last executing test programs: 9.178967407s ago: executing program 2 (id=2907): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x11, 0x3, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0xea10848443a1ce33}, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f00000001c0)="1276dd894f426bc3e626b00f5b46b0526368", 0x12}], 0x2}, 0x8c0) r3 = gettid() (async) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r3, r4, 0x0, 0x0, 0x0}, 0x30) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="fd0200000000eeffffff9700000008000300", @ANYRES32=r9, @ANYBLOB="08000c009c0200000a0034"], 0x30}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="05000000000000000000077400060800020000000000080003"], 0x30}, 0x1, 0xffffffff00000003, 0x0, 0x4000001}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) (async) recvmsg$can_raw(r5, &(0x7f0000000180)={&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000380)=""/230, 0xe6}, {&(0x7f0000002640)=""/133, 0x85}, {&(0x7f0000002700)=""/141, 0x8d}, {&(0x7f00000027c0)=""/221, 0xdd}, {&(0x7f00000028c0)=""/213, 0xd5}], 0x7, &(0x7f00000029c0)=""/89, 0x59}, 0x0) (async) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000eeffffff1b0c0000000000000072e500100002800500130001000000377a07edf5fbf804001200"], 0x3c}}, 0x0) 9.00757277s ago: executing program 2 (id=2909): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010f000000000000000067000000080001003c00000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800c300741300000800c40001"], 0x40}}, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x50483}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x17}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9005}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xc1e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000140)={r11, 0x9951}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x44}, @val={0x8, 0x3, r12}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r13], 0x68}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r14, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32=r15], 0x60}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=@delchain={0x44, 0x65, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x8}, {0x2, 0xa}, {0xfff2, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0xf1}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x34, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r13, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}, [{0x8, 0xb, 0x8001}, {0x8, 0xb, 0x80000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0) 8.411050462s ago: executing program 2 (id=2917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000112dea6a3e47dcf7a7e271461795438a000101000010000000000000000000e89f0008a0ca15d58a9f3cec9dd8b7c344f682a5f47a67f32f20a81e1f83ac3ba42ef85877aea3ea14701332a00c400166649049a55261212ba828888d74e0d646de8ca7f19965a6e4c3f464832d8c23f6dd3f9422296a2afad2890514468caabe2cffb98647a5212603cfac8be5df1b15b45dd2e564f1f2c5fcd49a4012696fb009febba3aab08a783835579b812085ec2adc09147d7df5954e80ff1df3ab5684518ee04b8e0c65974c9ff6d84d5b08b0793cbbd4473f609908c317ac7a846f276f3748c2ebce549e848aa86828dd9944e44f56dfd0a8be42323cdd2b323d48de7db98630fa755470cdc73cb409467c196496e7e61db31b11f5e1dda1b66e7def8d9b3617207433b89767a79200c16cad1b8c44c989dd32ea92e7b67110b960953a761eacdd6ab337108fb4b0e83242260f4e533d8c51b8d51876c5d8829c2859ed27e5f96272d652a579dbf29338e3ae7fc4ec58946731047111237334e6ef774aa39e5a851d7c399e95b68955baa1a8a18a2d998a0b4006c07a4f6a62a53a48318347fc039b99302459d784e85f122b6e635388", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d800800030000bd"], 0x24}, 0x1, 0x5502000000000000}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000240)=0x108) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r3, 0x3, 0xfffffffffffffffb, 0x6}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYRES8=r3], &(0x7f0000000040)='GPL\x00', 0xe2b, 0xffffffeb, &(0x7f0000000100)=""/159, 0x40f00, 0x1a, '\x00', 0x0, @sk_skb=0x4, r5}, 0x94) 8.233987342s ago: executing program 2 (id=2919): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000007c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x101, 0x400}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$inet(r1, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6", 0x71}], 0x1}}], 0x1, 0x480e0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r5, 0x0, 0xd1, &(0x7f0000000140)=0xfffffffb, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r6, 0x0, 0xffffffff004) 7.275365693s ago: executing program 2 (id=2930): r0 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc020000000000000000000000000000000200000000000004010001010031"], 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @local, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0x6, 0x1}, 0x3c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0xb001, 0x4, 0x410, 0xe8, 0xe8, 0x1f8, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@loopback, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x1ff, 0xb37, 0x1, 0x0, "c0c96ed550a0e84f9eecc6025ebe2d233903df51d6fc5629fce96ff2226cab9f882b90868efe874bc3425cffed0b8589d46f68137a7145bc90eab5b7fa9735c8"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) 6.822110098s ago: executing program 2 (id=2932): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='tcp_retransmit_synack\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x54, 0x2, 0xb8, 0x80, 0x85, 0x9, 0x21, 0x80, 0x8, 0x82, 0x4e, 0xff, 0x3}, 0xe) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffff7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x4, 0x3, [0x3, 0x10, 0x6]}, 0xe) socket$vsock_stream(0x28, 0x1, 0x0) r7 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) 2.28408518s ago: executing program 0 (id=2965): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x2, 0x0, 0xd4}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x2, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r4, @in={{0x2, 0x4e23, @multicast1}}, 0x2, 0x0, 0x9, 0x5, 0x0, 0x57d, 0xe6}, &(0x7f0000000200)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r4, @in={{0x2, 0x4e23, @multicast1}}, 0x2, 0x0, 0x9, 0x5, 0x0, 0x57d, 0xe6}, &(0x7f0000000200)=0x9c) listen(r1, 0x0) (async) listen(r1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52) (async) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x401c5820, &(0x7f0000000080)) (async) ioctl$FS_IOC_SETFLAGS(r9, 0x401c5820, &(0x7f0000000080)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002180)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x6, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000140004800800024000000000080001400000000074000000060a010400000000000000000100000008000b40000000004c0004804800018007000100727400003c0002800800014000000004080002400000000208000140000000110800014000000015080001400000001e080001400000000408000140000000020900010073797a300000000014000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.15645774s ago: executing program 1 (id=2966): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000002c0)=[{{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str=':\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.107930901s ago: executing program 4 (id=2968): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003dc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040}], 0x1, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044942, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r5], 0x1c}}, 0x8004) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x14, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r15, 0x5, 0x8, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) sendmmsg$nfc_llcp(r1, &(0x7f00000033c0)=[{&(0x7f00000000c0)={0x27, r3, 0x0, 0x4, 0x73, 0x4, "7d10a2a3a0bc2afc2a6a557c9768186b5d54372afa617fc39be8ceff1db560f4a55e9992e2e9948c91ba7293cc42d442a1b26a15f1d4f4ba9ee764c2b66f08", 0x3c}, 0x60, &(0x7f0000000240)=[{&(0x7f0000000040)="e0f675439cafebfa522fa1b855727701313114f01687c2961af2", 0x1a}, {&(0x7f0000000140)="1c8d69df57b1b796242351132f441fa8206b5078a92b8efac14a7e395b5450a0bdfe454712c1", 0x26}, {&(0x7f0000000180)="2bfbfaad96a8ba89c21a25bb934f2dcc2d1bc5dd28630758d8c988a0827b21627325604b89b961ae3943199858b91ca4375a0223fae3d8fbe278811791be2e64dd9f2d0c7cfd206ff9dbf6a99d5fb38d14c9ddcb492c3157462b9f7d23ae28d9e0ff14bec0024c89354cda6e3b5a749e909688c86986594f6590551cd0b4e10857f4846389e505b239823e232e1472477fe8228d746f4e0907cbf5b1b61f8411fb01d668e87e1dfcbba32ad866f6d015677c095656a628626767", 0xba}], 0x3, &(0x7f0000000280)={0xf0, 0x102, 0x53c, "3df964bd0c4bdbc7a4ef90aa4bddd0459f1a40a3271f3a8ba900c7333b956e4bdfd3da3023d032e4cc89a0c6e88ad9d9d33b9fe34712ae4ea700471865a7e888d60c64be17d2efd41d36b8dc0700d39c047bac0618c3f4ff708ac544725e1944bb53e609df1023b3392c37559034bb9f281dae86bab49bccb4540f39baa38fba860f2423f0326cc34bce6f720cd42ab1ba2f15c0d67bed206d41e199978e564e73ab8afe4a95e9e8fd57f87b09eb5a2c4331d6b1535969bc138b6f7ae4a4e2e703b0a83d8314f5f6b89e8c2ef41d290505ef9470cda8f2354f903981"}, 0xf0, 0x4}, {&(0x7f0000000500)={0x27, 0x0, 0x1, 0x5, 0x3f, 0x4, "e7ebffcf4181f328cd448e0dff5f4f6f5131b990ccd678a92fffcee9f12a0e79b9139f37f6031bc499243be3b0c7c72728bd73a01d046571e44ee17b75baa3", 0x24}, 0x60, &(0x7f0000000380), 0x0, 0x0, 0x0, 0xc000}, {&(0x7f0000000580)={0x27, r5, 0x0, 0x6, 0x7f, 0x7f, "beaeef38e90035b370e141091ad3522897229896d655faff710ae458683226ed5e923e1fb195ade5460863b6e2f6c32834bb993db42d8db00346ce8c7ebc05", 0x38}, 0x60, &(0x7f0000000b40)=[{&(0x7f0000000600)="1a77dc7fba29201944c2ad299ea70b4e7e5b5cabeefabbbd152d5df8bc3fb76bf180d93f99f8084b75351c18e9a162e1a0f2b7254b823cf27193d423cee26635c292ef90921572df9e450a68cafe8f35b0cbffaa95ea733c78d55ff634c885746e9082d2e3991e5076d9d689df226dd6dae82156deb634bad3a5738c9e03c2a4fb19cc0b2f4de3f44312032d07995598afe02e4cde8b75bcbabfc21d40d8cdbc5dd0761d6e6365d170c06fd6fc19d3c91e2766ef2b43ea3b195f222fe1f8e272cafa109581eaef1d983e15c6c78cceb846352071ced145addcc405d784e5c63317bfa7", 0xe3}, {&(0x7f0000000440)="e6c544fcbb3976c38bac659f2ad40ffff649855070bbd5df744649", 0x1b}, {&(0x7f0000000700)="52eff8bdddd7", 0x6}, {&(0x7f0000000740)="1051ede97a8d069a2cd0f9b90d8853cdb35b106dc57177cd87db6d4bbb820233ad30b128484546619361aa728262e608bd4e7e7b00e5ae671e1f2df6ef097e390cac00264b3ae7d89ba89d393763c0d26016a23272a384ad33629a781b712fcaec342b730f8bd07345646406106378724eb3c4ad49214176b25a8fb2c80e136ecf6a1abfb6816d90baeb87379874749a35d11ec51657817e0bd58fb1fd566b281b390b52", 0xa4}, {&(0x7f0000000800)="c05bdc0c478a6ca81b357b968c7c2f9ee5d3eb64e388bebb23b1ebb23bf5e39d4997df0d200b1c81328438623c07308870fef435496a41dd42d8a456ef619e84ed8be2fd244377f785927e06d6ec9fbd07cc0265da9df937a132c19b4bae37fbb3109ee7f6c6d79c4315f192f6034ee02f324e698f906383533fbd3f69d5f798652b1a198dfc5130e87ab594670b3f086e964efae826b0f0970c031c", 0x9c}, {&(0x7f00000008c0)="ea5474085bc279036f2f40f0c67803caf510f9b4ed5fe7610268deaf95fd8f1e917e69f077c7d5142d6f815726ab4d4e24c97b91d99a23284d1ad53053b7656e6cc4b2a5cc2287ebddf6d4052dacaf461382039a8acc42013f722a6a82eac4c0ec6cf1474d6410f48b33ad90a89bd5eac535deac53e61d144ccb880b567eaed20e551a8ebe0956155dbfe656e6cc070113ea2c8b231f2439231a871ce7436a540e14e6bbaff40b8881b510950227667e0de8535c53be93197411585c", 0xbc}, {&(0x7f0000000980)="dcca01f1081cc4fccdda3083a48b955b44b8e5a22e36260b8c9e2811ce38c717741cb174df2b2d9567e7681972d5fe1087c3b44cf15e164836c7f37427", 0x3d}, {&(0x7f00000009c0)="e04e0865e0d34b58e185d00b524c11af010fda4d32e6332909a87f802dd94106096521e1f36efbe83b2fb5c3ee1d5a6f07eb1959d73b334ad848daa033806ef093b0b72b25035cfd09300a6853ab539c14d58ae3e09cbb2c0625eaa2d52c79e7971fae2ba0d4c22f03d3a089cc9df48d496e20ce8cbf69d540be7767d804b726a65d0b9a43b2634996879a7e4db99fa0f0", 0x91}, {&(0x7f0000000a80)="aa4087186a832c2900169d4d7591cdd6b4c3bb9398d358eca6e1fe9aecd21ae9756cac4b77b09def1be71a09033e68c45fa3de2b3c34a98defe8195ddcc29ded55eba583b8f18c1b35df8178f98e4fc5af4f42428cbf2360740a40f8a0e51ba6aa29956f72a9c00d7062369c95744e964916a18e3fbc59727afd06d24fe71b0acaba71459082b791a79efb48aab520783528ad0ac54dbd711224dc8fe73997704a83fe5e6c8e6e730257f252076c17", 0xaf}], 0x9, &(0x7f0000000c00)={0x1010, 0x102, 0x8, "adf9024705260e290ceda03c0d855da61087684a933fa315bf9b3566da694d2f43dca719631800bc23316bb14f1ec92c121fc7d8114654957e03af40cf8e8451064b70d89c73ddd58b96b05ccad2041e0d0cb4fb677cccc873f560573257adc5e461f79568608005bcd30afdc36e91a6bf8759c46137da7ca1d6aa5e2d97b7bd04cf391d141745c1f27708bdb5e36e96ec6c31dc2bac5e42bae077d7e20201e7828be3badbe8cf737b66a7463f48b7759506b4cbd6559f351ef028ba551097c9b5a97dc7aaea08aabb025114b510a73ae29d51d923278fb73e20c0065b1d3cfa400190574faf5c343aa9ee5f8baada3b51ac98ad779b77186545d5a8e14800687a15bbb8089389ac6f4b6e34e9aa672c6cfc016727d971670b91bdac8f5a960ca71f62b67d7a72cc1e671bb694b3aa5438a8fe890cd113e9f752e72ea06c783833fe3921af4c799f6ec6de50734ffc74e4b6029bfe9fd0dbdfbca019af7626a132e39798dc0337f9ce98e0032c5ed0955c031023353c22af09907394ca60621fef2ea7275121a1b0bd5f4d1237314ede6361dad360c77b8f577912860a6e830e87352de1866c3377ad3d0da1d8f89f4f5c1459b96f9fa4630c4fbf93ed2146526268209e414202eaacce8e17d63d2aa0ccf31242274ec833e6f0acde049e290517a43b3e2e0fcc136f30acdb3b3b9fb5f3ce5155079ff29ec1f9cd4fd396ead2dc36c73f58a031e68b0f06e218437f9dfeee6452011f3518ec2ba5e1aee7b13a7c54180c32e24ab6f78e494f532d55dfb75c3fdbeba6277d916c258dc9b8903a3b71406ed48fd0715686c15a30f85fcb40a0156d941485fd1a2e896e840edbaa6ee6fe08c20cc9dcc880f8ae9e0c1c36299b2e2bd77f18f69504ffba6c7a8d1472041c733b36f846e17441c3b2938d753fb606b86ea5b61fb36ca01da0bb835529d43977473e9c072608d6dd590e8d901b3b31945d5334a66d0e9440f886be83b154a9c21aefa56136174d82027ec806d9bb2d82d51bbfa3c1572cbcaf8efa2e700610275a6d10bbabeead61c172351671488166ea8d5186f4e6088fde3d222141d6892c3ed7126d05683f0c978b0c80d990029d94f7d54fd7b3ca5bf3af0c34477cb60f3c0ac9f01a3d405bf1562294d8cd2d3c33c19989d7b794a56d902895e047b48f8a47da612680cbb137a3f4e2e6d41fb70a4ba836b72b2ea2a33160d9e0fb581e001ec1f44988637319ec3a48a7704d26e13474d56e862d87083519c4568b51aba5494b375eb0ba936e17cec6bd708e29454e20f099c9a3e2302bccc17378d7b605e74424e691bd146c9d30670b2c70381617197cc3c72285547fb0c074b3d30d98944c033f4d11c19fc91c1b87c177dfff3c9faef1a9ab17e2659eb73481e37ea377cb7c030f6a63eefe6c5e904ad971eed5fc6835bd75b7d04481bc4b9f2907d31e04fec30187e1887d8d7f359b90f8cce23a1fbdc4fc2d2edede6ee8fa2e43df97e2821e66cba0981d50d9275abedd5d053dafe0c61c44fa1b5b3939130c5c4b00d509b98393d0e10d461b63319cbc2e7ce69c5af3cf9f482276d018ad1377583b323345bd0e46e622cf5fc8454e5a3d3536ae20ef6a125bca26b69cbf7c80092ceb6b64b8d681b55d14d12196663d51ccc6dda3843d834bfe510a38fdde62b815c076765a23d4da8ff60c6189e66ccb8be55f537000412248489e4e0a353245e0f3e2fcbb75c19271b6d95ba2deaa8cb08be2073e077e3b2cdd8e1fa435b216f8838122336d5daa70dadd6e3a3a51245a967fe9a42c0b1f71539632cac120af8bdc23710b9bcfc65ed59cf87d34865b08c5710d5842806746013ed3df5daae7714471360a46ffabf7e4b72a157c045e9f3aa3d94a227b2e924cc0df3881194a6dc1e89e8d28ddb72f31cd82ba7af7e99d86c9efc113720e042e88f2ed5edb9341eaeb059a00672a54a250601a4ba86f2e8b0ae6101801f6f35617db7e548a64062650eb604a5b697d5ffe83cafbb042a3b5c223f95d4411ddf3f418d525f1842c2eed5d6f35752740e037de58b5e9ad604b77a2a4fdc6063b69d708b9a7e68a8c802ee8b7e4192d5c91ef0e9c311766b9b6626929437df6ac350d64ad4d83f4d8e8ea92c2d175950af39bfeadcd7a0136e81d4ac5159d8977314e5546f14038697f7d11a6b899a84fd85fc2a202d837c8079fea9390ef4f761e4a4fcc8acc1ba70b04be1e1ae149836288ff4abe5de7861f351be22129654aae19390d931f7b2a1b3eb243ae10799bf1dc0bb9aa6fee47d5f6a61445f82238ec7d6cabc24d15ee9c4acb77a39cf09b83642383e52abecd60a7af01c72f4508c38a4a8f5e2b3f51b0a970b2b0b01f47cc7e71995bb290a1b6061707a54477c4b79812902646b017ac6f45b7c93e5158f95726b591536e6bc888e12d0e7d979e10f9e5f2d00d24e0949135b0ebe3e8d59a311c5613e51cc13aa01d52ca3fe454132dae8b1c3a4351251a1a3faaf9db0b7d57a3cbea9f50bab68c6ed0461d74e7152c98dd0f8690c1ad5f776e99ef2c7f8493d73bb3bccc1ec8d2ed11e7dae1f0ee276af8d547b92baa045b5f552361064f7aec2e76177da6891343c69c560e2712812d35fdd4556b0742698840cb9940271d54745eb87a12a904e2de4ecd81cd3123a7cdda59facb6a460241e40b56f8d4e5fba0321d55da60a9a30ef80ae3f1da5643812dcc9c023f97b1f60173262ac0eda0c694bcca7af589f4932ddf436c07acb7f2b2a61f528955943fe55c74a99139528c870fe437e19c315929d84280e0ec44849024955956cd23e19439d239ee7114309a403cb0eb7ba14db2e1d63fed75b071e178ec4212260168ae33bd435397f7a93b5eddf91348137884bcd7cf00952cc9bc6fcc7ea814fba3466e5d541ff4854ec6bde7dc39500375349f2a96578c4c7e223d494c4cb08ad12b153772e0fdc39b0f3b00708e132d9fdd4ccf9713b4283ab26bef66901cd5153b326002c2102ffab0fe0b3e8852077e25c943cb8e7d6445b59721f98fbaaa9a77f71d5a2cf4c6a9a61222026b55da93313381754224b1856d4dc561df1ec7bdef418e457adaa002de1553bb375a79d21f66bdd544fafb34e60fe7e5b8a7cca3a4a77a344913666162a1eef549306ada3708946127fee514d99cfe8082ad14d4f51a74c6e4036f29af4ef2f50006cfea11da4296c43801725bd991ec5a5b2d52fed128a3bd5e0e0b237219a349292ea6ad25f774dc65271df0ec768a695900ddb7d615d026264abe1d2bda950789410a21dd0c6e4e04e6555ceb9e7b6d6e00ee581d75c4c774e360643eff83ed6a0254100f694aa08e88dfd5528d268ba953d898b9574ceeb68012da0225a6f2ffed1b32af19762e5bee3f8040c0b99d00c0a16e5149c75e65b9170281b6e9cc7ccc927459e70b8196ec9cf1603ecc06c7b530b69339d1ef2f52289deaf44f7422e56413fd69a0c7a70f9ed734805bfea1e2b99eb9a6e5f3986f5aec602291e99a861b702674ac58f0e140bb5d6d593c4b724fe58e006946229e17312f775e2925bb0cdfd80b4e1c28859cf64b50318cb2fdd15e3805038364ff952f255386754eef5b32413e304f7551c1b243c4a3f9de69130322cf89ae2ef1ae2dd52357269ab32ab6fa56f5bc6babdae3b28431622a6bd544f417fbe063358195989b89f60fbcb3d02e5d623978e5c5d8508111aaefd2b187cd53bde19838c43eb34ca06e9e21d8956f8857e11a803c82a681cdbaeea2338a9004396ab3a9b4fd671dfa09a075f54199e8a054abe4db554bce029a564df7a7abccc7094431fbd8f1d0cce03466927c862a4c86176905938c50856b4937209774ff2bb1f6a2bf9ce37208ad061f0782e285356257dd24f20d5ab14c9435fe128e80a0a01f998752dd5fd8ae17dfa4826703438df8a70c65f691567df1e3aa4e6e1d8629bd2b64b14907888c05851d381c0d49fd7f98e5a5160b0c2e42f19302ac768744b5d7b462a0380dd363b8a01c9783f6879343cb4b2c55a5043b6ea8442bc03bf92c945a29d5a7843832147cb0868adb34e2d6905b2784f6e52462ba85f8d11bc148830837f2f3ca3ad8957fd77f422f2208b629b0b43db5fa6f7cd9aeab40ae7e2cd89d675c3b8857fbf8c41196ff533d510905a09ce38b690a8fcd13b75db015380c481a54cebc6c9dab5e0610f66d569224074e65175b76340cff4bd4d21803062a4308b932438459656ad0b0ea2e879f3623005d9c0f086ea78e59ccaae49a1c6fdfa5a8f7262e1826aa57f99902378dbb8ae790a965a063479637bc39f372e02045f65a4505796256f7a8b70fe42e385b029832a506296ebf24d7df0101e16cd98446c8a8f5a7b45d62b97659ce7725f69211d0f9755946b29d2f1d01ca1826ab74fbc28a7fcbbf474e81507adc647fc88ba679073437350473b5b5890e40337805b6afaefa44d47f94fcc32921901309354bfb95eda8a3ec99a1a609f05d14b7e4fed40b644fad9933d305a0fd1a2906bb4fec8e9eb3c2d13db82892e0b672d29f9d3b25da9b25be60fb71199728fafde5999b6579ab3f4e322c5acdd7058e5662ba9a0686fa970ca26fd32bb4328443acea8987ed31278deffad5e955e23054348a1e57a6b07d64e927416dfe907ff8c52a74aa917d7c0fce5624c1a3476989937cb85d8a9906f6c31c6109bf0bdce6b3d147dfb14fb082ed6ba8e3c0dbd0f8f8e50b3a520c497541065c146459bf91cb92a079f489dcb370f03a17faed10ad486f70a9a78d38ea350433608fc2c032106b8c190771af6a95bc9ed6a39a8fe37ad4ae02933abc533c8fc2fe878dd9181e1cc1bbdd3d36688241724a6dd767c76cd68408695060440831259c9084a1e003105379109fbe56de5e93409a29ae832f91f770c6d1c73e81c34204c6c28d032dc622320bfefde04359cd8cdbe0ab0334d78d66a05141be26b16f89f0e0bcb80717f85000f67770ba4db082a9e00b21ab092512dee92aeb9e86f92827a7eb36f4d06ea9c0b1404a77a085f182379cc71219f930172e28da16de4c9118356c70d8f89413d3bea6064197ee790dc6351fee6d048a640bb51a539e56d66a6012f3f955821a42c1b4d7cf0eb040af80c89f36738ac6a80cb0870a6a8a3c4e87a89b94d819d6490bd4ce21f13d26d370e305296ab1929269c7a6134dcb8304dcf6917bac7ab42b02f9e12a1b91c4e0f4665e5ee6c4b662929b9921f89a41c193cdfad83dcffa62af03fe742632efb5b72f16dbc69ad345d0e70dd72ed870a419f23a2aa9992ba8fcd53bf3374d5044f93a92badd751d76e07e92dc0782ee1defeae14f306d7a0e443eda60ccba60e70598a0b6db235d9fae90aa44c0eead9cd2e7c7719797c4c5a0ba67a4c718d9df9a7a8bd330f64844e66fa046e8ba1c197d348261ae7f72db567d5a0770ac2497a78ccf2b73ff1b0d6aca497515c3a2ac910ae20978f4f2bc8c98a5152888acb99ab5467e17ad29cbc0259dfe107bafd02e788ecaab1e1b44241b7edd2f2b2d84b7113b174c35a36f500198ea82fbfd32af5696d7714a63e243ecb512bb318c5fd5d5ee7786e7cdc075783be7862ff51d9f8532f0ff60b8403f450b8a5c0f942ed240156949e677879a9a3902a787c1b275ea408168dfa244f43a7dc976047b0b33fd6d0ed8ab2d65655011cbb635d5dd1d1258af7c98525aad4800d34f51f0c585b657b7d439d7cb6e89460b85694be488e59bb00a5533fd5e046e08d70089d74b56165968085e958ddf3c2be6cbdf9c6c9e"}, 0x1010, 0x800c800}, {&(0x7f0000001c40)={0x27, r12, 0x0, 0x1, 0x56, 0x5, "77018130d299694985885e2d20c76bcbedc81298ce37faf22e483d7015932626bf47d015241ddc85ed5904575efe8ce565d9be0c220bd2ad40d41581f6a188", 0xe}, 0x60, &(0x7f0000001e00)=[{&(0x7f0000001cc0)="4def8aa83e6f369a783ed71bc4cc33956b4ef09dc29481b6cef8e89b3a7ad3c568f6f0fda2b01743f273065de0cf26a8f8c42bcb83a8d068acfa4afdfdbe1652f9151e8db54f216c5b44092adaa7a89c2d6d341f5d5b6f6338b92beb014279cf93ccc80fb7f787373398", 0x6a}, {&(0x7f0000001d40)}, {&(0x7f0000001d80)="daf6ebb0079608b4d3a48614c04a1d7f08bac03cda4c2223789730fc0caa8855fb541bfe79757d3908ad9db62cea32a939fdcdd3f5efb6db1529d2f6a93009e2fd3f830bf61c2f98de7f9376bee571222ce1004aa67d716a13beb1fe759b02e20f17e98bf3fb05edbeb7508f5d4bd63d639a0d", 0x73}], 0x3, &(0x7f0000001e40)={0x100, 0x112, 0x6, "e82486ba1c996f20e87b1c00d94226df8181eb10820a34e2a12a162548c48de6d20d026597b1bcc74c4438b027f97d54358b6115417e405d79b1b15ff15d808276fc224566366687991c49fe3db2996ed906b6b686083edbef1fa90c5c3ecc8bbe6b5ab56953b4a23bca8a462013e1d1ee9d817c90a4784f811a71f8abd3e48ce26efdf8f2aabe9478c098d52918a55ff4e24c3e7c772ecf8e4fdee0ef8ac4f7a6c761e024d1c038fc6c12684175843d70567ddd92d4a7bd09e27b589129bbfc931ff3735ff89d29643246c3da50aeff3335f6d81bdb2cb1e20e2523efc0d079b00b05b1d39564ae2486"}, 0x100, 0x4000840}, {&(0x7f0000001f40)={0x27, r17, 0x0, 0x6, 0x7, 0xb, "5d34d22821604e792687d7626dd6744927a6bfce42e97b43bc7a6033182d197a6cf0907472747950eed195131a1b776eca2f0d9f64d966aae610a0f080c0fc", 0x6}, 0x60, &(0x7f0000003280)=[{&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="c4ecdba49529be0898ac788e549cbcee04b358", 0x13}, {&(0x7f0000003000)="146e575530d4bfdeeaa4e5bb35a99bf88113da3a3d3cb98327ea2f10391b4665e42f900ca19dd8a15baa13e60d2332693ac84b5c42b3ff58557314ac5e349c759310164d669ec1f286a2584a7d765b4bb9ba1e414ea56465602e293719a9c24d2b07e152a4f5a033226b68ab0e1b4b48e103a2c5ff89daab9c398f95147c62e6353db21a863c555deb3e021603ecb9909f3db98e29ca6ad9fbc9c16f3700c802051b8657a5023e2d77", 