last executing test programs: 3.132869378s ago: executing program 0 (id=4650): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000004940)=ANY=[], 0x1420}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004000) recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/169, 0x1420}], 0x1}, 0x2}], 0x1, 0x2122, 0x0) (async) recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/169, 0x1420}], 0x1}, 0x2}], 0x1, 0x2122, 0x0) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x2, 0x1004, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x39) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r11}, &(0x7f0000000140), &(0x7f00000004c0), 0x8}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r11}, &(0x7f0000000140), &(0x7f00000004c0), 0x8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r9, r7, 0x25, 0x0, @val=@tcx={@void, @value=r9}}, 0x1c) syz_emit_ethernet(0x117, &(0x7f0000000480)=ANY=[], 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r3, 0x11, 0x0, 0xffffffff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r3, 0x11, 0x0, 0xffffffff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) socket(0x29, 0xa, 0x8) (async) socket(0x29, 0xa, 0x8) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400004380c8d090aa4aeb8a2c2ede00", @ANYRES16=r3, @ANYBLOB="040027bd7000ffdbdf251000000005002f000100000005002e0001000000"], 0x24}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073117000000000008510000002000000850000000500010095000000000000009500a505000000009e3c5012d001cd60cd367e723983fe12f001bbc74ec6009f7b78abf5d31bb8b9a7ffbe741a957146d6366d93f6c2a3ea91921bac7551cf105c2b71be23f6099b4811193b2a22b41308da5c4ea5c4d0e798527ebb720848ba65d359070b5a092f6f5f7e65c0ef1f6ad70c1f18d5508ec353876a032f8b0674bc194ad2073619bf3b1beeae23884eb2aacbe52fd0d2bb7fa0a07d15142c915f6f9613"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2.616978862s ago: executing program 0 (id=4658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7d, &(0x7f0000000080)=@assoc_value={r6}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4) getsockopt$sock_buf(r7, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000002c0)={r6, 0xb8f5, 0x8, 0xf, 0x4, 0x2}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000feffffff000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000004000000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r14 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x85, &(0x7f00000001c0)={r15, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.845523429s ago: executing program 4 (id=4667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 1.593764614s ago: executing program 2 (id=4671): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x64, 0x6, 0x628, 0x468, 0x398, 0x2c8, 0x1d0, 0x2c8, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @local, [], [0x0, 0x0, 0x0, 0xff000000], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x2b}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@empty, 0xe, 0x1b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) 1.523324807s ago: executing program 0 (id=4672): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 1.404353775s ago: executing program 2 (id=4674): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d700000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd95, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1c0}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x256}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xac}, 0x1, 0x0, 0x0, 0x44001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d700000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd95, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1c0}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x256}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xac}, 0x1, 0x0, 0x0, 0x44001}, 0x0) (async) 1.325688998s ago: executing program 0 (id=4676): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 1.304451419s ago: executing program 4 (id=4677): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x18c, r1, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x30}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5c50}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x25, 0x80, [@prep={0x83, 0x1f, {{}, 0x0, 0x34, @device_b, 0x66, @void, 0x3ff, 0x1, @broadcast, 0x9}}]}, @NL80211_ATTR_PROBE_RESP={0x12a, 0x91, "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"}]]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 1.299469328s ago: executing program 3 (id=4678): socket(0x200000000000011, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="1c2b72c508", 0x5}], 0x1}}], 0x1, 0x8101) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000780)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/237, 0xed, 0x0, 0x0}, &(0x7f0000000800)=0x40) write$tun(0xffffffffffffffff, 0x0, 0x0) 1.236914988s ago: executing program 2 (id=4679): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='*\\M\x00', 0x80000, &(0x7f0000000040)={@_ha_fsid={[0x9, 0x2bd]}, {0x1c, 0x6, 0x3, 0x7f}}, 0x3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x8}) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44850}, 0x4000000) (async) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x2, 0x8, 0x5, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x40, 0x7800, 0x6, 0x4}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000480)=@delsa={0x112c, 0x11, 0x0, 0x70bd2c, 0x25dfdbfd, {@in=@broadcast, 0x7, 0xa, 0xff}, [@algo_auth_trunc={0x104c, 0x14, {{'xxhash64\x00'}, 0x8000, 0x60, "d6cf11535e92a2a4cf95bd5c98a51e0a0d19c0a6710e40818a3fa470b3d31baaf037911231d10db9507bf43ac94b80ad188780e6c069fa26194088d85d9489132263bd106c006ac02873d777e84649bb74727f8b4d4ec912b392ca2557e2edd97784fcf2ac82bfd66b06b504a44000c55820308dcb88f50bec57596d1e534e5b6e8518029d0a8e8672e044012bd3d1dd81d8a5140ee8ac1f26edfdfdbc809ba23063cd514e54edcf0c58e596475189a5ca10758aac98193916389c1182cf72a0e88b9d0ab9eb4333a48393c30bb437bd2de2a4f015f412bee7770a994e75549404fb23d349d0159cb74a7ad4ada92fb13b59ee2f437d5fce086a0b765ab9f2970612c346a86699a593a2e1db650ba3c126d5b7b762d8c10b275fc4bd5b3fe019c26d8bedf3f46b2604ad4f08e7a7861b98ab5c09f9c3dacbe9a6414b621c8db5bd7ce64538640198455a7cb67d2121d07daf45332eb61bdd423f1f71f1b7c153b5f9601d671129ca8d4b7d82a3da4215e4847632801dd1c775e982f3f2e2c3dd5be5896ea7dfd98d1531fda6391767690a24686880d99ef0572a1bb2de54e5f652421d85ddceedac3bb267c735cf45ced2da45075f930afa862d0a3a5076e8290c9d327fc83790abcceab73a43b20c4ed1f682093758373f1cbe32874b92