last executing test programs: 3.818874014s ago: executing program 1 (id=1999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0xec0726dc87ac63bb, r4, 0x1, 0x0, 0x3, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000180)="392b5766e5", 0x5}], 0x1) close(r0) setsockopt$sock_int(r5, 0x1, 0x7, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000001, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, &(0x7f0000000000)={0x1, @default, @bpq0, 0x4, 'syz1\x00', @bcast, 0x5, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r10) 2.878452116s ago: executing program 3 (id=2017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x25, 0x5, 0xb4) (async) r1 = socket(0x25, 0x5, 0xb4) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000180)={{0x0}, 0x0, 0x71}, 0x20) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f0000000100)="277cb5f63f410e2f948f95976f959805ee398000319158ed54879d5f477389c3036f8c65316f057631948f4443940fcf0861d54cf7d9b900f80f382884964d1cbe540bec21d39ef663464431e811dae81a07e32c998a1e5b2f939197491706220b5f97906ac299bc14b810c4e3bf8d990349029a90a840e7bad1be55663b74533f0a450e743369430652a2191c20c2e45c76e655d579676bdd4396b86a78b1e9e8db7282f52cc836843a1945c88e41e0926428a10703eabe5fe1d754e516d7c64487a1b1214806152f1e25a83c092b3b375109d84b857b9be628281e0fcdbf") (async) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f0000000100)="277cb5f63f410e2f948f95976f959805ee398000319158ed54879d5f477389c3036f8c65316f057631948f4443940fcf0861d54cf7d9b900f80f382884964d1cbe540bec21d39ef663464431e811dae81a07e32c998a1e5b2f939197491706220b5f97906ac299bc14b810c4e3bf8d990349029a90a840e7bad1be55663b74533f0a450e743369430652a2191c20c2e45c76e655d579676bdd4396b86a78b1e9e8db7282f52cc836843a1945c88e41e0926428a10703eabe5fe1d754e516d7c64487a1b1214806152f1e25a83c092b3b375109d84b857b9be628281e0fcdbf") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r7, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x40) (async) connect$rose(r7, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x40) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[@ANYBLOB="28000300120097023df970000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001f0055000000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="b3ffffff0a0601020000000000000000447dafa8"], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x10) (async) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="b3ffffff0a0601020000000000000000447dafa8"], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0xfffffffe, 0x0, @mcast1, @mcast1, 0x0, 0x0, 0x0, 0x1006}}) connect$bt_rfcomm(r1, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa) 2.871152442s ago: executing program 1 (id=2018): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x8ffe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xfde}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006c625f686173685f73746174730000000000007cd6df1dbb1a48fe0000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newnexthop={0x3c, 0x68, 0x1, 0x70bd26, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x3, 0xb}]}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x8ffe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xfde}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000fc0)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006c625f686173685f73746174730000000000007cd6df1dbb1a48fe0000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newnexthop={0x3c, 0x68, 0x1, 0x70bd26, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x3, 0xb}]}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) 2.703835957s ago: executing program 3 (id=2020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='wlan1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x8840) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x8000}, 0x4) sendto$packet(r6, &(0x7f0000000100)="2afa6536f7", 0x5, 0x4000810, &(0x7f0000000080)={0x11, 0x15, r5, 0x1, 0x7, 0x6, @broadcast}, 0x14) poll(&(0x7f00000044c0)=[{r2, 0x209}], 0x1, 0x8000) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x8, 0x7, 0x62, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast2, 0x40, 0x8000, 0x6, 0x2}}) sendmsg$kcm(r8, &(0x7f0000000800)={&(0x7f0000000280)=@ll={0x11, 0x19, r9, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000300)="e337fd45b540bd006491757844b6e1fb6651db2571790542c730ff5f65e01771914dfb871cdf18754f6bfaab1ce0a56d3a7f7946aa72f47723a85cca189851b6cdaa28ea8890dd6784de5e9d970dbd7e221fd2a73e0a27f20e4267dc309b2c9af1b012a15464e73ea87c62525cccab24d6174df05d1c501f4403b4664f65ae330f8a0abcb576467e85a553d9e37fb61878ffcdd647a4ff26ecd04248bbf7dc312efe023b73a593f1f78c42dec9bd572675f597945c4a00", 0xb7}, {&(0x7f00000003c0)="fe24a3c2121f776f85b74d98e8041824892e1e66c4495e407df06e20a55eb68895aa14b765079f0530eab5dc68d302412d21db96603ad7e144dca83b57647eef08ed39be43d0d250459cf6ec8adfdaa77ca16cfaaa3236033000b79f106100"/107, 0x6b}, {&(0x7f0000000440)="24b15db2b36c04b8b289885da48fe8d5f43f63b514c405f4ee0a97dc4a889bf50d4f99407ebc4f42958f7c6a112c9540759ba4d022af0c5ea3e79ee57fa0d62acd5a4555e6e2e71390cc813614503fc3a139cab4e39649c308d1b5b7f124d247a3727a11c0a7cfc4b2ee6d6516e8278048b048b4e5a665f283a661087f8d7044cb2d489e7cc9a345fadd1f472cbcf87e932ff3bff8f6a2438ea0fb969102dbe754c536c7a50f48f3bf20bd6c", 0xac}, {&(0x7f0000000500)="0b9e2160477f64a7ed63ec3b7653a1aa16c69f8112", 0x15}, {&(0x7f0000000540)="d7f2666c8a5802a263e66f69554ae7c1fd1b657c7fa61d15441978e304d4a5169c0dee01fbd2927b89c06c3479f1cda69cd08566da5d76d4774b8a39df6e9d64aae8a84a211dfa746a", 0x49}, {&(0x7f0000000840)="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", 0xfd}], 0x6, &(0x7f0000000680)=[{0x38, 0x29, 0x4, "129027b5ede05ab21e165d3ac95917ebc26707292cbf256d5774340f17e9614e8aa0aabe4d56ab"}, {0x90, 0x3a, 0xb, "a46d8a126376757aed9d76fe4330ea8f04270ee64cf364e314a37809468ab462530d9525ce18f53d37aaefc19c90a437261091451cc5a2c619a5eeecf3ad52fb2c587a9c160bbe7c03492b7a21415a93914374392afe1ac06562b911bef7a0d00297e2c9ce3afc250921656fc5cca83554defcac1e073ee87211"}, {0x98, 0x101, 0x6, "c7e6c48e0c92a64f94bb9694ad499a53dfb51704dd4d75d5fa02d48affe1ef3118d1d0745fd0158b2afb391e7ee98722ddf4146c4f793292541230016f7ed39d352e712d4c6320777c2c8957b77c616c9ca47d3c7d2c652497cf8e3194af971391b64f1614d9d9bb45a46f8bb887de7291711027be97758df1365f94ea21036a6f5f44c0d4d42b"}], 0x160}, 0x4011) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000001140)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x84, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb92c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}]}]}, 0x84}}, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f00000005c0), 0x2, 0x0) 2.162959323s ago: executing program 2 (id=2025): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0x100, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0x7, 0x9}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000080)=""/128, 0x80}], 0x2}, 0x101}], 0x1, 0x60, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 1.09986656s ago: executing program 1 (id=2026): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x48081}, 0x4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0xf4065dc93ee644ea}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008006}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000203010300000000000000000000000009000200000000000000000008000100010000002f56b5f433e73592cc526805de39b98a8a917c46c712acdf35191e0fc5d46f0874616fac43ebc474e06b1ba4ba109f31cada54fe6a45e49ab59c073188bd1d679ad658e6613419c029a49dc6106d9ec238a2ff43818b8279e5917e10ae7044d5ce6756bca86734dead01611731b3826a11609371cfcbe62df2bb825260e986e8fab20aeddc326891373b3148"], 0x28}}, 0x0) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast1=0xac14140a}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback}, 0x1c) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000280)={0x2, {{0xa, 0x4e24, 0x4, @remote, 0x7ff}}}, 0x88) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xfffffffffffffefb}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000200ffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110a9000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0xffffffffffffff96) socketpair(0x15, 0x1, 0x80000000, &(0x7f0000000400)) 1.099091598s ago: executing program 2 (id=2027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x8040) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) (async) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000180000000002"], 0x1c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000190000000100800e000f01"}}}]}, 0x48}}, 0x0) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0x16, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2bb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8015}, 0x1) 1.096715133s ago: executing program 4 (id=2029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x310, 0x0, 0x0, 0x801, 0x70bd25, 0x25dfdbfb, {0x8, 0x0, 0x9}, [@generic="ca78a9e5beadbb5bd5cf8ebae74c35ea8bfa12101bc3e7664da0c2d3d73bcdd4b9336684b44ff811f2d80248818eb1a8820324a300b8eb4938081a295786fd8cf68f0e429e8e36583ea8041b37b529a5433008c8c9adf0e65a53002b94ae09bc705610a8b4f83f988d00c4cd9fc955940513b01652fdfc908c38e8c5c0d11db7320722bcdda0fa8f146b28a3dd257c479879c4f8488bed3e429b09aa1c", @nested={0x25c, 0xa9, 0x0, 0x1, [@generic="eff6b8487a181eac14f38e15bfe3e0ac8d961d32c4f2edd08ecaa0bfc001127331d6ca110baa30f906b976256d5505d7f4dd27520da70f1686f4698d66921f60fe9f3a4865e8d438104c83783db03e264c1b68dba68aedcdd5c3645d9630c0a3fdee055e62c7b2a87e2eedaf0f3cf710a8c868394ce70cde0958f04237fed6b4c57e45bd76bba77b23de1a4341635a2c6ded6d163dbdf97fd8e7ae2024e7a796f1df4d59ca884a5557f0e9c5f2a164cfa075b96d666b358af9caa38bd2788d1256c30aed601ed308686689fce198b0a685e6b91031e33eb5b90e6daaa247012f7852aacc1192c07c0ab41bf4", @typed={0x14, 0x100, 0x0, 0x0, @ipv6=@local}, @generic="d46a8640c7ca62a17397763c9341b289b91f9675b20e7d211a998f7148626f2edfc4a1232fa99305999ade156476e61729a493aa4339ed1ea22f8337734819852e6aae6fa094f8528986e9cc68e1a663425c36b3e77d17ad7d9c0a0a93425717533f09a141ab2d706aa81915977c39d6029fbd2bbbeabde160003c5904993dbaba8e7dde87ce88404d1fa7ef7a4c31c84cbf4b1172b282a8f3fcc7989d55ee41", @generic="48c0d02bf4a9d7be4d09a2503fd1b7d03be184983ff79400f43a159ea521c871f28a87c1ee58f266479a158e8af11f1950e62dffd7c119523a8d1db6810ed470b2ee07756bb9b3e76359b9c759f3da501b59cfd9a8580822cfbea842514d4ed79f7f8efeeaec3591f269644b3d862fbe876b5c796c5ee3ee86e4483af12146205b4251d7d2b61fad40889b5f6cbf6cfd89e8ef7bb1bccba200d24216e1a63d10bb4d205e69653aa9472fbcd407c37105b71abcf2a36f4d13"]}]}, 0x310}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c2"], 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) socket$alg(0x26, 0x5, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0xc38, @private1, 0x6}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000980)=[{{&(0x7f0000000500)={0xa, 0x4e24, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000540)="29acd27f97a494116effe770915bce29e6e2fa06aa3c7f2228c5ade119d819bbf3c10dd664d16f9f8b57c689c8d3decf2ceb759369947618a760f7e56800dea05c1db229b233c04a08d9ec419a7042fba629a330a35e7ac0a76e35f3b11e771438fc64", 0x63}, {&(0x7f00000005c0)="8abd0df01db61441144a7649d98b32ec57ed6d441b8ad1eca541fc6209b6f4d5664ef64502b3c09c75db93bc8d447d48adb5ed37271040a268040e6751ca4fdb44e47c5da97149b1cd827d5e653ae58aa6338f738cb15470fb3427c0e02b550e91826c5037db9c561a41cc64768d416ddd1ec74f669e6bbf5628f0a49ff90fc86d8b2b00ed14be2f0505b301aa1cd1299d108a471bf4912006c6c85a78849bd2c81a3c39206bfb4609b0919a177a99ac3c104b4402862ebc17b8e7c743fb42", 0xbf}, {&(0x7f0000000680)="60e37f3c0900000044330f2d7d544bbbd154a485d5d94591", 0x18}, {&(0x7f00000006c0)="725a0132cb07e9c6989eb1c1afcc51c78ae8003c629b47aaa311d652c694e621373197988f5e4c8ffd64a4a8ffd6275457bd685a9f4b98e23ccf6428424a4e0bf2dd6c7974a3ef52effb84dbacb7671bbd9d582e1f164f39dd04dcf545b43c1495674d0656f73f8475e7df21f602f953865c4144a930bae4d930d11d29fbe9bd49286b6eef6e8195d3d2b0b34c0cf97600d996962ce2d80fa4d8253f0abc7d21423042401f35a8f6a3ae270c77875a0ad9a256f72a6033c45e1a7649c1f85670f830c30687e31c05173eb7c9a68d5a2014cdbbcfea7253345456937e698e", 0xde}, {&(0x7f00000007c0)="f2418c744c451c179a1cbe9db5b153d4f48516bcd80af33fa1d0b20e08d91b6b62ac382f956aaf11a51e8af28c3a66a7a732e6549833db6b60a314eb5c9ed05e2e7c12aa6182b73cffdf0038a98fedcc73b0bac1540c2ea8d57e5f9bc0e4fdb9282d07e6f71121aa10ae34542ebfe1", 0x6f}, {&(0x7f0000000840)="8521d59bd4bbf0da2437ca6a91cdf05da236f90291d44e46d79c6f576db7f3e10daec42c3336945ef45af367507446e6fe519a4d70f91b441c9373d574ef357f59dc33890c67c077f2b0ae16af6bd53fe48c72", 0x53}], 0x6, &(0x7f0000000940)=[@tclass={{0x14, 0x29, 0x43, 0x7}}], 0x18}}], 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x100000) close(r2) 1.093123195s ago: executing program 3 (id=2030): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @mcast2, 0x7f}, 0x1c) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f0000000040)) 988.084103ms ago: executing program 0 (id=2031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)={0x1000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x14, 0x0, &(0x7f0000000380)) close(0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000000)=0xfffff93a) 981.223646ms ago: executing program 4 (id=2032): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000080)="580000001400add527323b472545b45602117f9affff81000000ff0000f03ac71002000000fffffffffeffffffffe7ee000000000000000002000000000000000000006587f7000000000000000000000000008000000000", 0x58}], 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x144, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1fc}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0xe, [0x4, 0x4, 0x7, 0xff, 0xffff, 0x5], 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000140)=""/14}, &(0x7f0000000240)=0x78) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="3b000200010001", 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000580)={&(0x7f0000000300), 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r10, @ANYBLOB="300028bd7000fbdbdf251a0000000400cc004800228044000080080007000900000008000500000000000800070005000000080005000900000008000700040000000800030001000000080001007f0000000800060007000000080001003e0000000700000261610000480122803c00008008000400020000000800020080000000080006000700000008000300ff0700000800070007000000080007000000010008000700090000002c00008008000500680b000008000600ff07000008000500400000000800010003000000080007000004000044000080080005000600000008000600030000000800010006000000080003000e00000008000100000000000800050072a10000080005000800000008000600080000001c00008008000600e70a697fced49b336438385c63624500000008000100800000000800020005000000240000800800030007000000080005000900000008000200060000000800070009000000240000800800070001000080080003009a00000008000200060000000800050004000000340000800800070000800000080005002b7800000800050007000000080003000800000008000400000000000800040009000000"], 0x1b8}}, 0x50) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r11, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r13, 0x84, 0x8, &(0x7f00000002c0)=0x2, 0x4) 883.6762ms ago: executing program 2 (id=2033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000330603000000fdffffffffffffff0000000000000000000000006401010100000000000000000000000000000000000000000200806000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026bd7000000000000a"], 0x138}}, 0x4000000) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5f}}}}}, 0x20}}, 0x4000000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240100003e0007012dbd7000fcdbdf25047c0000040000000c01018006000600800a000008001100", @ANYRES32=r4, @ANYBLOB="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"], 0x124}}, 0x0) r5 = accept4(r0, &(0x7f00000000c0), &(0x7f0000000040)=0x80, 0x80400) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x1, 0x10, 0xb, 0xff, {{0xd, 0x4, 0x2, 0x9, 0x34, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @broadcast, {[@noop, @timestamp={0x44, 0x1c, 0x1e, 0x0, 0x7, [0xab90, 0x8, 0x9a, 0xd5, 0x83ae, 0x9]}, @end]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=@getchain={0x34, 0x66, 0x0, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x5, 0xffff}, {0xfff3, 0x3}, {0x1, 0xc}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x113}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x880) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r7, 0x0, 0x29, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb81003eb752dd"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000330603000000fdffffffffffffff0000000000000000000000006401010100000000000000000000000000000000000000000200806000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026bd7000000000000a"], 0x138}}, 0x4000000) (async) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5f}}}}}, 0x20}}, 0x4000000) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240100003e0007012dbd7000fcdbdf25047c0000040000000c01018006000600800a000008001100", @ANYRES32=r4, @ANYBLOB="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"], 0x124}}, 0x0) (async) accept4(r0, &(0x7f00000000c0), &(0x7f0000000040)=0x80, 0x80400) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x1, 0x10, 0xb, 0xff, {{0xd, 0x4, 0x2, 0x9, 0x34, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @broadcast, {[@noop, @timestamp={0x44, 0x1c, 0x1e, 0x0, 0x7, [0xab90, 0x8, 0x9a, 0xd5, 0x83ae, 0x9]}, @end]}}}}}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=@getchain={0x34, 0x66, 0x0, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x5, 0xffff}, {0xfff3, 0x3}, {0x1, 0xc}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x113}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x880) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$inet_msfilter(r7, 0x0, 0x29, 0x0, 0x0) (async) syz_emit_ethernet(0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb81003eb752dd"], 0x0) (async) 852.071935ms ago: executing program 0 (id=2034): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@restrict, @fwd={0x2, 0x0, 0x0, 0x12}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x48}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x1418, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x13e8, 0x3, 0x0, 0x1, [{0x5e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb7, 0x6, 0x1, 0x0, "fbc5d6af4341481c63f6289112847237c4fc60bf49d2592ded84610f4bca0b90d952b13c1ff1877d6809973e192310800732d22175cc47268fff3bbb1620878462d6ecf6fb1a61abfbbd56dceb52f8d61e2d6eead9ee74e1f8c640efb74957d6b5a78170fdc622548eb06c2a30a9e000a62a1db8ea3f6c2ed9cdce75c212dd80b62e3b8e99e6d1e747ae689166fa20784faa9e53bbfc765221b17d4884f7d3299de132a2acf818844137903624e1f30eed2c94"}, @NFTA_SET_ELEM_DATA={0x20, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1b, 0x1, "c2ce961aa0d9e92dee05c48c74c3458ed71dbe27effc32"}]}, @NFTA_SET_ELEM_DATA={0x160, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6e, 0x1, "2080293afcc4b3776c5e235897b8ef0e9209c9b64c0688c7b382ed89fa38e5175ba42450f7fdea65f017d7eccb5e69cd89e6157f230c306fa3e09d6c0ff2d009e1823ba04315596c1f64bdf499bc023adc731d1a7b4172844be3ecd1aa02141f653d8f99ce4712a9302a"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFTA_DATA_VALUE={0x2a, 0x1, "8f6db13cfc2a99e76c98db78eec08eb1d81ac457cb3cbe29e2061fd1d3ee2105670cd8144f14"}, @NFTA_DATA_VALUE={0x6b, 0x1, "f5211108fe4470357a35ee47b72282170cad32f5fe05248ee662f69fab233de0e6e333ccd2e49be9d457cc4e0e5be34ed26d0a418f3c705c04ca748a6f1408dabf83f0db8892fbe9f147e52ee831094e64e9631273f680537523dcc630c34acbb9e1ce627503ea"}]}, @NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "d5c3ced257888a6844fd012b720f3cba4fac6867e1e25800ea53a6709d178de9690527536a7f3ab77d0923dfd626e647d413580d3a76dfb48a794621cf059c4d37"}]}, @NFTA_SET_ELEM_KEY_END={0x1d0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc6, 0x1, "a054880455866f616bcfc9cd4497cca111e35fe81a29dc80b30cb3476d11bea659279c8c2d52ff7ee29235c26b899eb5efb22d9641feaf9f3d19e57ca9e95a8ce72077fd0cd9f0a77807ed1de342aa30f8dc1d235c9fa2e515587d299d80adb143fb66b64b85b0fb7c76b097df3f24a2f6677ec815d679cafc1f2a0be80372f04ef23bfe012c9a61fd7f0b32e13758062fa9b3a9b1dee04c1e70ad37d5bd4ba758f94b97302a6f9e51a0176273ba3051437305b6a582dae1620e2566b3b0a42c2c55"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xb3, 0x1, "b0c84aac0030ed564c672f9f8c4d8aca3c4a4cee333576b5cd2d4b3f5773612c57c875acc8a49bf09b6832496f12bc9fbec24d1378ea38c4fe44314c3ae235d2a948792d0db9a2dcf7a0fe99e14610c9d364cc092e0a0b5005c2f1039e9f6fb3fcf1e1fe30a2b9cedcdbf3613779a1497e4cd7001be5270c7aeef03d22c85be935ca0992c122e15d03693972764c94d81aff52b46e25cac4b1af23518299a59c7f8ce0cebf64a77d8c2e30942c3702"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xebe1}, @NFTA_SET_ELEM_KEY={0x168, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3b, 0x1, "8f1a500e3fcd0d437101b4524785297ebc9cf9c36890f51fa92ac810d9115dcf1bf2958dd1316a4640f22b0e09b03f6efc2ef6db5e7dad"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xb3, 0x1, "eb6f03f4756cbf4fc6461804e41c1915376f968438eb683f90e9fdf10a1a8295bef86266026a68ab145461a006ddec8df3267ae142a40f52e6dcc5ba983a25cd2ee720dc5ad5f46d3c0dd21d02c6b2487b690b298d2e57084405d38f57f1b23920ed37f410b17a6369771ac5304a908b482764549538aaffc3421d2c3e23c9261bf2023d29ad0bdccee24d25c2d5d6b0f26c0efb426394f6414ef527b35a7bb6fdc4388f39977bea8cf0be68176ec6"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x479c9c337af09c0b}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x35c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x358, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "b00dfacf1f307bb0eb0c79ad3c76c8108cdaee4d4dbd64aa5515178e358df1f88a2d3cdce6ce5f549cdc4de9555733d819b2bf34fe2b6ec683f4f8cef59f6126ad264d2f2425ddbafdbc6c5aff39642cf0df7619ffb9747c5c14012d7102afe30fc2a7f0101d859391afea7b52410e85238d2863516bae43c947e0fa54c8331998440dbd61af5c7f260d55107edd7fc9df5d5c69e73cb1dc577ba64ded62bf2c01f3f7c09adf46536e6c7ee1442251bfcc055af34e6792ce3795357d0825df5fe873edad3ea64f26502e6719cfecb3275655d540840c967638300925979bb171a1859af3a5065a"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "4d863a11ca30c0bec5bfe519aef726ffb43c4a90e85aa3fee528de07a175d8df57673ffa684d787e909ff59d0dde8fdce2c4bbec48c2562f2bfa6785bef5777acc39503cf46a14d528cb93cf62baf96a31ebd8263566c796e82d906c70f5b20670f06cae9d494bf53d237d134d87dd6c205aae11dcb8133e118bec0e4966aa55a27535d45ebc491d2401d310e77b91327f36860c71931c5152e171750b2d53831c41b767da1bb3368785dda9b9f2b160d809a5308c3a9b6d6e"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x22, 0x1, "cefd31897761a10528af847005698e1e5951e15c02695a75b5d72304cd7d"}, @NFTA_DATA_VALUE={0xd4, 0x1, "496c32306c45ba2f758a388b09167dfd3857e4d4eb12ce432bab230fe0e5caf2272e4784beaf749155f4bb33f5e227217d61b2afe673ac0b841f57e8125f7d3c6b1cd71e2f09151c51c512d804fc9ab2e12e1811f9beba67fbf2b344dc5c8a189bac9cc332ae14040cb03e1d475f43ffc3d49bc1c4b5d881832f1c07418a63c43b80af4aed2aa16996456305c1089aa980113bb8c8578b3fbc8628813735aab6585df183c9deed1c8ab60d62548247523d91be147cdb4925393669ed6b61e2c17e5d9c36e077b6edaf7db6c3cf9107c8"}, @NFTA_DATA_VALUE={0x5, 0x1, "fe"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x128, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0xf0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xe0, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x25, 0x3, "fb398367e2d14d3023dd2cb30a50558a3b309fdba2308326ea9175d54a1b237e58"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_INFO={0x78, 0x3, "48ce031b2c6f79eff3b6c7799b8bff297ae6a93d9965cf10ee1f231004c8ebceecabc38f654084314f9f4aa71fc03672cfae835a7d8f1814340584f7b06e4f81c3b1e984e17949027da22898c760a6df54ce88adc1395d6e7e0a46ae106b54a7f4269b4e1bac761d4923f80096fda177963f9db1"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x30}]}}}]}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x55aa121e7b940499}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x358, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x138, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "11364854"}, @NFTA_DATA_VALUE={0xdc, 0x1, "0c0983cb765ca3905d4c0cdca14d08c42367ba79522e269c2edba93885ff2078a3032080e909631e6b2901b58115b8b922ec1518910cf45d5a3eba609ed9b164852f47211759c1b86b51a54e8a2f37e61c32191d15dd5f6d8d3bfeb164c5cdeb4c05d061b9dfc4150ed0442cda7accdeaf05c5ef99449c2dab0b9f0b4a3610bf162820f4492f927ae7021e965bc3e5b501adbb7f6ff52510dfb38a5df1bbf130615b76bd52f37e21af2f88ffc556a26d56f440131c1fc4099d94085545d73d97876993a5030e8ca998f8c51bd5b1851e3bdfd27a6876cbbf"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_DATA={0x1a4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4e, 