0xa9}, {&(0x7f0000003e00)="81e5d4dba4e1e1f97dc065cb74fe6ea97c78ccc605e391bf3ea08bac378ed576dc181d0634a8fdf5f3a51ac315fe1e2fbdadf37c6f460e57507a129cdcce256c1d667ae110c0c5ade820d2f9528af237dbcda4ba5f4c1e5adf80396d59e7df61bcf794635f57664b4a8c505034c60abe8b2d98ae961cab79961c43ed58e2621a1e4a50faef46afdeb402f03badf54a8c24a70300cd02e624ff44a128c70c20695827503ad918f19fa8a9823dba95f8bd4b3f4a90130331d12229388cef67515fb4eb9c51a0308b01b0ffaa40409d31df3b1b8759aa1f58affec57137a0edb7e265031ef83f58e766d29363f21d18118d014a0862cb98230c4738f32b67021ac865a2ae008d998748ef4b029cfe25c5f06e55ab4a8dad4e87e0753b0eb8dc63e4a2880a8133f69fce15cbb802a690ee016214d5f8538d3e632044eb814621ad715543a278a3594d05a27565de81b713c87e240fe1d80406d64ada36cfab79b13009976c2c8bccfc66e26b32990d4ee58ad7343c27307cae74aae3757c4f9cd35970a91afaea6bb0d3e659f3283f44b8fc4821321174efb38574684b554f71e22530b9d0c10865ae5eb353e15d16cbbf783b17d164a8306d217367886ce29f502d67e637cca3ed3d6f0ddcac5f761f788b7bfa508080313c2c9f88a005ea53833e026d84c222f57b9b63fe1dc7aab49916170178b20855a54e049385ea9475638e035d95c11deada72b2ac9d535a903a337228efd9076eeb2b3e907f240766d0d30bb99d8c4d30724d10bb21d74747717761056e40bfe610260a6a29a441a8a6f2ee1ca575350d1b672d8b1ee64a0891e4721d45a89329b1f207e1a2dc491d4194ae53ffb3c3bafd8397afa5abcd1a232da9d65e71101c8c3a066d186a28e3c4c2a2f43b70d02d71a119c4a78b7b6dcb910664268940f8c3004df9f5d0f665b1d562c20343d2399c9ca647619ee041a8bdf2d574300e27bf8edfedc13a44f62c7c6fd07a30bc0f7cb7adc3b8bc32ec5edc5b0094cee84f66d48b51c90542d93996d6cbf440c7300ff12f8fc44dfb34dfa8e6066e52c5081a7bdf0426e4d3ca1ef13d673b51cafaf44df887d0407f8c33aece4eeda9c44fbbfc9bea388dbbacefee1f0f7a900992709c2ae8d0bfc139460bee931348aca5e0711282f2c2c5ff29d67a7ffeae98a74ce3b96e5d47bd5236a83cf67e710e581a629f20b685e965d1f786201ed2411b72a03e0a7da0010e0eafe9599d8d611141def9d3bd5d8731ffc6b6b4579268b0eaa206bf6fbefb16e427d778ed8ffe0e9091e50546edac28de20d4a9dcc9e38efe6575b2d77788092d2ffa71a4dc47d810e776dd160d189271b2555e01fffc0a8da1fa1286cf892a8004b0acf7aaac6a83279b234007590645cf8575fa7f3a99224d2e7f790949fad582b808dd682f7ab684597be513bfdd5a1062b6c777b87467cdcec0613db092435a080ecce482371c68b580f3b2dfd0ba9a95061a919602bec9d9474aafac33386be9708ffbc146bf0f25caeebb12457848797356353d2841436f2f499c775e1541d8f23207033ef551763f58f1bc20e13a05d2b79b5ce8cacc0e3d7410162498441f76fa25412d46b131bd2f8507d2e2196987e6eabdd45e52991aaa05a5f8a860cc25f4177879d6f50d2f63b167a109d2437ced229c1976be1d04eb91f63e0c513e195170f394810547188f2095c99edc83f9256796455ca7961b88e4283cbf1b88b4d0121c8945940f127caeb24eec23f8eb1dc7d81e0b9dec42aebb7425984c33abff3b78fd9970462350706efad03845bc4cafa2cc175dccbb1ac555679b4de5d7e7d69e770246ba8ffba633dd0fb32b833f88f4ffefca2c6d3d269f3eac169a2ad503e0fdd7491ba24c8c88e5ca0e36deb0562bd137ef9fe918e9eff2ee5e4ee7c61b3e57a3214796141d67965053a81444fc01f88cedd8477fd87ef0cfb088f37b7cea17e566b647ca2fbc0612b753990703b8b1c9719a017cf1be4dddd1ad7dcf92909d4671d48bdd7005cecf23e0cad38dbec45c8f646a7721039d4a46c9c2eefb7bb67c16dfd389d4f6c73593725cec928b6535bf0fc4b8912fa379883520868779d823557b54790f15270375cfe04639c2072b4b537fd077c59775c39be57a1bd669b0f1a232305be453466cf51074e3ca76630f221d9bd87a9c2acaa9e9989388b2b38d3ae2c93257c719f0abe7d7e3e12c19fc59415e84d1b4e1bf5f232eebf277268bed6c74962ce50e318c95aa0f9c034a05c995ab96865d6882171447e0d1e256916a84fdd7c64a035115165f7e8fa52571e2a9d3c5afaaf0596274f8c7341e60416dccf95fa8398b65b6a384127fa9e1beae01f67663f471fc28e294c84a78c1ee3c88bc8f363696564503b30dbad1e1b5a11e2854cf1a0fa71612d2d7cbb315d3cfbd5c3441e5d85019815e4be445838a5354e49ff88f0b540a6c822dc0d217667c3e4ac06311bde30f1b0b445cd72abc70255a1e08bd87cf9ac3f7bfb298fc387bb7303819cf6ab940890817344c28cdf58ec4269af1a48486478167774b7caa27b23d31a21878adc3cf512fd9e45a4aa9c2c7f16f17e2a2a47cf9f36d26c1280ed5f010d3bed8daab7deb0709fd1512cd9c28e9bcc43142dc8bd1220c36739029190519915795ad3f63c3e9ace83f224d844a523f6197e928fcedfdf692ece000dd4f07a3bf5e1cdda1fcecc624e88dafaaf2999e554f258f8ba7650f56f3fc60fb8d7f5c2d03a7dad839bf9a826760d85471ac822595e43e0b1ef1655df3284cb53b8fea1f6eb8bb5a0fd4cf57a1ee1a4e95da241195614494fe4962c9ac3ad21e83a1a50b475fed11703bdf8943b168f82f090d41e36a61dfae9be2a249ff484d965fedd8e1679a6e50b5830f2861a3f2d834d66415337c2f8583ceb06307a07f63bbeecf8417e172da0dcdac0a8c6fe0436dd41ca1adce4a56ca07fc39d59e22d2dc18728db182ebb5bcfa987214a7df4db5a8498274c02698c171baefb845fdf80c3c02312752516f9b99704596adc4f17fb5bc213f96d7f74b9c6075790516b7a21a585242d1ffe0ce2a0f8f45215f6221bb857ebd3f0b8def64edafd5f924411f7eac87dbbb399b4368595bbc910c9114ddc5af1abb22b90ba2f013d2e5d62c38f68677aafb9d89ae978acfd5d11f7beb3adb79d02cb42243f230990fba14ae3e13af764c04c9a77df244885a3bc994e69617086f4181d9bbb3a0787f3a24886640a398286d14ec686dc358ea1d70a1657afd80f77a6c451c6999e2f81eff261a19aeb52eb5da7a69c9513bb65b851f5c4afa238e8463a09adfe51386cbbaa1a77f92ffb0c9d98eb3a231b9a9fbf941db9aa041287579aa6854f7d1edccd81767851202c3fdc93ecd0e9987e5460a2492fee187b86fd4b9e6e6151b6d48ebf593982e6ae40fe707d030f7ab1f3ccc0726b9fcfaf7bfcbf34df5eb389d1b117036df945f2a3b2a1397ed7aff7c72210dfde4b0ee64678c5ca879dcea84d69625236b7272ee7e7f0c66f4e11360562f296b9a8d6f9fa6e89b7f41846ad0b321271eaa98f7567129a1e867dabd48b9adad4c9463d506d8ac2eb6d4e640e955c848f11399bfe2487b41743d1b0151d4acd10b8cd588d6348c0652c660eba49f59ff8b85e8b53c51894015730b87fc46b4da4a2caf0ff9c3b324dd33758b0ed4df26c567915911a0f49e7f2423967b7ffbc3aee862fc619077757055eb3002f691582fb37b08dc96c62f2e777d5874e0a50ceecb9a467ff2834c0c7e71a12864a9c5136182f8682b49e18793f0a28b4e8c59caaf39db382f66b20ecd69cd4a420fa81f9947ae7de27587ede66700e07d69c7187f61082050d4ec8451dc32457a6b2e4a0016d841b5d628f518bf729849c716dbdf8cb209c675cba8c66a5b18760ed143c4ecd0409f86b7c58fd0c98c2f1642e3a429553662ff1806d516b0b76cfbcc2cf81b3e904073ef97102fa2d2f5e6dd25b6c3b47b040186e36551ede62700e4c791037f8474bd3b9ddd9635bdc41b443967feb9e2f074cd33450c1a4211f5f2eefaa3fb14c26a311622bccfc7d769c6bcdc6f019b937aaf52209ca3d0a008620452808b6a757de0e234add54e7298f7d32d34728248dce299c85a75767406bf269c80c8fb5a6ded165eba28fcad83060f0d85117dcbcbe4c16ca6776d45ef33d85cafeaa512bd1954408613c84383eb43bfdb6f23f68ddddce4b755ccb895d04c2a822406e98fa1fb1ed8c1794f9ffd2c2b87cf47156ebd0f0b332dbb843e5bae094971c1f1cd46fba0718998e57e348b3fbfe3900c92d3adb1c76ee59d9f4c21770353916175960680d59323d87af9b1dce77fa51d9c1b6973fab478691b0a489829b232fa11677ac578b14415506b7f5500a3256c0f3d7d214766e8deeb3aefd15e552b0c915c340d0355d4efbf418651cfa9d3c1f02105fd62a5248f205bda559b524916d4eeed6e21ee777c7113eed9da57bff77bcfa7431f5275a772247cbbe370c40b89f156a45057bc2a4f51ebd5ac798cae7e4b208beac8fddcd3486da16697b1716a4a08e50222f668099d1c3a59107a1d872e6e3f7188095a9cb39fbec7b706e926bb555a3d2c3571c5839ce671011789369b206dbf00262315b25faf24effa91f7f650ffadbe7b47dd090be7e582a027a3dc13656dbccba78d9dcdd2ed3cc6059380b914b1a8eb4e64b8cb837f24a4654efae7e2b21b0e8e07c4f9c8b428347c46913429e593fd407ff7e9d54a3279a8c6b92ee421912852e7932f6b264143ac24d5cc4eebd396fe21cede192795b72a2597324bbebac1cfbceb39a19060ea47b08832349f349b0b6d45129e0916574a9db8533e5c0815786139a4f2595fcb7d3319ac3d79dd1690ecac8b7b74c56038d9bc3763be9268b11d3d4b8ed1c13cf6e0956ddc5bb1a067a28f25dda2022a2c21bd6ba589d3c2feca0df09cc6c386f7fe6a621c14bffba2526fe0d3314a00e2ccc083afcfb3a13b31ec201caf6c5b84764cfadb96bcada92925bfe5c1a1bbc675b962f7771a046a7bb565bbd18b945e40f71c9a7836ff4f93d15da942103353e2706571697e61811eb0e34da7850d34064a18c0a42b6bad8b33f08197fc3ea339559c6856a0173c9b2d0033460c2347eec15aa06db976a78772d3ee4fb64ed57fd18694bcd071364a4245e26cb8f62dc02b1808dee1933cc96ec72021367e86621afb2de9189db615b5de3b503c1168b2187ecbf0a01e65e4e08fa5967ecbdabab03bf4a462bb02cbdc7ee9d09fd2f2950dca3ab8928227f2a48f1b38a4822c18e592cf828041c0c37de5c030eb19ff1a0e2c8d9301503412b9e6cbf485bb02c7a5ad826e89676dc6ce2bc443f55689d42364d3068cdef08c1dc2cc963b1bd9cf97d7e4a4949881f297c6267c731325117e9f641a6e830d0897f0bfcc4ca81b8caf378d2382919c02328f256049fa590e37caa29e9fef2604bb97544ebe0e44cf27b7d7c0ca4f805febe31470918d36998a554927d2e8f445a715e6b5e733c7230126c75c386104455544c02b16bbe15639e6373ca81fd5ee16c6c506111e4527a80dca23ec6f9a00c3367c4955b2c4189744e1c0e6581dadff8a286ecae4d722e0fc9f5d18f305f9144cb5e7d92af0af86fe26c83b61dcd1a9f5a57e88caf78ac85988f57a623e122c461f7b22eb33b54a1a32041d8bae06d51befd78736b6b86e4c8895a979b26eb6ac402abf02ee1b74e3265f841a531a514aa08aa32e2f460b8622666f3efb2ed8ac938ed332", 0x1000}, {&(0x7f00000030c0)="74339644fb3b1018746929a69f34e37c232838dc6d4e1af934b6835243a785efcb4b4d1e24e30be305c06f602bc71992e79a553fda211324d747c1aa43", 0x3d}, {&(0x7f0000003100)="024e936e7478a51fd0a4b62b5702f0fb81cc642b3c63a9ab62e6714a4574be409b9efe5c88f4d5a2fe87d15e699e52bbab50b59e293d86d2636d4a1445258f3f68b1f68e9afbcef044cd7887f9eb19b5009a82d723f44aae32d1359211d3997c816a59d3c07a78cc039c6b35aeaac1361bbbf73971ac1f178c625e75b68a22a2d0386989b62bacda4d6755f9a94e4eb077034aa2d4a164e4116b2be8f0e9ce363a3c29b40f5d92fd5b42bef699bc9f566888881b87e530983b1a405c96c33d10463fb5e897319fbdf3e4", 0xca}, {&(0x7f0000003200)}, {&(0x7f0000003240)='\r', 0x1}], 0x8, &(0x7f0000003300)={0xb8, 0x110, 0x8, "b9430f09b72989117f0801c4283c3e540b4c337139d5b48ceab237a748b6c6ea00ea7e66ee26342f673ed5f16e83dd83131c68afa6e22cef670f6c454c17c95168818f609b3ae73945fb996b2e321a66d223f5cdbe218ff88a2665c85ed0ccb878d51c5d49efa5c52ef81e26b22c5958154c4717297c450ff9e6b205b45e06be93766eff276c6acb699c6095e8b8685935d4bf44dda3bbd805cfbd8c2eb2261705e4a86d58"}, 0xb8, 0x4008000}], 0x5, 0x4000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffd, 0x40000000, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffd, 0x8, 0x4, 0x0, 0x40000044, 0x0, 0x80000001, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x3ff}}) 1.972027791s ago: executing program 0 (id=2969): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r0, 0x0, 0x7fffffff}, 0x18) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) 1.971066653s ago: executing program 1 (id=2970): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "8d747ea4dc9278634a4e3ae552"}]}, 0x28}}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "8d747ea4dc9278634a4e3ae552"}]}, 0x28}}, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0x205, 0x4) (async) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0x205, 0x4) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x13, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x4008007) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x13, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x4008007) r5 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r5, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x0, 0x3, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 1.757737272s ago: executing program 1 (id=2971): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x88, @empty, 0x4e23, 0x1, 'sh\x00', 0x21, 0x1, 0x8}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x26, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x9, 0x5, 0x3, 0xffffffffffffffff, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xf8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x1000, 0x52, &(0x7f00000001c0)=""/82, 0x41100, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x80000000, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x0, 0x2, 0x4, 0x149fb39af9cf539c}, {0x4, 0x2, 0x7, 0xc}, {0x4, 0x6, 0xc, 0xb}, {0x2, 0x5, 0x7, 0x1}], 0x10, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0xf1, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x140, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x80, 0x6, "589619d3d82801e2c71d6bddd3e1b8d46e3308a4cf0e95ec5b6dfd77526824eff036db4924c3c0e455651bfa237f86497e0569974474be7225e47d625a293ef8fbcbf50e54285b68b9b604c8ee277bc7f59b69b769314cf66a7aeeb6c12ceceb710a49e60eda0f198e6a7edc8d1e4ab5cc21adc996cdc22208f73650"}, @NFTA_TABLE_USERDATA={0x5f, 0x6, "ebd94d472a1033e4673196f8b25a7145751573508a7d92771bb9e7b2bf288bde707bb76eb0cc55c48cceb475c53750c21a46ee96b44fd5588b62145d2576238a6941196ef3fbf5104028743f06c987bc89b9016204006eada8a588"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x200080d4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, r5, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40044}, 0x4000015) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r6, 0x20, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x88, r8, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfffffffc, 0x39}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}]}, 0x88}, 0x1, 0x0, 0x0, 0x4400d}, 0x80) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r7) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r10, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x8) r11 = accept(r4, &(0x7f0000000f40)=@nl=@unspec, &(0x7f0000000fc0)=0x80) sendmsg$RDMA_NLDEV_CMD_RES_GET(r11, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x40, 0x1409, 0x910, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@restrict={0x6, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x2e, 0x30, 0x5f, 0x61, 0x30, 0x2e]}}, &(0x7f0000001140)=""/15, 0x2f, 0xf, 0x1, 0x8}, 0x28) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x64, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x88}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xec4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1125}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044000}, 0x400040c4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001340)=0x0) bind$nfc_llcp(r11, &(0x7f0000001380)={0x27, r14, 0xffffffffffffffff, 0x5, 0x4, 0xe2, "bda6eb4ef3773cacdb8db8c7fa49a8f3598a1f940d51a8d73efc76505c56d76ecdfac19fc92454d068e0b726abf79c10f374e8813d53c5d3c9c39689dc8f32", 0x2f}, 0x60) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000001400)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e23, @rand_addr=0x64010100}, {0x2, 0x4e22, @multicast1}, 0x100, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffffffffffffff8, 0xfff}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000001840)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001800)={&(0x7f00000014c0)={0x340, r8, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1a}}}}, [@NL80211_ATTR_TX_RATES={0x1b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xffcf, 0x3, 0x1, 0x3, 0x3, 0x4, 0x480]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7, 0x8}, {0x3, 0x7}, {0x6, 0x7}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x6}, {0x6, 0x5}, {0x3, 0x4}, {0x4, 0x5}, {0x7, 0x1}, {0x3, 0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x6, 0x3}, {0x7, 0x8}, {0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x8}, {0x3, 0x1}, {0x0, 0x7}, {0x7, 0x9}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x6}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {0x4, 0x5}, {0x6}, {0x4, 0x2}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x2}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5db5, 0x4, 0x1, 0x4b0, 0x5, 0x10, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x1}, {0x2, 0x9}, {0x6, 0x7}, {0x7, 0xa}, {0x2, 0x6}, {0x7, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x0, 0x2}, {}, {0x0, 0x2}, {0x4, 0x7}, {0x6, 0x2}, {0x3, 0x5}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x1}, {0x3, 0x4}, {0x5, 0x9}, {0x7, 0x1}, {0x5, 0xa}, {0x4, 0x7}, {0x1, 0x3}, {0x2}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x8}, {0x3, 0x8}, {0x3, 0x6}, {0x2, 0x4}, {0x2}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x8000, 0x3, 0x0, 0x3, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x1, 0xfff8, 0x1, 0x2, 0xa, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x2, 0x4, 0x5, 0x7f, 0x1000, 0x8b4]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x1}, {0x2, 0x7}, {0x7, 0x7}, {0x2, 0x8}, {0x7, 0xa}, {0x1, 0x7}, {0x1, 0x4}, {0x6}, {0x7, 0x2}, {0x1}, {0x7, 0x4}, {}, {0x7, 0x1}, {0x7, 0x6}, {0x4, 0x6}, {0x6, 0x3}, {0x3}, {0x3, 0x8}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0xa}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x7}, {0x6, 0xa}, {0x4, 0x4}, {0x1, 0x1}, {0x5, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x6}, {0x4, 0x6}, {0x0, 0x8}, {0x0, 0x2}, {0x0, 0x2}, {0x3, 0x5}, {0x1, 0xa}, {0x7, 0x9}, {0x5}, {0x7, 0x9}, {0x3, 0x2}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x8}, {0x0, 0xa}, {0x5, 0x1}, {0x1, 0x7}, {0x6}, {0x5, 0xa}, {0x2, 0x7}, {0x4, 0xa}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x5, 0x3}, {0x5, 0x7}, {0x7}, {0x5}, {0x1}, {0x0, 0x6}, {0x4, 0x4}, {0x2, 0x7}, {0x2, 0x8}, {0x2, 0x2}, {0x6, 0x8}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x9}, {0x7, 0x4}, {0x7, 0x7}, {0x2, 0x9}, {0x2, 0x5}, {0x7, 0x3}, {0x6, 0x4}, {0x0, 0x1}, {0x6, 0x6}, {0x3, 0x9}, {0x2, 0x5}, {0x4, 0x3}, {0x7, 0x3}, {0x0, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x170, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0x3}, {0x5, 0x8}, {0x3, 0x6}, {0x4, 0x9}, {0x6}, {0x7, 0x7}, {0x5}, {0x2, 0x6}, {}, {0x6, 0x1}, {0x5, 0x3}, {0x3, 0x8}, {0x0, 0x2}, {0x6, 0x6}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xaa88, 0x58e, 0x3, 0x7, 0x7, 0x0, 0xbec]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x7}, {0x2, 0x3}, {0x1, 0xa}, {0x4, 0x4}, {0x2, 0x9}, {0x0, 0x9}, {0x2, 0x1}, {0x3}, {0x3, 0x7}, {0x1, 0xa}, {0x2, 0x4}, {0x3, 0x7}, {0x5}, {0x3, 0x6}, {0x2, 0x4}, {0x4, 0x3}, {0x5, 0x9}, {0x2, 0x3}, {0x5, 0x5}, {0x6, 0x1}, {0x1}, {0x4, 0x7}, {0x4, 0x6}, {0x1}, {0x2, 0x5}, {0x6, 0x4}, {0x7, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x2}, {0x3, 0x5}, {0x7, 0x5}, {0x3, 0x2}, {0x4, 0x7}, {0x3, 0x5}, {0x2, 0x7}, {0x6, 0x2}, {0x6}, {0x1, 0x5}, {0x5, 0x1}, {0x1, 0xa}, {0x1}, {0x6, 0x1}, {0x7, 0xa}, {0x5, 0x7}, {0x2, 0x8}, {0x2}, {0x1, 0x7}, {0x2, 0x6}, {0x6, 0x4}, {0x2, 0x3}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x5, 0x1, 0x9, 0xe96, 0xfc00, 0xdb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x6604, 0xa455, 0x3, 0x209, 0x4, 0x6]}}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x9a, 0x6946, 0x6, 0x101, 0xd, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x67, 0x0, 0x1, 0xf3, 0xd, 0xee, 0xffff, 0x584]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0xa}, {0x3, 0x4}, {0x2, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x4, 0xa}, {0x6, 0x8}, {0x6, 0x1}, {0x4, 0x9}, {0x3, 0x4}, {0x2, 0x8}, {0x6, 0xa}, {0x1, 0x3}, {0x3, 0xa}, {0x7, 0x5}, {0x7, 0x2}, {0x7, 0x4}, {0x5}, {0x6}, {0x7}, {0x1, 0x4}, {0x4, 0xa}, {0x3, 0x4}, {0x0, 0x9}, {0x7, 0x3}, {0x2, 0x8}, {0x5, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x1}, {0x3, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x4, 0x1}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x2, 0x6}, {0x2, 0x4}, {0x3, 0x4}, {}, {0x5, 0xa}, {0x0, 0x2}, {0x1, 0x6}, {0x0, 0x5}, {0x0, 0x8}, {0x4, 0x2}, {0x7, 0x4}, {0x1, 0x2}, {}, {0x1}, {0x4}, {0x3, 0x9}, {0x2}, {0x4, 0x4}, {0x7, 0x2}, {0x2, 0x2}, {0x1}, {0x2, 0x6}, {}, {0x0, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x6, 0xa}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0xc, 0x30, 0x48, 0x24, 0x12, 0x48, 0x6, 0x5, 0x1b, 0x18, 0x12, 0xc, 0x1b, 0x36]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xa35617f6096d99c2, 0x1b, 0x36, 0x18, 0x2, 0x12, 0xb, 0x3, 0x60, 0x60, 0x24, 0x36, 0x36, 0x5, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x4008000}, 0x890) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001880)=r3, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000018c0)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x1, '\x00', r13, r15, 0x5, 0x3, 0x4}, 0x50) r16 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r16, &(0x7f0000008540)=[{{&(0x7f0000001940)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001d80)=[{&(0x7f00000019c0)=""/173, 0xad}, {&(0x7f0000001a80)=""/5, 0x5}, {&(0x7f0000001ac0)=""/201, 0xc9}, {&(0x7f0000001bc0)=""/149, 0x95}, {&(0x7f0000001c80)=""/250, 0xfa}], 0x5, &(0x7f0000001e00)=""/209, 0xd1}, 0x200}, {{&(0x7f0000001f00)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001f80)=""/43, 0x2b}, {&(0x7f0000001fc0)=""/59, 0x3b}, {&(0x7f0000002000)=""/67, 0x43}], 0x3, &(0x7f00000020c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000030c0)=@isdn, 0x80, &(0x7f0000006440)=[{&(0x7f0000003140)=""/72, 0x48}, {&(0x7f00000031c0)=""/251, 0xfb}, {&(0x7f00000032c0)=""/102, 0x66}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/178, 0xb2}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/4096, 0x1000}, {&(0x7f0000006400)=""/51, 0x33}], 0x8, &(0x7f00000064c0)=""/101, 0x65}, 0x4}, {{&(0x7f0000006540)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006880)=[{&(0x7f00000065c0)=""/81, 0x51}, {&(0x7f0000006640)=""/33, 0x21}, {&(0x7f0000006680)=""/194, 0xc2}, {&(0x7f0000006780)=""/222, 0xde}], 0x4, &(0x7f00000068c0)=""/226, 0xe2}, 0x6a9}, {{&(0x7f00000069c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000006b80)=[{&(0x7f0000006a40)=""/125, 0x7d}, {&(0x7f0000006ac0)=""/160, 0xa0}], 0x2, &(0x7f0000006bc0)=""/153, 0x99}, 0x9}, {{&(0x7f0000006c80)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006d00)=""/125, 0x7d}, {&(0x7f0000006d80)=""/12, 0xc}, {&(0x7f0000006dc0)=""/248, 0xf8}], 0x3, &(0x7f0000006f00)=""/57, 0x39}, 0x8}, {{&(0x7f0000006f40)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000008180)=[{&(0x7f0000006fc0)=""/224, 0xe0}, {&(0x7f00000070c0)=""/4096, 0x1000}, {&(0x7f00000080c0)}, {&(0x7f0000008100)=""/81, 0x51}], 0x4, &(0x7f00000081c0)=""/38, 0x26}, 0x5}, {{&(0x7f0000008200)=@nfc_llcp, 0x80, &(0x7f0000008480)=[{&(0x7f0000008280)=""/26, 0x1a}, {&(0x7f00000082c0)=""/178, 0xb2}, {&(0x7f0000008380)=""/110, 0x6e}, {&(0x7f0000008400)=""/84, 0x54}], 0x4, &(0x7f00000084c0)=""/73, 0x49}, 0x3}], 0x8, 0x100, &(0x7f0000008740)={0x0, 0x3938700}) 1.63764107s ago: executing program 3 (id=2972): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000640)={0x14, 0x19, 0x1, 0x0, 0x0, {0x1c, 0xd601, 0x9}}, 0x14}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0x22, 0x0, &(0x7f0000000080)) 1.508304322s ago: executing program 0 (id=2973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd"], 0x4b) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000d007000000000000ebff00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.462701995s ago: executing program 3 (id=2974): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a27193020000000301000000268a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fdb542e718f94b929ade00"/85, 0x55}], 0x1}, 0x0) write(r2, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f00000000c0)={0x7, 'virt_wifi0\x00', {0x101}, 0x9327}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.307352217s