b63fae1a0ef36e93be521f7a3f57d82495cd3c149803abd853445e9cc5567bbcb3abb126ae35836e973216a255014b4718899aa0568c95c4c992c309fcce45ab6ebb58ea9c347fb4b9938bf9933bf2a90ff51decf7284baa2999f55298727bf4abb4d6072997a7e9afea2ddb9913cdd2208416fd2784d42e793e1dc063cb681732dd3c1fe0c087e923db1fdc867486f3b3e42886acb61515f57e24efdabf605305056457d9a105b3112b2b936c567b5250300d3b61a641412635f0dfe608d75e66bd2f560b72af50ecc4d9", 0xeb}, {&(0x7f0000001080)="29ad514fb3914728dc8bf7a6cf0885a9ac09050cab9f9dc1ff1814749ca5150a72d46cefcaba7205d42d77f362dc544300d7465f4e8214b1630e58967a6bb0a371264c431e91c685332dff6843d29e7e61970a780534565febb1d52b60da0ba80ae5ace127b86049734cbf1601f08b26971f2541e0f771096cecdcf14d01960e263c214037e7b5fdd0fa9b54acb846503182cd76072e6915f11eba", 0x9b}, {&(0x7f0000001140)="6efee724ec5d524c85de86765ce69ed465369c404963180d20e73a1cba0f7fa5b8cdecb31160082ae41b8344e04610c12b9ad349566d736ab30a1cf629c9177fadc0870ac4e32c31e603a837f2a5915cb2c5d76eff9f1288987d9532e65041cc659510d3dee92a38c9434dc1294de402a0055b9bf8bc5f08779098f329af45357d511f0cbb5beebbe2d4d8f929c1bdeaf1998ea2553969f8aaf0759f21041cc68a3ce97f3a898cc4f5aeba0e9c01473c8e20da35c9863e22e8806042", 0xbc}, {&(0x7f0000001200)="8603ae92a857061d5393a2531d661f86be6a4d944a0e6bdf3f8b6477def6d841594a49ab1c2bb5ed75d51e2f84cb2aee69757ae1dc7bcf5a46db23908f4cbacfec0f1e75c6500a8b9f3214ee4563185fba12eabb9bd09d830081084d1da87388f3d5b07db4cae4046f9ab5ab04ae7e197c73fd795b6e694aa55e64d03cd86c40a3fc1d43e23e73596a92ffb545901e1bb0f229b532be9aea56c88dec572120802a6f7f97f7f3169c3a0d6cac0f700311a597cdad42b1", 0xb6}, {&(0x7f00000012c0)="f8512d709c482a6a7626", 0xa}], 0x8, &(0x7f0000001380)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x3b, 0x9, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0xb1, 0x8, [0x33, 0x0, 0x7, 0x3, 0x8da9, 0x5]}}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x58, 0x29, 0x36, {0x8, 0x7, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x40, 0x7fff, [0x2, 0x4, 0x2, 0xf6]}}, @pad1, @jumbo={0xc2, 0x4, 0x40}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @pad1]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x2f, 0xb, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x3, [0x6, 0x2]}}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0xac, [0xfffffffffffffffd, 0x3, 0x651b, 0x2c77938d]}}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0xaf, 0x71, [0x4]}}, @pad1]}}}], 0x150}}, {{&(0x7f0000001500)={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa00}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000001540)="051f7b8fb6b006ef18dbec7ee4eb0d47341d17ec16de4998df35793967a2a9db846628f4b778491c3254c6e8e3859016e3b836062e16cf8d4fbc73f3a4be888fed8de5294fedb635577e773aa3d1d042ba00b3f4ee1f40d286ca5b7b083e2cafe147c98a628225bfe71c6ab45ebc4aa22b5162d9af17901cfd190d875caad285533b2de3f7825db9f767dfd35c36e249c2d44ce57504ad5dc689fa58e320b193a88b6eb3e565f62a6b77b66af6ec2c2333bfab25617034a569f4f11be4e5d4d86dc980886840ed746a751e", 0xcb}, {&(0x7f0000001640)="6877826cadbcc6b4ca96dec08ac55f7bbe72", 0x12}], 0x2}}, {{&(0x7f00000016c0)={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001700)="cc2014ed7239c07696afa704f2951b26b85c409b10e120858710ce021a1ff97af4448e1bfdbc75174522e69542719bfa08f402711f21ef6f1541d4e72aef441dbc712a84a64e0bad3275ce94a56c1b7018d7b2397d792e23213650daae6e71bb7355d5c6d9f1eea26dd607c55b9f75d2af891a40337a5add8e13a1e7cde4070fae8339442beb4740d496cf0f2d18bf6540bacd30a8934b3adbf8a2b8f9ae7b42dcb2a6a59b0ba1f87eb7057490e447eac030a6b4498472ddcb999650cb18b83b74c3b73cb2cfdba55bea33475ac7e5f29f313a447cd4a40a44d2f21596f95c5ecd8fa0571fdace376581b634a1d5f4c414554334", 0xf4}, {&(0x7f0000001800)}, {&(0x7f0000001840)="7b9678ee01d4b0604bf19e7e4535135984f46499dea0123b2999c8fde89bc33840b9eb61ca6a2b019a0190f6412c45696cda26d74141035b627dc4c72ef99704c5a0db3096179016abaf7b742639df63bdc77220061ea28bc9b453f33088969b7d0de63e38208f936769ea836947fe0db435c5bcb6a6d98b41eca42289cdd8e7106e68047afa", 0x86}, {&(0x7f0000001900)="d2b97c978c3255fc856c5dfbebc8e48a675bfa7997fc478974ceb6a8acf326e41d1e5ec8a3b95232468ac9f1354290a695c4dbde28c2da330db2bd9428328aba08376f435af9364ef50c16bae38cd69d665343ebd9bf687190f12c4c382ecc1531c7d98d9b7224a54e4c78421f321975165ccd3795c160da9a5552689c50", 0x7e}, {&(0x7f0000001980)="9a5c11612eb7f07283a41134945b86ac62d223af2a047469d939724b6993c491dab6715211e27754", 0x28}], 0x5, &(0x7f0000001a40)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x89, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xffff6893}]}}}, @hopopts_2292={{0x98, 0x29, 0x36, {0x85, 0xf, '\x00', [@ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x7ff}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x3, 0x10, 0x2, 0x0, [0x3, 0xfffffffffffffff3, 0x0, 0x5, 0x1, 0x5, 0xb31c805, 0x8]}}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0xb1b}]}}}], 0xb8}}, {{&(0x7f0000001b00)={0xa, 0x4e23, 0x4, @private0, 0x7}, 0x1c, &(0x7f0000001e00)=[{&(0x7f0000001b40)="9a1d1cd914256867c61ac8529a84bf6f8e789ea8b1928df2fbfdbdc41314699414dc9ffdc8bb1fd1d9bf1021fdc6b64cc6d46a7e9c3c28cdf63752ac0d39ddfbc507bc8a3be085f84b97387b3e777e995e4ccf31be2b117da4d840657ec0b62403f80e4e28b2a6dc7730dd3b8492", 0x6e}, {&(0x7f0000001bc0)="04d0a149a95e64d270a681de9990a1541da3a2005431ec1cef2e2145b8fac8e9818a2d042f270e68504239d6af2dff77f78bd16c6c90f218d1bf6e8b374e5ac4a736a696003a054ce56a06d714d2d3b55f5783751b8f9a9aeac5111ae1cb108bcfaf477bcf1d4326a7bc24e7ef3e478ad8c26e180ab653eb0e4ae4019480f88e3ff29d6aa15ef0cd04faa2108056330f3808932822c71c301f836a1a1e7f286a1f8a7ad4", 0xa4}, {&(0x7f0000001c80)="f12e75c2cb328006f9034655505d85b3d6191b1c8db6cdbcc65a6768eefdfdaf786e84ecff26889080d4872713c56eb287ff6fc1f067331349ba14d2441f6c5c96b2ea7c661736e70aee3efb7d", 0x4d}, {&(0x7f0000001d00)="92d69f1af31933daca5144869047e5c0528d8cab731953527b3e59220ae6f9e16dfb0b03933fc74792c7a048b435e88d72c9520144f4e2ff3c535ac39f5099bbd3fa2af8ab29c01077ccc2e0abb94369b0798719faab241d8991fd1aefa58f7646e7ce4c94f2ed59ff695ed70401ed8d2a3dea48f8894658361ff53d5c4e0ed4bd6295d08dae267ce7fa7ac5d309878682635954edf2ed4d085d94b1d3158cc6960cac14dce07015b063170c92ab110265cd132c56c6ec866590943af58c5de1b721e5dc6a773f4ce229e3307b11e22b1338b1689e7790d7e9a80f62ed", 0xdd}], 0x4, &(0x7f0000001e40)=[@hopopts={{0xd8, 0x29, 0x36, {0x89, 0x17, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0xc654}, @calipso={0x7, 0x30, {0x1, 0xa, 0xc, 0x0, [0x3, 0x0, 0x0, 0x5, 0xffffffffffffffff]}}, @calipso={0x7, 0x40, {0x2, 0xe, 0x70, 0x6, [0x10000, 0x3, 0x62bd, 0x5, 0x2, 0x100000001, 0x7d5]}}, @jumbo={0xc2, 0x4, 0x2}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x29, 0x8, 0x1, 0x3b, 0x0, [@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @mcast1]}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x1d, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x7ff}, @jumbo={0xc2, 0x4, 0x798}, @pad1, @jumbo={0xc2, 0x4, 0x2bef718a}, @pad1, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x9, [0xfffffffffffffff4, 0x3, 0x1a54195f]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x3, 0x0, [@mcast1]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0xb6, 0x5, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @mcast1}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, r2}}}], 0x238}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002080)="f66c286afb1874a21ed23d0b3f5f912d044faeb0fabae6eeae0dd0bbcde53bee8881988070838447642196fc9596c4e61027aca8afaa982f8a070110488f6013332e53c2ec3d19144d0cab327812e84826392725ff3fc8077b7b3c2cbc2f765df2f0fbecad6c250917ebc09514c461", 0x6f}], 0x1}}, {{&(0x7f0000002140)={0xa, 0x4e22, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}, 0x1c, &(0x7f0000002680)=[{&(0x7f0000002180)="90b159d743f259f3d0408461c0794ea8761608b390d4dfeb8f15af70ead873d8b6557a0d974a52345e19e78ce61e43d37bf226a6c49f6a6b06c1b8e83193b10aa5ea6c787dab8c198f9113da62c71478e728d52e97a2473455e381d975ed2d35630c1450d083f5d5f586c8b29947c98b47f7cd0faaacd67af92f3fd1f9205e0ba0fad3011db181c0909455648a233bb9f9d54debf5705dc427328862b071898f5b563fb4eadb8d1a4482c80d22eb9628d22f740a42c679960cfa9e6ab0aee65db07134f482635a4d5b4c3792", 0xcc}, {&(0x7f0000002280)="aa518b1967adc472da6fe0ac4836040b2e6c2739bc745bf413fac348e90c195ed367b3233f99084e729d1644d244d1f8b1aae503d3aa8522e6c93530673acdeb08b9dd7a7b3176391c41d9a26b4f282634cd09597f569c330c227d202bca490873cb078553cde443bfb7bb900c8c838bc38f29909a1990869ccf0261102a03783e46f29c62b781d73e27aa6abedc754b3d279b4f4b367e306f579b8f6e04541b3c573a846964a89300e9c4095025de1395", 0xb1}, {&(0x7f0000002340)="f2b541a910ac5efe792e16d35c29101aeadd632b860cd4ea6f642529f379770ad826971a2f429bda63638f0da91d46962d6fca44b6013ffa2afa43bc4ea9ffb03db141aec6aacabb0e601dd75159c8e5d61354a0658dbade64969ba662a50b720815bb952da7541b9bd0b79d8b9eefac812096f1f0a990872ffa34c60682114b52c9a10a5fbb2c7758057225ba9de7fe1821b631555edb1e798e74f51007f9a581f7acb266d97150ff5e3f2413e1392f6397415dc820e6def4fa24ed2d56be9509", 0xc1}, {&(0x7f0000002440)="8dc6f6ec025b84cb22035a4efcd16d0726129dae7af086d008efa0cadf551174a77fac0b2a382a1dc1542f4edf1f1669bf85060b7a47772cd291d1471cb3b7dcf219d151f06f69b28f875bac859120acafd264462f0ce0207846968997956a7dbb1720af4d37799d101c4fa6a27b6dcc6f12c4754f5191c570b6319767b064a03a3cc9f19372c4cf0345760f5ae987bca8f6e99bb42ebf28774b2cca0388951431f9e21f6887d2549f38f2f76779737fbd602fb7cb0c5a47f9e2dda4975daeb03572729ea91b905c9836f71c8e18423716", 0xd1}, {&(0x7f0000002540)="2707ecd0d52cd1dc807c7b048ca1956e6a713f1e469b216053466987224686b987046a6d913b1bf6a3be8b55578c69d0eb0d58f854e079fd2f12d7c36ea40ac830d353357507072ef981f353d05c4204e848db8e89e5691bfb568e2eb68122185a535f5febcbaeafa47c53228b3da632d5c350ebf8da17251400f77694aeaadedd73fb2d41b818f6c61617bd7cb234757133841e676be3", 0x97}, {&(0x7f0000002600)="6da8a46582de8cc382b7c4ac6b9add21abdd230aa23279a3", 0x18}, {&(0x7f0000002640)="aa3a9afc1044648afe461a1772865a04090768c49c92986807f462ca", 0x1c}], 0x7, &(0x7f0000002700)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x29, 0x0, '\x00', [@ra={0x5, 0x2, 0xffff}, @pad1]}}}, @hopopts={{0x20, 0x29, 0x36, {0x11, 0x0, '\x00', [@ra={0x5, 0x2, 0x100}]}}}, @hopopts={{0x58, 0x29, 0x36, {0x2b, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0xa5, 0x6, [0x3, 0xfffffffffffffff7, 0x4, 0x1]}}, @jumbo={0xc2, 0x4, 0x10000000}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x1, [0x0]}]}}}], 0x98}}], 0x9, 0x44) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@acquire={0x16c, 0x17, 0x1, 0x70bd25, 0x0, {{@in6=@private0}, @in=@empty, {@in=@rand_addr=0x64010101, @in6=@mcast1, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in=@multicast2, @in6=@loopback={0x700}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {0x0, 0x0, 0x0, 0x8}, 0x2, 0x0, 0x2, 0x1, 0x0, 0x2}, 0xfffffff9, 0x38}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d3, 0x32}, 0x2, @in=@rand_addr=0x64010100, 0x3504, 0x4, 0x2, 0x6, 0x0, 0x1, 0x8}]}]}, 0x16c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x4}]}}]}, 0x38}}, 0x20000040) 4.175105364s ago: executing program 32 (id=7482): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@timestamp={0x44, 0x8, 0x6, 0x0, 0x1, [0x4]}]}}, @redirect={0x4, 0x0, 0x0, @broadcast=0x100e000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0xc000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r8, 0x5000943a, &(0x7f00000022c0)={{r5}, r9, 0x18, @inherit={0x50, &(0x7f0000000780)={0x0, 0x1, 0x4, 0xa, {0x5, 0xddc, 0x3, 0x7, 0x5}, [0xa774]}}, @subvolid=0x9}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="a5010000", @ANYRES16=r11, @ANYBLOB="01002dbd7000fddbdf254d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a8007365636f6e646e616d650000080003000000000008000300030000000f00a8007365636f6e646e616d650000"], 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x25}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="ac", 0x1}], 0x1}, 0x8804) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000fcdadf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2.952041119s ago: executing program 33 (id=7486): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) close(r4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r10}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x19) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r2, 0x53f63307afa5bb95, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x880) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x3, &(0x7f0000000000)=""/224, &(0x7f0000000500)=0xe0) r12 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x1, 0x1234}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socketpair(0x6, 0x800, 0x100, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r13) sendmsg$NL80211_CMD_TDLS_OPER(r13, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, r14, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0xe}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xce980413f5414486}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x40880}, 0x0) r15 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r13, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r15, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}]}, 0x3c}}, 0x4001) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 1.817634919s ago: executing program 34 (id=7487): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xa1, "0870b46940c399d5a95c7417a06fc5338d0dbfd3d5f08435b38c0882dc94575683d38cdd6c40ead92a211eeef8540354d130032aca504dbcb2b7d3bc24baca9629f17a3603ab3603a0dd3278fc8addf83958da9fafac9b789d8d4dc48d80c473a6f6e8495db344c353382fa3271e724411f4b23b101bda4646abbc9b0154e204851469e711cec64c825570f70895d6d54e0ca085fea7c09baa91bbd995ee7b51f6"}, &(0x7f0000000000)=0xa9) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) socket(0x11, 0x2, 0x0) (async) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) (async) close(r1) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xa1, "0870b46940c399d5a95c7417a06fc5338d0dbfd3d5f08435b38c0882dc94575683d38cdd6c40ead92a211eeef8540354d130032aca504dbcb2b7d3bc24baca9629f17a3603ab3603a0dd3278fc8addf83958da9fafac9b789d8d4dc48d80c473a6f6e8495db344c353382fa3271e724411f4b23b101bda4646abbc9b0154e204851469e711cec64c825570f70895d6d54e0ca085fea7c09baa91bbd995ee7b51f6"}, &(0x7f0000000000)=0xa9) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async) 418.331903ms ago: executing program 35 (id=7490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20700, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x8080) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'netdevsim0\x00'}) pread64(r0, &(0x7f0000000140)=""/1, 0x1, 0x7) 0s ago: executing program 36 (id=7491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f00000027c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x5, @mcast1, 0x4}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000080)="c4abfd2fc19f40042be79de66033015900e3be68f254780587e0876064c740d52c0c19893d8916a9a8c9d1126dd83aca8975b8a6812f7a2ca83112cec26de868b77db2d1aa262bedda3692275437c1db8673e9b5ba280c3ab317686d11ac42dcd849733521998b5efe83dbe06c78c2d600ef9c61d64b2c8e17f45a43fc35d6d5b2d6b543467d219688a71ba0f2aa80a53d3614d8c2273c091a0d346db5afd8cfb1f08563d7eaf2ed19190e1c87262a3470de5144ad21542bf1659a72820b656be396", 0xc2}, {&(0x7f0000000240)="e626c34dba8f2fe94dabe1c882d76dd7075ba6b92e7bdeb5222efad60d671f97af5cfeef857add7c505e4f666dc02d056b3285612b0542e1d09d0ed9364d349dea1f0c66286003f5e074a14aabd33cf3dfa4004740d70d0a42b1a4799b689f4043a4228e89ed06fa636f7ee034f1aa6bf59b8b1ce745eb6d1c194f086634906fcbe2889690d5e5e97dd1a705dd0ae0951e259210d21ae927437c522968877b8c9e5abf5765d0c25e991e0c204a80b15f", 0xb0}, {&(0x7f0000000380)="8b15af1e7c752cd64ffbe0d28ba94327d9ed6b88d6c3ffe0fadd0da3805902b6f815918b390833ab52a7b89b12f9e591e073e4fc5c82d03e8087e2137fd34b999b213ae0dcc459059d4617551325615451c864494b371d3ad80f7cc97ff413ecd70fff6a3a8b05b273d534217283bfaed1fb4eb37df4914134573b5e887e06ff99fc5a1ab334f0c7e4d3f2271970274debe7c38712c39098382600a7", 0x9c}, {&(0x7f0000000440)="952b4d4ab49e35c9c2c5896d70e3b5668a9e5d805e1f84bce58852dd86764fb21d81db9a42e65883a5b4e956afb7f22c5df088dd4f54463113360ebc55c00c725b7789386f5376409553020ccb80d622517aaeb87a1d299d7c36e7d179cf04a3e1a0dec5348a9e6e4a1839d4be3b76dcfd655d271df7b73fb64c08a1620106d5eb58ebbc2df6bf2cb75eadaf", 0x8c}, {&(0x7f0000000500)="47ddec8a3ce5c2fbe4ba1e3c5c72c31f3499a848e1f5a89e5ea887f4bc04ad0a314a1d7701a6589f9b5af43aa8eda13fb47949ac0c607e210dcf118e53c246a08a9b93f2b0f214bb3043e988adf748ae8cd9bb0668036255c44332b9ba12487b6b2018a818e141dd6960a636189f496d9b19b386594592772f742e255db08d9369d950ba7d3401491792459cf644773e5c20b91a3b36814e7f92f3f0717536d34da2a3fbb8179245a8ea13", 0xab}, {&(0x7f00000005c0)="1bea778e89f5cabe1ff1550b498342593fdf18d883d78d2d50c8188a40263f00aa25d66a9152bbc3bdcecd17189e8711bc7427316b8ee5c098f91d4e7e09e340b3d602f9e4ab4895391007471d8199102ee38f6b7b2ed0a6abc86731", 0x5c}], 0x6, &(0x7f00000006c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x8000}}, @dstopts={{0x30, 0x29, 0x37, {0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)=[@dontfrag={{0x14, 0x29, 0x3e, 0x40}}, @rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x0, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0xb}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @remote]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2b, 0x10, 0x1, 0xc, 0x0, [@local, @local, @dev={0xfe, 0x80, '\x00', 0x4}, @private2, @local, @mcast2, @dev={0xfe, 0x80, '\x00', 0x13}, @private1]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x5e, 0x8, 0x0, 0x10, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @remote]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x190}}, {{&(0x7f0000000940)={0xa, 0x4e22, 0xfffffbff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xcf5}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000980)="79b45669f525fe606f92a80d05d0cc181b9fd137d5b99b32df34f281c2fa9cdc6b243e56d9d6591ca03f06f5b49e241deb5dba34a1330e1bf83fb8066880918cc7bc83f5f41f86", 0x47}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)="ad95defe12c3b8c8c6e09215ff0d1b87ea8d365c3bc2f3f6380d396bd0bf7923e12ca2503560b65cd6fb7f6226430ded0a40e4df0286bf4814e7de24c7e9b62e96ab63e5db1c3887197a4417de337f43f9e09441f5d8414eaa2d6c79240a9aee784dc68a7fc296d76c367d303c123399423974f04be512147106175511a835840b300eee56c26ca54197765f5deb8fb7df574ab4e3b3c2d6a4e49d685cebe9ce920f54b124b7b38efbb94169a6c5fea4028d757aacd0790af30f611231689003473229c6", 0xc4}, {&(0x7f0000000b40)="db6a5bd2ad1235a4c61d6311c005b2464e32d486aa6ebee84c80198e31766ec2983316383579c2dd82e2efed35769ee173a1de33f263d10ac12c3d605aded4227d05dcfb15e6", 0x46}], 0x4}}, {{&(0x7f0000000c00)={0xa, 0x4e20, 0x5, @mcast1, 0x3}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000cc0)="c8d74cee4aca8cf40982c9c944a1aceabdbad64a8151348032ed252c76312505bdb0c662c16e25730e64cf24dea4517cecd53e0015c216650a2c4bae4d814112d2078bbfcfd19cccc9932ce1c8aa8880d5b3ed37b1833d82db73368736d4613558c25e4837489164a33321d739df272b8b669f3e17ac85f22dbb89714e02698f5f553e02b97310bf05b9a862a36ba05ac1aa8f15235cc295710513493774bb464e414d705ebc7245b979f6d794d65e98a495b032ba3268e61e4dc3b7e17efe17bd0ee30b662903ca17bfa8b8ed4733e2ae799f9169ae450978128a4d789657efe2682ae2bb9c74b714b048ca477c664c", 0xf0}, {&(0x7f0000000dc0)="71de1b9d602ecd846786373b5aeb8790a5b201f890c37cfa321ae623072fcecc008c6fe77851c3b66afd52bca42a76c03fcb13defb3cb6e3194bfd1fd9063c1a8b0f574c2385d11c97ebbe37667bf9f1c5eba3f872a1cc2041e75bbbace39281afa1fb73ed012a4988b7c32aeba718c1db42f2671c8461327f9b1db386fd41788cdee3ac763fbf6ba9f1b3233e09bfe6e237f841c7e706fcd81c7c6ee3b46aef2d7b073a9b3ec8507fcfd9e9d196d4de29575cd1b2e0571828ba3e8c1157f676d17c8fca609c7be69b182c4cbdf68f246712117d1dc9d20f995cc61c6674a9f8b29e757db4eecf7336b4a7899d8873774394f7", 0xf3}, {&(0x7f0000000ec0)="488c954187f76a214bf92e2aeec53ac3bcf62335a24e145ec262b98e412d5d66e113d3995bbde5c8a970dd26cc8f2907313f9365311f5981f2ac4ee27b5c1ceef0a52a0bdb85af07fb80826c097338da11d8601f28f834c0724a6a0f55e64870169eb89f6575cb755fb255e110423617f910ac484e4b83832f80cc792eef7d6fcbf38d2963ade8a67e63432c76739a09aa8ea9b0c1237036c4a33afb0456bada0ee4494e4230101447bffba54e5e4cf432b54a5a5d", 0xb5}, {&(0x7f0000000f80)="3f29bffe18d3032e6baa192a5859be84840b8fac94deac2517df4efc1c73e4d3b63fae1a0ef36e93be521f7a3f57d82495cd3c149803abd853445e9cc5567bbcb3abb126ae35836e973216a255014b4718899aa0568c95c4c992c309fcce45ab6ebb58ea9c347fb4b9938bf9933bf2a90ff51decf7284baa2999f55298727bf4abb4d6072997a7e9afea2ddb9913cdd2208416fd2784d42e793e1dc063cb681732dd3c1fe0c087e923db1fdc867486f3b3e42886acb61515f57e24efdabf605305056457d9a105b3112b2b936c567b5250300d3b61a641412635f0dfe608d75e66bd2f560b72af50ecc4d9", 