0x1, "7b6209825508ae79a1b1a2bc0d5accfac2a99a09993d4cad35a280c97e3c3a17b43eae6ef4ddde742f578dc3f5b298b017ccb07622346f3ca119afc586a13dede10a079504e14c58fce4"}, @NFTA_DATA_VALUE={0x76, 0x1, "2a6fbeeae103c38d68a9f118aa2be432fbfd80e402feb69229f480c8997e37a53fc1bd4371ffd33700158ab8fa9e66d82bc6723b8ac1f9a4f484e7ac8beb2a85cdd8328902115a3789fd28e12e631907677982f4178cc4a501a7f03720a71b3372f0c1001b4f9853517bf6f6c032aa8678fa"}, @NFTA_DATA_VALUE={0xd6, 0x1, "305a7a3e7d901175248dfe44035985261c199b09b28e57eb2f89ea6cd2133e97aac38dc08e7e5678cd854ad21ead12c3fa593ad5c5c6bdab557dcf5c531a4909998d626a701a1b066c6878221361fc0bd3df6c025ae70b307ff2f1bc21f2ff05198647cf54ae742133e758cb84d23c4b016a553f27bb8083fd1c9c113001f9854b725edb9f006d1c9ce6d0f72e487d790307831d996425b388528fb23410963d756ac787736e109a34a8b80054f724c671dc7fdeb9547067069a387b95647ef4e62f9d897d5140d32e20078658aa85024288"}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, {0x534, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x38, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x33, 0x1, "efb1987196de415104b1be85a8169168ed8b171ba2493be6fecbf4c7b9a6481c2eab93dd5a277f9acac586e61f9955"}]}, @NFTA_SET_ELEM_DATA={0x208, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "6b0e64be2b04e1a4d3be537c93b9661333853a9886f57d009bb1740327b522fe4ed3889e4a375d78d200ce960335c1f077d470196c0a8b97204ea757273f7686fd73781d095892b18db3d7b8ab9ebadc9eaa1cdc5a6ef932d987adf81b2f5de50161633eec4be97ea56925ffdcc21f2ba6c39078655fe85d235b28f081becbdff63446c4ae85c5d8e217addd326c531effa0749052048734b6115ab004a11f0e96f4242aba3e21de35b50b67a40282e654d7bb51e5d55231cb214ddb509e06adc19a6d6f9c12e336c32b4dfb131f817832c21df23ac56fb16fdbe396b27851193b7680467c6993b3fd52a66442dfdb83b2a152a4d1"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc3, 0x1, "5ceb771704281c2951db8b8086ff70573914828c21bb95bfea3913be02f774822618fc60d184ca6e9814167470e29a06c3760235dac74124c9eb486cd27e5af3b752f7c87c87fce896ff97a81e778496deda4edf7c1bef87d75227c589f438cfb9ac30ae9b80197d6ebe733ec73011d602a4d0c8425caa8aed916c72942598d6db08af2de454e51d068a6a72712076995ea5c07d565e728d137175480ddc8036468cefc37f451fda915ef7107c7262a2cb0ae9eb704714a65f81b7c5f3d287"}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0xf0, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xc}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x98}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x77}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x97}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb3}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x80}]}}}, {0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'length\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x49, 0x1, "0e29a39ca0b2b273f890fe6ca1ce77e9d6821b449c75e934b5f575dbefae10a82fcd6ac5eb4f526c2b763ccb40788b20c4a641c092f98e11324840f8a2bb074f2263c21285"}, @NFTA_DATA_VALUE={0x75, 0x1, "854be014ab7c81ea279365934632d53fe8fabd4069e296d83ae3abf59001787c96d604681ee5480ba73ec03be7afde40d72ecc3938e7edb83fc2af7324b39af97683588d73288dcfb0f2f14c48138bf5dfbe4e044691e37f0245b8fb63e09ba40fe8bbdc12a3e3a257ed7baa0e99648d59"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0xac, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x11, 0x1, "d81d9d1a838acdf017f512670f"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0xc4, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb902383}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6d24a69a}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x154c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, 'perf_event'}, {0x2b, 'rlimit'}, {0x2d, 'pids'}, {0x2b, 'net_cls'}, {0x2b, 'perf_event'}, {0x2b, 'rlimit'}, {0x2b, 'hugetlb'}, {0x2b, 'cpuset'}, {0x2b, 'net_cls'}, {0x2d, 'pids'}]}, 0x57) 820.631485ms ago: executing program 1 (id=2035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={r4, 0x6e4, 0x10, 0x6, 0xb1aa}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1ff}}, 0x3, 0x7ff, 0x5, 0xc3, 0x10, 0x200, 0x28}, 0x9c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xf420, @default, @bpq0, 0x4, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040)={r7, 0x561b}, &(0x7f0000000080)=0x8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80200008}, 0x1c) listen(r9, 0x0) 772.04561ms ago: executing program 3 (id=2036): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f00000004c0)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0xfffffffe, 0x0, @mcast1, @mcast1, 0x0, 0x0, 0x0, 0x1006}}) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 769.130139ms ago: executing program 2 (id=2037): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r3) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x7f}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='qdisc_create\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0xfffffc17) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 761.986008ms ago: executing program 4 (id=2038): r0 = socket(0x2a, 0x80000, 0x7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x50}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 714.181853ms ago: executing program 0 (id=2039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@deltclass={0xf0, 0x29, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0xb}, {0x0, 0x2}, {0x10, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x8}}, @tclass_kind_options=@c_hfsc={{0x9}, {0xa4, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x100, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0x57, 0x2, 0x2}}, @TCA_HFSC_USC={0x10, 0x3, {0xd267, 0x1cb4, 0x8001}}, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x9, 0xc1a2}}, @TCA_HFSC_RSC={0x10, 0x1, {0xea, 0x9, 0x1}}, @TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x2, 0x1}}, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x9, 0x9}}, @TCA_HFSC_USC={0x10, 0x3, {0xe, 0x2, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0xf}}, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x4}}]}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_cbs={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) close(r1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r6) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x20) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r9, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0xffffffffffffff37, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xf6, 0x8, 0x9}, {0x1, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'pimreg1\x00', @multicast}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r13) r14 = socket$unix(0x1, 0x1, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0x4cc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 600.188895ms ago: executing program 1 (id=2040): mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x54ba50706c6dc29a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600fcff7f0a0000200002801c00068004cf06d8a2d6a744bca0e4799321c1fe4fff3b8ba8a0f53eeea977bf0f178ee988d23ad4f4a75d10001e2b28502da7fb3785c953941808c6ac2e69be63723ba758efcfadbc28773c566d5c60626d1c8645aba0d587232dc394b58c500ef0a4d31acd09dc4cbc58c801d2ce38f71f21dc885759e4b9e3231c98198752585bca1742c2f7733353266b89e9b3f2cbc1bdd2bb"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'pim6reg\x00', {0x2, 0x4e20, @loopback}}) 572.759275ms ago: executing program 3 (id=2041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x9, 0x200, 0x3, 0x7, 0x5, 0x1, 0x5}, &(0x7f0000000100)=0x20) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0xefce5d6aba1cf00f, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x28}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=@tcp6, 0x1}, 0x20) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x48, 0x1, [@m_police={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000003}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x5c}}, 0x0) 509.225119ms ago: executing program 2 (id=2042): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f0000000140)=@ethtool_ringparam={0x1f, 0x0, 0x2, 0x37d7, 0x9, 0x6, 0x7, 0x1, 0x10}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c00010001"], 0x20}}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x2, 0x9, 0x0, 0x2, 0x2}, 0x10}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r4, 0x30b}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x2000) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x7, &(0x7f0000000000), 0xa0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x54, r11, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044805}, 0x20040050) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x0) r13 = socket(0x1, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88}}}}}}, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f0000000380), &(0x7f00000003c0)=@tcp=r13, 0x3}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 432.12964ms ago: executing program 4 (id=2043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x401}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) writev(r3, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/80, 0x50, 0x0, &(0x7f0000000080)=""/8, 0x8}, &(0x7f0000000300)=0x40) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000400000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000372c0011800a0001006d617463680000001c0002800800024000000000040003000a00010071756f7461000000140000001000010000000000000000000000000a00000000"], 0xb0}}, 0x0) 419.552651ms ago: executing program 4 (id=2044): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0) r3 = openat$cgroup(r1, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000180), 0x2, 0x0) sendfile(r0, r4, 0x0, 0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}, 0x1, 0x0, 0x0, 0x2044805}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b"], 0x68}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 60.52007ms ago: executing program 0 (id=2045): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000000040001e00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000300000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60}]}, 0x18}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="8411000004000000140012803983bcd46d6163736563000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 58.2794ms ago: executing program 2 (id=2046): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000004f80)=[{{&(0x7f0000000a00)=@ax25={{0x3, @default}, [@rose, @netrom, @default, @bcast, @default, @default, @rose, @null]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000005180)=""/4110, 0x100e}, {&(0x7f0000000a80)=""/145, 0x91}, {&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000d80)=""/104, 0x68}, {&(0x7f0000000d00)=""/54, 0x36}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/101, 0x65}, {&(0x7f0000000ec0)=""/67, 0x43}], 0xa, &(0x7f0000001000)=""/174, 0xae}, 0x10}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f00000011c0)=""/37, 0x25}, {&(0x7f0000001200)=""/199, 0xc7}, {&(0x7f0000001300)=""/232, 0xe8}], 0x5, &(0x7f0000001480)=""/17, 0x11}, 0x5}, {{&(0x7f00000014c0)=@ieee802154, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)=""/8, 0x8}], 0x1}, 0x5}, {{&(0x7f00000015c0)=@nl, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001640)=""/12, 0xc}, {&(0x7f00000026c0)=""/255, 0xff}], 0x2, &(0x7f0000002800)=""/181, 0xb5}, 0x7f}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000005100)=""/101, 0x65}, {&(0x7f0000002940)=""/217, 0xd9}], 0x2}, 0x2}, {{&(0x7f0000002a80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000002b00)=""/229, 0xe5}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/89, 0x59}, {&(0x7f0000003c80)=""/156, 0x9c}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/1, 0x1}, {&(0x7f0000004d80)=""/29, 0x1d}, {&(0x7f0000004dc0)=""/124, 0x7c}, {&(0x7f0000004e40)=""/74, 0x4a}], 0x9}, 0x7}], 0x6, 0x20, 0x0) write$bt_hci(r1, &(0x7f00000008c0)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) recvmmsg(r1, &(0x7f0000004f80)=[{{&(0x7f0000000a00)=@ax25={{0x3, @default}, [@rose, @netrom, @default, @bcast, @default, @default, @rose, @null]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000005180)=""/4110, 0x100e}, {&(0x7f0000000a80)=""/145, 0x91}, {&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000d80)=""/104, 0x68}, {&(0x7f0000000d00)=""/54, 0x36}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/101, 0x65}, {&(0x7f0000000ec0)=""/67, 0x43}], 0xa, &(0x7f0000001000)=""/174, 0xae}, 0x10}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f00000011c0)=""/37, 0x25}, {&(0x7f0000001200)=""/199, 0xc7}, {&(0x7f0000001300)=""/232, 0xe8}], 0x5, &(0x7f0000001480)=""/17, 0x11}, 0x5}, {{&(0x7f00000014c0)=@ieee802154, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)=""/8, 0x8}], 0x1}, 0x5}, {{&(0x7f00000015c0)=@nl, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001640)=""/12, 0xc}, {&(0x7f00000026c0)=""/255, 0xff}], 0x2, &(0x7f0000002800)=""/181, 0xb5}, 0x7f}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000005100)=""/101, 0x65}, {&(0x7f0000002940)=""/217, 0xd9}], 0x2}, 0x2}, {{&(0x7f0000002a80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000002b00)=""/229, 0xe5}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/89, 0x59}, {&(0x7f0000003c80)=""/156, 0x9c}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/1, 0x1}, {&(0x7f0000004d80)=""/29, 0x1d}, {&(0x7f0000004dc0)=""/124, 0x7c}, {&(0x7f0000004e40)=""/74, 0x4a}], 0x9}, 0x7}], 0x6, 0x20, 0x0) (async) write$bt_hci(r1, &(0x7f00000008c0)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) 50.469827ms ago: executing program 4 (id=2047): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYRESOCT], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x8c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7, 0x3, "5ae342"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x8c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7, 0x3, "5ae342"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x10, 0x0, 0x0) (async) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x10, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0xff, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x5, 0x8000}, 0xfffffffffffffef2) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0xff, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x5, 0x8000}, 0xfffffffffffffef2) 49.545269ms ago: executing program 3 (id=2048): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x27}, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ac8add8607000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ff"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xfe93, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r8, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRESDEC=0x0], 0x24}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r10, 0x84, 0x14, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) 45.201296ms ago: executing program 0 (id=2049): r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000055825830000"], 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, @void}, 0x10) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x800000406f40f, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x3, 0x12) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r1, r2, 0x4, r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2516000000002020207b1af8ff88361bd4a259b702000008000000b703000000000000850000008c0000232400"/88], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 44.302388ms ago: executing program 1 (id=2050): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x2, 0x0, &(0x7f0000000000)) shutdown(r1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1, 0x30}, &(0x7f0000000040)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, r6, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x2}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x24040040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000080)}, &(0x7f0000000180)=0xffffffffffffff42) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 0s ago: executing program 0 (id=2051): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x4, 0xd, 0xca, 0x7, 0x60, @loopback, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x40, 0x7803, 0x1, 0x59}}) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000140)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000180)=0x2c) sendmsg$nl_route_sched(r0, &(0x7f0000003e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003e00)={&(0x7f0000000200)=@newchain={0x3bdc, 0x64, 0x60c, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x4, 0x8}, {0xf, 0xffe0}, {0x7, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x3}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_u32={{0x8}, {0x10d8, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xe, 0xffff}}, @TCA_U32_ACT={0x1090, 0x7, [@m_skbmod={0x12c, 0xd, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x7fb1, 0x3, 0x8, 0x8001}, 0xf}}]}, {0xdb, 0x6, "f4141f001b73c1780b0966f9a544c71ef83284bf04466623037ddb058438868c18fb2cb96b4a14d3202e62897198d5df51ccb6ba6abac24c54684db71ab499035f85324ed5f1ed06ad114edceedce300bef302f1b8ac48fa5ffb185fe96ca012cc2696725a1cc018571716f0362cd76944501063a6c234b7cc8ba3833f33e3a413eba6ba621a07960b9a1c33a85df9c55336d0b228f73334710f484a8387763d14df93c9074c7aa72f746536ee6e92b2391a03206002fe1025c053bb2407abbea5c13d14676e1286652ea549ac5b14650ebfa85f5178cd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x994, 0x13, 0x0, 0x0, {{0xb}, {0x874, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x10000, 0x6, 0x100, 0xd4a5, 0xffffff4c, 0x0, 0x1c, 0x4, 0x1, 0x80, 0x7, 0xffffffff, 0x1565, 0x3df40000, 0x1, 0x60c, 0x400, 0x2, 0x9f199e7, 0x4, 0x3d4, 0x9, 0x37, 0xfffffbff, 0x0, 0x9, 0x2, 0x8, 0x7, 0x7, 0x2, 0x318, 0x4, 0x6, 0x7, 0x8100, 0x4, 0x7, 0x4, 0x3, 0x9, 0x3, 0x8001, 0xfffffffa, 0x8, 0x3, 0x3, 0x1, 0x7, 0x9, 0x849, 0x8, 0x6, 0x5, 0x9, 0x4, 0x3, 0x8, 0x45a06e78, 0x3, 0x1, 0xc9, 0x2, 0xffffffff, 0x1, 0x7ff, 0x2, 0x1, 0x5, 0x3, 0x4, 0x7, 0x9, 0x8, 0x7, 0x9, 0x6, 0xc, 0x2, 0x2, 0x2, 0x4, 0xfffffd1e, 0x8, 0x1, 0x2, 0x7, 0x7, 0x0, 0x2, 0x2, 0x7, 0x10, 0x8, 0xa, 0x7ff, 0x3, 0x8, 0x2616, 0x7ff, 0xfffffff7, 0x5, 0x7, 0x10001, 0x2, 0x1000, 0x53e8e60, 0x101, 0xfffff800, 0x3, 0x38a, 0x3ff, 0x9, 0x4, 0xd, 0x9, 0x7, 0x9, 0x10, 0x9, 0x10, 0xd9, 0xb, 0x6, 0x4, 0xd1e3, 0xe, 0x10000, 0xb4c, 0x7, 0x0, 0x3, 0x5, 0x43, 0x1000, 0x7, 0x4, 0x0, 0xb, 0x6, 0x0, 0x8, 0x1400000, 0x2, 0x8, 0x9, 0x188, 0x94, 0x7f, 0x1754, 0xf, 0x417f, 0x6, 0x3, 0x3, 0x9c6, 0x3, 0x9, 0x10001, 0x10, 0x4, 0x7fff, 0x4026a6dc, 0x3, 0x1bf6, 0x2, 0x2, 0x5, 0x1, 0x80, 0x1, 0x3ff, 0x6, 0x2, 0xe08, 0x80, 0x0, 0x3, 0x2, 0x2b, 0x400, 0x7f, 0x101, 0x1, 0xffffff81, 0x9f28, 0xb4e, 0x8, 0x6aa521bc, 0xcf29, 0xb3, 0x9, 0x7fffffff, 0x7fffffff, 0x5a, 0xffff, 0xbf2, 0x1000, 0x0, 0x2, 0x2, 0x3, 0x6, 0x1, 0x0, 0x7, 0x4, 0x0, 0x0, 0x4, 0x140, 0x6, 0x7, 0x1, 0x1, 0x7, 0x0, 0x3, 0x3, 0x68eb, 0xfbdd, 0x8, 0x677b, 0x7, 0x7ff, 0x3, 0x7ff, 0x5, 0x4, 0x8000, 0x8, 0xb120, 0x8, 0x5, 0x7, 0x1df, 0x200, 0x7, 0xfffffffe, 0x7, 0x100, 0x2, 0x0, 0x7, 0x3ff, 0x9, 0xff, 0x8000, 0x1, 0x0, 0x0, 0x6, 0x9, 0x7f, 0x8]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x82}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x6, 0x85, 0x2, {0x3, 0x1, 0x20, 0x3ff, 0x3, 0x2}, {0x34, 0x2, 0x8, 0x6fb8, 0x3, 0xffff8001}, 0x3, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0xd, 0x904, 0x40, 0x8, 0x81, 0x7f, 0x6, 0xfffff215, 0x5, 0x3, 0xc12, 0x2, 0xe5, 0x6, 0x2, 0x1, 0x4, 0x5, 0x6, 0x200000, 0x5, 0x4, 0x6, 0x1000, 0x8, 0x1, 0x3, 0x35e, 0x400, 0x10, 0x101, 0x2, 0x0, 0x6, 0x4, 0x8, 0x1000, 0xfffffffe, 0x8, 0x10000, 0x5, 0x6774, 0x679d, 0x3, 0x6, 0x7, 0x7, 0x10000, 0xfe, 0xffff0000, 0x1, 0x2, 0x2, 0x0, 0x101, 0x7, 0x6, 0x4, 0x956, 0xffffff9a, 0x1, 0x7, 0xc482, 0x7, 0x3, 0x7f, 0x81, 0x3, 0x6b3, 0x6, 0x2, 0x4, 0x4, 0x800, 0x4, 0x1, 0x0, 0xfffffc00, 0x4, 0x6, 0x8, 0x8, 0x9129, 0xffffffff, 0x8000, 0x7fffffff, 0x6, 0x9, 0x9, 0x7, 0x9, 0x9, 0xd, 0x6, 0x2, 0x9, 0x100, 0x6, 0xfffffe00, 0xf89, 0x0, 0x0, 0x4, 0xfffffff8, 0x5, 0xf, 0x8, 0xa390, 0x10, 0x1, 0x9, 0x12000000, 0x80, 0x9, 0xc, 0xfb, 0x6bb, 0x88b6, 0x6, 0x8, 0x0, 0x1, 0x5, 0x8, 0x3, 0xa, 0x34, 0x5, 0x1, 0x5, 0x3, 0x40, 0x96be, 0x8, 0x9, 0x80, 0x5, 0xff, 0x9, 0x9, 0x9, 0xe27, 0x100, 0x7, 0x1, 0x9, 0x68, 0x2, 0x8, 0x9, 0x6, 0x80, 0xe6, 0x10000000, 0x5ae00, 0x2, 0xfffffff7, 0xb, 0x0, 0x800, 0x4, 0x7, 0x9b47, 0xd2c, 0x8, 0x10d, 0x80, 0x4bc, 0x2, 0x8, 0x81, 0x1c0000, 0x9, 0xfffffff7, 0x0, 0x8000, 0x2, 0x1ff, 0x3, 0x0, 0x9, 0x7fff, 0x100, 0x3, 0x3, 0xfffffff8, 0x6, 0x2, 0x5f92, 0x475, 0x6, 0x9d, 0xcb0, 0x9, 0x7fffffff, 0xb, 0x20c830f4, 0x6, 0x7, 0x1, 0xd, 0xb3e, 0x5, 0x7f, 0x7f, 0x0, 0x4, 0x5, 0x9, 0x7, 0x3, 0x4, 0x2, 0x8, 0x2, 0x88, 0x2, 0x80000001, 0x9a, 0x0, 0xffffff81, 0x800, 0x80000000, 0x49, 0xe, 0xfffffffb, 0x6, 0x100, 0x4, 0xc857, 0x40, 0x2, 0x1, 0x8, 0x0, 0x2, 0x3, 0xfffffffe, 0xda, 0xe2db, 0x2, 0x400, 0x5, 0x6, 0x5, 0x0, 0xdb94, 0x7, 0xb, 0x9b8, 0x1, 0xdf95, 0x2, 0x4, 0x4]}]]}, {0xf7, 0x6, "b759110b4679aa5545a9aeceac2aa6dc5730f9607968b24a9abbeb7da5d4203a91e482b1582a9ac580efd7dc2dadd2c46e0d5219d95842e9d9db11f11f2ee8b39907a590bcdef4ae3d8b030265638ac02233b1856efb5ceb8bf310fd727a2da2b68183ddabb19b0fcb06f04c154ec22dcfd9141f75466105820bcaf47e805b146de3766968ee50ba4f8dce5206710158fc9fb78b2500c7a95188e1eb99625303ac17e5863d0e04834f0d59c21acdf15dd84759b4120a394782746df3b727a8ccc003c354672d5a2d102e179e391d2f2cc12de82c780d6f28991d5fabdf8c82ed9c94606e651862d8c15f46761b0c664ceefd46"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x64, 0x3, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0x26, 0x6, "9d4c018559cd46234121443b9a834635c393be71d904539e8b4e28bdc8781c375f21"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x1ec, 0xf, 0x0, 0x0, {{0x7}, {0x104, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x4d, 0x6, {0x8000, 'mangle\x00', 0x1, 0x8000, "70a7efa5cba08a74a3267659fbcfa3b2428bcafd064c96485b12bf43a73ac43ef2766c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x8001}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x5}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xc4, 0x6, "56163a4cc23d39c1edb43be541e835a5ea909be0da64fa9c875c0963b34d3c253c3fa7d463a73f1aea2bf5f36515af576c98da7b4b1af7206b83d44f4010922d4656e56033044123717c08cfd541ef8b15719fec1d0cbfc6058c36dd304d35f0f46e684d6669a033283fbf0b0aa0d6864909afed40db9d411b3462dd6a698785944f701c4760129adce254b9578ebb884c7070bb690006980efc9a00a33e1ab8175aa8fa37a7803fc20d91ba491b9a58752aebd3631c80254475813692f44c42"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x78, 0x12, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x2b, 0x6, "fd495967faa880d8ed184323783a4aa8ea86d29b902075b7938724fb4f407c5c7548bc50d9cf59"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x168, 0x3, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffd, 0x5, 0xffffffffffffffff, 0x12ed4f4a, 0xc35f}, 0x7f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x4, 0x7f, 0x4}, 0xb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0xffffffffffffffff, 0x1, 0x3}, 0x380a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0xf, 0x2, 0x5}, 0x7ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x6, 0x4, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x6, 0x8, 0xa}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7, 0xc, 0x400, 0x800}, 0xfffd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x1ff, 0xd, 0x6436, 0x6}, 0x9}}]}, {0x57, 0x6, "93a2e599057fe48c55d8fe33e4499c037bf643ac3227e2edc602ccbf2b6ec8dd47962b4a11d243c08449dde0909664ec66a33075220f05327fce0246a4ba84e93fa9fe91c9b4a269110eed5a3516b569521b71"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xf0, 0x3, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0xa, 0x3e, 0x0, 0x1}, {0x31b, 0x40, 0x2, 0x2}, {0x9, 0x1, 0x8, 0xfffffffb}, {0xfff, 0x78, 0xb, 0xc}, {0x3, 0x5, 0x0, 0x3ff}, {0x5, 0x0, 0xff, 0x6}, {0x5, 0x2, 0x3, 0xfffffe00}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x3, 0x7, 0x8, 0x7}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x5a, 0x6, "159e723156ae43012e0f49040202a450fccfc4aafb33f522cc1de4c707cc60de75a5864b09dcf9b2ed56861284249d0753b69b1fc1fcf5b9ac7740eaae116e6e14dfae0ff40873aa8ba08a0ec1ff5072109fdaacf2cc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0xac, 