last executing test programs: 9.760606519s ago: executing program 0 (id=3253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x2020) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0xa, 0x300) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0xffffffffffffffd9, &(0x7f00000001c0)={0x0, 0xfffffffffffffe36}, 0x1, 0x0, 0x0, 0x80}, 0x4004804) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r5, 0x89f5, &(0x7f0000000000)) (async) r6 = socket(0x26, 0x803, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/296], 0x128}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040004) (async) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) (async) getsockname$packet(r9, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xd, 0x9}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@newtfilter={0x24, 0x28, 0x1, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r10, {0x10}, {0xffe0}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40004840) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r11, @ANYBLOB="200001"], 0x38}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000080ffffffff1a894d3bb06b2212e7db56b3d234be5379417c239a51303b0bd3d7c64f0e67f1e72778108ad9a4ceda0c63a744a179b29afcc0e23613f15210efd764ba60dd854ce4fe5616cca2cbdfefc78564d04200b81814ce798772e4d3c1d0cb86d6a0984598b44f", @ANYRES16=r1, @ANYBLOB="010000000000fdffffff1000000018000180140002006e657464657673696d3000000000000008001100fb460000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 9.556553982s ago: executing program 0 (id=3257): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0xbd73a000) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x6, 0x0, 0xfffffffb}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf251d00000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000068000100000000000000000000000000000000001c0002000000000000000000020000000000b45cbe"], 0x34}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 9.109218159s ago: executing program 0 (id=3265): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x321, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x400) 8.926183739s ago: executing program 0 (id=3267): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) r5 = accept4(r1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x840) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000022c0)={'vxcan1\x00', 0x0}) sendmmsg$sock(r6, &(0x7f0000002740)=[{{&(0x7f0000000400)=@nfc={0x27, r10, 0x0, 0x6}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000480)="8096af9b2a26b35903e710961cf830979f9254d613460643392fd780b5649d92b1de5621eb09682dd5cac5dbaa5dd525a193f20aea1e269ab2d85c432d04fe5849bf8b9a8e6c39b1c04d172308b970e4442d3d266fbe8ecce1ad111197c3b67e8447f141bb003d3bc42a5bdb7d6f74802417c8d35e53cb5d9ac7076f7e8132a9996c0d2bd2f047d02f1e5167b7b97deceb4526b441f5", 0x96}, {&(0x7f0000000540)="7d5737e06dd59517246932cccaaf7f40b8ba729c6514dbcb487605bd4bb4f2576886fb3f1efef96a107cb4d2fdfa77ad39359ae341d9b4cde17b7e6fe301a3c1cf360abf0a4dcec836d2fa527ecf178773ffbb37e5cecf4eb75e76546e098af90ea0d549e5b281fdd99e819a18a8231d7cabac5ba64bff7ea5877db11c8b2bee00196ebd2445d8cde38117e8ba5e237865a21f142d7cdc1b82c4dadb49c10611da4ebe581c5aa5bc542eb652ca7407ec5b433540b813f8bcc3a50d820df7f605b6141c668fbca6669189b44c636383bf261dc83291", 0xd5}, {&(0x7f0000000640)="ca004f0372681d78ab907370aab041ce561320f9c8bf6f03b7e84efb11a4f024576cf1e053baeefc050a1e813ccac7c9c901d217dcaa1591b9f1faf038878a826947c8849e975ed9aeac699504fcb5b12c67177df3290dab09fb4dd631dc9f2e08a368ce0eb14ae0d94dc1b51d5fb628b9d0010c1233bbdab59e3f10d2a751da4f392deec85239a0ee0a066e3ee7e7cb113d70dbad8b2d78f9c5f4b38f65506d5102625d95262c832714d2265952980b498975812e74e94d04019713681ae23592807dfe4e72134754320171e0b61b39bd60cd815d6e4adb15b546fa", 0xdc}, {&(0x7f0000000740)="52374eb47a57f085f0c3974e46d04e948f6b5fcf333566fadd164c301596275b39ba689dfb53a79db397a6d22cd024e3e032ecec596ba03ee83d863ad146d051d5c160fd3f206271475ffb1652fa6a", 0x4f}, {&(0x7f00000007c0)="f2fb5e1a047b3b142813d8f1210ff507f07091a5a88bc3a2ca88bea6b70cd173aa02c8c2da5b88348929d80a8421cd79ffc66b4951c4d5b3787ace08da760c3b33765916dee1683140057b32094bfb4e6d11f75b12093932ec7eade667be75448205f89e4893f15b61a66b8319b22f4216fbbc90a0e395fff40412b188d060e905d55f570dd466b9c1f813ff0d207986c7f85983d136b9830fc1a16037e218078cd2fccd65fa86460f6ae640b004d298", 0xb0}], 0x5, &(0x7f0000000900)=[@mark={{0x14, 0x1, 0x24, 0xfffffff7}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x3780b070}}, @mark={{0x14, 0x1, 0x24, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0xffe6}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0xf0}}, {{&(0x7f0000000a00)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000a80)="4ecc8b943bce66f227b254bd740856100a324f308fa2959887a17ebb3dd4f42968b2e06afd1af0a893d7d2c3ad7531df530719a8f9d4884c5377e09af88f2ab8547cbd01738c73f8ffce782d14c91404dbe67350c24145f9d315fd2084eda171a3c22a2cdcb73470ea27bc0c06a48ffc21419ec4f7aa6838cade965994efe69e4cec914ccb36ef50b6d80451d4e411a2edadb37b761573b636d94a88d40a8c3fabeb58c31f9348b2123252357a9b4f0606e9904c7ea8cd277b1510080f62c6b860611e709d8e91fd4c182b53167ef34ffe34176e954c472adb16c28b6b3f61a9ae59fd8d98736f3ca486bf38d09fca6dbd743556289cb6c4e6fcc6728e26a4654ec6cd7df63d207b3dc4f4b8f20ab83a181264dada0b1dfa81931124f1aa6f51ed207f7f4525c9f1d242091cb7907c92dcff58b397cd3ed389c5c3be1c19166fc7908e537a3fa4da2214d7ddd918f19b00b477d4536df761a8afc0748b2ece8f3fef0f8629b46355efda056eb12a962d34468db3ea836e41415dd2bfd5c97feb8556cbc89d022f890543dd5dc5de40aa73ff650b1ad310655cf20b7baaeac2f30b1eeeb8f6a81fbeb284465c80301c9579ded7d67005fa072756b4582d18e3e2f8614a37b801c28056bd2c0bc49f02aa4d605623824f16615e351e01b36e8bc7b5b7f60f82955a67a462ddbbe4ef1197623268be2ff9aa5155ab1291359d05c4f40484a03d684cba967e307bae1a0e0cbecab1cca8a41de7a32e7ddd851485c63cb38257ce6cdbea34987d2210b00bc34ce4a589d4a094bd308d145a7312079c9531b514b3407a7e392fd28cf4378bc787fd8c6ea9a62b3180268c8ba58e4040688b48b2a2ba601e13fc6d357ce13ed8c28e1f9e29be4debf66d954343a654fedf15b18acdda2b011813207f3507a8d2f39efec49c254f8200e5ddd6ecf09695263100d9988dcc1034d51f2044beee9dda7e6fb0fa3ba2f2d3b0a5cb4921a1c058a40ab48da475e42ee463bbfcbc150524972641e220398d5eed17c1faaa3d4e96deac215971a0cd396387f2e5c411787569326c24f54c9040efeab2c6712ebc82baf5885178abbc84a7e08d2c84a40bad845102490b90c7d0a7873fde75d26f6ddd3a4e5b3aa26900cf81945b796484fb532218a41597b700f723e861725ab91d49723efc44dc3944efc6e5fa3e7fc511ca88ddb06a04607b00a261b2999dd98e557b83abca2168f574df7e965dc85953cd6522bec0b4e2b124205edfec332cf8410e65c4f3af202dff894dd3bf3930fe38c948580caeb5c7dcd23d984b76706381f1790440007197d8c3b7efde8b97499d0554478fef74bff449ab4e134e2d8de90598655d9191ccd91e57f5e04ed606e557f537fbe6b74201a339847ca89a5bef5fc34411a93fd13c4adc9f3b54b04dfceac6f46ad7fdc045de31dca8b71c976421281544b3fe15874b6be2e307a89a5a91658d4b7fd31338000ea610679d6df8bc09030b8be685fdb24bdfe01f20cfc301bd9e729b019f1fd03502e741193bf162a4adfe7d3c19ddb208d87209bceb8607a138a79532e45781fb83ff0274c9956bc645fc249bdfab7c507bc0a55ca33f222327c9b2c596735164931c23050dd524348f9aaae97a2e46310feab07f109ecae30559b0dfad425afd5fdb5cce62b34c7c88d28ae8e59a68c6752313fe6ef0ef9b1f2f71809723646845301ef423914fa80ea8ad02702d29c68d8ceb10bcac882e56b24887ff621c62fe49df2eebb86f25cf63fdfecb6380d8402d4f9b385ab4fbe99394aa25af1336cc36d07be14ed58354c17b0bd2df6523f0cb46919b06151c64b83686aeba52958c83a35f4ca50f1f0a0330aeb776f4fdcabb158b34933a9e2a3d98ead49cbfadf61c2eb6ff7be55b2e3e3fd5642611b6f9135fb6836e5e8799f98fbd2b04907879072f8c77e10e5919e4631adac5e4ae80270bb0f81b97b4d1d6c4f54266eb5ac54e2f133add8e7d5eca32b2941807addef7a01e582feec94a2651aae09e17a8a469a4cdc982ddc727e292f5cf7327543bdfa06e99eb90fde68d3305e887fb1a6012fca153e9739b65409867f477a1fac60e8972c188b40e68c38a5f27918c09b2c0b9e452cb114c2106d2768789aff022377add66b400c8327d18c4da9da01924b69db21c2ad3b93be9042b83e866021458cd1a18e7a21d1243353b001c8ab4363ff9d37ba19e7a79f5490360cd124775db59aa44a49a461bf0bb73af5bb079797255707b93567eafd37c69261e795ee84bcd7cb2ea42dac6063bff1b4258ee5eb130f61aa59673cb4df8a444766f725c81afcae709469ca598b77753dad38abee8c578a8b5259bc05dbc49f3f5b2cb3be56effd63b9a2deff9cbd2d2654d0a941f11db10bbd39cc8c7636b8892a6ef1bad269053d124156ebd14774c516faa543e53690404b1d6f90b2813b165d877da056fa0e1750d9b6418052fdb46dc3416e9139647e6bd44a812ac058e6ec39bf3623fc9831cae17a6d2e680b8e1860fcb7e05dd90b331899abc66fd5f4264153d37b50ca20cc6f2e9ad699c4ee751ac33334df0ac688fb1c5c046a66829e317412250b57f03cff52dc27c49667c2f109155094563b4c96aaa18ef86d63034f0a7c80d8eca2f8e3f11437ea2193a554695b9c6afca886d979b41110edf816649baa443cbfc30c1fb2b02d4a65f970bfcf6ffe0fb70f62951a0d5476fed47d79e45d373fa0ce3534fd8594791e5b2a2a9e86a9b6d7bbb97c96b2fcf2ff9e41b471ef3d694496e436d9657858e6f180b20f64b3a9e71622a3df9d2d7ee3d31fff0d25fef4c859cb883acbe016a7a9dbf9dc50a18a97d70f36b6597ca9a48e2f3ba2cb6086cc536af086bf9bd8da3a51667059830094c60e4d6f938c8b6f4e036c2ef6bed9ec821b01816cec24f855a5cc42839d808f515a82c3381145e13f0e217babda50f796077f7754f206d38f43295d8fa07a2819150f1fb003804d2166c51480c3370f9637cfce8c3ddc924764958a7457a2ab89ee8ca28166f028b7f3d6a9f62d3df966da580dbd07d112b6a359c88b377be6d9baa3bf07506347472de81d74faa259f0a3d44425b48f6ca9ec150119b44ef8d6261032355c36eb05f118af4b5e64e57bd955dcfa72eea7252d279f94eeaf139e0e10fbb8efcca05df8a67a1a51522a8b8fecfd6b1492bc811bbbed898d89801aa3778e06907f55f2c68fa83330aefe5189de265306a9dff96ed88d93d92182799d277d0ce6445204a9532152c2984da707652940daf1407648a8a0142d5f1a37af8a9243fe273b45dd237ca97d9ba7e02b10d4438b0efa4ef24f901cd53edf537a41f0a2254aedbfc9026f817c48abf2fa8f7c4e180f0e6592538d04de9c4232bed17b84ec13c0c898c868f5c511d377e90d27792b2bdeadc2c709eec537f48251e6a402177e63b0e8276bfd869f7c23d90d8fd6dbe6cb1a38270d7e1940dda6974e75d31e21e26ff8f68191e290f1e1ca27246a2f7dca805a5a644bb65b1d6c455319fe1b60e6bd89b8d1d3c1ae721fbdb0d128f355c6110db806782a18518d10a9fa51e2137729faf01924c92e47b54fa10d128faeda702d650641ea185ab7ce10911346063811bdd0b7bb0d2dc876b0768cf555cd45e2b6a8c7d50cb9be605ae6f256bfcec4507545deaf08f5a8d5bfda46826aa5c1074fb9842e241572b716e16a50fd3f9d298aa51b00a3a1923a53f1019c7aff854f26396bf292110eaa306a22f8c9875d11c1b14a4bdecb2e5d34303e67b9d4697694db5c068654633dfaac3538cf0c6adccf4e62d44fbcde0bf1d93ba618fb0da6ea45a71c67bea88132e8cd8357290821df4ca7c0a518e7157655caa3afa0695705736ad9449e1ad07e7cb89b5a4835be5704409179bfb1e7c4430021df2e178a075244095fb8782cc36cc8318c3a9ce4092b3d012a8419056164cfaee14ebd534f0c09cd73b2047dc581d659496aa4cb98dca064b6cf84340dab1b0401fd2b65494d75966a10cbc687ac2f6cb2062b3e9930c3293727354e5d585216e97c4fd01c52cf5c3899005c5d4de0e6f1b0989796f7ecc4cd22670c954d3460facd38fbf20848e422361b3f61d0fde7e0dcf42e92479c3e8adfc8160f69ab0dfa19fd95ca71c5779ae8f2cde7d6842c8ee51a36aa1184d9a22e349e4edeffc047c95b6d2c6f5b48132f10485df27b50e0f6aac6b949c7235503b1a310af36e582658eaa856c41866ce74b95e6f1eaa6b77079022f6e693feb180603dd95e5d3b738e5f87560e315d97e4213ce6855279032eeffa1734fdaa8cbdc413a4333a4285754c51b16994652083aa043e737ddc0d3bea649c09dfc5e65a3ce94f9ebf5d713fb0f260d1866bfc43bd98727a92664e8aaa51e1b213744ec20798768c512b2882738f6afb8fd3198b455e847aa342a50964ad03587988a804e5ffd5a606095dc30c5fc9d49c6dd27da252d26508a6732dee6dcb9c34611eaacdba5eec653b526bfbac75a1c98e83940130d01b06accbe7a72db9920de6d43ceb2a82e58eec25ffc69e02e3fa8ef14e55b7fa92fed0fd4f2e60237600ee9b56964395f8ee6507635d0f0254c693463bde20d3398006cef77405bcfa810418b447fd62559948b20f70ddd7b74ff945e4600b012deb4e02215b536e84532d2a78a33ed0a0e6e129de9c935588fa789414d1f39f7c69acd30792411c2e74e6f491da1061e8ae78e3a2ab429b499d29a7936123b5d85463e0cc2420376ae922671bbf02c974978548c72b207522470ffcd08f3d64faa515d5f6c305433a0d3714a9e15baa7f68b82e7b3d546e9f2fb4a8efe13d1c3b3b9cb4aa7c992acf1f096515be7d0383a52779298183442403d66ddb13477c54b8859d06548eb9a7353b02d879d6b6f28a9d71c9e86d5aaf559677da01bf089154a9f6ae78351dce30ccb46217a98a41a2aaa38c0f4ee5b2b923504e4cb4537476fb34494d8189c53c738fc79cd5ba841822a5a7531c22147430934592c465a41e889a557911f5245172dd8ec94dfafd3167e4b8f321492205851e2efd826686aff64cd6493130c7bd4bb3ae46dbe70dd58f04bdafe9053494435aadf0492e0c54267f74c5a2282f484eaa08d13b821214c8f240547b2f68c781068958a6881bed9ab437c2425473ccd4cdc0e433719f3c2a8a2248746fd7a02dbbbfae1fcf275c75f319e0da5d4d65150fe5d931dcdc98acdc649ddc6ab03b1c4d23ad30f796eaf4b1247b623558995199747389d4ce80e1081096be8a487b4ec64736fe51593430a7d576ebc5d338fe9b5dd9d6660f9ab26c020d410aba3b024a57b4e90f92e816d791fadaeb1913d7cd1d09aaa1b8afc86730f5c2235253c00791f86df1c030e4094dd50dae30fb496d7e6f15a9f391438760f47bf5f0b343c03246c3e0f8cd2fb7121917984911a0dbb572937a54ecb659aae64b85f65b048692ce1a156713a38779c26ce48739adf8a2ab529fc8540635ef519d5978288e330a13d3686d6117e94e94c2ff8295f1f9aac728476ffd177850cb17cb4eeb60e89eb483afda4b0f321d6364a2e3be94bf95cf0f087d9f40189f5b7c24fa770da970088e0a314079790085d44654d3a2370c2576a48e1c32bbdc44f1857d67952228b1d88479e356d7cb16d9f9978090f7a8a2e07db91263abe429e58bf488e0ee7d9af612a2ab4e5ce89c37112ac4a11708d4b76db4ba614059143effeef080b3e06485ff5a3e4dcfbbbfaf6a598e55988168ae5f7b5da1aef2ba2fbd04c672236e", 0x1000}, {&(0x7f0000002880)="fe9d87f10095124a25bd67a5d7dcd10583a371bcc661fec9516c61ef2869c507f1502000a62c6f10c16aebcc2268899e2e89b94ada95e58158b8ccf28b6611f6bd50ee5cae0047c2abea061cfc580ed19ad545cfdc6fdee50408b420f62c2eaff6654aedc281fcdf89999f0e2f7a9b91846950cde206699837271842afdefe1c5da31eb4de4184ab6c4921157bac8ba11ef932bace7cb53c0ed5d92b8fb2ad929129d06a7d1f98", 0xa7}, {&(0x7f0000001b40)="3456065b2277c0a36e781f3f85b19ac53b4fa5c77108d92f057c8cbf8632f10a97c5c8ae77d3aa4f87b3f9c506e84c4611c4c538cc4e57a96b85bbbc4a97984089f5266a39547f3b465d657a49f8e6a754", 0x51}, {&(0x7f0000001bc0)="b90894ac047625de7f03f50362cffd45a58741b1098aff41a0cc852807bf59c1eb64ed997a02b6a04c18dd29397ff8d20a7eb6bab851f66950c16482727cc4905949cf1393061fe844157ca1254b62a010048701d84e512af53875eeaa3863c039079fca8c57e9f40727f7a5e369938aa7839badbff4d30e07f33a8d2032dd", 0x7f}, {&(0x7f0000000000)="a527f0", 0x3}, {&(0x7f0000001c40)="eaf0d2e41fbaee017ec77063d80e067b9bfcd4fa7c2b294f15f80335e2804e907b38d2ffce83f3b8f91c90a9a2213595eae750b13ad20b8a0afdc3d0d68cdb84e2696f2e84d11eb5d0efa81948a4", 0x4e}], 0x6, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}}, {{&(0x7f0000001d40)=@phonet={0x23, 0x8, 0x9, 0x5}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001dc0)="8a6548c9ac41c7fe2e62b1a6ffeeb238d61211733f74e178769ffc3faffc731af758e9a00a69748bd5f1df6af4574833900ef2263653ca9027401094112ea01e4fd9d417f59f3b085edc1ae47ed165bc04897310a5d4a94fb91bf3e573efd5a771c185c14fa549dcefc5", 0x6a}, {&(0x7f0000001e40)="480fa20ff2d8e463741bf6dd94821534c5bcaa108652b8e8be589458950bd3599199d3bcad6520421fc95d2559439a66e8bf8d5e72cb5f75d043a99fd7aa21fff83c175fc0870e4d3d46e6da1779843820b0ce4805bff02c7680408620c5b02168f082da9764a331747480efc0694da61c8f66149db893451c1991887134b01dd22d93c7cd26e65bb350cacb1430b459f8d7a246de9705ee0b1a30951a0ed097cf6e843bf4e367611092183284690cc976af56a64e3251f9f00ea6b4c545c4b1b8d6a32073e4a8263d5b7f239bb98de1c80297bb4308b82d1e9f10", 0xdb}, {&(0x7f00000001c0)="48605f864989", 0x6}, {&(0x7f0000001f40)="618c387c925303841dd251a00361efee599dba50a456ea729e7c8481abe7e66341529a4c3ebec3d930628ac0ac9af11a842ffa44fe9cee430098b35525133df305009b82ced88ddeded748538b0da3cf7004834bd0a21dd3f4b0b7d2206592b3a48a4ce5ceea3a4b3204803df0ae11b10486b33590137b39bd3fbf7a5b9fefb4f8546d2624f0b44f58a4049e41cf6a72", 0x90}, {&(0x7f0000002000)="01a0229eb3ddaac1b757de2d077e36effeb0425f362ee442916bd5d3a28157884a47f63e7fca52fb0d84c72d288026dd1afe180ec7c9b45f17265c2a785248614452058ff317c63a7f2c332ab633635f3d2b86e4fa95a160efebc54bec8ca7e75a342b6910468adb2760447cd6c488da8e8fbfd54224baca10afd29e41d1298b66de43fa0272cf0a27b314d52e633a1630efa1969a6f12977bd99588f1cdb6de703d1d29b83178951ace9fc1286d", 0xae}, {&(0x7f00000020c0)="840e30ff72a0b6022ff92a32924109fa5ee8bc0cb043944cddff1e49a319543d67", 0x21}, {&(0x7f0000002100)="c3c9572894a527e158ed663cab6275159341a69030c8937526207c90c91228afff7ae9d001ae58d77251e8c6bb30c30de1f178c04ca6f0ad927383d45ae4bc049b9c382029223ea2d7c1df8ed65a645e2e6afca252f3e421dfc73d6262c07b769f7a20441244b8599e0166643bc3c9302fba363aaf8b005cecc6c95004bc533610a62d4e1de4c66fd34cf4e7af603601cd", 0x91}], 0x7, &(0x7f0000002240)=[@txtime={{0x18, 0x1, 0x3d, 0x4d3b9b3d}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x60}}, {{&(0x7f0000002300)=@can={0x1d, r12}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002380)="26b176e565cf1f72e1cbf53466485245b5b7efbe3eae2e2835010bf6ab0a803310", 0x21}, {&(0x7f00000023c0)="57ee470d5f620d8a56905ff8ea40d6c4898cbfcabd9b4d616cd9de01e397aeccee77e65d6af8945136260d474b03107b096834f339a4fa6e3ca5781d01522a22e317a520647a2cb7562847b2d00ee33ea15ed80ed3b79f490ea1e5294404ceef7661b215be537678b7b0b4536f5886bbd6e22c23a7ae7910a69662aea8ec5063a5e9a792fcce75ddf938b55ff57ce302f8b0ae0c288b54ef1321d53358770919feaa819bc86a73a26f30e1d15d852c4aeb44a5c24ba52a0e9665e50f54a0fd90b32dfe2827b9a9ade3ab15042ab1ea331fca91bff9b7", 0xd6}, {&(0x7f00000024c0)="592171ab65632f0b8c48b3a895c37a3b688ab3a153e4a09c98337faf0d51da2ffbe9b234a07d3aabca561582692d7407f1945c5b7095dbac1c77229cee21e3cd7b4b2a09991274055bb54a309cdf4764dea9e92996ab84fb51b2fd8e5a992beba539a4c3", 0x64}, {&(0x7f0000002540)="6cd61e136377c224266d1e0e38cff2eb4a51666542e9885db7c8c9feb4ff070e7134a0e208319f5b55bee579762104ec39197a06532616fe0a7a7a0c7c03fead9d2fd093605210ee2639d7093ed8b5e3d9cc092423c6e09d8df9b39f2ff62a3cd96b0197d3e3bb18fdf4134df4a41efac7901d0470224e2fa70bcd19f287a86bedc306855021008f6dc4cfe2b2a793e1b293f43b8b897924", 0x98}, {&(0x7f0000002600)="36483df5a28dbecbf723347b51e8931358ab5af0638bf8531204ac5117b14b0fb802be38ab", 0x25}], 0x5, &(0x7f00000026c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xfffff800}}, @txtime={{0x18, 0x1, 0x3d, 0x541}}, @timestamping={{0x14, 0x1, 0x25, 0xc4}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}], 0x78}}], 0x4, 0x80) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r13, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r13, 0x6, 0x15, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002840)=ANY=[@ANYBLOB="14531ac394c8ada1a82a3cebee5c0010004b66ce91000000000012080000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) setsockopt$ax25_int(r5, 0x101, 0xa, &(0x7f00000000c0)=0x4, 0x4) 7.919549491s ago: executing program 0 (id=3277): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000100)={0x11, 0x888e, r2, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 7.674273053s ago: executing program 0 (id=3280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x188, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0x37, 0x8, "8f45d1defc5ab966d224b292f7c9ecf1319358f1f6005ba3637d917631eefc70319ec271d39e8c69611b5cb3d03bb154a45c96"}, @NFTA_OBJ_USERDATA={0xce, 0x8, "54b4ad8e2b7a56816e5039ab905308dc69250acefd319c1255ee9b6035a15d037e3193d89e47d6519faa79f10629ab2dd8a67466caa70bf6a9bf1a99b7f74388d6608d97bab6f88bd8fef911a213ced9cc1856d47bebf656c628a37520601e8d77e81f443bf8b1f41c0da917519c2c21c65e7deeb2ad17ef8a3bc5d765b424dba1660c610549105bd9f1bdafbb1b7141f242553c35f24acaebc5e9b83d77360c7851fdae519fe180567b2a77d624270513ba66fafb165afecc600f44c1ee2e7b621c4726d112c4bc9d65"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x33, 0x8, "56530ddc7fd188a2ef3b8c7aa6a211bc4d36171938de902db11d04ee752a2598c42bd97e7ec1694d6ec3f39acfec2b"}, @NFTA_OBJ_USERDATA={0x12, 0x8, "ec5f4bf5b06483916025ba7d460e"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x18c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0x164, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x120, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6018d282}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x933e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5f8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_DESC_SIZE={0x22, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSET={0x5c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3d8}}, 0x408c0) r1 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001d00000000000000", 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x188, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0x37, 0x8, "8f45d1defc5ab966d224b292f7c9ecf1319358f1f6005ba3637d917631eefc70319ec271d39e8c69611b5cb3d03bb154a45c96"}, @NFTA_OBJ_USERDATA={0xce, 0x8, "54b4ad8e2b7a56816e5039ab905308dc69250acefd319c1255ee9b6035a15d037e3193d89e47d6519faa79f10629ab2dd8a67466caa70bf6a9bf1a99b7f74388d6608d97bab6f88bd8fef911a213ced9cc1856d47bebf656c628a37520601e8d77e81f443bf8b1f41c0da917519c2c21c65e7deeb2ad17ef8a3bc5d765b424dba1660c610549105bd9f1bdafbb1b7141f242553c35f24acaebc5e9b83d77360c7851fdae519fe180567b2a77d624270513ba66fafb165afecc600f44c1ee2e7b621c4726d112c4bc9d65"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x33, 0x8, "56530ddc7fd188a2ef3b8c7aa6a211bc4d36171938de902db11d04ee752a2598c42bd97e7ec1694d6ec3f39acfec2b"}, @NFTA_OBJ_USERDATA={0x12, 0x8, "ec5f4bf5b06483916025ba7d460e"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x18c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0x164, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x120, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6018d282}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x933e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5f8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_DESC_SIZE={0x22, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSET={0x5c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3d8}}, 0x408c0) (async) socket(0x10, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) (async) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001d00000000000000", 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) 2.882771089s ago: executing program 3 (id=3311): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x4}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x84, r1, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x200, 0x25}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "16df0eefe0d00bb4821c7b287890b14b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_PMKID={0x14, 0x55, "1f8cc6f846fefc9c0d764adb729109f4"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1a}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x90}, 0x800) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.388409606s ago: executing program 3 (id=3316): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0xc010) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) (async) close(0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f00000002c0)="baccbc8d220f86c5525f5709e195e57ff5f0", 0x12}], 0x1, 0x4) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1412, 0x1}, 0x10}}, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000040)=0x800, 0xfffffffffffffff0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd2b, 0x0, {{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {@in6=@empty, 0xffffffff, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {0x0, 0x1}, {0x400000000}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'pcrypt(rfc4309(ccm_base(cbc(aes-aesni),wp384)))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) 1.492526909s ago: executing program 3 (id=3328): r0 = socket(0x11, 0xa, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) r2 = getuid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xfc9f, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0xfffffffffffffc4a, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={r1, r2, r3}, 0xc) sendto$x25(r0, 0x0, 0x0, 0x85, &(0x7f0000000f80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x100, 0x6, 0x1, 0x0, 0x4}, &(0x7f0000000340)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000380)={0x8f, 0x14, 0x53c9, 0x7, r6}, 0x10) sendmmsg(r4, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x84, 0xffffff44, "3bb1756e"}], 0x18}}], 0x2, 0x0) 1.334658495s ago: executing program 3 (id=3330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004bf0000010000002800000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'hsr0\x00', @random="010000201000"}) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r5 = socket(0x8, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000380)={0x10, 0x2d, 0x200, 0x70bd29, 0x25dfdbff}, 0x10}], 0x1}, 0x80) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0xe6, "cdea5d4c5950ceb5c6e1c38c448d309fcd96df155921600af16307656a36ade8d46c5ec0aaca421043632cb3c22b8875b815b7aa1e29dd3d3f804b3943a5b88bb1c56d617e08fa9cb1ef1d4941e53a10454bc4e1d143e3c332f74adf8860c45fcc97190ca795a6ab8a27d4c591bd08858159745194a1ab36269d21c4063febfc338995e96c78ff9447e534e957388a3284b2981bac51ed6758cee069b51dff3488658d5cb9136661b3deeb823910a61140363accc1f55f0a0a8d0a1a5cb89c1c393e841e38500166be5b3e274a93c49b03af14b4ac8ae144ee8a18f9128410e25b45f70c0acd"}, &(0x7f00000002c0)=0xee) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0x6, 0x6, 0x80000000) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r6], 0x4c}}, 0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000300)={r8, 0x1}, &(0x7f0000000340)=0x8) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 1.256234902s ago: executing program 2 (id=3332): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff0043ea0000002ee8d4fb821683812bbbc6ac6150b99ad54d8fb8736401f6906e00"/44], 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x84000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x44, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x20008000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) close(0x3) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x5, 0x4}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffffb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)={0x30, r15, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xd0, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:ping_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:sysfs_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:ipmi_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0xd0}}, 0x40000) 1.161050955s ago: executing program 4 (id=3334): r0 = socket$isdn_base(0x22, 0x3, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) accept(r0, 0x0, 0x0) 1.053106593s ago: executing program 1 (id=3335): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000000400000000000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="6100000000000000140035006d6163736563300000000000000000000a0001002c99d880556e0000"], 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x20, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}]}, 0x20}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x7, 0x10, 0xeb, 0x17d0, {{0x2e, 0x4, 0x0, 0x30, 0xb8, 0x67, 0x0, 0x9, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, {[@timestamp={0x44, 0x1c, 0x46, 0x0, 0x8, [0x3, 0x823f, 0x1, 0x7fff, 0xc2, 0x800]}, @generic={0x83, 0x6, "755b78ae"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4c, 0x86, 0x1, 0x0, [{@loopback, 0x1}, {@loopback}, {@multicast2, 0x9}, {@empty, 0x2}, {@multicast2, 0xa}, {@loopback, 0x8001}, {@rand_addr=0x64010101, 0x3ff}, {@multicast1, 0xc324}, {@rand_addr=0x64010101, 0x8001}]}, @timestamp_prespec={0x44, 0x24, 0x80, 0x3, 0x5, [{@broadcast, 0xf57}, {@rand_addr=0x64010100, 0x9339}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x8}, {@empty, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x8, "ebfd75094f71"}]}}}}}) 957.678649ms ago: executing program 4 (id=3336): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, &(0x7f00000004c0)) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)={0x34, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa62d76752d58bc81}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r8, 0x416, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x6a}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40008000) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e0ffac00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00fffc", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090f80000"], 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 956.812527ms ago: executing program 1 (id=3337): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x118, r3, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1000, 0x8}}}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x9, 0x7}], "f3ca75a7ee750443"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x80, 0x7}, {0x2, 0x4}, {0x8, 0x4}, {0x3f, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x9a}, {0x6, 0x4}, {0x4b, 0x1}, {0x9, 0x5}, {0x9, 0x4}, {0x1, 0x6}, {0x2, 0x7}, {0x9d, 0x7}], "0f8262a803d42651"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x4}, {0x9, 0x4}], "f48362ff13730001"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xc, 0x3}, {0x1}, {0x1, 0x6}, {0x80, 0x4}, {0x7f, 0x3}, {0xd, 0x2}, {0x1, 0x2}, {0x4, 0x7}, {0xb6, 0x1}, {0x7, 0x6}, {0x1, 0x6}, {0x9, 0x3}, {0x6, 0x7}, {0x1, 0x7}, {0x99}, {0x9, 0x1}, {0x5, 0x2}], "2be462f170f90a92"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xa7, 0x3}, {0xff, 0x6}, {0x8, 0x2}, {0x88, 0x2}, {0x1}, {0xff, 0x1}, {0x7, 0x4}, {0xa, 0x3}, {0x3, 0x1}], "ec46108e1b59c0e9"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x4, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0xcc, 0x1}, {0x0, 0x1}, {0x4, 0x3}], "2d2ba1d4e3226aeb"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x7, 0x6}, {0x59, 0x1}, {0x90, 0x4}], "f99668c69a87f868"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "4e364dc4f8e430b6"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x1, 0x6}, {0xe, 0x2}, {0x9}, {0x7, 0x3}, {0x9}, {0xff, 0x5}, {0x1, 0x1}, {0x3, 0x6}], "7fb6f88bbb58e349"}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000084}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000000c001a800800058004000280"], 0x2c}}, 0x0) 893.679481ms ago: executing program 4 (id=3338): sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="5afb194ddebc95dcd8839fc0a5ecb47d498a28c6f1629ecdec359aee4b872cc2753b44553912fd97ad3b86df16dd3ba0465a6a68cb4fec9712bb5fe10da4f0e483728ae89dcf7127be9d57662b0c5c94756ee06aa974e31712ef08efca6679a7b4415d06f00ec4d9b6b01ad324764bd4fb736c3d60bc4e528111746972772f", 0x7f}], 0x1, 0x0, 0x0, 0xc000}], 0x1, 0x41) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704152b277bffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="250300000000000000001600000014000180100001006574683a697036745a6e6c30"], 0x28}}, 0x4000000) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x8864}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 879.400469ms ago: executing program 2 (id=3339): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e6b3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7a29aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e17fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4314f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc06000000000000008fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b22589f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b24464e0ff504b87c90697ec2a82bbfd1c31713190d3e6e502c434909d6ba06cd0361a0fd90552272f24519ea9938413947edd3a0a7aa780c1dcdddf13b46ca94f37c89664c9cc1857d64ca371fa1b6131"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="af05200000020000329aea54c7d801000000000100000000", 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x7800, 0x700, 0x9, 0x7, {{0x5, 0x4, 0x2, 0xf, 0x14, 0x64, 0x0, 0xa, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}}) 806.684114ms ago: executing program 1 (id=3340): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 725.164055ms ago: executing program 2 (id=3341): r0 = socket(0x10, 0x80002, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x1d8, r5, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "0b3ded667fa438654b9bd2b75f45d4f80f0af03f1c2bf87c717b7e7428544f7143"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_NODE_ID={0x90, 0x3, "e112fc316f6c18dcc8aebb782016dc483a56a3d26cfa341a10820df6bf023260ab54bdcf5e29c17622188d777a99861896aa0fb6bdc5d2bbc1ea7701c4c50c14cec2038d72add9a5801dd394df996f85ad102f33752fd02e1d9f41d9c81b448bc815d718d5d8b2810aeddc50a263d57322a6d21a00fa1e15f32c5d0ae4beb504d246b101e8a84f216a783a83"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20200000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb5c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7b9ea7a9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x90b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r7, 0x917}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0x51b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x74}}, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) 641.721279ms ago: executing program 2 (id=3342): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="104e0600"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth1_to_bond\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x1005, @random="2e000000009c", 'netpci0\x00'}}) r4 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000380)={0x6, {{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}, {{0xa, 0x4e24, 0x401, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5ddc056a}}}, 0x108) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffa, @private2, 0x1}, 0x1c) 638.222568ms ago: executing program 4 (id=3343): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async) r1 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x7, 0x66, 0x3}) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000180)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000200)={0x9, 0x18, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) sendmsg$802154_raw(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000002c0)={&(0x7f0000000280)="3b7e6d27645bffcb250595e0b32d52", 0xf}, 0x1, 0x0, 0x0, 0x4005}, 0x800) (async) sendmsg$802154_raw(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000002c0)={&(0x7f0000000280)="3b7e6d27645bffcb250595e0b32d52", 0xf}, 0x1, 0x0, 0x0, 0x4005}, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000340)={0x8, 'gre0\x00', {'bridge_slave_1\x00'}, 0x1000}) socket$inet(0x2, 0x80000, 0xc734) socket$igmp6(0xa, 0x3, 0x2) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r4, 0x29, 0xcf, &(0x7f0000000380), 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast, @local}, &(0x7f0000000400)=0xc) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast, @local}, &(0x7f0000000400)=0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c044}, 0x8080) r6 = accept4$vsock_stream(r3, &(0x7f0000000540)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000580)={0x6, 'gre0\x00', {0xff}, 0xf9f6}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) sendmsg$sock(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000640)="71104c8223577c3edc481ed4115dc251ca7d346f59cb8587181c04fcee7d147931f74ddd3a1ae369e86af4a969979976d21c5c21ddc4fcd160c2c43fce78d1b1a1f67bd256a7e1b95475a1cfcae374b07b1a1d6a24d63f58f3538181ff40a475409cdd1f829c7e7ebc9098e103e12d531efd0a87d44e25fa103543f1f622e90da35bbf9bfaa232f04062ccb6c57e59479514257d283196b1ee507f3f171fa9a55c99f3c01f45c05dcb21e0ecc99667dfafe42d837d5ac80e73ab3e8bdb85819e2fcdc117cc30c7fb7d57c87e6f402878655860f77a43fc7071c1ccaa538f46d5b4b7060aa6065a1b232eedd689485197967d7a9a2d1fc204b9b76f1cd4d3cb320f235c7ee4645c02283a2c69c91e64e316ef1197c5a160160b14175ea21cc92657f7244f91f8e3f0a9eeb590247132e6d12da01c3ebb49df6fcc656082ddf4d0de6e3b8bada89fd7df03ce60209f74a1e81f9c8e7bd80ef0f5d3e3c93425e340d681affe1d52291796be090a17549b237d089208227ef2351420a65e3066bba8a74af13fbe1b8086549b657751001cca88283f23bab66eb9e607b67c183ed169bfe2eecc516ece0b476a4cc3a370d0763a2274e2f682db387b92a6ed9762ed0d790cbd7e01108f984e5c405cbc1b69a8b2bfb794534f184f35871b897a36c4e8869ef26e357c48cc740ca95879f311faa2ead0bcb212f74dd124413517c0a64a5fe9675e8e863013064898c43a6aafd41f3d05e42cb0e3cc5fbd8e47ca7e938b3b3897a67764bff0fbbc8e10ae2b641183922721a19b0e365a1231c42960a28e16af27da9ac67ecdf8f03c8ce51faf04df51b2bc3750f6ac92ae6988ba6c91e5b135a2bfe5f717eb3814a8f426f777aebd0bf109c9a3d942349abbf7872ccdcc1acae5cc2306e8daa008ca10f6c9dd8dc5036bcf04bbede14918db33ef23b1bdc004fb95cb9c70c22f88d6815f8def4d83dd4c13a291c6c25ec9eb4c0448e510131742f77e740098c91473a9cfc4b60c0b839492cd260aa0cd924d367ea5280d04715bb136863f59b1023ee107d47e5afdac1b1b9fcc2d361cf34cc17822996d9396aaf0017370c36eb2110acc7f9f562e8c6ce4b85795a3be45d47449bb09dfa1e154d214f3ac6023283bfd87f3f7f9e49c2f12ea73d530b1c866e29ff40018c9899cce27fcb7326447e8ba0c7bf8390b914954f95dca3884680c1160b052be273bd0962194531fe6be1732a71f50a7d5c2cc6760460e22ff50724a11f01dcfa5e25b8201ac938231e92bdf69ba129efabbe724886ce657a706684deeeb9abbfc018f1877a392cde41779fbd364c499dd5d92766dd98c669613510ba743cec5cf33db6a65cca85d8167d403a09f6c6219a520657670aa14b97073a4108a6d5e56fcc352ae4ead5f3c33099e369b6fb03543951568a43f2660687e571fd93d3e3cec786d896ed775a069b6f0314898d3900878a172ddacec55159fa86dba8d1863ec0b6ef548efe300ffa1908fb364bb9e5875a8212c42e1e83eb1b5344cdc7e97d70a648e323f493d5b21dfd5b0eea3029a464fe01f498956a67c007ab3c6572273f0d8db2970d0811d2c477b0f8472fb2c20fc470460b3dc7505e2b13aaa8cdf6c6944cb20360ade8d6020767502a161cd03fc1e10e2ee9562ae543f0c48294e219582ea0739df48e3924e6c9eef790caebdc7696d50257b4e9f3368644975cf7f1d786d85c4c57a3e0878021ef18cd1c03ca50d3f0edcf73c5f5b2f6e6c872dfe72446b5e4b4a1d8380696ded173262c1cbc70d9b2ff6771767f9c1e8582fb530d960b2d9676fae37e9dee40e26c11c88001bff5031363f8cb5ba391659acebd300f61573767500c9bf6e6d23c6989cf77ed89400e8bd754d362035b7c0692df90aac2e6185f4e3261fb989b3a6da2ab3f2aa31bb695c3c891d99026f1e823aad8a48c351e2b83b67b0497f190af5e38f57a82f71cd2f165592760284ee265350ff34f0f36584dc17738dd6a8338f280e7e53b7a150e8d2456f0015778ecb2afd9b2bf8d64247357e1dbbd0374554ba98768fdfb53fbe4754f5f2febf5d16b5dd45de5cbd8d37e393814753b80c1e379be67ebe7ba8c315ed8919691fee976e2c423e52a0c240c6221bc816420d67421423fbb052b6f25086d06f5408a91434f2da436aa068140df1133b5d8682358c48a6473a3e3ffd8200429021b2d4f5f4f8f266e7a7adb29d138f565aa57972510c387667bf872fe5736dcff9da821d95604a2c27425f24f07fec6dbba468f6acc30f73516e87e65c627d3e92c6f2e2c6a2217c1908300ac5f3794ee29b42ae8bb24efc25703d38cddb101e030d326de1eefd4df11f54cd2eb8e6212a67408d7ec9f8206133d54ec28ecca8d9b227cb6633730c86f7ea8d43f32545b1041a9165714d7c4a425f98edb27e986e968f67c7ab7152b85086c1dc749b700183315843d5d98ce3bc7069ace9753281fe45eb8ba1dfb29ef4858751760eff8f6cc04f647229614f358e57a375775bd45e6b5b88d8960e02ea31fed6e3d43d0e4482b6c2f1ba44b1bac5e463ad257c9fa7fb51b5aac014ccfe04ba3c8a7945af123fa5b6319dffa5f684a5effd6ebfc5c72ca671c450a4d5b20aa5b266dddbbc110de4df612757c85738d73c5778ae5514d41e278623c24cb8dd361d4540624db9880e6bc6be20cd4a3e6f967baeb2653c472e828ba9646f9be63e028c4a7d41c9a5cf6560c7924dd9dcca1b64d81cd9ebd06e8688752782e727b974e147565c808c517e59dda4c8f0532717618d27b4cf86543fefb910cd2dfa9b009efbfeb2798b72f61f54a0c3867f9c176eeb9ef5f0a984a9420aca8049404d8020764cdbb58d6dfa09f49753efdd58ccc17623761d37eb4d009d2237917dc4d5c030479319b226f3ff6776c342a87953cbd5d2fc6b5b379307d016013ef1a877e4f47834acc633ed9b287f9074c21aa7c5a4e3649da9add1f870f0a068364bc80bc58401d22e6fbb95bf01f68ba45b2b83d631e4662541d6b9a491f8316c46c95092d634d74a6166cdcd5e008cb65f375fd5611521af7c065e2da5c87bfddc8225d20858dfaf993bba021024f7cbcbb1705b4458c4e63b2fb08defd4adfecd4908d194c042e17d3196fcc6950acd831bf220da1d4e6353f49fd5f7adf8fa191b91b06fc2f77e12078eebdf800b66c77710bcfe0be5e66c61f46c45c01854ae54fd8f1505367d274ea1636bfd559703db4dc850fe0280f4a06e167b8f3e7c214cf107282791af9d5d9a7ce864972a6a7654599fdd22817ad1645220c64a0384eeef3cd7552dc39e0d6d94b4d372a89e91ed167677799751d4cd4dc67416fb1490b5c5334f25ec0d20fa5abf252fbfd9c13f669ae36d2eb74752a4c2eb288a7b3effc0e476661ce73391fd564cbd15cff4eecc327e3029ff0b27e29a5c0546f2eab0a4847354c665aea35dd29c4d20ecd9f1e597d08586215d8c5ed7c32e9c7e328f4b185566a8c59c570855460c853b24c2b727a8956008035558487f7240eac85b546d93a55ccf1ab2bfa242ec689194c94416ac0926009db1f25b7a66496853c28efec8b1b54ccc2886ba1f9ce26f122d196800d5a404b0c3c8e553240f0ce523a325d18b54ff4d7e13de6be3669482d919bcf7aee6ee8d16aa4a165e332a0972520c1868957899260515a646e61af3d98d31c8ffb26ce1173714fd13bf28be0839f12c05e7925ac964a1b5516ec8d507d93b518711390dbe1d9250a2f3959af187fab4969322b6aec8680494a1dd4614d2bc4fd19eafef04a7ff953e668db3e96701df4463169a33a6720f1f1feeb88e9309211d02975e1e94fe3ad298e8f79f76e66afef441b61d8d5563688ac70109c12f7e7aa77f7f40e90087b2534e8bb799ebfff2f6c7d6d1b359d536d2774a9ebc6a8e4222622d4758871d3fc9eab767d29cf55ba261bba0c217524632fad8af06e7c3afece5fc59175a681d692c78e4c1daabe252d69bac8a5ef020a82aff05fdc17334de499e2376c0d666fd81253249dbb376c0ee7c79f52a557c26aa3bc6715ef1ffd5f66c066bc52efaf43b1782ef93684526000e4583346a95179b76875838f3adf988007044f4df3272bbbadd2f01cd00246ed48aa681297b0d6ae9f490641d3510658709cf8fb207198fcc82ec28ea1370ab1c84b87a713dddf77ac95fde7a769538e3e8f91a880a33b0a47dc1e32f0e2b2292b8deb92dfaac5a285e3a595399b53b935bdf797dede3c9c7c1ee37969b62db107d9736bd9d81473d57ea171c28f201eeb86b105f1c28bd28ef2330be55a7d0068b19f4d43e2ba3dc9cffa2217c7c00ed19778545eec4658a24c85b4d6b75883c04af5e67ed588eef2f0b6a6f0bea562cf3f50ad1300b718554739166cf03f8fc5ec6b8ad3ff7924b6949f5e5da775e9f6fd470919ee47a6dcac53910a64ba21ff2c18a62116a076831ebf0690d4ad7c4d72bd65979a2fcbf1aac29c348ac4706134fafd745c6f594d39927b0b4efb2847ed4bddf5da617dd3c00a8cdb2adaa8c8d1e75d699210c6959b4b4279d8052c25498b68e30659cffb4ba8ce36209f0014889af6cf7d209b77db9136a414839e0af4a2e5c218f474baf58eef0e7bb6cea5cc3e30d1fca29dd997e3d08344a52dfb87c2c74232a3430a458c95b7f3f8d34942b7a307e0ae04bbcf9454ec0ec06ef9a8954c76d272342528269a015bd331e7b6fdaedd0b6c56e4b5447d6f5ebf4c925053610ba3ce346881b0b5d65d2c127df4dca40a4a8560f42be02d38931304054e6e4f77629aef91d063e50883c32fe618626b6c399bd2973b188e8fc8c48fc374c2aa8cc3de3ec2a0b96d2bce3e5844f351bf701a3a202bddb1f5da2914b6b7cd42616d5c7ec28deaf4d9e70a26c2b7aa92a390508e2de4e9af1a7a3a919b1f7534d70cad4398f58ed1cfa4e9d8e974589034ca5ccdc2358ecae39ddea0960453d69e1dfb28ce6e67f86138fb01cc4873174aa6a8c783cdc147624004d4375baeb76eb26af97abcac2685178df67d69732ed69521ba5fe9083d340f1b723752eafb385632eaf5e0d9f28537ae37fbecd54b74e74c74f817cacd6025651518efef4ecc8d0997d875d82eae239d0fc71605bc2d49202793a31a037344f67c07993f0ace66861d04533737d577b5938bc5949bb222319064bf8c027bacd892a4c76e6cc147b2823e2f2cffef45d85c84dab95b418015a2d12f7947ba2bd1210d97959074c027329f7764e42ef619a8daa313482650d67125571d3942715cf41dbffea3ac81e8075aca387ab98f345c90c7382b55edbd23c6a7a48562945266266c21be27ceea28bf6d081aff7e624f11db0f515afa8d447607f0e2f3a0341359a984411d1508169b53c84e128d1abd9d09430c10f0c3319f0607fe905d1cba2bb6f4dc01ecfee1b59b81d673549e1b86cffdd1cab586de62d1721096a9cb3c32f09fcb1d8debc13feda6a9cbebec23cad52e2020c93fa7717059a8b1e2d8bafb4ed8dd0e6fec7321e93fafbb773dc9c55a50d202af149ad8d3e78c23d448249d245ae112949475c58cd61613d7801a7a5bb51d49ccb41976e3639a5f4e0524fee52e2a66e54e4a1b52e03f1e1757e3aef264499abf458826cb57822cb2192dae290162cf98fbc60305caf241d6348cea36226a1fe61dba9e85d2c70a8243b4100589d2a829bbfbe6676111a120d2aaab19cde12e42091a448d2f0df5188318f6df1d60bea7694fc250fcdaca0dd6f6caf44c37e17da325fb7502e2c84d2eb5d", 0x1000}], 0x1, &(0x7f0000001680)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x9e}}], 0x60}, 0x800) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000002740)=@get={0x1, &(0x7f0000001740)=""/4096, 0x7a}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000002780)={0x0, 0xcb, "0559928459a0a7bb2c67cc3c20c4411627fcfd86f199c8d905a464b78fc990a599a819a53648c8f4f0201bdec4dcc3af4a15b63970ce1fd2556537404836f8cde0d22b010cc59eb6e032d09e25594e342c4c385013950758f0836af2a68d94458a2e3a1c2784be9cb85c20ce2ded89ed960cb62bddc8d1b6faf1b3d8241d03240aa32a15574a881b9614e041ec16dcc1a2733b195189ea6df9a4f4c1701f4a6c997f8b9c974fde033ffbc720ca9bf7d054d93f7c5e1fb13dba34a5bf5e05c6250328ef890875a2e2f5f55e"}, &(0x7f0000002880)=0xd3) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000002780)={0x0, 0xcb, "0559928459a0a7bb2c67cc3c20c4411627fcfd86f199c8d905a464b78fc990a599a819a53648c8f4f0201bdec4dcc3af4a15b63970ce1fd2556537404836f8cde0d22b010cc59eb6e032d09e25594e342c4c385013950758f0836af2a68d94458a2e3a1c2784be9cb85c20ce2ded89ed960cb62bddc8d1b6faf1b3d8241d03240aa32a15574a881b9614e041ec16dcc1a2733b195189ea6df9a4f4c1701f4a6c997f8b9c974fde033ffbc720ca9bf7d054d93f7c5e1fb13dba34a5bf5e05c6250328ef890875a2e2f5f55e"}, &(0x7f0000002880)=0xd3) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000028c0)={r8, @in={{0x2, 0x4e24, @multicast2}}, 0x1ff, 0x3, 0x200, 0x9, 0x6b, 0x8ee8, 0x5}, &(0x7f0000002980)=0x9c) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002a00), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000002a40)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000004300)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000042c0)={&(0x7f0000002a80)={0x1834, r9, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x584, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x642}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xaf, 0x4, "f3d33e6e23b1c310aa55c470d646ef393d7c803ddecbbc778c343dfe59c5678e18083f8b416fb091f66d8557bef3757f44fbde91d861845391e0c3661c6049f37a1f0851ad83f4cdf8b004024f26b3e415f13c15dde32c26f08776ecd93051d465f02d1b5f4e2cedfc94a55ae40c9197716456055a22fc25b8101f805fdd0aaaca881068e69e834cdbcd57a57236ddf099507dd0d9e5f9325d24ab38a40dd3811a02ad6bd0ed2dc1062d2b"}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}]}, {0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x82\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\*%+\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "65544c9a3f12e15d0d69b5eafcf7b891f042ceefabd22d59e2baee542a989e46d3944c2361b2443075fa181d4f8395e58a2ac8806260faaad674dbe462d5485aa1ca43d3c41689d95d812ce4ae4baacb1b1262ccbbd26aba71d2eceff13a0c4bcf5143d78e8f9ad50919b9802e0cea2ab2523d503f8ceacfecf8ca588166c4e0812d686e71af9b2980e370651edaf07cc2d15d28bca5"}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\xd1-/\'\\,&\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\x87-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '].*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8a86}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff254}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\'{/\xab\xc8\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6f, 0x4, "4220e6e81f849005af7d2b01641bc6d50a2587fa3eed265094285259d2cf5baa94df328a9c16e41c9d8f5b56cecf271ef518e50a753ffdba0fddfcc4678f90e4343adbe396c3d97f9f34c8b27b807a79844df7d9efe1c98f22e7df9e2384f2f1c8d29118a7c21424cc38f1"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x100, 0x5, "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"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x13, 0x5, "3fea0b63dba156fd510852040e3f5b"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "ab3e599b6f85cbf16dcbda316c401502983efafed1f2b5f713120140beb80beaf6d94c93d8464e072f5a32f3e86c7f9c4555d5bb617df58495431edf070dc40ab0f6d8bd447a2d1372ce0ce1bceff37dc44a2ba3b0ae8eb5ce90ba899d76bfd92fc5fdf4758ae8732a7f29fd233195908ac88f025575d08cb5ed5f17b5685dc8b38f6c485fc2a0357e1e62e9ea1e81a2c8f52b88ded6fc9a1f29c478bb05f7e56ca71491f8cc18837349a1e415bb983fb36a86de1d668f15178d0f7c03f7c3171bc6220040194b4b762a88ff6de290ab386d76bb17d03648fbb192b783065ca56baa275dbc9125dc8911185975af539d2a76a011f665e810ad4aa70558cf15d91a9e100c2f04166b9ed040e0e6b8cde92e84bdf9d037384771e8455f7f631905e361ce1ce6b190d87b0503ca1250d0b2ad0bfd19ccca60dfa3f1aa33cc70160a856c527890c9eca7dc80bc992165bfe6f3aa549a5a68327bf5c2482a21ccd94dfdaff1e39a4e82fed98d5ba7a28523e333ba68e1d5ee83619170e3b5d0eee65317be5bdd59637da8980682b6b18fb0e620a09fd9fabe3ed7de0f1e931b863df9aac12b6759b5153763a7fcdd97d08fa42a48250662495a099478868092676d6f4ca384b8ed25a446a0c14dde9c1e885e281493243b36c1db4f1b69784315fd1fec324d9b0c843d970d0fd83c0d0ec138186aa2a51019ce1f978a2da3816d54251f62f93b991dfd363379992b084e6fd0cb3c113f6e7de465895a1d3c87726caa5a3b1e622fb41723041f46c3c1e6e29ddcacf50de8f06c4646409b809313636336217107ab0da88368b331943e2f4bb76083be5aca94d72c03882b998474d06b254d45c320265aa047d0f4b56b36ce718cf8aec3d64f459510dbcd195fad7019bc804e412723f5b3bbc363cc21508b2ca8ec7abd5a4fe713ebb7e589c4759a61dcf95de45428d1b0a6eaf1db820e030243d564dc15e86ae3c71d30995357aabf6a283c9a904abd8488bd75a9b128f8f838dba5d92ebdb1593400d80247fae73bee955cf3e7dc6b40f9b2055496c5b7c61418ba2c71081e5dc1d188944104f32ddf2cfb9b71299c4269386f425f19ad078fa64016a1293215c343f59c22cc658b97ee3d5158bac85a90125a8b1e181da518d0f6363265fd12d596d6cac91d8b4e480309b19e0eccf5585e991130e7b08ddad732686c941d56ce0fb98964540866567090ed5ee10075fc43681252525effefe24616fa586dcb888c2f7319843bb2d25a1495746628c19b13a6e06930601e24ba991a0b880399a566f72f3c385a1198fa650a8647f6c493a85107ef835c8d0c3093b84d86a3c773ef1513a75b5b01b235b9ff2a98e6447122c5d31e763bde7ad209128914ac4ef56c734698977c0fb694b9fe3cab664a5fb6b68992f8e008dc8e6f57b125b44950184520dad4be6187408014e187408205bdaf1f65d1a91e7605335ee4cc3231baefb802aacd89f9aa145f2d3c466fd2d6112192bbab2a8ea02a1278871a951875f98a9da01c370ad7656c02ba70fd0b21aed2e4d88b56a4b8eaa81acb6d2e638086021a7f840dd0efd412cb856aca51cf673bc1d8d424d4a367b0ff6a42468ad01a80ef84bffdb83a0d4576cb117c72eace50f05afb22175ec767fd85e0ad6e01379439f3cd94973f96c24528b40b6b4dd6fa365f88efba9456542f9e5d73fa4cbf42d57cbfee81da51f4b3dfa726eb9767a4804a75cce7f960f88f4e6f2ef6203f3c24808f90f85fc81430357ec867115838959623c324fc3051134d24bf520145407bff2c59bd013a73c37f83d65a3442f3c72eded60237ec1c96fc4c6b089f365602770f911346b3a0c4a9a251bbef30996a2ba2c5c1d550ee8debed9fa4d2af14688ca2e61924fc1dfa55f35b8fca7b4e216357e24c239291de0bd9cdbedca94214e9ccb936d1b3851a4368af979cf0c861342d8c9d762febb4f5b7808e94c4045d8d3e5fbbc2e0b808b9339dd69c2aa59e08a2641588304477dbc8245108c1991a0ee54a6a1b6879060c51d606cd9a49c521a35a6e6e72fe2fd9460ada7b06605f8a68ee452b2544b3109fd3703db4d19427dabfde642168ef0c4d73af77c6dbbe0485289f420ef56df67730c90ac61fa655e0adb5b2f9e320b839176dcd088875cdf1345c1f613ad75b44e952fa524d2ffe5cb965ee95f2c04a224a494949559a238adf8937f0eb462fe390dd2b64097579b2ee0be650c529d955f0462763773202a7b27c568e4f2b385238ff5b8938a7606dabc3a89354cf1f093daba70f9b28f622b9698da4a673654c5bd27c8bc9a7e692eb2f3b04126ae6759a6a8755f2722ebd2736b1d55d27fa658a579fb656c008b8cd00e6d45940234e4b13d027c845bb40ac3c7bf433fee8d8d445ffdba671a564890255c38245743ab4578ccfb5c8492e734943803e8399a397d942b6c73933ae3c92addc24aff55729a48abda455542492f9eca997330088bf5e7dc8b635b9279d8766a90b7b4ea4e632009f001273e977ed4b743e0bd4c4a56543c83ee7fdbdacc9b37491d935cf3e35113c28c9efeddd94b7e249d268700ee1b1eec9a010ef71d8e92f803ab65ddab01c67898a0409aa4dd3fa81fba7a1bd029f5ff80e55c5ccaeada7a29d50f8a439459b0438d3ba2bacfd1b56d352f56371ee9bd7c907cd24f055a93aa3bfd154fb08d28e40b777a632e2dbc8bb0c3831899b20bf1e15f37ffc87a062491599095d06b41ee363efd1f1fc04cfae347edd158e1e482c9d9d8dd0ce0dd33fd8b597b0ef42f08f3e5e9a5ab6dbddc5ad23d251475430e9f5d5cbea792e34333b1a322c9e46145477936afe7266e4dee2922ec5ce305cadf7b93a1b2a302173fc24dac82016e2c41a0391b9efe0af18cc24aab3cc496421b6cd57e6604aa31851df9f206ba427c850ec03d8eff727a179093f7ceae3d14fa4aecb42b520d1551fdc2086a88cacce25398fb3e6df9d76b1e726e5773c0dde6ab2bf5c47b61b3a34bf0e8a0a28d5c6ff8a22ec10e77efee1394a9e8c92cb03948d201942f0dca0f69d3fadbb4436fa53e6565ce140f069864fae7f60124807f2a6828c82a804a110fd7f58ec1252c1c5c770d58bd6cc9b9b4d9965e73f5b7f510eb37a8451d4eeb7712a852529473f4e56071a747580388b3488133cb9e9d622298ed65fc845c43b478e59a63ac75fa61d0c7dbfd7552f98c671d2e2f4061d0c459351d3cba7082c2ea6feec977618eda4f5b5105d2f094bd06ad9a4c6888729a406e67c71252353817c36838212ae502a179a669ece3dbce9b8e1d733dd5b778c7eb0b414a71df9a3adca3a8e38257436a7b8eb4d53d2dedf3b9e4e5ec166f5c3c0f55df25beb1a97192785774f81c7e2a00bd185c2effed9245253490fd284ab53d560a1c1b4cd206e5cdbb55cbaf17221d8fc8bc24411047ff09c84e447eac5bf408c617aa6c76100cae6e99c4d119df3568703a3ac43cdff1eb8e520a88791751d7c2e731c933f87de01ec772e3a7cbbb095db2427e41be31821fcf34f0c72465dc4af183f09df2f91e6caf9a14dc85b71b1288352fc6cd1297a6558dc53261a931e22216ac9a224778601d8690cde369056a279db870a44341d35c313b57a74c4c2e39d07bfe3815a1c9455c7e6c3ffbcc15a37d34725d2c38bb36b08841b1491c99bd20a57ee165628eb8854eee28af11799f289b027697cfb963c30deae52d2e80cc050f7b8a75bb43023dc6a877cafd60d0b2710c54ae670ea99054e1fc90055759e14ce9efa90f67b125fbf878443cd88423bbd0d9c593fac050069bdb4d7f8cee0e221318a277c48530a807979a62029d82c8eed467807f4c80700d1fa3b0da23dd76c51580a468dac2032a97d8505fb2c5555dede1471ccf00bbc5b95fda0717c1ac423c99e5c57f6463662cf279eb5199f8eb85e90a32ed2ec47d055de19b6ca944f7bc5be3ccd261ea3c3fba569eabebdb862070cb6e2812978bf58bbe12a90314db190695e65741169bd95e93a421c283c47f6bd13066b78f0759a5e84071f721bd57f78fe521312259099d4691eca6bd1c8c0f94b2f08959a81335dbcbea11fb85626561371ae29d5d463623017160c2061924b213db84d80706ef920fb315ea98cfbce688398e93066ba2f9f24b35afe877fd1c3d3d689ec3e38385774a53cde6ad7d7e778d1793711759f244ca0bec15ccfd8863eaf49cd416fd6987b14f3c3a715cbef56758feaa0dcccc0cf923cb191a4ab54566030cc867fde27c6aff975c43ab9c9cd87e17ddd33928863b68d1f44136523409fe10cf5a35b89195ce0008f82457a3f7ce4893b26dde2bc630d614f9a7ea35c75adb019e078d4dd0652fd3f4108f92d11bca53370ee970551754c30c9b26551b48184b01a5998528126076cd9dd880ca7b9404ce64c8708591bdfecfff9de572f66383f23b7f78a89940df64047fb24981573d011890036992829fc8b438bd78464a44a982546cd1fd5efa1bcaee077049f11802d305358cf78847c508681d38b1c0544f783cb722f0b4815dea7bc4c28c56b762f50d149fe566347e7d36e23a9af2889e35eace49c987768b78409aa1a19d04af045e3a3a324b80e8d85b5885cc4afb3a132415fe461dbab229a2766b620b850c94d676a026d06121d7a66cecdf09f31b42c606945d7bfa96b90ae764b1f5a859bc3846145eacd4608893a42467cb6847633802094cf5fb95ae10c507da8572e9fe57400325b30db54b2d5e939cd173b3011601320169815cf26095c98eae453d8b80fb1f110de66fc7c0c5bf9ef89962b0002519ca997a5ab3bc60475d32934e58da2b54741f61502f6297c4d11d5cc8cf3b49167e7d9ba65e9a900e9ee223933d26863f55b1de65fcfb44beff514abdeb23773caea4e03f54fd995e5b1ac9e1961a196dd00d3090e2ad6c5e1c2469fd4ec0e7368b6ac899dfa441d4d7e848bec1375c2f0bcfa09b4d9c2c1f79a8a3e44114115024db0b4dcf5094d718c2b69e34156f5b9e2e95a7de56efeefa25ef18820c10ca6e0d8dee905f33747040114d1d978012806348e82f1ce5dbf1861ca5c343f98540891e212f7e0b0d2311d92503703125d46610365ae386c81492ed60cc6ac24f9a7206b951d7f5dcbb7aa4aceb97416a03f5aac7af267a93ea4e087af61d16b92f2a061ab76bc8840832ab0730dbd665efef932234e973cb226ed09adb96aa8074481381dfc243a38f34445ba23f80606b417a36ccb3a5e816d9e3c93cc25e989fcc7f6c3e7dc5b043042faf766ba918eaad74dfdd3a609fb1ef0d05610eb2b2aeaf61451094e6fda54935829d522a89b92b238cd29d2c981f1c91cb133e09598e05eb6b79451c761081ab76f9869108e86c9013b5ec8946a77d122edaeb3850002f7c7023a3297c35b198e425a69c0620927bfb157299ce7708ee5727dbd14999f6feb138c9be8779063510f40d7e2bd0d171e68c7803c7481e4bec49196e77438f2839e8d14ee8d3a99f8237430ae9100b93de5fbeb4c4d6ae95f762e22baee60e8c63d2969b2c9992a7c4b33c316555f39a8ebe5b80305f607a1e3f32d5136beb853132f9f14e40a548cef21b99c043820d5eaf3e65e084f2e75571b36191d9ec9e6ca7628d34965c177f4a27e17f96763c473cf43d64a8dc66dfafab7573b264f8289c4d81cdc2453d65ef9c6336c21fff90b7a869b80b0211f4cdd668a8f754d1821762abbb7a32bfdef1996d6f1b6c6bd856be041bd75b3f969a70b34fbdc89be5014f3ae451715ea838f"}, @ETHTOOL_A_BITSET_MASK={0xa, 0x5, "f2d8ff13590a"}, @ETHTOOL_A_BITSET_VALUE={0xd6, 0x4, "770f92c5baf674761b6bfc7af9e840aed094a824c5d64e938301cfa7635155d92f6ec1f4137215f2c89febc7001b8750c95d926f690c8b0491ec2c2218e580d68e69dfa342d83333514f7fba38ef304ac122ef6bb70b8629cb2a6386b08acc181fe6424b9fcb958b34228858d8e6058a9897c11e014b9c205e13e161539b46b34425a3b6f36950b116b39afc2ecb32d758774b44d9311f667729ed70d9c60e100999c90e3a30588359753d397bb7601655355972d121008a42c92e008fc9a2ce78ee591df530b5be8fc5f6dc4344e46c3ea7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x150, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x64, 0x4, "24399aded22a8792f61eeecd36e86cfb6fba707b7de85d0f4048da67ed6324c39df968642a475fef8cbff668e488aeaed97ed88e2f4a5fb8169daf9b9eb93e40cd61e360f96ffc52dc067f699ac2d876b4a18752c12595a99ba34e5fab7a6e7c"}, @ETHTOOL_A_BITSET_MASK={0x2c, 0x5, "91fa6b751ba4df35f238f603cae9310e02f753f4fdb92f7c72c6886d89253705ab1220070a0d18e1"}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\t\\#^{$\'#%/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '**\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1834}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000004400)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000043c0)={&(0x7f0000004380)={0x28, 0x140b, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}}, 0x20000000) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000004540)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)={0x68, 0x0, 0x101, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r10}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000004540)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)={0x68, 0x0, 0x101, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r10}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004640), r3) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000004740)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004700)={&(0x7f0000004680)={0x68, r11, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x4000040) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000004840)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004800)={&(0x7f00000047c0)={0x28, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0xc0c5) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000004840)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004800)={&(0x7f00000047c0)={0x28, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0xc0c5) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000004940)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004900)={&(0x7f00000048c0)={0x2c, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000004940)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004900)={&(0x7f00000048c0)={0x2c, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) 550.653798ms ago: executing program 1 (id=3344): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$isdn(0x22, 0x2, 0x25) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) socket(0x10, 0x80002, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) sendmmsg(r1, &(0x7f0000000340), 0x222874f4405e5c0, 0x40840) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, &(0x7f0000000040)=0xc) close(r0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$isdn(0x22, 0x2, 0x25) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_create1(0x0) (async) socket(0x10, 0x80002, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) close(0x4) (async) sendmmsg(r1, &(0x7f0000000340), 0x222874f4405e5c0, 0x40840) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, &(0x7f0000000040)=0xc) (async) close(r0) (async) 449.996715ms ago: executing program 3 (id=3345): r0 = socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x131986e985dac249}, 0x40010) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="800000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000006000128008000100677470005400028008000700e000000208000100", @ANYRES32=r0, @ANYBLOB="080003000200000014000800fe8000000000000000000000000000aa0500050001000000140008000000000000000000000000000000000008000200", @ANYRES32=r0, @ANYBLOB="7bae7b99982792e96fd27e3d746501b87ddf78772903cc0c234ae2"], 0x80}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="800000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000006000128008000100677470005400028008000700e000000208000100", @ANYRES32=r0, @ANYBLOB="080003000200000014000800fe8000000000000000000000000000aa0500050001000000140008000000000000000000000000000000000008000200", @ANYRES32=r0, @ANYBLOB="7bae7b99982792e96fd27e3d746501b87ddf78772903cc0c234ae2"], 0x80}}, 0x0) 438.06834ms ago: executing program 4 (id=3346): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x522, 0x4) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x400000000010, 0x3, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000000)={0x3, 'bridge_slave_0\x00', 0x2}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r7, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(r7, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000580)="fb545cecd9722729d27c7aebf011eb9fed1b1f62c9f076fb762206f851efccc2026c9070a78e1338d00b4242055de2a89360b2eaa8f1498e93b7ac175d5c0851150132d1a4f612967668d9ca861ca6c16d", 0x51}, {0x0}, {&(0x7f0000000c80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4040005) r8 = socket$unix(0x1, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(0x3) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_buf(r11, 0x0, 0x20, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@deltclass={0x2c, 0x29, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xd}, {0x8, 0xf}, {0xffff, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) pipe(&(0x7f00000000c0)) 370.822432ms ago: executing program 2 (id=3347): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x10) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2) (async) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pwritev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="1832", 0x2}], 0x1, 0xa, 0x10) read(r0, 0x0, 0x300) 348.868849ms ago: executing program 1 (id=3348): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4aef6a06}, [@call={0x85, 0x0, 0x0, 0x43}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0xfffffffffffffc8d}, 0x4c) 212.915925ms ago: executing program 1 (id=3349): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x101, 0x1, 0x0, 0xfffffffffffffff2, 0xd, 0x5}, {0x6, 0x1, 0xfffffffffffff801, 0x5, 0x8, 0x2}], ['\x00', '\x00']}) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000300)="c2b9ec2fe0a13ca7a57f825377ecbf91bcccd614c4e8ea0b06ee2c98bea9f170712682c9ef79dd74751958b746e51e07162c0318035388f94e6f9b90c2ae96e62c50dc48483ed60e79ff3b93a8494b0b82e986303b4cd065b1fa5b188c14d278896b70a0b05d507c6359666269d1e33c898394c8d212962b3ad8c4933944c2c6fa756038d24b514af45d74ceeabd94ff83827f21db2b2b4a30ede951a99e0f357c5ca710eda0f8", 0xa7) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000003c0), 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r2) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1000}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000480)={0x0, 0x2710}, 0x10) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r3 = accept4$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @remote}, &(0x7f0000000500)=0x10, 0x800) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000540)={0x0, 0x0, 0x7, 0x3fa}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8045) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000780)={'rose0\x00', &(0x7f0000000740)=@ethtool_modinfo={0x42, 0x80000000, 0x81}}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x94, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x185}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6909}, {0x6, 0x11, 0xa}, {0x8, 0x15, 0xe9}}]}, 0x94}, 0x1, 0x0, 0x0, 0x200008c0}, 0x200488c0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000b00)) sendmsg$NFT_BATCH(r0, &(0x7f0000002700)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000026c0)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x128, 0x14, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xc3, 0x8, "09d2175177aacabeab25c8535b4a86b64719c073bd133277115aaec3deb364a0544e772e7a853754112c7f9db6bae649250465faa08bd777ad4c43ecd415628310dbabd679383fe73ec8d8551cd5ba8abc996d98235ed5b76ad33cfe480f78adb1f2b444e72f253ff91404c4f891ae6be5fd221829138b7493f5d489f36fcfd55522a268648582c0f31ac095e670cb4126483d53ab13c049277c474e6cc4dbaf40c11ced9ed38fc22e55853ed309fbbfe92586bfd654f33ce0951de7eb09c6"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0xe, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x74, 0x5, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa00000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2e}]}]}, @NFT_MSG_DELSETELEM={0x58, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x5, 0x0, 0x0, {0x8, 0x0, 0x1}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x94b2779854c687af}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x1744, 0xe, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1724, 0x3, 0x0, 0x1, [{0x1720, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @exthdr={{0xb}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_USERDATA={0xb4, 0x6, 0x1, 0x0, "7c46a6f1d65706f7644ece6c55b866e60d56f0f22c190599d6becb11a72f16e93d9b5aaea5ab2cc886040189d1c73a8b4038c1ce18ea9e20e1127509d3ce70afacfcd0f322c6712dc256aab5186d90e657b32b5a989da87904dba64f78a33b2bb8900002721d8dc4dacafba114a760b3fe5fe91e00c0e334b594a7e7a82d2480cad758c65ee9327d93a34272be858b3711e4d2d4275047b649f61317e20908db49d46963a22d20ef69bb6d6af5f7e4c0"}, @NFTA_SET_ELEM_DATA={0x1210, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "7c105ef2"}, @NFTA_DATA_VALUE={0xc, 0x1, "194cec39bbbb1a8b"}, @NFTA_DATA_VALUE={0x7f, 0x1, "d9bfe6e83825c650409a84204894f4a49fb1c879532f76bc111d88e48502b502dd464a6593a4c759f48149b60f730ab98822becbc26c18ad0cf263ea0a7da6a0497220bc10f64249b36125a400f348dca23e92829a9177974f9cf20f6f4e9a215560d55b7801059b8131d2cb580c569a59a7e1ea3f6f18b853c017"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x3e, 0x1, "2fa5becea07d56874bbc4623179500c7c401841119ed8a3bdf0b2aaae60670427a5250414a9481a1c0c788ec7a74a6a701d3b2e130a7c56147ba"}, @NFTA_DATA_VALUE={0x13, 0x1, "0a3a7b44b442f3d81cfc51a66f8418"}, @NFTA_DATA_VALUE={0xe8, 0x1, "c5d2c72ff35ba12fcdd5858b8cec75ef62f6c9b74593219645ee4bb1ac26d3e08a28af0ed5428b7aa6b8c0eb133102896df28b8cbc5c7cf4f69ea7e18a4bb9886550ade61b951513e054d1445235b59c6757f390f4a48fdb24a36eb3bd92ddf8290cb773aa26810dc0c3f80bbc8b152f848fced4e8aa4a21a7c6275ee9b7996653c79275d70c0c48bf7ff0d504c138fa7d1c1feac939c11c26a6348d5e108639d888218acda7f168e1f1cc69768a347fbfba310e2891576d184e51ba4e2ca23cc8a5fff21fe362d00a947d0ac1c297f2e80b9fc8eab010a53d680e122811ab7d63aaa8e6"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x190, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5e, 0x1, "45fc058a719743682dbfceb38dfee3ee18ea6e709a89ffb5ae8cd7001df385c8e94e8ef58557abba0e71cfa7d0225506a7be5ae6f875006334e51de698af15646a6de096602da425243fcdcc104eaa6f480e65f802e3f7842b45"}, @NFTA_DATA_VALUE={0x9e, 0x1, "c96b5eb5aa6f814020090d073d890a358aa552f883d29680422a05721fc71632042ecafcdc65646ace7f3100fa4d92e4865831293557d0c2911cdbf6cedb726e343a8c41d71dd95230581b6bbe17411669abf43f9d13cec531fc09ace796b46b87153e8a2afcc22f981a78135ec56892d6439e1a5faa3aa8f9d8ffe30354876add4e9d8e054bb88a778c996dc7911cbb3f87f0b8903fdf95decb"}, @NFTA_DATA_VALUE={0xe, 0x1, "e6714a623e2d9727f917"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x1a4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "f98c634804a11fcbfa865dfd31ff5e10df3594384f315fb09cbb842938015ecea7eea706dc2eea69ee5af038427aa053a295b1d6023b2bf62d4bfa134ddaeec3d86d9388cb11434b6284127503f0cea3d12dcc24358a21644143120587e39f78b7a76470570e750059c3e033b10a6bfd35a7c3049e7858"}, @NFTA_DATA_VALUE={0xce, 0x1, "2103546f1323dfebfdcd396c59206b75056becae302c3db6ae47bc2113dd0fda86cb7444d3c4541b0ee5f9aa88bc1f654257d40baaea51e6569280ac3e3c8646b579aec24d9c43571b94daee266f1d68055f4261493dba29c64d3dbd6c7141c1f1080bd7bdd3353b57dd7071bf06532b6987f144fc2c59022c57fbf12304c05198955776bc0dc90f9ffa250207f2d228094e57398aa83e3ed37d92392ec1ea3e081c37630f8eb0a30d49a1c605677868d5142c94d9ebb1b2c3c49ed576702ec36c7662823bb02ae96000"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xd8, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x54, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x21}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x58, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1b28}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002740)={0x0, @remote, @multicast1}, &(0x7f0000002780)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000027c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x7f, '\x00', r8, r0, 0x3, 0x3, 0x2}, 0x50) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x48, r7, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x36f}]}, 0x48}, 0x1, 0x0, 0x0, 0x4840}, 0x8000) 102.359958ms ago: executing program 2 (id=3350): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0x0, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x80000008, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xa5d9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$packet(0x11, 0x3, 0x300) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 101.404567ms ago: executing program 3 (id=3351): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000a80)={'nat\x00', 0x1000, "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"}, &(0x7f0000000540)=0x1024) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xf59}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}]}, 0x48}}, 0x24004080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r7, &(0x7f0000000a40)=[{&(0x7f00000007c0)='g', 0x1}], 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) close(0x3) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x21c632a4) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010003b1528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="f70000000000000014001280090001007665746800000000040002800500100014000000b666d594008aa3f551a64d7817a9b7f85633fbae358a739729e14e2e547ef4c015eb656a6463e7cac4f9273c5db2a51331bdd627a7d48de0c087565e09284981437c1cff6052277f5946bfafe118b91d60f4aaa0611baa9b4ee6d10d64b116977b90eebb9dcac8e5ab5d462d6afa11e342a8b68e24ac93b09f80104e27b62af6a75d729fcde2ccccf2d42e0c46ef4c9fdb8ae54a9ba0eefb970900cc8025ba"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r10}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r10, @ANYRESHEX=r1, @ANYRESHEX=r9], 0x28}}, 0x20000804) 0s ago: executing program 4 (id=3352): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000340)="dd0d98467959d44fa6396aaf7846bd2d674890f561b651ea691119e6142fcab6199c0ee0d0422cac7a5fd47a2290d4d2bded2256eaf2faafb420a112c3f90c824fbfd209080c24ba08008ad8c123ada5170591e38c422a0fd808e47719ac97bd3877ec6065a137664d9feced47d72cd5ec81f2c695a29c48242f6f4a4235d25d89564ae7059690d6dce6112a336b", &(0x7f0000000040)=""/103, &(0x7f0000000400)="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", &(0x7f0000000240)="a08f57070b724ea755f8244c2f5810fb711e5f01235b9890054191d04efc9fd30e1e9f94bbef90dd6b2764bc03b7df526ca794a9a5a06d33b25c", 0x4, r4}, 0x38) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000040000000aaff0200000000000000000000000000010656700a901d41e51fc97f1a2d4347b163fbdc3cf85dfcd5829b240681c0bb5538bc739c45bdf4e31669777b9fd9889ca6e9c2a230df497e18b092c35b2085"], 0xffe) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf253a00000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x4810) kernel console output (not intermixed with test programs): _free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.079254][T11939] 44173 total pagecache pages [ 217.090302][T11939] 0 pages in swap cache [ 217.097124][T11939] Free swap = 124996kB [ 217.101952][T11939] Total swap = 124996kB [ 217.106729][T11939] 2097051 pages RAM [ 217.110813][T11939] 0 pages HighMem/MovableOnly [ 217.115749][T11939] 424119 pages reserved [ 217.119929][T11939] 0 pages cma reserved [ 217.127275][T11993] tipc: Enabling of bearer rejected, failed to enable media [ 217.278105][T12000] tipc: Enabled bearer , priority 0 [ 217.435498][T12000] syzkaller0: entered promiscuous mode [ 217.450336][T12000] syzkaller0: entered allmulticast mode [ 217.465993][T12000] tipc: Resetting bearer [ 217.496568][T11997] tipc: Resetting bearer [ 217.856054][T12024] netlink: 'syz.1.1645': attribute type 1 has an invalid length. [ 217.974191][T12028] netlink: 336 bytes leftover after parsing attributes in process `syz.1.1645'. [ 218.888590][T11997] tipc: Disabling bearer [ 218.914559][T12017] gretap0: left promiscuous mode [ 218.919662][T12017] erspan0: left promiscuous mode [ 218.925706][T12017] erspan0: left allmulticast mode [ 219.035335][T12017] bond0: (slave bridge0): Releasing backup interface [ 219.074080][T12047] netlink: 'syz.4.1650': attribute type 1 has an invalid length. [ 219.086357][T12017] team0: left allmulticast mode [ 219.091290][T12017] team0: left promiscuous mode [ 219.112984][T12017] bridge0: port 1(team0) entered disabled state [ 219.279429][T12017] bond5: (slave veth0_to_bond): Releasing active interface [ 219.375268][T12017] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 219.431519][T12024] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 219.433722][T12025] netlink: 'syz.2.1647': attribute type 1 has an invalid length. [ 219.551312][T12029] pim6reg: entered allmulticast mode [ 219.560417][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1649'. [ 219.581021][T12064] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1652'. [ 219.678824][T12070] xt_hashlimit: size too large, truncated to 1048576 [ 219.687797][T12070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1654'. [ 219.720851][T12048] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 219.734315][T12048] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 219.761233][T12051] macvlan3: entered promiscuous mode [ 219.767241][T12051] macvlan3: entered allmulticast mode [ 219.776240][T12051] bond7: entered promiscuous mode [ 219.782661][T12051] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 219.792686][T12051] bond7: left promiscuous mode [ 219.845240][ T13] veth0_to_bond: left promiscuous mode [ 219.989242][T12084] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1657'. [ 220.045305][T12081] tipc: Enabled bearer , priority 0 [ 220.053050][T12081] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 220.060484][T12081] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 220.072909][T12081] tipc: Resetting bearer [ 220.546262][T12113] xt_hashlimit: size too large, truncated to 1048576 [ 220.607632][T12121] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1667'. [ 220.741198][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 220.897070][T12138] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1675'. [ 221.971344][T12039] IPVS: starting estimator thread 0... [ 222.062203][T12200] IPVS: using max 32 ests per chain, 76800 per kthread [ 222.244046][T12210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1693'. [ 222.255954][T12215] netlink: 'syz.3.1697': attribute type 10 has an invalid length. [ 222.275023][T12215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1697'. [ 222.301488][T12215] team0: Port device geneve0 added [ 222.718067][T12241] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1707'. [ 222.764348][T12244] macvtap1: entered promiscuous mode [ 222.769911][T12244] macvtap1: entered allmulticast mode [ 223.059292][T12252] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1712'. [ 223.135878][T12255] pim6reg1: entered promiscuous mode [ 223.141250][T12255] pim6reg1: entered allmulticast mode [ 223.296482][T12269] x_tables: duplicate underflow at hook 1 [ 223.306494][T12271] wg0: entered promiscuous mode [ 223.393555][T12277] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1719'. [ 223.409034][T12278] sctp: [Deprecated]: syz.2.1718 (pid 12278) Use of int in maxseg socket option. [ 223.409034][T12278] Use struct sctp_assoc_value instead [ 223.463818][T12283] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1720'. [ 223.581322][T12290] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 223.589449][T12290] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 223.738419][T12299] netlink: 'syz.1.1726': attribute type 1 has an invalid length. [ 223.879615][T12303] 8021q: adding VLAN 0 to HW filter on device bond7 [ 223.889241][T12303] bond6: (slave bond7): making interface the new active one [ 223.897357][T12303] bond6: (slave bond7): Enslaving as an active interface with an up link [ 223.906750][T12302] syzkaller0: entered promiscuous mode [ 223.912704][T12302] syzkaller0: entered allmulticast mode [ 224.235875][T12325] tipc: Enabled bearer , priority 0 [ 224.259823][T12325] macvlan0: entered promiscuous mode [ 224.279153][T12325] macvlan0: entered allmulticast mode [ 224.287125][T12325] veth1_vlan: entered allmulticast mode [ 224.313931][T12325] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 224.769731][T12365] netem: invalid attributes len -24 [ 224.799703][T12365] netem: change failed [ 224.836760][T12371] netlink: 'syz.4.1748': attribute type 2 has an invalid length. [ 225.012257][T12378] __nla_validate_parse: 8 callbacks suppressed [ 225.012279][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1750'. [ 225.108200][T12378] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 225.124237][T12378] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 225.271139][T12399] netlink: 'syz.2.1755': attribute type 29 has an invalid length. [ 225.304225][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1756'. [ 225.420964][T12408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1759'. [ 225.430542][T12409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1759'. [ 225.480703][T12412] netlink: 'syz.2.1760': attribute type 4 has an invalid length. [ 225.507784][T12409] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1759'. [ 226.255397][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1780'. [ 226.278842][T12474] netlink: 'syz.4.1780': attribute type 8 has an invalid length. [ 226.545083][T12487] netlink: 'syz.3.1784': attribute type 7 has an invalid length. [ 226.569082][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1783'. [ 226.583550][T12485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1783'. [ 226.620929][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1783'. [ 226.670263][T12496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1787'. [ 226.875073][T12513] netem: change failed [ 226.894313][T12512] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.716984][T12568] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 227.820678][T12571] netlink: 'syz.2.1811': attribute type 1 has an invalid length. [ 227.861508][T12571] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.029726][T12581] tipc: Can't bind to reserved service type 1 [ 228.219209][T12592] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.225278][T12584] tipc: Enabling not permitted [ 228.231305][T12584] tipc: Enabling of bearer rejected, failed to enable media [ 228.498692][T12604] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 228.721063][T12617] netlink: 'syz.4.1828': attribute type 2 has an invalid length. [ 228.997068][T12630] netlink: 'syz.3.1832': attribute type 39 has an invalid length. [ 229.031834][T12634] sctp: [Deprecated]: syz.0.1833 (pid 12634) Use of int in max_burst socket option. [ 229.031834][T12634] Use struct sctp_assoc_value instead [ 229.038216][T12635] syzkaller1: entered promiscuous mode [ 229.054097][T12634] netlink: 'syz.0.1833': attribute type 1 has an invalid length. [ 229.063033][T12635] syzkaller1: entered allmulticast mode [ 229.437240][T12648] bond8: (slave gretap0): Device is not bonding slave [ 229.444229][T12648] bond8: option active_slave: invalid value (gretap0) [ 229.455355][T12648] bond8 (unregistering): Released all slaves [ 230.300317][T12710] __nla_validate_parse: 13 callbacks suppressed [ 230.300337][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1852'. [ 230.308388][T12711] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1853'. [ 230.350178][T12711] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1853'. [ 230.378243][T12711] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1853'. [ 230.528746][T12721] tipc: Enabled bearer , priority 0 [ 230.670181][T12721] syzkaller0: entered promiscuous mode [ 230.706557][T12721] syzkaller0: entered allmulticast mode [ 230.722860][T12721] tipc: Resetting bearer [ 230.751549][T12726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1857'. [ 230.844558][T12720] tipc: Resetting bearer [ 231.545554][ T939] tipc: Node number set to 447966475 [ 232.206662][T12720] tipc: Disabling bearer [ 232.372476][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1862'. [ 232.388614][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 232.416514][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 232.425697][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 232.450796][T12751] gtp1: entered promiscuous mode [ 232.460582][T12751] gtp1: entered allmulticast mode [ 232.625430][ T939] IPVS: starting estimator thread 0... [ 232.631423][T12764] IPVS: set_ctl: invalid protocol: 0 12.0.0.0:16388 [ 232.709456][T12773] netlink: 'syz.4.1870': attribute type 3 has an invalid length. [ 232.732474][T12765] IPVS: using max 28 ests per chain, 67200 per kthread [ 232.798457][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1870'. [ 232.867111][T12783] netlink: 'syz.2.1872': attribute type 11 has an invalid length. [ 232.888819][T12783] netlink: 'syz.2.1872': attribute type 11 has an invalid length. [ 233.232545][T12801] bond7: entered allmulticast mode [ 233.239199][T12801] 8021q: adding VLAN 0 to HW filter on device bond7 [ 233.460657][T12818] tipc: Enabling of bearer rejected, failed to enable media [ 233.561241][T12825] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 233.638222][T12825] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 233.650688][T12825] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 233.660045][T12825] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 233.669274][T12825] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 233.677727][T12825] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 233.686341][T12825] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 233.695539][T12825] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 233.704154][T12825] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 233.712289][T12825] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 234.024183][T12854] delete_channel: no stack [ 234.375476][T12879] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 234.425080][T12881] bond8: option all_slaves_active: invalid value (222) [ 234.453533][T12881] bond8 (unregistering): Released all slaves [ 234.700275][T12902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.913949][T12918] bridge_slave_1: left allmulticast mode [ 234.919799][T12918] bridge_slave_1: left promiscuous mode [ 234.936875][T12918] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.955408][T12918] bridge_slave_0: left allmulticast mode [ 234.969988][T12918] bridge_slave_0: left promiscuous mode [ 234.976173][T12918] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.158158][T12932] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 235.329977][T12945] __nla_validate_parse: 81 callbacks suppressed [ 235.330001][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1918'. [ 235.478987][T12954] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1920'. [ 235.492484][T12954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1920'. [ 235.560631][T12958] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1922'. [ 235.570160][T12958] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 236.145555][T12981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1929'. [ 236.155199][T12981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1929'. [ 236.370284][T12996] nbd: couldn't find device at index 61440 [ 236.377272][T12994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1932'. [ 236.443069][T12996] bond5: (slave veth0_to_bond): Releasing active interface [ 236.561597][T13014] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1935'. [ 236.573054][T12996] bond0: (slave bond_slave_0): Releasing backup interface [ 236.627056][T12996] bond0: (slave bond_slave_1): Releasing backup interface [ 236.768408][T12996] team0: Port device team_slave_0 removed [ 236.800795][T12996] team0: Port device team_slave_1 removed [ 236.813342][T12996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.821991][T12996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.844478][T12996] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 236.862728][T12995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1932'. [ 237.047825][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1939'. [ 237.067760][T13036] SET target dimension over the limit! [ 237.631090][T13068] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 237.645277][T13079] siw: device registration error -23 [ 238.427513][T13103] tipc: Enabled bearer , priority 0 [ 238.469653][T13105] syzkaller0: entered promiscuous mode [ 238.482779][T13105] syzkaller0: entered allmulticast mode [ 238.549969][T13097] tipc: Resetting bearer [ 238.603431][T13097] tipc: Disabling bearer [ 238.837781][T13115] validate_nla: 60 callbacks suppressed [ 238.837803][T13115] netlink: 'syz.4.1955': attribute type 29 has an invalid length. [ 239.065953][T13155] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 239.270176][T13179] tipc: Enabling of bearer rejected, already enabled [ 239.293071][T13178] tipc: Enabling of bearer rejected, already enabled [ 239.657263][T13195] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.683146][T13199] tipc: Enabled bearer , priority 0 [ 239.696816][T13199] syzkaller0: entered promiscuous mode [ 239.704449][T13199] syzkaller0: entered allmulticast mode [ 239.759345][T13195] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.830055][T13206] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 239.865695][T13195] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.994431][T13195] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.017756][T13216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.144800][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.193274][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.225755][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.270097][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.296180][T13233] x_tables: duplicate underflow at hook 1 [ 240.312892][T13193] tipc: Resetting bearer [ 240.361421][T13238] __nla_validate_parse: 7 callbacks suppressed [ 240.361438][T13238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1992'. [ 240.401813][T13193] tipc: Disabling bearer [ 240.425976][T13238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1992'. [ 240.558968][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'. [ 240.676426][T13261] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2000'. [ 240.688319][T13261] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2000'. [ 240.977059][T13288] lo: Caught tx_queue_len zero misconfig [ 241.178024][T13305] netlink: 'syz.3.2012': attribute type 29 has an invalid length. [ 241.187939][T13305] netlink: 'syz.3.2012': attribute type 29 has an invalid length. [ 241.340088][T13314] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2015'. [ 241.457210][T13323] delete_channel: no stack [ 241.648858][T13331] xt_TCPMSS: Only works on TCP SYN packets [ 241.791184][T13343] tipc: Enabling of bearer rejected, already enabled [ 241.912416][T13353] vlan1: entered allmulticast mode [ 241.929982][T13353] veth0_vlan: entered allmulticast mode [ 242.721445][T13397] netlink: 428 bytes leftover after parsing attributes in process `syz.1.2036'. [ 242.861560][T13401] tipc: Enabling of bearer rejected, already enabled [ 242.883898][T13401] netem: change failed [ 242.923424][T13410] bond0: Caught tx_queue_len zero misconfig [ 243.022808][T13415] netlink: 'syz.0.2044': attribute type 33 has an invalid length. [ 243.030950][T13415] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2044'. [ 243.056155][T13419] netlink: 'syz.2.2045': attribute type 3 has an invalid length. [ 243.135352][T13420] netem: change failed [ 243.290160][T13432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2049'. [ 243.307099][T13432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2049'. [ 243.461677][T13446] xt_ecn: cannot match TCP bits for non-tcp packets [ 243.503989][T13445] IPVS: length: 151 != 8 [ 243.688954][T13459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.754820][T13461] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 243.989845][T13485] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 244.026935][T13485] bond7 (unregistering): Released all slaves [ 244.146545][T13491] geneve2: entered promiscuous mode [ 244.403869][T13509] tap0: tun_chr_ioctl cmd 1074025678 [ 244.409400][T13509] tap0: group set to 0 [ 244.455970][T13516] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.739886][T13528] netlink: 'syz.3.2076': attribute type 19 has an invalid length. [ 244.810757][T13534] veth7: entered promiscuous mode [ 244.859970][T13539] vti0: entered promiscuous mode [ 244.868294][T13539] vti0: entered allmulticast mode [ 245.389142][T13573] __nla_validate_parse: 7 callbacks suppressed [ 245.389160][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2087'. [ 245.407857][T13575] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.431951][T13573] netlink: 'syz.2.2087': attribute type 12 has an invalid length. [ 245.461391][T13573] netlink: 'syz.2.2087': attribute type 29 has an invalid length. [ 245.481925][T13573] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2087'. [ 245.501264][T13581] netlink: 'syz.2.2087': attribute type 1 has an invalid length. [ 245.526614][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2087'. [ 245.564078][T13573] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2087'. [ 245.582859][T13586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.910142][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 245.926507][T13603] netlink: 'syz.3.2097': attribute type 1 has an invalid length. [ 245.949879][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 245.963904][T13611] openvswitch: netlink: Message has 536 unknown bytes. [ 245.970938][T13611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.971571][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 246.182910][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2102'. [ 246.449098][T13630] tipc: Enabling of bearer rejected, already enabled [ 246.738067][T13647] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 247.045463][T13649] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 247.066469][T13659] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2114'. [ 247.094338][T13649] bond8 (unregistering): Released all slaves [ 247.190504][T13670] netlink: 'syz.4.2115': attribute type 10 has an invalid length. [ 247.415541][T13681] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20002 [ 247.844039][T13697] netlink: 'syz.1.2123': attribute type 1 has an invalid length. [ 247.913973][T13697] 8021q: adding VLAN 0 to HW filter on device bond8 [ 247.985791][T13700] bond8: (slave gretap1): making interface the new active one [ 248.001120][T13700] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 248.117474][T13720] netlink: 'syz.0.2129': attribute type 11 has an invalid length. [ 248.273360][T13733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2132'. [ 260.925959][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 260.935160][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.942794][T13769] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2145'. [ 316.298682][T13793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2151'. [ 316.524799][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 316.563337][T13807] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2157'. [ 316.721562][T13813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2159'. [ 316.969250][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2161'. [ 317.157192][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'. [ 317.385095][T13853] pim6reg1: entered promiscuous mode [ 317.410847][T13853] pim6reg1: entered allmulticast mode [ 317.516760][T13860] xt_CT: No such helper "syz1" [ 317.629405][T13868] xt_TCPMSS: Only works on TCP SYN packets [ 317.651461][T13873] openvswitch: netlink: Flow actions attr not present in new flow. [ 317.680233][T13868] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2172'. [ 317.691442][T13874] netlink: 'syz.1.2173': attribute type 16 has an invalid length. [ 317.724022][T13874] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2173'. [ 317.858552][T13884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2177'. [ 317.929503][T13889] netlink: 'syz.2.2179': attribute type 21 has an invalid length. [ 318.310237][T13914] netlink: 'syz.2.2187': attribute type 1 has an invalid length. [ 318.384180][T13914] bond8: entered promiscuous mode [ 318.390150][T13914] 8021q: adding VLAN 0 to HW filter on device bond8 [ 318.400455][T13920] netlink: 'syz.3.2189': attribute type 1 has an invalid length. [ 318.418716][T13914] bond8: (slave bridge6): making interface the new active one [ 318.426993][T13914] bridge6: entered promiscuous mode [ 318.433949][T13914] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 318.734665][T13938] netlink: 'syz.2.2195': attribute type 1 has an invalid length. [ 318.753126][T13939] FAULT_INJECTION: forcing a failure. [ 318.753126][T13939] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 318.774441][T13938] netlink: 'syz.2.2195': attribute type 32 has an invalid length. [ 318.832848][T13939] CPU: 1 UID: 0 PID: 13939 Comm: syz.0.2194 Not tainted syzkaller #0 PREEMPT(full) [ 318.832878][T13939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 318.832904][T13939] Call Trace: [ 318.832913][T13939] [ 318.832922][T13939] dump_stack_lvl+0x189/0x250 [ 318.832958][T13939] ? __pfx____ratelimit+0x10/0x10 [ 318.832988][T13939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.833016][T13939] ? __pfx__printk+0x10/0x10 [ 318.833037][T13939] ? __might_fault+0xb0/0x130 [ 318.833079][T13939] should_fail_ex+0x414/0x560 [ 318.833114][T13939] _copy_from_user+0x2d/0xb0 [ 318.833140][T13939] kstrtouint_from_user+0xc4/0x170 [ 318.833164][T13939] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 318.833205][T13939] proc_fail_nth_write+0x88/0x200 [ 318.833232][T13939] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 318.833266][T13939] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 318.833294][T13939] vfs_write+0x27e/0xb30 [ 318.833334][T13939] ? __pfx_vfs_write+0x10/0x10 [ 318.833364][T13939] ? __fget_files+0x2a/0x420 [ 318.833388][T13939] ? __fget_files+0x3a0/0x420 [ 318.833405][T13939] ? __fget_files+0x2a/0x420 [ 318.833435][T13939] ksys_write+0x145/0x250 [ 318.833467][T13939] ? __pfx_ksys_write+0x10/0x10 [ 318.833499][T13939] ? do_syscall_64+0xbe/0xfa0 [ 318.833533][T13939] do_syscall_64+0xfa/0xfa0 [ 318.833560][T13939] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.833589][T13939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.833609][T13939] ? clear_bhb_loop+0x60/0xb0 [ 318.833635][T13939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.833654][T13939] RIP: 0033:0x7fad9a38e17f [ 318.833673][T13939] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 318.833691][T13939] RSP: 002b:00007fad9b26f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 318.833712][T13939] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fad9a38e17f [ 318.833726][T13939] RDX: 0000000000000001 RSI: 00007fad9b26f0a0 RDI: 0000000000000006 [ 318.833737][T13939] RBP: 00007fad9b26f090 R08: 0000000000000000 R09: 0000000000000000 [ 318.833750][T13939] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 318.833770][T13939] R13: 00007fad9a5e6218 R14: 00007fad9a5e6180 R15: 00007ffd75094148 [ 318.833807][T13939] [ 318.836417][T13938] bond9: Setting coupled_control to off (0) [ 318.870411][T13947] tls_set_device_offload_rx: netdev not found [ 319.096500][T13943] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 319.358709][T13968] netlink: 'syz.2.2204': attribute type 3 has an invalid length. [ 319.775532][T13995] sctp: [Deprecated]: syz.1.2210 (pid 13995) Use of int in max_burst socket option deprecated. [ 319.775532][T13995] Use struct sctp_assoc_value instead [ 320.209184][T14025] xfrm1: entered promiscuous mode [ 320.216070][T14025] xfrm1: entered allmulticast mode [ 320.419477][T14036] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 320.617811][T14046] xt_TCPMSS: Only works on TCP SYN packets [ 320.832908][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030271400: rx timeout, send abort [ 321.325423][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880559e4400: rx timeout, send abort [ 321.341184][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030271400: abort rx timeout. Force session deactivation [ 321.513910][T14077] netlink: 'syz.1.2235': attribute type 2 has an invalid length. [ 321.571043][T14082] IPVS: persistence engine module ip_vs_pe_ not found [ 321.655328][T14077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.687127][T14099] netlink: 'syz.4.2241': attribute type 83 has an invalid length. [ 321.834460][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880559e4400: abort rx timeout. Force session deactivation [ 322.246512][T14131] __nla_validate_parse: 17 callbacks suppressed [ 322.246531][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2251'. [ 322.347719][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2251'. [ 322.367560][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 322.379097][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.445162][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2251'. [ 322.528234][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2251'. [ 322.542148][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2251'. [ 322.987000][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2260'. [ 323.158479][T14187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2265'. [ 323.188149][T14190] x_tables: unsorted entry at hook 2 [ 323.332148][T14198] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2266'. [ 323.341495][T14198] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 323.405531][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2267'. [ 323.418188][T14200] netlink: 'syz.3.2267': attribute type 4 has an invalid length. [ 323.428526][T14200] netlink: 'syz.3.2267': attribute type 4 has an invalid length. [ 323.492972][T14204] netlink: 'syz.2.2270': attribute type 10 has an invalid length. [ 324.390214][T14255] netlink: 'syz.3.2283': attribute type 4 has an invalid length. [ 324.594163][T14272] netlink: 'syz.2.2286': attribute type 1 has an invalid length. [ 324.613177][T14272] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2286'. [ 324.861432][T14293] netlink: 'syz.0.2293': attribute type 1 has an invalid length. [ 324.985835][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052a10000: rx timeout, send abort [ 325.298978][T14326] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 325.485995][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052a13400: rx timeout, send abort [ 325.494650][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052a10000: abort rx timeout. Force session deactivation [ 325.789497][T14346] : renamed from hsr0 (while UP) [ 325.994381][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052a13400: abort rx timeout. Force session deactivation [ 327.375580][T14448] tipc: Enabling of bearer rejected, already enabled [ 327.539067][T14467] __nla_validate_parse: 14 callbacks suppressed [ 327.539089][T14467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'. [ 327.581702][T14467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'. [ 327.628116][T14467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'. [ 327.649469][T14470] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 327.668987][T14467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'. [ 327.682195][T14470] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 327.706217][T14470] netlink: 'syz.2.2342': attribute type 23 has an invalid length. [ 327.715204][T14467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'. [ 327.729088][T14467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'. [ 327.741487][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2344'. [ 327.754332][T14467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'. [ 327.763749][T14467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'. [ 327.774816][T14467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'. [ 327.899498][T14480] netlink: 'syz.3.2346': attribute type 1 has an invalid length. [ 327.949810][T14479] gretap2: entered promiscuous mode [ 328.017905][T14486] syzkaller0: entered promiscuous mode [ 328.024798][T14486] syzkaller0: entered allmulticast mode [ 328.489752][T14512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.505898][T14513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.676349][T14522] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 328.966673][T14529] netlink: 'syz.0.2360': attribute type 1 has an invalid length. [ 329.458325][T14554] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 329.936678][T14594] syzkaller0: entered promiscuous mode [ 329.977232][T14594] syzkaller0: entered allmulticast mode [ 330.290423][T14618] netlink: 'syz.2.2388': attribute type 142 has an invalid length. [ 330.512665][T14633] Cannot find del_set index 4 as target [ 330.609735][T14636] netlink: 'syz.0.2391': attribute type 13 has an invalid length. [ 330.691881][T14651] unsupported nlmsg_type 40 [ 330.805492][T14636] bridge0: left promiscuous mode [ 330.827838][T14636] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.843140][T14636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.080555][T14672] veth9: entered allmulticast mode [ 331.114509][T14672] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 331.158227][T14672] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 331.182360][T14672] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 331.320365][T14678] veth11: entered allmulticast mode [ 331.397888][T14672] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 331.421346][T14672] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 331.452912][T14672] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 331.546378][T14672] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 331.566513][T14672] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 331.576879][T14672] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 331.626503][T14710] veth1_macvtap: left promiscuous mode [ 331.658634][T14672] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 331.678096][T14672] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 331.700926][T14672] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 331.851568][ T3544] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 331.860612][ T3544] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.869412][ T3544] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 331.893610][ T3544] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 331.903043][ T3544] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.911515][ T3544] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 331.930921][ T3544] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 331.941200][ T3544] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.949847][ T3544] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 331.959754][ T3544] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 331.977049][ T3544] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.985889][ T3544] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 332.249816][T14751] netlink: 'syz.1.2421': attribute type 1 has an invalid length. [ 332.411209][T14760] openvswitch: netlink: Key type 234 is out of range max 32 [ 332.417379][ T30] audit: type=1800 audit(1762645671.249:3): pid=14760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2423" name="memory.events" dev="tmpfs" ino=2409 res=0 errno=0 [ 332.694469][T14773] tipc: Enabling of bearer rejected, already enabled [ 332.948254][T14786] netlink: 'syz.3.2433': attribute type 1 has an invalid length. [ 333.131998][T14795] __nla_validate_parse: 140 callbacks suppressed [ 333.132018][T14795] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2436'. [ 333.253168][T14795] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2436'. [ 333.360094][T14795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.382708][T14795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.403641][T14795] bond0 (unregistering): Released all slaves [ 333.578627][T14813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.609844][T14814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.670920][T14823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2446'. [ 333.930005][T14841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.977131][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 334.307675][T14858] syzkaller0: entered promiscuous mode [ 334.316414][T14858] syzkaller0: entered allmulticast mode [ 334.552695][T14880] Driver unsupported XDP return value 0 on prog (id 624) dev N/A, expect packet loss! [ 334.610289][T14885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2460'. [ 335.038097][T14896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.970871][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2468'. [ 336.005495][T14905] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2468'. [ 336.023125][T14905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2468'. [ 336.153264][T14918] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2473'. [ 336.164784][T14918] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2473'. [ 336.262088][T14918] tipc: Enabled bearer , priority 0 [ 336.264082][T14928] netlink: 'syz.3.2475': attribute type 13 has an invalid length. [ 336.269914][T14918] syzkaller0: entered promiscuous mode [ 336.284980][T14918] syzkaller0: entered allmulticast mode [ 336.396333][T14933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.407536][T14928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.422102][T14935] netlink: 'syz.1.2477': attribute type 13 has an invalid length. [ 336.471650][T14935] veth0_macvtap: left promiscuous mode [ 336.480882][T14935] macvtap0: entered allmulticast mode [ 336.496329][T14935] macvtap0: refused to change device tx_queue_len [ 336.504623][T14917] tipc: Resetting bearer [ 336.535414][T14917] tipc: Disabling bearer [ 336.575279][T14939] bond4: (slave ip6gretap1): making interface the new active one [ 336.592171][T14939] ip6gretap1: entered allmulticast mode [ 336.603450][T14939] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 336.960941][T14958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.201063][T14976] netlink: 'syz.3.2491': attribute type 1 has an invalid length. [ 337.275461][T14976] 8021q: adding VLAN 0 to HW filter on device bond7 [ 337.310820][T14984] 8021q: adding VLAN 0 to HW filter on device bond7 [ 337.319725][T14984] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 337.333621][T14984] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 337.360125][T14982] syzkaller1: entered promiscuous mode [ 337.365939][T14982] syzkaller1: entered allmulticast mode [ 337.394443][T14976] veth13: entered promiscuous mode [ 337.406363][T14976] bond7: (slave veth13): Enslaving as an active interface with a down link [ 337.422479][T14987] netlink: 'syz.2.2495': attribute type 4 has an invalid length. [ 337.423463][T14976] 8021q: adding VLAN 0 to HW filter on device bond7 [ 337.450881][T14976] vlan3: entered promiscuous mode [ 337.456306][T14976] bridge0: entered promiscuous mode [ 337.566568][T14996] netlink: 'syz.3.2498': attribute type 4 has an invalid length. [ 337.659975][T15002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.704175][T15002] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004 [ 337.955302][T15015] ip6erspan1: entered promiscuous mode [ 337.965998][T15015] ip6erspan1: entered allmulticast mode [ 338.179156][T15023] sock: sock_set_timeout: `syz.0.2508' (pid 15023) tries to set negative timeout [ 338.373651][T15039] sctp: [Deprecated]: syz.1.2511 (pid 15039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.373651][T15039] Use struct sctp_sack_info instead [ 338.501277][T15044] __nla_validate_parse: 10 callbacks suppressed [ 338.501298][T15044] netlink: 294 bytes leftover after parsing attributes in process `syz.2.2513'. [ 338.546952][ T1105] smc: removing ib device syz2 [ 338.547153][T15044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.589047][T15038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2512'. [ 338.599867][T15038] netlink: 'syz.4.2512': attribute type 15 has an invalid length. [ 338.629879][ T3498] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 338.630002][T15038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2512'. [ 338.642074][ T3498] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 338.695983][ T3498] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 338.698164][T15038] netlink: 'syz.4.2512': attribute type 15 has an invalid length. [ 338.736662][ T3498] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 339.085318][T15062] netlink: 'syz.3.2521': attribute type 4 has an invalid length. [ 339.096300][T15062] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2521'. [ 339.496102][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2523'. [ 339.499653][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2522'. [ 339.541061][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2522'. [ 339.599420][T15081] netlink: 'syz.2.2524': attribute type 10 has an invalid length. [ 339.678840][T15081] bridge0: port 3(batadv0) entered disabled state [ 339.748590][T15081] batadv0: left promiscuous mode [ 339.763487][T15081] bridge0: port 3(batadv0) entered disabled state [ 339.808019][T15092] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 339.879439][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2527'. [ 339.959857][T15094] bond8: invalid ARP target 0.0.0.0 specified for addition [ 339.968615][T15094] bond8: option arp_ip_target: invalid value (0) [ 339.989722][T15094] bond8 (unregistering): Released all slaves [ 340.567252][T15119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2535'. [ 340.700741][T15119] macvtap1: entered promiscuous mode [ 340.706883][T15119] vlan0: entered promiscuous mode [ 340.712871][T15119] macvtap1: entered allmulticast mode [ 340.718721][T15119] vlan0: entered allmulticast mode [ 340.724983][T15119] veth0_vlan: entered allmulticast mode [ 340.996701][T15133] netlink: 'syz.3.2536': attribute type 3 has an invalid length. [ 341.680531][T15169] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2545'. [ 341.930848][T15189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.055751][T15194] tipc: Enabling of bearer rejected, already enabled [ 342.066785][T15199] x_tables: duplicate underflow at hook 2 [ 342.070771][T15195] syzkaller0: mtu less than device minimum [ 342.082601][T15200] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 342.720395][T15247] validate_nla: 1 callbacks suppressed [ 342.720417][T15247] netlink: 'syz.0.2567': attribute type 1 has an invalid length. [ 343.178574][T15267] wg0: left promiscuous mode [ 343.216796][T15274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.227860][T15267] bond0: (slave bond_slave_0): Releasing backup interface [ 343.245886][T15267] bond0: (slave bond_slave_1): Releasing backup interface [ 343.245932][T15276] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 343.295854][T15267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.303762][T15267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.326607][T15267] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 343.354396][T15281] netlink: 'syz.3.2575': attribute type 1 has an invalid length. [ 343.475669][T15274] bond8: (slave gretap3): making interface the new active one [ 343.484912][T15274] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 343.571831][T15290] xt_TCPMSS: Only works on TCP SYN packets [ 343.681552][T15299] delete_channel: no stack [ 343.709892][T15299] __nla_validate_parse: 12 callbacks suppressed [ 343.709913][T15299] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2583'. [ 343.895774][T15309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2586'. [ 343.925990][T15309] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 343.933563][T15309] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 343.943227][T15309] tipc: Enabling of bearer rejected, already enabled [ 344.198199][T15329] netlink: 'syz.2.2591': attribute type 3 has an invalid length. [ 344.575989][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2597'. [ 344.931126][T15374] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 345.002146][T15376] can: request_module (can-proto-0) failed. [ 345.019402][T15377] can: request_module (can-proto-0) failed. [ 345.138985][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056610c00: rx timeout, send abort [ 345.265029][T15396] bond0: entered allmulticast mode [ 345.371627][T15399] syzkaller0: entered promiscuous mode [ 345.377960][T15399] syzkaller0: entered allmulticast mode [ 345.620434][T15408] tipc: Enabling of bearer rejected, already enabled [ 345.639098][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056612800: rx timeout, send abort [ 345.647544][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056610c00: abort rx timeout. Force session deactivation [ 345.770501][T15414] netlink: 'syz.3.2617': attribute type 1 has an invalid length. [ 345.858363][T15414] 8021q: adding VLAN 0 to HW filter on device bond9 [ 345.900948][T15425] bond9: (slave veth15): Enslaving as an active interface with a down link [ 345.934766][T15414] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 345.972458][T15425] bond9: (slave veth17): Enslaving as an active interface with a down link [ 346.147420][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056612800: abort rx timeout. Force session deactivation [ 346.221372][T15443] netlink: 'syz.3.2624': attribute type 11 has an invalid length. [ 346.253302][T15440] tipc: Enabled bearer , priority 0 [ 346.260895][T15443] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2624'. [ 346.284378][T15440] syzkaller0: entered promiscuous mode [ 346.289904][T15440] syzkaller0: entered allmulticast mode [ 346.342495][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2626'. [ 346.374031][T15454] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2630'. [ 346.395372][T15440] tipc: Resetting bearer [ 346.598508][T15438] tipc: Resetting bearer [ 346.677725][T15438] tipc: Disabling bearer [ 346.734502][T15471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.774349][T15474] ip6gre2: entered promiscuous mode [ 346.779635][T15474] ip6gre2: entered allmulticast mode [ 346.787578][T15470] bridge0: port 1(veth0_to_bridge) entered blocking state [ 346.795117][T15470] bridge0: port 1(veth0_to_bridge) entered disabled state [ 346.797913][T15481] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 346.802825][T15470] veth0_to_bridge: entered allmulticast mode [ 346.851070][T15470] veth0_to_bridge: entered promiscuous mode [ 346.872863][ T6541] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 346.884744][ T6541] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 346.902535][ T5908] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 347.643002][ T5908] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 347.812810][ T5908] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 347.846202][T15504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2642'. [ 347.878740][T15507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2643'. [ 347.908918][T15506] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2643'. [ 347.970212][T15510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2644'. [ 348.389969][ C0] vcan0: j1939_tp_rxtimer: 0xffff888141bef800: rx timeout, send abort [ 348.606385][ T5838] block nbd1: Receive control failed (result -32) [ 348.745693][T15549] tipc: Enabled bearer , priority 0 [ 348.829093][T15549] syzkaller0: entered promiscuous mode [ 348.834973][T15549] syzkaller0: entered allmulticast mode [ 348.842826][T15549] tipc: Resetting bearer [ 348.881394][T15548] tipc: Resetting bearer [ 348.890097][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057057400: rx timeout, send abort [ 348.902468][ C0] vcan0: j1939_tp_rxtimer: 0xffff888141bef800: abort rx timeout. Force session deactivation [ 348.952157][T15565] __nla_validate_parse: 3 callbacks suppressed [ 348.952178][T15565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2661'. [ 349.398414][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057057400: abort rx timeout. Force session deactivation [ 350.473034][T15548] tipc: Disabling bearer [ 350.680878][T15605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2668'. [ 350.694794][T15598] 8021q: adding VLAN 0 to HW filter on device bond8 [ 350.748736][T15609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2671'. [ 350.796069][T15609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2671'. [ 350.922266][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 351.075321][T15624] tipc: Enabling of bearer rejected, already enabled [ 351.094138][T15624] netlink: 'syz.3.2674': attribute type 1 has an invalid length. [ 351.168989][T15624] 8021q: adding VLAN 0 to HW filter on device bond10 [ 351.226730][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2680'. [ 351.349390][T15640] bond8 (unregistering): Released all slaves [ 351.816649][T15682] netlink: 'syz.3.2691': attribute type 21 has an invalid length. [ 351.833468][T15682] IPv6: NLM_F_CREATE should be specified when creating new route [ 351.841780][T15682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.849069][T15682] IPv6: NLM_F_CREATE should be set when creating new route [ 351.856488][T15682] IPv6: NLM_F_CREATE should be set when creating new route [ 351.863810][T15682] IPv6: NLM_F_CREATE should be set when creating new route [ 351.877636][T15683] veth1_macvtap: left promiscuous mode [ 351.897378][T15683] macsec0: entered promiscuous mode [ 352.048380][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e8d6400: rx timeout, send abort [ 352.080348][T15698] netlink: 'syz.0.2695': attribute type 1 has an invalid length. [ 352.099202][T15698] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2695'. [ 352.426758][T15722] netlink: 'syz.3.2701': attribute type 1 has an invalid length. [ 352.487832][T15722] bond11: entered promiscuous mode [ 352.508068][T15722] 8021q: adding VLAN 0 to HW filter on device bond11 [ 352.518222][T15727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2702'. [ 352.531534][T15722] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2701'. [ 352.548490][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e8d7c00: rx timeout, send abort [ 352.558348][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e8d6400: abort rx timeout. Force session deactivation [ 352.608332][T15729] 8021q: adding VLAN 0 to HW filter on device bond11 [ 352.623523][T15729] bond11: (slave gre3): The slave device specified does not support setting the MAC address [ 352.644595][T15729] bond11: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 352.673991][T15729] bond11: (slave gre3): making interface the new active one [ 352.691637][T15729] gre3: entered promiscuous mode [ 352.710592][T15729] bond11: (slave gre3): Enslaving as an active interface with an up link [ 352.717814][T15743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2706'. [ 352.754512][T15731] netlink: 'syz.0.2703': attribute type 1 has an invalid length. [ 352.765429][T15731] netlink: 'syz.0.2703': attribute type 1 has an invalid length. [ 352.885993][T15754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2711'. [ 352.912894][T15757] netem: change failed [ 353.056849][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e8d7c00: abort rx timeout. Force session deactivation [ 353.396806][T15783] syz.1.2717: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 353.452158][T15783] CPU: 0 UID: 0 PID: 15783 Comm: syz.1.2717 Not tainted