0xeb}, {&(0x7f0000001080)="29ad514fb3914728dc8bf7a6cf0885a9ac09050cab9f9dc1ff1814749ca5150a72d46cefcaba7205d42d77f362dc544300d7465f4e8214b1630e58967a6bb0a371264c431e91c685332dff6843d29e7e61970a780534565febb1d52b60da0ba80ae5ace127b86049734cbf1601f08b26971f2541e0f771096cecdcf14d01960e263c214037e7b5fdd0fa9b54acb846503182cd76072e6915f11eba", 0x9b}, {&(0x7f0000001140)="6efee724ec5d524c85de86765ce69ed465369c404963180d20e73a1cba0f7fa5b8cdecb31160082ae41b8344e04610c12b9ad349566d736ab30a1cf629c9177fadc0870ac4e32c31e603a837f2a5915cb2c5d76eff9f1288987d9532e65041cc659510d3dee92a38c9434dc1294de402a0055b9bf8bc5f08779098f329af45357d511f0cbb5beebbe2d4d8f929c1bdeaf1998ea2553969f8aaf0759f21041cc68a3ce97f3a898cc4f5aeba0e9c01473c8e20da35c9863e22e8806042", 0xbc}, {&(0x7f0000001200)="8603ae92a857061d5393a2531d661f86be6a4d944a0e6bdf3f8b6477def6d841594a49ab1c2bb5ed75d51e2f84cb2aee69757ae1dc7bcf5a46db23908f4cbacfec0f1e75c6500a8b9f3214ee4563185fba12eabb9bd09d830081084d1da87388f3d5b07db4cae4046f9ab5ab04ae7e197c73fd795b6e694aa55e64d03cd86c40a3fc1d43e23e73596a92ffb545901e1bb0f229b532be9aea56c88dec572120802a6f7f97f7f3169c3a0d6cac0f700311a597cdad42b1", 0xb6}, {&(0x7f00000012c0)="f8512d709c482a6a7626", 0xa}], 0x8, &(0x7f0000001380)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x3b, 0x9, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0xb1, 0x8, [0x33, 0x0, 0x7, 0x3, 0x8da9, 0x5]}}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x58, 0x29, 0x36, {0x8, 0x7, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x40, 0x7fff, [0x2, 0x4, 0x2, 0xf6]}}, @pad1, @jumbo={0xc2, 0x4, 0x40}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @pad1]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x2f, 0xb, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x3, [0x6, 0x2]}}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0xac, [0xfffffffffffffffd, 0x3, 0x651b, 0x2c77938d]}}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0xaf, 0x71, [0x4]}}, @pad1]}}}], 0x150}}, {{&(0x7f0000001500)={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa00}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000001540)="051f7b8fb6b006ef18dbec7ee4eb0d47341d17ec16de4998df35793967a2a9db846628f4b778491c3254c6e8e3859016e3b836062e16cf8d4fbc73f3a4be888fed8de5294fedb635577e773aa3d1d042ba00b3f4ee1f40d286ca5b7b083e2cafe147c98a628225bfe71c6ab45ebc4aa22b5162d9af17901cfd190d875caad285533b2de3f7825db9f767dfd35c36e249c2d44ce57504ad5dc689fa58e320b193a88b6eb3e565f62a6b77b66af6ec2c2333bfab25617034a569f4f11be4e5d4d86dc980886840ed746a751e", 0xcb}, {&(0x7f0000001640)="6877826cadbcc6b4ca96dec08ac55f7bbe72", 0x12}], 0x2}}, {{&(0x7f00000016c0)={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001700)="cc2014ed7239c07696afa704f2951b26b85c409b10e120858710ce021a1ff97af4448e1bfdbc75174522e69542719bfa08f402711f21ef6f1541d4e72aef441dbc712a84a64e0bad3275ce94a56c1b7018d7b2397d792e23213650daae6e71bb7355d5c6d9f1eea26dd607c55b9f75d2af891a40337a5add8e13a1e7cde4070fae8339442beb4740d496cf0f2d18bf6540bacd30a8934b3adbf8a2b8f9ae7b42dcb2a6a59b0ba1f87eb7057490e447eac030a6b4498472ddcb999650cb18b83b74c3b73cb2cfdba55bea33475ac7e5f29f313a447cd4a40a44d2f21596f95c5ecd8fa0571fdace376581b634a1d5f4c414554334", 0xf4}, {&(0x7f0000001800)}, {&(0x7f0000001840)="7b9678ee01d4b0604bf19e7e4535135984f46499dea0123b2999c8fde89bc33840b9eb61ca6a2b019a0190f6412c45696cda26d74141035b627dc4c72ef99704c5a0db3096179016abaf7b742639df63bdc77220061ea28bc9b453f33088969b7d0de63e38208f936769ea836947fe0db435c5bcb6a6d98b41eca42289cdd8e7106e68047afa", 0x86}, {&(0x7f0000001900)="d2b97c978c3255fc856c5dfbebc8e48a675bfa7997fc478974ceb6a8acf326e41d1e5ec8a3b95232468ac9f1354290a695c4dbde28c2da330db2bd9428328aba08376f435af9364ef50c16bae38cd69d665343ebd9bf687190f12c4c382ecc1531c7d98d9b7224a54e4c78421f321975165ccd3795c160da9a5552689c50", 0x7e}, {&(0x7f0000001980)="9a5c11612eb7f07283a41134945b86ac62d223af2a047469d939724b6993c491dab6715211e27754", 0x28}], 0x5, &(0x7f0000001a40)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x89, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xffff6893}]}}}, @hopopts_2292={{0x98, 0x29, 0x36, {0x85, 0xf, '\x00', [@ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x7ff}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x3, 0x10, 0x2, 0x0, [0x3, 0xfffffffffffffff3, 0x0, 0x5, 0x1, 0x5, 0xb31c805, 0x8]}}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0xb1b}]}}}], 0xb8}}, {{&(0x7f0000001b00)={0xa, 0x4e23, 0x4, @private0, 0x7}, 0x1c, &(0x7f0000001e00)=[{&(0x7f0000001b40)="9a1d1cd914256867c61ac8529a84bf6f8e789ea8b1928df2fbfdbdc41314699414dc9ffdc8bb1fd1d9bf1021fdc6b64cc6d46a7e9c3c28cdf63752ac0d39ddfbc507bc8a3be085f84b97387b3e777e995e4ccf31be2b117da4d840657ec0b62403f80e4e28b2a6dc7730dd3b8492", 0x6e}, {&(0x7f0000001bc0)="04d0a149a95e64d270a681de9990a1541da3a2005431ec1cef2e2145b8fac8e9818a2d042f270e68504239d6af2dff77f78bd16c6c90f218d1bf6e8b374e5ac4a736a696003a054ce56a06d714d2d3b55f5783751b8f9a9aeac5111ae1cb108bcfaf477bcf1d4326a7bc24e7ef3e478ad8c26e180ab653eb0e4ae4019480f88e3ff29d6aa15ef0cd04faa2108056330f3808932822c71c301f836a1a1e7f286a1f8a7ad4", 0xa4}, {&(0x7f0000001c80)="f12e75c2cb328006f9034655505d85b3d6191b1c8db6cdbcc65a6768eefdfdaf786e84ecff26889080d4872713c56eb287ff6fc1f067331349ba14d2441f6c5c96b2ea7c661736e70aee3efb7d", 0x4d}, {&(0x7f0000001d00)="92d69f1af31933daca5144869047e5c0528d8cab731953527b3e59220ae6f9e16dfb0b03933fc74792c7a048b435e88d72c9520144f4e2ff3c535ac39f5099bbd3fa2af8ab29c01077ccc2e0abb94369b0798719faab241d8991fd1aefa58f7646e7ce4c94f2ed59ff695ed70401ed8d2a3dea48f8894658361ff53d5c4e0ed4bd6295d08dae267ce7fa7ac5d309878682635954edf2ed4d085d94b1d3158cc6960cac14dce07015b063170c92ab110265cd132c56c6ec866590943af58c5de1b721e5dc6a773f4ce229e3307b11e22b1338b1689e7790d7e9a80f62ed", 0xdd}], 0x4, &(0x7f0000001e40)=[@hopopts={{0xd8, 0x29, 0x36, {0x89, 0x17, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0xc654}, @calipso={0x7, 0x30, {0x1, 0xa, 0xc, 0x0, [0x3, 0x0, 0x0, 0x5, 0xffffffffffffffff]}}, @calipso={0x7, 0x40, {0x2, 0xe, 0x70, 0x6, [0x10000, 0x3, 0x62bd, 0x5, 0x2, 0x100000001, 0x7d5]}}, @jumbo={0xc2, 0x4, 0x2}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x29, 0x8, 0x1, 0x3b, 0x0, [@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @mcast1]}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x1d, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x7ff}, @jumbo={0xc2, 0x4, 0x798}, @pad1, @jumbo={0xc2, 0x4, 0x2bef718a}, @pad1, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x9, [0xfffffffffffffff4, 0x3, 0x1a54195f]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x3, 0x0, [@mcast1]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0xb6, 0x5, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @mcast1}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, r2}}}], 0x238}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002080)="f66c286afb1874a21ed23d0b3f5f912d044faeb0fabae6eeae0dd0bbcde53bee8881988070838447642196fc9596c4e61027aca8afaa982f8a070110488f6013332e53c2ec3d19144d0cab327812e84826392725ff3fc8077b7b3c2cbc2f765df2f0fbecad6c250917ebc09514c461", 0x6f}], 0x1}}, {{&(0x7f0000002140)={0xa, 0x4e22, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}, 0x1c, &(0x7f0000002680)=[{&(0x7f0000002180)="90b159d743f259f3d0408461c0794ea8761608b390d4dfeb8f15af70ead873d8b6557a0d974a52345e19e78ce61e43d37bf226a6c49f6a6b06c1b8e83193b10aa5ea6c787dab8c198f9113da62c71478e728d52e97a2473455e381d975ed2d35630c1450d083f5d5f586c8b29947c98b47f7cd0faaacd67af92f3fd1f9205e0ba0fad3011db181c0909455648a233bb9f9d54debf5705dc427328862b071898f5b563fb4eadb8d1a4482c80d22eb9628d22f740a42c679960cfa9e6ab0aee65db07134f482635a4d5b4c3792", 0xcc}, {&(0x7f0000002280)="aa518b1967adc472da6fe0ac4836040b2e6c2739bc745bf413fac348e90c195ed367b3233f99084e729d1644d244d1f8b1aae503d3aa8522e6c93530673acdeb08b9dd7a7b3176391c41d9a26b4f282634cd09597f569c330c227d202bca490873cb078553cde443bfb7bb900c8c838bc38f29909a1990869ccf0261102a03783e46f29c62b781d73e27aa6abedc754b3d279b4f4b367e306f579b8f6e04541b3c573a846964a89300e9c4095025de1395", 0xb1}, {&(0x7f0000002340)="f2b541a910ac5efe792e16d35c29101aeadd632b860cd4ea6f642529f379770ad826971a2f429bda63638f0da91d46962d6fca44b6013ffa2afa43bc4ea9ffb03db141aec6aacabb0e601dd75159c8e5d61354a0658dbade64969ba662a50b720815bb952da7541b9bd0b79d8b9eefac812096f1f0a990872ffa34c60682114b52c9a10a5fbb2c7758057225ba9de7fe1821b631555edb1e798e74f51007f9a581f7acb266d97150ff5e3f2413e1392f6397415dc820e6def4fa24ed2d56be9509", 0xc1}, {&(0x7f0000002440)="8dc6f6ec025b84cb22035a4efcd16d0726129dae7af086d008efa0cadf551174a77fac0b2a382a1dc1542f4edf1f1669bf85060b7a47772cd291d1471cb3b7dcf219d151f06f69b28f875bac859120acafd264462f0ce0207846968997956a7dbb1720af4d37799d101c4fa6a27b6dcc6f12c4754f5191c570b6319767b064a03a3cc9f19372c4cf0345760f5ae987bca8f6e99bb42ebf28774b2cca0388951431f9e21f6887d2549f38f2f76779737fbd602fb7cb0c5a47f9e2dda4975daeb03572729ea91b905c9836f71c8e18423716", 0xd1}, {&(0x7f0000002540)="2707ecd0d52cd1dc807c7b048ca1956e6a713f1e469b216053466987224686b987046a6d913b1bf6a3be8b55578c69d0eb0d58f854e079fd2f12d7c36ea40ac830d353357507072ef981f353d05c4204e848db8e89e5691bfb568e2eb68122185a535f5febcbaeafa47c53228b3da632d5c350ebf8da17251400f77694aeaadedd73fb2d41b818f6c61617bd7cb234757133841e676be3", 0x97}, {&(0x7f0000002600)="6da8a46582de8cc382b7c4ac6b9add21abdd230aa23279a3", 0x18}, {&(0x7f0000002640)="aa3a9afc1044648afe461a1772865a04090768c49c92986807f462ca", 0x1c}], 0x7, &(0x7f0000002700)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x29, 0x0, '\x00', [@ra={0x5, 0x2, 0xffff}, @pad1]}}}, @hopopts={{0x20, 0x29, 0x36, {0x11, 0x0, '\x00', [@ra={0x5, 0x2, 0x100}]}}}, @hopopts={{0x58, 0x29, 0x36, {0x2b, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0xa5, 0x6, [0x3, 0xfffffffffffffff7, 0x4, 0x1]}}, @jumbo={0xc2, 0x4, 0x10000000}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x1, [0x0]}]}}}], 0x98}}], 0x9, 0x44) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@acquire={0x16c, 0x17, 0x1, 0x70bd25, 0x0, {{@in6=@private0}, @in=@empty, {@in=@rand_addr=0x64010101, @in6=@mcast1, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in=@multicast2, @in6=@loopback={0x700}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {0x0, 0x0, 0x0, 0x8}, 0x2, 0x0, 0x2, 0x1, 0x0, 0x2}, 0xfffffff9, 0x38}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d3, 0x32}, 0x2, @in=@rand_addr=0x64010100, 0x3504, 0x4, 0x2, 0x6, 0x0, 0x1, 0x8}]}]}, 0x16c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x4}]}}]}, 0x38}}, 0x20000040) kernel console output (not intermixed with test programs): backup interface [ 862.441553][ T59] team0: left allmulticast mode [ 862.441569][ T59] team_slave_0: left allmulticast mode [ 862.441584][ T59] team_slave_1: left allmulticast mode [ 862.444642][ T59] bond0 (unregistering): Released all slaves [ 862.494498][ T59] bond1 (unregistering): Released all slaves [ 862.516416][ T59] bond2 (unregistering): Released all slaves [ 862.539342][ T59] bond3 (unregistering): Released all slaves [ 862.563446][ T59] bond4 (unregistering): Released all slaves [ 862.590388][ T59] bond5 (unregistering): Released all slaves [ 862.697483][T28042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6165'. [ 862.757172][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 862.840106][ T4934] Bluetooth: hci3: command tx timeout [ 863.622926][T28067] ovs-dp0: entered promiscuous mode [ 863.777383][T28083] Bluetooth: hci0: unsupported parameter 5161 [ 863.777405][T28083] Bluetooth: hci0: unsupported parameter 8192 [ 863.777418][T28083] Bluetooth: hci0: unsupported parameter 5161 [ 863.777429][T28083] Bluetooth: hci0: unsupported parameter 8192 [ 863.801552][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.802039][ T6384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.820204][T18058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.821562][T14463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.110148][T28095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6175'. [ 864.265316][T28099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6177'. [ 864.265641][T28101] x_tables: duplicate underflow at hook 1 [ 864.295350][ T6389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.378309][T28104] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6179'. [ 864.919828][ T4934] Bluetooth: hci3: command tx timeout [ 864.999124][T28113] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6180'. [ 865.021989][T28113] netlink: 'syz.0.6180': attribute type 1 has an invalid length. [ 865.022009][T28113] netlink: 'syz.0.6180': attribute type 3 has an invalid length. [ 865.022022][T28113] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6180'. [ 865.022038][T28113] NCSI netlink: No device for ifindex 813332851 [ 865.103299][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 865.276971][T27916] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.277076][T27916] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.277245][T27916] bridge_slave_0: entered allmulticast mode [ 865.282992][T27916] bridge_slave_0: entered promiscuous mode [ 865.334000][T27916] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.334107][T27916] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.334273][T27916] bridge_slave_1: entered allmulticast mode [ 865.365431][T27916] bridge_slave_1: entered promiscuous mode [ 865.756163][ T59] batman_adv: batadv0: Removing interface: wlan1 [ 865.842238][T27916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.864662][T27916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.955029][T28139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6187'. [ 865.993745][T28135] netlink: 'syz.0.6185': attribute type 11 has an invalid length. [ 866.216362][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.409284][T28159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6189'. [ 866.409306][T28159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6189'. [ 866.518172][T27916] team0: Port device team_slave_0 added [ 866.540049][T27916] team0: Port device team_slave_1 added [ 866.639308][T28154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6191'. [ 866.780191][T27916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.780208][T27916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.780232][T27916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.826975][T27916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.826992][T27916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.827015][T27916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.840305][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.978050][T28182] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 867.412953][T27916] hsr_slave_0: entered promiscuous mode [ 867.422056][T27916] hsr_slave_1: entered promiscuous mode [ 867.428592][T28193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6192'. [ 867.428617][T28193] block nbd3: Unsupported socket: should be TCP or UNIX. [ 867.449430][T27916] debugfs: 'hsr0' already exists in 'hsr' [ 867.449451][T27916] Cannot create hsr debugfs directory [ 867.874234][T28207] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 868.151139][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 869.049529][T28244] netlink: 'syz.0.6209': attribute type 29 has an invalid length. [ 869.647528][T28265] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 869.877664][T14463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.041036][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.047455][ T6395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.171684][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.171709][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.173896][ T59] batman_adv: batadv0: Removing interface: dummy0 [ 870.203755][ T59] veth1_macvtap: left promiscuous mode [ 870.203816][ T59] veth0_macvtap: left promiscuous mode [ 870.203939][ T59] veth1_vlan: left promiscuous mode [ 870.203965][ T59] veth0_vlan: left promiscuous mode [ 870.647463][T28290] __nla_validate_parse: 2 callbacks suppressed [ 870.647485][T28290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6216'. [ 870.838327][ T6403] smc: removing ib device syz1 [ 871.110902][ T59] team0 (unregistering): Port device team_slave_1 removed [ 871.129160][ T59] team0 (unregistering): Port device team_slave_0 removed [ 871.328635][ T6412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.489677][ T1236] infiniband syz1: ib_query_port failed (-19) [ 871.628018][ T6403] smbdirect: ib_dev[syz1] removed [ 871.975419][T28306] netlink: 'syz.0.6217': attribute type 21 has an invalid length. [ 871.975440][T28306] netlink: 'syz.0.6217': attribute type 22 has an invalid length. [ 871.975452][T28306] netlink: 'syz.0.6217': attribute type 23 has an invalid length. [ 871.975461][T28306] netlink: 'syz.0.6217': attribute type 25 has an invalid length. [ 871.975471][T28306] netlink: 'syz.0.6217': attribute type 26 has an invalid length. [ 871.975482][T28306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6217'. [ 872.152093][T28318] netlink: 'syz.0.6217': attribute type 21 has an invalid length. [ 872.152112][T28318] netlink: 'syz.0.6217': attribute type 22 has an invalid length. [ 872.152121][T28318] netlink: 'syz.0.6217': attribute type 23 has an invalid length. [ 872.152130][T28318] netlink: 'syz.0.6217': attribute type 25 has an invalid length. [ 872.152140][T28318] netlink: 'syz.0.6217': attribute type 26 has an invalid length. [ 872.152149][T28318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6217'. [ 872.847469][T28337] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6223'. [ 872.847502][T28337] tipc: Invalid UDP bearer configuration [ 872.847543][T28337] tipc: Enabling of bearer rejected, failed to enable media [ 872.914493][T28332] can: request_module (can-proto-3) failed. [ 872.917685][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.493553][T28380] bond8: option resend_igmp: invalid value (32767) [ 874.493577][T28380] bond8: option resend_igmp: allowed values 0 - 255 [ 874.596787][T28380] bond8 (unregistering): Released all slaves [ 874.942336][T28402] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6236'. [ 875.057712][T28375] bond8: option resend_igmp: invalid value (32767) [ 875.057735][T28375] bond8: option resend_igmp: allowed values 0 - 255 [ 875.184271][ T6410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.231723][T28375] bond8 (unregistering): Released all slaves [ 875.826435][T28416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6240'. [ 875.834460][T28402] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.834801][T28402] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.004447][T14467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.128740][T28417] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.129782][T28417] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.130039][T28417] bridge0: entered allmulticast mode [ 876.185061][T28420] bridge_slave_1: left allmulticast mode [ 876.185092][T28420] bridge_slave_1: left promiscuous mode [ 876.185289][T28420] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.289242][T28431] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6241'. [ 876.341371][T28420] bridge_slave_0: left allmulticast mode [ 876.341397][T28420] bridge_slave_0: left promiscuous mode [ 876.341598][T28420] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.577460][T28440] Cannot find del_set index 4 as target [ 876.693344][T27916] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 876.728453][T27916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 876.734049][T27916] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 876.784575][T27916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 876.793461][T27916] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 876.819509][T27916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 876.843965][T28444] tipc: New replicast peer: 172.20.20.187 [ 876.854734][T28444] tipc: Enabled bearer , priority 10 [ 876.878211][T27916] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 876.910401][T27916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 877.082727][ T6412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.618884][T27916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.742180][T27916] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.811000][ T6410] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.811105][ T6410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.852058][T28478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6249'. [ 877.940291][T28480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6249'. [ 877.988742][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.988873][ T6412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.003638][T18058] tipc: Node number set to 276563112 [ 878.031180][T28478] veth1_to_bond: entered promiscuous mode [ 878.032158][T28484] lo: entered allmulticast mode [ 878.087632][T28477] lo: left allmulticast mode [ 878.087671][T28477] veth1_to_bond: left promiscuous mode [ 878.868621][T28515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6258'. [ 879.028252][T28503] syzkaller0: entered promiscuous mode [ 879.028419][T28503] syzkaller0: entered allmulticast mode [ 879.079603][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.227123][T28501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6255'. [ 880.714676][T28542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6263'. [ 880.917521][ T6384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.121268][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.199224][ T6383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.834995][T28533] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 883.835024][T28533] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 884.164650][T28553] ip_tables: iptables: counters copy to user failed while replacing table [ 884.234617][T28562] netlink: 'syz.1.6265': attribute type 8 has an invalid length. [ 884.276515][ T59] IPVS: stop unused estimator thread 0... [ 884.360665][T28570] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6268'. [ 884.442229][T28572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6269'. [ 884.700068][ T6410] vlan1: left allmulticast mode [ 884.700090][ T6410] geneve0: left allmulticast mode [ 884.700243][ T6410] bridge0: port 1(vlan1) entered disabled state [ 884.797981][T28582] netlink: 'syz.3.6271': attribute type 1 has an invalid length. [ 884.798004][T28582] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6271'. [ 884.798019][T28582] netlink: 'syz.3.6271': attribute type 1 has an invalid length. [ 885.322538][T28605] netlink: 'syz.1.6276': attribute type 2 has an invalid length. [ 885.322572][T28605] netlink: 'syz.1.6276': attribute type 2 has an invalid length. [ 885.425723][T28613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6277'. [ 885.777812][T28624] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6278'. [ 885.843494][T28625] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6278'. [ 886.251710][ T6410] bond5 (unregistering): (slave geneve3): Releasing active interface [ 886.682807][ T6410] bond0 (unregistering): (slave bond4): Releasing backup interface [ 886.683657][ T6410] bond0 (unregistering): Released all slaves [ 886.712083][ T6410] bond1 (unregistering): (slave veth3): Releasing backup interface [ 886.714031][ T6410] bond1 (unregistering): Released all slaves [ 886.744627][ T6410] bond2 (unregistering): Released all slaves [ 886.769800][ T6410] bond3 (unregistering): Released all slaves [ 886.803379][ T6410] bond4 (unregistering): Released all slaves [ 886.831901][ T6410] bond5 (unregistering): Released all slaves [ 886.982152][T28642] netlink: 'syz.3.6279': attribute type 212 has an invalid length. [ 887.032428][ T6410] tipc: Left network mode [ 887.066669][T28619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6278'. [ 887.066695][T28619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6278'. [ 887.171899][T27916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.218477][T28647] veth0: entered promiscuous mode [ 887.243449][T28647] veth0: left promiscuous mode [ 887.466486][T28663] sock: sock_set_timeout: `syz.1.6283' (pid 28663) tries to set negative timeout [ 887.572881][T27916] veth0_vlan: entered promiscuous mode [ 887.673558][T27916] veth1_vlan: entered promiscuous mode [ 887.827027][T27916] veth0_macvtap: entered promiscuous mode [ 887.851836][T27916] veth1_macvtap: entered promiscuous mode [ 888.220824][T27916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.324224][T27916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.473941][T28691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6287'. [ 888.576362][ T6395] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.865607][ T1120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.875460][ T1120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.880089][ T1120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.960045][T28704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6293'. [ 889.423422][ T6395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.423445][ T6395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.676280][T28721] veth1_vlan: left promiscuous mode [ 889.765010][ T6395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.765043][ T6395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.069253][T28738] netlink: 'syz.4.6299': attribute type 1 has an invalid length. [ 890.140630][T28746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6136'. [ 890.592658][T28738] 8021q: adding VLAN 0 to HW filter on device bond8 [ 890.597618][T28748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6301'. [ 890.679028][T28744] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 890.695257][T28760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6302'. [ 890.750741][T28749] macvlan2: entered promiscuous mode [ 890.750786][T28749] macvlan2: entered allmulticast mode [ 890.753304][T28749] bond8: entered promiscuous mode [ 890.753973][T28749] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 890.762532][T28749] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 890.766536][T28749] bond8: left promiscuous mode [ 891.246288][ T6410] hsr_slave_0: left promiscuous mode [ 891.267980][ T6410] hsr_slave_1: left promiscuous mode [ 891.287265][ T6392] IPVS: starting estimator thread 0... [ 891.292447][T28782] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 891.305601][ T6410] veth1_macvtap: left promiscuous mode [ 891.305637][ T6410] veth0_macvtap: left promiscuous mode [ 891.331927][T28772] netlink: 'syz.4.6305': attribute type 1 has an invalid length. [ 891.405317][T28780] IPVS: using max 27 ests per chain, 64800 per kthread [ 891.552681][T28787] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 891.664210][T28797] netlink: 'syz.2.6310': attribute type 1 has an invalid length. [ 891.664464][T28797] netlink: 'syz.2.6310': attribute type 1 has an invalid length. [ 891.664659][T28797] netlink: 'syz.2.6310': attribute type 1 has an invalid length. [ 891.695015][T28797] netlink: 'syz.2.6310': attribute type 1 has an invalid length. [ 891.695226][T28797] netlink: 'syz.2.6310': attribute type 1 has an invalid length. [ 891.702488][T28797] netlink: 'syz.2.6310': attribute type 1 has an invalid length. [ 891.702711][T28797] netlink: 'syz.2.6310': attribute type 1 has an invalid length. [ 891.702934][T28797] netlink: 'syz.2.6310': attribute type 1 has an invalid length. [ 892.082392][T28809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6311'. [ 893.663263][T28815] gre0: entered promiscuous mode [ 893.663284][T28815] gre0: entered allmulticast mode [ 894.075224][T28848] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6317'. [ 894.273652][T28862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6323'. [ 894.473509][T28866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6321'. [ 894.670262][T28857] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 894.695400][T28876] xt_hashlimit: size too large, truncated to 1048576 [ 894.719743][ T6410] IPVS: stop unused estimator thread 0... [ 894.746595][T28876] xt_hashlimit: size too large, truncated to 1048576 [ 895.444147][T28908] ip_tables: iptables: counters copy to user failed while replacing table [ 896.153580][ T4934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 896.167158][ T4934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 896.175799][ T4934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 896.180946][ T4934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 896.182239][ T4934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 897.298432][T28963] syzkaller1: entered allmulticast mode [ 897.394673][T28966] syzkaller1: entered promiscuous mode [ 897.394753][T28966] syzkaller1: entered allmulticast mode [ 897.440239][T28961] openvswitch: netlink: Missing key (keys=40, expected=100) [ 898.087843][T28986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6347'. [ 898.276295][ T4934] Bluetooth: hci1: command tx timeout [ 899.180677][T28927] lo speed is unknown, defaulting to 1000 [ 900.088311][T29030] bond6: entered allmulticast mode [ 900.356025][ T4934] Bluetooth: hci1: command tx timeout [ 900.536920][T29033] 8021q: adding VLAN 0 to HW filter on device bond7 [ 900.538453][T29033] bond7: entered allmulticast mode [ 900.538871][T29033] bond6: (slave bond7): Enslaving as an active interface with an up link [ 900.546934][T29052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6360'. [ 900.572970][T29055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6358'. [ 900.618861][T29042] bond6 (unregistering): (slave bond7): Releasing backup interface [ 900.620521][T29042] bond7: left allmulticast mode [ 900.653577][T29042] bond6 (unregistering): Released all slaves [ 900.789266][T29059] bridge0: port 3(veth0) entered blocking state [ 900.789441][T29059] bridge0: port 3(veth0) entered disabled state [ 900.793664][T29059] veth0: entered allmulticast mode [ 900.798161][T29059] veth0: entered promiscuous mode [ 901.055461][T29064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6363'. [ 901.454052][T28927] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.454226][T28927] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.454375][T28927] bridge_slave_0: entered allmulticast mode [ 901.461658][T28927] bridge_slave_0: entered promiscuous mode [ 901.480521][T28927] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.481902][T28927] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.482042][T28927] bridge_slave_1: entered allmulticast mode [ 901.507406][T28927] bridge_slave_1: entered promiscuous mode [ 901.630993][T29096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6370'. [ 901.673099][T28927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.681698][T28927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.861723][T28927] team0: Port device team_slave_0 added [ 901.873052][T28927] team0: Port device team_slave_1 added [ 901.982826][T28927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.982844][T28927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.982868][T28927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.987909][T28927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.987924][T28927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.987946][T28927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.990099][T29110] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6373'. [ 902.168075][T28927] hsr_slave_0: entered promiscuous mode [ 902.169274][T28927] hsr_slave_1: entered promiscuous mode [ 902.170155][T28927] debugfs: 'hsr0' already exists in 'hsr' [ 902.170174][T28927] Cannot create hsr debugfs directory [ 902.435146][ T4934] Bluetooth: hci1: command tx timeout [ 902.634647][T28927] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 902.636095][T28927] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.821066][T28927] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 902.821102][T28927] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.924637][T29126] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6377'. [ 903.000640][T28927] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 903.000675][T28927] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.150024][T28927] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 903.150060][T28927] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.031696][T29066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 904.154160][T29133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6380'. [ 904.302760][T28927] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 904.326618][T28927] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 904.331883][T28927] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 904.361183][T28927] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 904.363618][T28927] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 904.413432][T28927] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 904.515754][ T4934] Bluetooth: hci1: command tx timeout [ 904.541302][T28927] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 904.556242][T28927] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 904.617104][T29151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 904.651562][T29151] netlink: zone id is out of range [ 904.651576][T29151] netlink: zone id is out of range [ 904.651584][T29151] netlink: zone id is out of range [ 904.651592][T29151] netlink: zone id is out of range [ 904.651632][T29151] netlink: zone id is out of range [ 904.651639][T29151] netlink: zone id is out of range [ 904.651662][T29151] netlink: zone id is out of range [ 904.651793][T29151] netlink: zone id is out of range [ 904.670783][T29151] netlink: zone id is out of range [ 904.820475][T29151] validate_nla: 24 callbacks suppressed [ 904.820494][T29151] netlink: 'syz.2.6387': attribute type 4 has an invalid length. [ 904.882462][T29158] netlink: 'syz.2.6387': attribute type 4 has an invalid length. [ 905.183094][T29146] netlink: 'syz.0.6386': attribute type 1 has an invalid length. [ 905.229696][T28927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.300036][T29170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6390'. [ 905.367724][T29164] netlink: 'syz.3.6389': attribute type 2 has an invalid length. [ 905.600756][T29177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6391'. [ 905.619165][T28927] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.662220][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.662322][ T6395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.754589][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.754759][ T6395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.055015][T29185] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6394'. [ 906.055161][T29185] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6394'. [ 906.491211][T29198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6395'. [ 906.491240][T29198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6395'. [ 906.795730][T29206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6398'. [ 906.848661][T29207] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 906.871628][T29214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6398'. [ 907.834138][T28927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.967360][T29252] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 908.221443][T29265] xt_cgroup: path and classid specified [ 908.258538][T29259] tipc: Enabled bearer , priority 0 [ 908.390445][T29259] syzkaller0: entered promiscuous mode [ 908.390515][T29259] syzkaller0: entered allmulticast mode [ 908.391152][T29259] tipc: Resetting bearer [ 908.492150][T29265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6416'. [ 908.563485][T29278] tipc: Started in network mode [ 908.563515][T29278] tipc: Node identity ac1414aa, cluster identity 4711 [ 908.563821][T29278] tipc: New replicast peer: 172.20.20.187 [ 908.590461][T29278] tipc: Enabled bearer , priority 10 [ 908.627782][T29258] tipc: Resetting bearer [ 909.450911][T29297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6426'. [ 912.079848][T29258] tipc: Disabling bearer [ 912.093016][T21510] tipc: Node number set to 1863660364 [ 912.095986][ T1236] tipc: Node number set to 2886997162 [ 912.121913][T29300] gretap1: entered promiscuous mode [ 912.124663][T29300] batman_adv: batadv0: Adding interface: gretap1 [ 912.141089][T29300] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 912.141117][T29300] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 912.344288][T28927] veth0_vlan: entered promiscuous mode [ 912.385957][T28927] veth1_vlan: entered promiscuous mode [ 912.415585][T29304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6429'. [ 912.416439][T29304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6429'. [ 912.416458][T29304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6429'. [ 912.529127][T29304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6429'. [ 912.529150][T29304] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6429'. [ 912.530997][T29308] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6428'. [ 912.570912][T28927] veth0_macvtap: entered promiscuous mode [ 912.583740][T29309] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6428'. [ 912.643482][T28927] veth1_macvtap: entered promiscuous mode [ 912.653936][T29316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6428'. [ 912.838409][T28927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.943080][T28927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.054867][ T1120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.054914][ T1120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.054948][ T1120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.054981][ T1120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.559534][T29351] syzkaller0: entered promiscuous mode [ 918.559558][T29351] syzkaller0: entered allmulticast mode [ 918.900823][T29369] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6442'. [ 918.920451][ T6395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.920472][ T6395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.979429][T29372] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6442'. [ 919.364965][T29372] v: renamed from veth0_vlan [ 919.491438][ T6384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.491459][ T6384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.388403][T29426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6449'. [ 920.862713][T29441] netlink: 'syz.2.6454': attribute type 5 has an invalid length. [ 920.871972][T29441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6454'. [ 921.097428][T29448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6457'. [ 921.136950][T29448] digital: digital_start_poll: Unknown protocol [ 921.343217][ T4934] Bluetooth: hci3: unexpected event 0x0e length: 257 > 255 [ 921.413852][T29463] net_ratelimit: 344 callbacks suppressed [ 921.413874][T29463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 921.680385][ T5279] v: left promiscuous mode [ 921.747962][T18058] v: entered promiscuous mode [ 922.149077][T29489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6465'. [ 922.238151][T29481] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6463'. [ 922.483130][T29502] netlink: 'syz.1.6469': attribute type 1 has an invalid length. [ 922.743308][T29506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 922.855248][T29506] netlink: zone id is out of range [ 922.855272][T29506] netlink: zone id is out of range [ 922.855281][T29506] netlink: zone id is out of range [ 922.855288][T29506] netlink: zone id is out of range [ 922.855328][T29506] netlink: zone id is out of range [ 922.855336][T29506] netlink: zone id is out of range [ 922.855359][T29506] netlink: zone id is out of range [ 922.855458][T29506] netlink: zone id is out of range [ 922.928369][T29515] netlink: 'syz.3.6470': attribute type 4 has an invalid length. [ 922.986309][T21510] lo speed is unknown, defaulting to 1000 [ 922.986406][T21510] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 923.547459][T29540] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6478'. [ 923.567542][T29540] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6478'. [ 