353be27edc7ba1ba9e8924d23d2e5189b48878bbe5b616a620c6b98cf4ec4ae07f32b4ad6d925d008c6f3667bea421681592a1895f38f79d0de3b98aea83fed0dae77fedf1513421f8c243a3cc7efda27ec6245ed69a8520e558348effe0df7235e04c77bb4e64261c1a1a5122f1f9d0f3dcac166dfc4f80366327b1c3463cb945f89f8f03a3c6d05bea73009cb8160fc1cf6c769fd22ba893b30932bc3155bf84324c7697a8048dd621436a234b3f728fdb65dbcb4ad7a205f2ce9e095a3ac22b89ccc835d568ea99c7632ea104f827105968d1ce6ad4a6e1a03f06d8bfaa22a9bd52ceccf18a1e6976013c31ae7a503b404a3c2afe08bd427c032657d58e920e7bd4e9f92013c6deaa2061bf5e5b1c70b7148892ea634dd9c47621cffaaeed2be4ec460d330b04752c1e9f223b3dd3854a432a38192b763aa3a7d27940749409fd1d3e9419233bd0b1664d4ef637368d07ca24de074647e0e0394d3d1bf3513782c247311f6a9bbc9ca2ae63ad890f2370393aa6fecbc3f4248525c87caaec68f9ef705c1663e826c905088c2951df7b6bcd5746657c87dc824937bdf8f8f729843cf86393c696ce9760593ba3d8dcda1ddea97f906bde59bfc884b68668cc284c584b2004aed93a4b4d4a55867b5c93a93912fc638b83c8dc06839f92bbba7ac653c9ef367cfe706febbc887b9aec378d42c8014d0f5be6df60842f24903e2d9626d3abd1dee14a58ad00cc90edf5fc18a03d527af9b2b636d43b149db34113c3f9310e6fb950f91577dde904c9f4bbfdbf314d6cc716fffc5a28d973b226fd92e775aa0051bb22068d5f0dbcf381e3dbf4a048cc715b7bed6f99d499896d727086a79f80c1e4d004b2767c8fa4a8daaf3ea7fe48c58b617629979aae8d0941d71ea7cd04ff58332b8c44caeae4c07e09834fa954b370ccdf54f08b8afa2bc7fa59bfa97b8775491f2616b5bb9b76be4ee21292e9b3acee022660391b150ebc269499f7e3b687f97311ea75b0575ba9d462c6477085e53c62fc1191913fc05433383cb5c234e66d3bdca33cb6a27c89e73cf29b1ade0fb17aa1a8eede3b1e1f8403d97005dbe57d294a84d06f96201a9372f21e8373e4d419f7b75b0753197fc9e0d512bb6493791a65763f0dc4c49a7c95c79be2169bf0381b4f9d932772b10ecc8c23d88b308c01388bd753c3ed6747cf1173b2bd9437252de5359b4f01fcb7c4eec05c924f069b4e2ff730b6f92586f8189202cd9ba9462682702a7cd08dc7f54bda0a4d3bb880154bd3d8821253840156c1f87b39fbdbfd05843e7eedbd9c481868cd8f8422322ca2e7c3c18733921e38c7efc26856826d6331a90dd2f980951432fd84704891b1890dc32a387ff6613b97c3a7abab7e98d967209cbf559944bfdcab59abaf426a883be271bb2c228a7fa232491069b7739a9b34adcc01c6df9f8562b0ada612d3dc4cc7bb153cfd2d836adce434a545ad000a383bbf6c72de92f7cc5cae2f22644d3dd764e6c2b8dbdc399e3e2d6f809d0409fbc83f8aee4584fe18e1870adcf5a3cb37805f00f4d7cdd932337110ec8568af6892f1848d1b7ae3529408ece526f97622914b199cf41768ba0f4886dad663cdab71c9bd1eb706884b52c7b020240f863a1f38ce4cf943b8a2204d3712a9eebe85ff7fa53bfaac5612b49d40893a0bc277c061c9b23c91e4d9280b7192cb013c703133f8b939bdb889d4926c09f9e9f3d651e7823827945cf789e6e672294c379acc6c109d9e2f40961bdbd638c262c34be01bc9d8e8ed14901b258b0433f613350e38b586e233fa2aa7923090cd285536ab6b1ae3d97289390e9fb0cc720df862d5773bd19625672163dda7b73023b16193e593cf3826037cb299112b33f5df7d98b81afaf5919e6e85ac684c24dabbab775126c7e0e19edc279301ab84e38206569fe304cd47d3b418b09b5b7055d74688ac84f78039fe57366821e49d8101ca3c1015fa7207d2cd4e8863eb511670916f0b4552e653e99fe643ffcc70c1a2aeadd1469ad81c1b43d2ac4e6f9d8042827366c6744c6e5e14a7ecc36d6e70a71279bc198ea0fded77292ea6c0c1c331f26956baf0d2cbc085257ed9938b6a146fa6deaf7884029eaa334166fcbdfc25b9ad20f012f46028bbd017b6d43d47a142399db712f150baa4143d58b7a61abad4bd42cad4bea922bc92fe159ef4ffd26309a5ebaff70b700daa5730615580d1229b546e9d0d2de80fcd0f5c409097434e21e97ed88f15d15c2861db7bb36fd