ago: executing program 0 (id=2975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027b67000fedbdf250e00000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x38, r4, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x7ff, 0xfffb, 0x8001, 0x100, 0x3, 0x6]}}]}]}]}, 0x38}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r9, 0x0, 0x6) syz_emit_ethernet(0xdc, &(0x7f0000000b00)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x1, 0x2, 0xce, 0x64, 0x0, 0xa, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x20, 0x6, 0x0, 0x6, {[@window={0x3, 0x3, 0xfd}, @generic={0x2, 0x3, 'Y'}]}}, {"995dd90fae9c46a1602c4c4bad75b81cb500e11ca0db0a1881127003d8c6bf1ec48cbeb01131108886ccec76a055499061bd5bfaf152a5218da660cf3b191884bb41f86e0c61e6f4dd1880fb0869efadb99bc43d54e286dfbd75c85f2ffbcc69e970bb555236b2590a7ed505d38adcc323ef573feb83ac4b2db316a438b8ba2eed41a810606f94fd467e3197e0a01ad84e28b3d079cfe09cd973"}}}}}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010025bd7000fedbde56ffffff00"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r12, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x40, 0x1, 0x70bd2a, 0x4, {0x1}, [@nested={0x4, 0x44}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0xa, 0x0, 0x0, @str=':\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r13}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt(r6, 0x84, 0x81, 0x0, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004008680110001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 1.063833197s ago: executing program 3 (id=2976): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@empty, @private}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xe}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffe, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}}}}]}, 0x78}}, 0xc090) 1.017476544s ago: executing program 4 (id=2977): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async, rerun: 32) r6 = socket$kcm(0x10, 0x2, 0x10) (rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYRES8=r4, @ANYRES64=r6, @ANYRESOCT=r2, @ANYRES8=r0, @ANYRES8=r1], 0x20}, 0x1, 0x0, 0x0, 0x1001}, 0x4000000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async, rerun: 32) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, 0xffffffffffffffff, 0x5, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000001c0)={{r7}, 0x9, 0x7fff, 0x2}) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da16520"], 0xb4}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r10 = socket(0x15, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x271b, 0x0, &(0x7f0000000340)) (async, rerun: 32) syz_emit_ethernet(0x82, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffbb000086dd60fec00000483a00fc00000000000000000000000000000000000102009078000000006018b088000000862c93d7000000000000000000000000aafe8000000000000000000000000000aa1100000000000000fafb17c133d11e59bb99c35bdfcf89f500"/123], 0x0) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_timeval(r11, 0x1, 0x14, &(0x7f0000001800)={0x0, 0xea60}, 0x10) 948.774768ms ago: executing program 0 (id=2978): syz_extract_tcp_res(&(0x7f0000000240)={0x41424344}, 0x6, 0xfd0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x4000, r0, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x60}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1c009000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20008004) 755.379059ms ago: executing program 4 (id=2979): socket$netlink(0x10, 0x3, 0x8000000004) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x40007, 0x7ed53619, 0x1, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffbfff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x4, 0x0, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x7fff, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x40, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0xa, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x10, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x5, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x6, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x203, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x200e, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x3, 0xb9a6, 0x522, 0x0, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x7fffffff, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x5, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x4, 0x21ce83b0, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r8) socket(0x2, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 64) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10001}, 0x1c) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000038000000030a01040000000000000000010000000900030073797a31000000005e233d19edfba6592c1a900900010073797a31000000000c000480080002401886c301140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500fc000000080012400000000013000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}}, 0x0) (async, rerun: 32) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGNPMODE(r13, 0xc008744c, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r9], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (rerun: 64) 753.591373ms ago: executing program 3 (id=2980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000480)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x1d, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x14c}}, 0x4810) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) 694.846867ms ago: executing program 0 (id=2981): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x6, 0x1, 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="44010000", @ANYRES16=r3, @ANYBLOB="02002dbd7000fbdbdf25170000003c00098008000200070000000800020001000000080002000000000008000200010000000800010007000000080001000900000008000100030000003400098008000100031f00000800020006000000080001000900000008000100000000800800020005000000080001000700000044000380080001000000c03f0800030002000000080002001b0000000800030003000000080001000200000008000200c0a8040008000300f8ffffff080001000e000000440007800c000300010000000000000008000100810000000c000400080000000000000008000100000000000c00030009000000000000000c000300070000000000000038000480140007800800010500000000080003001b9ca3341300010062726f6164636173742d6c696e6b00000900010073797a3000000000"], 0x144}, 0x1, 0x0, 0x0, 0xa0}, 0x40008000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) close(r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000c40), 0x12) sendfile(r6, r8, 0x0, 0x401) write$rfkill(r5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1}, 0x8) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 651.669737ms ago: executing program 1 (id=2982): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc010000190001000000000003000000e0000002000000000000000000000000fe8000000000000000000000000000aa00000000000000005023951dc8125f90", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000044010500e0000001000000000000000000000000000004d63c00000002000000e00000010000000000000000000000000135000004030700080000000400000001000000ff020000000000000000000000000001000004d36c00000002000000fc0000000000000000000000000000010135000002007300018000000400000007000000ff020000000000000000000000000001000004d33c00000002000000e00000010000000000000000000000000635000002030700050000000300000007000000ac1e0001000000000000000000000000000004d43300000002000000ff0100000000000000000000000000010235000003010700050000000300000007000000fe800000000000000000000000000012800000013c0000000a000000ac1414bb000000000000000000000000000000000101090008000000e700000007000000"], 0x1fc}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/116, &(0x7f0000000200)=0x74) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 32) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, 0x0, &(0x7f00000002c0)=0x37) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x40, r8, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x7, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x40}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) pipe(&(0x7f0000000580)={0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)=r11) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000240)=0x42, 0x4) (async) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x15, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) 470.46082ms ago: executing program 3 (id=2983): r0 = socket$inet6(0xa, 0x5, 0x3) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xa55d2b7a6e6f3f4e) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000400)={0x27, 0xfffc, 0x3}, 0x6) close(r1) setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000311ffc)=0x3, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000064000000160a0101009b654012000000010000000900020073797a30800000000900010073797a3000000000300003802c000380140001007465616d300000000000000000000000140001006970365f7674693000000000000000000800074000000001140000001000010000000000000000000000000a"], 0xec}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x2, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000002340)={0x0, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0xffffffffffffffd4, 0xc000}, 0x4c800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000900010073797a300000000008000240000000032c0000000900010073797a300000001f0900030073797a3200000000140000428d5470"], 0x7c}, 0x1, 0x0, 0x0, 0x815}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060ae904000000000000000002000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd0900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYRES8=r7], 0x4c}, 0x8, 0x3000000000002, 0x0, 0x10}, 0x0) close(0x4) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000012000000900010073797a30002c0000e1161a44080000000000000000010000000900020073797a30000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0x74}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="efaf54fb020313000000090001ffee0400000000280000000000df000000000000"], 0x20}}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000540)=0xb, 0x4) 433.140659ms ago: executing program 4 (id=2984): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x40}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async) close(r2) (async) sendto$inet6(r1, &(0x7f00000002c0)="beaec5fd27bc347b2f274456b4205172e39a71c01bff9fb026d574ee04609a9d949f1b1b2cb0a51378c556693460ab2cbf76628757ad949c33543011799c10f5df457150be0a6250e34436180a8c8d062b32156a05aac41f87468c444c694dab70f3a76c1666481959830a82eb3baad92900ad149b187169f3fcec26384d33292ddff3eddce8e94e29791986fe71bb0a7a17f047ef6f1b70d0cde86f7d703bdfe9f724e1f633b57da78d8ca0e430d79f5367136fdbbc3d4d352255da7dfce3762bd3d7dcc8d59d11d3a464d894220cd1fb52a83f901385d24751d8fc6235420000000000000000", 0xe7, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) (async) shutdown(r1, 0x1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 311.565401ms ago: executing program 1 (id=2985): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x50, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "c43cf3f93d83225a", "b4f66d7f357fc0b000", "4ae1a5fd", "b9e13446520c6328"}, 0x28) 183.998679ms ago: executing program 4 (id=2986): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000500)={[0xfe9]}, 0x8) 150.545256ms ago: executing program 3 (id=2987): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'NLBL_UNLBL\x00'}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'NLBL_UNLBL\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '&-#!&\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000084}, 0x20008080) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000300)=0x0) write$cgroup_pid(r5, &(0x7f0000000340)=r6, 0x12) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x10, r4, 0xc67e7000) r7 = accept4(r4, &(0x7f00000003c0)=@tipc, &(0x7f0000000440)=0x80, 0x80000) splice(r4, &(0x7f0000000380)=0xd2, r7, &(0x7f0000000480)=0xffff, 0x5d73, 0x1) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r7) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000640)={&(0x7f00000004c0), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, r8, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x909a}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400c011}, 0x0) socket$key(0xf, 0x3, 0x2) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4814}, 0x4000) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000840)={0x6, &(0x7f0000000800)=[{0xffe0, 0xf9, 0x5, 0x4}, {0x6, 0x0, 0x1, 0x7}, {0x56d0, 0x0, 0xa, 0x4}, {0x7, 0x9, 0xfd, 0xfffffff9}, {0x6, 0x3, 0xd, 0x1}, {0x5, 0x2, 0x2, 0x352}]}) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x15, 0x12, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x81}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fa}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x1bd789dbd495e898, 0x0, 0x2, 0x9, 0x9, 0xfffffffffffffff4, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x5d}, @generic={0x2, 0x9, 0x1, 0x6, 0x1}, @jmp={0x5, 0x0, 0xd, 0x5, 0xb, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x4d, '\x00', 0x0, @sk_reuseport=0x28, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x2, 0xb, 0x9}, 0x10, 0x0, r4, 0x6, &(0x7f00000009c0)=[r4], &(0x7f0000000a00)=[{0x2, 0x2, 0xb, 0x9}, {0x1, 0x2, 0x6, 0x6}, {0x3, 0x1, 0x7, 0x7}, {0x3, 0x3, 0xd, 0x1}, {0x5, 0x3, 0x5, 0x2}, {0x2, 0x3, 0x8, 0x1}], 0x10, 0x3}, 0x94) setsockopt$inet_tcp_int(r4, 0x6, 0x7, &(0x7f0000000b40)=0x7, 0x4) ioctl$SIOCRSGCAUSE(r7, 0x89e0, &(0x7f0000000b80)) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000bc0)={0x0, 0x7fff}, &(0x7f0000000c00)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000c40)={0x0, 0x0, 0x10109, 0xfffff001, 0x7, 0xfffffffd, 0x1ff, 0x0, r11}, &(0x7f0000000c80)=0x20) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r12, 0x8982, &(0x7f0000000cc0)={0x2, 'bridge_slave_0\x00', {0x3}, 0xb}) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000d00), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000d40)={r11, 0x8}, &(0x7f0000000d80)=0x8) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000ec0)={@isdn={0x22, 0x8c, 0x1, 0x0, 0x9}, {&(0x7f0000000e00)=""/80, 0x50}, &(0x7f0000000e80), 0x4b}, 0xa0) 140.976409ms ago: executing program 1 (id=2988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0xfe}]}]}]}}]}, 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000980)={r8, 0x9}, &(0x7f00000009c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e23, @empty}}, 0x1, 0x2, 0x40000002, 0x0, 0x1e, 0x0, 0x80}, 0x9c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) connect$rds(r10, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000040)={r12, 0x8001}, 0x8) socket$igmp(0x2, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) 0s ago: executing program 4 (id=2989): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x5c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES64=0x0, @ANYBLOB="01000000010000001c04000000000100db5d1b8b3dd411cc63a8d692a5873cf35636220b90c5d9752179001b22b38ccf"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r5) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010200000000000000bf0004002600140006007369743000"/34], 0x28}, 0x8, 0x3000000000002}, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, 0x1, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r5, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r7, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44880}, 0x20000) getsockopt$inet_int(r4, 0x0, 0x15, 0x0, &(0x7f0000000280)) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000002000b030000a4bdae19f7332e5710000008000340000000000003000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x60081}, 0x4000) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.1.942'. [ 172.132719][ T9356] netlink: 44 bytes leftover after parsing attributes in process `syz.3.939'. [ 172.146748][ T9356] netlink: 43 bytes leftover after parsing attributes in process `syz.3.939'. [ 172.158182][ T9356] netlink: 'syz.3.939': attribute type 6 has an invalid length. [ 172.210234][ T9356] netlink: 'syz.3.939': attribute type 5 has an invalid length. [ 172.261943][ T9367] pim6reg: entered allmulticast mode [ 172.368921][ T9370] openvswitch: netlink: Missing key (keys=40, expected=100) [ 172.423611][ T9380] netlink: 'syz.3.947': attribute type 1 has an invalid length. [ 172.572560][ T9380] bond1: entered promiscuous mode [ 172.578281][ T9380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.623364][ T9386] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 172.774011][ T9386] bond3: (slave lo): Enslaving as a backup interface with an up link [ 172.822561][ T9386] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 173.077942][ T9404] can: request_module (can-proto-0) failed. [ 173.393738][ T5913] IPVS: starting estimator thread 0... [ 173.480997][ T9431] IPVS: using max 25 ests per chain, 60000 per kthread [ 173.620344][ T9441] bridge_slave_1: left allmulticast mode [ 173.639083][ T9441] bridge_slave_1: left promiscuous mode [ 173.648067][ T9441] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.707530][ T9441] bridge_slave_0: left allmulticast mode [ 173.745750][ T9441] bridge_slave_0: left promiscuous mode [ 173.780821][ T9441] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.262562][ T9472] netlink: 'syz.3.968': attribute type 1 has an invalid length. [ 174.307119][ T9472] netlink: 'syz.3.968': attribute type 3 has an invalid length. [ 174.868635][ T9501] team0: Port device dummy0 removed [ 175.181585][ T9524] batadv0: entered allmulticast mode [ 175.401849][ T9527] v: renamed from veth0_vlan [ 175.438833][ T9531] ip6erspan0: entered promiscuous mode [ 175.711747][ T9543] bond3: option all_slaves_active: invalid value (222) [ 175.741711][ T9543] bond3 (unregistering): Released all slaves [ 175.823971][ T9551] bridge4: entered promiscuous mode [ 175.829255][ T9551] bridge4: entered allmulticast mode [ 175.867452][ T9551] team0: Port device bridge4 added [ 175.917290][ T31] audit: type=1107 audit(1767652957.371:2): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='›È½[ómùCûû-Â_€³¤;áCì˜Ó¬¡~žo‹///ŠŽneüåY Þ.Õ)äÛµf0µ’?2‹õ; <¨<^ò&’ÚÒ^ù*–Oj½Ð<Žä,ß [ 175.917290][ T31] ‡’»wsö;lwšåK]啾–@«|#¼Ìwl$‚êÄöŒ„‡v:riG-@Z!B§mÁõ[cNÎGž¨Tã;5¡í' [ 175.926457][ T9558] vlan1: entered promiscuous mode [ 175.984301][ T9558] geneve1: entered promiscuous mode [ 175.997799][ T9558] vlan1: entered allmulticast mode [ 176.011941][ T9558] geneve1: entered allmulticast mode [ 176.018993][ T9562] bridge0: port 4(team0) entered blocking state [ 176.032883][ T9562] bridge0: port 4(team0) entered disabled state [ 176.042394][ T9562] team0: entered allmulticast mode [ 176.048199][ T9562] team_slave_0: entered allmulticast mode [ 176.054626][ T9562] team_slave_1: entered allmulticast mode [ 176.066092][ T9562] team0: entered promiscuous mode [ 176.072481][ T9562] team_slave_0: entered promiscuous mode [ 176.078688][ T9562] team_slave_1: entered promiscuous mode [ 176.255100][ T9573] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.324498][ T9588] __nla_validate_parse: 20 callbacks suppressed [ 176.324520][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'. [ 176.746064][ T9573] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.814879][ T5494] v: left promiscuous mode [ 176.862946][ T5494] v: entered promiscuous mode [ 176.945724][ T9613] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1006'. [ 176.959347][ T9573] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.105454][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 177.120286][ T9573] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.281265][ T6538] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.331627][ T6538] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.362604][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.385549][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.437926][ T9633] netlink: 'syz.3.1014': attribute type 1 has an invalid length. [ 177.458328][ T9633] netlink: 'syz.3.1014': attribute type 1 has an invalid length. [ 177.478854][ T9633] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.1014'. [ 177.886143][ T9652] Cannot find set identified by id 0 to match [ 177.897233][ T9652] Cannot find set identified by id 0 to match [ 177.962784][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1019'. [ 178.169141][ T9666] sctp: [Deprecated]: syz.2.1022 (pid 9666) Use of int in max_burst socket option. [ 178.169141][ T9666] Use struct sctp_assoc_value instead [ 178.412905][ T9681] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.1026'. [ 178.931383][ T9704] delete_channel: no stack [ 179.286983][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 179.531949][ T9745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.603617][ T9745] bond2: entered allmulticast mode [ 179.631729][ T9745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.647799][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 179.664963][ T5149] block nbd0: Receive control failed (result -32) [ 179.758907][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 179.773806][ T9755] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1046'. [ 180.075477][ T9773] xt_l2tp: missing protocol rule (udp|l2tpip) [ 180.083380][ T9771] netlink: 'syz.1.1051': attribute type 12 has an invalid length. [ 180.294492][ T9789] team0: Caught tx_queue_len zero misconfig [ 180.331817][ T9785] tc_dump_action: action bad kind [ 180.414828][ T9785] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 180.576126][ T9809] lo: entered promiscuous mode [ 180.588589][ T9809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.623111][ T9808] netlink: 'syz.0.1062': attribute type 1 has an invalid length. [ 180.904184][ T9825] unsupported nlmsg_type 40 [ 181.258837][ T9842] netlink: 'syz.0.1072': attribute type 5 has an invalid length. [ 181.344539][ T9844] __nla_validate_parse: 10 callbacks suppressed [ 181.344559][ T9844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1073'. [ 181.376265][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1073'. [ 181.421780][ T9846] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1074'. [ 181.637554][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'. [ 181.780225][ T9837] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.787935][ T9837] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.921117][ T9837] batadv0: left allmulticast mode [ 182.313108][ T9837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.359612][ T9837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.941820][ T9837] vlan0: left allmulticast mode [ 182.950557][ T9837] veth0_vlan: left allmulticast mode [ 182.956014][ T9837] vlan0: left promiscuous mode [ 182.968602][ T9837] macvtap1: left promiscuous mode [ 182.974782][ T9837] macvtap1: left allmulticast mode [ 183.143332][ T9837] ip6erspan0: left promiscuous mode [ 183.194580][ T9842] geneve2: entered promiscuous mode [ 183.199981][ T9842] geneve2: entered allmulticast mode [ 183.207742][ T9844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1073'. [ 183.241477][ T9861] netlink: 'syz.2.1077': attribute type 1 has an invalid length. [ 183.249529][ T9861] netlink: 'syz.2.1077': attribute type 2 has an invalid length. [ 183.299283][ T30] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.339575][ T30] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 183.367010][ T30] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.382376][ T30] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 183.407190][ T3459] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.443056][ T3459] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 183.464859][ T3459] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.498938][ T3459] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 183.564542][ T9880] syzkaller0: entered promiscuous mode [ 183.572555][ T9887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1085'. [ 183.581619][ T9880] syzkaller0: entered allmulticast mode [ 183.784975][ T9905] netlink: 'syz.0.1089': attribute type 2 has an invalid length. [ 183.794433][ T9904] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20001 [ 183.804805][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 183.951854][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1092'. [ 184.016706][ T9922] netlink: 4120 bytes leftover after parsing attributes in process `syz.4.1093'. [ 184.026269][ T9922] openvswitch: netlink: Flow key attr not present in new flow. [ 184.043399][ T9921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1093'. [ 184.164207][ T9931] sctp: [Deprecated]: syz.2.1097 (pid 9931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.164207][ T9931] Use struct sctp_sack_info instead [ 184.368884][ T9939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.494320][ T9951] netlink: 'syz.4.1102': attribute type 1 has an invalid length. [ 184.566759][ T9951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.611425][ T9956] bond0: (slave geneve3): making interface the new active one [ 184.624026][ T9956] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 184.633300][ T3485] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.652090][ T3485] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.672452][ T3485] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.692969][ T3485] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.777569][ T9967] IPVS: sed: FWM 3 0x00000003 - no destination available [ 185.124581][ T5914] hid-generic 0005:0B57:0006.0001: item fetching failed at offset 0/1 [ 185.139720][ T5914] hid-generic 0005:0B57:0006.0001: probe with driver hid-generic failed with error -22 [ 185.280724][T10002] netlink: 'syz.1.1118': attribute type 10 has an invalid length. [ 185.311771][T10002] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 185.342063][T10007] xt_policy: output policy not valid in PREROUTING and INPUT [ 185.352889][T10009] xt_policy: output policy not valid in PREROUTING and INPUT [ 185.361836][T10002] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 185.457507][T10015] netlink: 'syz.0.1123': attribute type 25 has an invalid length. [ 185.484631][T10015] netlink: 'syz.0.1123': attribute type 25 has an invalid length. [ 185.495340][T10015] netlink: 'syz.0.1123': attribute type 25 has an invalid length. [ 185.516083][T10015] netlink: 'syz.0.1123': attribute type 25 has an invalid length. [ 185.529980][T10015] netlink: 'syz.0.1123': attribute type 25 has an invalid length. [ 185.542340][T10015] netlink: 'syz.0.1123': attribute type 25 has an invalid length. [ 185.551270][T10015] netlink: 'syz.0.1123': attribute type 25 has an invalid length. [ 185.564961][T10015] netlink: 'syz.0.1123': attribute type 25 has an invalid length. [ 185.601505][T10015] netlink: 'syz.0.1123': attribute type 25 has an invalid length. [ 185.845141][T10039] can: request_module (can-proto-5) failed. [ 186.212344][T10068] tc_dump_action: action bad kind [ 186.413855][T10075] __nla_validate_parse: 9 callbacks suppressed [ 186.413877][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 186.430930][T10075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1139'. [ 186.445434][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 186.454740][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 186.949092][ T5914] IPVS: starting estimator thread 0... [ 186.968029][T10102] IPVS: fo: FWM 3 0x00000003 - no destination available [ 186.978916][T10100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1146'. [ 187.042883][T10100] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 187.075046][T10108] IPVS: using max 24 ests per chain, 57600 per kthread [ 187.295219][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 187.356940][T10128] 9: entered promiscuous mode [ 187.465884][T10124] xt_addrtype: ipv6 does not support BROADCAST matching [ 187.605037][T10142] team0: No ports can be present during mode change [ 187.629451][T10142] dvmrp6: entered allmulticast mode [ 187.638958][T10142] ip6t_srh: unknown srh match flags 5F28 [ 187.792539][T10150] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1162'. [ 188.126102][T10178] tipc: Enabled bearer , priority 0 [ 188.301227][T10178] syzkaller0: entered promiscuous mode [ 188.306859][T10178] syzkaller0: entered allmulticast mode [ 188.313422][T10178] tipc: Resetting bearer [ 188.332365][T10166] tipc: Resetting bearer [ 189.038246][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1174'. [ 189.272065][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 189.281257][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 189.814599][T10166] tipc: Disabling bearer [ 189.863427][ T8973] tipc: Node number set to 2166926995 [ 189.968160][T10217] bridge_slave_0: entered promiscuous mode [ 190.493078][T10263] validate_nla: 33 callbacks suppressed [ 190.493100][T10263] netlink: 'syz.3.1190': attribute type 10 has an invalid length. [ 190.555724][T10263] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.582793][T10263] team0: entered allmulticast mode [ 190.600712][T10263] team_slave_0: entered allmulticast mode [ 190.616948][T10263] team_slave_1: entered allmulticast mode [ 190.624807][T10263] bond0: (slave team0): Enslaving as an active interface with an up link [ 190.694665][T10276] netlink: 'syz.0.1194': attribute type 1 has an invalid length. [ 190.729097][T10276] netlink: 'syz.0.1194': attribute type 2 has an invalid length. [ 190.877613][T10288] lo: Caught tx_queue_len zero misconfig [ 191.493034][T10322] __nla_validate_parse: 8 callbacks suppressed [ 191.493057][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1204'. [ 191.776611][T10339] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 191.784347][T10342] sctp: [Deprecated]: syz.2.1207 (pid 10342) Use of int in max_burst socket option deprecated. [ 191.784347][T10342] Use struct sctp_assoc_value instead [ 191.981030][T10351] netlink: 'syz.2.1210': attribute type 25 has an invalid length. [ 192.263965][T10363] vlan1: entered allmulticast mode [ 192.284719][T10363] veth0_vlan: entered allmulticast mode [ 192.360319][T10363] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 192.655657][T10381] can: request_module (can-proto-3) failed. [ 192.655657][T10380] can: request_module (can-proto-3) failed. [ 194.696284][T10436] openvswitch: netlink: Missing valid actions attribute. [ 194.709682][T10436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.733891][T10436] : renamed from hsr0 (while UP) [ 194.756725][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1234'. [ 194.766417][T10438] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1234'. [ 194.987559][T10453] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1238'. [ 195.109233][T10459] lo speed is unknown, defaulting to 1000 [ 195.134311][T10459] lo speed is unknown, defaulting to 1000 [ 195.151666][T10459] lo speed is unknown, defaulting to 1000 [ 195.546870][T10479] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1244'. [ 195.563901][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1245'. [ 195.586641][T10479] nbd: illegal input index -8454144 [ 195.616004][T10478] netlink: 'syz.2.1244': attribute type 4 has an invalid length. [ 195.678447][T10459] infiniband syz2: set down [ 195.686867][ T5914] lo speed is unknown, defaulting to 1000 [ 195.731903][T10459] infiniband syz2: added lo [ 195.873590][T10497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.907579][T10493] syzkaller0: entered promiscuous mode [ 195.935413][T10493] syzkaller0: entered allmulticast mode [ 195.952260][T10459] RDS/IB: syz2: added [ 195.953268][T10497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.981675][T10459] smc: adding ib device syz2 with port count 1 [ 195.998611][T10459] smc: ib device syz2 port 1 has no pnetid [ 196.116755][ T8973] lo speed is unknown, defaulting to 1000 [ 196.133602][T10459] lo speed is unknown, defaulting to 1000 [ 196.151000][T10507] syzkaller1: entered promiscuous mode [ 196.179511][T10507] syzkaller1: entered allmulticast mode [ 196.379477][T10514] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1253'. [ 196.602572][T10459] lo speed is unknown, defaulting to 1000 [ 196.730273][T10526] xt_policy: too many policy elements [ 197.001209][T10459] lo speed is unknown, defaulting to 1000 [ 197.094752][T10534] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1261'. [ 197.292297][T10537] netlink: 'syz.3.1263': attribute type 4 has an invalid length. [ 197.408487][T10459] lo speed is unknown, defaulting to 1000 [ 197.601284][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1267'. [ 198.029111][T10459] lo speed is unknown, defaulting to 1000 [ 198.204137][T10587] syzkaller0: entered promiscuous mode [ 198.210667][T10589] netlink: 211344 bytes leftover after parsing attributes in process `syz.0.1280'. [ 198.220065][T10587] syzkaller0: entered allmulticast mode [ 198.592805][T10601] sctp: [Deprecated]: syz.2.1282 (pid 10601) Use of int in maxseg socket option. [ 198.592805][T10601] Use struct sctp_assoc_value instead [ 198.760770][T10611] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1286'. [ 198.815029][T10611] vlan2: entered allmulticast mode [ 198.820260][T10611] gretap0: entered allmulticast mode [ 198.854696][T10615] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 199.073875][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'. [ 199.102697][T10636] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1293'. [ 199.177335][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1295'. [ 199.422638][T10658] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1302'. [ 199.436732][T10658] netlink: 'syz.1.1302': attribute type 1 has an invalid length. [ 199.488559][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 199.523220][T10658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.536483][T10662] netlink: 'syz.4.1303': attribute type 21 has an invalid length. [ 199.560724][T10662] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1303'. [ 199.634395][T10670] 8021q: VLANs not supported on sit0 [ 199.866515][T10691] netlink: 'syz.2.1311': attribute type 1 has an invalid length. [ 199.917854][T10691] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 199.934600][T10691] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 199.968984][T10691] bond4: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 200.191077][T10707] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 200.541454][T10733] syzkaller0: entered allmulticast mode [ 200.573351][T10735] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 200.628245][T10735] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 200.667693][T10746] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 200.682379][T10742] netlink: 'syz.2.1327': attribute type 21 has an invalid length. [ 200.749709][T10746] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.808566][T10742] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 200.828151][T10742] bond5 (unregistering): Released all slaves [ 200.902967][T10746] veth3: entered promiscuous mode [ 200.963189][T10746] bond3: (slave veth3): Enslaving as an active interface with an up link [ 201.308984][T10784] syzkaller0: entered promiscuous mode [ 201.315413][T10784] syzkaller0: entered allmulticast mode [ 201.899980][T10831] syzkaller0: entered promiscuous mode [ 201.909062][T10831] syzkaller0: entered allmulticast mode [ 202.025563][T10838] sctp: [Deprecated]: syz.0.1347 (pid 10838) Use of int in max_burst socket option. [ 202.025563][T10838] Use struct sctp_assoc_value instead [ 202.417746][T10855] sock: sock_set_timeout: `syz.4.1352' (pid 10855) tries to set negative timeout [ 203.018692][T10883] __nla_validate_parse: 14 callbacks suppressed [ 203.018714][T10883] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1363'. [ 203.101916][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1363'. [ 203.310149][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'. [ 203.523949][T10904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1371'. [ 203.548958][T10905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1369'. [ 203.735615][T10912] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1372'. [ 203.747288][T10914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1373'. [ 203.759388][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1373'. [ 203.761855][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'. [ 203.769858][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'. [ 204.457543][T10950] C: renamed from lo [ 204.598406][T10950] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 204.704548][T10964] tipc: Started in network mode [ 204.744250][T10964] tipc: Node identity ac14140f, cluster identity 4711 [ 204.791800][T10964] tipc: New replicast peer: 255.255.255.255 [ 204.817830][T10964] tipc: Enabled bearer , priority 10 [ 204.824117][T10968] netlink: 'syz.2.1385': attribute type 29 has an invalid length. [ 204.887379][T10958] xt_CT: No such helper "snmp_trap" [ 205.031808][ T4617] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.047407][ T4617] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.073898][ T4617] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.088474][ T4617] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.539693][T11018] netlink: 'syz.0.1401': attribute type 17 has an invalid length. [ 205.679912][T11027] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20001 [ 205.762885][T11030] xt_hashlimit: max too large, truncated to 1048576 [ 205.820794][ T8973] tipc: Node number set to 2886997007 [ 206.115985][T11046] wireguard0: entered promiscuous mode [ 206.138269][T11046] wireguard0: entered allmulticast mode [ 206.176983][T11046] team0: Device wireguard0 is of different type [ 206.288909][T11069] netlink: 'syz.1.1417': attribute type 7 has an invalid length. [ 206.337717][T11069] netlink: 'syz.1.1417': attribute type 8 has an invalid length. [ 206.973819][T11099] netlink: 'syz.2.1427': attribute type 21 has an invalid length. [ 207.648778][T11123] netlink: 'syz.0.1433': attribute type 16 has an invalid length. [ 207.695792][T11123] netlink: 'syz.0.1433': attribute type 17 has an invalid length. [ 207.861623][T11123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.889853][T11123] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.957415][T11123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.116284][T11141] netlink: 'syz.1.1437': attribute type 10 has an invalid length. [ 208.144961][T11143] __nla_validate_parse: 14 callbacks suppressed [ 208.144984][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1438'. [ 208.178356][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'. [ 208.597596][T11167] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1445'. [ 208.611145][T11169] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 208.702732][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'. [ 208.732676][T11180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1449'. [ 208.813062][T11185] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1452'. [ 208.964963][T11198] netlink: 'syz.3.1456': attribute type 3 has an invalid length. [ 209.090345][T11203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1459'. [ 209.179686][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1460'. [ 209.180063][T11210] netlink: 'syz.1.1461': attribute type 9 has an invalid length. [ 209.246274][T11210] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 209.265329][T11210] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1461'. [ 209.451921][T11224] netlink: 'syz.1.1462': attribute type 29 has an invalid length. [ 209.915388][T11203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1459'. [ 209.924642][T11203] IPVS: Unknown mcast interface: vcan0 [ 210.175339][T11248] openvswitch: netlink: Flow key attr not present in new flow. [ 210.476211][T11266] netlink: 'syz.4.1474': attribute type 11 has an invalid length. [ 210.495728][T11266] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 210.684656][T11273] nbd1: detected capacity change from 0 to 127 [ 210.702669][ T5149] block nbd1: Receive control failed (result -32) [ 210.715840][T10329] block nbd1: Dead connection, failed to find a fallback [ 210.728523][T10329] block nbd1: shutting down sockets [ 210.736069][T10329] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 210.747569][T10329] Buffer I/O error on dev nbd1, logical block 0, async page read [ 210.757088][T10329] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 210.767939][T10329] Buffer I/O error on dev nbd1, logical block 1, async page read [ 210.779657][T10329] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 210.789568][T10329] Buffer I/O error on dev nbd1, logical block 2, async page read [ 210.797907][T10329] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 210.813604][T10329] Buffer I/O error on dev nbd1, logical block 3, async page read [ 210.824011][T10329] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 210.846540][T10329] Buffer I/O error on dev nbd1, logical block 0, async page read [ 210.865314][T10329] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 210.886133][T10329] Buffer I/O error on dev nbd1, logical block 1, async page read [ 210.896632][T10329] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 210.932812][T10329] Buffer I/O error on dev nbd1, logical block 2, async page read [ 210.975030][T10329] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.004205][T10329] Buffer I/O error on dev nbd1, logical block 3, async page read [ 211.016165][T11290] syzkaller0: entered promiscuous mode [ 211.030563][T11290] syzkaller0: entered allmulticast mode [ 211.060717][T10329] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.070259][T10329] Buffer I/O error on dev nbd1, logical block 0, async page read [ 211.101608][T10329] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.120566][T10329] Buffer I/O error on dev nbd1, logical block 1, async page read [ 211.137180][T10329] ldm_validate_partition_table(): Disk read failed. [ 211.145868][T10329] Dev nbd1: unable to read RDB block 0 [ 211.152465][T10329] nbd1: unable to read partition table [ 211.168672][T11298] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 211.182462][T10329] ldm_validate_partition_table(): Disk read failed. [ 211.190212][T10329] Dev nbd1: unable to read RDB block 0 [ 211.197280][T11300] tipc: Enabled bearer , priority 0 [ 211.205422][T10329] nbd1: unable to read partition table [ 211.236493][T11289] tipc: Resetting bearer [ 211.277125][T11289] tipc: Disabling bearer [ 211.372434][T11306] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 211.393244][T11306] bond3: (slave lo): Enslaving as a backup interface with an up link [ 211.423542][T11306] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 211.454883][T11313] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 211.513395][T11316] wireguard0: entered promiscuous mode [ 211.530584][T11316] wireguard0: entered allmulticast mode [ 211.546206][T11316] team0: Device wireguard0 is of different type [ 211.744856][T11331] bridge7: entered promiscuous mode [ 211.750359][T11331] bridge7: entered allmulticast mode [ 211.788704][T11331] netlink: 'syz.2.1497': attribute type 10 has an invalid length. [ 211.867942][T11336] netlink: 'syz.0.1498': attribute type 9 has an invalid length. [ 211.929309][T11340] netlink: 'syz.4.1500': attribute type 9 has an invalid length. [ 212.120988][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 212.121029][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 212.127222][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 212.138716][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 212.530829][T11385] x_tables: duplicate underflow at hook 2 [ 212.732124][T11394] tipc: Enabled bearer , priority 0 [ 212.758986][T11394] syzkaller0: entered promiscuous mode [ 212.781087][T11394] syzkaller0: entered allmulticast mode [ 212.848839][T11394] tipc: Resetting bearer [ 212.884720][T11392] tipc: Resetting bearer [ 213.037265][T11392] tipc: Disabling bearer [ 213.180390][T11422] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 213.194518][T11422] bond4 (unregistering): Released all slaves [ 213.491194][T11441] syzkaller1: entered promiscuous mode [ 213.496915][T11441] syzkaller1: entered allmulticast mode [ 213.541261][T11445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.697423][T11459] __nla_validate_parse: 19 callbacks suppressed [ 213.697445][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1536'. [ 213.730962][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1536'. [ 