923.699927][T29549] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6479'. [ 924.382292][T29562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6482'. [ 924.683470][T29571] netlink: 'syz.0.6486': attribute type 4 has an invalid length. [ 924.767486][T29578] SET target dimension over the limit! [ 924.981118][T29587] batadv_slave_0: entered promiscuous mode [ 925.140600][T29593] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6492'. [ 925.217727][T29594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6490'. [ 925.217760][T29594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6490'. [ 925.224418][T29594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6490'. [ 925.224517][T29594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.353571][T29598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6493'. [ 925.678512][T29600] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6494'. [ 925.827623][T29594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.900991][T29609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6495'. [ 926.062373][T29609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6495'. [ 926.568512][T29627] net_ratelimit: 699 callbacks suppressed [ 926.568531][T29627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 926.607638][T29627] netlink: 'syz.0.6500': attribute type 4 has an invalid length. [ 926.658081][T29632] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6503'. [ 927.407277][T16711] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 927.411418][T16711] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 927.412383][T16711] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 927.413729][T16711] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 927.435681][T16711] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 927.820916][T29665] netlink: 'syz.2.6511': attribute type 1 has an invalid length. [ 928.242689][T29668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 928.257475][T29668] bond1: (slave bond2): making interface the new active one [ 928.261505][T29668] bond1: (slave bond2): Enslaving as an active interface with an up link [ 928.414030][T29665] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 928.414103][T29666] syzkaller1: entered promiscuous mode [ 928.414118][T29666] syzkaller1: entered allmulticast mode [ 928.455235][T29679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 928.993527][T29703] netlink: 'syz.1.6518': attribute type 11 has an invalid length. [ 929.555486][ T4934] Bluetooth: hci5: command tx timeout [ 929.757716][T29741] netlink: 'syz.4.6526': attribute type 2 has an invalid length. [ 929.777574][T29741] __nla_validate_parse: 7 callbacks suppressed [ 929.777593][T29741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6526'. [ 929.779861][T29741] netlink: 'syz.4.6526': attribute type 25 has an invalid length. [ 929.782010][T29741] netlink: 'syz.4.6526': attribute type 1 has an invalid length. [ 929.892115][T29656] lo speed is unknown, defaulting to 1000 [ 930.485228][T29756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.833199][T29775] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6534'. [ 930.833423][T29775] bridge0: port 3(veth0) entered blocking state [ 930.833539][T29775] bridge0: port 3(veth0) entered forwarding state [ 930.833881][T29775] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.833992][T29775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.836039][T29775] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.836165][T29775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 930.931726][T29775] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6534'. [ 931.311176][T29656] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.311897][T29656] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.312062][T29656] bridge_slave_0: entered allmulticast mode [ 931.345394][T29656] bridge_slave_0: entered promiscuous mode [ 931.449568][T29792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6536'. [ 931.479179][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.533811][T29656] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.533964][T29656] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.534165][T29656] bridge_slave_1: entered allmulticast mode [ 931.576499][T29656] bridge_slave_1: entered promiscuous mode [ 931.635217][T16711] Bluetooth: hci5: command tx timeout [ 931.848021][T29656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.863029][T29656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.065822][T29656] team0: Port device team_slave_0 added [ 932.081059][T29656] team0: Port device team_slave_1 added [ 932.211917][T29656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.211936][T29656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.211959][T29656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.214192][T29656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.214206][T29656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.214228][T29656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.371273][T29656] hsr_slave_0: entered promiscuous mode [ 932.372255][T29656] hsr_slave_1: entered promiscuous mode [ 932.372960][T29656] debugfs: 'hsr0' already exists in 'hsr' [ 932.372979][T29656] Cannot create hsr debugfs directory [ 932.793712][T29824] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6545'. [ 932.990587][T29834] netlink: 'syz.4.6546': attribute type 11 has an invalid length. [ 933.142131][T29837] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6548'. [ 933.315234][T29656] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.315268][T29656] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.373594][T29823] syzkaller1: entered promiscuous mode [ 933.373617][T29823] syzkaller1: entered allmulticast mode [ 933.540860][T29843] netlink: 'syz.3.6550': attribute type 2 has an invalid length. [ 933.600626][T29656] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.600669][T29656] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.601039][T29845] netlink: 'syz.3.6550': attribute type 1 has an invalid length. [ 933.601056][T29845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6550'. [ 933.715371][T16711] Bluetooth: hci5: command tx timeout [ 933.782035][T29851] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 933.851684][T29854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6553'. [ 933.949801][T29656] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.949835][T29656] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.201225][T29656] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.201261][T29656] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.699508][T29872] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6556'. [ 934.882267][T29875] ip6t_REJECT: ECHOREPLY is not supported [ 934.928689][T29879] ip6t_REJECT: ECHOREPLY is not supported [ 934.930284][T29877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 935.091613][T29886] netlink: zone id is out of range [ 935.091628][T29886] netlink: zone id is out of range [ 935.091637][T29886] netlink: zone id is out of range [ 935.091644][T29886] netlink: zone id is out of range [ 935.091682][T29886] netlink: zone id is out of range [ 935.091690][T29886] netlink: zone id is out of range [ 935.091717][T29886] netlink: zone id is out of range [ 935.092585][T29886] netlink: zone id is out of range [ 935.160908][T29877] netlink: 'syz.2.6558': attribute type 4 has an invalid length. [ 935.797115][T16711] Bluetooth: hci5: command tx timeout [ 935.898311][T29656] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 935.964514][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 936.011275][T29656] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 936.071242][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 936.087135][T29656] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 936.149111][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 936.171683][T29656] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 936.272552][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 936.638767][T29938] netlink: 'syz.4.6564': attribute type 11 has an invalid length. [ 936.948114][T29956] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6569'. [ 936.977420][T29956] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6569'. [ 937.218319][T29656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.263497][T29656] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.299994][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.300121][ T6384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.311748][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.311845][ T6384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.389229][T29964] netlink: 'syz.2.6572': attribute type 49 has an invalid length. [ 937.408065][T29966] netlink: 'syz.2.6572': attribute type 49 has an invalid length. [ 937.513640][T29975] x_tables: ip_tables: osf match: only valid for protocol 6 [ 937.664037][T29982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6576'. [ 937.843052][T29964] ip6gretap0: entered promiscuous mode [ 937.843076][T29964] ip6gretap0: entered allmulticast mode [ 938.156679][T29989] bridge0: port 3(syz_tun) entered blocking state [ 938.157575][T29989] bridge0: port 3(syz_tun) entered disabled state [ 938.157754][T29989] syz_tun: entered allmulticast mode [ 938.161458][T29989] syz_tun: entered promiscuous mode [ 938.163568][T29989] bridge0: port 3(syz_tun) entered blocking state [ 938.163687][T29989] bridge0: port 3(syz_tun) entered forwarding state [ 938.210049][T29996] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 938.673982][T30010] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6581'. [ 938.693885][T30011] netlink: 'syz.4.6582': attribute type 4 has an invalid length. [ 938.707432][T30010] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6581'. [ 938.826132][T30015] netlink: 'syz.2.6583': attribute type 1 has an invalid length. [ 939.014296][T30015] bond3: entered promiscuous mode [ 939.016004][T30015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 939.113303][T30023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 939.113708][T30023] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 939.113727][T30023] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 939.153613][T30023] bond3: (slave xfrm1): making interface the new active one [ 939.153637][T30023] xfrm1: entered promiscuous mode [ 939.187717][T30023] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 939.534175][T30045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6590'. [ 939.770230][T29656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.861368][T29656] veth0_vlan: entered promiscuous mode [ 939.879093][T29656] veth1_vlan: entered promiscuous mode [ 939.929619][T29656] veth0_macvtap: entered promiscuous mode [ 939.938132][T29656] veth1_macvtap: entered promiscuous mode [ 939.968579][T29656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 939.983620][T29656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.026307][ T1120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.027555][ T1120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.027591][ T1120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.027622][ T1120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.340920][T29999] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 941.629019][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.629039][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.885607][T30069] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6596'. [ 942.001602][T30073] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6596'. [ 942.041538][ T6410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.041558][ T6410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.223018][T30083] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6598'. [ 942.321303][T30083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6598'. [ 942.670294][T30091] xt_nfacct: accounting object `syz0' does not exist [ 942.740904][T30092] netlink: 'syz.2.6600': attribute type 3 has an invalid length. [ 942.740923][T30092] netlink: 'syz.2.6600': attribute type 1 has an invalid length. [ 943.189051][T30101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6603'. [ 943.845536][ T4934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 943.862627][ T4934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 943.871134][ T4934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 943.883224][ T4934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 943.886309][ T4934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 944.354117][T30101] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.638413][T30140] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6607'. [ 945.038346][T30101] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.062731][T30151] netlink: 'syz.4.6611': attribute type 1 has an invalid length. [ 945.160927][T30154] x_tables: unsorted underflow at hook 1 [ 945.398420][T30101] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.680871][T30101] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.088171][ T6374] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.117013][T16711] Bluetooth: hci4: command tx timeout [ 946.141620][T30183] netlink: 'syz.2.6619': attribute type 4 has an invalid length. [ 946.243064][ T6384] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.243107][ T6384] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.243139][ T6384] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.400707][T30183] bond4 (unregistering): Released all slaves [ 946.569385][T30198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6622'. [ 946.576258][T30198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6622'. [ 946.587798][T30195] netlink: 'syz.1.6621': attribute type 8 has an invalid length. [ 946.587817][T30195] sch_fq: defrate 0 ignored. [ 946.627988][T30194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6622'. [ 946.776952][T30126] lo speed is unknown, defaulting to 1000 [ 946.822679][T30205] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6624'. [ 946.941942][T30208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6625'. [ 947.655794][T30229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6628'. [ 947.655992][T30229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6628'. [ 947.656168][T30229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6628'. [ 947.656347][T30229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6628'. [ 947.656523][T30229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6628'. [ 947.656694][T30229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6628'. [ 947.661048][T30229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6628'. [ 947.661603][T30229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6628'. [ 947.661815][T30229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6628'. [ 947.661991][T30229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6628'. [ 948.199082][T16711] Bluetooth: hci4: command tx timeout [ 948.933937][T30126] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.939564][T30126] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.939702][T30126] bridge_slave_0: entered allmulticast mode [ 948.985819][T30126] bridge_slave_0: entered promiscuous mode [ 949.009963][T30126] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.010067][T30126] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.010198][T30126] bridge_slave_1: entered allmulticast mode [ 949.038405][T30126] bridge_slave_1: entered promiscuous mode [ 949.186667][T30263] net_ratelimit: 344 callbacks suppressed [ 949.186686][T30263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 949.193917][T30264] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20002 [ 949.279517][T30126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.297896][T30126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.321303][T30263] netlink: 'syz.4.6641': attribute type 4 has an invalid length. [ 949.339008][T30267] netlink: 'syz.2.6640': attribute type 11 has an invalid length. [ 949.460107][T30126] team0: Port device team_slave_0 added [ 949.475743][T30126] team0: Port device team_slave_1 added [ 949.620622][T30126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.620639][T30126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.620661][T30126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.624063][T30126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.624076][T30126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.624097][T30126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.748547][T30280] vlan2: entered allmulticast mode [ 949.748569][T30280] erspan0: entered allmulticast mode [ 949.942020][T30126] hsr_slave_0: entered promiscuous mode [ 949.959752][T30126] hsr_slave_1: entered promiscuous mode [ 949.971875][T30126] debugfs: 'hsr0' already exists in 'hsr' [ 949.971897][T30126] Cannot create hsr debugfs directory [ 950.217242][T30295] tipc: Enabled bearer , priority 0 [ 950.274964][T16711] Bluetooth: hci4: command tx timeout [ 950.300463][T30292] syzkaller0: MTU too low for tipc bearer [ 950.300878][T30292] tipc: Disabling bearer [ 950.632995][T30304] xt_NFQUEUE: number of total queues is 0 [ 950.886207][T30126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.226393][T30126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.699687][T30126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.858605][T30346] x_tables: duplicate underflow at hook 1 [ 952.165799][T30126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.355945][T16711] Bluetooth: hci4: command tx timeout [ 952.739121][T30368] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 952.802595][T30374] netlink: 'syz.0.6664': attribute type 12 has an invalid length. [ 953.059755][T30379] __nla_validate_parse: 13 callbacks suppressed [ 953.059799][T30379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6666'. [ 953.132520][T30377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6665'. [ 953.347542][T30376] 8021q: adding VLAN 0 to HW filter on device bond4 [ 953.488731][T30126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 953.510162][T30126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 953.528960][T30126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 953.554258][T30126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 953.567648][T30126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 953.680307][T30126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 953.714172][T30126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 953.861457][T30126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 954.111403][T30399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6671'. [ 954.168747][T30400] netlink: 'syz.0.6671': attribute type 7 has an invalid length. [ 954.168767][T30400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6671'. [ 954.168794][T30400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6671'. [ 954.186503][T30409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6674'. [ 954.186528][T30409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6674'. [ 954.207364][T30409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6674'. [ 954.272173][T30126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.373018][T30126] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.390107][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.390288][ T6384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.430406][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.430545][ T6406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.941351][T30399] netlink: 'syz.0.6671': attribute type 7 has an invalid length. [ 954.941371][T30399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6671'. [ 954.941397][T30399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6671'. [ 955.532189][T30443] netlink: 'syz.4.6680': attribute type 21 has an invalid length. [ 955.532215][T30443] IPv6: NLM_F_CREATE should be specified when creating new route [ 955.532319][T30443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 955.532330][T30443] IPv6: NLM_F_CREATE should be set when creating new route [ 956.713526][ T6389] IPVS: starting estimator thread 0... [ 956.807733][T30484] IPVS: using max 33 ests per chain, 79200 per kthread [ 956.877023][T30489] netlink: 'syz.4.6689': attribute type 21 has an invalid length. [ 957.189365][T30499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 957.401610][T30499] gretap0: entered promiscuous mode [ 957.499012][T30126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.580822][T30512] netlink: 'syz.4.6698': attribute type 1 has an invalid length. [ 957.708298][T30512] bond2: entered promiscuous mode [ 957.708664][T30512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 958.169815][T30126] veth0_vlan: entered promiscuous mode [ 958.224051][T30126] veth1_vlan: entered promiscuous mode [ 958.290305][T30126] veth0_macvtap: entered promiscuous mode [ 958.310247][T30126] veth1_macvtap: entered promiscuous mode [ 958.357787][T30126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.362914][T30126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.403019][ T6389] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.403064][ T6389] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.403099][ T6389] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.443569][ T6406] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.067992][T30545] netlink: 'syz.0.6704': attribute type 7 has an invalid length. [ 959.258878][T30554] __nla_validate_parse: 7 callbacks suppressed [ 959.258898][T30554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6707'. [ 959.306114][T30545] netlink: 'syz.0.6704': attribute type 7 has an invalid length. [ 959.306693][ T6410] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 959.311088][ T6410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.311105][ T6410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.322404][ T6369] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 959.465294][ T6369] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 959.465343][ T6369] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 959.668983][T30559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6708'. [ 959.672244][ T6369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.672263][ T6369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.679496][T30561] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 959.786154][T30566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6709'. [ 961.444353][T30610] netlink: 'syz.0.6722': attribute type 5 has an invalid length. [ 961.527116][T30610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6722'. [ 961.527148][T30610] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 962.873520][T30571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 963.176886][T30631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6725'. [ 963.324523][T30634] C: renamed from lo [ 963.343618][T30634] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 963.370527][T30639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6730'. [ 963.399602][T30639] vlan3: entered promiscuous mode [ 963.399622][T30639] bridge0: entered promiscuous mode [ 964.210017][T30667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6739'. [ 964.244305][T30666] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6738'. [ 964.290382][T30666] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6738'. [ 964.680657][T30684] ip_tables: iptables: counters copy to user failed while replacing table [ 965.147959][T30693] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 965.285542][T30698] macvlan0: entered promiscuous mode [ 965.324730][T30698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6748'. [ 965.518005][T30708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6747'. [ 965.589584][T30716] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6751'. [ 965.641943][T30719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6752'. [ 965.732142][T30722] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6753'. [ 966.007710][T30728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6755'. [ 966.102990][T30735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6755'. [ 966.880072][T30767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6765'. [ 967.348795][T30787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6773'. [ 967.368575][T30788] macvlan1: entered allmulticast mode [ 968.263373][T30827] ip6t_frag: unknown flags 6 [ 968.308548][T30827] ip6t_frag: unknown flags 6 [ 968.671021][T30838] netlink: 'syz.3.6781': attribute type 4 has an invalid length. [ 969.013474][T30853] xfrm1: entered promiscuous mode [ 969.013496][T30853] xfrm1: entered allmulticast mode [ 971.037562][T30816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 971.424133][T30873] netlink: 'syz.0.6791': attribute type 9 has an invalid length. [ 972.179782][T30899] __nla_validate_parse: 5 callbacks suppressed [ 972.179804][T30899] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6798'. [ 973.260033][T30941] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6806'. [ 973.411542][T30936] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 973.423815][T30950] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6807'. [ 974.128633][T30967] netlink: 'syz.4.6810': attribute type 2 has an invalid length. [ 974.128654][T30967] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6810'. [ 974.132655][T30967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6810'. [ 974.138022][T30967] ip_tables: iptables: counters copy to user failed while replacing table [ 974.328424][T30972] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6812'. [ 974.758320][T30987] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6816'. [ 974.862409][T30991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6817'. [ 974.862640][T30991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6817'. [ 974.862878][T30991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6817'. [ 974.872502][T30987] syzkaller1: entered promiscuous mode [ 974.872523][T30987] syzkaller1: entered allmulticast mode [ 975.010589][T31004] netlink: 'syz.2.6820': attribute type 64 has an invalid length. [ 975.092290][T31003] ipip0: entered allmulticast mode [ 976.392040][T31050] Bluetooth: MGMT ver 1.23 [ 976.601842][T31057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 976.954537][T31070] set match dimension is over the limit! [ 977.132654][T31078] IPv6: Can't replace route, no match found [ 977.182938][T31078] sctp: [Deprecated]: syz.4.6844 (pid 31078) Use of int in maxseg socket option. [ 977.182938][T31078] Use struct sctp_assoc_value instead [ 977.384536][T31083] __nla_validate_parse: 25 callbacks suppressed [ 977.384555][T31083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6846'. [ 977.448416][T31091] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6846'. [ 977.469536][T31083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.482827][T31094] netlink: 'syz.1.6849': attribute type 1 has an invalid length. [ 977.482846][T31094] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6849'. [ 977.482860][T31094] netlink: 'syz.1.6849': attribute type 1 has an invalid length. [ 977.711327][T31101] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6851'. [ 977.921028][T31105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6853'. [ 977.935916][T31107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6853'. [ 977.936856][T31107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6853'. [ 977.940038][T31107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6853'. [ 977.943685][T31107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6853'. [ 977.978459][T31107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6853'. [ 978.518034][T31125] netlink: 'syz.1.6859': attribute type 8 has an invalid length. [ 978.658959][T31140] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 979.073074][T31144] macvlan0: entered promiscuous mode [ 979.200683][T31155] netlink: 'syz.3.6868': attribute type 1 has an invalid length. [ 979.529953][T31155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 979.668267][ T4934] Bluetooth: hci3: command 0x0406 tx timeout [ 979.839030][T31160] batadv0: entered promiscuous mode [ 979.839142][T31160] macsec1: entered promiscuous mode [ 979.858972][T31160] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 979.927685][T31160] batadv0: left promiscuous mode [ 980.024728][T31171] tipc: Enabling not permitted [ 980.024787][T31171] tipc: Enabling of bearer rejected, failed to enable media [ 980.602704][T31188] erspan0: entered promiscuous mode [ 981.393810][T31231] sctp: [Deprecated]: syz.2.6885 (pid 31231) Use of int in max_burst socket option. [ 981.393810][T31231] Use struct sctp_assoc_value instead [ 981.475624][T31232] netlink: 'syz.3.6886': attribute type 10 has an invalid length. [ 981.644166][T31232] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 981.656625][T31232] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 982.026993][T31235] batadv_slave_0: entered promiscuous mode [ 982.030149][T31254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.120918][T31254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.133618][T31296] netlink: 'syz.3.6895': attribute type 4 has an invalid length. [ 983.354865][T31306] __nla_validate_parse: 37 callbacks suppressed [ 983.354884][T31306] netlink: 198796 bytes leftover after parsing attributes in process `syz.0.6896'. [ 983.354899][T31306] netlink: 'syz.0.6896': attribute type 2 has an invalid length. [ 983.408005][T31308] netlink: 198796 bytes leftover after parsing attributes in process `syz.0.6896'. [ 983.408028][T31308] netlink: 'syz.0.6896': attribute type 2 has an invalid length. [ 984.218451][T31299] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 984.351785][T31335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6899'. [ 984.363679][T31335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6899'. [ 984.387428][T31333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6900'. [ 984.535325][T31339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6900'. [ 984.583133][T31333] bond2: entered promiscuous mode [ 984.589003][T31333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 984.795484][T31353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6902'. [ 985.443257][T31366] Set syz1 is full, maxelem 2 reached [ 985.701655][T31376] netlink: 'syz.3.6907': attribute type 4 has an invalid length. [ 985.775958][T31380] xt_REDIRECT: bad MAP_IPS. [ 986.488454][T31403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6911'. [ 986.491247][T31403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 986.563544][T31405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6911'. [ 986.632750][T31380] syzkaller0: entered promiscuous mode [ 986.632795][T31380] syzkaller0: entered allmulticast mode [ 986.686577][T31412] netlink: 'syz.3.6913': attribute type 1 has an invalid length. [ 986.687621][T31413] nft_compat: unsupported protocol 0 [ 986.848074][T31412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 987.005047][T31423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6915'. [ 987.005070][T31423] openvswitch: netlink: Flow actions attr not present in new flow. [ 987.025043][T31415] bond2: (slave geneve2): making interface the new active one [ 987.062466][T31415] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 991.362199][T31408] __nla_validate_parse: 2 callbacks suppressed [ 991.362219][T31408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6912'. [ 991.785687][T31453] netlink: 'syz.4.6920': attribute type 4 has an invalid length. [ 991.891187][T31454] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6922'. [ 992.331662][T31456] syzkaller0: entered promiscuous mode [ 992.331686][T31456] syzkaller0: entered allmulticast mode [ 992.477021][T31475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6928'. [ 992.533788][T31476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6926'. [ 992.698640][T31476] netlink: 'syz.0.6926': attribute type 13 has an invalid length. [ 992.816540][T31487] netlink: 'syz.1.6930': attribute type 7 has an invalid length. [ 992.918624][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.288023][T31484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6926'. [ 993.341574][T31494] netlink: 'syz.0.6926': attribute type 1 has an invalid length. [ 996.406364][T31483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6929'. [ 996.436797][T31485] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 996.437518][T31485] batman_adv: batadv0: Adding interface: gretap1 [ 996.437531][T31485] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.437558][T31485] batman_adv: batadv0: Interface activated: gretap1 [ 996.441436][T31494] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 996.891630][T31503] netlink: 'syz.1.6934': attribute type 4 has an invalid length. [ 997.328052][T31519] netlink: 'syz.4.6937': attribute type 1 has an invalid length. [ 997.378376][T31520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6938'. [ 997.379316][T31522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6937'. [ 997.499360][T31519] 8021q: adding VLAN 0 to HW filter on device bond3 [ 997.799640][T31530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6941'. [ 997.974434][T31536] tipc: Enabling of bearer rejected, media not registered [ 998.137940][T31543] hsr0 speed is unknown, defaulting to 1000 [ 998.138001][T31543] hsr0 speed is unknown, defaulting to 1000 [ 998.138882][T31543] hsr0 speed is unknown, defaulting to 1000 [ 998.142935][T31543] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 998.142966][T31543] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 998.143003][T31543] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 998.211805][T31543] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 998.235857][T31543] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 998.284547][T31539] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6944'. [ 998.503541][T31543] hsr0 speed is unknown, defaulting to 1000 [ 998.571241][T31543] hsr0 speed is unknown, defaulting to 1000 [ 998.587287][T31543] hsr0 speed is unknown, defaulting to 1000 [ 998.592914][T31543] hsr0 speed is unknown, defaulting to 1000 [ 998.614927][T31543] hsr0 speed is unknown, defaulting to 1000 [ 998.618354][T31543] hsr0 speed is unknown, defaulting to 1000 [ 998.622019][T31543] hsr0 speed is unknown, defaulting to 1000 [ 998.623789][T31543] hsr0 speed is unknown, defaulting to 1000 [ 998.659412][T31543] hsr0 speed is unknown, defaulting to 1000 [ 998.661393][T31543] hsr0 speed is unknown, defaulting to 1000 [ 998.663222][T31543] hsr0 speed is unknown, defaulting to 1000 [ 998.810556][T31564] x_tables: unsorted entry at hook 2 [ 998.827681][T31564] atomic_op ffff888079e599e0 conn xmit_atomic 0000000000000000 [ 998.962190][T31566] syzkaller0: entered promiscuous mode [ 998.962212][T31566] syzkaller0: entered allmulticast mode [ 999.076175][T31576] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6953'. [ 999.166965][T31574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6951'. [ 999.268616][T31568] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 999.321040][T31584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6956'. [ 999.395961][T31588] netlink: 'syz.2.6956': attribute type 3 has an invalid length. [ 999.426285][T31580] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 999.426307][T31580] syzkaller1: group set to 0 [ 999.672095][T31584] 8021q: adding VLAN 0 to HW filter on device bond5 [ 999.680845][T31584] bond0: (slave bond5): Enslaving as an active interface with an up link [ 999.806464][T31601] rdma_rxe: rxe_newlink: failed to add wg1 [ 1000.011045][T31609] netlink: 'syz.2.6961': attribute type 32 has an invalid length. [ 1000.011067][T31609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6961'. [ 1000.091194][T31609] bond6: option coupled_control: invalid value (192) [ 1000.092915][T31609] bond6 (unregistering): Released all slaves [ 1000.170162][T31613] netlink: 'syz.1.6963': attribute type 1 has an invalid length. [ 1000.421163][T31613] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1000.458454][T31629] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6964'. [ 1000.573387][T31614] bond5: (slave ip6erspan0): making interface the new active one [ 1000.627810][T31614] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1000.921239][T31641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1002.124191][T31675] __nla_validate_parse: 2 callbacks suppressed [ 1002.124212][T31675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6976'. [ 1002.180629][T31677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6978'. [ 1002.309060][T31680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6979'. [ 1002.461185][T31690] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6982'. [ 1002.593360][T31696] ip_tables: iptables: counters copy to user failed while replacing table [ 1002.709067][T31706] only policy match revision 0 supported [ 1002.709085][T31706] unable to load match [ 1002.926725][T31718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6988'. [ 1002.964157][T31718] tipc: Enabling of bearer rejected, failed to enable media [ 1003.071714][T31721] netlink: 'syz.1.6987': attribute type 1 has an invalid length. [ 1003.415129][T31735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6991'. [ 1003.629039][T31735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6991'. [ 1003.922853][T31741] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6993'. [ 1004.091206][T31746] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6994'. [ 1004.091957][T31745] netlink: 'syz.2.6995': attribute type 4 has an invalid length. [ 1004.152198][T31753] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6994'. [ 1004.262971][T16711] Bluetooth: hci4: unexpected cc 0x2003 length: 10 > 9 [ 1004.522860][T31778] xt_ipcomp: unknown flags 1D [ 1004.534882][T31767] batman_adv: batadv0: Adding interface: dummy0 [ 1004.534899][T31767] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.534923][T31767] batman_adv: batadv0: Interface activated: dummy0 [ 1004.997570][T31779] batadv0: mtu less than device minimum [ 1005.001617][T31779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1005.003047][T31779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1005.004466][T31779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1005.005983][T31779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1005.007386][T31779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1005.008864][T31779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1005.010297][T31779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1005.011689][T31779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1005.013097][T31779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1005.664123][T16711] Bluetooth: hci4: unexpected event 0x0e length: 257 > 255 [ 1005.763511][T31814] netlink: 'syz.0.7011': attribute type 83 has an invalid length. [ 1005.780068][T31814] siw: device registration error -23 [ 1005.829398][T31817] netlink: 'syz.0.7011': attribute type 83 has an invalid length. [ 1005.849100][T31814] siw: device registration error -23 [ 1005.981196][T31824] netlink: 'syz.3.7014': attribute type 39 has an invalid length. [ 1006.047428][T31826] netlink: 'syz.3.7014': attribute type 19 has an invalid length. [ 1006.094301][T31826] netlink: 'syz.3.7014': attribute type 19 has an invalid length. [ 1006.095017][ T6410] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1006.095113][ T6410] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1006.095259][ T6410] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1006.095939][ T6410] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.007211][T31847] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 1007.402861][T31867] __nla_validate_parse: 4 callbacks suppressed [ 1007.402882][T31867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7031'. [ 1007.402905][T31867] netlink: 'syz.3.7031': attribute type 8 has an invalid length. [ 1007.402916][T31867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7031'. [ 