0x0, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x7, 0x4, 0x80000001, 0xe9e5}, 0xa}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1980}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}]}, {0x31, 0x6, "7794f9cacadf6e8acaad3ac09d0f666c7d4fdf48ee3a2699053977dc7f1637c6ed66f6b7bd90767c7df88c3934"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_U32_MARK={0x10, 0xa, {0x2}}, @TCA_U32_MARK={0x10, 0xa, {0x4, 0x9}}, @TCA_U32_INDEV={0x14, 0x8, 'caif0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0x1}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_fw={{0x7}, {0x2a54, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x2}}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xfff1}}, @TCA_FW_POLICE={0x4c4, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xd336, 0x8, 0x101, 0x979, 0x8, {0x2, 0xb8d86764eb6d34c7, 0x946b, 0x0, 0x0, 0x4}, {0x4, 0x1, 0x8, 0x5, 0x6, 0x2}, 0x2, 0x6, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x66, 0xfffffffffffffffc, 0x8c, 0x4, 0x6, {0x0, 0x2, 0x0, 0x15e2, 0x6, 0xd}, {0x7, 0x2, 0x10, 0x1, 0x8, 0xa}, 0x9, 0x6, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x5, 0x1, 0x7, 0x0, 0x1, 0x800, 0xc, 0x8, 0x6, 0x2, 0xd9, 0x2, 0x2, 0x2, 0x40, 0x8000, 0x7fff, 0x5, 0x4, 0x7, 0x4, 0xefd, 0x9, 0x7ff, 0x1c4, 0x7fff, 0xc2ed, 0xa, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x8, 0x400, 0x5, 0x0, 0x7, 0x6, 0x8, 0x5, 0x9, 0x5, 0x1, 0x7, 0x80000000, 0x9, 0x9, 0x1, 0x10, 0xea34, 0x40, 0x7, 0x0, 0xa81, 0x1, 0x4, 0x9, 0x4, 0x0, 0x0, 0x4, 0x6, 0x4, 0x80000, 0x40, 0x9b2c, 0x2, 0xff, 0x3, 0x3ff, 0x7be, 0x1, 0x2, 0x5, 0x3, 0xb3, 0xfffffff9, 0x2, 0x9, 0xae7, 0x9, 0x8, 0x3, 0x3, 0xff, 0x3, 0x2, 0xb8b2, 0xc2e, 0xfff, 0x36, 0x2, 0x0, 0x9, 0x4, 0x6b, 0x4, 0x2, 0xfffffff8, 0x101, 0x8, 0x0, 0x3, 0x9, 0x1, 0xfffffffc, 0x1, 0x8, 0x7, 0x9, 0x4, 0x6f, 0x1, 0xfb22, 0x6, 0x6, 0x401, 0x4fa, 0x9, 0x8, 0x2, 0x6, 0x81, 0x0, 0x0, 0x0, 0x4, 0x9a, 0x7f, 0xc9d, 0x3, 0xe6, 0xfffff0fb, 0x1e, 0x8, 0x4, 0xfffffff3, 0x3, 0x4f70, 0x1, 0x5, 0x0, 0x3, 0x200, 0x800, 0x5, 0x6, 0x5, 0x1, 0x0, 0x8001, 0x6, 0x4, 0x99c, 0xfe, 0x0, 0x4, 0x100, 0x8, 0x2, 0xc4a, 0x19, 0xf90, 0x5e, 0x3, 0x2b, 0x1ff, 0x489d, 0x5, 0x8, 0x2, 0x2b, 0x101, 0xff, 0x9, 0xcd4, 0x7, 0x100, 0x0, 0x6, 0x9, 0x0, 0x1000, 0x1, 0x800, 0x2, 0x80, 0x1, 0x7df, 0x1, 0x7, 0x101, 0x7, 0xfffffff7, 0x8001, 0xa, 0x4e, 0x3ff, 0x7fffffff, 0x0, 0x9, 0x8001, 0x5, 0x4, 0x400, 0x6, 0xfffffe01, 0xdec9, 0x7f, 0x2, 0x2, 0x2, 0x4, 0x4, 0xfffff800, 0x3081, 0xfffffffe, 0x20000, 0x7, 0x1b1, 0xfad, 0x92bd, 0x3, 0x1, 0x5, 0x8000, 0x101, 0x9, 0x4, 0x3b, 0x4, 0x1, 0x1, 0x10, 0x4, 0x4, 0x9, 0x7, 0x193, 0x2, 0x8, 0x2, 0x8, 0x8, 0x4d0, 0x80000001, 0x3, 0x0, 0x5, 0x7, 0x3ff, 0x3, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0xfe, 0x7fff, 0xb7d3d192, {0x80, 0x1, 0xad39, 0x3, 0x5, 0x1}, {0x1c, 0x3, 0x2, 0x2, 0x0, 0x9}, 0x9, 0x9, 0x9}}]}, @TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_ACT={0x1570, 0x4, [@m_skbmod={0x10c, 0x0, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0xd2, 0x6, "2a9f85c87d427d2bcf6442210e21dadb6709a96d33a5aa4f0c3595eec50bbb8b22d5fcebf12a34cbf30a3346868e952d071249871768398f0cc5d71b3e68f54f686134ed7cb48c9fdc6cd9821c9b112205daa737505e28f7ef62d92009aa837166dbca996a42bfff147cb518001c63238cf95709e67c4507ff20bcdc18cc7717746149e34577b561eff43751248e6c37e25300d6a03ff338e7c3a613115035d0e0f6e2f78ac61861d21d0946fb7f813da67d8a88632ad0c688ad8e1bfc1341a7e201fd4caa24235844f05de5e389"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x10d8, 0x2, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffff7, 0x3, 0x5, 0x1}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xe, 0x4, 0x9, 0x2}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x46, 0x40, 0x5, 0x83f, 0xffffffff}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x3, 0x5, 0x78}, 0x25}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff9, 0x5, 0x8, 0x5, 0x6}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x10000000, 0x5, 0x6}, 0x4c}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x7c, 0x1a, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x80, 0x10000000, 0x80000000, 0xf}}}]}, {0x29, 0x6, "7505cc715cba106cd10544b84b07953717e5d7ff1e355961c1a4c97f7c40f892efbd676138"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x154, 0x17, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0x9, 0x1, 0xb, 0x100000}, 0x9d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7fffffff, 0x4, 0x9, 0x40}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x4, 0x7fff, 0x6}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff0e9, 0xfff, 0x0, 0x3, 0x9}, 0xad}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x4, 0x5, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffe0e1, 0x80, 0x2, 0x2, 0x1}, 0xd7c8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xbdd7, 0xd7, 0x6, 0x401, 0x3}, 0x820b}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff3, 0xc, 0x0, 0x678, 0xa4}, 0xfffa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xf7b, 0x3, 0x4abc, 0x2}, 0x8bf7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x9, 0x4, 0x3, 0x3}, 0x76f2}}]}, {0xa, 0x6, "75196a658721"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ct={0xf4, 0x17, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x36a1faba}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_MARK={0x8, 0x5, 0x3800000}, @TCA_CT_LABELS={0x14, 0x7, "65d3b34259507876bf10501b978758bf"}]}, {0x9d, 0x6, "ffa30d929a83affe82e75733d3d0fe674ceb80b5e1f30ca03cea625ee1f31af4a6f178cbca2bcdfe4e455ae8331c113248e5b7203f195f0a83a687fee14a6bfd99e7b9d2cb2c902e900e85911e2d59975d6f7fb6d41ba61bd4312777e8242c7fb981a902da475999289c3bdaebf07b250b84b13d1f563afcf43ed0480d5480ce095044c8faf6cbe705b1725bd7b69e72cb625b984113b2b805"}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbedit={0x40, 0x17, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x84, 0x4, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x4d, 0x6, "68089a208e8728082c16699cca6b1ee6aae0fe7ad05153f03079355bdc69c5c7530f6d73bac2ffc7765705e5a349f0d5d31f7cdd012ffa45cb5066d21f180c90918f818dbe08c010ad"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_ACT={0x380, 0x4, [@m_connmark={0x168, 0xe, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0xffffffffdffffff9, 0x6fa, 0x7}, 0x48}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x79, 0x8, 0x8, 0x1, 0x4}, 0xa0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb57b, 0x4, 0xffffffffffffffff, 0x56, 0x800}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0xffffffffffffffff, 0x1ff, 0x4e9}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x80000000, 0x0, 0x8000, 0x7a6}, 0x7145}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x6a58364a, 0x5, 0x7146, 0x10000}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x6, 0x20000000, 0x4, 0xffffffff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x100, 0x7, 0x1, 0x2}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x8, 0xffffffffffffffff, 0x4, 0x8}, 0x9}}]}, {0x39, 0x6, "3d199c8ccaf4f2459a967ba8470886cc388d6be4a6ddd3d2bf58b3653d753d2cc50d55b956371fa5737e88c785c007b4c9e870503a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_xt={0x16c, 0x14, 0x0, 0x0, {{0x7}, {0x128, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf3, 0x6, {0x7, 'mangle\x00', 0x5, 0x6000, "70d0cd00ac68fefcc26770c2dca9aa25bc864ca1d2e5c8419aeaa0d696e68cdece5730b29bf7eb6d7a5625678117e54b923a89172a726c1e5fa8a6f66857d246f17de24eec8e1c3b4edfdcbc9d5e50d7e3d1badf0c82d61ff594428a81a579bf7238a630938f0501f95b56a8257b898aea51d0dabd08fb898e6f808a9918df98a21e8d01ebc84b686fabdc12e17e95bf0bc09247ebd9ef766c0f5c22106fd95056db0255729b04c48446431ca025c691559a11a81bfecbdff68b6e292be185846b309f8e19d6b6f1c7"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x893accb31f6c453e}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}]}, {0x1d, 0x6, "3f0a783f8441057bbc827af691b7c6b66c20c8e24a0940ef46"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0xa8, 0xc, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x65, 0x6, "3e0a94b009d689e9271eed41e2ff6545ad6d5f653471053ec7fccce961898e5f1e551a972d81b8b8bc920bdbbd099b22eab67c177b380a3f3b249b9294dc76d7492c6ce7ccb5883d0efe249f9195456e59f7be6ceb23fab4d033b8c6e303812628"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FW_POLICE={0xc60, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0x200, 0x1, 0x8, {0x2, 0x0, 0x0, 0x9, 0x0, 0x1}, {0x80, 0x1, 0x1, 0xcd36, 0xd938, 0x3}, 0xa0, 0x8, 0xfe1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1ff, 0x0, 0xfffffffc, 0x5, 0x0, 0x7, 0x7, 0x100, 0x5, 0x8001, 0x0, 0x40, 0x5, 0x0, 0x6d9, 0x7, 0x800, 0x5, 0x1000, 0x6, 0x9, 0x2, 0x7c, 0xe48b, 0x3, 0x2, 0x3, 0x200, 0xf452, 0x2, 0x3, 0x101, 0xfff, 0x6d9437e1, 0x761, 0x6, 0xfc2, 0x1, 0xdcd, 0x8, 0x7, 0x3, 0x7f, 0xb4fd, 0x2, 0x2, 0x53, 0x7, 0xbcac, 0x5, 0x8, 0x2, 0x7fffffff, 0xfffffffc, 0x7fffffff, 0xfff, 0x6, 0x8, 0x2, 0x81, 0x1, 0x8, 0x7, 0x2, 0x8, 0x3, 0x8001, 0x9, 0x401, 0x9, 0xe5, 0x6, 0x7, 0x6, 0x400, 0x0, 0x7fff, 0x1, 0x8, 0x5, 0x5, 0xfffffff4, 0x0, 0x7fff, 0x40, 0xfffffffb, 0x1, 0x10, 0xe05, 0x200, 0x2, 0x4, 0x1, 0x0, 0x8000, 0x7, 0xa3, 0x1, 0x3, 0x6, 0x9, 0x10, 0x1, 0x6, 0x5, 0x7fffffff, 0x3, 0xb88d, 0x0, 0xfffffffd, 0x0, 0x5, 0x7, 0x1, 0x3ff, 0x1f94, 0x7dd5, 0x0, 0x9, 0xd, 0x1, 0xccd, 0x0, 0x5, 0xff, 0xff, 0x9, 0x2, 0x9, 0x1, 0x6, 0xfffffffa, 0xfffffff9, 0x1000, 0x4, 0x11c6, 0x0, 0x2, 0x4, 0x10001, 0x1, 0xfff, 0x3, 0x87, 0x349f, 0x1, 0x80, 0xffffff31, 0x7, 0xff, 0x3, 0x7d2b2310, 0x7fffffff, 0x100, 0x6000000, 0x40, 0x1, 0x938, 0x26764fdc, 0xc00, 0x4, 0x5000, 0x8, 0x7, 0x7, 0x978, 0x9, 0x2, 0x2, 0x8000, 0x80000000, 0x0, 0xffffed13, 0x6, 0x957b, 0x50b, 0x6, 0x645, 0x0, 0x7, 0x413, 0xfffff001, 0x1, 0x8000, 0x5, 0x9, 0x8, 0x2, 0xed, 0x2, 0xbc, 0x8, 0x8, 0x4, 0x4, 0x2, 0x5, 0x1, 0x10001, 0x1f86, 0x0, 0x7, 0x8, 0xb32, 0x0, 0x400, 0x4, 0x0, 0x2, 0x6, 0x86a3, 0x2, 0x3, 0x1, 0x5, 0x2, 0xfffffff9, 0x1, 0x40b8edb0, 0x5, 0xfffffc00, 0x7, 0x7, 0xdf3, 0xfffffff7, 0x9, 0x101, 0x6, 0x0, 0x0, 0xff, 0x80, 0x5, 0x2, 0x6, 0x200, 0x5, 0x300, 0x9, 0xfff, 0x2, 0x3, 0x7, 0x0, 0x3, 0x10000, 0xf, 0x9, 0x4800000, 0x6, 0x3, 0x5, 0xff, 0x2, 0x3, 0x884]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3ff, 0x7fff, 0x2, 0x9, 0x7, 0x0, 0x8, 0x0, 0x52, 0xf, 0x3, 0x5, 0x7a3, 0x3, 0x81, 0x2, 0x2, 0x6, 0x1, 0xc, 0xdff, 0x98f7, 0x1, 0x40, 0x8001, 0x8000, 0x401, 0x2, 0x1, 0x5, 0x3, 0x4, 0x164a23ed, 0x0, 0x7, 0x7fffffff, 0xbe1, 0x883, 0x7f, 0x7, 0x6, 0x800, 0xfffffffa, 0x1, 0x5, 0xa, 0x163a14fa, 0x0, 0xffffe5b4, 0xfffffffe, 0x1, 0x100, 0x7, 0xfffffff9, 0x9, 0x5, 0x2, 0x3, 0x9, 0x0, 0x101, 0x8, 0x8001, 0x7, 0x3, 0xfffffff8, 0x8, 0x4, 0x0, 0x2b0f58cb, 0x5, 0xffffffff, 0x3, 0x1, 0xfffffffc, 0x9, 0xb4a, 0x2, 0x7fff, 0xa, 0x80000, 0x2, 0x5, 0x5, 0x8, 0x8000, 0x9, 0x80000001, 0x18, 0x6, 0xffff2496, 0x6, 0xd, 0x5, 0x1, 0x8c, 0x9f1f, 0x5a, 0x4, 0x9, 0x6, 0x7, 0x0, 0x3, 0x96, 0x9, 0x10001, 0x0, 0x5, 0x4, 0xe, 0x3ff, 0x0, 0x9, 0x3, 0xfec1, 0x8, 0x6, 0x0, 0x599, 0x8, 0x6, 0x580000, 0x83c, 0x5, 0x261, 0x2, 0x7, 0x8, 0x3, 0x3, 0x401, 0x7, 0x0, 0x90, 0xd, 0x2, 0x3, 0xa0, 0x3, 0x3, 0x7, 0xe7, 0x9, 0xc4, 0xec85, 0xc, 0x2, 0x10000, 0x6, 0x9, 0x1, 0x2, 0x7fffffff, 0xf, 0x0, 0x1e59, 0x0, 0x7, 0x9, 0x8, 0x7fffffff, 0x1, 0x6, 0xfffffff7, 0x2739, 0x80, 0xf8, 0x7, 0x86, 0x8, 0xb, 0x3, 0x4, 0x7, 0x5, 0x3, 0x10000, 0x6, 0x3, 0x0, 0x8000, 0x1, 0x6b, 0x2, 0x2, 0x8001, 0x0, 0xfffffe61, 0x5297425c, 0x13, 0xa0, 0x800, 0x9fab, 0x7, 0x8, 0x5, 0x81, 0xc00000, 0x7, 0x8, 0x9, 0x7fff, 0xfffffffc, 0x0, 0x6b9, 0x5, 0x1, 0xa, 0xe, 0x9, 0xd, 0x401, 0x1, 0xca, 0x1, 0x4, 0x5, 0xb, 0x2, 0x4, 0x3, 0xffffffff, 0x401, 0x8cb, 0x200, 0x6, 0x101, 0x7, 0x2, 0xacbd, 0xea7, 0x401, 0x7, 0x2, 0x6, 0x4, 0xceb, 0x7, 0x5, 0x81, 0x1000, 0x1ff, 0x3, 0x0, 0x6, 0x9, 0x8, 0x6, 0xfffffffb, 0x985, 0x8, 0x6, 0x2, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x4, 0xd, 0x7, 0x4, 0x81, 0xa8c8, 0xd24, 0x9, 0x0, 0x0, 0x0, 0x2, 0x6, 0xe42, 0x9, 0x7, 0x6, 0x13, 0xf, 0xf, 0x9, 0xb, 0x3, 0x56f70000, 0x3, 0x3, 0x7f, 0x8, 0x3, 0x0, 0x785, 0x9, 0xcc, 0x800, 0x0, 0x9, 0x1, 0x480000, 0xbe4, 0x6, 0xc9c, 0x2, 0x4, 0x7, 0xb7, 0x6, 0x9, 0x3, 0x15, 0x1, 0xc39d, 0x7ff, 0x4, 0x3, 0x6, 0x5, 0x1, 0x38cbb714, 0x1, 0xfff, 0x0, 0x2, 0x5, 0x7, 0x9, 0x10001, 0x4, 0x8, 0x4, 0x7, 0x8001, 0xf5, 0x2, 0x36, 0x8, 0x4, 0x4, 0x3, 0x4, 0x9, 0x5, 0x6, 0x0, 0x80000001, 0x7, 0x6, 0x1, 0x9, 0x5, 0x1, 0x4, 0x400, 0x2, 0x232, 0xfffffffe, 0x9, 0x3, 0xf7f, 0x5, 0x7, 0x5, 0x101, 0xa5, 0x8, 0x4, 0x1, 0x5, 0xffffffff, 0xf23b, 0x58ab, 0x0, 0x5, 0xf, 0x0, 0x994a, 0x4, 0x3, 0xa01, 0x101, 0x40, 0x28e, 0x9, 0x800, 0xfff, 0x3, 0x7fffffff, 0x1, 0x6, 0xf, 0x161, 0x100, 0x1, 0x7, 0x4, 0xffffc95a, 0x59, 0x9, 0x9, 0x1ff, 0x1ff, 0x100, 0x2, 0x4, 0xc7, 0x4a50, 0x0, 0x566, 0x5, 0x4, 0xae, 0x6, 0x4, 0x8000, 0x200, 0x101, 0xc19, 0x8001, 0x10000, 0x0, 0x9, 0x9, 0x739, 0x7c, 0xab, 0x3, 0x6, 0xfff, 0x98, 0x100, 0x7, 0x6, 0x5, 0x7, 0x5, 0x48, 0x7fffffff, 0x1, 0x9aa, 0x7, 0x7, 0x2, 0x5, 0x7, 0x7, 0x5, 0x5, 0x8, 0xc, 0x6, 0x0, 0xa, 0x0, 0x2, 0x5, 0x40, 0x1, 0x1, 0x9c, 0x0, 0x7, 0x7, 0xe, 0x3ff, 0xfff, 0x3, 0x7, 0xf, 0x8, 0x10, 0x200, 0xa, 0xb, 0x5, 0x8, 0xe, 0x8001, 0xb9440, 0x4, 0x9, 0xfffffffd, 0x7, 0xffff, 0x9, 0x8, 0x0, 0x7fff, 0xfffffff7, 0x101, 0x304, 0x6, 0x6, 0x2, 0x2, 0x881, 0xffec92d, 0xa2, 0x3, 0x4, 0x0, 0x0, 0x7, 0x9, 0x6, 0x7f, 0x7fff, 0x8, 0x8, 0x9ef8521, 0xfffffffc, 0xffffffff, 0xc02, 0x7, 0x7fffffff, 0x5, 0xc9e]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff7}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xf}}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x6e}]}, 0x3bdc}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) recvmsg$can_raw(r0, &(0x7f0000003fc0)={&(0x7f0000003e80)=@ax25={{}, [@null, @netrom, @remote, @default, @rose, @bcast, @rose, @null]}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003f00)=""/104, 0x68}], 0x1}, 0x20) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000004080)=@buf={0x59, &(0x7f0000004000)="8ccb4bcd83e0cc02e3273eb65fb58039fad150fbeea51e433fe4044fa4191532bd0f858128a89ea8c6d27ecd08e5185a82ae2d98b6e1db6c4d5ab4383d8fa84eb6c194004ba5ffc7bdb58894017e25ae99d8c6c0e68341bc18"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000040c0)={'wlan1\x00'}) connect$802154_dgram(r0, &(0x7f0000004100)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004180), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000004240)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f0000004200)={&(0x7f00000041c0)={0x24, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x76}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000004280)={r0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000005900)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005940)={'vxcan0\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000005ac0)={&(0x7f00000042c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000005840)=[{&(0x7f0000004300)="961df90f1d228a3aaf60be5ee2a6cf7b4c7e84f320804b7a7276aadcc83ade76c5673c48a6c0ec6adc39082b8f75", 0x2e}, {&(0x7f0000004340)="72e3fd62e239fd753173559075f393558aaf550ef675e0e00cfbced98317c9fcc0feae62962cae9d848081062cb743312ae522f57aea50148d6cd00736ddf7c5d2bd5ad29b31", 0x46}, {&(0x7f00000043c0)="4341c5acd97da0d9fa4772a107389981379a9f479c1350de787b5245eae2284ddebd2c9651f47dbc088e8490a9c49a50261bf944041419922407dafe6b5d817d4ef01429d493e7a924ad33d6a3591f5bba167b9ed9dc027a9a9dd51a0e6549d90cd78a5a28", 0x65}, {&(0x7f0000004440)="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", 0xfe}, {&(0x7f0000004540)="ae97ee84942a34181913d12b7c4d258ab046845d5e2ff793cdd985e801a71e3a875295fc35b0ac6ad954109b2d8f98f02dde01499b44f3fd5cee29fde56e395d705b6fd89f7651de5d879e08d32513be30bfc8d9c36d15720a555b9e1b750f44058ca8ffe48b83764aeb2d0b6be2497fbb5d57e9d6aa1790658adbd6f55afa30eecfb0f909e3a6898c62677edb5b2c659f", 0x91}, {&(0x7f0000004600)}, {&(0x7f0000004640)="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", 0x1000}, {&(0x7f0000005640)="daec591001bed0aff488fbd4399ded750403cea6b5cf8cd94d073a7f387fc452ad87a90df0ad49ad6c349353bb0fc124148bd3df40171b0dfa8bbb119ec1b34c6045a1dde6b465e242911389e3251129d0ce371b2f68e3492e67ea7a0e303be209f70e4c8c65e7c2c9bdaaa3d7f33b971d59bc47e86a5142334b30d9caaa816df3464dbda945e10e52e7bee48e9c508b2ca618dba56069fd17a8c93688fb04001fdca3ed487ecbc0c9043101fa816aa5cd04ff36c10592f7f00779dbf6f6173a655c14cf1f126f5272d92311b4982d33e6e336095f6a0c5d927436150bd0732ccc2cefecf67f", 0xe6}, {&(0x7f0000005740)="f8b7460a45b8e29e0bd21bea01c987786d3b8106b5110987a26b2412951f902701eee959e0d0f309aaf72119c8ac37d960464ebdc3a94ac86cef68740a430971cff6d6095f3b88f04f030fd561066246b5925263deb98c4b90e3278471b78675b736d5d28fd3099902f66fdf590950eab226a0fb1a1041b8524475749aab9febeb66a14782d7d2fc8093df040b232e0549633c0222237bbe00a4bc8529064fe737939e770adde0495d82b228e043e9997318407797976694d24bf951ffc960c4cf55d66140333861ca70501613919bf8a38905c33c18b2bcb4fbdc921fbc6dd002c6a70ca4b9", 0xe6}], 0x9, &(0x7f0000005980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @dev={0xac, 0x14, 0x14, 0x35}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x90, 0x0, 0x7, {[@noop, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x6, 0xb, "30fb38719ff8cc3f50"}, {0x7, 0x9, "28fb3f7d4c7ad9"}]}, @generic={0x7, 0x8, "5e9eec6d0c4c"}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x59, 0x3, 0xb, [{@rand_addr=0x64010100, 0x2}, {@local, 0x9}, {@remote, 0x9}]}, @ssrr={0x89, 0xb, 0x73, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp={0x44, 0xc, 0xf0, 0x0, 0x6, [0x7, 0x200]}, @lsrr={0x83, 0x23, 0x73, [@multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}, @private=0xa010100, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @noop, @end]}}}], 0x138}, 0x20004010) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000005b00), 0x8) setsockopt$RDS_RECVERR(r6, 0x114, 0x5, &(0x7f0000005b40), 0x4) r7 = openat$cgroup(r6, &(0x7f0000005b80)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r7, &(0x7f0000005bc0), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000005c00)={'hsr0\x00'}) r8 = socket$kcm(0x29, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f0000005dc0)={&(0x7f0000005c40)={0x1d, r1, 0x1, {0x2, 0xff}}, 0x18, &(0x7f0000005d80)={&(0x7f0000005c80)="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", 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000005e40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000005f40)={&(0x7f0000005e00)={0x10, 0x0, 0x0, 0x701002}, 0xc, &(0x7f0000005f00)={&(0x7f0000005e80)=@ipv6_newaddr={0x80, 0x14, 0x100, 0x70bd26, 0x25dfdbff, {0xa, 0x40, 0x19, 0x0, r10}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x1, 0x1, 0x8680}}, @IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x4010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006040)={&(0x7f0000005f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@typedef={0xe}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x5}, @volatile]}, {0x0, [0x7f, 0x0, 0x61]}}, &(0x7f0000006000)=""/58, 0x45, 0x3a, 0x1, 0xa, 0x10000, @value=r6}, 0x28) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000060c0), r3) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000006200)={&(0x7f0000006080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006100)={0x90, r11, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4) kernel console output (not intermixed with test programs): e not active [ 77.486533][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.493491][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.520067][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.693414][ T5870] hsr_slave_0: entered promiscuous mode [ 77.700303][ T5870] hsr_slave_1: entered promiscuous mode [ 77.707176][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 77.712905][ T5870] Cannot create hsr debugfs directory [ 77.740809][ T5876] hsr_slave_0: entered promiscuous mode [ 77.747264][ T5876] hsr_slave_1: entered promiscuous mode [ 77.753539][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 77.759395][ T5876] Cannot create hsr debugfs directory [ 77.773083][ T5869] hsr_slave_0: entered promiscuous mode [ 77.780697][ T5869] hsr_slave_1: entered promiscuous mode [ 77.787341][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 77.793068][ T5869] Cannot create hsr debugfs directory [ 78.244510][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.257646][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.270752][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.291235][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.335194][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.347341][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.369955][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.382582][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.437406][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.457298][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.474773][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.496307][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.586938][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.599426][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.611003][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.633844][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.729454][ T5876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.742035][ T5876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.768055][ T5876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.778722][ T5876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.824550][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.898752][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.908038][ T5879] Bluetooth: hci0: command tx timeout [ 78.919164][ T5879] Bluetooth: hci1: command tx timeout [ 78.930348][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.970043][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.977358][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.993902][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.030791][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.059476][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.066238][ T5879] Bluetooth: hci4: command tx timeout [ 79.066634][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.081363][ T5879] Bluetooth: hci3: command tx timeout [ 79.081374][ T5868] Bluetooth: hci2: command tx timeout [ 79.084004][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.099335][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.127303][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.134477][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.147757][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.192764][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.200028][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.237149][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.260827][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.267961][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.309646][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.358241][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.406728][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.413889][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.434466][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.471339][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.501285][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.508461][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.544488][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.551719][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.643956][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.651148][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.892030][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.074347][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.100040][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.129610][ T5865] veth0_vlan: entered promiscuous mode [ 80.162292][ T5865] veth1_vlan: entered promiscuous mode [ 80.251755][ T5869] veth0_vlan: entered promiscuous mode [ 80.314299][ T5869] veth1_vlan: entered promiscuous mode [ 80.361644][ T5865] veth0_macvtap: entered promiscuous mode [ 80.379817][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.399576][ T5865] veth1_macvtap: entered promiscuous mode [ 80.412169][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.445179][ T5869] veth0_macvtap: entered promiscuous mode [ 80.489599][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.507816][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.530721][ T5869] veth1_macvtap: entered promiscuous mode [ 80.571442][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.583469][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.627473][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.637410][ T5861] veth0_vlan: entered promiscuous mode [ 80.648335][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.664484][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.683759][ T5876] veth0_vlan: entered promiscuous mode [ 80.700359][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.741135][ T5861] veth1_vlan: entered promiscuous mode [ 80.763564][ T5876] veth1_vlan: entered promiscuous mode [ 80.771717][ T3008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.780756][ T3008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.811982][ T3008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.822061][ T3008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.874905][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.885951][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.904947][ T5870] veth0_vlan: entered promiscuous mode [ 80.941311][ T5861] veth0_macvtap: entered promiscuous mode [ 80.951783][ T5861] veth1_macvtap: entered promiscuous mode [ 80.962406][ T5870] veth1_vlan: entered promiscuous mode [ 80.996512][ T5879] Bluetooth: hci1: command tx timeout [ 80.997057][ T5868] Bluetooth: hci0: command tx timeout [ 81.017257][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.030438][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.042783][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.061437][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.098783][ T5870] veth0_macvtap: entered promiscuous mode [ 81.121718][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.143500][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.151694][ T5868] Bluetooth: hci3: command tx timeout [ 81.151724][ T5864] Bluetooth: hci2: command tx timeout [ 81.162898][ T5879] Bluetooth: hci4: command tx timeout [ 81.174902][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.184506][ T5870] veth1_macvtap: entered promiscuous mode [ 81.204542][ T5876] veth0_macvtap: entered promiscuous mode [ 81.216819][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.224890][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.240939][ T5876] veth1_macvtap: entered promiscuous mode [ 81.269431][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.293523][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.325133][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.334371][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.352548][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384486][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.394894][ T5980] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 81.403308][ T5979] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 81.488944][ T2984] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.507359][ T2984] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.530822][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.560648][ T2984] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.582035][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.740936][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.747035][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.768847][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.823140][ T5992] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.836288][ T5990] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 81.880248][ T3008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.907332][ T3008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.951576][ T5990] 8021q: VLANs not supported on ip6_vti0 [ 81.976335][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.984184][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.997036][ T3614] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.006608][ T3614] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.064348][ T5996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'. [ 82.073664][ T5996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'. [ 82.187727][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.208460][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.367231][ T6007] Zero length message leads to an empty skb [ 82.369550][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.387469][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.423660][ T3614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.474252][ T3614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.598230][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 82.615595][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.623429][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.784885][ T6025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'. [ 82.860342][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15'. [ 83.051568][ T6037] tipc: Enabling of bearer rejected, failed to enable media [ 83.073111][ T5864] Bluetooth: hci1: command tx timeout [ 83.078737][ T5879] Bluetooth: hci0: command tx timeout [ 83.226002][ T5864] Bluetooth: hci4: command tx timeout [ 83.226064][ T5868] Bluetooth: hci2: command tx timeout [ 83.231517][ T5879] Bluetooth: hci3: command tx timeout [ 83.278740][ T6046] netlink: 'syz.3.4': attribute type 32 has an invalid length. [ 83.319427][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.336022][ T6054] veth0: entered promiscuous mode [ 83.342088][ T6053] netlink: 328 bytes leftover after parsing attributes in process `syz.4.21'. [ 83.470626][ T6046] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 83.545009][ T6054] veth0: left promiscuous mode [ 83.591963][ T6068] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.619060][ T6067] tipc: Started in network mode [ 83.621181][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'. [ 83.634346][ T6067] tipc: Node identity 768aafa29a49, cluster identity 4711 [ 83.643993][ T6067] tipc: Enabled bearer , priority 0 [ 83.706356][ T6058] tipc: Resetting bearer [ 83.735218][ T6076] netlink: 96 bytes leftover after parsing attributes in process `syz.4.28'. [ 83.847889][ T6057] tipc: Disabling bearer [ 83.867507][ T6085] netlink: 'syz.4.30': attribute type 1 has an invalid length. [ 84.041719][ T6096] netlink: 40 bytes leftover after parsing attributes in process `syz.4.32'. [ 84.099028][ T6096] ieee802154 phy0 wpan0: encryption failed: -90 [ 84.164403][ T6096] trusted_key: syz.4.32 sent an empty control message without MSG_MORE. [ 84.467887][ T6114] tipc: Failed to obtain node identity [ 84.475756][ T6114] tipc: Enabling of bearer rejected, failed to enable media [ 84.650907][ T6128] syz.2.39 uses obsolete (PF_INET,SOCK_PACKET) [ 85.425504][ T6161] nbd: must specify a size in bytes for the device [ 85.523244][ T30] audit: type=1804 audit(1755319066.393:2): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.48" name="/newroot/10/memory.events" dev="tmpfs" ino=70 res=1 errno=0 [ 85.570813][ T30] audit: type=1800 audit(1755319066.393:3): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.48" name="memory.events" dev="tmpfs" ino=70 res=0 errno=0 [ 85.827664][ T6189] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 85.834891][ T6189] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 86.089512][ T6196] warning: `syz.4.57' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.672320][ T43] cfg80211: failed to load regulatory.db [ 86.731969][ T6228] bond1 (unregistering): Released all slaves [ 86.821829][ T6235] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 87.014323][ T6244] netlink: 'syz.0.73': attribute type 10 has an invalid length. [ 87.049668][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.068028][ T6244] bridge_slave_1: left allmulticast mode [ 87.073692][ T6244] bridge_slave_1: left promiscuous mode [ 87.081271][ T6243] nbd0: detected capacity change from 0 to 127 [ 87.088728][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.114559][ T6244] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 87.126761][ T5879] block nbd0: Receive control failed (result -104) [ 87.500284][ T6264] __nla_validate_parse: 9 callbacks suppressed [ 87.500302][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 87.603969][ T6266] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 87.617058][ T6270] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 87.639739][ T6266] netlink: 224 bytes leftover after parsing attributes in process `syz.0.82'. [ 87.670677][ T6266] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 87.798803][ T6270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.811883][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 87.856912][ C0] vcan0: j1939_session_tx_dat: 0xffff88805a94ac00: queue data error: -100 [ 87.865953][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 87.873591][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 87.881282][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.889154][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.897177][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.905009][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.912956][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.920804][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.928751][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.936590][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.944500][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.952370][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.960309][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.968169][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.976105][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.983909][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.991862][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.999714][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.007675][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.015523][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.023425][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.031289][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.039218][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.047085][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.055081][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.062947][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.070892][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.078794][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.086745][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.094559][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.102519][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.110750][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.118717][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.126576][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.134492][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.142361][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.150296][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.158164][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.166093][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.173905][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.181852][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.189691][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.197740][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.205588][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.213494][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.221343][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.229281][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.237122][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.242617][ T6290] netlink: 192 bytes leftover after parsing attributes in process `syz.1.86'. [ 88.245005][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.261749][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.433577][ T6286] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 88.435257][ T6289] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 88.519256][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.528076][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.983993][ T6333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'. [ 89.184911][ T6342] netlink: 'syz.1.93': attribute type 12 has an invalid length. [ 89.192753][ T6342] netlink: 'syz.1.93': attribute type 29 has an invalid length. [ 89.200679][ T6342] netlink: 148 bytes leftover after parsing attributes in process `syz.1.93'. [ 89.210724][ T6342] netlink: 59 bytes leftover after parsing attributes in process `syz.1.93'. [ 89.592463][ T6368] netlink: 'syz.1.94': attribute type 21 has an invalid length. [ 89.669732][ T6368] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.702599][ T6368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.710045][ T6368] IPv6: NLM_F_CREATE should be set when creating new route [ 89.717361][ T6368] IPv6: NLM_F_CREATE should be set when creating new route [ 89.724683][ T6368] IPv6: NLM_F_CREATE should be set when creating new route [ 89.791867][ T6380] nbd: couldn't find a device at index -373156329 [ 89.822714][ T6378] netlink: 76 bytes leftover after parsing attributes in process `syz.4.96'. [ 90.079713][ T6397] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 90.132118][ T6388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.321971][ T6408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.105'. [ 90.360530][ T6415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.473021][ T6416] gre1: entered promiscuous mode [ 90.553514][ T6416] gre1: entered allmulticast mode [ 90.603077][ T6429] Bluetooth: MGMT ver 1.23 [ 90.789994][ T6439] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 90.982298][ T6454] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 91.095726][ T6454] tipc: Started in network mode [ 91.103320][ T6454] tipc: Node identity fa49a72db9e2, cluster identity 4711 [ 91.134646][ T6454] tipc: Enabled bearer , priority 0 [ 91.154869][ T6458] syzkaller0: entered promiscuous mode [ 91.184558][ T6464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.120'. [ 91.199693][ T6458] syzkaller0: entered allmulticast mode [ 91.308127][ T6454] tipc: Resetting bearer [ 91.421645][ T6453] tipc: Resetting bearer [ 91.452986][ T6453] tipc: Disabling bearer [ 91.627403][ T6493] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 91.645062][ T6493] netlink: 'syz.0.127': attribute type 6 has an invalid length. [ 91.958122][ T6505] team0: Device wireguard0 is of different type [ 92.151340][ T6525] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.559623][ T6542] __nla_validate_parse: 9 callbacks suppressed [ 92.559639][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 92.726728][ T6552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.146'. [ 92.749197][ T6553] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.147'. [ 92.780307][ T6556] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 92.981272][ T6558] netlink: 'syz.3.148': attribute type 83 has an invalid length. [ 93.031921][ T6574] netlink: 'syz.4.151': attribute type 2 has an invalid length. [ 93.089014][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 93.114857][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 93.136221][ T6578] netlink: 'syz.1.152': attribute type 2 has an invalid length. [ 93.175476][ T6578] netlink: 119 bytes leftover after parsing attributes in process `syz.1.152'. [ 93.347376][ T6588] netlink: 64 bytes leftover after parsing attributes in process `syz.3.156'. [ 93.394507][ T6601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.155'. [ 93.406287][ T6598] netlink: 64 bytes leftover after parsing attributes in process `syz.3.156'. [ 93.437379][ T6603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.595132][ T6611] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.161'. [ 93.767059][ T6622] netlink: zone id is out of range [ 93.772208][ T6622] netlink: zone id is out of range [ 93.781696][ T6622] netlink: get zone limit has 8 unknown bytes [ 93.866961][ T6625] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 93.988757][ T6627] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 94.177906][ T6627] bond1 (unregistering): Released all slaves [ 94.289771][ T6645] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 94.377273][ T6650] netlink: 'syz.0.175': attribute type 1 has an invalid length. [ 95.139916][ T6681] syzkaller1: entered promiscuous mode [ 95.163178][ T6681] syzkaller1: entered allmulticast mode [ 95.288060][ T6701] netlink: 'syz.1.191': attribute type 24 has an invalid length. [ 96.206920][ T6738] netem: change failed [ 96.414821][ T6759] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 96.714223][ T6771] openvswitch: netlink: Key type 3078 is out of range max 32 [ 97.191191][ T6792] netlink: 'syz.1.219': attribute type 1 has an invalid length. [ 97.240454][ T6792] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 97.516779][ T6808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.615370][ T6817] __nla_validate_parse: 19 callbacks suppressed [ 97.615388][ T6817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'. [ 97.736690][ T6820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'. [ 97.812772][ T6820] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 97.846102][ T6832] netlink: 'syz.2.230': attribute type 1 has an invalid length. [ 97.892186][ T6836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.231'. [ 97.906522][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 98.102373][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.233'. [ 98.179867][ T6858] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.236'. [ 98.466361][ T6859] netlink: 11 bytes leftover after parsing attributes in process `syz.1.235'. [ 98.480581][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 98.699422][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.240'. [ 98.864031][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.243'. [ 99.435762][ T6912] tipc: Started in network mode [ 99.440703][ T6912] tipc: Node identity 6210c2e0b246, cluster identity 4711 [ 99.475821][ T6912] tipc: Enabled bearer , priority 0 [ 99.576232][ T6920] syzkaller0: entered promiscuous mode [ 99.581940][ T6920] syzkaller0: entered allmulticast mode [ 99.659175][ T6912] tipc: Resetting bearer [ 99.693495][ T6910] tipc: Resetting bearer [ 99.777396][ T6910] tipc: Disabling bearer [ 99.836554][ T6934] sctp: Trying to GSO but underlying device doesn't support it. [ 100.122015][ T6955] openvswitch: netlink: Key type 266 is out of range max 32 [ 100.148925][ T6958] netlink: 'syz.3.265': attribute type 1 has an invalid length. [ 100.225525][ T6962] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 100.414865][ T6973] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 100.695696][ T6986] netlink: 'syz.3.274': attribute type 1 has an invalid length. [ 100.718121][ T6986] netlink: 'syz.3.274': attribute type 1 has an invalid length. [ 100.977410][ T6993] tipc: Started in network mode [ 100.982310][ T6993] tipc: Node identity 7accedd21f9c, cluster identity 4711 [ 100.997911][ T6993] tipc: Enabled bearer , priority 0 [ 101.162500][ T6991] tipc: Disabling bearer [ 101.259815][ T7018] netlink: 'syz.3.283': attribute type 11 has an invalid length. [ 101.472161][ T7025] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 101.574186][ T7032] netlink: 'syz.3.287': attribute type 3 has an invalid length. [ 101.665484][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.263054][ T7071] netlink: 'syz.1.296': attribute type 33 has an invalid length. [ 102.854263][ T7090] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 102.903775][ T7095] __nla_validate_parse: 16 callbacks suppressed [ 102.903791][ T7095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.306'. [ 102.923780][ T7090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.925962][ T7095] openvswitch: netlink: Flow key attr not present in new flow. [ 103.082623][ T7097] bond2: (slave ip6erspan0): making interface the new active one [ 103.089708][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 103.115173][ T7097] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 103.544270][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 103.944268][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 104.330774][ T7135] netlink: 32 bytes leftover after parsing attributes in process `syz.3.315'. [ 104.534033][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.542689][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.692688][ T7133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.710367][ T7133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.974183][ T7152] tipc: Started in network mode [ 105.007054][ T7152] tipc: Node identity 7a255456a167, cluster identity 4711 [ 105.033136][ T7152] tipc: Enabled bearer , priority 0 [ 105.088779][ T7154] syzkaller0: entered promiscuous mode [ 105.103411][ T7154] syzkaller0: entered allmulticast mode [ 105.155569][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.192354][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.241753][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.268381][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.288181][ T7169] tipc: Resetting bearer [ 105.342954][ T7141] tipc: Resetting bearer [ 105.370711][ T7141] tipc: Disabling bearer [ 105.676668][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 106.959314][ T7249] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.159926][ T7260] netlink: 'syz.3.347': attribute type 13 has an invalid length. [ 107.169837][ T7262] vxcan1: tx address claim with dest, not broadcast [ 107.174075][ T7260] netlink: 'syz.3.347': attribute type 58 has an invalid length. [ 107.211845][ T7260] netlink: 152 bytes leftover after parsing attributes in process `syz.3.347'. [ 107.314447][ T7266] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 107.378146][ T7266] netlink: 'syz.0.348': attribute type 3 has an invalid length. [ 107.412242][ T7266] netlink: 'syz.0.348': attribute type 235 has an invalid length. [ 107.901969][ T7283] can: request_module (can-proto-0) failed. [ 107.956298][ T7287] bridge1: entered promiscuous mode [ 107.961540][ T7287] bridge1: entered allmulticast mode [ 108.193792][ T7289] dvmrp1: entered allmulticast mode [ 108.341381][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 108.381427][ T7299] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 108.420507][ T7299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.501307][ T7306] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.360'. [ 108.542821][ T7306] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.360'. [ 108.708199][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 108.939139][ T7322] netlink: 'syz.2.366': attribute type 2 has an invalid length. [ 108.963873][ T7319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.364'. [ 109.345519][ T7340] netlink: 'syz.4.369': attribute type 12 has an invalid length. [ 109.364435][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 109.496191][ T7345] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.372'. [ 109.797126][ T7356] netlink: 'syz.3.375': attribute type 10 has an invalid length. [ 109.808248][ T7357] netlink: 32 bytes leftover after parsing attributes in process `syz.0.376'. [ 109.833782][ T7356] bridge_slave_1: left allmulticast mode [ 109.855381][ T7356] bridge_slave_1: left promiscuous mode [ 109.861162][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.978979][ T7356] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 110.059842][ T7362] netlink: 'syz.0.377': attribute type 21 has an invalid length. [ 110.073485][ T7362] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.223222][ T7369] netlink: 36 bytes leftover after parsing attributes in process `syz.3.379'. [ 110.694147][ T7391] sctp: [Deprecated]: syz.4.385 (pid 7391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.694147][ T7391] Use struct sctp_sack_info instead [ 111.212943][ T7408] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 111.236120][ T7408] netlink: 224 bytes leftover after parsing attributes in process `syz.3.389'. [ 111.391913][ T7414] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 111.905092][ T7438] syz_tun: entered promiscuous mode [ 111.976694][ T7438] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 112.541324][ T7469] lo speed is unknown, defaulting to 1000 [ 112.556304][ T7469] lo speed is unknown, defaulting to 1000 [ 112.598848][ T7469] lo speed is unknown, defaulting to 1000 [ 112.624397][ T7469] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.641518][ T7469] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 112.649713][ T7476] validate_nla: 2 callbacks suppressed [ 112.649728][ T7476] netlink: 'syz.0.412': attribute type 1 has an invalid length. [ 112.824641][ T7469] lo speed is unknown, defaulting to 1000 [ 112.842609][ T7469] lo speed is unknown, defaulting to 1000 [ 112.870253][ T7469] lo speed is unknown, defaulting to 1000 [ 112.900930][ T7469] lo speed is unknown, defaulting to 1000 [ 112.936375][ T7469] lo speed is unknown, defaulting to 1000 [ 113.505165][ T7528] wireguard: wg1: Could not create IPv4 socket [ 113.662460][ T7534] __nla_validate_parse: 3 callbacks suppressed [ 113.662477][ T7534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.425'. [ 113.663554][ T7524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.424'. [ 113.747785][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 113.943647][ T7545] veth3: entered allmulticast mode [ 113.975057][ T7547] veth5: entered allmulticast mode [ 113.990307][ T7543] netlink: 'syz.2.429': attribute type 1 has an invalid length. [ 114.001806][ T7543] netlink: 220 bytes leftover after parsing attributes in process `syz.2.429'. [ 114.014148][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 114.032373][ T7543] tipc: Enabling of bearer rejected, failed to enable media [ 114.468816][ T7571] netlink: 'syz.1.435': attribute type 1 has an invalid length. [ 114.478611][ T7571] netlink: 'syz.1.435': attribute type 11 has an invalid length. [ 114.492417][ T7571] netlink: 220 bytes leftover after parsing attributes in process `syz.1.435'. [ 114.760380][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'. [ 114.798305][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.441'. [ 114.828039][ T7588] sctp: [Deprecated]: syz.2.442 (pid 7588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.828039][ T7588] Use struct sctp_sack_info instead [ 114.874445][ T7582] tipc: Enabling of bearer rejected, failed to enable media [ 114.936343][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'. [ 115.045198][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 115.063715][ T7600] netlink: 'syz.4.441': attribute type 10 has an invalid length. [ 115.173574][ T7604] netlink: 'syz.3.446': attribute type 5 has an invalid length. [ 115.225570][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 115.420655][ T7614] netem: change failed [ 115.480970][ T7610] 8021q: VLANs not supported on syzkaller0 [ 115.602536][ T7626] netlink: 'syz.3.453': attribute type 21 has an invalid length. [ 115.988815][ T7642] netlink: 'syz.3.458': attribute type 39 has an invalid length. [ 116.131474][ T7644] tipc: Enabled bearer , priority 0 [ 116.156015][ T7644] syzkaller0: entered promiscuous mode [ 116.169616][ T7644] syzkaller0: entered allmulticast mode [ 116.303893][ T7654] tipc: Resetting bearer [ 116.346789][ T7643] tipc: Resetting bearer [ 116.378839][ T7643] tipc: Disabling bearer [ 116.401717][ T7658] tipc: Enabled bearer , priority 0 [ 116.412169][ T7657] syzkaller0: entered promiscuous mode [ 116.454342][ T7657] syzkaller0: entered allmulticast mode [ 116.494796][ T7657] tipc: Resetting bearer [ 116.519123][ T7656] tipc: Resetting bearer [ 116.561412][ T7656] tipc: Disabling bearer [ 116.597320][ T7662] veth3: entered allmulticast mode [ 116.783751][ T7676] veth0: entered promiscuous mode [ 116.859773][ T7679] tipc: Enabled bearer , priority 0 [ 116.868943][ T7679] syzkaller0: entered promiscuous mode [ 116.874429][ T7679] syzkaller0: entered allmulticast mode [ 116.927867][ T7679] tipc: Resetting bearer [ 116.953383][ T7683] tipc: Enabling of bearer rejected, failed to enable media [ 116.962333][ T7678] tipc: Resetting bearer [ 116.988929][ T7678] tipc: Disabling bearer [ 117.390412][ T25] block nbd0: Possible stuck request ffff888024f75080: control (read@0,1024B). Runtime 30 seconds [ 117.402254][ T25] block nbd0: Possible stuck request ffff888024f75240: control (read@1024,1024B). Runtime 30 seconds [ 117.413686][ T25] block nbd0: Possible stuck request ffff888024f75400: control (read@2048,1024B). Runtime 30 seconds [ 117.427355][ T25] block nbd0: Possible stuck request ffff888024f755c0: control (read@3072,1024B). Runtime 30 seconds [ 117.432154][ T7709] rose0: entered promiscuous mode [ 117.465800][ T7673] veth0: left promiscuous mode [ 117.601532][ T7719] bridge0: port 2(syz_tun) entered blocking state [ 117.610666][ T7720] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 117.632059][ T7719] bridge0: port 2(syz_tun) entered disabled state [ 117.666967][ T7719] syz_tun: entered allmulticast mode [ 117.692514][ T7719] syz_tun: entered promiscuous mode [ 117.769822][ T7719] bridge0: port 2(syz_tun) entered blocking state [ 117.777164][ T7719] bridge0: port 2(syz_tun) entered forwarding state [ 118.002338][ T7739] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 118.030245][ T7739] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 119.203000][ T7739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.229361][ T7746] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.241227][ T7746] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 119.253339][ T7746] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 119.309382][ T7747] veth7: entered promiscuous mode [ 119.324188][ T7747] bond3: (slave veth7): Enslaving as an active interface with a down link [ 119.349747][ T7750] vlan2: entered allmulticast mode [ 119.360109][ T7750] bond3: entered allmulticast mode [ 119.507205][ T7775] __nla_validate_parse: 7 callbacks suppressed [ 119.507222][ T7775] netlink: 108 bytes leftover after parsing attributes in process `syz.2.498'. [ 119.566628][ T7775] netlink: 108 bytes leftover after parsing attributes in process `syz.2.498'. [ 119.629081][ T7775] netlink: 84 bytes leftover after parsing attributes in process `syz.2.498'. [ 119.653289][ T7778] lo: entered allmulticast mode [ 119.664136][ T7778] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 120.092126][ T7803] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 120.121399][ T7803] netlink: 32 bytes leftover after parsing attributes in process `syz.3.507'. [ 120.128998][ T7807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.509'. [ 120.448703][ T7822] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.515'. [ 120.459819][ T7823] lo: entered promiscuous mode [ 120.467294][ T7823] tunl0: entered promiscuous mode [ 120.486276][ T7823] gre0: entered promiscuous mode [ 120.564099][ T7823] gretap0: entered promiscuous mode [ 120.611187][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 120.748275][ T7823] erspan0: entered promiscuous mode [ 120.763197][ T7823] ip_vti0: entered promiscuous mode [ 121.234853][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 121.379136][ T7869] netlink: 'syz.3.525': attribute type 2 has an invalid length. [ 121.605896][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 121.629486][ T7878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.761742][ T7883] pimreg: entered allmulticast mode [ 121.791829][ T7890] netlink: 'syz.4.533': attribute type 3 has an invalid length. [ 121.800570][ T7890] netlink: 766 bytes leftover after parsing attributes in process `syz.4.533'. [ 121.821729][ T7886] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 121.873995][ T7893] tipc: Enabled bearer , priority 0 [ 121.896675][ T7893] syzkaller0: entered promiscuous mode [ 121.902169][ T7893] syzkaller0: entered allmulticast mode [ 121.964747][ T7893] tipc: Resetting bearer [ 121.991386][ T7902] tipc: Enabling of bearer rejected, already enabled [ 122.094293][ T7902] tipc: Resetting bearer [ 122.138813][ T7902] tipc: Disabling bearer [ 122.194738][ T7911] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 122.345131][ T7918] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 122.382512][ T7918] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 122.481610][ T7920] gretap1: entered promiscuous mode [ 122.496624][ T7920] bond2: (slave gretap1): making interface the new active one [ 122.504966][ T7920] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 122.546548][ T7911] macvlan2: entered promiscuous mode [ 122.568392][ T7911] macvlan2: entered allmulticast mode [ 122.590987][ T7911] bond2: entered promiscuous mode [ 122.599136][ T7911] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 122.603703][ T7935] netlink: 'syz.0.546': attribute type 39 has an invalid length. [ 122.616925][ T7911] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 122.629641][ T7911] bond2: left promiscuous mode [ 122.963180][ T7956] netlink: 'syz.1.552': attribute type 13 has an invalid length. [ 123.026007][ T7957] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.033474][ T7955] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.078050][ T7956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.133174][ T7968] delete_channel: no stack [ 123.289827][ T7977] GUP no longer grows the stack in syz.4.556 (7977): 200000003000-20000000a000 (200000001000) [ 123.300596][ T7977] CPU: 0 UID: 0 PID: 7977 Comm: syz.4.556 Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 PREEMPT(full) [ 123.300621][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.300637][ T7977] Call Trace: [ 123.300645][ T7977] [ 123.300653][ T7977] dump_stack_lvl+0x189/0x250 [ 123.300689][ T7977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.300711][ T7977] ? __pfx__printk+0x10/0x10 [ 123.300731][ T7977] ? find_vma+0xe7/0x160 [ 123.300752][ T7977] ? __lock_acquire+0xab9/0xd20 [ 123.300786][ T7977] __get_user_pages+0x24d0/0x2ce0 [ 123.300809][ T7977] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 123.300859][ T7977] ? rcu_is_watching+0x15/0xb0 [ 123.300883][ T7977] __gup_longterm_locked+0xde9/0x1660 [ 123.300914][ T7977] ? sanity_check_pinned_pages+0x123a/0x1300 [ 123.300943][ T7977] gup_fast_fallback+0x1e6a/0x2010 [ 123.300993][ T7977] ? __pfx_gup_fast_fallback+0x10/0x10 [ 123.301012][ T7977] ? stack_trace_save+0x9c/0xe0 [ 123.301031][ T7977] ? __pfx_stack_trace_save+0x10/0x10 [ 123.301061][ T7977] ? pin_user_pages_fast+0x4d/0xb0 [ 123.301084][ T7977] iov_iter_extract_pages+0x35a/0x5e0 [ 123.301114][ T7977] extract_iter_to_sg+0xe46/0x24e0 [ 123.301157][ T7977] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 123.301200][ T7977] ? __asan_memset+0x22/0x50 [ 123.301221][ T7977] af_alg_get_rsgl+0x436/0x810 [ 123.301257][ T7977] aead_recvmsg+0x4cc/0x13f0 [ 123.301291][ T7977] ? rcu_is_watching+0x15/0xb0 [ 123.301316][ T7977] ? __pfx_aead_recvmsg+0x10/0x10 [ 123.301341][ T7977] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 123.301361][ T7977] ? __pfx_aead_recvmsg+0x10/0x10 [ 123.301383][ T7977] sock_recvmsg_nosec+0x186/0x1c0 [ 123.301408][ T7977] ____sys_recvmsg+0x3aa/0x460 [ 123.301434][ T7977] ? __pfx_____sys_recvmsg+0x10/0x10 [ 123.301468][ T7977] ? import_iovec+0x74/0xa0 [ 123.301492][ T7977] ___sys_recvmsg+0x1b5/0x510 [ 123.301530][ T7977] ? __pfx____sys_recvmsg+0x10/0x10 [ 123.301582][ T7977] ? __might_fault+0xb0/0x130 [ 123.301610][ T7977] do_recvmmsg+0x307/0x770 [ 123.301638][ T7977] ? __pfx_do_recvmmsg+0x10/0x10 [ 123.301654][ T7977] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 123.301692][ T7977] ? __pfx_do_futex+0x10/0x10 [ 123.301731][ T7977] __x64_sys_recvmmsg+0x190/0x240 [ 123.301753][ T7977] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 123.301770][ T7977] ? rcu_is_watching+0x15/0xb0 [ 123.301792][ T7977] ? do_syscall_64+0xbe/0x3b0 [ 123.301818][ T7977] do_syscall_64+0xfa/0x3b0 [ 123.301840][ T7977] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.301861][ T7977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.301878][ T7977] ? clear_bhb_loop+0x60/0xb0 [ 123.301899][ T7977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.301916][ T7977] RIP: 0033:0x7efe9bd8ebe9 [ 123.301941][ T7977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.301956][ T7977] RSP: 002b:00007efe9cb74038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 123.301980][ T7977] RAX: ffffffffffffffda RBX: 00007efe9bfb5fa0 RCX: 00007efe9bd8ebe9 [ 123.301993][ T7977] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000d [ 123.302005][ T7977] RBP: 00007efe9be11e19 R08: 0000000000000000 R09: 0000000000000000 [ 123.302016][ T7977] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 123.302026][ T7977] R13: 00007efe9bfb6038 R14: 00007efe9bfb5fa0 R15: 00007ffd8b0cdd58 [ 123.302054][ T7977] [ 123.644161][ T7978] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 123.670561][ T7983] team0: No ports can be present during mode change [ 124.237893][ T8013] netlink: 'syz.2.569': attribute type 1 has an invalid length. [ 124.344633][ T8013] netlink: 'syz.2.569': attribute type 1 has an invalid length. [ 124.353935][ T8013] netlink: 'syz.2.569': attribute type 1 has an invalid length. [ 124.361819][ T8013] netlink: 'syz.2.569': attribute type 2 has an invalid length. [ 124.369822][ T8013] netlink: 'syz.2.569': attribute type 2 has an invalid length. [ 124.395905][ T8021] bond1: (slave bridge2): making interface the new active one [ 124.446899][ T8021] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 124.589132][ T8031] tipc: Enabled bearer , priority 0 [ 124.629507][ T8031] syzkaller0: entered promiscuous mode [ 124.635732][ T8036] __nla_validate_parse: 5 callbacks suppressed [ 124.635747][ T8036] netlink: 104 bytes leftover after parsing attributes in process `syz.3.576'. [ 124.662043][ T8031] syzkaller0: entered allmulticast mode [ 124.827593][ T8031] tipc: Resetting bearer [ 124.840695][ T8028] tipc: Resetting bearer [ 124.940055][ T8028] tipc: Disabling bearer [ 124.959285][ T8048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.579'. [ 124.986384][ T5879] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.043569][ T8050] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.058756][ T8050] team0: Failed to send port change of device bond3 via netlink (err -105) [ 125.070502][ T8050] team0: Failed to send options change via netlink (err -105) [ 125.080772][ T8050] team0: Port device bond3 added [ 125.090983][ T8051] 8021q: VLANs not supported on ip_vti0 [ 125.138746][ T8048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.322920][ T8066] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.430590][ T8076] netlink: 'syz.3.588': attribute type 1 has an invalid length. [ 125.563168][ T8084] netlink: 'syz.0.591': attribute type 10 has an invalid length. [ 125.612175][ T8084] bridge0: port 2(syz_tun) entered disabled state [ 125.649598][ T8084] syz_tun: left allmulticast mode [ 125.673584][ T8084] bridge0: port 2(syz_tun) entered disabled state [ 125.710826][ T8084] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 125.827681][ T8087] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.838642][ T8087] team0: Failed to send port change of device bond3 via netlink (err -105) [ 125.847830][ T8087] team0: Failed to send options change via netlink (err -105) [ 125.855386][ T8087] team0: Port device bond3 added [ 125.894646][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 125.916184][ T8110] netlink: 11 bytes leftover after parsing attributes in process `syz.3.594'. [ 125.936056][ T8090] smc: net device erspan0 applied user defined pnetid SYZ0 [ 125.936403][ T8110] netlink: 11 bytes leftover after parsing attributes in process `syz.3.594'. [ 126.178567][ T8108] rose0: left promiscuous mode [ 126.403951][ T8137] vxcan1: tx address claim with different name [ 126.473120][ T8142] tls_set_device_offload_rx: netdev not found [ 126.710665][ T8157] lo speed is unknown, defaulting to 1000 [ 126.934751][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.611'. [ 126.957570][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.611'. [ 126.996598][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 127.019922][ T8170] bridge0: port 3(vlan0) entered blocking state [ 127.027264][ T8170] bridge0: port 3(vlan0) entered disabled state [ 127.033774][ T8170] vlan0: entered allmulticast mode [ 127.038943][ T8170] bridge0: entered allmulticast mode [ 127.069252][ T5879] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.801663][ T8170] vlan0: left allmulticast mode [ 127.813603][ T8170] bridge0: left allmulticast mode [ 127.932993][ T8180] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 127.978530][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 128.001478][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'. [ 128.193920][ T8186] bond0: (slave rose0): Error: Device can not be enslaved while up [ 128.221908][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.258289][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.287889][ T6356] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.335023][ T6356] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.956228][ T8210] syz.4.623 (8210) used greatest stack depth: 15352 bytes left [ 129.000491][ T8237] netlink: 'syz.1.625': attribute type 64 has an invalid length. [ 130.247996][ T8308] netlink: 'syz.2.642': attribute type 4 has an invalid length. [ 130.705507][ T8327] netlink: 'syz.3.647': attribute type 4 has an invalid length. [ 130.742747][ T8327] __nla_validate_parse: 4 callbacks suppressed [ 130.742764][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 130.801033][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.647'. [ 130.840606][ T8327] netlink: 'syz.3.647': attribute type 4 has an invalid length. [ 131.414190][ T8358] netlink: 'syz.0.653': attribute type 12 has an invalid length. [ 131.458098][ T8358] netlink: 'syz.0.653': attribute type 29 has an invalid length. [ 131.485493][ T8358] netlink: 148 bytes leftover after parsing attributes in process `syz.0.653'. [ 131.538984][ T8358] netlink: 59 bytes leftover after parsing attributes in process `syz.0.653'. [ 132.021229][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 132.052104][ T8385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.084080][ T8385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.111319][ T8385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.130378][ T8385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.423532][ T8403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.662'. [ 132.467322][ T8391] lo speed is unknown, defaulting to 1000 [ 132.708811][ T8411] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 132.753365][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.763369][ T8411] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 132.774849][ T8411] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 132.837316][ T8418] netlink: 48 bytes leftover after parsing attributes in process `syz.4.667'. [ 132.924945][ T8419] netlink: 256 bytes leftover after parsing attributes in process `syz.2.666'. [ 132.980242][ T8419] netlink: 'syz.2.666': attribute type 9 has an invalid length. [ 133.214743][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 133.249580][ T8429] netlink: 'syz.2.671': attribute type 10 has an invalid length. [ 133.260291][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.267525][ T8429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.275148][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.282353][ T8429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.317650][ T8429] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 133.768685][ T8443] Unsupported ieee802154 address type: 0 [ 134.017378][ T8452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.678'. [ 134.109762][ T8452] veth5: entered allmulticast mode [ 134.352692][ T8470] openvswitch: netlink: IPv6 tunnel dst address is zero [ 134.384182][ T8473] netlink: 'syz.4.685': attribute type 10 has an invalid length. [ 134.504531][ T8473] team0: Port device geneve0 added [ 134.596196][ T8486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.634645][ T8487] ipvlan0: entered promiscuous mode [ 134.650708][ T8487] bridge0: port 2(ipvlan0) entered blocking state [ 134.684287][ T8487] bridge0: port 2(ipvlan0) entered disabled state [ 134.702937][ T8487] ipvlan0: entered allmulticast mode [ 134.713130][ T8487] bridge0: entered allmulticast mode [ 134.724114][ T8487] ipvlan0: left allmulticast mode [ 134.730844][ T8487] bridge0: left allmulticast mode [ 135.271324][ T8511] netlink: 'syz.4.696': attribute type 5 has an invalid length. [ 135.494732][ T8526] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 135.634884][ T8528] netlink: 'syz.2.702': attribute type 13 has an invalid length. [ 135.709846][ T8532] netlink: 'syz.0.704': attribute type 39 has an invalid length. [ 135.816011][ T8528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.864626][ T8532] bond0: (slave syz_tun): Releasing backup interface [ 135.927102][ T8251] Set syz1 is full, maxelem 65536 reached [ 136.002847][ T8540] netlink: 'syz.1.706': attribute type 39 has an invalid length. [ 136.095767][ T8554] __nla_validate_parse: 16 callbacks suppressed [ 136.095784][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 136.206734][ T8544] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20001 [ 136.289604][ T8566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.712'. [ 136.531544][ T8583] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 136.543231][ T5934] IPVS: starting estimator thread 0... [ 136.657332][ T8585] IPVS: using max 29 ests per chain, 69600 per kthread [ 136.771375][ T8602] netlink: 'syz.3.724': attribute type 24 has an invalid length. [ 136.805621][ T8597] nbd1: detected capacity change from 0 to 127 [ 136.866685][ T8598] nbd2: detected capacity change from 0 to 127 [ 136.885024][ T5879] block nbd1: Receive control failed (result -32) [ 136.893454][ T5864] block nbd2: Receive control failed (result -32) [ 137.006482][ T8616] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 137.019548][ T8616] netlink: 56 bytes leftover after parsing attributes in process `syz.0.729'. [ 137.065581][ T8616] netlink: 56 bytes leftover after parsing attributes in process `syz.0.729'. [ 137.069433][ T8628] netlink: 'syz.4.730': attribute type 11 has an invalid length. [ 137.074485][ T8616] netlink: 56 bytes leftover after parsing attributes in process `syz.0.729'. [ 137.086075][ T8630] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 137.113873][ T8628] netlink: 'syz.4.730': attribute type 11 has an invalid length. [ 137.134314][ T8628] netlink: 'syz.4.730': attribute type 11 has an invalid length. [ 137.185886][ T8628] netlink: 'syz.4.730': attribute type 11 has an invalid length. [ 137.204318][ T8628] netlink: 'syz.4.730': attribute type 11 has an invalid length. [ 137.234832][ T8628] netlink: 'syz.4.730': attribute type 11 has an invalid length. [ 137.241855][ T8642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.734'. [ 137.250194][ T8628] netlink: 'syz.4.730': attribute type 11 has an invalid length. [ 137.274931][ T8628] netlink: 'syz.4.730': attribute type 11 has an invalid length. [ 137.288627][ T8628] netlink: 'syz.4.730': attribute type 11 has an invalid length. [ 137.308342][ T8628] netlink: 'syz.4.730': attribute type 11 has an invalid length. [ 137.514834][ T8661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.740'. [ 137.759411][ T8677] netlink: 'syz.1.747': attribute type 10 has an invalid length. [ 