213.748690][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1536'. [ 213.806707][T11464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1538'. [ 213.883719][T11465] netlink: 380 bytes leftover after parsing attributes in process `syz.1.1537'. [ 213.920249][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1539'. [ 214.000019][T11467] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.073946][T11471] netlink: 'syz.2.1541': attribute type 64 has an invalid length. [ 214.084886][T11471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1541'. [ 214.098262][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 214.142858][T11482] netlink: 'syz.2.1541': attribute type 64 has an invalid length. [ 214.160769][T11482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1541'. [ 214.195727][T11467] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.204065][T11467] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 214.216443][T11467] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 214.269355][T11481] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 214.270879][T11485] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 214.389009][T11499] bond4: option all_slaves_active: invalid value (222) [ 214.420856][T11499] bond4 (unregistering): Released all slaves [ 214.457831][T11505] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1548'. [ 214.569580][T11507] veth0_to_bridge: entered promiscuous mode [ 214.583895][T11506] veth0_to_bridge: left promiscuous mode [ 214.623685][T11510] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 214.758176][T11523] netlink: 'syz.0.1552': attribute type 1 has an invalid length. [ 214.766845][T11523] netlink: 'syz.0.1552': attribute type 2 has an invalid length. [ 215.090060][T11541] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 215.124278][T11541] bond2 (unregistering): Released all slaves [ 215.769383][T11565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.782043][T11579] sctp: [Deprecated]: syz.0.1570 (pid 11579) Use of int in max_burst socket option. [ 215.782043][T11579] Use struct sctp_assoc_value instead [ 215.849118][T11579] sctp: [Deprecated]: syz.0.1570 (pid 11579) Use of int in max_burst socket option. [ 215.849118][T11579] Use struct sctp_assoc_value instead [ 215.909886][T11584] : entered promiscuous mode [ 215.925691][T11586] netlink: 'syz.2.1572': attribute type 18 has an invalid length. [ 215.945223][T11586] netlink: 'syz.2.1572': attribute type 18 has an invalid length. [ 216.319967][T11605] netlink: 'syz.1.1579': attribute type 1 has an invalid length. [ 216.415495][T11611] bridge_slave_1: left allmulticast mode [ 216.440954][T11611] bridge_slave_1: left promiscuous mode [ 216.446967][T11611] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.467225][T11611] bridge_slave_0: left allmulticast mode [ 216.475695][T11611] bridge_slave_0: left promiscuous mode [ 216.482869][T11611] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.009382][T11637] bond7: ARP target 1.0.0.0 is already present [ 217.023614][T11637] bond7: option arp_ip_target: invalid value (1) [ 217.054766][T11637] bond7 (unregistering): Released all slaves [ 217.403100][T11665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.614726][T11680] validate_nla: 3 callbacks suppressed [ 217.614748][T11680] netlink: 'syz.4.1602': attribute type 2 has an invalid length. [ 217.768133][T11691] netlink: 'syz.0.1605': attribute type 39 has an invalid length. [ 218.102784][T11709] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 218.334158][T11731] netlink: 'syz.2.1619': attribute type 1 has an invalid length. [ 219.083405][T11776] netlink: 'syz.1.1630': attribute type 10 has an invalid length. [ 219.122288][T11776] veth0_macvtap: left promiscuous mode [ 219.128872][T11776] team0: Device veth0_macvtap failed to register rx_handler [ 219.148736][T11779] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 219.291541][T11779] bond5: entered promiscuous mode [ 219.297052][T11779] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.562972][T11807] syzkaller0: entered promiscuous mode [ 219.568554][T11807] syzkaller0: entered allmulticast mode [ 219.868460][T11828] __nla_validate_parse: 25 callbacks suppressed [ 219.868486][T11828] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1645'. [ 219.923067][T11823] sit2: entered promiscuous mode [ 219.928521][T11823] sit2: entered allmulticast mode [ 219.941334][T11832] netlink: 'syz.4.1646': attribute type 10 has an invalid length. [ 219.949575][T11832] syz_tun: left allmulticast mode [ 219.976731][T11832] syz_tun: left promiscuous mode [ 219.989049][T11832] bridge0: port 3(syz_tun) entered disabled state [ 220.113164][T11842] IPVS: Error connecting to the multicast addr [ 220.289642][T11853] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.1651'. [ 220.377643][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 220.558745][T11867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.802532][T11882] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1661'. [ 221.423542][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 221.472976][T11913] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 221.507816][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 221.552224][T11916] vlan3: entered allmulticast mode [ 221.557521][T11916] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 222.064113][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'. [ 222.131042][T11954] sctp: [Deprecated]: syz.4.1682 (pid 11954) Use of int in max_burst socket option. [ 222.131042][T11954] Use struct sctp_assoc_value instead [ 222.163424][T11957] syzkaller1: entered promiscuous mode [ 222.182368][T11957] syzkaller1: entered allmulticast mode [ 222.214364][T11957] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 222.445485][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1685'. [ 222.511963][T11974] openvswitch: netlink: EtherType 0 is less than min 600 [ 222.663994][T11983] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1690'. [ 222.666520][T11981] netlink: 'syz.3.1689': attribute type 1 has an invalid length. [ 222.718827][T11988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.732272][T11986] netlink: 'syz.0.1692': attribute type 1 has an invalid length. [ 222.897818][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 223.353996][T12028] ipt_REJECT: ECHOREPLY no longer supported. [ 223.423844][T12030] netlink: 'syz.3.1708': attribute type 1 has an invalid length. [ 223.534113][T12030] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.612296][T12044] bond4: (slave ip6gretap1): making interface the new active one [ 223.657339][T12044] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 223.715984][T12036] bond4: entered allmulticast mode [ 223.723772][T12051] netlink: 'syz.4.1714': attribute type 1 has an invalid length. [ 223.733051][T12036] ip6gretap1: entered allmulticast mode [ 223.771843][T12051] netlink: 'syz.4.1714': attribute type 7 has an invalid length. [ 223.810549][T12051] netlink: 'syz.4.1714': attribute type 8 has an invalid length. [ 223.835166][T12051] NCSI netlink: No device for ifindex 65584 [ 223.874795][T12054] bond7: Invalid ad_actor_system MAC address. [ 223.919365][T12054] bond7: option ad_actor_system: invalid value (1) [ 223.937406][T12054] bond7 (unregistering): Released all slaves [ 224.009314][T12062] nbd: socks must be embedded in a SOCK_ITEM attr [ 224.223867][T12061] "syz.3.1717" (12061) uses obsolete ecb(arc4) skcipher [ 224.258857][T12076] x_tables: unsorted entry at hook 2 [ 224.603340][T12092] syzkaller1: entered promiscuous mode [ 224.609273][T12092] syzkaller1: entered allmulticast mode [ 224.923009][T12113] __nla_validate_parse: 10 callbacks suppressed [ 224.923030][T12113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1732'. [ 224.939299][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1732'. [ 225.077968][T12113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1732'. [ 225.203669][T12127] netlink: 'syz.4.1736': attribute type 1 has an invalid length. [ 225.462411][T12144] syzkaller0: entered promiscuous mode [ 225.481998][T12144] syzkaller0: entered allmulticast mode [ 225.562912][T12147] bond0: Caught tx_queue_len zero misconfig [ 225.616052][T12149] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1745'. [ 225.682460][T12150] xt_hashlimit: overflow, try lower: 3/0 [ 225.824940][T12170] netlink: 'syz.2.1752': attribute type 2 has an invalid length. [ 225.843440][T12170] netlink: 'syz.2.1752': attribute type 1 has an invalid length. [ 225.860578][T12170] netlink: 'syz.2.1752': attribute type 1 has an invalid length. [ 225.954360][T12177] openvswitch: netlink: IP tunnel dst address not specified [ 226.109466][T12184] bond7: (slave bridge4): making interface the new active one [ 226.124773][T12184] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 226.155937][T12188] syzkaller0: entered promiscuous mode [ 226.175351][T12195] netlink: zone id is out of range [ 226.181180][T12195] netlink: zone id is out of range [ 226.186587][T12195] netlink: zone id is out of range [ 226.192015][T12195] netlink: zone id is out of range [ 226.197384][T12195] netlink: zone id is out of range [ 226.203213][T12195] netlink: zone id is out of range [ 226.208712][T12195] netlink: zone id is out of range [ 226.214409][T12195] netlink: zone id is out of range [ 226.220707][T12188] syzkaller0: entered allmulticast mode [ 226.344367][T12201] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1760'. [ 226.607530][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1762'. [ 226.622927][T12210] netlink: 808 bytes leftover after parsing attributes in process `syz.1.1763'. [ 226.697419][T12210] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 226.732001][T12210] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 227.195736][T12252] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 227.297640][T12254] ipt_rpfilter: unknown options [ 227.317047][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 227.335962][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1777'. [ 227.358416][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 227.390050][T12258] dvmrp6: entered allmulticast mode [ 227.421550][ T30] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.444852][ T30] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.465031][ T30] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.481350][ T30] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.615010][T12269] net_ratelimit: 46 callbacks suppressed [ 227.615032][T12269] openvswitch: netlink: Message has 4 unknown bytes. [ 227.676240][T12272] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 227.913639][T12289] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 227.959556][T12286] tipc: Enabled bearer , priority 0 [ 228.036655][T12285] syzkaller0: entered promiscuous mode [ 228.043288][T12285] syzkaller0: entered allmulticast mode [ 228.050240][T12285] tipc: Resetting bearer [ 228.059448][T12284] tipc: Resetting bearer [ 228.426956][T12318] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 232.357775][T12284] tipc: Disabling bearer [ 232.604229][T12327] __nla_validate_parse: 3 callbacks suppressed [ 232.604254][T12327] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1801'. [ 232.656598][T12330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1805'. [ 232.824611][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1809'. [ 232.863002][T12344] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1808'. [ 233.022236][T12357] validate_nla: 1 callbacks suppressed [ 233.022256][T12357] netlink: 'syz.2.1812': attribute type 1 has an invalid length. [ 233.078041][T12356] siw: device registration error -23 [ 233.089515][T12356] siw: device registration error -23 [ 233.116983][T12356] siw: device registration error -23 [ 233.179637][T12346] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 233.204388][T12346] syzkaller0: entered promiscuous mode [ 233.210706][T12346] syzkaller0: entered allmulticast mode [ 233.219777][T12355] netlink: 'syz.1.1813': attribute type 22 has an invalid length. [ 233.246431][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 233.270245][ T147] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.270997][T12355] netlink: 'syz.1.1813': attribute type 22 has an invalid length. [ 233.287185][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 235.314606][ T147] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.323769][ T147] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.362272][ T147] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.409378][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1828'. [ 235.565972][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1832'. [ 235.586191][T12425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1832'. [ 235.599921][T12421] netlink: 'syz.3.1832': attribute type 1 has an invalid length. [ 235.615579][T12427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.887697][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1831'. [ 236.460792][T12477] syzkaller0: entered promiscuous mode [ 236.504613][T12477] syzkaller0: left promiscuous mode [ 236.731029][T12489] tipc: Enabled bearer , priority 0 [ 236.849023][T12490] syzkaller0: entered promiscuous mode [ 236.854888][T12490] syzkaller0: entered allmulticast mode [ 236.862173][T12490] tipc: Resetting bearer [ 236.869660][T12500] IPv6: NLM_F_CREATE should be specified when creating new route [ 236.888469][T12495] gtp1: entered promiscuous mode [ 236.911651][T12495] gtp1: entered allmulticast mode [ 236.990839][T12490] tipc: Resetting bearer [ 238.734177][T12490] tipc: Disabling bearer [ 238.758247][T12528] __nla_validate_parse: 2 callbacks suppressed [ 238.758270][T12528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1859'. [ 238.774225][T12530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1859'. [ 238.805127][ T5906] tipc: Node number set to 2612917762 [ 238.837561][T12537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1862'. [ 238.848317][T12537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1862'. [ 238.934889][T12541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1861'. [ 238.991238][T12541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1861'. [ 239.018449][T12541] netlink: 'syz.1.1861': attribute type 6 has an invalid length. [ 239.062621][T12551] netlink: 'syz.0.1863': attribute type 1 has an invalid length. [ 239.075097][T12541] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1861'. [ 239.091153][T12548] netlink: 'syz.4.1865': attribute type 2 has an invalid length. [ 239.119679][T12548] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1865'. [ 239.182461][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1865'. [ 239.202046][T12548] chnl_net:caif_netlink_parms(): no params data found [ 239.510585][T12574] netlink: 'syz.4.1870': attribute type 30 has an invalid length. [ 239.520100][T12576] netlink: 'syz.3.1871': attribute type 1 has an invalid length. [ 239.588925][T12576] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.818071][T12602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1877'. [ 239.966729][T12613] netlink: 'syz.4.1880': attribute type 11 has an invalid length. [ 240.213950][T12614] ipt_REJECT: TCP_RESET invalid for non-tcp [ 240.221179][T12614] tipc: Enabled bearer , priority 0 [ 240.326014][T12614] syzkaller0: entered promiscuous mode [ 240.331928][T12614] syzkaller0: entered allmulticast mode [ 240.339899][T12614] tipc: Resetting bearer [ 240.788974][T12610] tipc: Resetting bearer [ 240.900485][T12651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.329404][T12697] netlink: 'syz.1.1896': attribute type 4 has an invalid length. [ 241.389681][T12698] netlink: 'syz.1.1896': attribute type 4 has an invalid length. [ 242.556877][T12610] tipc: Disabling bearer [ 242.569798][T12671] kthread_run failed with err -4 [ 242.601636][ T5899] C speed is unknown, defaulting to 1000 [ 242.639332][ T5899] syz2: Port: 1 Link ACTIVE [ 242.672830][ T5946] C speed is unknown, defaulting to 1000 [ 242.988477][T12719] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 243.044952][ T6538] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 243.090780][ T6538] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 243.115300][ T6538] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 243.148961][ T6538] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 243.232293][T12744] netlink: 'syz.1.1907': attribute type 14 has an invalid length. [ 243.248168][T12744] netlink: 'syz.1.1907': attribute type 13 has an invalid length. [ 243.275909][T12746] netlink: 'syz.1.1907': attribute type 14 has an invalid length. [ 243.509412][T12760] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 243.539677][T12760] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 243.589659][T12766] bridge5: entered promiscuous mode [ 243.595439][T12766] bridge5: entered allmulticast mode [ 243.605415][T12766] team0: Port device bridge5 added [ 243.616375][T12766] bridge0: port 1(team0) entered blocking state [ 243.627557][T12766] bridge0: port 1(team0) entered disabled state [ 243.636536][T12766] team0: entered allmulticast mode [ 243.644062][T12766] team_slave_0: entered allmulticast mode [ 243.651634][T12766] team_slave_1: entered allmulticast mode [ 243.663036][T12766] team0: left allmulticast mode [ 243.668105][T12766] team_slave_0: left allmulticast mode [ 243.674268][T12766] team_slave_1: left allmulticast mode [ 244.146227][T12797] set match dimension is over the limit! [ 244.214779][T12807] __nla_validate_parse: 16 callbacks suppressed [ 244.214799][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'. [ 244.248599][T12807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1926'. [ 244.401296][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1928'. [ 244.432539][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1928'. [ 244.462293][T12816] validate_nla: 1 callbacks suppressed [ 244.462313][T12816] netlink: 'syz.3.1928': attribute type 3 has an invalid length. [ 244.478472][T12820] netlink: 'syz.1.1929': attribute type 1 has an invalid length. [ 244.547270][T12820] bond9: entered promiscuous mode [ 244.554316][T12820] 8021q: adding VLAN 0 to HW filter on device bond9 [ 244.577511][T12838] xfrm1: entered allmulticast mode [ 244.618350][T12833] sctp: [Deprecated]: syz.2.1933 (pid 12833) Use of int in maxseg socket option. [ 244.618350][T12833] Use struct sctp_assoc_value instead [ 244.738677][T12841] dvmrp6: left allmulticast mode [ 244.895779][T12860] netlink: 'syz.4.1940': attribute type 1 has an invalid length. [ 244.945064][T12860] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.989065][T12860] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.996783][T12860] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 245.009655][T12860] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 245.064342][T12862] veth3: entered promiscuous mode [ 245.084344][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1940'. [ 245.099083][T12860] vlan2: entered allmulticast mode [ 245.104916][T12860] bond4: entered allmulticast mode [ 246.441550][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 274.671056][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1945'. [ 274.830692][T12887] sctp: [Deprecated]: syz.3.1944 (pid 12887) Use of int in max_burst socket option. [ 274.830692][T12887] Use struct sctp_assoc_value instead [ 274.881538][T12891] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 274.891241][T12891] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 274.970725][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1948'. [ 274.981274][T12895] openvswitch: netlink: Flow actions attr not present in new flow. [ 275.039195][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1949'. [ 275.156101][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1951'. [ 275.223616][T12909] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1952'. [ 275.277535][T12911] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1953'. [ 275.313494][T12911] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1953'. [ 275.399370][T12916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1956'. [ 275.826775][T12951] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1960'. [ 275.875929][T12933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1959'. [ 276.106325][T12965] lo: entered promiscuous mode [ 276.123246][T12965] tunl0: entered promiscuous mode [ 276.162125][T12965] gre0: entered promiscuous mode [ 276.204072][T12965] gretap0: entered promiscuous mode [ 276.281892][T12965] erspan0: entered promiscuous mode [ 276.306180][T12965] ip_vti0: entered promiscuous mode [ 276.354659][T12964] Cannot find add_set index 2 as target [ 276.389864][T12979] syzkaller0: entered promiscuous mode [ 276.421498][T12979] syzkaller0: entered allmulticast mode [ 276.511643][T12981] syzkaller1: entered promiscuous mode [ 276.517201][T12981] syzkaller1: entered allmulticast mode [ 276.822801][T13000] netlink: 'syz.2.1972': attribute type 1 has an invalid length. [ 276.843937][T13002] delete_channel: no stack [ 276.855116][T13000] NCSI netlink: No device for ifindex 0 [ 277.285353][T13027] netlink: 'syz.0.1979': attribute type 7 has an invalid length. [ 277.766320][T12947] udevd[12947]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 277.906303][T13044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.916294][T13044] bond_slave_0: left allmulticast mode [ 277.926169][T13044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.936412][T13044] bond_slave_1: left allmulticast mode [ 277.946372][T13044] bond0 (unregistering): (slave team0): Releasing backup interface [ 277.958599][T13044] team0: left allmulticast mode [ 277.964932][T13044] team_slave_0: left allmulticast mode [ 277.971517][T13044] team_slave_1: left allmulticast mode [ 277.980097][T13044] bond0 (unregistering): Released all slaves [ 278.010177][T13051] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = -1, id = 0 [ 278.147736][T13057] bond5: option lp_interval: invalid value (0) [ 278.165235][T13057] bond5: option lp_interval: allowed