syzkaller #0 PREEMPT(full) [ 353.452191][T15783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 353.452203][T15783] Call Trace: [ 353.452212][T15783] [ 353.452221][T15783] dump_stack_lvl+0x189/0x250 [ 353.452261][T15783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.452289][T15783] ? __pfx__printk+0x10/0x10 [ 353.452311][T15783] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 353.452341][T15783] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 353.452371][T15783] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 353.452403][T15783] warn_alloc+0x214/0x310 [ 353.452441][T15783] ? __pfx_warn_alloc+0x10/0x10 [ 353.452484][T15783] ? __get_vm_area_node+0x28f/0x300 [ 353.452514][T15783] ? xskq_create+0xbf/0x170 [ 353.452545][T15783] __vmalloc_node_range_noprof+0x690/0x12d0 [ 353.452609][T15783] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 353.452644][T15783] ? __kasan_kmalloc+0x93/0xb0 [ 353.452682][T15783] vmalloc_user_noprof+0xad/0xf0 [ 353.452712][T15783] ? xskq_create+0xbf/0x170 [ 353.452741][T15783] xskq_create+0xbf/0x170 [ 353.452772][T15783] xsk_init_queue+0xb0/0x110 [ 353.452802][T15783] xsk_setsockopt+0x57b/0x8d0 [ 353.452831][T15783] ? __pfx_xsk_setsockopt+0x10/0x10 [ 353.452860][T15783] ? __pfx_aa_sk_perm+0x10/0x10 [ 353.452892][T15783] ? aa_sock_opt_perm+0xff/0x1b0 [ 353.452926][T15783] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 353.452947][T15783] ? __pfx_xsk_setsockopt+0x10/0x10 [ 353.452974][T15783] do_sock_setsockopt+0x17c/0x1b0 [ 353.453001][T15783] __x64_sys_setsockopt+0x13f/0x1b0 [ 353.453058][T15783] do_syscall_64+0xfa/0xfa0 [ 353.453086][T15783] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.453116][T15783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.453136][T15783] ? clear_bhb_loop+0x60/0xb0 [ 353.453161][T15783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.453179][T15783] RIP: 0033:0x7fd455f8f6c9 [ 353.453198][T15783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.453215][T15783] RSP: 002b:00007fd456e59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 353.453236][T15783] RAX: ffffffffffffffda RBX: 00007fd4561e5fa0 RCX: 00007fd455f8f6c9 [ 353.453251][T15783] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 353.453263][T15783] RBP: 00007fd456011f91 R08: 0000000000000004 R09: 0000000000000000 [ 353.453275][T15783] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 353.453289][T15783] R13: 00007fd4561e6038 R14: 00007fd4561e5fa0 R15: 00007ffff31231d8 [ 353.453324][T15783] [ 353.454512][T15783] Mem-Info: [ 353.742179][T15783] active_anon:4968 inactive_anon:0 isolated_anon:0 [ 353.742179][T15783] active_file:3018 inactive_file:39958 isolated_file:0 [ 353.742179][T15783] unevictable:768 dirty:86 writeback:0 [ 353.742179][T15783] slab_reclaimable:11643 slab_unreclaimable:130168 [ 353.742179][T15783] mapped:29051 shmem:1362 pagetables:1167 [ 353.742179][T15783] sec_pagetables:0 bounce:0 [ 353.742179][T15783] kernel_misc_reclaimable:0 [ 353.742179][T15783] free:1292397 free_pcp:13488 free_cma:0 [ 353.822225][T15783] Node 0 active_anon:19472kB inactive_anon:0kB active_file:12072kB inactive_file:159632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116204kB dirty:344kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14508kB pagetables:4600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 353.875144][T15799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.914325][T15783] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 353.945833][T15783] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.012049][T15783] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 354.017904][T15783] Node 0 DMA32 free:1258116kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19700kB inactive_anon:0kB active_file:12072kB inactive_file:159632kB unevictable:1536kB writepending:344kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:37036kB local_pcp:18016kB free_cma:0kB [ 354.083163][T15783] lowmem_reserve[]: 0 0 0 0 0 [ 354.087968][T15783] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.142662][T15783] lowmem_reserve[]: 0 0 0 0 0 [ 354.147607][T15783] Node 1 Normal free:3896368kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17568kB local_pcp:10592kB free_cma:0kB [ 354.190423][T15783] lowmem_reserve[]: 0 0 0 0 0 [ 354.199996][T15815] netlink: 'syz.2.2722': attribute type 1 has an invalid length. [ 354.209031][T15783] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 354.226423][T15783] Node 0 DMA32: 1163*4kB (UME) 349*8kB (UM) 159*16kB (UM) 424*32kB (UM) 142*64kB (UME) [ 354.226570][T15813] syzkaller0: entered promiscuous mode [ 354.226592][T15813] syzkaller0: entered allmulticast mode [ 354.252092][T15815] netlink: 'syz.2.2722': attribute type 2 has an invalid length. [ 354.263474][T15783] 24*128kB (UME) 23*256kB (UM) 16*512kB (UM) 6*1024kB (UM) 3*2048kB (UM) 292*4096kB (UME) = 1258116kB [ 354.296583][T15783] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 354.328180][T15783] Node 1 Normal: 182*4kB (UME) 51*8kB (UME) 32*16kB (UME) 136*32kB (UME) 47*64kB (UME) 8*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3896368kB [ 354.355546][T15783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.368205][T15783] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 354.377958][T15783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.387808][T15783] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 354.398492][T15783] 44334 total pagecache pages [ 354.403508][T15783] 0 pages in swap cache [ 354.407691][T15783] Free swap = 124996kB [ 354.416828][T15819] tipc: Enabled bearer , priority 0 [ 354.425886][T15819] syzkaller0: entered promiscuous mode [ 354.431873][T15783] Total swap = 124996kB [ 354.436780][T15819] syzkaller0: entered allmulticast mode [ 354.443557][T15783] 2097051 pages RAM [ 354.447525][T15783] 0 pages HighMem/MovableOnly [ 354.455833][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2726'. [ 354.475740][T15819] tipc: Resetting bearer [ 354.483388][T15783] 424119 pages reserved [ 354.487592][T15783] 0 pages cma reserved [ 354.503719][T15818] tipc: Resetting bearer [ 354.530878][T15818] tipc: Disabling bearer [ 354.589785][T15827] bond8: entered promiscuous mode [ 354.597710][T15827] bond8: entered allmulticast mode [ 354.609833][T15827] 8021q: adding VLAN 0 to HW filter on device bond8 [ 354.678427][T15835] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2731'. [ 354.876790][T15850] lo: MTU too low for tipc bearer [ 354.882145][T15850] tipc: Enabling of bearer rejected, failed to enable media [ 354.916085][T15855] Unsupported ieee802154 address type: 0 [ 354.930495][T15856] netlink: 'syz.1.2736': attribute type 29 has an invalid length. [ 355.135957][T15871] team0: Device vti0 is of different type [ 355.204367][T15877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2742'. [ 355.215503][T15877] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2742'. [ 355.236970][T15877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2742'. [ 355.394636][T15884] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 355.418603][T15884] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 355.580389][T15900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2749'. [ 355.721458][T15912] netlink: 7032 bytes leftover after parsing attributes in process `syz.0.2753'. [ 355.762714][T15912] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2753'. [ 355.832128][T15919] netlink: 'syz.3.2755': attribute type 4 has an invalid length. [ 356.129166][T15936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2760'. [ 356.187137][T15936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2760'. [ 356.898492][T15979] netlink: 'syz.0.2772': attribute type 1 has an invalid length. [ 357.044275][T15988] netlink: 'syz.4.2774': attribute type 29 has an invalid length. [ 357.053160][T15988] netlink: 'syz.4.2774': attribute type 29 has an invalid length. [ 357.443379][T16018] bridge: RTM_NEWNEIGH with unconfigured vlan 7 on bridge0 [ 357.854141][T16040] netlink: 'syz.2.2792': attribute type 10 has an invalid length. [ 357.939693][ T5838] block nbd2: Receive control failed (result -107) [ 357.983165][T16053] !: renamed from dummy0 (while UP) [ 358.219546][T16061] gre1: entered promiscuous mode [ 358.243742][T16061] gre1: entered allmulticast mode [ 358.840801][T16086] syzkaller0: entered promiscuous mode [ 358.862973][T16086] syzkaller0: entered allmulticast mode [ 359.482219][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 360.848189][T16136] gre0: Caught tx_queue_len zero misconfig [ 360.887651][T16154] tipc: Enabling of bearer rejected, already enabled [ 361.083920][T16162] sock: sock_timestamping_bind_phc: sock not bind to device [ 361.092143][T16161] veth11: entered allmulticast mode [ 361.357617][T16179] __nla_validate_parse: 5 callbacks suppressed [ 361.357637][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2824'. [ 361.362825][T16183] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2824'. [ 361.392515][T16184] veth0_to_bond: entered allmulticast mode [ 361.400623][T16186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2827'. [ 361.457197][T16186] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2827'. [ 361.610533][T16199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2832'. [ 361.632873][T16199] openvswitch: netlink: Flow key attr not present in new flow. [ 361.715534][T16204] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 361.724422][T16204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.936314][T16224] netlink: 'syz.1.2841': attribute type 14 has an invalid length. [ 361.944574][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 361.976920][T16224] netlink: 'syz.1.2841': attribute type 14 has an invalid length. [ 361.985683][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 361.992960][T16226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2842'. [ 362.016527][T16226] block nbd3: Unsupported socket: should be TCP or UNIX. [ 362.287516][T16235] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 362.314659][T16235] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 362.346406][T16235] gretap5: entered promiscuous mode [ 362.351741][T16235] gretap5: entered allmulticast mode [ 362.381317][T16251] tipc: Enabling of bearer rejected, failed to enable media [ 362.441321][T16247] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 362.469179][T16258] tipc: Enabling of bearer rejected, failed to enable media [ 362.636245][T16269] netlink: 'syz.2.2852': attribute type 6 has an invalid length. [ 362.668538][T16270] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2848'. [ 362.920434][T16284] tipc: Enabling of bearer rejected, already enabled [ 362.955227][T16284] netlink: 'syz.2.2855': attribute type 10 has an invalid length. [ 363.005008][T16282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.061736][T16286] tipc: Enabled bearer , priority 0 [ 363.071363][T16286] syzkaller0: entered promiscuous mode [ 363.090480][T16286] syzkaller0: entered allmulticast mode [ 363.130927][T16286] tipc: Resetting bearer [ 363.159491][T16285] tipc: Resetting bearer [ 363.199840][T16285] tipc: Disabling bearer [ 363.240892][T16294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2861'. [ 363.548198][T16316] openvswitch: netlink: IP tunnel dst address not specified [ 363.697488][T16321] netlink: zone id is out of range [ 363.710035][T16321] netlink: set zone limit has 4 unknown bytes [ 363.979154][T16330] syzkaller1: entered promiscuous mode [ 363.985751][T16330] syzkaller1: entered allmulticast mode [ 364.400446][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.407024][T16361] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 364.443452][T16361] syzkaller1: linktype set to 823 [ 364.502190][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.508856][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.541913][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.560593][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.567607][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.592374][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.612308][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.633811][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.641602][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.647994][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.656294][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.662778][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.668793][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.675172][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.681194][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.723169][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.734482][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.747416][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.760392][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.770974][T16384] tipc: Enabling of bearer rejected, failed to enable media [ 364.781313][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.810946][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.831630][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.863069][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.886091][T16389] tipc: Enabling of bearer rejected, already enabled [ 364.918776][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.949190][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.973784][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 364.992472][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 365.013367][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 365.047128][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 365.105899][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 365.146361][T16360] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 365.711377][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.753171][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.764088][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.774942][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.786021][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.800474][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.808686][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.821205][T16426] bond9: Removing last ns target with arp_interval on [ 365.828692][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.839318][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.847303][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.008278][T16432] syzkaller0: entered promiscuous mode [ 366.030562][T16432] syzkaller0: entered allmulticast mode [ 366.219549][T16423] chnl_net:caif_netlink_parms(): no params data found [ 366.353405][T16423] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.360659][T16423] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.370950][T16423] bridge_slave_0: entered allmulticast mode [ 366.378892][T16423] bridge_slave_0: entered promiscuous mode [ 366.387629][T16423] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.395075][T16423] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.404761][T16423] bridge_slave_1: entered allmulticast mode [ 366.412653][T16423] bridge_slave_1: entered promiscuous mode [ 366.448329][T16423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.461220][T16423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.499158][T16423] team0: Port device team_slave_0 added [ 366.508778][T16423] team0: Port device team_slave_1 added [ 366.544025][T16423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.551206][T16423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.578133][T16423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.590656][T16423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.597762][T16423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.624251][T16423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.035454][T16423] hsr_slave_0: entered promiscuous mode [ 367.073040][T16423] hsr_slave_1: entered promiscuous mode [ 367.079610][T16423] debugfs: 'hsr0' already exists in 'hsr' [ 367.098976][T16423] Cannot create hsr debugfs directory [ 367.235124][T16481] tipc: Enabled bearer , priority 0 [ 367.269780][T16481] syzkaller0: entered promiscuous mode [ 367.281903][T16481] syzkaller0: entered allmulticast mode [ 367.298512][T16481] tipc: Resetting bearer [ 367.337532][T16478] tipc: Resetting bearer [ 367.365088][T16478] tipc: Disabling bearer [ 367.446641][ T3544] tipc: Resetting bearer [ 367.470619][T16495] __nla_validate_parse: 7 callbacks suppressed [ 367.470639][T16495] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2915'. [ 367.554013][T16495] vlan4: entered allmulticast mode [ 367.559206][T16495] gretap0: entered allmulticast mode [ 367.568761][T16500] netlink: 'syz.1.2916': attribute type 64 has an invalid length. [ 367.585566][T16500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2916'. [ 367.586189][T16506] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2917'. [ 367.595777][T16497] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2915'. [ 367.643570][T16498] netlink: 'syz.1.2916': attribute type 64 has an invalid length. [ 367.655045][T16498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2916'. [ 367.690981][T16423] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.717880][T16423] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.819325][T16423] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.859550][T16423] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.882694][ T5852] Bluetooth: hci3: command tx timeout [ 367.955543][T16530] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.988848][T16423] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.014834][T16525] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2924'. [ 368.035162][T16423] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.137906][T16423] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.158350][T16423] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.192222][T16541] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2926'. [ 368.277707][T16544] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2929'. [ 368.440882][T16423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 368.496057][T16423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 368.524595][T16558] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2934'. [ 368.528132][T16423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 368.555673][T16423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 368.616944][T16560] netlink: 'syz.4.2935': attribute type 2 has an invalid length. [ 368.625212][T16560] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2935'. [ 368.815163][T16423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.899588][T16423] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.927367][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.934635][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.969598][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.976900][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.714946][T16423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.895832][T16622] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.944313][T16423] veth0_vlan: entered promiscuous mode [ 369.964967][ T5852] Bluetooth: hci3: command tx timeout [ 369.976256][T16626] netlink: 'syz.0.2950': attribute type 2 has an invalid length. [ 370.019685][T16622] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.080239][T16622] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.143517][T16423] veth1_vlan: entered promiscuous mode [ 370.233843][T16622] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.301713][T16423] veth0_macvtap: entered promiscuous mode [ 370.325387][T16423] veth1_macvtap: entered promiscuous mode [ 370.369361][T16423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.411837][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.427008][T16423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.449236][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.466116][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.510405][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.574597][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.587300][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.633961][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.649855][T16656] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 370.723805][ T3498] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.848156][T16668] netlink: 'syz.4.2964': attribute type 7 has an invalid length. [ 370.867422][T16668] netlink: 'syz.4.2964': attribute type 8 has an invalid length. [ 370.935304][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.963346][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.072742][T10982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.085020][T10982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.329808][T16693] netlink: 'syz.4.2974': attribute type 1 has an invalid length. [ 371.380948][T16693] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 371.877553][T16713] geneve2: entered promiscuous mode [ 371.902659][T16713] geneve2: entered allmulticast mode [ 371.947964][ T3498] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 371.984032][ T3498] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 372.017617][ T3498] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 372.043354][ T5852] Bluetooth: hci3: command tx timeout [ 372.054365][ T3498] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 372.156122][T16713] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.175836][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.185172][T16713] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 372.209846][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.224938][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.235643][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.249604][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 372.428834][T16713] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.439516][T16713] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 372.546579][ T1105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.559955][ T1105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.698180][T16713] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.709798][T16713] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 372.748835][ T1105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.760357][ T1105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.829227][T16713] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.863645][T16713] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 372.976987][T16752] netlink: 'syz.0.2989': attribute type 4 has an invalid length. [ 372.998274][ T1105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.019555][ T1105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.162928][ T30] audit: type=1107 audit(1762645711.999:4): pid=16761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' )' [ 373.216274][ T1105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.234429][ T1105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.448707][T16726] chnl_net:caif_netlink_parms(): no params data found [ 373.754178][T16726] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.771724][T16726] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.789405][T16726] bridge_slave_0: entered allmulticast mode [ 373.798150][T16726] bridge_slave_0: entered promiscuous mode [ 373.847232][T16726] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.854980][T16726] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.863176][T16726] bridge_slave_1: entered allmulticast