137.791981][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'. [ 137.821333][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.831554][ T8683] netlink: 48 bytes leftover after parsing attributes in process `syz.0.748'. [ 137.849214][ T8677] bridge_slave_1: left allmulticast mode [ 137.857574][ T8677] bridge_slave_1: left promiscuous mode [ 137.863529][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.980393][ T8677] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 137.993635][ T8699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.751'. [ 138.108455][ T8704] netlink: 'syz.3.754': attribute type 7 has an invalid length. [ 138.120189][ T8698] lo speed is unknown, defaulting to 1000 [ 138.156324][ T8704] : entered promiscuous mode [ 138.393102][ T8714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.407446][ T8729] netlink: 'syz.4.761': attribute type 24 has an invalid length. [ 138.657997][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.825221][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.852745][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.977625][ T8737] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 138.994423][ T8737] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 139.014882][ T8737] bridge1: left promiscuous mode [ 139.020177][ T8737] bridge1: left allmulticast mode [ 139.031468][ T8737] gretap1: left promiscuous mode [ 139.217576][ T3614] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.256069][ T3614] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.267688][ T3614] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.296483][ T3614] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.344231][ T3614] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.390033][ T3614] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.416891][ T3614] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.433683][ T3614] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.542894][ T8778] netlink: 'syz.3.772': attribute type 1 has an invalid length. [ 139.712976][ T8793] netlink: 'syz.1.775': attribute type 18 has an invalid length. [ 140.172509][ T8833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.258187][ T8823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.268965][ T5879] Bluetooth: hci4: command 0x0405 tx timeout [ 140.374137][ T8842] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 140.398514][ T8846] validate_nla: 2 callbacks suppressed [ 140.398531][ T8846] netlink: 'syz.1.792': attribute type 39 has an invalid length. [ 140.421874][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.430846][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.672326][ T8864] netlink: 'syz.2.795': attribute type 6 has an invalid length. [ 140.724450][ T8866] geneve2: entered promiscuous mode [ 140.867362][ T8874] netlink: 'syz.4.804': attribute type 21 has an invalid length. [ 140.887220][ T8874] netlink: 'syz.4.804': attribute type 21 has an invalid length. [ 140.928545][ T8878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.953284][ T8881] netlink: 'syz.0.805': attribute type 10 has an invalid length. [ 140.964218][ T8878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.011558][ T8878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.180049][ T8898] __nla_validate_parse: 90 callbacks suppressed [ 141.180062][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.814'. [ 141.263977][ T8902] netlink: 48 bytes leftover after parsing attributes in process `syz.4.815'. [ 141.277885][ T8902] netlink: 165 bytes leftover after parsing attributes in process `syz.4.815'. [ 141.374930][ T8907] pim6reg1: entered promiscuous mode [ 141.380446][ T8907] pim6reg1: entered allmulticast mode [ 141.632609][ T8921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.821'. [ 141.781601][ T8931] netlink: 'syz.3.824': attribute type 1 has an invalid length. [ 142.028604][ T8948] tipc: Enabling of bearer rejected, failed to enable media [ 142.042342][ T8949] netlink: 'syz.0.830': attribute type 10 has an invalid length. [ 142.049551][ T8958] netlink: 'syz.0.830': attribute type 10 has an invalid length. [ 142.082947][ T8946] bridge_slave_0: left allmulticast mode [ 142.102091][ T8948] netlink: 'syz.4.831': attribute type 10 has an invalid length. [ 142.114541][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.146048][ T8948] netlink: 40 bytes leftover after parsing attributes in process `syz.4.831'. [ 142.170219][ T8946] bond0: (slave bridge_slave_1): Releasing backup interface [ 142.182490][ T8946] bond0: (slave bond_slave_0): Releasing backup interface [ 142.212660][ T8946] bond0: (slave bond_slave_1): Releasing backup interface [ 142.244730][ T8946] team0: Port device team_slave_0 removed [ 142.272835][ T8946] team0: Port device team_slave_1 removed [ 142.289285][ T8946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.297514][ T8946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.312461][ T8946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.328906][ T8946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.345713][ T8946] bond2: (slave ip6erspan0): Releasing active interface [ 142.371430][ T8946] team0: Port device bond3 removed [ 142.631530][ T8973] team0 (unregistering): Port device team_slave_0 removed [ 142.661479][ T8973] team0 (unregistering): Port device team_slave_1 removed [ 142.844749][ T8998] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20004 [ 142.863476][ T8994] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.842'. [ 142.882424][ T8998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.844'. [ 142.899552][ T8998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.844'. [ 142.910943][ T9000] veth0: entered promiscuous mode [ 142.929763][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 142.963664][ T9003] netlink: 'syz.1.847': attribute type 83 has an invalid length. [ 142.984963][ T9000] veth0 (unregistering): left promiscuous mode [ 143.670867][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.858'. [ 143.778423][ T9056] veth1_to_bond: entered allmulticast mode [ 143.897956][ T9056] bond0: (slave bond_slave_1): Releasing backup interface [ 144.063057][ T9056] veth1_to_bond (unregistering): left allmulticast mode [ 144.239476][ T9105] vlan2: entered promiscuous mode [ 144.253004][ T9105] bridge0: entered promiscuous mode [ 144.776036][ T9128] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 144.839878][ T9128] bond4: entered promiscuous mode [ 144.845176][ T9128] bond4: entered allmulticast mode [ 144.853612][ T9128] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.879795][ T9135] Bluetooth: MGMT ver 1.23 [ 144.944362][ T9130] bond4: entered promiscuous mode [ 144.952165][ T9130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.074616][ T9145] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.091707][ T9145] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 145.111168][ T9145] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 145.138202][ T9145] bond4: (slave wireguard0): making interface the new active one [ 145.146653][ T9145] wireguard0: entered promiscuous mode [ 145.156593][ T9145] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 145.166842][ T9151] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 145.190929][ T9153] veth1_to_bond: entered allmulticast mode [ 145.223709][ T9158] veth1_to_bond: left allmulticast mode [ 145.330131][ T9164] lo: entered promiscuous mode [ 145.343805][ T9164] tunl0: entered promiscuous mode [ 145.351079][ T9164] gre0: entered promiscuous mode [ 145.358129][ T9164] gretap0: entered promiscuous mode [ 145.374235][ T9164] erspan0: entered promiscuous mode [ 145.384323][ T9164] ip_vti0: entered promiscuous mode [ 145.528391][ T9188] validate_nla: 37 callbacks suppressed [ 145.528408][ T9188] netlink: 'syz.1.887': attribute type 2 has an invalid length. [ 145.530241][ T9186] netlink: 'syz.1.887': attribute type 2 has an invalid length. [ 145.854362][ T9209] tipc: Enabled bearer , priority 0 [ 145.863048][ T9209] syzkaller0: entered promiscuous mode [ 145.869555][ T9209] syzkaller0: entered allmulticast mode [ 145.919455][ T9209] tipc: Resetting bearer [ 146.010494][ T9208] tipc: Resetting bearer [ 146.031575][ T9208] tipc: Disabling bearer [ 146.250103][ T9233] __nla_validate_parse: 41 callbacks suppressed [ 146.250121][ T9233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.903'. [ 146.266408][ T9221] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 146.455803][ T9237] netlink: 'syz.3.904': attribute type 1 has an invalid length. [ 146.509907][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 146.568873][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 146.596910][ T5935] IPVS: starting estimator thread 0... [ 146.668798][ T9244] netlink: 216 bytes leftover after parsing attributes in process `syz.1.906'. [ 146.705767][ T9234] IPVS: using max 26 ests per chain, 62400 per kthread [ 146.717595][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 146.731098][ T9247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.907'. [ 146.754709][ T9245] netlink: 216 bytes leftover after parsing attributes in process `syz.1.906'. [ 146.779516][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 146.821893][ T9250] netlink: 'syz.3.908': attribute type 7 has an invalid length. [ 146.869758][ T9250] netlink: 140 bytes leftover after parsing attributes in process `syz.3.908'. [ 146.924665][ T9256] sctp: [Deprecated]: syz.2.910 (pid 9256) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.924665][ T9256] Use struct sctp_sack_info instead [ 146.964644][ T9256] sctp: [Deprecated]: syz.2.910 (pid 9256) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.964644][ T9256] Use struct sctp_sack_info instead [ 147.029439][ T9258] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.911'. [ 147.343482][ T9267] netlink: 'syz.4.915': attribute type 29 has an invalid length. [ 147.359490][ T9267] netlink: 'syz.4.915': attribute type 29 has an invalid length. [ 147.372037][ T9267] netlink: 'syz.4.915': attribute type 29 has an invalid length. [ 147.396477][ T9267] netlink: 'syz.4.915': attribute type 29 has an invalid length. [ 147.420060][ T9269] netlink: zone id is out of range [ 147.440997][ T9269] netlink: zone id is out of range [ 147.448973][ T9269] netlink: get zone limit has 8 unknown bytes [ 147.470507][ T25] block nbd0: Possible stuck request ffff888024f75080: control (read@0,1024B). Runtime 60 seconds [ 147.482253][ T25] block nbd0: Possible stuck request ffff888024f75240: control (read@1024,1024B). Runtime 60 seconds [ 147.493271][ T25] block nbd0: Possible stuck request ffff888024f75400: control (read@2048,1024B). Runtime 60 seconds [ 147.504312][ T25] block nbd0: Possible stuck request ffff888024f755c0: control (read@3072,1024B). Runtime 60 seconds [ 148.677280][ T9333] bridge_slave_0: left allmulticast mode [ 148.697931][ T9333] bridge_slave_0: left promiscuous mode [ 148.712212][ T9333] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.424759][ T9364] tap0: tun_chr_ioctl cmd 1074025676 [ 149.453299][ T9364] tap0: owner set to 0 [ 149.465405][ T5864] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.570358][ T9376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.577659][ T9376] IPv6: NLM_F_CREATE should be set when creating new route [ 149.584956][ T9376] IPv6: NLM_F_CREATE should be set when creating new route [ 149.592224][ T9376] IPv6: NLM_F_CREATE should be set when creating new route [ 149.625415][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 149.636955][ T9383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.528369][ T24] hid (null): unknown global tag 0xe [ 150.535924][ T24] hid (null): nested delimiters [ 150.613297][ T9391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.640022][ T9391] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 151.092336][ T9450] syzkaller0: entered promiscuous mode [ 151.100617][ T9450] syzkaller0: entered allmulticast mode [ 151.361629][ T9459] __nla_validate_parse: 13 callbacks suppressed [ 151.361656][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'. [ 151.546223][ T5864] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.572122][ T9465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.974'. [ 151.904370][ T9486] netlink: 'syz.4.980': attribute type 2 has an invalid length. [ 151.922006][ T9486] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.980'. [ 151.943783][ T9486] nbd: must specify at least one socket [ 151.980203][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.983'. [ 152.070767][ T9494] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 152.099890][ T9496] netlink: 10 bytes leftover after parsing attributes in process `syz.1.985'. [ 152.106882][ T9494] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 152.131129][ T9494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.162149][ T9494] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 152.341978][ T24] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 152.349826][ T24] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 152.358519][ T24] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 152.568277][ T9519] sctp: [Deprecated]: syz.3.993 (pid 9519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.568277][ T9519] Use struct sctp_sack_info instead [ 152.784797][ T9538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.792093][ T9538] IPv6: NLM_F_CREATE should be set when creating new route [ 152.804997][ T9541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.849610][ T9539] tipc: Enabled bearer , priority 0 [ 152.852158][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.998'. [ 152.957294][ T9539] tipc: Disabling bearer [ 153.102071][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 153.118207][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1005'. [ 153.128115][ T9566] netlink: 'syz.4.1005': attribute type 7 has an invalid length. [ 153.174373][ T9573] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1003'. [ 153.225106][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1007'. [ 153.524652][ T9600] tipc: Enabled bearer , priority 0 [ 153.610329][ T9600] syzkaller0: entered promiscuous mode [ 153.618140][ T9600] syzkaller0: entered allmulticast mode [ 153.624425][ T9600] tipc: Resetting bearer [ 153.668371][ T9075] tipc: Resetting bearer [ 153.679876][ T9596] tipc: Resetting bearer [ 154.539060][ T5960] tipc: Node number set to 3495346912 [ 154.763992][ T9596] tipc: Disabling bearer [ 155.024845][ T9629] netlink: 'syz.3.1021': attribute type 1 has an invalid length. [ 155.024854][ T9630] netlink: 'syz.3.1021': attribute type 1 has an invalid length. [ 155.127101][ T9629] 8021q: adding VLAN 0 to HW filter on device bond6 [ 155.325875][ T9650] netlink: 'syz.3.1026': attribute type 10 has an invalid length. [ 155.849308][ T9697] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 156.423450][ T9742] __nla_validate_parse: 7 callbacks suppressed [ 156.423468][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 156.802578][ T9762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1058'. [ 156.902639][ T9769] !: renamed from bond_slave_0 (while UP) [ 156.964137][ T9083] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.981773][ T9083] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.004259][ T9075] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.157774][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'. [ 157.169786][ T9777] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1064'. [ 157.205504][ T9779] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1065'. [ 157.313999][ T9782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1064'. [ 157.359136][ T9784] nla_validate_range_unsigned: 23 callbacks suppressed [ 157.359155][ T9784] netlink: 'syz.1.1067': attribute type 11 has an invalid length. [ 157.400042][ T9784] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1067'. [ 157.885010][ T9811] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1071'. [ 157.980476][ T9805] syzkaller0: entered promiscuous mode [ 157.995561][ T9805] syzkaller0: entered allmulticast mode [ 158.288885][ T9829] netlink: 'syz.1.1078': attribute type 6 has an invalid length. [ 159.297238][ T9849] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 159.378636][ T9870] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1091'. [ 159.387888][ T9870] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 159.886319][ T9879] netlink: 'syz.2.1092': attribute type 4 has an invalid length. [ 160.056242][ T9887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1097'. [ 160.281764][ T9901] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 160.348323][ T9910] netlink: 'syz.0.1106': attribute type 2 has an invalid length. [ 160.589643][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 161.124075][ T9951] tipc: Enabling not permitted [ 161.138400][ T9951] tipc: Enabling of bearer rejected, failed to enable media [ 161.203963][ T9951] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 161.322521][ T9955] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 161.633429][ T9988] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 161.663370][ T9988] __nla_validate_parse: 71 callbacks suppressed [ 161.663387][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1131'. [ 162.264779][ T24] IPVS: starting estimator thread 0... [ 162.281284][T10036] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1145'. [ 162.342872][T10041] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1146'. [ 162.366673][T10034] IPVS: using max 32 ests per chain, 76800 per kthread [ 162.373980][T10041] gretap0: entered promiscuous mode [ 162.394086][T10041] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1146'. [ 162.403310][T10041] 0{X: renamed from gretap0 [ 162.415060][T10041] 0{X: left promiscuous mode [ 162.420952][T10041] 0{X: entered allmulticast mode [ 162.428950][T10041] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 162.442988][T10045] netlink: 'syz.2.1148': attribute type 1 has an invalid length. [ 162.452970][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1148'. [ 162.645182][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1152'. [ 162.660607][T10055] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744072477418244) [ 162.671529][T10055] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 162.861685][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1156'. [ 162.921308][T10071] netlink: 'syz.2.1158': attribute type 39 has an invalid length. [ 163.010804][T10076] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 163.104933][T10081] netlink: 'syz.4.1162': attribute type 2 has an invalid length. [ 163.134986][T10083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1161'. [ 163.162951][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'. [ 163.184412][T10083] netlink: 'syz.1.1161': attribute type 20 has an invalid length. [ 163.215960][T10090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1165'. [ 163.238200][ T2130] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.255626][T10083] netlink: 'syz.1.1161': attribute type 20 has an invalid length. [ 163.265051][ T2130] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.344887][ T2130] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.360347][ T2130] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.399410][T10101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.464081][T10103] tipc: Can't bind to reserved service type 35 [ 163.662999][T10119] siw: device registration error -23 [ 163.764262][T10122] tap0: tun_chr_ioctl cmd 1074025672 [ 163.781350][T10122] tap0: ignored: set checksum disabled [ 163.805513][T10119] lo speed is unknown, defaulting to 1000 [ 165.370312][T10166] sctp: [Deprecated]: syz.4.1183 (pid 10166) Use of int in max_burst socket option deprecated. [ 165.370312][T10166] Use struct sctp_assoc_value instead [ 165.502575][T10176] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20002 [ 165.673706][ T5864] Bluetooth: hci4: link tx timeout [ 165.679877][ T5864] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 165.689000][ T5864] Bluetooth: hci4: link tx timeout [ 165.694129][ T5864] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.728773][T10197] sctp: [Deprecated]: syz.1.1189 (pid 10197) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.728773][T10197] Use struct sctp_sack_info instead [ 165.843540][T10198] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 165.955642][T10209] tipc: Enabled bearer , priority 0 [ 165.963254][T10209] syzkaller0: entered promiscuous mode [ 165.968960][T10209] syzkaller0: entered allmulticast mode [ 166.015855][T10209] tipc: Resetting bearer [ 166.039281][T10208] tipc: Resetting bearer [ 166.085040][T10208] tipc: Disabling bearer [ 166.144954][T10220] netlink: 'syz.2.1199': attribute type 1 has an invalid length. [ 166.167515][T10216] netlink: 'syz.4.1197': attribute type 21 has an invalid length. [ 166.328311][T10235] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 166.499705][T10237] 8021q: adding VLAN 0 to HW filter on device bond7 [ 166.570540][ T9083] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 166.659172][T10261] bridge: RTM_NEWNEIGH with invalid ether address [ 167.393117][T10293] __nla_validate_parse: 11 callbacks suppressed [ 167.393135][T10293] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1216'. [ 167.411361][T10295] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1217'. [ 167.418563][T10293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.584122][T10293] pimreg: entered allmulticast mode [ 167.647870][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1222'. [ 167.705368][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 167.766598][ T9073] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 168.490287][T10368] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 168.567213][T10375] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1239'. [ 168.818477][T10399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1247'. [ 169.040154][T10412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.254676][T10437] netlink: 'syz.1.1258': attribute type 1 has an invalid length. [ 169.273765][T10437] netlink: 'syz.1.1258': attribute type 3 has an invalid length. [ 169.284120][T10437] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1258'. [ 169.302877][T10437] NCSI netlink: No device for ifindex 813332851 [ 169.375991][T10440] block nbd0: NBD_DISCONNECT [ 169.380689][T10440] block nbd0: Send disconnect failed -32 [ 169.396850][T10440] block nbd0: shutting down sockets [ 169.450553][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.459896][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 169.467774][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.476845][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 169.522198][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.531326][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 169.539166][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.548229][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 169.566529][ T5862] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.582301][ T5862] Buffer I/O error on dev nbd0, logical block 0, async page read [ 169.594647][ T5862] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.613087][ T5862] Buffer I/O error on dev nbd0, logical block 1, async page read [ 169.641796][ T30] audit: type=1800 audit(1755319150.503:4): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1267" name="memory.events" dev="tmpfs" ino=1403 res=0 errno=0 [ 169.686776][ T5862] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.697647][ T30] audit: type=1800 audit(1755319150.503:5): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1267" name="memory.events" dev="tmpfs" ino=1403 res=0 errno=0 [ 169.730351][ T5862] Buffer I/O error on dev nbd0, logical block 2, async page read [ 169.749798][ T5862] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.778990][ T30] audit: type=1800 audit(1755319150.503:6): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1267" name="memory.events" dev="tmpfs" ino=1403 