85038c4daa47a97c3e87eee63dbe6bf0e68777918066766444f8acea6d588d1aa3d1b929c11883824b7e8bef6485c7b8e1305f51f638a77065b06658b8531db5965b1fec9f0d7aba511fabd0900f05a1138d1fafa8bd6e46bcb26f01ff4703bf8220dadc51d68b14f4fb5e399d3d84ce9d473f7f4e2ee30c0f31c93d1ea67e593385e92590ea508b8fcbfaf097d238e6fa2bb277571f75b17124cd69efda212a434a7752ba8bb3ca4bef76b530fea7c822438525bebbe4b73dc5910a0f1df00bf61a40250f4a3d52ae3af86cf23b9e38aeb08b5fc04927633f74eff070e88e7d5244b8bde13435403f9f391c95aad8d1a9e8eabf10ccc4dc404eaa3471fa254e22369ebc166c5a3a5ed82b3650e72c7a4e689ee4bbdd774c16b7aaf7f31043cf6bad3915cf179f09f52ee3a9a19e280337fb557643236ef5a87959075266c0ddd21f898c558898df4b8f41790be7a1158f11ecbf9be8176192abd620a2ddaab06898af7c1da6c75c1935e289ca4d8f2414ec2f0b292653b666800503e0a29af937181f8ee751ced87f65c3d786f6c68afcf48738dcb1577d50685239a5b939420dfae01795bc5e1fafe564ca20ebf45c05105ee0f03c4d780776b45dbf1902dfff58bffc6a8591d5f1ac81c7e0f628712381ebd90f0f2904c5312554690e7ead5f441c2a6ced052fc5875289293789c577c02fa036215e1fe373b5a8d8756d246c7be7fbee66df409951ba178856744961cc121fdb3b78047ba2ada6b0c282c9b612954c20966fa30546a904d7330d79fff60be4153fde9fd49aa1f9bf099b4a2ced423f472601fff2797f2d006bdaf5bff0b7671546d5bea1d1ad092442e526191b6f96f7355455e9819213ef0ede9137e02a3fe2840b0c44b6104fd247683305ce15e023acb89f34f26f6999a85b7c29867a15b79ec22488d5be7c3aa4ac5ce61cd12636476bb89cfc48f238bb5a4ccf1d9a88c504031ac20ef7641124ab868cdffca0c78b51427355b0419b33e790273ed7fe2b5d819107cae9a07e5f4f5bf70cb77cc36f8aa8d0c021cd2691f568d911bb6349e29e765482e142635a51dd0fef12ea2bf9fbaa0f6a28e6a7804d8f77f1a1a6a7d31e0d162a5bb92588626a63b1f1115a088e164f640f9fd24f0b317a417255855809af17f53719ed55b05fbea8a3ed285a800e3f1da7479497eb352317ac630c0c02524eacbdf11735ba0d3c5eacddd37f713486cd180df050bd239ea8001b647e717b1d9479953432ce3a4e7105e947718e003b386fc1ee0a5a902e5b34691392a261189df9c1c05a863d9ba312cf9e506e1db3ca4eca63dbba3b7ec2cc7d0e5db90e54732cebdfe36bb2d57e99b83f9c602c50b488b1b19058b072abeb15d71b41c7c27859a0e4362d1eb836bdcf4fea2600f6cb92609734ea4c408e35942e1aeceb0132f9d7765fe40353c939412f97f23e6bb95d023e57a666ed5ed0131679620310b3c7d7ffaa504ce827fe0c2c39b91fa997f23cbf4df985fc4f8b0010731d535764b868ae50fc5a75866bdf429a77cf267a7e6041772b282fee48da1e767a7371e4c68fcd01cc47b11b039ac9db5c9ba3f8b436478b7f2bc94e6e78095b73fce73463c8c0831a734633f430b1d42186b1b69950c831acbe204a551b29260162aaed221ecb7944777d608a8b8f1582a4ea87bafa2d9b40462e431a2816740f0fff50c3731d4901d346de69c3a262b3928ff6871bfaae8493a30fae7c4c4a98a4e261045b0919c35e8e889c1ec28fba86ba21d1e3594fa24695225c755e120eaed6b547cd153381d06921a47beb99c379e74a253282d0aca320fe41fe5532b2c44d531d6e36d9de2346e9ff97ae77bbd558c0f5530bd73a877bb0161969bdcac0da8348609bfea9e092b3bc4e6fab1bee238931ef0aa3c9d57c20f9a5b1e110cc5207bcd1baa3443b1742c864c41a1079ddaadb6e000a81344952b1ab6de7d862b5ffb1e9cea9f5e2ddca5fb8708771c350e6c44617cbb484b4b8897988bb73397be8d076a678916b56c4378d75a93440804224c6b6b6ae779f29c396878177c141a878d23fd7a88c94cb10ed9797b895cd076eb3c3da6ca08b56f9ce3223ddd137098bcb5eb8e8c304a8e8f5fdda4ad3ed4232e26553a9f1a9c2e1afa174f0c314b3e3a23ddf7d4df9b7f1eac5bc3fc279257faba8df6f0093259ea2d9949827ed14360525fe938221bab6819ab56f0388c614cf0e8f9a40df31ffd6b2e03f7e5db261e99938f5f2ce397f66039fbec18c7cf3dfa