values 1 - 2147483647 [ 278.184933][T13057] bond5 (unregistering): Released all slaves [ 278.207423][T13065] netlink: 'syz.2.1988': attribute type 30 has an invalid length. [ 278.255024][T13065] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 278.498155][T13078] netlink: 'syz.4.1992': attribute type 10 has an invalid length. [ 280.335237][T13118] __nla_validate_parse: 11 callbacks suppressed [ 280.335258][T13118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1999'. [ 280.394486][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'. [ 280.452220][T13103] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1999'. [ 280.463237][T13121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.474090][T13121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2004'. [ 280.536178][T13126] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.633559][T13129] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2007'. [ 280.808703][T13140] syzkaller0: entered promiscuous mode [ 280.828037][T13140] syzkaller0: entered allmulticast mode [ 280.859608][T13142] openvswitch: netlink: Flow actions attr not present in new flow. [ 280.883573][T13148] siw: device registration error -23 [ 281.093087][T13156] x_tables: unsorted entry at hook 2 [ 281.373902][T13138] infiniband !yz!: set down [ 281.381406][T13138] infiniband !yz!: added team_slave_0 [ 281.414700][T13179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2023'. [ 281.460632][T13182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2024'. [ 281.484472][T13138] RDS/IB: !yz!: added [ 281.492260][T13138] smc: adding ib device !yz! with port count 1 [ 281.512822][T13138] smc: ib device !yz! port 1 has no pnetid [ 281.591099][T13180] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 281.613290][T13190] netlink: 'syz.1.2027': attribute type 5 has an invalid length. [ 282.122619][T13214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2033'. [ 282.196862][T13219] ipt_ECN: cannot use operation on non-tcp rule [ 282.349505][T13229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2038'. [ 282.394032][T13233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2041'. [ 282.408970][T13236] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 283.013186][ T5899] hid-generic 0005:4C4A:0009.0002: item fetching failed at offset 0/1 [ 283.024614][ T5899] hid-generic 0005:4C4A:0009.0002: probe with driver hid-generic failed with error -22 [ 283.202477][T13271] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 283.585309][T13287] netlink: 'syz.2.2060': attribute type 1 has an invalid length. [ 284.107170][T13321] xt_TCPMSS: Only works on TCP SYN packets [ 284.148759][T13313] bond7: entered promiscuous mode [ 284.188022][T13313] bond7: entered allmulticast mode [ 284.197720][T13313] 8021q: adding VLAN 0 to HW filter on device bond7 [ 284.783312][T13360] syzkaller0: entered promiscuous mode [ 284.788860][T13360] syzkaller0: entered allmulticast mode [ 285.198057][T13392] Bluetooth: MGMT ver 1.23 [ 285.502667][T13409] netlink: 'syz.2.2096': attribute type 1 has an invalid length. [ 285.555881][T13414] __nla_validate_parse: 11 callbacks suppressed [ 285.555906][T13414] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2099'. [ 285.599312][T13404] syzkaller0: entered promiscuous mode [ 285.606836][T13404] syzkaller0: entered allmulticast mode [ 285.616708][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 285.631628][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 285.657832][T13409] 8021q: adding VLAN 0 to HW filter on device bond5 [ 285.678686][T13415] bond5: (slave geneve3): making interface the new active one [ 285.688870][T13415] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 285.711031][ T6538] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.734820][ T6538] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.753163][ T6538] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 287.241810][ T5848] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 287.249212][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 287.450635][ T6538] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 287.589646][T13470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2116'. [ 287.599687][T13470] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2116'. [ 287.610698][T13470] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2116'. [ 287.625573][T13470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2116'. [ 287.686766][T13466] C: renamed from team_slave_0 [ 287.695798][T13466] netlink: 'syz.0.2115': attribute type 1 has an invalid length. [ 287.720629][T13466] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 287.959418][T13486] bond10: Removing last arp target with arp_interval on [ 288.005916][T13486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.018842][T13486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 288.171266][T13486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.195763][T13486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 288.312866][T13486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.361097][T13486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 288.391968][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2129'. [ 288.503977][T13486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.523783][T13486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 288.620054][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2134'. [ 288.681585][ T3485] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.713075][ T3485] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 288.763981][ T3485] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.779313][ T3485] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 288.818267][ T3485] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.832420][ T3485] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 288.852021][T13531] netlink: 'syz.0.2136': attribute type 1 has an invalid length. [ 288.870314][T13531] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2136'. [ 288.884552][ T3485] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.901920][ T3485] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.426822][T13556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.901826][T13591] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 289.945150][T13591] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 290.106192][T13603] geneve3: entered promiscuous mode [ 290.112019][T13603] geneve3: entered allmulticast mode [ 290.118962][ T3485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.140155][ T3485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.171878][ T3485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.186396][ T3485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.516869][T13625] netlink: 'syz.2.2168': attribute type 142 has an invalid length. [ 290.911042][T13661] __nla_validate_parse: 6 callbacks suppressed [ 290.911063][T13661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2175'. [ 290.961427][T13664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2177'. [ 290.971077][T13664] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2177'. [ 290.981554][T13664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2177'. [ 291.084044][T13666] xt_hashlimit: size too large, truncated to 1048576 [ 291.093290][T13668] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2179'. [ 291.104295][T13668] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2179'. [ 291.119196][T13669] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2179'. [ 291.158883][T13669] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2179'. [ 291.182043][T13668] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2179'. [ 291.201528][T13668] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2179'. [ 291.233833][T13670] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 291.339546][T13675] openvswitch: netlink: EtherType 0 is less than min 600 [ 291.800787][T13698] netlink: 'syz.4.2190': attribute type 11 has an invalid length. [ 291.863132][T13704] IPVS: set_ctl: invalid protocol: 94 172.30.0.4:20002 [ 292.339520][T13736] ipt_REJECT: TCP_RESET invalid for non-tcp [ 292.470735][T13740] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 292.763165][T13760] netlink: 'syz.3.2204': attribute type 142 has an invalid length. [ 292.794404][T13760] netlink: del zone limit has 8 unknown bytes [ 292.883679][T13768] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 292.916955][T13768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.998035][T13773] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 293.128357][T13782] tipc: New replicast peer: 255.255.255.255 [ 293.138222][T13782] tipc: Enabled bearer , priority 10 [ 293.416645][T13806] team0: Cannot enslave team device to itself [ 293.487438][T13812] syzkaller0: entered promiscuous mode [ 293.506834][T13812] syzkaller0: entered allmulticast mode [ 294.284341][ T5848] Bluetooth: hci0: command 0x0401 tx timeout [ 294.499050][T13869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.633725][T13882] x_tables: duplicate underflow at hook 1 [ 294.662644][T13882] IPVS: set_ctl: invalid protocol: 92 172.30.1.5:20001 [ 294.785201][T13869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.871802][T13888] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 295.090361][T13902] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 295.124235][T13914] netlink: 'syz.0.2246': attribute type 10 has an invalid length. [ 295.135352][T13902] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 295.148532][T13914] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 295.438343][T13935] netlink: 'syz.0.2252': attribute type 1 has an invalid length. [ 295.455062][T13938] netlink: 'syz.2.2253': attribute type 10 has an invalid length. [ 295.464110][T13935] NCSI netlink: No device for ifindex 0 [ 295.543206][T13938] team0: Port device geneve0 added [ 295.621899][T13946] netlink: 'syz.4.2254': attribute type 30 has an invalid length. [ 295.631943][T13949] openvswitch: netlink: IP tunnel dst address not specified [ 295.697960][T13946] bond5: option arp_missed_max: invalid value (0) [ 295.705702][T13946] bond5: option arp_missed_max: allowed values 1 - 255 [ 295.716987][T13946] bond5 (unregistering): Released all slaves [ 295.772520][T13943] C speed is unknown, defaulting to 1000 [ 295.973308][T13965] openvswitch: netlink: IP tunnel dst address not specified [ 295.983003][T13960] bond0: entered promiscuous mode [ 295.988208][T13960] bond_slave_0: entered promiscuous mode [ 295.995083][T13966] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 296.005298][T13960] bond_slave_1: entered promiscuous mode [ 296.012254][T13967] netlink: 'syz.0.2258': attribute type 1 has an invalid length. [ 296.013914][T13965] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 296.030994][T13960] bridge_slave_1: entered promiscuous mode [ 296.038045][T13966] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 296.038642][T13960] bond0: entered allmulticast mode [ 296.090647][T13960] bond_slave_0: entered allmulticast mode [ 296.096676][T13960] bond_slave_1: entered allmulticast mode [ 296.125648][T13960] bridge_slave_1: entered allmulticast mode [ 296.159052][T13960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.280322][T13970] bond8: (slave gretap3): making interface the new active one [ 296.311866][T13970] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 296.424252][T13980] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.444068][T13980] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.476374][T13984] atomic_op ffff888077e56198 conn xmit_atomic 0000000000000000 [ 296.508266][T13980] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.519047][T13980] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.590943][T13980] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.606053][T13980] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.714139][T13980] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.736359][T13980] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.844909][ T3485] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.864911][ T3485] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.918155][ T3485] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.929865][ T3485] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.978209][ T3485] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.987181][ T3485] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.023340][ T1156] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.041905][ T1156] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.164025][T13999] set match dimension is over the limit! [ 297.364652][T14007] __nla_validate_parse: 23 callbacks suppressed [ 297.364676][T14007] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2273'. [ 297.392363][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2274'. [ 297.463048][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2273'. [ 297.525434][T14017] sctp: [Deprecated]: syz.4.2275 (pid 14017) Use of int in max_burst socket option. [ 297.525434][T14017] Use struct sctp_assoc_value instead [ 297.556235][T14014] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2276'. [ 297.625360][T14019] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2278'. [ 297.810687][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2282'. [ 297.820034][T14026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2282'. [ 297.925657][T14032] syzkaller0: entered promiscuous mode [ 297.931363][T14032] syzkaller0: entered allmulticast mode [ 298.463299][T14055] netlink: 10956 bytes leftover after parsing attributes in process `syz.4.2292'. [ 298.499095][T14057] netlink: 'syz.1.2293': attribute type 7 has an invalid length. [ 298.507735][T14057] netlink: 'syz.1.2293': attribute type 7 has an invalid length. [ 298.689127][T14062] netlink: 4420 bytes leftover after parsing attributes in process `syz.1.2295'. [ 299.215943][T14073] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2298'. [ 299.443572][T14079] net_ratelimit: 63 callbacks suppressed [ 299.443594][T14079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.700243][T14091] tipc: Can't bind to reserved service type 2 [ 299.710073][T14092] netlink: 'syz.0.2304': attribute type 9 has an invalid length. [ 299.881228][T14103] vcan0: entered promiscuous mode [ 299.886341][T14103] vcan0: entered allmulticast mode [ 300.020052][T14107] netlink: 'syz.1.2308': attribute type 1 has an invalid length. [ 300.221970][T14122] openvswitch: netlink: EtherType 50a is less than min 600 [ 300.322765][T14128] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 301.052933][T14175] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20004 [ 301.084225][T14177] bridge_slave_0: default FDB implementation only supports local addresses [ 301.099320][T12691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.108075][T12691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.260262][T14193] netlink: 'syz.2.2329': attribute type 39 has an invalid length. [ 301.273174][T14192] netlink: 'syz.3.2330': attribute type 1 has an invalid length. [ 301.301216][T14187] nbd2: detected capacity change from 0 to 127 [ 301.307949][T14196] ipt_ECN: cannot use operation on non-tcp rule [ 301.315811][ T5848] block nbd2: Receive control failed (result -32) [ 301.330866][T14086] block nbd2: Dead connection, failed to find a fallback [ 301.338153][T14086] block nbd2: shutting down sockets [ 301.343474][T14086] blk_print_req_error: 138 callbacks suppressed [ 301.343493][T14086] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.359653][T14086] buffer_io_error: 138 callbacks suppressed [ 301.359670][T14086] Buffer I/O error on dev nbd2, logical block 0, async page read [ 301.374306][T14086] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.384081][T14086] Buffer I/O error on dev nbd2, logical block 1, async page read [ 301.392840][T14086] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.403218][T14086] Buffer I/O error on dev nbd2, logical block 2, async page read [ 301.411272][T14086] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.421309][T14086] Buffer I/O error on dev nbd2, logical block 3, async page read [ 301.429261][T14086] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.439375][T14086] Buffer I/O error on dev nbd2, logical block 0, async page read [ 301.457985][T14086] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.481362][T14086] Buffer I/O error on dev nbd2, logical block 1, async page read [ 301.498797][T14086] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.522165][T14086] Buffer I/O error on dev nbd2, logical block 2, async page read [ 301.538551][T14086] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.550680][T14086] Buffer I/O error on dev nbd2, logical block 3, async page read [ 301.588862][T14086] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.622351][T14086] Buffer I/O error on dev nbd2, logical block 0, async page read [ 301.639262][T14086] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.674086][T14086] Buffer I/O error on dev nbd2, logical block 1, async page read [ 301.698593][T14086] ldm_validate_partition_table(): Disk read failed. [ 301.722816][T14086] Dev nbd2: unable to read RDB block 0 [ 301.741326][T14086] nbd2: unable to read partition table [ 301.765929][T14086] ldm_validate_partition_table(): Disk read failed. [ 301.808453][T14086] Dev nbd2: unable to read RDB block 0 [ 301.835196][T14086] nbd2: unable to read partition table [ 301.909941][T14218] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 302.036265][T14224] openvswitch: netlink: Message has 8 unknown bytes. [ 302.043859][T14224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.228522][T14240] syzkaller0: entered promiscuous mode [ 302.237455][T14240] syzkaller0: entered allmulticast mode [ 302.263579][T14246] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 302.642049][T14264] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.652284][T14264] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.664258][T14264] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.707944][T14265] vcan1: entered promiscuous mode [ 302.714901][T14265] vcan1: entered allmulticast mode [ 302.776604][T14264] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.790549][T14264] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.801522][T14264] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.828869][T14272] __nla_validate_parse: 8 callbacks suppressed [ 302.828889][T14272] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2354'. [ 302.872901][T14264] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.884823][T14264] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.895849][T14264] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.963408][T14264] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.973727][T14264] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.984325][T14264] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 303.068005][T14291] netlink: 81 bytes leftover after parsing attributes in process `syz.3.2356'. [ 303.169125][ T6072] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.196415][ T6072] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.215070][ T6072] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 303.372805][ T6072] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.387919][ T6072] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.396773][ T6072] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 303.519422][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2358'. [ 303.519608][ T6072] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.568060][ T6072] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.583161][ T6072] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 303.592430][ T6072] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.603676][ T6072] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.622829][ T6072] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 303.662683][T14313] lo: left promiscuous mode [ 303.667898][T14313] tunl0: left promiscuous mode [ 303.677069][T14313] gre0: left promiscuous mode [ 303.683400][T14313] gretap0: left promiscuous mode [ 303.696907][T14313] erspan0: left promiscuous mode [ 303.713270][T14313] ip_vti0: left promiscuous mode [ 303.737144][T14326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2363'. [ 303.746559][T14327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2363'. [ 304.052269][T14328] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 304.068946][T14328] syzkaller1: Refused to change device type [ 304.111279][T14332] pim6reg1: entered promiscuous mode [ 304.116624][T14332] pim6reg1: entered allmulticast mode [ 304.146172][T14337] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2364'. [ 304.592661][T14360] bridge5: entered promiscuous mode [ 304.606254][T14360] bridge5: entered allmulticast mode [ 304.645390][T14360] team0: Port device bridge5 added [ 304.672720][T14360] bridge0: port 3(team0) entered blocking state [ 304.695523][T14360] bridge0: port 3(team0) entered disabled state [ 304.703881][T14360] team0: entered allmulticast mode [ 304.709191][T14360] team_slave_0: entered allmulticast mode [ 304.715785][T14360] team_slave_1: entered allmulticast mode [ 304.724435][T14360] team0: entered promiscuous mode [ 304.729656][T14360] team_slave_0: entered promiscuous mode [ 304.737295][T14360] team_slave_1: entered promiscuous mode [ 304.756221][T14367] gtp1: entered promiscuous mode [ 304.761649][T14367] gtp1: entered allmulticast mode [ 304.788093][T14371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2374'. [ 305.254648][T14391] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2380'. [ 305.347305][T14397] netlink: 'syz.2.2382': attribute type 11 has an invalid length. [ 305.356007][T14397] netlink: 'syz.2.2382': attribute type 4 has an invalid length. [ 305.365602][T14397] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.2382'. [ 305.375580][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2383'. [ 306.049629][T14442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.467735][T14468] netlink: 