1007.487200][T31857] syzkaller0: entered promiscuous mode [ 1007.487223][T31857] syzkaller0: entered allmulticast mode [ 1007.488592][T31861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7029'. [ 1007.497264][T31861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7029'. [ 1007.503640][T31876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7031'. [ 1007.503668][T31876] netlink: 'syz.3.7031': attribute type 8 has an invalid length. [ 1007.503679][T31876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7031'. [ 1007.567625][T31870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7029'. [ 1011.730362][T31948] syzkaller1: entered promiscuous mode [ 1011.730385][T31948] syzkaller1: entered allmulticast mode [ 1012.064501][T31970] net_ratelimit: 11 callbacks suppressed [ 1012.064522][T31970] ip_tables: iptables: counters copy to user failed while replacing table [ 1012.108246][T31970] netlink: 'syz.2.7040': attribute type 4 has an invalid length. [ 1012.221919][T31976] netlink: 'syz.1.7041': attribute type 142 has an invalid length. [ 1012.282956][T31977] netlink: 'syz.1.7041': attribute type 142 has an invalid length. [ 1012.343055][T31983] netlink: zone id is out of range [ 1012.343071][T31983] netlink: zone id is out of range [ 1012.343079][T31983] netlink: zone id is out of range [ 1012.343087][T31983] netlink: zone id is out of range [ 1012.343105][T31983] netlink: zone id is out of range [ 1012.343113][T31983] netlink: zone id is out of range [ 1012.343126][T31983] netlink: zone id is out of range [ 1012.343134][T31983] netlink: zone id is out of range [ 1012.343142][T31983] netlink: zone id is out of range [ 1012.476739][T31985] IPVS: length: 210 != 8 [ 1012.854427][T32002] netlink: 'syz.3.7048': attribute type 1 has an invalid length. [ 1013.065538][T32008] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7051'. [ 1013.503286][T32027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7056'. [ 1015.019599][T32060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7066'. [ 1015.019938][T32060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7066'. [ 1015.043917][T32072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7069'. [ 1016.158206][T32109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7079'. [ 1016.172257][T32109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7079'. [ 1016.691623][T32133] netlink: 'syz.2.7086': attribute type 24 has an invalid length. [ 1016.742667][T32137] xt_addrtype: ipv6 does not support BROADCAST matching [ 1016.860995][T32141] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 3, id = 0 [ 1016.876428][T32140] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7089'. [ 1016.922358][T32133] netlink: 'syz.2.7086': attribute type 2 has an invalid length. [ 1016.922378][T32133] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7086'. [ 1017.193047][T32146] ksmbd: Unknown IPC event: 1, ignore. [ 1017.244035][T32149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7092'. [ 1017.634585][T32159] tipc: Enabling of bearer rejected, failed to enable media [ 1017.677359][T32163] netlink: 'syz.1.7096': attribute type 25 has an invalid length. [ 1017.924495][T32176] netlink: 'syz.0.7099': attribute type 1 has an invalid length. [ 1018.082620][T32183] __nla_validate_parse: 5 callbacks suppressed [ 1018.082641][T32183] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7100'. [ 1018.265668][T32186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7102'. [ 1018.604280][T32196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7104'. [ 1018.606447][T32196] net_ratelimit: 2 callbacks suppressed [ 1018.606462][T32196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1018.613886][T32198] xt_cluster: node mask cannot exceed total number of nodes [ 1018.687938][T32208] tipc: Started in network mode [ 1018.690433][T32208] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1018.745752][T32208] tipc: Enabled bearer , priority 10 [ 1019.046626][T32212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7107'. [ 1019.046842][T32212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7107'. [ 1019.047014][T32212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7107'. [ 1019.047182][T32212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7107'. [ 1019.047351][T32212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7107'. [ 1019.047517][T32212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7107'. [ 1019.047692][T32212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7107'. [ 1019.780971][T31938] tipc: Node number set to 4269801488 [ 1020.596204][T32200] Bluetooth: hci1: command 0x0406 tx timeout [ 1021.900661][T32286] sctp: [Deprecated]: syz.1.7122 (pid 32286) Use of int in max_burst socket option deprecated. [ 1021.900661][T32286] Use struct sctp_assoc_value instead [ 1023.636202][T32316] __nla_validate_parse: 30 callbacks suppressed [ 1023.636222][T32316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7132'. [ 1023.782645][T32316] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1023.793166][T32316] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7132'. [ 1023.863875][T32320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7130'. [ 1024.205564][T32313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7130'. [ 1024.711112][T32327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7134'. [ 1025.418521][T32340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7135'. [ 1025.442374][T32336] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1025.442964][T32336] IPVS: set_ctl: invalid protocol: 39 172.20.20.170:20003 [ 1026.466518][T32351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7140'. [ 1026.577910][T32351] ip6gre1: entered promiscuous mode [ 1026.585898][T32351] ip6gre1: entered allmulticast mode [ 1026.684446][T32353] netlink: 'syz.2.7140': attribute type 6 has an invalid length. [ 1026.684467][T32353] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7140'. [ 1028.419040][T32375] batman_adv: batadv0: Adding interface: syzkaller0 [ 1028.419057][T32375] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.419084][T32375] batman_adv: batadv0: Interface activated: syzkaller0 [ 1028.676602][T32388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7148'. [ 1028.676626][T32388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7148'. [ 1028.724123][T32391] Cannot find map_set index 135 as target [ 1028.873695][T32380] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1029.678677][T32380] batman_adv: batadv0: Removing interface: syzkaller0 [ 1030.670504][T32413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7156'. [ 1031.055256][T32420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7159'. [ 1031.055285][T32420] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1031.855383][T32425] ip_tables: iptables: counters copy to user failed while replacing table [ 1033.835712][T32439] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1034.011696][T32439] bond3 (unregistering): Released all slaves [ 1035.681504][T31557] IPVS: starting estimator thread 0... [ 1035.700871][T32460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7169'. [ 1035.785778][T32465] IPVS: using max 27 ests per chain, 64800 per kthread [ 1037.070944][T32484] netlink: 'syz.2.7174': attribute type 62 has an invalid length. [ 1037.599322][T32494] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 1038.407989][T32503] netlink: 'syz.0.7180': attribute type 1 has an invalid length. [ 1038.873147][T32515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7181'. [ 1038.900097][T32505] bond3: (slave bridge2): making interface the new active one [ 1038.910890][T32505] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1042.530708][T32551] netlink: 'syz.2.7192': attribute type 15 has an invalid length. [ 1042.659719][T32558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7192'. [ 1042.694180][T32555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7192'. [ 1043.195142][T31560] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1043.205721][ T6389] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1043.205767][ T6389] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1043.205803][ T6389] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1043.934069][T32575] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1044.160930][T32585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7199'. [ 1044.160955][T32585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7199'. [ 1044.183956][T32584] ip_tables: iptables: counters copy to user failed while replacing table [ 1044.185389][T32583] ip_tables: iptables: counters copy to user failed while replacing table [ 1044.644050][T32588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7198'. [ 1048.494064][T32650] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7212'. [ 1050.452242][T32681] netlink: 'syz.1.7217': attribute type 13 has an invalid length. [ 1052.923517][T32697] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1054.359639][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.604196][T32716] openvswitch: netlink: Message has 4 unknown bytes. [ 1054.757804][T31558] IPVS: starting estimator thread 0... [ 1054.845873][T32729] IPVS: using max 32 ests per chain, 76800 per kthread [ 1055.954418][T32739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7230'. [ 1056.491907][T32749] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1057.821960][ T6410] wlan1: Trigger new scan to find an IBSS to join [ 1057.926228][T32763] netlink: 324 bytes leftover after parsing attributes in process `syz.2.7237'. [ 1057.948438][ T300] netlink: 324 bytes leftover after parsing attributes in process `syz.2.7237'. [ 1058.188820][T32764] netlink: 'syz.0.7238': attribute type 4 has an invalid length. [ 1058.368323][ T302] FAULT_INJECTION: forcing a failure. [ 1058.368323][ T302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.368356][ T302] CPU: 0 UID: 0 PID: 302 Comm: syz.1.7239 Not tainted syzkaller #0 PREEMPT(full) [ 1058.368376][ T302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1058.368388][ T302] Call Trace: [ 1058.368397][ T302] [ 1058.368406][ T302] dump_stack_lvl+0xe8/0x150 [ 1058.368442][ T302] should_fail_ex+0x410/0x560 [ 1058.368470][ T302] _copy_to_user+0x31/0xb0 [ 1058.368498][ T302] simple_read_from_buffer+0xe1/0x170 [ 1058.368530][ T302] proc_fail_nth_read+0x1bb/0x230 [ 1058.368559][ T302] ? common_file_perm+0x20e/0x2b0 [ 1058.368587][ T302] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1058.368619][ T302] ? rw_verify_area+0x24a/0x4c0 [ 1058.368659][ T302] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1058.368688][ T302] vfs_read+0x213/0xa80 [ 1058.368718][ T302] ? irqentry_exit+0x218/0x910 [ 1058.368822][ T302] ? lockdep_hardirqs_on+0x7b/0x110 [ 1058.368845][ T302] ? __pfx_vfs_read+0x10/0x10 [ 1058.368894][ T302] ksys_read+0x150/0x270 [ 1058.368924][ T302] ? __pfx_ksys_read+0x10/0x10 [ 1058.368963][ T302] do_syscall_64+0x166/0x520 [ 1058.368985][ T302] ? trace_irq_disable+0x3b/0x140 [ 1058.369006][ T302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.369027][ T302] ? clear_bhb_loop+0x70/0xc0 [ 1058.369050][ T302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.369069][ T302] RIP: 0033:0x7fd986d5e98e [ 1058.369087][ T302] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1058.369103][ T302] RSP: 002b:00007fd987cdcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1058.369125][ T302] RAX: ffffffffffffffda RBX: 00007fd987cdd6c0 RCX: 00007fd986d5e98e [ 1058.369139][ T302] RDX: 000000000000000f RSI: 00007fd987cdd0a0 RDI: 0000000000000005 [ 1058.369151][ T302] RBP: 00007fd987cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.369162][ T302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.369174][ T302] R13: 00007fd987026038 R14: 00007fd987025fa0 R15: 00007ffd4f1ed218 [ 1058.369205][ T302] [ 1060.264032][ T322] netlink: 'syz.2.7244': attribute type 97 has an invalid length. [ 1060.264054][ T322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7244'. [ 1060.264076][ T322] netlink: 'syz.2.7244': attribute type 97 has an invalid length. [ 1060.264088][ T322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7244'. [ 1060.422751][ T320] netlink: 'syz.0.7243': attribute type 30 has an invalid length. [ 1061.802678][T31558] wlan1: Trigger new scan to find an IBSS to join [ 1062.116783][ T347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7248'. [ 1062.266486][ T352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7251'. [ 1062.367561][ T347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.367766][ T347] batadv0: mtu less than device minimum [ 1062.369154][ T347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.370470][ T347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.371799][ T347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.373113][ T347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.374429][ T347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.377537][ T347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.378860][ T347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.380196][ T347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.381510][ T347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.870451][ T1120] wlan1: Creating new IBSS network, BSSID 6e:43:90:e9:b4:52 [ 1063.082943][ T358] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1063.378506][ T347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.116140][ T349] bridge_slave_0: left allmulticast mode [ 1064.116498][ T349] bridge_slave_0: left promiscuous mode [ 1064.117364][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.419748][ T349] bridge_slave_1: left allmulticast mode [ 1064.431051][ T349] bridge_slave_1: left promiscuous mode [ 1064.470247][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.142642][ T349] bond0: (slave bond_slave_0): Releasing backup interface [ 1065.444875][ T349] bond0: (slave bond_slave_1): Releasing backup interface [ 1065.603581][ T349] team0: Port device team_slave_0 removed [ 1065.963633][ T349] team0: Port device team_slave_1 removed [ 1065.994719][ T349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.012100][ T349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.079962][ T349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.080156][ T349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.712460][T32200] Bluetooth: hci5: command 0x0406 tx timeout [ 1067.882048][ T401] sctp: [Deprecated]: syz.1.7261 (pid 401) Use of int in maxseg socket option. [ 1067.882048][ T401] Use struct sctp_assoc_value instead [ 1068.056173][ T405] netlink: 'syz.0.7262': attribute type 10 has an invalid length. [ 1068.234918][ T407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7259'. [ 1068.259953][ T405] team0: Device vxcan1 is of different type [ 1068.518062][ T410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7263'. [ 1068.736733][ T411] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7263'. [ 1068.825284][ T412] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7263'. [ 1068.896439][ T413] netlink: 'syz.3.7263': attribute type 1 has an invalid length. [ 1069.449585][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.417372][ T413] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1071.502218][ T433] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7268'. [ 1071.795714][T32200] Bluetooth: hci4: command 0x0406 tx timeout [ 1071.828557][ T439] netlink: 'syz.3.7270': attribute type 5 has an invalid length. [ 1071.910312][ T438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7269'. [ 1072.793909][ T439] xfrm1: left promiscuous mode [ 1073.018703][ T443] tipc: Enabling of bearer rejected, failed to enable media [ 1074.027348][ T456] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7274'. [ 1074.653834][ T458] netlink: 'syz.1.7275': attribute type 1 has an invalid length. [ 1074.653855][ T458] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7275'. [ 1074.660054][ T458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7275'. [ 1075.152154][ T463] netlink: 'syz.3.7278': attribute type 3 has an invalid length. [ 1075.507708][ T467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7277'. [ 1075.535266][ T470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7277'. [ 1075.607578][ T471] netlink: 'syz.1.7279': attribute type 1 has an invalid length. [ 1076.500528][ T471] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1076.912409][ T493] netlink: 'syz.4.7281': attribute type 1 has an invalid length. [ 1077.070359][ T495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7281'. [ 1077.323671][ T502] net_ratelimit: 11 callbacks suppressed [ 1077.323695][ T502] ip_tables: iptables: counters copy to user failed while replacing table [ 1078.382285][ T512] netlink: 'syz.0.7288': attribute type 12 has an invalid length. [ 1078.513980][ T516] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7288'. [ 1078.514007][ T516] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7288'. [ 1078.514022][ T516] netlink: 'syz.0.7288': attribute type 5 has an invalid length. [ 1078.514034][ T516] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7288'. [ 1079.571223][ T519] netlink: 'syz.1.7290': attribute type 3 has an invalid length. [ 1079.571251][ T519] netlink: 'syz.1.7290': attribute type 3 has an invalid length. [ 1079.911026][ T527] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7293'. [ 1080.147990][ T532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7293'. [ 1080.243841][ T534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7294'. [ 1083.913738][ T572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1083.913776][ T572] IPv6: NLM_F_CREATE should be set when creating new route [ 1087.454138][ T596] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7312'. [ 1089.448427][ T6384] bond1 (unregistering): Released all slaves [ 1089.584503][ T6384] bond2 (unregistering): Released all slaves [ 1089.674786][ T6384] bond3 (unregistering): Released all slaves [ 1089.761498][ T6384] bond4 (unregistering): Released all slaves [ 1089.853492][ T6384] bond5 (unregistering): Released all slaves [ 1089.942093][ T6384] bond6 (unregistering): Released all slaves [ 1090.055160][ T6384] bond0 (unregistering): Released all slaves [ 1090.346596][ T6384] bond7 (unregistering): Released all slaves [ 1090.587331][ T6384] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1090.677386][ T6384] bond8 (unregistering): Released all slaves [ 1091.265985][ T574] wg1: entered promiscuous mode [ 1091.266182][ T574] wg1: entered allmulticast mode [ 1091.427767][ T6384] ovs-dp0: left promiscuous mode [ 1092.146680][ T6384] tipc: Disabling bearer [ 1092.147350][ T6384] tipc: Left network mode [ 1092.895455][ T616] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1093.643056][ T605] team0 (unregistering): Port device team_slave_0 removed [ 1093.669526][ T6384] IPVS: stopping master sync thread 21425 ... [ 1093.763600][ T605] team0 (unregistering): Port device team_slave_1 removed [ 1094.010465][ T610] veth1_virt_wifi: mtu less than device minimum [ 1095.330975][ T6410] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1096.314743][ T646] netlink: 'syz.3.7326': attribute type 1 has an invalid length. [ 1096.455531][ T652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7326'. [ 1097.005795][ T646] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1098.327073][ T680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7330'. [ 1098.884163][ T679] netlink: 'syz.0.7332': attribute type 1 has an invalid length. [ 1098.884185][ T679] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7332'. [ 1101.320679][ T663] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1104.509416][ T733] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7345'. [ 1105.099776][ T6384] veth0_macvtap: left promiscuous mode [ 1105.100821][ T6384] veth1_vlan: left promiscuous mode [ 1106.242079][ T759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7349'. [ 1106.600962][ T760] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7350'. [ 1106.600991][ T760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7350'. [ 