mode [ 373.871134][T16726] bridge_slave_1: entered promiscuous mode [ 374.123181][ T5838] Bluetooth: hci3: command tx timeout [ 374.272253][T16819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.362921][ T5838] Bluetooth: hci5: command tx timeout [ 374.481535][ T1105] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 374.494481][ T1105] ip6gretap1 (unregistering): left allmulticast mode [ 374.697870][ T1105] bond8 (unregistering): (slave gretap3): Releasing active interface [ 374.754307][ T1105] bond11 (unregistering): (slave gre3): Releasing backup interface [ 374.762721][ T1105] gre3 (unregistering): left promiscuous mode [ 374.788654][ T1105] dvmrp6 (unregistering): left allmulticast mode [ 374.850770][ T1105] team0: Port device geneve0 removed [ 374.880034][T16834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.896589][T16835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.384613][ T1105] bond0 (unregistering): Released all slaves [ 375.476142][ T1105] bond1 (unregistering): Released all slaves [ 375.562971][ T1105] bond2 (unregistering): Released all slaves [ 375.653394][ T1105] bond3 (unregistering): (slave veth3): Releasing active interface [ 375.663942][ T1105] bond3 (unregistering): Released all slaves [ 375.758725][ T1105] bond4 (unregistering): Released all slaves [ 375.849339][ T1105] bond5 (unregistering): (slave veth9): Releasing active interface [ 375.859447][ T1105] bond5 (unregistering): Released all slaves [ 375.875281][ T1105] bond6 (unregistering): Released all slaves [ 375.966485][ T1105] bond7 (unregistering): (slave veth13): Releasing active interface [ 375.977741][ T1105] bond7 (unregistering): Released all slaves [ 375.993349][ T1105] bond8 (unregistering): Released all slaves [ 376.086367][ T1105] bond9 (unregistering): (slave veth15): Releasing active interface [ 376.097480][ T1105] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 376.108908][ T1105] bond9 (unregistering): (slave veth17): Releasing active interface [ 376.119124][ T1105] bond9 (unregistering): Released all slaves [ 376.132152][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 376.213229][ T1105] bond10 (unregistering): Released all slaves [ 376.303683][ T1105] bond11 (unregistering): Released all slaves [ 376.333390][T16726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.351668][T16726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.448359][ T5838] Bluetooth: hci5: command tx timeout [ 376.483466][T16726] team0: Port device team_slave_0 added [ 376.493161][T16726] team0: Port device team_slave_1 added [ 376.617889][T16726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.625237][T16726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.652624][T16726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.666018][T16854] tipc: Enabled bearer , priority 0 [ 376.673719][T16726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.680854][T16726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.709607][T16726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.742939][T16850] syzkaller0: entered promiscuous mode [ 376.748512][T16850] syzkaller0: entered allmulticast mode [ 376.764069][T16857] : renamed from hsr0 [ 376.877870][T16850] tipc: Resetting bearer [ 376.903597][T16726] hsr_slave_0: entered promiscuous mode [ 376.920801][T16726] hsr_slave_1: entered promiscuous mode [ 376.933591][T16849] tipc: Resetting bearer [ 376.988985][T16849] tipc: Disabling bearer [ 377.089446][T16869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.104732][ T3544] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 377.113290][ T3544] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 377.146696][ T3544] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 377.168331][ T3544] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 377.244614][ T6541] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 377.264207][ T6541] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 377.378436][ T3544] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 377.405703][ T3544] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 377.472469][T16885] openvswitch: netlink: Unknown key attributes 2 [ 377.730473][T16907] __nla_validate_parse: 14 callbacks suppressed [ 377.730518][T16907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3026'. [ 377.922436][T16915] veth1_macvtap: left promiscuous mode [ 377.928152][T16915] macsec0: entered promiscuous mode [ 377.934343][T16915] macsec0: entered allmulticast mode [ 377.953915][T16916] macsec0: left promiscuous mode [ 377.959131][T16916] macsec0: left allmulticast mode [ 378.094692][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3031'. [ 378.241106][ T1105] 9: left promiscuous mode [ 378.417550][ T1105] tipc: Disabling bearer [ 378.425636][ T1105] tipc: Left network mode [ 378.522195][ T5838] Bluetooth: hci5: command tx timeout [ 378.681420][ T1105] hsr_slave_0: left promiscuous mode [ 378.696487][ T1105] hsr_slave_1: left promiscuous mode [ 378.726114][ T1105] vlan0: left allmulticast mode [ 378.731032][ T1105] veth0_vlan: left allmulticast mode [ 378.736595][ T1105] vlan0: left promiscuous mode [ 378.742207][ T1105] veth0_macvtap: left promiscuous mode [ 378.748104][ T1105] veth1_vlan: left allmulticast mode [ 378.754358][ T1105] veth1_vlan: left promiscuous mode [ 378.759847][ T1105] veth0_vlan: left promiscuous mode [ 378.996810][T16965] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3039'. [ 379.073929][T16970] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3040'. [ 379.131784][T16975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3040'. [ 380.051903][T16726] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 380.107369][T16976] vlan2: entered promiscuous mode [ 380.119897][T16976] vlan2: entered allmulticast mode [ 380.142032][T16976] hsr_slave_1: entered allmulticast mode [ 380.205877][T16726] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 380.286702][T16726] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 380.368685][T16726] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.536709][T17007] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3049'. [ 380.603896][ T5838] Bluetooth: hci5: command tx timeout [ 380.690297][T16726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.719603][ T1105] IPVS: stop unused estimator thread 0... [ 380.786528][T16726] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.808361][T17022] xt_l2tp: v2 doesn't support IP mode [ 380.833541][T17024] netlink: 'syz.0.3051': attribute type 39 has an invalid length. [ 380.881710][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.888980][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.935391][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.942760][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.994017][T17029] netlink: 'syz.2.3056': attribute type 4 has an invalid length. [ 381.006049][T17029] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3056'. [ 381.140861][T17033] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3057'. [ 381.204467][T17035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3058'. [ 381.396348][T16726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.479766][T17051] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 381.513077][T16726] veth0_vlan: entered promiscuous mode [ 381.522090][T17052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3063'. [ 381.548750][T16726] veth1_vlan: entered promiscuous mode [ 381.593449][T17055] Unsupported ieee802154 address type: 0 [ 381.700949][T16726] veth0_macvtap: entered promiscuous mode [ 381.742320][T16726] veth1_macvtap: entered promiscuous mode [ 381.768923][T16726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.795026][T16726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.830105][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.844037][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.865049][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.893232][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.035012][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.072164][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.144087][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.169747][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.196779][T17087] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.314302][T17083] bond0: left allmulticast mode [ 382.408852][T17083] macsec0: left promiscuous mode [ 382.428251][T17083] bond1: left promiscuous mode [ 382.434571][T17083] bond1: left allmulticast mode [ 382.453039][T17083] A link change request failed with some changes committed already. Interface macvlan2 may have been left with an inconsistent configuration, please check. [ 382.654607][T17101] netlink: 'syz.1.3076': attribute type 1 has an invalid length. [ 382.691329][T17101] netlink: 'syz.1.3076': attribute type 1 has an invalid length. [ 382.714470][T17101] netlink: 'syz.1.3076': attribute type 1 has an invalid length. [ 382.772388][T17101] netlink: 'syz.1.3076': attribute type 1 has an invalid length. [ 382.780493][T17101] netlink: 'syz.1.3076': attribute type 1 has an invalid length. [ 382.815011][T17112] __nla_validate_parse: 4 callbacks suppressed [ 382.815030][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2976'. [ 382.846039][T17101] netlink: 'syz.1.3076': attribute type 1 has an invalid length. [ 382.876370][T17101] netlink: 'syz.1.3076': attribute type 1 has an invalid length. [ 382.917440][T17101] netlink: 'syz.1.3076': attribute type 1 has an invalid length. [ 382.928056][T17112] geneve2: entered promiscuous mode [ 383.184373][T17119] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3079'. [ 383.275195][T17122] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 383.311589][T17122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.335515][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3082'. [ 383.350062][T17120] bond2: option mode: unable to set because the bond device has slaves [ 383.377233][T17120] bond2: option mode: unable to set because the bond device has slaves [ 383.408299][T17122] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 383.443213][T17122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.463846][T17122] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 383.482461][T17122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.482473][ T5838] Bluetooth: hci0: command tx timeout [ 383.547885][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 383.558966][T17129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3083'. [ 383.563591][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 383.594199][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 383.601231][T17120] bond2: option mode: unable to set because the bond device has slaves [ 383.611147][T17122] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 383.630158][T17122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.653238][T17122] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 383.667306][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 383.676579][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.680260][T17122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.722542][T17120] bond2: option mode: unable to set because the bond device has slaves [ 383.758691][T17122] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 383.772975][T17122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.806008][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 383.820817][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.853072][T17120] bond2: option mode: unable to set because the bond device has slaves [ 383.890602][T17120] bond2: option mode: unable to set because the bond device has slaves [ 383.947743][T17122] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 383.969569][T17143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3087'. [ 383.979237][T17122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.979246][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3087'. [ 384.008298][ T36] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 384.019387][ T36] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 384.030778][ T36] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 384.041727][ T36] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 384.061237][T17120] bond2: option mode: unable to set because the bond device has slaves [ 384.147465][ T36] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 384.195686][ T36] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 384.211371][ T36] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 384.224314][ T36] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 384.298384][T17155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3091'. [ 384.380565][ T36] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 384.400899][ T36] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 384.413781][T17091] IPVS: starting estimator thread 0... [ 384.413947][ T36] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 384.430914][ T36] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 384.503899][T17168] IPVS: using max 29 ests per chain, 69600 per kthread [ 384.566209][ T36] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 384.576760][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 384.584040][ T36] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 384.612779][ T36] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 384.630955][ T36] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 384.915365][T17128] chnl_net:caif_netlink_parms(): no params data found [ 385.275076][ T36] veth0_to_bridge: left allmulticast mode [ 385.295952][ T36] veth0_to_bridge: left promiscuous mode [ 385.304035][ T36] bridge0: port 1(veth0_to_bridge) entered disabled state [ 385.355390][T17224] openvswitch: netlink: IP tunnel dst address not specified [ 385.688622][ T36] bond2 (unregistering): (slave gretap2): Releasing active interface [ 385.697205][ T36] gretap2 (unregistering): left promiscuous mode [ 385.704478][ T36] gretap2 (unregistering): left allmulticast mode [ 385.722735][ T5838] Bluetooth: hci1: command tx timeout [ 385.838320][ T36] dvmrp6 (unregistering): left allmulticast mode [ 385.859346][ T36] dvmrp0 (unregistering): left allmulticast mode [ 385.896228][ T36] bond4 (unregistering): (slave geneve3): Releasing active interface [ 386.314392][ T36] bond0 (unregistering): Released all slaves [ 386.328577][ T36] bond1 (unregistering): Released all slaves [ 386.432565][ T36] bond2 (unregistering): Released all slaves [ 386.524567][ T36] bond3 (unregistering): Released all slaves [ 386.538933][ T36] bond4 (unregistering): Released all slaves [ 386.553527][ T36] bond5 (unregistering): Released all slaves [ 386.567664][ T36] bond6 (unregistering): Released all slaves [ 386.587532][ T36] bond7 (unregistering): Released all slaves [ 386.681443][ T36] bond8 (unregistering): Released all slaves [ 386.696330][ T36] bond9 (unregistering): Released all slaves [ 386.710358][ T36] bond10 (unregistering): Released all slaves [ 386.755987][T17128] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.764268][T17128] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.771569][T17128] bridge_slave_0: entered allmulticast mode [ 386.781787][T17128] bridge_slave_0: entered promiscuous mode [ 386.801473][T17128] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.820738][T17128] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.839171][T17128] bridge_slave_1: entered allmulticast mode [ 386.869800][T17128] bridge_slave_1: entered promiscuous mode [ 386.960479][ T36] : left promiscuous mode [ 387.094261][T17244] validate_nla: 63 callbacks suppressed [ 387.094282][T17244] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 387.114967][T17244] netlink: 16110 bytes leftover after parsing attributes in process `syz.1.3112'. [ 387.293539][ T36] tipc: Disabling bearer [ 387.305602][ T36] tipc: Left network mode [ 387.327082][T17128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.355974][T17128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.419923][T17252] bond1: Removing last arp target with arp_interval on [ 387.451151][T17258] SET target dimension over the limit! [ 387.802481][ T5838] Bluetooth: hci1: command tx timeout [ 387.825891][T17267] veth0: entered promiscuous mode [ 387.848195][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3120'. [ 387.857826][T17267] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3120'. [ 387.866169][T17270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3122'. [ 387.907855][T17128] team0: Port device team_slave_0 added [ 387.913951][T17274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3123'. [ 387.920626][T17128] team0: Port device team_slave_1 added [ 387.929654][T17274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3123'. [ 387.932948][T17276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3122'. [ 388.054573][T17128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.061838][T17128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.121469][T17128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.164008][T17266] veth0: left promiscuous mode [ 388.170961][T17128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.182756][T17128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.209136][T17128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.239281][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3127'. [ 388.283509][T17291] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3128'. [ 388.314680][T17291] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3128'. [ 388.451412][T17302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3131'. [ 388.502450][T17128] hsr_slave_0: entered promiscuous mode [ 388.509152][T17128] hsr_slave_1: entered promiscuous mode [ 388.516072][T17128] debugfs: 'hsr0' already exists in 'hsr' [ 388.526463][T17128] Cannot create hsr debugfs directory [ 388.589871][ T36] hsr_slave_0: left promiscuous mode [ 388.597336][ T36] hsr_slave_1: left promiscuous mode [ 388.607014][ T36] veth0_macvtap: left promiscuous mode [ 388.763889][ T36] pimreg (unregistering): left allmulticast mode [ 388.811092][ T36] pimreg3 (unregistering): left allmulticast mode [ 388.921370][ T36] vlan1 (unregistering): left allmulticast mode [ 388.928886][ T36] veth0_vlan (unregistering): left allmulticast mode [ 389.509054][T17320] netlink: 'syz.2.3136': attribute type 25 has an invalid length. [ 389.612297][T17328] netlink: 'syz.3.3137': attribute type 1 has an invalid length. [ 389.882228][ T5838] Bluetooth: hci1: command tx timeout [ 390.062445][T17351] tipc: Started in network mode [ 390.067479][T17351] tipc: Node identity d266f840aaf5, cluster identity 4711 [ 390.078154][T17351] tipc: Enabled bearer , priority 0 [ 390.086933][T17351] syzkaller0: entered promiscuous mode [ 390.097593][T17351] syzkaller0: entered allmulticast mode [ 390.138593][T17351] tipc: Resetting bearer [ 390.182466][T17350] tipc: Resetting bearer [ 390.220067][T17350] tipc: Disabling bearer [ 390.479179][T17128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 390.491128][T17128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 390.505556][T17128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 390.519914][T17128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 390.651601][T17128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.694256][T17128] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.709970][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.717255][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.783677][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.790953][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.251560][T17128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.411204][T17420] netlink: 'syz.0.3162': attribute type 32 has an invalid length. [ 391.411783][T17421] netlink: 'syz.1.3160': attribute type 4 has an invalid length. [ 391.484775][T17420] bond11: Setting coupled_control to off (0) [ 391.739856][T17128] veth0_vlan: entered promiscuous mode [ 391.769502][T17128] veth1_vlan: entered promiscuous mode [ 391.880902][T17128] veth0_macvtap: entered promiscuous mode [ 391.928695][T17128] veth1_macvtap: entered promiscuous mode [ 391.962407][ T5838] Bluetooth: hci1: command tx timeout [ 391.996111][T17128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.025961][T17128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.040472][ T6541] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.074766][ T6541] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.107706][ T6541] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.136867][ T6541] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.334533][T17469] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 392.369124][T17469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.427253][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.447890][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.550983][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.569594][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.582720][T17483] netlink: 'syz.2.3179': attribute type 5 has an invalid length. [ 392.656404][T17485] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 392.784149][T17488] netlink: 'syz.4.3078': attribute type 27 has an invalid length. [ 392.831402][T17488] xt_policy: neither incoming nor outgoing policy selected [ 393.187522][T17517] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 393.216773][T17517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.419594][T17525] netlink: 'syz.4.3191': attribute type 1 has an invalid length. [ 393.569722][T17529] veth3: entered promiscuous mode [ 393.595138][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 393.606959][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.620399][T17536] 8021q: VLANs not supported on ip6gre0 [ 393.626631][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.639395][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.650574][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 393.680935][T17541] x_tables: duplicate underflow at hook 2 [ 393.705694][T17537] tunl0: entered promiscuous mode [ 393.731001][T17537] netlink: 'syz.0.3194': attribute type 3 has an invalid length. [ 393.762450][T17537] __nla_validate_parse: 8 callbacks suppressed [ 393.762471][T17537] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3194'. [ 393.815779][T17546] netlink: 'syz.2.3197': attribute type 1 has an invalid length. [ 394.365215][T17579] netlink: 'syz.4.3208': attribute type 2 has an invalid length. [ 394.424687][T17538] chnl_net:caif_netlink_parms(): no params data found [ 394.657870][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3210'. [ 394.807988][T17586] syzkaller0: create flow: hash 1364450092 index 1 [ 394.838717][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3216'. [ 394.889955][T17604] netlink: 'syz.3.3214': attribute type 39 has an invalid length. [ 394.930132][T17538] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.947737][T17538] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.959381][T17538] bridge_slave_0: entered allmulticast mode [ 394.967940][T17538] bridge_slave_0: entered promiscuous mode [ 394.977466][ T3582] syzkaller0: tun_net_xmit 76 [ 394.983452][ T3582] syzkaller0: tun_net_xmit 48 [ 395.004592][T12054] syzkaller0: tun_net_xmit 76 [ 395.090588][T17538] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.098273][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.109116][T17613] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3219'. [ 395.112420][ T5981] syzkaller0: tun_net_xmit 76 [ 395.118844][T17538] bridge_slave_1: entered allmulticast