'syz.3.2406': attribute type 33 has an invalid length. [ 306.515485][T14476] sctp: [Deprecated]: syz.2.2408 (pid 14476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.515485][T14476] Use struct sctp_sack_info instead [ 307.002608][T14507] netlink: 'syz.3.2419': attribute type 7 has an invalid length. [ 307.233569][T14524] gtp2: entered promiscuous mode [ 307.238924][T14524] gtp2: entered allmulticast mode [ 307.403337][T14531] syzkaller0: entered promiscuous mode [ 307.412861][T14531] syzkaller0: entered allmulticast mode [ 307.983640][T14578] __nla_validate_parse: 6 callbacks suppressed [ 307.983662][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2436'. [ 308.034309][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 308.276266][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2441'. [ 308.302980][T14593] bridge0: port 1(veth0_to_bridge) entered blocking state [ 308.323841][T14593] bridge0: port 1(veth0_to_bridge) entered disabled state [ 308.338318][T14593] veth0_to_bridge: entered allmulticast mode [ 308.357590][T14593] veth0_to_bridge: entered promiscuous mode [ 309.085064][T14643] sctp: [Deprecated]: syz.0.2456 (pid 14643) Use of int in max_burst socket option. [ 309.085064][T14643] Use struct sctp_assoc_value instead [ 309.221509][T14651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2458'. [ 309.292510][T14653] syzkaller0: entered promiscuous mode [ 309.298144][T14653] syzkaller0: entered allmulticast mode [ 309.464831][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2461'. [ 309.886111][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 309.937218][T14682] xt_limit: Overflow, try lower: 604147548/4200216962 [ 311.244873][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2472'. [ 311.665451][T14723] raw_sendmsg: syz.0.2478 forgot to set AF_INET. Fix it! [ 311.743898][T14730] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 311.753384][T14730] netlink: 'syz.4.2481': attribute type 2 has an invalid length. [ 311.797426][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2480'. [ 311.808540][T14732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2480'. [ 311.819164][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2480'. [ 311.830715][T14730] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 311.838498][T14730] netlink: 'syz.4.2481': attribute type 2 has an invalid length. [ 311.851055][T14732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2480'. [ 311.874529][T14730] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 311.903728][T14730] netlink: 'syz.4.2481': attribute type 2 has an invalid length. [ 311.941356][T14730] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 311.950806][T14730] netlink: 'syz.4.2481': attribute type 2 has an invalid length. [ 311.975649][T14730] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 311.993793][T14730] netlink: 'syz.4.2481': attribute type 2 has an invalid length. [ 312.615569][T14779] bond12 (unregistering): Released all slaves [ 312.720199][T14792] tap0: tun_chr_ioctl cmd 1074025672 [ 312.739800][T14792] tap0: ignored: set checksum disabled [ 312.944718][T14755] netlink: 'syz.3.2484': attribute type 11 has an invalid length. [ 313.350800][T14831] __nla_validate_parse: 5 callbacks suppressed [ 313.350822][T14831] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2501'. [ 313.372383][T14828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2500'. [ 313.814069][T14856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2505'. [ 314.233476][T14880] 8021q: adding VLAN 0 to HW filter on device bond12 [ 314.246269][T14880] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2514'. [ 314.277040][T14884] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2515'. [ 314.308530][T14891] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2516'. [ 314.319091][T14889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2517'. [ 314.328698][T14893] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2516'. [ 314.331289][T14889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2517'. [ 314.655494][T14911] sctp: [Deprecated]: syz.2.2524 (pid 14911) Use of int in maxseg socket option. [ 314.655494][T14911] Use struct sctp_assoc_value instead [ 314.779036][T14918] GUP no longer grows the stack in syz.1.2526 (14918): 200000003000-20000000a000 (200000001000) [ 314.827555][T14918] CPU: 0 UID: 0 PID: 14918 Comm: syz.1.2526 Not tainted syzkaller #0 PREEMPT(full) [ 314.827588][T14918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.827615][T14918] Call Trace: [ 314.827624][T14918] [ 314.827636][T14918] dump_stack_lvl+0xe8/0x150 [ 314.827678][T14918] __get_user_pages+0x2465/0x29f0 [ 314.827736][T14918] ? __gup_longterm_locked+0xc63/0x1660 [ 314.827769][T14918] ? down_read_killable+0x1bc/0x350 [ 314.827796][T14918] ? try_get_folio+0xec/0x660 [ 314.827835][T14918] __gup_longterm_locked+0xde4/0x1660 [ 314.827897][T14918] gup_fast_fallback+0x1d26/0x2290 [ 314.827967][T14918] ? __pfx_gup_fast_fallback+0x10/0x10 [ 314.828002][T14918] ? is_valid_gup_args+0x11f/0x200 [ 314.828036][T14918] ? get_user_pages_fast+0x4d/0xb0 [ 314.828070][T14918] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 314.828107][T14918] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 314.828139][T14918] ? wait_for_space+0x248/0x2d0 [ 314.828173][T14918] iov_iter_get_pages2+0x5e/0xa0 [ 314.828204][T14918] __se_sys_vmsplice+0x548/0x10d0 [ 314.828259][T14918] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 314.828291][T14918] ? __pfx_futex_wait+0x10/0x10 [ 314.828337][T14918] ? irqentry_exit+0x5dd/0x660 [ 314.828420][T14918] do_syscall_64+0xec/0xf80 [ 314.828443][T14918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.828465][T14918] ? trace_irq_disable+0x37/0x100 [ 314.828495][T14918] ? clear_bhb_loop+0x60/0xb0 [ 314.828523][T14918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.828545][T14918] RIP: 0033:0x7fd34798f749 [ 314.828565][T14918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.828585][T14918] RSP: 002b:00007fd34884f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 314.828628][T14918] RAX: ffffffffffffffda RBX: 00007fd347be5fa0 RCX: 00007fd34798f749 [ 314.828653][T14918] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 314.828668][T14918] RBP: 00007fd347a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.828682][T14918] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 314.828696][T14918] R13: 00007fd347be6038 R14: 00007fd347be5fa0 R15: 00007ffdf6773df8 [ 314.828735][T14918] [ 315.133293][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 315.197126][T14928] xt_ecn: cannot match TCP bits for non-tcp packets [ 315.598407][T14949] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2533'. [ 315.876786][T14960] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 315.905693][T14960] bond0 (unregistering): Released all slaves [ 316.342039][T14988] bond6: Removing last ns target with arp_interval on [ 316.394005][T14999] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 316.413944][T14999] bond9 (unregistering): Released all slaves [ 316.693545][T15012] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 316.733035][T15027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.741289][T15014] bond9: option lp_interval: invalid value (0) [ 316.771398][T15014] bond9: option lp_interval: allowed values 1 - 2147483647 [ 316.806793][T15014] bond9 (unregistering): Released all slaves [ 317.278932][T15058] openvswitch: netlink: Flow key attr not present in new flow. [ 317.432629][T15067] xt_l2tp: v2 doesn't support IP mode [ 317.661043][T15081] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 317.897492][T15096] validate_nla: 130 callbacks suppressed [ 317.897513][T15096] netlink: 'syz.1.2571': attribute type 29 has an invalid length. [ 317.918602][T15100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.922777][T15096] netlink: 'syz.1.2571': attribute type 29 has an invalid length. [ 318.039535][T15102] netlink: 'syz.2.2574': attribute type 1 has an invalid length. [ 318.075410][ T31] audit: type=1804 audit(1767653099.541:3): pid=15102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2574" name="/newroot/526/cgroup.controllers" dev="tmpfs" ino=2696 res=1 errno=0 [ 318.134207][ T31] audit: type=1800 audit(1767653099.561:4): pid=15102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2574" name="cgroup.controllers" dev="tmpfs" ino=2696 res=0 errno=0 [ 318.433452][T15130] __nla_validate_parse: 14 callbacks suppressed [ 318.433473][T15130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2578'. [ 318.703776][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2588'. [ 318.742130][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2588'. [ 318.743874][T15150] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2590'. [ 318.797386][T15153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2589'. [ 318.952951][T15153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.969461][T15155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2591'. [ 319.020232][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2592'. [ 319.192131][T15166] netlink: 'syz.3.2594': attribute type 21 has an invalid length. [ 319.205857][T15166] netlink: 'syz.3.2594': attribute type 1 has an invalid length. [ 319.254192][T15172] syzkaller0: entered promiscuous mode [ 319.273376][T15172] syzkaller0: entered allmulticast mode [ 319.447590][T15186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2602'. [ 319.787363][T15207] tipc: New replicast peer: ff02:0000:0000:0000:0000:0000:0000:0001 [ 320.147610][T15230] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2612'. [ 320.272878][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2614'. [ 320.358412][T15238] tipc: Enabled bearer , priority 10 [ 320.749114][T15258] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 320.827010][T15262] !: renamed from dummy0 [ 321.031727][T15277] xt_SECMARK: invalid mode: 9 [ 321.041992][T15278] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 321.347385][T15289] syzkaller0: entered promiscuous mode [ 321.355239][T15289] syzkaller0: entered allmulticast mode [ 322.957749][ T10] tipc: Node number set to 3546751343 [ 322.971731][T15311] IPVS: Unknown mcast interface: vcan0 [ 323.194327][T15335] netlink: 'syz.4.2643': attribute type 5 has an invalid length. [ 323.297947][T15331] bond0: option arp_all_targets: invalid value (18446744073709551613) [ 323.316968][T15331] bond0 (unregistering): Released all slaves [ 323.497346][T15352] IPVS: set_ctl: invalid protocol: 174 172.30.0.3:20001 [ 323.693417][T15365] __nla_validate_parse: 13 callbacks suppressed [ 323.693441][T15365] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2651'. [ 323.710069][T15365] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 323.773662][T15367] syzkaller0: entered promiscuous mode [ 323.811610][T15367] syzkaller0: entered allmulticast mode [ 323.834174][T15371] 0: reclassify loop, rule prio 0, protocol 800 [ 324.289820][ T5827] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 324.320057][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 324.320087][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.320100][ T5827] Call Trace: [ 324.320108][ T5827] [ 324.320116][ T5827] dump_stack_lvl+0xe8/0x150 [ 324.320148][ T5827] dump_header+0xd4/0x4c0 [ 324.320173][ T5827] oom_kill_process+0x263/0x800 [ 324.320198][ T5827] out_of_memory+0xf0c/0x12b0 [ 324.320247][ T5827] ? __pfx_out_of_memory+0x10/0x10 [ 324.320290][ T5827] mem_cgroup_out_of_memory+0x145/0x240 [ 324.320320][ T5827] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 324.320359][ T5827] ? _raw_spin_unlock+0x28/0x50 [ 324.320389][ T5827] ? memcg1_oom_prepare+0x37f/0x450 [ 324.320413][ T5827] try_charge_memcg+0xde4/0x1280 [ 324.320454][ T5827] ? __pfx_try_charge_memcg+0x10/0x10 [ 324.320480][ T5827] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 324.320518][ T5827] charge_memcg+0x9f/0x180 [ 324.320540][ T5827] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 324.320562][ T5827] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 324.320589][ T5827] __read_swap_cache_async+0x212/0x480 [ 324.320627][ T5827] swap_cluster_readahead+0x336/0x630 [ 324.320665][ T5827] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 324.320709][ T5827] ? get_vma_policy+0x27c/0x3c0 [ 324.320737][ T5827] swapin_readahead+0x189/0xc60 [ 324.320763][ T5827] ? finish_task_switch+0x162/0x940 [ 324.320797][ T5827] ? swap_table_get+0x1e/0x260 [ 324.320839][ T5827] ? __pfx_swapin_readahead+0x10/0x10 [ 324.320870][ T5827] ? swap_table_get+0x1e/0x260 [ 324.320895][ T5827] ? swap_table_get+0x1e/0x260 [ 324.320919][ T5827] ? swap_table_get+0x1e/0x260 [ 324.320947][ T5827] ? swap_table_get+0x216/0x260 [ 324.320975][ T5827] ? swap_cache_get_folio+0x51c/0x530 [ 324.321009][ T5827] do_swap_page+0x837/0x5c70 [ 324.321042][ T5827] ? __lock_acquire+0x6b6/0x2cf0 [ 324.321070][ T5827] ? ___pte_offset_map+0x29/0x240 [ 324.321103][ T5827] ? do_swap_page+0x17d/0x5c70 [ 324.321129][ T5827] ? __pfx_do_swap_page+0x10/0x10 [ 324.321156][ T5827] ? __lock_acquire+0x6b6/0x2cf0 [ 324.321176][ T5827] ? __pfx_default_wake_function+0x10/0x10 [ 324.321211][ T5827] ? ___pte_offset_map+0x1ae/0x240 [ 324.321244][ T5827] ? pte_offset_map_rw_nolock+0xea/0x160 [ 324.321276][ T5827] handle_mm_fault+0x1277/0x32b0 [ 324.321320][ T5827] ? handle_mm_fault+0xdb/0x32b0 [ 324.321359][ T5827] ? __pfx_handle_mm_fault+0x10/0x10 [ 324.321386][ T5827] ? lock_vma_under_rcu+0x42c/0x4a0 [ 324.321434][ T5827] do_user_addr_fault+0xa7c/0x1380 [ 324.321464][ T5827] ? rcu_is_watching+0x15/0xb0 [ 324.321489][ T5827] ? trace_page_fault_user+0x84/0x1c0 [ 324.321513][ T5827] exc_page_fault+0x71/0xd0 [ 324.321534][ T5827] asm_exc_page_fault+0x26/0x30 [ 324.321553][ T5827] RIP: 0033:0x7fd3479c2008 [ 324.321573][ T5827] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 324.321590][ T5827] RSP: 002b:00007ffdf6774110 EFLAGS: 00010293 [ 324.321608][ T5827] RAX: 0000000000000000 RBX: 0000000000000639 RCX: 00007fd3479c2005 [ 324.321622][ T5827] RDX: 00007ffdf6774150 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.321635][ T5827] RBP: 00007ffdf67741bc R08: 0000000000000000 R09: 0000000000000000 [ 324.321647][ T5827] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 324.321659][ T5827] R13: 00000000000927c0 R14: 000000000004f000 R15: 00007ffdf6774210 [ 324.321693][ T5827] [ 324.665661][T15387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2658'. [ 324.717674][ T5827] memory: usage 307200kB, limit 307200kB, failcnt 411 [ 324.724632][ T5827] memory+swap: usage 307320kB, limit 9007199254740988kB, failcnt 0 [ 324.742130][ T5827] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 324.757343][T15386] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2659'. [ 324.771025][ T5827] Memory cgroup stats for /syz1: [ 324.771296][ T5827] cache 0 [ 324.779517][ T5827] rss 0 [ 324.830742][ T5827] rss_huge 0 [ 324.838588][ T5827] shmem 0 [ 324.846624][ T5827] mapped_file 0 [ 324.859173][ T5827] dirty 0 [ 324.874488][ T5827] writeback 0 [ 324.902746][ T5827] workingset_refault_anon 2 [ 324.941124][ T5827] workingset_refault_file 0 [ 324.945794][ T5827] swap 122880 [ 324.949117][ T5827] swapcached 12288 [ 324.953039][ T5827] pgpgin 36024 [ 324.956449][ T5827] pgpgout 36021 [ 324.959941][ T5827] pgfault 100057 [ 324.963837][ T5827] pgmajfault 2 [ 324.967256][ T5827] inactive_anon 12288 [ 324.971997][ T5827] active_anon 0 [ 324.975586][ T5827] inactive_file 0 [ 324.979279][ T5827] active_file 0 [ 324.982973][ T5827] unevictable 0 [ 324.986477][ T5827] hierarchical_memory_limit 314572800 [ 324.993249][ T5827] hierarchical_memsw_limit 9223372036854771712 [ 324.999451][ T5827] total_cache 0 [ 325.007799][ T5827] total_rss 0 [ 325.011298][ T5827] total_rss_huge 0 [ 325.015213][ T5827] total_shmem 0 [ 325.018706][ T5827] total_mapped_file 0 [ 325.022800][ T5827] total_dirty 0 [ 325.026300][ T5827] total_writeback 0 [ 325.030137][ T5827] total_workingset_refault_anon 2 [ 325.036972][ T5827] total_workingset_refault_file 0 [ 325.042327][ T5827] total_swap 122880 [ 325.046407][ T5827] total_swapcached 12288 [ 325.051297][ T5827] total_pgpgin 36024 [ 325.055335][ T5827] total_pgpgout 36021 [ 325.059352][ T5827] total_pgfault 100057 [ 325.069224][ T5827] total_pgmajfault 2 [ 325.074349][ T5827] total_inactive_anon 12288 [ 325.078986][ T5827] total_active_anon 0 [ 325.101506][ T5827] total_inactive_file 0 [ 325.109235][ T5827] total_active_file 0 [ 325.121078][ T5827] total_unevictable 0 [ 325.147088][ T5827] anon_cost 0 [ 325.176696][ T5827] file_cost 0 [ 325.180094][ T5827] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2646,pid=15355,uid=0 [ 325.239311][ T5827] Memory cgroup out of memory: Killed process 15355 (syz.1.2646) total-vm:98252kB, anon-rss:1140kB, file-rss:21672kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 325.409895][T15411] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2666'. [ 325.466417][T15411] nbd: illegal input index -8454144 [ 325.475670][T15411] nbd: must specify a device to reconfigure [ 325.591954][T15406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.623697][T15406] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.645541][T15427] x_tables: duplicate underflow at hook 1 [ 325.660648][T15406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.982522][T15441] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 326.145061][T15436] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.221039][T15436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.308979][T15436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.318051][T15455] netlink: 'syz.1.2675': attribute type 9 has an invalid length. [ 326.338714][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2676'. [ 326.372809][T15436] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 326.439613][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.446881][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.457108][ T9870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.508361][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.515654][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.969119][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.142706][T15488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2682'. [ 327.175796][T15490] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 327.299418][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2685'. [ 327.323893][ T4617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.569539][T15508] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 327.995595][T15541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'. [ 328.044153][T15541] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 328.149682][T15557] netlink: 'syz.0.2698': attribute type 83 has an invalid length. [ 328.386658][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.432531][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.722007][T15576] syzkaller0: entered promiscuous mode [ 328.751184][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.772947][T15576] syzkaller0: entered allmulticast mode [ 328.946774][T15596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2704'. [ 329.172071][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2707'. [ 329.268528][T15619] netlink: 'syz.2.2708': attribute type 13 has an invalid length. [ 329.309527][T15602] macsec3: entered promiscuous mode [ 329.329147][T15602] macsec3: entered allmulticast mode [ 329.342448][T15602] bond7: (slave macsec3): Error -34 calling dev_set_mtu [ 329.409037][T15626] netlink: 'syz.3.2710': attribute type 1 has an invalid length. [ 329.441140][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2710'. [ 329.901925][T15648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2715'. [ 330.115877][T15665] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.332862][T15672] openvswitch: netlink: Key 6 has unexpected len 281 expected 2 [ 330.450993][T15682] xt_TPROXY: Can be used only with -p tcp or -p udp [ 330.495430][T15688] netlink: 'syz.1.2728': attribute type 10 has an invalid length. [ 330.533383][T15689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2727'. [ 330.564025][T15682] SET target dimension over the limit! [ 330.781595][T15706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2733'. [ 330.811354][T15710] netlink: 5496 bytes leftover after parsing attributes in process `syz.0.2732'. [ 330.977032][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2734'. [ 331.091686][T15715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2735'. [ 331.111907][T15719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2734'. [ 331.158732][ T5848] block nbd3: Receive control failed (result -32) [ 331.493247][T15731] netlink: 'syz.3.2740': attribute type 1 has an invalid length. [ 331.864145][T15755] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 332.117642][T15775] 8021q: adding VLAN 0 to HW filter on device bond13 [ 332.191901][T15775] 8021q: adding VLAN 0 to HW filter on device bond13 [ 332.199892][T15775] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 332.213065][T15775] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 332.242952][T15778] bond0: entered promiscuous mode [ 332.248118][T15778] bond_slave_0: entered promiscuous mode [ 332.267599][T15778] bond_slave_1: entered promiscuous mode [ 332.279015][T15778] syz_tun: entered promiscuous mode [ 332.288233][T15778] bridge_slave_1: entered promiscuous mode [ 332.299343][T15778] batadv0: entered promiscuous mode [ 332.306442][T15778] debugfs: 'hsr1' already exists in 'hsr' [ 332.321528][T15778] Cannot create hsr debugfs directory [ 332.335922][T15778] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 332.357335][T15778] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 332.368014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.381836][T15778] hsr1: entered allmulticast mode [ 332.387157][T15778] bond0: entered allmulticast mode [ 332.393573][T15778] bond_slave_0: entered allmulticast mode [ 332.399593][T15778] bond_slave_1: entered allmulticast mode [ 332.407192][T15778] syz_tun: entered allmulticast mode [ 332.417880][T15778] bridge_slave_1: entered allmulticast mode [ 332.425719][T15778] batadv0: entered allmulticast mode [ 332.432406][T15778] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 332.445551][T15778] bond0: left promiscuous mode [ 332.471203][T15778] bond_slave_0: left promiscuous mode [ 332.479236][T15778] bond_slave_1: left promiscuous mode [ 332.500698][T15778] syz_tun: left promiscuous mode [ 332.509592][T15778] bridge_slave_1: left promiscuous mode [ 332.541219][T15778] batadv0: left promiscuous mode [ 332.662850][T15801] netlink: 'syz.2.2756': attribute type 10 has an invalid length. [ 332.932417][T15821] IPv6: NLM_F_CREATE should be specified when creating new route [ 333.053483][T15825] syzkaller0: entered promiscuous mode [ 333.081999][T15825] syzkaller0: entered allmulticast mode [ 333.111700][T15831] netlink: 'syz.1.2762': attribute type 17 has an invalid length. [ 333.496846][T15856] syzkaller0: entered promiscuous mode [ 333.510843][T15856] syzkaller0: entered allmulticast mode [ 333.599500][T15864] dvmrp0: left allmulticast mode [ 333.607152][T15864] dvmrp6: left allmulticast mode [ 333.922117][T15871] netlink: 'syz.1.2771': attribute type 5 has an invalid length. [ 333.952338][T15871] geneve3: entered promiscuous mode [ 333.957749][T15871] geneve3: entered allmulticast mode [ 333.968618][ T6072] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 333.981211][ T6072] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 333.991119][ T6072] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 334.008638][ T6072] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 334.404921][T15900] __nla_validate_parse: 14 callbacks suppressed [ 334.404944][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2777'. [ 334.938083][ T5494] veth0_vlan: left promiscuous mode [ 334.994418][ T5494] veth0_vlan: entered promiscuous mode [ 335.400978][T15956] syzkaller0: entered promiscuous mode [ 335.420859][T15956] syzkaller0: entered allmulticast mode [ 335.463274][T15962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2791'. [ 336.134080][T15989] netlink: 'syz.4.2797': attribute type 1 has an invalid length. [ 336.312246][T15989] 8021q: adding VLAN 0 to HW filter on device bond8 [ 336.464098][T15995] bond8: (slave veth5): Enslaving as an active interface with a down link [ 336.497369][T16005] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 336.510937][T16005] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 336.560438][T16013] xt_l2tp: v2 doesn't support IP mode [ 336.585200][T16013] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2804'. [ 336.698750][T16018] netlink: 'syz.3.2805': attribute type 4 has an invalid length. [ 336.823308][T16025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2810'. [ 337.014420][T16042] openvswitch: netlink: IP tunnel TTL not specified. [ 337.084389][T16048] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2813'. [ 337.292791][T16059] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 337.544159][T16083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2824'. [ 337.611033][T16086] vlan3: entered promiscuous mode [ 337.618329][T16086] bridge0: entered promiscuous mode [ 337.652985][T16083] netlink: 'syz.3.2824': attribute type 1 has an invalid length. [ 337.690063][T16087] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 337.701598][T16087] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 337.761527][T16093] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2827'. [ 337.770787][T16093] tipc: Invalid UDP bearer configuration [ 337.770852][T16093] tipc: Enabling of bearer rejected, failed to enable media [ 338.044321][T16105] bond14 (unregistering): Released all slaves [ 338.230160][T16127] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2835'. [ 338.270814][T16127] openvswitch: netlink: Flow key attr not present in new flow. [ 338.369742][T16116] xt_ecn: cannot match TCP bits for non-tcp packets [ 338.430109][T16133] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2836'. [ 338.542458][T16136] x_tables: unsorted underflow at hook 4 [ 338.571616][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2837'. [ 338.763257][T16143] bond14: Unable to set up delay as MII monitoring is disabled [ 338.908068][T16143] bond14 (unregistering): Released all slaves [ 339.228873][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.244909][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.254701][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.262930][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.280921][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.433151][T16165] C speed is unknown, defaulting to 1000 [ 339.808700][T16191] netlink: 'syz.3.2852': attribute type 10 has an invalid length. [ 339.843416][T16194] xt_hashlimit: max too large, truncated to 1048576 [ 339.852171][ T5830] bond0: (slave syz_tun): Releasing backup interface [ 339.864773][ T5830] syz_tun (unregistering): left allmulticast mode [ 339.914587][T16189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2850'. [ 339.938900][T16189] xt_hashlimit: max too large, truncated to 1048576 [ 339.948862][T16197] netlink: 'syz.3.2854': attribute type 1 has an invalid length. [ 340.104453][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2854'. [ 340.221245][T16212] netlink: 'syz.1.2855': attribute type 3 has an invalid length. [ 340.395351][T16217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2857'. [ 340.601463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.725076][T16228] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 340.731993][T16228] syzkaller1: linktype set to 823 [ 340.737519][T16228] IPVS: ip_vs_edit_dest(): server weight less than zero [ 340.840802][T16244] 8021q: VLANs not supported on sit0 [ 340.898106][T16246] netlink: 'syz.3.2865': attribute type 1 has an invalid length. [ 341.055654][T16250] vlan2: entered promiscuous mode [ 341.061766][T16250] bridge0: entered promiscuous mode [ 341.072692][T16250] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2866'. [ 341.123934][T16260] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2869'. [ 341.182300][T16262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2870'. [ 341.226119][T16265] netlink: 'syz.2.2870': attribute type 12 has an invalid length. [ 341.266084][T16165] chnl_net:caif_netlink_parms(): no params data found [ 341.331624][ T52] Bluetooth: hci5: command tx timeout [ 341.672420][T16286] netlink: 'syz.1.2874': attribute type 10 has an invalid length. [ 341.701526][T16286] veth1_macvtap: left promiscuous mode [ 341.726588][T16286] team0: Device veth1_macvtap failed to register rx_handler [ 341.774393][T16293] openvswitch: netlink: IPv4 tunnel dst address is zero [ 341.826413][T16298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 341.858002][T16298] netlink: 'syz.3.2875': attribute type 21 has an invalid length. [ 341.868826][T16165] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.883619][T16165] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.897396][T16165] bridge_slave_0: entered allmulticast mode [ 341.917710][T16165] bridge_slave_0: entered promiscuous mode [ 341.937110][T16298] netlink: 'syz.3.2875': attribute type 6 has an invalid length. [ 341.959208][T16298] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2875'. [ 341.975310][T16165] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.983730][T16165] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.992854][T16165] bridge_slave_1: entered allmulticast mode [ 342.001928][T16165] bridge_slave_1: entered promiscuous mode [ 342.103440][T16306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2879'. [ 342.139072][T16165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.158112][T16165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.179669][T16313] netlink: 'syz.1.2882': attribute type 1 has an invalid length. [ 342.250170][T16313] 8021q: adding VLAN 0 to HW filter on device bond14 [ 342.311968][T16165] team0: Port device team_slave_0 added [ 342.335986][T16318] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 342.359807][T16165] team0: Port device team_slave_1 added [ 342.516948][T16330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2886'. [ 342.605596][T16165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.613327][T16165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.639817][T16165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.695837][T16165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.703998][T16165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.748729][T16165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.933372][T16165] hsr_slave_0: entered promiscuous mode [ 342.949785][T16165] hsr_slave_1: entered promiscuous mode [ 342.964607][T16165] debugfs: 'hsr0' already exists in 'hsr' [ 342.978583][T16165] Cannot create hsr debugfs directory [ 343.384247][T16165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.400968][ T52] Bluetooth: hci5: command tx timeout [ 343.408704][T16165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 343.502247][T16165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.514637][T16165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 343.665088][T16165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.676325][T16165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 343.792538][T16165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.819085][T16165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 344.182640][T16165] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.216162][T16165] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.258092][T16165] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.291501][T16165] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.513367][T16421] openvswitch: netlink: Unknown key attributes 2 [ 344.847852][T16165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.897746][T16165] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.936411][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.943641][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.998207][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.005475][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.094358][T16448] pim6reg: entered allmulticast mode [ 345.143675][T16452] lo: Caught tx_queue_len zero misconfig [ 345.456331][T16466] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 345.480837][ T52] Bluetooth: hci5: command tx timeout [ 345.726856][T16165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.771710][T16480] C speed is unknown, defaulting to 1000 [ 345.875213][T16485] netlink: 'syz.3.2926': attribute type 3 has an invalid length. [ 345.902724][T16165] veth0_vlan: entered promiscuous mode [ 345.936385][T16165] veth1_vlan: entered promiscuous mode [ 346.022724][T16165] veth0_macvtap: entered promiscuous mode [ 346.050282][T16165] veth1_macvtap: entered promiscuous mode [ 346.078382][T16165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.103285][T16165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.144649][ T4617] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.159156][T16490] __nla_validate_parse: 7 callbacks suppressed [ 346.159179][T16490] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2929'. [ 346.180004][ T4617] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.211965][ T4617] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.231613][ T4617] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.428356][ T6072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.458606][ T6072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.586298][T16494] syzkaller0: entered promiscuous mode [ 346.592580][T16494] syzkaller0: entered allmulticast mode [ 347.560901][ T52] Bluetooth: hci5: command tx timeout [ 348.185449][ T6538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.198158][ T6538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.312664][T16511] netlink: 'syz.3.2934': attribute type 1 has an invalid length. [ 348.677967][T16531] netlink: 'syz.0.2938': attribute type 2 has an invalid length. [ 348.703283][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.717302][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.727104][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.744725][T16533] netlink: 'syz.3.2937': attribute type 1 has an invalid length. [ 348.753059][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.768894][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.994765][T16533] bond7 (unregistering): Released all slaves [ 349.224323][T16541] ip6tnl3: entered promiscuous mode [ 349.233806][T16541] ip6tnl3: entered allmulticast mode [ 349.611975][T16568] netlink: 'syz.1.2943': attribute type 1 has an invalid length. [ 349.998810][T16530] C speed is unknown, defaulting to 1000 [ 350.162995][T16592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.183599][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2948'. [ 350.241530][T16595] netlink: 'syz.3.2950': attribute type 8 has an invalid length. [ 350.504794][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2955'. [ 350.513766][T16611] netlink: 'syz.4.2953': attribute type 7 has an invalid length. [ 350.515748][T16611] netlink: 'syz.4.2953': attribute type 7 has an invalid length. [ 350.535342][T16610] delete_channel: no stack [ 350.623529][T16609] hsr_slave_0: left promiscuous mode [ 350.669025][T16609] hsr_slave_1: left promiscuous mode [ 350.754953][T16620] netlink: 'syz.3.2958': attribute type 1 has an invalid length. [ 350.841204][ T52] Bluetooth: hci3: command tx timeout [ 350.884906][T16620] 8021q: adding VLAN 0 to HW filter on device bond7 [ 350.949705][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2961'. [ 350.968523][T16629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2959'. [ 351.067725][T16635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2959'. [ 351.552197][T16653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.724071][T16680] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20003 [ 351.940148][T16530] chnl_net:caif_netlink_parms(): no params data found [ 352.205489][T16530] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.215802][T16530] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.242806][T16706] openvswitch: netlink: IP tunnel dst address not specified [ 352.251988][T16706] netlink: 'syz.0.2975': attribute type 1 has an invalid length. [ 352.282049][T16530] bridge_slave_0: entered allmulticast mode [ 352.298182][T16530] bridge_slave_0: entered promiscuous mode [ 352.321403][T16530] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.347705][T16530] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.366367][T16530] bridge_slave_1: entered allmulticast mode [ 352.385305][T16530] bridge_slave_1: entered promiscuous mode [ 352.405434][T16709] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 352.428210][T16709] bond1: (slave lo): Enslaving as a backup interface with an up link [ 352.444658][T16709] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 352.508328][T16530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.545861][T16530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.674976][T16530] team0: Port device team_slave_0 added [ 352.726430][T16530] team0: Port device team_slave_1 added [ 352.834050][T16732] IPVS: length: 116 != 24 [ 352.838491][T16732] IPVS: length: 116 != 24 [ 352.886823][T16530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.895996][T16530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.923410][ T52] Bluetooth: hci3: command tx timeout [ 352.950799][T16530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.983587][T16738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2983'. [ 353.006223][T16530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.035213][T16530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.091848][T16530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.218342][T16530] hsr_slave_0: entered promiscuous mode [ 353.232477][T16530] hsr_slave_1: entered promiscuous mode [ 353.241953][T16530] debugfs: 'hsr0' already exists in 'hsr' [ 353.247747][T16530] Cannot create hsr debugfs directory [ 353.366569][T16753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2989'. [ 353.409838][ T5935] ------------[ cut here ]------------ [ 353.415543][ T5935] workqueue: cannot queue hci_conn_timeout on wq hci4 [ 353.422370][ T5935] WARNING: kernel/workqueue.c:2252 at __queue_work+0xd20/0xf90, CPU#1: kworker/1:6/5935 [ 353.432150][ T5935] Modules linked in: [ 353.440317][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 353.449751][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.459971][ T5935] Workqueue: events l2cap_chan_timeout [ 353.465470][ T5935] RIP: 0010:__queue_work+0xd4b/0xf90 [ 353.470898][ T5935] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 76 c0 9c 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d 18 [ 353.490903][ T5935] RSP: 0018:ffffc90004f4f848 EFLAGS: 00010086 [ 353.497016][ T5935] RAX: 1ffff1100f07d94b RBX: 0000000000000008 RCX: ffff88802ddf8000 [ 353.505011][ T5935] RDX: ffff888027e55178 RSI: ffffffff8a556110 RDI: ffffffff8f850a60 [ 353.513093][ T5935] RBP: 0000000000000020 R08: ffff8880783eca47 R09: 1ffff1100f07d948 [ 353.521095][ T5935] R10: dffffc0000000000 R11: ffffed100f07d949 R12: dffffc0000000000 [ 353.529102][ T5935] R13: ffff8880783eca58 R14: ffffffff8f850a60 R15: ffff888027e55178 [ 353.537382][ T5935] FS: 0000000000000000(0000) GS:ffff888125f21000(0000) knlGS:0000000000000000 [ 353.546515][ T5935] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.553139][ T5935] CR2: 00007f4c88517d60 CR3: 000000007ec58000 CR4: 00000000003526f0 [ 353.561151][ T5935] Call Trace: [ 353.564715][ T5935] [ 353.567698][ T5935] ? __queue_delayed_work+0xe1/0x2d0 [ 353.573024][ T5935] queue_delayed_work_on+0x11a/0x1d0 [ 353.578345][ T5935] l2cap_chan_del+0x285/0x620 [ 353.583067][ T5935] l2cap_chan_close+0x4c2/0x760 [ 353.587951][ T5935] ? __pfx_l2cap_chan_close+0x10/0x10 [ 353.593349][ T5935] ? process_scheduled_works+0x9ef/0x1770 [ 353.599099][ T5935] l2cap_chan_timeout+0x158/0x3b0 [ 353.604147][ T5935] ? process_scheduled_works+0x9ef/0x1770 [ 353.609893][ T5935] process_scheduled_works+0xad1/0x1770 [ 353.615491][ T5935] ? __pfx_process_scheduled_works+0x10/0x10 [ 353.621498][ T5935] ? do_raw_spin_lock+0x121/0x290 [ 353.626572][ T5935] worker_thread+0x8a0/0xda0 [ 353.631210][ T5935] kthread+0x711/0x8a0 [ 353.635317][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 353.640457][ T5935] ? __pfx_kthread+0x10/0x10 [ 353.645190][ T5935] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.650430][ T5935] ? __pfx_kthread+0x10/0x10 [ 353.655662][ T5935] ret_from_fork+0x510/0xa50 [ 353.660291][ T5935] ? __pfx_ret_from_fork+0x10/0x10 [ 353.665456][ T5935] ? __switch_to+0xc9e/0x1480 [ 353.670192][ T5935] ? __pfx_kthread+0x10/0x10 [ 353.674817][ T5935] ret_from_fork_asm+0x1a/0x30 [ 353.679631][ T5935] [ 353.682679][ T5935] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 353.690085][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 353.699507][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.709597][ T5935] Workqueue: events l2cap_chan_timeout [ 353.715115][ T5935] Call Trace: [ 353.718441][ T5935] [ 353.721399][ T5935] vpanic+0x1e0/0x670 [ 353.725438][ T5935] panic+0xb9/0xc0 [ 353.729189][ T5935] ? __pfx_panic+0x10/0x10 [ 353.733640][ T5935] ? ret_from_fork_asm+0x1a/0x30 [ 353.738662][ T5935] __warn+0x317/0x4b0 [ 353.742731][ T5935] ? __queue_work+0xd20/0xf90 [ 353.747461][ T5935] ? __queue_work+0xd20/0xf90 [ 353.752318][ T5935] __report_bug+0x288/0x500 [ 353.756875][ T5935] ? __queue_work+0xd20/0xf90 [ 353.761597][ T5935] ? __pfx___report_bug+0x10/0x10 [ 353.766758][ T5935] ? __pfx_hci_conn_timeout+0x10/0x10 [ 353.772187][ T5935] report_bug_entry+0x19a/0x290 [ 353.777071][ T5935] ? __queue_work+0xd4b/0xf90 [ 353.781775][ T5935] ? __queue_work+0xd50/0xf90 [ 353.786488][ T5935] handle_bug+0xca/0x200 [ 353.790765][ T5935] exc_invalid_op+0x1a/0x50 [ 353.795462][ T5935] asm_exc_invalid_op+0x1a/0x20 [ 353.800342][ T5935] RIP: 0010:__queue_work+0xd4b/0xf90 [ 353.805653][ T5935] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 76 c0 9c 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d 18 [ 353.825292][ T5935] RSP: 0018:ffffc90004f4f848 EFLAGS: 00010086 [ 353.831487][ T5935] RAX: 1ffff1100f07d94b RBX: 0000000000000008 RCX: ffff88802ddf8000 [ 353.839482][ T5935] RDX: ffff888027e55178 RSI: ffffffff8a556110 RDI: ffffffff8f850a60 [ 353.847559][ T5935] RBP: 0000000000000020 R08: ffff8880783eca47 R09: 1ffff1100f07d948 [ 353.855666][ T5935] R10: dffffc0000000000 R11: ffffed100f07d949 R12: dffffc0000000000 [ 353.863668][ T5935] R13: ffff8880783eca58 R14: ffffffff8f850a60 R15: ffff888027e55178 [ 353.871687][ T5935] ? __pfx_hci_conn_timeout+0x10/0x10 [ 353.877284][ T5935] ? __queue_work+0xf37/0xf90 [ 353.882095][ T5935] ? __queue_delayed_work+0xe1/0x2d0 [ 353.887502][ T5935] queue_delayed_work_on+0x11a/0x1d0 [ 353.892831][ T5935] l2cap_chan_del+0x285/0x620 [ 353.897546][ T5935] l2cap_chan_close+0x4c2/0x760 [ 353.902429][ T5935] ? __pfx_l2cap_chan_close+0x10/0x10 [ 353.908029][ T5935] ? process_scheduled_works+0x9ef/0x1770 [ 353.913873][ T5935] l2cap_chan_timeout+0x158/0x3b0 [ 353.919282][ T5935] ? process_scheduled_works+0x9ef/0x1770 [ 353.925039][ T5935] process_scheduled_works+0xad1/0x1770 [ 353.930660][ T5935] ? __pfx_process_scheduled_works+0x10/0x10 [ 353.936660][ T5935] ? do_raw_spin_lock+0x121/0x290 [ 353.941741][ T5935] worker_thread+0x8a0/0xda0 [ 353.946385][ T5935] kthread+0x711/0x8a0 [ 353.950503][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 353.955645][ T5935] ? __pfx_kthread+0x10/0x10 [ 353.960270][ T5935] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.965588][ T5935] ? __pfx_kthread+0x10/0x10 [ 353.970252][ T5935] ret_from_fork+0x510/0xa50 [ 353.974959][ T5935] ? __pfx_ret_from_fork+0x10/0x10 [ 353.980107][ T5935] ? __switch_to+0xc9e/0x1480 [ 353.984817][ T5935] ? __pfx_kthread+0x10/0x10 [ 353.989533][ T5935] ret_from_fork_asm+0x1a/0x30 [ 353.994339][ T5935] [ 353.998075][ T5935] Kernel Offset: disabled [ 354.002411][ T5935] Rebooting in 86400 seconds..