res=0 errno=0 [ 169.805047][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 169.811230][ T5862] Buffer I/O error on dev nbd0, logical block 3, async page read [ 169.823340][ T5862] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.833058][ T5862] Buffer I/O error on dev nbd0, logical block 0, async page read [ 169.862752][ T30] audit: type=1800 audit(1755319150.503:7): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1267" name="memory.events" dev="tmpfs" ino=1403 res=0 errno=0 [ 169.881869][T10475] netlink: 'syz.0.1271': attribute type 1 has an invalid length. [ 169.888934][ T5862] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.928846][ T5862] Buffer I/O error on dev nbd0, logical block 1, async page read [ 169.954937][ T30] audit: type=1800 audit(1755319150.503:8): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1267" name="memory.events" dev="tmpfs" ino=1403 res=0 errno=0 [ 169.970322][T10481] netlink: 'syz.3.1272': attribute type 2 has an invalid length. [ 169.989161][ T5862] ldm_validate_partition_table(): Disk read failed. [ 170.031020][ T5862] Dev nbd0: unable to read RDB block 0 [ 170.037530][ T30] audit: type=1800 audit(1755319150.503:9): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1267" name="memory.events" dev="tmpfs" ino=1403 res=0 errno=0 [ 170.042627][ T5862] nbd0: unable to read partition table [ 170.131712][ T30] audit: type=1800 audit(1755319150.503:10): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1267" name="memory.events" dev="tmpfs" ino=1403 res=0 errno=0 [ 170.154127][ T5862] ldm_validate_partition_table(): Disk read failed. [ 170.182979][ T5862] Dev nbd0: unable to read RDB block 0 [ 170.207326][ T5862] nbd0: unable to read partition table [ 170.223948][ T30] audit: type=1800 audit(1755319150.503:11): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1267" name="memory.events" dev="tmpfs" ino=1403 res=0 errno=0 [ 170.246827][T10491] netlink: 'syz.2.1276': attribute type 1 has an invalid length. [ 170.252923][ T30] audit: type=1800 audit(1755319150.503:12): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1267" name="memory.events" dev="tmpfs" ino=1403 res=0 errno=0 [ 170.276973][ T30] audit: type=1800 audit(1755319150.513:13): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1267" name="memory.events" dev="tmpfs" ino=1403 res=0 errno=0 [ 170.277785][ T5862] udevd[5862]: failed to send result of seq 11426 to main daemon: Connection refused [ 170.331969][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1276'. [ 170.384942][T10491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.612378][T10494] bond2 (unregistering): Released all slaves [ 170.654772][T10508] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1280'. [ 170.707401][T10508] hsr0 speed is unknown, defaulting to 1000 [ 170.713401][T10508] hsr0 speed is unknown, defaulting to 1000 [ 170.838511][T10508] hsr0 speed is unknown, defaulting to 1000 [ 170.949800][T10531] tipc: Enabled bearer , priority 0 [ 170.957336][T10508] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 170.983724][T10531] syzkaller0: entered promiscuous mode [ 170.998009][T10531] syzkaller0: entered allmulticast mode [ 171.043970][T10508] hsr0 speed is unknown, defaulting to 1000 [ 171.058455][T10531] tipc: Resetting bearer [ 171.086469][T10530] tipc: Resetting bearer [ 171.152207][T10530] tipc: Disabling bearer [ 171.174915][T10508] hsr0 speed is unknown, defaulting to 1000 [ 171.184707][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1289'. [ 171.197985][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1289'. [ 171.208369][T10508] hsr0 speed is unknown, defaulting to 1000 [ 171.238931][T10508] hsr0 speed is unknown, defaulting to 1000 [ 171.255686][T10508] hsr0 speed is unknown, defaulting to 1000 [ 171.464232][T10563] netlink: 'syz.1.1295': attribute type 11 has an invalid length. [ 171.515685][T10556] tipc: Enabling of bearer rejected, failed to enable media [ 171.812207][T10587] netlink: 'syz.2.1301': attribute type 3 has an invalid length. [ 171.835322][T10587] netlink: 'syz.2.1301': attribute type 1 has an invalid length. [ 171.909168][T10594] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20001 [ 172.031717][T10603] netlink: 'syz.0.1308': attribute type 23 has an invalid length. [ 172.046784][T10602] siw: device registration error -23 [ 172.122840][T10602] lo speed is unknown, defaulting to 1000 [ 172.133725][T10602] hsr0 speed is unknown, defaulting to 1000 [ 172.436955][T10629] netlink: 'syz.4.1316': attribute type 7 has an invalid length. [ 172.605115][T10639] __nla_validate_parse: 7 callbacks suppressed [ 172.605133][T10639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1319'. [ 172.753951][T10643] 8021q: adding VLAN 0 to HW filter on device bond5 [ 172.810789][T10643] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.876506][T10643] 8021q: adding VLAN 0 to HW filter on device bond7 [ 172.947709][T10643] 8021q: adding VLAN 0 to HW filter on device bond8 [ 172.987982][T10643] 8021q: adding VLAN 0 to HW filter on device bond9 [ 173.058526][T10643] 8021q: adding VLAN 0 to HW filter on device bond10 [ 173.121924][T10643] 8021q: adding VLAN 0 to HW filter on device bond11 [ 173.132384][T10664] netlink: 'syz.3.1325': attribute type 7 has an invalid length. [ 173.191276][T10643] 8021q: adding VLAN 0 to HW filter on device bond12 [ 173.219549][T10676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1326'. [ 173.242159][T10643] 8021q: adding VLAN 0 to HW filter on device bond13 [ 173.252194][T10674] delete_channel: no stack [ 173.313198][T10643] 8021q: adding VLAN 0 to HW filter on device bond14 [ 173.360677][T10643] 8021q: adding VLAN 0 to HW filter on device bond15 [ 173.410772][T10643] 8021q: adding VLAN 0 to HW filter on device bond16 [ 173.454437][T10643] 8021q: adding VLAN 0 to HW filter on device bond17 [ 173.468204][T10689] raw_sendmsg: syz.1.1330 forgot to set AF_INET. Fix it! [ 173.517949][T10643] 8021q: adding VLAN 0 to HW filter on device bond18 [ 173.544941][T10698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1332'. [ 173.564247][T10643] 8021q: adding VLAN 0 to HW filter on device bond19 [ 173.598619][T10702] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1333'. [ 173.640538][T10703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1332'. [ 173.663434][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 173.793793][T10711] netlink: 'syz.4.1336': attribute type 1 has an invalid length. [ 173.812422][T10715] tls_set_device_offload: netdev not found [ 173.841309][T10711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.862115][T10711] bond2: (slave gretap0): making interface the new active one [ 173.871460][T10711] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 174.114199][T10739] sctp: [Deprecated]: syz.1.1343 (pid 10739) Use of int in maxseg socket option. [ 174.114199][T10739] Use struct sctp_assoc_value instead [ 174.222691][T10747] netlink: 'syz.1.1346': attribute type 39 has an invalid length. [ 174.253502][T10753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1347'. [ 174.475576][T10774] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1351'. [ 174.515580][T10778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1352'. [ 174.519231][T10774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1351'. [ 174.673203][T10765] delete_channel: no stack [ 174.727655][T10789] openvswitch: netlink: Multiple metadata blocks provided [ 174.742692][T10791] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 174.983809][T10787] lo speed is unknown, defaulting to 1000 [ 174.992612][T10787] hsr0 speed is unknown, defaulting to 1000 [ 175.270022][T10821] bridge_slave_0: left allmulticast mode [ 175.287133][T10821] bridge_slave_0: left promiscuous mode [ 175.294344][T10821] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.773499][T10848] syzkaller0: entered promiscuous mode [ 175.780722][T10848] syzkaller0: entered allmulticast mode [ 175.789398][T10847] tipc: Enabled bearer , priority 0 [ 175.854513][T10847] tipc: Resetting bearer [ 175.912972][T10847] tipc: Disabling bearer [ 176.069185][T10870] netlink: 'syz.2.1378': attribute type 11 has an invalid length. [ 176.100984][T10870] netlink: 'syz.2.1378': attribute type 11 has an invalid length. [ 176.577956][T10907] netlink: 'syz.4.1389': attribute type 8 has an invalid length. [ 176.669684][T10910] netlink: 'syz.1.1390': attribute type 5 has an invalid length. [ 177.031410][T10945] lo: left promiscuous mode [ 177.041377][T10945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.119071][T10950] netlink: 'syz.1.1403': attribute type 1 has an invalid length. [ 177.127072][T10950] netlink: 'syz.1.1403': attribute type 4 has an invalid length. [ 177.389932][T10968] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 177.414491][T10968] ip6gre1: entered allmulticast mode [ 177.881456][T11001] lo: entered promiscuous mode [ 178.152646][T11023] __nla_validate_parse: 17 callbacks suppressed [ 178.152663][T11023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1424'. [ 178.174394][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1423'. [ 178.249579][T11027] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1425'. [ 178.390011][T11037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1427'. [ 178.550520][T11047] netlink: 'syz.1.1432': attribute type 4 has an invalid length. [ 178.562267][T11047] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1432'. [ 178.680130][T11056] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1433'. [ 178.699160][ T9076] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.721857][T11053] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1434'. [ 178.843577][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'. [ 178.923645][T11070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1439'. [ 179.404546][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'. [ 179.432100][T11110] netlink: 'syz.0.1451': attribute type 11 has an invalid length. [ 179.442999][T11110] netlink: 'syz.0.1451': attribute type 11 has an invalid length. [ 179.459291][T11051] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 179.861081][T11128] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR [ 180.040692][T11150] lo speed is unknown, defaulting to 1000 [ 180.078090][T11150] hsr0 speed is unknown, defaulting to 1000 [ 180.143295][T11165] netlink: 'syz.2.1464': attribute type 1 has an invalid length. [ 180.394490][T11177] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.544322][T11177] bridge_slave_1 (unregistering): left allmulticast mode [ 180.562080][T11177] bridge_slave_1 (unregistering): left promiscuous mode [ 180.575634][T11177] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.667386][ T5879] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.883472][T11218] netlink: 'syz.1.1479': attribute type 1 has an invalid length. [ 181.050210][T11229] netlink: 'syz.3.1483': attribute type 2 has an invalid length. [ 181.058097][T11229] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 181.066895][T11229] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 181.089274][T11229] netlink: 'syz.3.1483': attribute type 2 has an invalid length. [ 181.103793][T11229] netlink: 'syz.3.1483': attribute type 2 has an invalid length. [ 181.224790][ T9073] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 181.987935][T11277] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 182.194155][T11302] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 1, id = 0 [ 182.567588][T11321] validate_nla: 4 callbacks suppressed [ 182.567606][T11321] netlink: 'syz.1.1502': attribute type 26 has an invalid length. [ 182.754969][T11342] vxcan1: tx address claim with different name [ 183.349285][T11354] netlink: 'syz.2.1513': attribute type 9 has an invalid length. [ 183.358086][T11350] netlink: 'syz.0.1512': attribute type 1 has an invalid length. [ 183.366465][T11354] __nla_validate_parse: 21 callbacks suppressed [ 183.366480][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1513'. [ 183.379632][T11350] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1512'. [ 183.393043][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1515'. [ 183.444474][ T9083] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.472972][ T9083] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.510141][ T9083] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.537304][ T9083] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.638040][T11370] netlink: 'syz.1.1520': attribute type 1 has an invalid length. [ 183.724650][T11375] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 183.799837][T11380] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1524'. [ 183.814075][T11381] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1524'. [ 183.872247][T11378] veth5: entered promiscuous mode [ 183.879342][T11388] netlink: 'syz.0.1525': attribute type 1 has an invalid length. [ 183.923336][T11394] IPVS: length: 157 != 24 [ 183.939591][T11393] tipc: Enabling of bearer rejected, failed to enable media [ 183.957376][T11393] netlink: 'syz.4.1527': attribute type 1 has an invalid length. [ 184.093734][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 184.103877][T11407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.117052][T11402] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1531'. [ 184.139597][T11412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1532'. [ 184.161020][T11412] tipc: Enabled bearer , priority 0 [ 184.168481][T11412] syzkaller0: entered promiscuous mode [ 184.174037][T11412] syzkaller0: entered allmulticast mode [ 184.207875][T11412] tipc: Resetting bearer [ 184.240206][T11402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1531'. [ 184.252322][T11402] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 184.319546][T11419] netlink: 'syz.1.1536': attribute type 4 has an invalid length. [ 184.370919][T11423] netlink: 'syz.3.1538': attribute type 7 has an invalid length. [ 184.451690][T11425] netlink: 'syz.3.1538': attribute type 9 has an invalid length. [ 184.494446][T11429] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1539'. [ 184.928549][T11401] tipc: Resetting bearer [ 184.996880][T11401] tipc: Disabling bearer [ 185.088545][T11457] bond5 (unregistering): Released all slaves [ 185.262380][T11467] vlan2: entered allmulticast mode [ 185.272335][T11467] macvtap0: entered allmulticast mode [ 185.278063][T11467] veth0_macvtap: entered allmulticast mode [ 185.338992][T11480] tipc: Enabled bearer , priority 0 [ 185.357384][T11480] syzkaller0: entered promiscuous mode [ 185.375243][T11480] syzkaller0: entered allmulticast mode [ 185.463647][T11480] tipc: Resetting bearer [ 185.788740][T11511] unsupported nlmsg_type 40 [ 185.908658][T11513] pim6reg1: entered promiscuous mode [ 185.913148][T11516] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 185.918358][T11513] pim6reg1: entered allmulticast mode [ 185.944551][T11513] veth1_to_team: entered promiscuous mode [ 186.067190][T11512] veth1_to_team: left promiscuous mode [ 186.099246][T11472] tipc: Resetting bearer [ 186.133562][T11472] tipc: Disabling bearer [ 186.237687][T11534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.400056][T11604] bond2: entered promiscuous mode [ 187.410762][T11604] bond2: entered allmulticast mode [ 187.416801][T11604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.499691][T11621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.662405][T11635] validate_nla: 8 callbacks suppressed [ 187.662422][T11635] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 187.687270][T11638] netlink: 'syz.2.1600': attribute type 10 has an invalid length. [ 187.732429][T11638] veth0_macvtap: left allmulticast mode [ 187.741626][T11638] veth0_macvtap: left promiscuous mode [ 187.976590][ T7146] IPVS: starting estimator thread 0... [ 188.087689][T11660] IPVS: using max 27 ests per chain, 64800 per kthread [ 188.094926][T11664] netlink: 'syz.0.1608': attribute type 1 has an invalid length. [ 188.122940][T11664] netlink: 'syz.0.1608': attribute type 1 has an invalid length. [ 188.724927][T11701] veth0: entered promiscuous mode [ 188.733901][T11705] __nla_validate_parse: 33 callbacks suppressed [ 188.733919][T11705] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1623'. [ 188.770731][T11703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.784684][T11701] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1621'. [ 188.869174][T11700] veth0: left promiscuous mode [ 189.134547][T11735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1632'. [ 189.234953][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1635'. [ 189.273023][T11739] tipc: Enabled bearer , priority 0 [ 189.307419][T11747] tipc: Enabling of bearer rejected, already enabled [ 189.322663][T11753] netlink: 'syz.2.1636': attribute type 10 has an invalid length. [ 189.333863][T11754] syzkaller0: entered promiscuous mode [ 189.348540][T11754] syzkaller0: entered allmulticast mode [ 189.413229][T11747] tipc: Resetting bearer [ 189.472388][T11747] tipc: Disabling bearer [ 189.831796][T11784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1645'. [ 189.993460][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1651'. [ 190.193672][T11807] syzkaller0: entered promiscuous mode [ 190.203389][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 190.232838][T11807] syzkaller0: entered allmulticast mode [ 191.445765][T11823] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 191.457262][T11823] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 191.464969][T11823] gretap1: entered promiscuous mode [ 191.472211][T11823] gretap1: entered allmulticast mode [ 191.690179][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1666'. [ 191.720696][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1666'. [ 191.752741][T11856] netlink: 'syz.3.1666': attribute type 34 has an invalid length. [ 191.781620][T11863] 0{X: left allmulticast mode [ 191.897251][ T7146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.914092][T11863] gretap1: left allmulticast mode [ 191.932243][T11014] lo speed is unknown, defaulting to 1000 [ 191.965449][T11869] netlink: 'syz.2.1668': attribute type 29 has an invalid length. [ 191.986137][ T7146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.000363][T11873] netlink: 'syz.2.1668': attribute type 29 has an invalid length. [ 192.024007][T11874] netlink: 'syz.2.1668': attribute type 29 has an invalid length. [ 192.042684][T11874] netlink: 'syz.2.1668': attribute type 29 has an invalid length. [ 192.056848][T11879] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1671'. [ 192.892758][T11941] tipc: Enabled bearer , priority 0 [ 192.914792][T11939] sch_fq: defrate 0 ignored. [ 192.924645][T11941] syzkaller0: entered promiscuous mode [ 192.933783][T11941] syzkaller0: entered allmulticast mode [ 192.995203][T11941] tipc: Resetting bearer [ 193.062035][T11940] tipc: Resetting bearer [ 193.106225][T11940] tipc: Disabling bearer [ 193.236754][T11958] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 193.489300][T11974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.844679][T11994] __nla_validate_parse: 9 callbacks suppressed [ 193.844696][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1705'. [ 193.875916][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1705'. [ 193.949513][T12003] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1708'. [ 194.004136][T12007] pim6reg: entered allmulticast mode [ 194.094749][T12000] macvlan0: entered allmulticast mode [ 194.100894][T12000] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 194.190857][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.650874][T12049] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1721'. [ 194.681728][T12047] sit0: entered promiscuous mode [ 194.687182][T12047] validate_nla: 1 callbacks suppressed [ 194.687197][T12047] netlink: 'syz.1.1720': attribute type 1 has an invalid length. [ 194.706213][T12047] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1720'. [ 194.885960][T12064] netlink: 'syz.4.1726': attribute type 4 has an invalid length. [ 194.895976][T12065] netlink: 'syz.4.1726': attribute type 4 has an invalid length. [ 195.035251][T12078] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1728'. [ 195.046741][ T24] lo speed is unknown, defaulting to 1000 [ 195.052777][ T24] syz2: Port: 1 Link DOWN [ 195.099547][T12078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1728'. [ 195.154139][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1730'. [ 195.288782][T12094] bond0: entered promiscuous mode [ 195.293855][T12094] bond_slave_0: entered promiscuous mode [ 195.306428][T12094] bond_slave_1: entered promiscuous mode [ 195.312259][T12094] bridge_slave_1: entered promiscuous mode [ 195.321240][T12094] batadv0: entered promiscuous mode [ 195.327879][T12094] batadv0: left promiscuous mode [ 195.333162][T12094] bond0: left promiscuous mode [ 195.338340][T12094] bond_slave_0: left promiscuous mode [ 195.343914][T12094] bond_slave_1: left promiscuous mode [ 195.350403][T12094] bridge_slave_1: left promiscuous mode [ 195.470518][T12106] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1737'. [ 195.711854][T12128] vlan2: entered allmulticast mode [ 195.717220][T12128] veth1: entered allmulticast mode [ 195.750305][T12130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1745'. [ 195.921175][T12141] IPVS: Error connecting to the multicast addr [ 196.377115][T12172] team0: Device gtp0 is of different type [ 196.662745][T12190] lo speed is unknown, defaulting to 1000 [ 196.698739][T12190] hsr0 speed is unknown, defaulting to 1000 [ 196.852407][T12203] netlink: 'syz.3.1765': attribute type 1 has an invalid length. [ 196.860598][T12207] netlink: 'syz.3.1765': attribute type 1 has an invalid length. [ 197.285438][T12220] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 197.701408][T12255] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 198.459073][T12311] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 198.948094][T12341] vxlan1: entered promiscuous mode [ 198.953262][T12341] vxlan1: entered allmulticast mode [ 198.962793][T12341] __nla_validate_parse: 15 callbacks suppressed [ 198.962807][T12341] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1805'. [ 198.994434][T12346] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 199.195854][T12356] delete_channel: no stack [ 199.364034][T12367] netlink: 'syz.4.1813': attribute type 12 has an invalid length. [ 199.382448][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1814'. [ 199.434048][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1814'. [ 199.456175][T12362] bond5: entered promiscuous mode [ 199.464603][T12362] bond5: entered allmulticast mode [ 199.472456][T12362] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.482970][T12378] netlink: 'syz.4.1813': attribute type 12 has an invalid length. [ 199.523877][T12366] bridge0: port 1(vlan0) entered blocking state [ 199.537144][T12366] bridge0: port 1(vlan0) entered disabled state [ 199.550017][T12366] vlan0: entered allmulticast mode [ 199.555250][T12366] bridge0: entered allmulticast mode [ 199.566581][T12366] vlan0: left allmulticast mode [ 199.571456][T12366] bridge0: left allmulticast mode [ 199.728376][T12391] macvlan0: entered promiscuous mode [ 199.741937][T12391] macvlan0: entered allmulticast mode [ 199.748964][T12391] veth1_to_bond: entered promiscuous mode [ 199.755066][T12391] veth1_to_bond: entered allmulticast mode [ 199.762903][T12403] netlink: 'syz.2.1822': attribute type 18 has an invalid length. [ 199.764434][T12391] team0: Port device macvlan0 added [ 199.825019][T12404] tap0: tun_chr_ioctl cmd 1074025678 [ 199.860344][T12404] tap0: group set to 0 [ 199.886428][T12403] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1822'. [ 200.122223][T12427] netlink: 'syz.0.1831': attribute type 3 has an invalid length. [ 200.295571][ T2130] tipc: Subscription rejected, illegal request [ 200.567301][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1841'. [ 200.946116][T12483] tipc: Enabling of bearer rejected, failed to enable media [ 200.956058][T12476] tipc: Enabling of bearer rejected, failed to enable media [ 201.024754][T12485] wg1: entered promiscuous mode [ 201.036273][T12485] wg1: entered allmulticast mode [ 201.100433][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1850'. [ 201.108296][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 201.181362][T12491] netlink: 204172 bytes leftover after parsing attributes in process `syz.4.1850'. [ 201.193739][T12491] openvswitch: netlink: Message has 5 unknown bytes. [ 201.240506][T12499] tipc: Enabled bearer , priority 0 [ 201.313710][T12499] syzkaller0: entered promiscuous mode [ 201.320495][T12499] syzkaller0: entered allmulticast mode [ 201.327316][T12499] tipc: Resetting bearer [ 201.355460][T12497] tipc: Resetting bearer [ 201.385712][ T5184] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.385880][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 201.391851][ T5184] Bluetooth: hci2: command 0x0406 tx timeout [ 201.478040][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 202.093786][T12531] netlink: 'syz.3.1858': attribute type 1 has an invalid length. [ 202.101842][T12531] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1858'. [ 202.335833][T11014] tipc: Node number set to 1135322925 [ 202.641142][T12497] tipc: Disabling bearer [ 202.840187][T12540] netlink: 'syz.1.1860': attribute type 1 has an invalid length. [ 202.965690][T12551] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20004 [ 203.017586][T12553] tipc: Enabled bearer , priority 0 [ 203.044521][T12553] syzkaller0: entered promiscuous mode [ 203.056110][T12553] syzkaller0: entered allmulticast mode [ 203.125911][T12553] tipc: Resetting bearer [ 203.135195][T12553] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 203.210413][T12566] bond0: entered promiscuous mode [ 203.225498][T12566] bond_slave_0: entered promiscuous mode [ 203.235404][T12566] bond_slave_1: entered promiscuous mode [ 203.241566][T12566] bridge0: entered promiscuous mode [ 203.375109][T12566] bond0: left promiscuous mode [ 203.380482][T12566] bond_slave_0: left promiscuous mode [ 203.389899][T12566] bond_slave_1: left promiscuous mode [ 203.461878][T12566] bridge0: left promiscuous mode [ 203.490779][T12552] tipc: Resetting bearer [ 203.511172][T12552] tipc: Disabling bearer [ 203.872686][T12590] hsr_slave_0: left promiscuous mode [ 203.894716][T12590] hsr_slave_1: left promiscuous mode [ 204.247554][T12626] tipc: Enabled bearer , priority 0 [ 204.254733][T12623] __nla_validate_parse: 5 callbacks suppressed [ 204.254747][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1885'. [ 204.272834][T12626] syzkaller0: entered promiscuous mode [ 204.279200][T12626] syzkaller0: entered allmulticast mode [ 204.279607][T12627] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1886'. [ 204.288998][T12626] pimreg: left allmulticast mode [ 204.310918][T12626] lo: left allmulticast mode [ 204.395891][T12628] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 204.502485][T12626] tipc: Resetting bearer [ 204.547471][T12625] tipc: Resetting bearer [ 204.660463][T12625] tipc: Disabling bearer [ 204.707955][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'. [ 204.787007][T12657] netlink: 'syz.0.1896': attribute type 13 has an invalid length. [ 204.885928][T12657] lo: entered promiscuous mode [ 204.890789][T12657] lo: entered allmulticast mode [ 204.935825][T12657] tunl0: entered promiscuous mode [ 204.955439][T12657] tunl0: entered allmulticast mode [ 205.002931][T12657] gre0: entered promiscuous mode [ 205.012106][T12657] gre0: entered allmulticast mode [ 205.049629][T12657] gretap0: entered promiscuous mode [ 205.062675][T12657] gretap0: entered allmulticast mode [ 205.103193][T12657] gretap0: refused to change device tx_queue_len [ 205.113723][T12657] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 205.449954][T12688] bridge4: entered promiscuous mode [ 205.460067][T12688] bridge4: entered allmulticast mode [ 205.843875][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'. [ 205.863592][T12704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1911'. [ 206.262392][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 206.319723][T12718] lo speed is unknown, defaulting to 1000 [ 206.328094][T12718] hsr0 speed is unknown, defaulting to 1000 [ 206.361488][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1913'. [ 206.370654][T12720] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 206.378342][T12720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.906255][T12754] netlink: 'syz.2.1920': attribute type 1 has an invalid length. [ 206.970122][T12755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.990938][T12754] bond4: entered promiscuous mode [ 207.010925][T12754] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.182935][T12759] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.190024][T12759] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 207.200826][T12759] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 207.214586][T12759] bond4: (slave wireguard0): making interface the new active one [ 207.224943][T12759] wireguard0: entered promiscuous mode [ 207.232435][T12759] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 207.253046][T12768] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 207.260946][T12768] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 207.374009][T12777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.570385][T12789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1935'. [ 207.700966][T12798] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1937'. [ 207.812100][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 207.953004][T12828] netlink: 'syz.2.1945': attribute type 1 has an invalid length. [ 208.006200][T12832] netlink: 'syz.0.1946': attribute type 1 has an invalid length. [ 208.035374][ T979] IPVS: starting estimator thread 0... [ 208.125749][T12833] IPVS: using max 32 ests per chain, 76800 per kthread [ 208.139855][T12835] bridge0: port 1(vlan2) entered blocking state [ 208.148617][T12835] bridge0: port 1(vlan2) entered disabled state [ 208.155052][T12835] vlan2: entered allmulticast mode [ 208.179115][T12835] bridge0: entered allmulticast mode [ 208.227953][T12847] netlink: 'syz.1.1948': attribute type 2 has an invalid length. [ 208.228484][T12835] vlan2: left allmulticast mode [ 208.268196][T12835] bridge0: left allmulticast mode [ 208.459536][T12847] tipc: Enabling of bearer rejected, failed to enable media [ 208.678413][T12869] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 208.900191][T12886] netlink: 'syz.1.1961': attribute type 3 has an invalid length. [ 209.368653][T12916] netlink: 'syz.4.1972': attribute type 39 has an invalid length. [ 209.461306][T12921] netdevsim netdevsim0 : renamed from (while UP) [ 209.665464][T12927] __nla_validate_parse: 8 callbacks suppressed [ 209.665480][T12927] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1977'. [ 209.715912][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'. [ 209.736300][T12927] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1977'. [ 209.745840][T12930] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1980'. [ 209.789677][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'. [ 209.879460][T12941] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 209.909340][T12945] netlink: 'syz.0.1981': attribute type 10 has an invalid length. [ 209.917415][T12941] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 209.957055][T12949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.957055][T12950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.038562][T12959] netlink: 'syz.1.1987': attribute type 1 has an invalid length. [ 210.058104][T12959] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1987'. [ 210.216238][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 210.246552][T12973] tipc: Enabling of bearer rejected, failed to enable media [ 210.364376][T12982] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1996'. [ 210.552835][T12982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.565158][T12982] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 210.575807][T12982] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 210.588376][T12982] bond0 (unregistering): Released all slaves [ 210.764471][T13004] batadv0: mtu less than device minimum [ 210.926591][T13013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2008'. [ 210.947327][T13013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2008'. [ 211.155144][T13027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.174954][T13027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.050818][T13050] vlan2: entered allmulticast mode [ 213.056181][T13050] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 213.063414][T13045] veth0_to_bridge: entered promiscuous mode [ 213.070680][T13045] veth0_to_bridge: left promiscuous mode [ 213.350002][T13101] Bluetooth: MGMT ver 1.23 [ 213.384891][T13103] openvswitch: netlink: Key type 63 is out of range max 32 [ 213.561609][T13116] netlink: 'syz.4.2038': attribute type 10 has an invalid length. [ 213.574472][T13116] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.581677][T13116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.589289][T13116] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.596568][T13116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.675014][T13116] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 213.697132][T13118] tipc: Enabled bearer , priority 0 [ 213.716485][T13118] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 213.784315][T13117] tipc: Disabling bearer [ 213.838078][T13126] syzkaller0: entered promiscuous mode [ 213.843632][T13126] syzkaller0: entered allmulticast mode [ 214.071665][T13146] pimreg: left allmulticast mode [ 214.244094][ C1] ------------[ cut here ]------------ [ 214.249619][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 214.260450][ C1] WARNING: CPU: 1 PID: 13142 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 214.270679][ C1] Modules linked in: [ 214.274883][ C1] CPU: 1 UID: 0 PID: 13142 Comm: syz.4.2047 Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 PREEMPT(full) [ 214.286995][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.297180][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 214.303462][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 71 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 82 73 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 214.323110][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 214.329243][ C1] RAX: 5a2438ba803d0d00 RBX: 000000000000000c RCX: ffff888026e28000 [ 214.337252][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 214.345359][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 214.353387][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88804ea5a7a8 [ 214.361406][ C1] R13: 0000000000000000 R14: ffff888028808e40 R15: ffff88802880b0d8 [ 214.369399][ C1] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 214.378347][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.384937][ C1] CR2: 00007ff4175746a0 CR3: 000000006c02e000 CR4: 00000000003526f0 [ 214.392931][ C1] Call Trace: [ 214.396238][ C1] [ 214.399091][ C1] rate_control_send_low+0x194/0x7a0 [ 214.404398][ C1] rate_control_get_rate+0x20b/0x5d0 [ 214.409713][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 214.415551][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 214.421866][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 214.427321][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 214.433059][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 214.438741][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 214.444760][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 214.450357][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 214.455981][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 214.461526][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 214.467119][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 214.472690][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 214.478221][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 214.484316][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 214.489915][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 214.497171][ C1] __iterate_interfaces+0x2ab/0x590 [ 214.502404][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 214.508489][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 214.515722][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 214.521790][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 214.528845][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 214.534055][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 214.539896][ C1] __hrtimer_run_queues+0x529/0xc60 [ 214.545115][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 214.550856][ C1] ? read_tsc+0x9/0x20 [ 214.554942][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 214.560795][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 214.565936][ C1] handle_softirqs+0x283/0x870 [ 214.570695][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 214.575508][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 214.580807][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 214.586040][ C1] __irq_exit_rcu+0xca/0x1f0 [ 214.590643][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 214.595882][ C1] irq_exit_rcu+0x9/0x30 [ 214.600132][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 214.605794][ C1] [ 214.608729][ C1] [ 214.611664][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 214.617714][ C1] RIP: 0010:folio_remove_rmap_ptes+0x6b6/0xaf0 [ 214.623886][ C1] Code: 10 a4 ae ff 4c 8b 6c 24 30 eb 05 e8 04 a4 ae ff 49 bf 00 00 00 00 00 fc ff df 49 83 c5 20 4c 89 e8 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 ef e8 30 0d 12 00 4d 8b 75 00 4c 89 f6 48 81 e6 00 20 [ 214.643700][ C1] RSP: 0018:ffffc90003077550 EFLAGS: 00000246 [ 214.649812][ C1] RAX: 1ffff1100bc5651c RBX: ffffea0001a9c3c0 RCX: ffff888026e28000 [ 214.657832][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.665850][ C1] RBP: 0000000000000000 R08: ffffea0001a9c3f3 R09: 1ffffd400035387e [ 214.673827][ C1] R10: dffffc0000000000 R11: fffff9400035387f R12: ffffea0001a9c3c0 [ 214.681831][ C1] R13: ffff88805e2b28e0 R14: 0000000000000001 R15: dffffc0000000000 [ 214.689852][ C1] ? page_table_check_clear+0x187/0x700 [ 214.695521][ C1] ? page_table_check_clear+0x4f3/0x700 [ 214.701142][ C1] unmap_page_range+0x1f7f/0x4370 [ 214.706236][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 214.711620][ C1] ? mas_find+0xb0e/0xd30 [ 214.715975][ C1] ? unmap_vmas+0x144/0x580 [ 214.720576][ C1] unmap_vmas+0x399/0x580 [ 214.724909][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 214.729815][ C1] exit_mmap+0x248/0xb50 [ 214.734066][ C1] ? uprobe_clear_state+0x20f/0x290 [ 214.739298][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 214.744066][ C1] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 214.749758][ C1] ? __pfx_exit_aio+0x10/0x10 [ 214.754460][ C1] ? uprobe_clear_state+0x274/0x290 [ 214.759721][ C1] __mmput+0x118/0x420 [ 214.763925][ C1] exit_mm+0x1da/0x2c0 [ 214.768049][ C1] ? __pfx_exit_mm+0x10/0x10 [ 214.772657][ C1] ? rcu_is_watching+0x15/0xb0 [ 214.777474][ C1] do_exit+0x648/0x2300 [ 214.781650][ C1] ? preempt_schedule_common+0x83/0xd0 [ 214.787150][ C1] ? preempt_schedule+0xae/0xc0 [ 214.792019][ C1] ? __pfx_do_exit+0x10/0x10 [ 214.796634][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 214.802047][ C1] do_group_exit+0x21c/0x2d0 [ 214.806663][ C1] __x64_sys_exit_group+0x3f/0x40 [ 214.811717][ C1] x64_sys_call+0x21f7/0x2200 [ 214.816422][ C1] do_syscall_64+0xfa/0x3b0 [ 214.820936][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.826158][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.832321][ C1] ? clear_bhb_loop+0x60/0xb0 [ 214.837035][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.842938][ C1] RIP: 0033:0x7efe9bd8ebe9 [ 214.847411][ C1] Code: Unable to access opcode bytes at 0x7efe9bd8ebbf. [ 214.854428][ C1] RSP: 002b:00007ffd8b0ce0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 214.862879][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efe9bd8ebe9 [ 214.870876][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.878865][ C1] RBP: 00007ffd8b0ce11c R08: 0000000e8b0ce1af R09: 00000000000927c0 [ 214.886873][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001a6 [ 214.894861][ C1] R13: 00000000000927c0 R14: 00000000000343b0 R15: 00007ffd8b0ce170 [ 214.902894][ C1] [ 214.905945][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 214.913232][ C1] CPU: 1 UID: 0 PID: 13142 Comm: syz.4.2047 Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 PREEMPT(full) [ 214.925294][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.935347][ C1] Call Trace: [ 214.938620][ C1] [ 214.941448][ C1] dump_stack_lvl+0x99/0x250 [ 214.946031][ C1] ? __asan_memcpy+0x40/0x70 [ 214.950617][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.955801][ C1] ? __pfx__printk+0x10/0x10 [ 214.960392][ C1] vpanic+0x281/0x750 [ 214.964359][ C1] ? __pfx__printk+0x10/0x10 [ 214.969026][ C1] ? __pfx_vpanic+0x10/0x10 [ 214.973517][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 214.978807][ C1] panic+0xb9/0xc0 [ 214.982517][ C1] ? __pfx_panic+0x10/0x10 [ 214.986933][ C1] __warn+0x31b/0x4b0 [ 214.990900][ C1] ? __rate_control_send_low+0x5df/0x820 [ 214.996524][ C1] ? __rate_control_send_low+0x5df/0x820 [ 215.002145][ C1] report_bug+0x2be/0x4f0 [ 215.006466][ C1] ? __rate_control_send_low+0x5df/0x820 [ 215.012097][ C1] ? __rate_control_send_low+0x5df/0x820 [ 215.017719][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 215.023342][ C1] handle_bug+0x84/0x160 [ 215.027567][ C1] exc_invalid_op+0x1a/0x50 [ 215.032053][ C1] asm_exc_invalid_op+0x1a/0x20 [ 215.037006][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 215.043238][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 71 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 82 73 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 215.062825][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 215.068910][ C1] RAX: 5a2438ba803d0d00 RBX: 000000000000000c RCX: ffff888026e28000 [ 215.076868][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 215.084819][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 215.092771][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88804ea5a7a8 [ 215.100812][ C1] R13: 0000000000000000 R14: ffff888028808e40 R15: ffff88802880b0d8 [ 215.108784][ C1] ? __rate_control_send_low+0x5de/0x820 [ 215.114425][ C1] rate_control_send_low+0x194/0x7a0 [ 215.119704][ C1] rate_control_get_rate+0x20b/0x5d0 [ 215.124993][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 215.130791][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 215.137109][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 215.142473][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 215.148180][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 215.153810][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 215.159786][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 215.165404][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 215.170940][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 215.176469][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 215.182002][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 215.187541][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 215.192988][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 215.199045][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 215.204574][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 215.211766][ C1] __iterate_interfaces+0x2ab/0x590 [ 215.216959][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 215.223010][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 215.230216][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 215.236268][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 215.243283][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 215.248470][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 215.254262][ C1] __hrtimer_run_queues+0x529/0xc60 [ 215.259461][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 215.265159][ C1] ? read_tsc+0x9/0x20 [ 215.269216][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 215.275009][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 215.280114][ C1] handle_softirqs+0x283/0x870 [ 215.284864][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 215.289615][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 215.294890][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 215.300080][ C1] __irq_exit_rcu+0xca/0x1f0 [ 215.304656][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 215.309842][ C1] irq_exit_rcu+0x9/0x30 [ 215.314071][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 215.319691][ C1] [ 215.322606][ C1] [ 215.325522][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.331491][ C1] RIP: 0010:folio_remove_rmap_ptes+0x6b6/0xaf0 [ 215.337631][ C1] Code: 10 a4 ae ff 4c 8b 6c 24 30 eb 05 e8 04 a4 ae ff 49 bf 00 00 00 00 00 fc ff df 49 83 c5 20 4c 89 e8 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 ef e8 30 0d 12 00 4d 8b 75 00 4c 89 f6 48 81 e6 00 20 [ 215.357224][ C1] RSP: 0018:ffffc90003077550 EFLAGS: 00000246 [ 215.363275][ C1] RAX: 1ffff1100bc5651c RBX: ffffea0001a9c3c0 RCX: ffff888026e28000 [ 215.371231][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.379185][ C1] RBP: 0000000000000000 R08: ffffea0001a9c3f3 R09: 1ffffd400035387e [ 215.387139][ C1] R10: dffffc0000000000 R11: fffff9400035387f R12: ffffea0001a9c3c0 [ 215.395093][ C1] R13: ffff88805e2b28e0 R14: 0000000000000001 R15: dffffc0000000000 [ 215.403067][ C1] ? page_table_check_clear+0x187/0x700 [ 215.408624][ C1] ? page_table_check_clear+0x4f3/0x700 [ 215.414168][ C1] unmap_page_range+0x1f7f/0x4370 [ 215.419231][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 215.424619][ C1] ? mas_find+0xb0e/0xd30 [ 215.428963][ C1] ? unmap_vmas+0x144/0x580 [ 215.433472][ C1] unmap_vmas+0x399/0x580 [ 215.437806][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 215.442670][ C1] exit_mmap+0x248/0xb50 [ 215.446909][ C1] ? uprobe_clear_state+0x20f/0x290 [ 215.452234][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 215.457003][ C1] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 215.462649][ C1] ? __pfx_exit_aio+0x10/0x10 [ 215.467335][ C1] ? uprobe_clear_state+0x274/0x290 [ 215.472531][ C1] __mmput+0x118/0x420 [ 215.476592][ C1] exit_mm+0x1da/0x2c0 [ 215.480657][ C1] ? __pfx_exit_mm+0x10/0x10 [ 215.485241][ C1] ? rcu_is_watching+0x15/0xb0 [ 215.489995][ C1] do_exit+0x648/0x2300 [ 215.494147][ C1] ? preempt_schedule_common+0x83/0xd0 [ 215.499597][ C1] ? preempt_schedule+0xae/0xc0 [ 215.504434][ C1] ? __pfx_do_exit+0x10/0x10 [ 215.509017][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 215.514388][ C1] do_group_exit+0x21c/0x2d0 [ 215.518974][ C1] __x64_sys_exit_group+0x3f/0x40 [ 215.523991][ C1] x64_sys_call+0x21f7/0x2200 [ 215.528661][ C1] do_syscall_64+0xfa/0x3b0 [ 215.533155][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.538341][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.544393][ C1] ? clear_bhb_loop+0x60/0xb0 [ 215.549175][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.555077][ C1] RIP: 0033:0x7efe9bd8ebe9 [ 215.559498][ C1] Code: Unable to access opcode bytes at 0x7efe9bd8ebbf. [ 215.566503][ C1] RSP: 002b:00007ffd8b0ce0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 215.574910][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efe9bd8ebe9 [ 215.582873][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.590837][ C1] RBP: 00007ffd8b0ce11c R08: 0000000e8b0ce1af R09: 00000000000927c0 [ 215.598883][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001a6 [ 215.606867][ C1] R13: 00000000000927c0 R14: 00000000000343b0 R15: 00007ffd8b0ce170 [ 215.614876][ C1] [ 215.618110][ C1] Kernel Offset: disabled [ 215.622419][ C1] Rebooting in 86400 seconds..