mode [ 395.130961][T17538] bridge_slave_1: entered promiscuous mode [ 395.144379][T17585] syzkaller0: delete flow: hash 1364450092 index 1 [ 395.726002][ T5852] Bluetooth: hci2: command tx timeout [ 395.965752][T10982] wlan1: Trigger new scan to find an IBSS to join [ 396.395891][T17615] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 396.476825][T17538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.514485][T17538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.666363][T17631] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3223'. [ 396.694144][T17538] team0: Port device team_slave_0 added [ 396.726982][T17633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3225'. [ 396.728340][T17538] team0: Port device team_slave_1 added [ 396.909373][T17538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.921915][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.956376][T17538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.012307][T17538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.019304][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.088690][T17538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.255683][T17670] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3233'. [ 397.311070][T17538] hsr_slave_0: entered promiscuous mode [ 397.318222][T17538] hsr_slave_1: entered promiscuous mode [ 397.326221][T17538] debugfs: 'hsr0' already exists in 'hsr' [ 397.332631][T17538] Cannot create hsr debugfs directory [ 397.390967][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'. [ 397.434198][T17677] netlink: 'syz.0.3236': attribute type 11 has an invalid length. [ 397.445589][T17677] netlink: 'syz.0.3236': attribute type 11 has an invalid length. [ 397.474258][T17677] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3236'. [ 397.536004][T17676] hsr_slave_0 (unregistering): left promiscuous mode [ 397.803457][ T5852] Bluetooth: hci2: command tx timeout [ 398.986467][T17695] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3241'. [ 399.003112][ T3544] wlan1: Trigger new scan to find an IBSS to join [ 399.073985][T17700] netlink: 'syz.2.3242': attribute type 4 has an invalid length. [ 399.087419][T17696] netlink: 'syz.4.3241': attribute type 2 has an invalid length. [ 399.096255][T17701] netlink: 'syz.4.3241': attribute type 2 has an invalid length. [ 399.157766][T17704] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3243'. [ 399.197755][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3243'. [ 399.245831][T17708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3245'. [ 399.271145][T17538] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.302090][T17538] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 399.346895][T17713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3247'. [ 399.526392][T17538] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.538401][T17721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3247'. [ 399.549584][T17538] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 399.799041][T17538] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.828527][T17538] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 399.882320][ T5852] Bluetooth: hci2: command tx timeout [ 399.988700][T17538] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.000093][T17538] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 400.024813][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3257'. [ 400.274637][T17538] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 400.311841][T17538] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 400.329029][T17538] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 400.343339][T17538] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 400.626181][T17538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.653005][T17538] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.668887][T10982] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.668974][T17800] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3270'. [ 400.676157][T10982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.701968][T10982] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.709180][T10982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.861668][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3272'. [ 401.014974][T17538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.077271][T17538] veth0_vlan: entered promiscuous mode [ 401.094461][T17538] veth1_vlan: entered promiscuous mode [ 401.124663][T17538] veth0_macvtap: entered promiscuous mode [ 401.134939][T17538] veth1_macvtap: entered promiscuous mode [ 401.158383][T17538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.175768][T17538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.191612][T10982] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.200881][T10982] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.211671][T10982] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.223318][T10982] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.464616][ T3582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.492126][ T3582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.513167][T17817] SET target dimension over the limit! [ 401.521590][T17819] netlink: 'syz.2.3275': attribute type 1 has an invalid length. [ 401.535996][T17817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3274'. [ 401.548053][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.587079][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.964557][ T5852] Bluetooth: hci2: command tx timeout [ 401.966130][ T3544] wlan1: Trigger new scan to find an IBSS to join [ 402.112753][T17859] IPv6: sit1: Disabled Multicast RS [ 402.599789][T17878] 8021q: VLANs not supported on sit0 [ 402.817452][T17897] Bluetooth: MGMT ver 1.23 [ 402.944793][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 402.955347][T17908] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 402.967032][T17908] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 402.976374][ T3582] wlan1: Creating new IBSS network, BSSID 0a:2d:79:72:3d:16 [ 402.988342][T17908] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 402.996302][T17908] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 403.268607][T17920] netlink: 'syz.3.3302': attribute type 29 has an invalid length. [ 405.082230][ T5852] Bluetooth: hci0: command tx timeout [ 406.210788][T17920] netlink: 'syz.3.3302': attribute type 29 has an invalid length. [ 406.427783][T17907] chnl_net:caif_netlink_parms(): no params data found [ 406.555645][T17958] __nla_validate_parse: 9 callbacks suppressed [ 406.555660][T17958] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3310'. [ 406.580478][T17957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3311'. [ 406.590725][T17957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3311'. [ 406.599874][T17957] netlink: 'syz.3.3311': attribute type 6 has an invalid length. [ 406.599957][T17961] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 406.701084][T17957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3311'. [ 406.714819][T17907] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.715290][T17958] netlink: 'syz.1.3310': attribute type 11 has an invalid length. [ 406.726840][T17907] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.752127][T17957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3311'. [ 406.754143][T17907] bridge_slave_0: entered allmulticast mode [ 406.767597][T17957] netlink: 'syz.3.3311': attribute type 6 has an invalid length. [ 406.784209][T17972] ieee802154 phy0 wpan0: encryption failed: -22 [ 406.825303][T17907] bridge_slave_0: entered promiscuous mode [ 406.840109][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.857969][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.884551][T17907] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.894371][T17907] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.901704][T17907] bridge_slave_1: entered allmulticast mode [ 406.910008][T17907] bridge_slave_1: entered promiscuous mode [ 406.919738][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.933760][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.015914][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3315'. [ 407.045987][T17983] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3317'. [ 407.083456][T17983] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3317'. [ 407.094758][T17907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.110387][T17907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.163981][ T5852] Bluetooth: hci0: command tx timeout [ 407.249779][T17907] team0: Port device team_slave_0 added [ 407.268773][T17907] team0: Port device team_slave_1 added [ 407.373935][T17907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.381546][T17907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.447542][T17907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.478651][T17907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.492824][T17907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.529585][T17907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.557472][T18007] tipc: Started in network mode [ 407.568882][T18007] tipc: Node identity 428ac95ec9c1, cluster identity 4711 [ 407.576552][T18007] tipc: Enabled bearer , priority 0 [ 407.594527][T18007] syzkaller0: entered promiscuous mode [ 407.600844][T18007] syzkaller0: entered allmulticast mode [ 407.667289][T17907] hsr_slave_0: entered promiscuous mode [ 407.671298][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3325'. [ 407.681632][T17907] hsr_slave_1: entered promiscuous mode [ 407.690605][T17907] debugfs: 'hsr0' already exists in 'hsr' [ 407.697492][T17907] Cannot create hsr debugfs directory [ 407.705284][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'. [ 407.788966][T18007] tipc: Resetting bearer [ 407.797542][T18006] tipc: Resetting bearer [ 407.815595][T18006] tipc: Disabling bearer [ 407.828968][T18016] tipc: Started in network mode [ 407.834889][T18016] tipc: Node identity 325c34295c48, cluster identity 4711 [ 407.842457][T18016] tipc: Enabled bearer , priority 0 [ 407.901159][T18014] syzkaller0: entered promiscuous mode [ 407.907423][T18014] syzkaller0: entered allmulticast mode [ 408.018416][T18024] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 408.036194][T18015] tipc: Resetting bearer [ 408.067457][T18015] tipc: Disabling bearer [ 408.122583][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 408.288722][T18037] Unsupported ieee802154 address type: 0 [ 408.315846][T17907] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.429040][T17907] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.500630][T17907] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.610669][T17907] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.637312][T18051] vlan2: entered promiscuous mode [ 408.642543][T18051] bond0: entered promiscuous mode [ 408.647688][T18051] bond_slave_0: entered promiscuous mode [ 408.662154][T18051] bond_slave_1: entered promiscuous mode [ 408.883114][T17907] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 408.916020][T17907] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 408.921701][T18060] delete_channel: no stack [ 408.945170][T17907] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 408.996342][T17907] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 409.242637][ T5852] Bluetooth: hci0: command tx timeout [ 409.402453][ C0] ------------[ cut here ]------------ [ 409.408363][ C0] ODEBUG: free active (active state 0) object: ffff888052a13090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 409.422057][ C0] WARNING: CPU: 0 PID: 17128 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 409.431685][ C0] Modules linked in: [ 409.435988][ C0] CPU: 0 UID: 0 PID: 17128 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 409.445620][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 409.455775][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 409.461640][ C0] Code: 4c 89 ff e8 87 e4 92 fd 4d 8b 0f 48 c7 c7 00 11 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 3a 49 f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 37 3b ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 409.481337][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 409.487479][ C0] RAX: c5c22391d9bb6d00 RBX: dffffc0000000000 RCX: ffff888032909e40 [ 409.495543][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 409.503629][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 409.511643][ C0] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffffffff8a3924f0 [ 409.519696][ C0] R13: ffffffff8bbf1280 R14: ffff888052a13090 R15: ffffffff8b6cf7a0 [ 409.527740][ C0] FS: 000055557e103500(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 409.536743][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.543383][ C0] CR2: 00007f93cd5156c0 CR3: 00000000275a6000 CR4: 00000000003526f0 [ 409.551377][ C0] Call Trace: [ 409.554727][ C0] [ 409.557630][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 409.563271][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 409.568432][ C0] kfree+0x115/0x6d0 [ 409.572461][ C0] rose_timer_expiry+0x4cb/0x600 [ 409.577444][ C0] call_timer_fn+0x17e/0x5f0 [ 409.582079][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 409.587556][ C0] ? call_timer_fn+0xbe/0x5f0 [ 409.592300][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 409.597469][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.602756][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.608002][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 409.613576][ C0] __run_timer_base+0x61a/0x860 [ 409.618501][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 409.623980][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 409.630294][ C0] run_timer_softirq+0xb7/0x180 [ 409.635246][ C0] handle_softirqs+0x286/0x870 [ 409.640058][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 409.644924][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 409.650279][ C0] __irq_exit_rcu+0xca/0x1f0 [ 409.654950][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 409.660196][ C0] irq_exit_rcu+0x9/0x30 [ 409.664520][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 409.670198][ C0] [ 409.673209][ C0] [ 409.676193][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.682257][ C0] RIP: 0010:preempt_count_sub+0x65/0x170 [ 409.687936][ C0] Code: ff ff ff 7f 39 cf 7f 2a 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 5e 65 8b 05 24 5e de 10 f7 df 65 01 3d 1b 5e de 10 <5b> 5d e9 84 52 b9 09 cc 90 e8 8d 2f f6 02 85 c0 74 39 48 c7 c0 94 [ 409.707630][ C0] RSP: 0018:ffffc90002fc71c8 EFLAGS: 00000297 [ 409.713800][ C0] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 409.721822][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 409.729896][ C0] RBP: ffffc90002fc7450 R08: ffff8880b88401c3 R09: 1ffff11017108038 [ 409.737961][ C0] R10: dffffc0000000000 R11: ffffed1017108039 R12: dffffc0000000000 [ 409.746030][ C0] R13: ffff88813fffc300 R14: ffff8880b88401c0 R15: ffff88813fffbb80 [ 409.754111][ C0] get_page_from_freelist+0x934/0x2440 [ 409.759657][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 409.765624][ C0] ? prepare_alloc_pages+0x213/0x610 [ 409.770961][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 409.776906][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 409.783308][ C0] ? policy_nodemask+0x27c/0x720 [ 409.788289][ C0] ? __lock_acquire+0xab9/0xd20 [ 409.793241][ C0] alloc_pages_mpol+0x232/0x4a0 [ 409.798140][ C0] alloc_pages_noprof+0xa9/0x190 [ 409.803190][ C0] __pud_alloc+0x3f/0x450 [ 409.807568][ C0] copy_page_range+0xcb0/0x1270 [ 409.812510][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 409.817841][ C0] dup_mmap+0xf4c/0x1b10 [ 409.822194][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 409.826921][ C0] ? mm_init+0xd74/0xfa0 [ 409.831202][ C0] copy_mm+0x13c/0x4b0 [ 409.835340][ C0] copy_process+0x1706/0x3c00 [ 409.840064][ C0] ? copy_process+0x97f/0x3c00 [ 409.844905][ C0] ? __pfx_copy_process+0x10/0x10 [ 409.849997][ C0] kernel_clone+0x21e/0x840 [ 409.854574][ C0] ? css_rstat_updated+0x23a/0x4f0 [ 409.859710][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 409.864809][ C0] ? count_memcg_event_mm+0x21/0x260 [ 409.870121][ C0] __x64_sys_clone+0x18b/0x1e0 [ 409.874933][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 409.880248][ C0] ? do_user_addr_fault+0xc85/0x1380 [ 409.885605][ C0] ? do_syscall_64+0xbe/0xfa0 [ 409.890365][ C0] do_syscall_64+0xfa/0xfa0 [ 409.894942][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.900199][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.906317][ C0] ? clear_bhb_loop+0x60/0xb0 [ 409.911023][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.916976][ C0] RIP: 0033:0x7f93cc785e13 [ 409.921403][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 409.941077][ C0] RSP: 002b:00007ffed50b13d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 409.949601][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f93cc785e13 [ 409.957628][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 409.965749][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 409.973797][ C0] R10: 000055557e1037d0 R11: 0000000000000246 R12: 0000000000000000 [ 409.981810][ C0] R13: 00000000000927c0 R14: 0000000000063e84 R15: 00007ffed50b1570 [ 409.989894][ C0] [ 409.992986][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 410.000286][ C0] CPU: 0 UID: 0 PID: 17128 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 410.009857][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 410.019925][ C0] Call Trace: [ 410.023271][ C0] [ 410.026132][ C0] dump_stack_lvl+0x99/0x250 [ 410.030736][ C0] ? __asan_memcpy+0x40/0x70 [ 410.035341][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.040571][ C0] ? __pfx__printk+0x10/0x10 [ 410.045277][ C0] vpanic+0x237/0x6d0 [ 410.049275][ C0] ? __pfx_vpanic+0x10/0x10 [ 410.053826][ C0] panic+0xb9/0xc0 [ 410.057595][ C0] ? __pfx_panic+0x10/0x10 [ 410.062062][ C0] __warn+0x31b/0x4b0 [ 410.066120][ C0] ? debug_print_object+0x16b/0x1e0 [ 410.071360][ C0] ? debug_print_object+0x16b/0x1e0 [ 410.076578][ C0] report_bug+0x2be/0x4f0 [ 410.080924][ C0] ? debug_print_object+0x16b/0x1e0 [ 410.086135][ C0] ? debug_print_object+0x16b/0x1e0 [ 410.091377][ C0] ? debug_print_object+0x16d/0x1e0 [ 410.096727][ C0] handle_bug+0x84/0x160 [ 410.100989][ C0] exc_invalid_op+0x1a/0x50 [ 410.105512][ C0] asm_exc_invalid_op+0x1a/0x20 [ 410.110384][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 410.116213][ C0] Code: 4c 89 ff e8 87 e4 92 fd 4d 8b 0f 48 c7 c7 00 11 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 3a 49 f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 37 3b ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 410.135842][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 410.141938][ C0] RAX: c5c22391d9bb6d00 RBX: dffffc0000000000 RCX: ffff888032909e40 [ 410.149943][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 410.157928][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 410.165911][ C0] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffffffff8a3924f0 [ 410.173889][ C0] R13: ffffffff8bbf1280 R14: ffff888052a13090 R15: ffffffff8b6cf7a0 [ 410.181891][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 410.187575][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 410.193181][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 410.198328][ C0] kfree+0x115/0x6d0 [ 410.202251][ C0] rose_timer_expiry+0x4cb/0x600 [ 410.207221][ C0] call_timer_fn+0x17e/0x5f0 [ 410.211826][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 410.217296][ C0] ? call_timer_fn+0xbe/0x5f0 [ 410.221976][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 410.227116][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.232335][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.237542][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 410.243018][ C0] __run_timer_base+0x61a/0x860 [ 410.247900][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 410.253296][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 410.259597][ C0] run_timer_softirq+0xb7/0x180 [ 410.264471][ C0] handle_softirqs+0x286/0x870 [ 410.269250][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 410.274039][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 410.279377][ C0] __irq_exit_rcu+0xca/0x1f0 [ 410.283994][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 410.289216][ C0] irq_exit_rcu+0x9/0x30 [ 410.293475][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 410.299132][ C0] [ 410.302076][ C0] [ 410.305029][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 410.311026][ C0] RIP: 0010:preempt_count_sub+0x65/0x170 [ 410.316675][ C0] Code: ff ff ff 7f 39 cf 7f 2a 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 5e 65 8b 05 24 5e de 10 f7 df 65 01 3d 1b 5e de 10 <5b> 5d e9 84 52 b9 09 cc 90 e8 8d 2f f6 02 85 c0 74 39 48 c7 c0 94 [ 410.336289][ C0] RSP: 0018:ffffc90002fc71c8 EFLAGS: 00000297 [ 410.342371][ C0] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 410.350349][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 410.358329][ C0] RBP: ffffc90002fc7450 R08: ffff8880b88401c3 R09: 1ffff11017108038 [ 410.366313][ C0] R10: dffffc0000000000 R11: ffffed1017108039 R12: dffffc0000000000 [ 410.374297][ C0] R13: ffff88813fffc300 R14: ffff8880b88401c0 R15: ffff88813fffbb80 [ 410.382305][ C0] get_page_from_freelist+0x934/0x2440 [ 410.387824][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 410.393729][ C0] ? prepare_alloc_pages+0x213/0x610 [ 410.399028][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 410.404857][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 410.411206][ C0] ? policy_nodemask+0x27c/0x720 [ 410.416152][ C0] ? __lock_acquire+0xab9/0xd20 [ 410.421013][ C0] alloc_pages_mpol+0x232/0x4a0 [ 410.425875][ C0] alloc_pages_noprof+0xa9/0x190 [ 410.430824][ C0] __pud_alloc+0x3f/0x450 [ 410.435175][ C0] copy_page_range+0xcb0/0x1270 [ 410.440057][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 410.445365][ C0] dup_mmap+0xf4c/0x1b10 [ 410.449639][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 410.454349][ C0] ? mm_init+0xd74/0xfa0 [ 410.458611][ C0] copy_mm+0x13c/0x4b0 [ 410.462692][ C0] copy_process+0x1706/0x3c00 [ 410.467396][ C0] ? copy_process+0x97f/0x3c00 [ 410.472176][ C0] ? __pfx_copy_process+0x10/0x10 [ 410.477225][ C0] kernel_clone+0x21e/0x840 [ 410.481744][ C0] ? css_rstat_updated+0x23a/0x4f0 [ 410.486868][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 410.491915][ C0] ? count_memcg_event_mm+0x21/0x260 [ 410.497228][ C0] __x64_sys_clone+0x18b/0x1e0 [ 410.502013][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 410.507344][ C0] ? do_user_addr_fault+0xc85/0x1380 [ 410.512644][ C0] ? do_syscall_64+0xbe/0xfa0 [ 410.517343][ C0] do_syscall_64+0xfa/0xfa0 [ 410.521859][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.527084][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.533160][ C0] ? clear_bhb_loop+0x60/0xb0 [ 410.537851][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.543751][ C0] RIP: 0033:0x7f93cc785e13 [ 410.548175][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 410.567793][ C0] RSP: 002b:00007ffed50b13d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 410.576225][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f93cc785e13 [ 410.584206][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 410.592181][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 410.600163][ C0] R10: 000055557e1037d0 R11: 0000000000000246 R12: 0000000000000000 [ 410.608146][ C0] R13: 00000000000927c0 R14: 0000000000063e84 R15: 00007ffed50b1570 [ 410.616149][ C0] [ 410.619516][ C0] Kernel Offset: disabled [ 410.623852][ C0] Rebooting in 86400 seconds..