1115.798800][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.982402][ T759] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1116.982445][ T759] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1116.982464][ T759] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1119.465111][ T821] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7358'. [ 1120.042744][ T835] netlink: 'syz.2.7362': attribute type 9 has an invalid length. [ 1120.966962][ T839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7362'. [ 1121.714719][ T850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7364'. [ 1121.715939][ T850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7364'. [ 1122.682340][ T859] netlink: 'syz.0.7367': attribute type 12 has an invalid length. [ 1122.769460][ T6384] IPVS: stop unused estimator thread 0... [ 1122.772988][ T861] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7366'. [ 1123.317338][ T872] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1123.936829][ T875] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20003 [ 1123.943712][ T876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7371'. [ 1124.909300][ T893] netlink: 'syz.2.7376': attribute type 1 has an invalid length. [ 1125.046058][ T892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7375'. [ 1126.260254][ T902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7379'. [ 1126.555287][ T903] can: request_module (can-proto-3) failed. [ 1127.325526][ T1120] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1128.946840][ T932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7385'. [ 1130.246065][ T967] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7392'. [ 1130.780546][ T970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7391'. [ 1131.904281][ T986] syzkaller0: entered promiscuous mode [ 1131.904468][ T986] syzkaller0: entered allmulticast mode [ 1133.284718][ T1009] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7402'. [ 1133.383740][ T1008] pimreg: entered allmulticast mode [ 1134.755404][ T1029] IPVS: set_ctl: invalid protocol: 184 21.0.1.0:0 [ 1134.757637][ T1033] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7407'. [ 1134.808909][ T1034] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7407'. [ 1135.289284][ T1041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1135.344393][ T1041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7411'. [ 1135.344416][ T1041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7411'. [ 1135.344447][ T1041] netlink: 'syz.1.7411': attribute type 3 has an invalid length. [ 1136.491099][ T1071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7415'. [ 1137.414519][ T1084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7417'. [ 1141.504987][ T1115] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1141.613458][ T1133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1141.790438][ T1115] bond3 (unregistering): Released all slaves [ 1142.119304][ T1124] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1142.181109][ T1113] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1142.197350][ T1121] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1143.296647][ T1148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7429'. [ 1143.621931][ T1144] tc action pedit offset must be on 32 bit boundaries [ 1146.419166][ T1178] netlink: 'syz.1.7437': attribute type 1 has an invalid length. [ 1146.673808][ T1184] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7439'. [ 1146.782550][ T1193] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7439'. [ 1146.824910][ T1178] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1147.250676][ T1196] hsr0: entered allmulticast mode [ 1147.250702][ T1196] hsr_slave_0: entered allmulticast mode [ 1147.251075][ T1196] hsr_slave_1: entered allmulticast mode [ 1147.253231][ T1195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7440'. [ 1147.299946][ T1195] hsr_slave_0: left promiscuous mode [ 1147.365234][ T1195] hsr_slave_1: left promiscuous mode [ 1150.637056][ T1237] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7452'. [ 1150.658958][ T1238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7453'. [ 1150.750528][ T1238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7453'. [ 1150.750550][ T1238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7453'. [ 1150.783490][ T1238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7453'. [ 1150.819899][ T1237] netlink: 'syz.1.7452': attribute type 4 has an invalid length. [ 1150.819922][ T1237] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.7452'. [ 1150.968421][ T1238] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1152.113042][ T1258] Bluetooth: hci0: unsupported parameter 5135 [ 1152.113064][ T1258] Bluetooth: hci0: unsupported parameter 8192 [ 1152.113077][ T1258] Bluetooth: hci0: unsupported parameter 5135 [ 1152.113088][ T1258] Bluetooth: hci0: unsupported parameter 8192 [ 1152.266707][ T1265] lo: entered allmulticast mode [ 1152.268530][ T1265] tunl0: entered allmulticast mode [ 1152.549912][ T1265] gre0: left promiscuous mode [ 1152.723416][ T1265] gretap0: left promiscuous mode [ 1152.723604][ T1265] gretap0: entered allmulticast mode [ 1152.823183][ T1265] erspan0: entered allmulticast mode [ 1152.903043][ T1275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7458'. [ 1153.107248][ T1265] ip_vti0: entered allmulticast mode [ 1153.277126][ T1265] ip6_vti0: entered allmulticast mode [ 1153.432427][ T1265] sit0: entered allmulticast mode [ 1153.516889][ T1281] ip_tables: iptables: counters copy to user failed while replacing table [ 1153.703100][ T1265] ip6tnl0: entered allmulticast mode [ 1153.842293][ T1286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7462'. [ 1153.973432][ T1265] ip6gre0: entered allmulticast mode [ 1154.101013][ T1265] ip6gretap0: entered allmulticast mode [ 1154.281434][ T1265] vcan0: entered allmulticast mode [ 1154.512419][ T1289] netlink: 'syz.4.7463': attribute type 21 has an invalid length. [ 1154.512442][ T1289] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7463'. [ 1154.548318][ T1265] bond0: entered allmulticast mode [ 1154.548339][ T1265] bond_slave_0: entered allmulticast mode [ 1154.548687][ T1265] bond_slave_1: entered allmulticast mode [ 1154.627602][ T1265] team0: entered allmulticast mode [ 1154.627625][ T1265] team_slave_0: entered allmulticast mode [ 1154.627966][ T1265] team_slave_1: entered allmulticast mode [ 1154.700979][ T1265] dummy0: entered allmulticast mode [ 1154.758057][ T1265] nlmon0: entered allmulticast mode [ 1154.892893][ T1265] batadv0: entered allmulticast mode [ 1155.084969][ T1265] vxcan0: entered allmulticast mode [ 1155.494316][ T1265] vxcan1: entered allmulticast mode [ 1155.705109][ T1293] netlink: 'syz.2.7464': attribute type 23 has an invalid length. [ 1155.841192][ T1265] veth0: entered allmulticast mode [ 1155.946051][ T1265] veth1: entered allmulticast mode [ 1156.050192][ T1265] wg0: entered allmulticast mode [ 1156.118349][ T1265] wg1: entered allmulticast mode [ 1156.211512][ T1265] wg2: entered allmulticast mode [ 1156.296333][ T1265] veth0_to_bridge: entered allmulticast mode [ 1156.436137][ T1265] bridge_slave_0: entered allmulticast mode [ 1156.648606][ T1265] veth1_to_bridge: entered allmulticast mode [ 1156.808218][ T1265] bridge_slave_1: entered allmulticast mode [ 1156.859533][ T1265] veth0_to_bond: entered allmulticast mode [ 1157.003036][ T1265] veth1_to_bond: entered allmulticast mode [ 1157.183125][ T1265] veth0_to_team: entered allmulticast mode [ 1157.327923][ T1265] veth1_to_team: entered allmulticast mode [ 1157.605525][ T1265] veth1_to_batadv: entered allmulticast mode [ 1157.694210][ T1265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1157.711199][ T1265] batadv_slave_1: entered allmulticast mode [ 1157.797980][ T1265] xfrm0: entered allmulticast mode [ 1157.877493][ T1265] veth0_to_hsr: entered allmulticast mode [ 1157.990953][ T1265] hsr_slave_0: entered allmulticast mode [ 1158.427162][ T1265] veth1_to_hsr: entered allmulticast mode [ 1158.645334][ T1265] hsr_slave_1: entered allmulticast mode [ 1158.770252][ T1265] hsr0: entered allmulticast mode [ 1158.969619][ T1265] veth1_macvtap: entered allmulticast mode [ 1159.103271][ T1265] veth0_macvtap: entered allmulticast mode [ 1159.286663][ T1265] macvtap0: entered allmulticast mode [ 1159.364092][ T1265] macsec0: entered allmulticast mode [ 1159.375792][T31558] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1159.447891][ T1265] geneve0: entered allmulticast mode [ 1159.579782][ T1265] mac80211_hwsim hwsim47 wlan0: left promiscuous mode [ 1159.579980][ T1265] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 1159.731478][ T1265] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode [ 1160.017760][ T1265] bond1: entered allmulticast mode [ 1160.103794][ T1265] bond2: entered allmulticast mode [ 1160.197933][ T1265] bond3: entered allmulticast mode [ 1160.255968][ T1265] bond4: entered allmulticast mode [ 1160.364301][ T1265] vlan2: left promiscuous mode [ 1160.364325][ T1265] geneve1: left promiscuous mode [ 1160.368488][ T1265] erspan1: entered allmulticast mode [ 1160.369439][ T1265] mac80211_hwsim hwsim51 wlan2: entered allmulticast mode [ 1160.375411][ T1265] ip6tnl1: entered allmulticast mode [ 1160.428932][ T1265] veth1_macvtap.1: entered allmulticast mode [ 1160.430295][ T1265] ifb2: entered allmulticast mode [ 1160.431300][ T1265] gtp0: entered allmulticast mode [ 1160.454942][ T1265] netdevsim netdevsim1 eth0: entered allmulticast mode [ 1160.456105][ T1265] netdevsim netdevsim1 eth1: entered allmulticast mode [ 1160.457302][ T1265] netdevsim netdevsim1 eth2: entered allmulticast mode [ 1160.458319][ T1265] netdevsim netdevsim1 eth3: entered allmulticast mode [ 1160.545790][ T1265] mac80211_hwsim hwsim47 t: entered allmulticast mode [ 1160.566973][ T1265] bond5: entered allmulticast mode [ 1160.566994][ T1265] ip6erspan0: entered allmulticast mode [ 1160.836715][ T1265] bond6: entered allmulticast mode [ 1160.837954][ T1265] bond7: entered allmulticast mode [ 1160.839025][ T1265] ip6tnl2: entered allmulticast mode [ 1160.840660][ T1265] gtp1: entered allmulticast mode [ 1160.952974][ T1265] bond8: entered allmulticast mode [ 1161.120927][ T1265] bond9: entered allmulticast mode [ 1161.205529][ T59] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.275437][ T59] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.372115][T31558] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.385505][ T6384] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.980563][ T1322] openvswitch: netlink: IP tunnel dst address not specified [ 1162.676010][ T1333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7473'. [ 1163.283583][ T1337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7474'. [ 1163.300903][ T1337] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1163.570360][ T1343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7476'. [ 1163.775869][ T1346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7478'. [ 1164.439938][ T1349] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1165.652277][ T1363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7479'. [ 1166.894481][ T1386] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7485'. [ 1167.095731][ T1377] syzkaller0: entered promiscuous mode [ 1167.096116][ T1377] syzkaller0: entered allmulticast mode [ 1167.614381][ T1404] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1167.766343][ T1402] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1167.903378][ T1404] netlink: NAT attribute has 4 unknown bytes [ 1167.903412][ T1404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1177.243921][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.381450][T32200] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1181.387013][T32200] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1181.392445][T32200] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1181.408230][T32200] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1181.409572][T32200] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1182.415429][ T4934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1182.420420][ T4934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1182.425231][ T4934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1182.451980][ T4934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1182.453306][ T4934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1183.482993][ T4934] Bluetooth: hci2: command tx timeout [ 1184.234409][T32200] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1184.249955][T32200] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1184.253729][T32200] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1184.344546][T32200] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1184.402909][T32200] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1184.516337][T32200] Bluetooth: hci6: command tx timeout [ 1185.554973][T32200] Bluetooth: hci2: command tx timeout [ 1186.465582][ T4934] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1186.472376][ T4934] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1186.474469][ T4934] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1186.482666][ T4934] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1186.483985][ T4934] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1186.525372][ T4934] Bluetooth: hci7: command tx timeout [ 1186.595194][T32200] Bluetooth: hci6: command tx timeout [ 1187.637953][T32200] Bluetooth: hci2: command tx timeout [ 1188.132986][ T4934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1188.334844][T24197] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1188.358345][T24197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1188.595294][T24197] Bluetooth: hci8: command tx timeout [ 1188.596201][T24197] Bluetooth: hci7: command tx timeout [ 1188.693735][ T4934] Bluetooth: hci6: command tx timeout [ 1188.866581][ T4934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1189.276018][ T4934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1189.796541][T32200] Bluetooth: hci2: command tx timeout [ 1190.714975][T32200] Bluetooth: hci7: command tx timeout [ 1190.715013][T32200] Bluetooth: hci8: command tx timeout [ 1190.814896][ T4934] Bluetooth: hci6: command tx timeout [ 1192.765079][T32200] Bluetooth: hci8: command tx timeout [ 1192.765113][T32200] Bluetooth: hci7: command tx timeout [ 1192.915271][ T4934] Bluetooth: hci3: command tx timeout [ 1194.855038][ T4934] Bluetooth: hci8: command tx timeout [ 1195.035079][ T4934] Bluetooth: hci3: command tx timeout [ 1197.254895][ T4934] Bluetooth: hci3: command tx timeout [ 1199.315145][ T4934] Bluetooth: hci3: command tx timeout [ 1202.384697][ C0] sched: DL replenish lagged too much [ 1224.308592][ T6389] veth0: left allmulticast mode [ 1224.308999][ T6389] veth0: left promiscuous mode [ 1224.309910][ T6389] bridge0: port 3(veth0) entered disabled state [ 1227.276983][ T6389] bridge_slave_1: left allmulticast mode [ 1227.277355][ T6389] bridge_slave_1: left promiscuous mode [ 1227.278251][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.146588][ T6389] bridge_slave_0: left allmulticast mode [ 1231.146958][ T6389] bridge_slave_0: left promiscuous mode [ 1231.147842][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.213512][ T6389] dvmrp0: left allmulticast mode [ 1238.678288][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.794948][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1243.795006][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1264.776439][T32200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1265.924435][T32200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1265.983013][T32200] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1266.097635][T32200] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1266.098941][T32200] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1267.357598][ T4934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1267.382269][ T4934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1267.383744][ T4934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1267.405035][ T4934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1267.406532][ T4934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1268.235164][T32200] Bluetooth: hci0: command tx timeout [ 1269.188192][ T4934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1269.192004][ T4934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1269.193378][ T4934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1269.196005][ T4934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1269.198255][ T4934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1269.738070][T24197] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1270.126970][T24197] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1270.175781][T24197] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1270.177636][T24197] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1270.178855][T24197] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1270.274871][T24197] Bluetooth: hci0: command tx timeout [ 1270.604882][T24197] Bluetooth: hci1: command tx timeout [ 1271.797058][T24197] Bluetooth: hci4: command tx timeout [ 1272.365606][T32200] Bluetooth: hci0: command tx timeout [ 1272.684907][T32200] Bluetooth: hci1: command tx timeout [ 1273.254222][T24197] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1273.684963][ T4934] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1273.715466][ T4934] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1273.717448][ T4934] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1273.974730][ T4934] Bluetooth: hci4: command tx timeout [ 1274.434784][ T4934] Bluetooth: hci0: command tx timeout [ 1274.461620][ T4934] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1274.755103][ T4934] Bluetooth: hci1: command tx timeout [ 1275.635129][ T4934] Bluetooth: hci5: command tx timeout [ 1276.035087][ T4934] Bluetooth: hci4: command tx timeout [ 1276.754776][ T4934] Bluetooth: hci9: command tx timeout [ 1276.935019][ T4934] Bluetooth: hci1: command tx timeout [ 1277.714955][ T4934] Bluetooth: hci5: command tx timeout [ 1278.135191][ T4934] Bluetooth: hci4: command tx timeout [ 1278.835115][ T4934] Bluetooth: hci9: command tx timeout [ 1279.804891][ T4934] Bluetooth: hci5: command tx timeout [ 1280.918370][ T4934] Bluetooth: hci9: command tx timeout [ 1281.884922][ T4934] Bluetooth: hci5: command tx timeout [ 1282.995101][ T4934] Bluetooth: hci9: command tx timeout [ 1300.118847][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.324540][ T1513] Bluetooth: hci2: command 0x0406 tx timeout [ 1307.324590][ T1513] Bluetooth: hci6: command 0x0406 tx timeout [ 1307.324641][ T1513] Bluetooth: hci7: command 0x0406 tx timeout [ 1309.115332][ T6389] bond2 (unregistering): (slave xfrm1): Releasing backup interface [ 1309.115360][ T6389] xfrm1 (unregistering): left promiscuous mode [ 1312.440626][T32200] Bluetooth: hci8: command 0x0406 tx timeout [ 1317.562246][ T4934] Bluetooth: hci3: command 0x0406 tx timeout [ 1322.235553][ T4934] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1322.633824][ T4934] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1322.645185][ T4934] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1322.647193][ T4934] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1322.648524][ T4934] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1325.504938][ T4934] Bluetooth: hci10: command tx timeout [ 1327.053932][ T6389] bond5 (unregistering): (slave gretap1): Releasing active interface [ 1327.565657][ T4934] Bluetooth: hci10: command tx timeout [ 1329.654814][ T4934] Bluetooth: hci10: command tx timeout [ 1331.722828][T32200] Bluetooth: hci10: command tx timeout [ 1332.176878][T24197] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1332.216000][T24197] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1332.335562][T24197] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1332.349408][T24197] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1332.699054][T24197] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1333.569868][T24197] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1333.835455][T16711] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1333.869247][T16711] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1334.616221][ T1514] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1334.621808][ T1514] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1334.623665][ T1514] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1334.626765][ T1514] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1334.629496][ T1514] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1334.756100][ T1514] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1334.821722][T32200] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1337.337776][ T4934] Bluetooth: hci13: command tx timeout [ 1337.338666][ T4934] Bluetooth: hci12: command tx timeout [ 1337.405373][ T1514] Bluetooth: hci11: command tx timeout [ 1338.401420][ T4934] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1338.455336][ T4934] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1338.459635][ T4934] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1338.475041][ T4934] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1338.745600][ T4934] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1339.394911][ T1514] Bluetooth: hci12: command tx timeout [ 1339.394945][ T1514] Bluetooth: hci13: command tx timeout [ 1339.555041][ T4934] Bluetooth: hci11: command tx timeout [ 1341.535050][ T1514] Bluetooth: hci13: command tx timeout [ 1341.535083][T24197] Bluetooth: hci12: command tx timeout [ 1341.645242][T24197] Bluetooth: hci11: command tx timeout [ 1343.637883][T24197] Bluetooth: hci13: command tx timeout [ 1343.637923][T24197] Bluetooth: hci12: command tx timeout [ 1343.774778][ T1514] Bluetooth: hci11: command tx timeout [ 1347.235151][ T1514] Bluetooth: hci14: command tx timeout [ 1349.429713][ T1514] Bluetooth: hci14: command tx timeout [ 1351.475275][ T1514] Bluetooth: hci14: command tx timeout [ 1353.555074][ T1514] Bluetooth: hci14: command tx timeout [ 1356.435595][ T31] INFO: task syz.3.7490:1412 blocked for more than 143 seconds. [ 1356.435621][ T31] Not tainted syzkaller #0 [ 1356.435632][ T31] Blocked by coredump. [ 1356.435638][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1356.435647][ T31] task:syz.3.7490 state:D stack:26600 pid:1412 tgid:1410 ppid:30126 task_flags:0x40054c flags:0x00080001 [ 1356.435700][ T31] Call Trace: [ 1356.435709][ T31] [ 1356.435723][ T31] __schedule+0x17db/0x58f0 [ 1356.436044][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1356.436070][ T31] ? stack_depot_save_flags+0x33/0x7f0 [ 1356.436180][ T31] ? __pfx___schedule+0x10/0x10 [ 1356.436211][ T31] ? schedule+0x90/0x2b0 [ 1356.436235][ T31] schedule+0x164/0x2b0 [ 1356.436259][ T31] schedule_preempt_disabled+0x13/0x30 [ 1356.436281][ T31] __mutex_lock+0x7c1/0x1550 [ 1356.436309][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1356.436336][ T31] ? tun_chr_close+0x3e/0x1c0 [ 1356.436417][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1356.436459][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1356.436479][ T31] tun_chr_close+0x3e/0x1c0 [ 1356.436499][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1356.436519][ T31] __fput+0x418/0xa50 [ 1356.436554][ T31] task_work_run+0x1d9/0x270 [ 1356.436590][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1356.436612][ T31] ? do_exit+0x735/0x2360 [ 1356.436635][ T31] ? kmem_cache_free+0x182/0x650 [ 1356.436656][ T31] ? put_net+0x191/0x260 [ 1356.436685][ T31] do_exit+0x73a/0x2360 [ 1356.436714][ T31] ? __pfx_do_exit+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1356.436734][ T31] ? cgroup1_freezing+0x20/0x350 [ 1356.436950][ T31] ? cgroup1_freezing+0x20/0x350 [ 1356.436993][ T31] do_group_exit+0x22d/0x2f0 [ 1356.437012][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1356.437066][ T31] get_signal+0x121b/0x12c0 [ 1356.437113][ T31] arch_do_signal_or_restart+0xbb/0x860 [ 1356.437158][ T31] ? __pfx_task_work_add+0x10/0x10 [ 1356.437180][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1356.437215][ T31] ? __fput_deferred+0x222/0x390 [ 1356.437248][ T31] exit_to_user_mode_loop+0x10e/0x770 [ 1356.437270][ T31] ? rcu_is_watching+0x16/0xb0 [ 1356.437297][ T31] do_syscall_64+0x328/0x520 [ 1356.437320][ T31] ? trace_irq_disable+0x3b/0x140 [ 1356.437341][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.437362][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1356.437386][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.437407][ T31] RIP: 0033:0x7f0bcc19e159 [ 1356.437425][ T31] RSP: 002b:00007f0bcd076028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1356.437447][ T31] RAX: 0000000000000000 RBX: 00007f0bcc425fa0 RCX: 00007f0bcc19e159 [ 1356.437461][ T31] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000003 [ 1356.437474][ T31] RBP: 00007f0bcc23506b R08: 0000000000000000 R09: 0000000000000000 [ 1356.437487][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1356.437499][ T31] R13: 00007f0bcc426038 R14: 00007f0bcc425fa0 R15: 00007ffe4d483ee8 [ 1356.437532][ T31] [ 1356.437584][ T31] [ 1356.437584][ T31] Showing all locks held in the system: [ 1356.437595][ T31] locks held by kworker/1:0/25: 3, on CPU#1: [ 1356.437674][ T31] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.438053][ T31] #1: ffffc900001f7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.438105][ T31] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 1356.438220][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 1356.438261][ T31] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1356.438329][ T31] locks held by kworker/u8:11/1126: 3, last CPU#1: [ 1356.438343][ T31] #0: ffff88803206b140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.438394][ T31] #1: ffffc900055a7c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.438447][ T31] #2: ffff888076ad81c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 1356.438548][ T31] locks held by getty/5372: 2, on CPU#0: [ 1356.438562][ T31] #0: ffff8880320fc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1356.438691][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1356.438744][ T31] locks held by kworker/1:6/5723: 2, last CPU#1: [ 1356.438946][ T31] #0: ffff88805a527940 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.439004][ T31] #1: ffffc90004adfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.439070][ T31] locks held by kworker/u8:14/6369: 3, last CPU#1: [ 1356.439084][ T31] #0: ffff888054797940 ((wq_completion)krds_cp_wq#26/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.439135][ T31] #1: ffffc90005dc7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.439186][ T31] #2: ffff888055eb5880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1356.439285][ T31] locks held by kworker/u8:18/6374: 4, last CPU#0: [ 1356.439300][ T31] #0: ffff888035b44940 ((wq_completion)krds_cp_wq#26/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.439351][ T31] #1: ffffc900072cfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.439403][ T31] #2: ffff888055eb6480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1356.439455][ T31] #3: ffff888054f4b860 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1356.439577][ T31] locks held by kworker/u8:22/6383: 3, last CPU#0: [ 1356.439592][ T31] #0: ffff888054796940 ((wq_completion)krds_cp_wq#26/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.439642][ T31] #1: ffffc90007387c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.439693][ T31] #2: ffff888055eb5280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1356.439745][ T31] locks held by kworker/u8:23/6384: 3, last CPU#1: [ 1356.439945][ T31] #0: ffff8880778da940 ((wq_completion)krds_cp_wq#26/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.440003][ T31] #1: ffffc90007367c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.440054][ T31] #2: ffff888055eb6780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1356.440107][ T31] locks held by kworker/u8:27/6389: 5, last CPU#0: [ 1356.440121][ T31] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.440171][ T31] #1: ffffc90007437c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.440222][ T31] #2: ffffffff90244b88 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1356.440298][ T31] #3: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1356.440346][ T31] #4: ffffffff8ed62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1356.440398][ T31] locks held by kworker/u8:30/6392: 3, last CPU#0: [ 1356.440412][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.440463][ T31] #1: ffffc90007467c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.440516][ T31] #2: ffff88807bebb258 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1356.440654][ T31] locks held by kworker/u8:32/6395: 3, last CPU#0: [ 1356.440669][ T31] #0: ffff88804b4d6140 ((wq_completion)krds_cp_wq#26/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.440720][ T31] #1: ffffc900074a7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.440955][ T31] #2: ffff888055eb6180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1356.441013][ T31] locks held by kworker/u8:36/6403: 3, last CPU#0: [ 1356.441028][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.441078][ T31] #1: ffffc9000773fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.441130][ T31] #2: ffff88804a700258 (&devlink->lock_key#13){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1356.441189][ T31] locks held by kworker/u8:39/6406: 4, last CPU#1: [ 1356.441203][ T31] #0: ffff88804b4d2140 ((wq_completion)krds_cp_wq#26/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.441253][ T31] #1: ffffc900077bfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.441303][ T31] #2: ffff888055eb5e80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1356.441355][ T31] #3: ffff888054f48260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __hrtimer_rearm_deferred+0x99/0x4b0 [ 1356.441410][ T31] locks held by kworker/u8:42/6410: 3, last CPU#0: [ 1356.441424][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.441474][ T31] #1: ffffc900077ffc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.441525][ T31] #2: ffff888026a29258 (&devlink->lock_key#16){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1356.441584][ T31] locks held by kworker/u8:44/6412: 3, on CPU#0: [ 1356.441597][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.441648][ T31] #1: ffffc90007bf7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.441698][ T31] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1356.441992][ T31] locks held by kworker/u8:48/6416: 4, last CPU#0: [ 1356.442007][ T31] #0: ffff888054797140 ((wq_completion)krds_cp_wq#26/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.442058][ T31] #1: ffffc90007c37c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.442109][ T31] #2: ffff888055eb5580 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1356.442161][ T31] #3: ffff8880772f8fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1356.442226][ T31] locks held by syz-executor/28927: 1, on CPU#0: [ 1356.442240][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1356.442292][ T31] locks held by kworker/u8:0/31554: 3, on CPU#0: [ 1356.442305][ T31] #0: ffff88803173b140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.442357][ T31] #1: ffffc90004a2fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.442408][ T31] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1356.442483][ T31] locks held by kworker/u8:3/31557: 3, last CPU#0: [ 1356.442498][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.442548][ T31] #1: ffffc90004a3fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.442600][ T31] #2: ffff8880329a7258 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1356.442658][ T31] locks held by kworker/u8:5/31558: 4, last CPU#1: [ 1356.442672][ T31] #0: ffff88804b4d5940 ((wq_completion)krds_cp_wq#26/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.442723][ T31] #1: ffffc900035ffc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.442969][ T31] #2: ffff888055eb5b80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1356.443022][ T31] #3: ffff888054f4d360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1356.443074][ T31] locks held by kworker/u8:6/31560: 2, last CPU#0: [ 1356.443088][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.443139][ T31] #1: ffffc90004fe7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.443191][ T31] locks held by kworker/0:49/31935: 3, on CPU#0: [ 1356.443204][ T31] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.443255][ T31] #1: ffffc90007357c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1356.443306][ T31] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1356.443407][ T31] locks held by syz.3.7490/1412: 1, on CPU#1: [ 1356.443421][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1356.443467][ T31] locks held by syz-executor/1421: 1, on CPU#0: [ 1356.443480][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1356.443529][ T31] locks held by syz-executor/1427: 1, on CPU#1: [ 1356.443543][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1356.443591][ T31] locks held by syz-executor/1433: 1, on CPU#1: [ 1356.443604][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1356.443696][ T31] locks held by syz-executor/1446: 1, on CPU#1: [ 1356.443709][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1356.443969][ T31] locks held by syz-executor/1452: 1, on CPU#1: [ 1356.443983][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1356.444031][ T31] locks held by syz-executor/1481: 1, on CPU#1: [ 1356.444045][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1356.444098][ T31] locks held by syz-executor/1485: 1, on CPU#1: [ 1356.444112][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1356.444164][ T31] locks held by syz-executor/1490: 1, on CPU#1: [ 1356.444179][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1356.444232][ T31] locks held by syz-executor/1495: 1, on CPU#1: [ 1356.444246][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1356.444299][ T31] locks held by syz-executor/1501: 1, on CPU#0: [ 1356.444313][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1356.444367][ T31] locks held by syz-executor/1522: 1, on CPU#0: [ 1356.444381][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1356.444434][ T31] locks held by syz-executor/1528: 1, on CPU#0: [ 1356.444448][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1356.444501][ T31] locks held by syz-executor/1530: 1, on CPU#1: [ 1356.444514][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1356.444566][ T31] locks held by syz-executor/1537: 1, on CPU#1: [ 1356.444579][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1356.444632][ T31] locks held by syz-executor/1544: 1, on CPU#0: [ 1356.444645][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1358.566066][ T31] [ 1358.566073][ T31] ============================================= [ 1358.566073][ T31] [ 1358.566098][ T31] NMI backtrace for cpu 1 [ 1358.566112][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1358.566133][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1358.566146][ T31] Call Trace: [ 1358.566155][ T31] [ 1358.566165][ T31] dump_stack_lvl+0xe8/0x150 [ 1358.566195][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1358.566325][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1358.566367][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1358.566400][ T31] sys_info+0x135/0x170 [ 1358.566426][ T31] watchdog+0xfd7/0x1030 [ 1358.566452][ T31] ? watchdog+0x1c7/0x1030 [ 1358.566478][ T31] kthread+0x38b/0x480 [ 1358.566498][ T31] ? __pfx_watchdog+0x10/0x10 [ 1358.566515][ T31] ? __pfx_kthread+0x10/0x10 [ 1358.566535][ T31] ret_from_fork+0x514/0xb70 [ 1358.566556][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1358.566575][ T31] ? __switch_to+0xc89/0x1420 [ 1358.566602][ T31] ? __pfx_kthread+0x10/0x10 [ 1358.566622][ T31] ret_from_fork_asm+0x1a/0x30 [ 1358.566665][ T31] [ 1358.566672][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1358.566704][ C0] NMI backtrace for cpu 0 [ 1358.566717][ C0] CPU: 0 UID: 0 PID: 6395 Comm: kworker/u8:32 Not tainted syzkaller #0 PREEMPT(full) [ 1358.566739][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1358.566751][ C0] Workqueue: krds_cp_wq#26/2 rds_connect_worker [ 1358.566810][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 1358.566837][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 a6 ba a6 03 66 0f 1f 44 00 [ 1358.566853][ C0] RSP: 0018:ffffc90000007e50 EFLAGS: 00000046 [ 1358.566869][ C0] RAX: 000000000000000f RBX: ffff8880b8623c80 RCX: 0000000000000838 [ 1358.566882][ C0] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000838 [ 1358.566894][ C0] RBP: ffffc90000007f08 R08: 0000000000000100 R09: 0000000000000001 [ 1358.566906][ C0] R10: 0000000000000003 R11: ffffffff81754510 R12: ffffffff81754510 [ 1358.566919][ C0] R13: 1ffff110170c4799 R14: 0000000000000000 R15: ffff8880b8623ccc [ 1358.566933][ C0] FS: 0000000000000000(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 1358.566948][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1358.566960][ C0] CR2: 00007f9840557e20 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 1358.566977][ C0] Call Trace: [ 1358.566984][ C0] [ 1358.566991][ C0] lapic_next_event+0x11/0x20 [ 1358.567010][ C0] clockevents_program_event+0x44e/0x630 [ 1358.567038][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1358.567066][ C0] ? tick_program_event+0x8f/0x120 [ 1358.567086][ C0] hrtimer_run_softirq+0x255/0x2e0 [ 1358.567116][ C0] handle_softirqs+0x226/0x860 [ 1358.567142][ C0] ? do_softirq+0x77/0xd0 [ 1358.567167][ C0] ? __inet6_bind+0x301/0xf30 [ 1358.567194][ C0] do_softirq+0x77/0xd0 [ 1358.567216][ C0] [ 1358.567222][ C0] [ 1358.567229][ C0] __local_bh_enable_ip+0x100/0x140 [ 1358.567253][ C0] __inet6_bind+0x301/0xf30 [ 1358.567292][ C0] kernel_bind+0x13e/0x1c0 [ 1358.567321][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 1358.567355][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 1358.567383][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 1358.567415][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1358.567445][ C0] ? lock_acquire+0x115/0x350 [ 1358.567469][ C0] rds_connect_worker+0x1d8/0x290 [ 1358.567490][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1358.567515][ C0] process_scheduled_works+0xc3d/0x1630 [ 1358.567555][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1358.567583][ C0] ? assign_work+0x3cf/0x5d0 [ 1358.567609][ C0] worker_thread+0xa47/0xfb0 [ 1358.567648][ C0] kthread+0x38b/0x480 [ 1358.567665][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1358.567689][ C0] ? __pfx_kthread+0x10/0x10 [ 1358.567708][ C0] ret_from_fork+0x514/0xb70 [ 1358.567726][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1358.567743][ C0] ? __switch_to+0xc89/0x1420 [ 1358.567769][ C0] ? __pfx_kthread+0x10/0x10 [ 1358.567788][ C0] ret_from_fork_asm+0x1a/0x30 [ 1358.567824][ C0] [ 1358.568713][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1359.920966][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1359.930077][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1359.940139][ T31] Call Trace: [ 1359.943417][ T31] [ 1359.946347][ T31] vpanic+0x56d/0xa60 [ 1359.950345][ T31] ? __pfx_vpanic+0x10/0x10 [ 1359.954854][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 1359.960429][ T31] panic+0xc5/0xd0 [ 1359.964157][ T31] ? __pfx_panic+0x10/0x10 [ 1359.968581][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 1359.973610][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1359.979776][ T31] watchdog+0x1030/0x1030 [ 1359.984124][ T31] ? watchdog+0x1c7/0x1030 [ 1359.988557][ T31] kthread+0x38b/0x480 [ 1359.992644][ T31] ? __pfx_watchdog+0x10/0x10 [ 1359.997330][ T31] ? __pfx_kthread+0x10/0x10 [ 1360.001934][ T31] ret_from_fork+0x514/0xb70 [ 1360.006531][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1360.011651][ T31] ? __switch_to+0xc89/0x1420 [ 1360.016350][ T31] ? __pfx_kthread+0x10/0x10 [ 1360.020949][ T31] ret_from_fork_asm+0x1a/0x30 [ 1360.025740][ T31] [ 1360.029080][ T31] Kernel Offset: disabled [ 1360.033400][ T31] Rebooting in 86400 seconds..