5764afa7ed847ea694c962d212d50a83eeea72d9ea572294db42f7c75af19eb39510a2199e755dede361d313d9572db086057695c475eede526f7820ab83c6137b83ff22258ca703b9deac938195f729714262a1b2097dc03f07a99a3fa5921edd190c149afae45f3e01cb62546c1e1c872fe5f8292b49d71d41d1bc9f5eec06dbef361cb03331a491b849fca20c02f36de5db2d47f87ab9253aa8f87c05a53fd0b77091d69c4121c0f4ce5b11f610e5ba9db2762344e70c53419db5adfbe114d8e25ab9103d0085ed4cc2f234c989ce4baa2b5defcf941058d37282e742020b3ba923681d036f2cc336a41748d212dd8d1de18d96b40c2567d66f9902f95bb394b8f9b151aaecd88024e9576d44a09132746a41c135423743cb67d77465fe378eb91c81bd0a3c75bf0886cdf931d40b51784510b998ef4568a1b760222f88eb242e7c3197250c89bafe7d2054318d86fd1a8d2b5eea72a2b577c0e4269f86a2650e9a25b14d659bd14bcdca160cc03c5320ca804020472501469fa5100a4d1fc49b747a2444e22755"}}, @policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@loopback, 0x4e21, 0x9, 0x4e23, 0x8, 0xa, 0xb0, 0xa0, 0x5e, r2, r3}, {0x3, 0x40, 0x1, 0x0, 0x7ff, 0x7296, 0x2, 0x10}, {0x661, 0x0, 0x7, 0xa6fc}, 0x3ff, 0x0, 0x1, 0x1, 0x1, 0x3}}, @offload={0xc, 0x1c, {r4, 0x1}}]}, 0x112c}, 0x1, 0x0, 0x0, 0x4804}, 0x2000c001) (async) listen(r0, 0x9) (async) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000001640)=0x1, 0x4) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000016c0), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1014}, 0x4044005) (async) r6 = socket$caif_seqpacket(0x25, 0x5, 0x5) recvmmsg(r6, &(0x7f0000001ac0)=[{{&(0x7f00000017c0)=@qipcrtr, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001840)=""/47, 0x2f}, {&(0x7f0000001880)=""/165, 0xa5}, {&(0x7f0000001940)=""/73, 0x49}], 0x3, &(0x7f0000001a00)=""/151, 0x97}, 0x1}], 0x1, 0x12000, &(0x7f0000001b00)={0x77359400}) (async, rerun: 64) pipe(&(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$BTRFS_IOC_SPACE_INFO(r8, 0xc0109414, &(0x7f0000001b80)={0xaf9, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000012300)={0x0, 0xee, "82e77e245df6d658fc74d322b0156880975a8436741e4891404f9d15586fbe2deecd4b2ca5058f161c5d1f8765af3d72006d278ae7d0f5caa5b1fd0cf48a8da9b3483d9488f9363a3501c4696ba6f5ef63f4d32954a18a222aa6cbc3aba6b2b766c51cf842aae11a89fdd2f899ba7e03fba1bf771beb13d319255200469c656dac5ab9bfb3cd453611da5fd886cb30301a81e56e116b73a754d4dadfb0a001b5f8b5c525e85584443fac3b02a3239187217b7b64f1763975069e7fa43a3f1cd2fa58f20149beaa24799dd6b06b74eaba3f2ddc21836c47f7807335eb4c0f417779af6ad4d5aa48a416a916f89b34"}) (async) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000012500)={&(0x7f0000012400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000124c0)={&(0x7f0000012440)={0x48, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1f}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10044000) (async, rerun: 32) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000012580), r0) (rerun: 32) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000012640)={&(0x7f0000012540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000012600)={&(0x7f00000125c0)={0x30, r9, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4000800) r10 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000012680), 0x80000) bind$tipc(r10, &(0x7f00000126c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x3}}, 0x10) clock_gettime(0x0, &(0x7f0000014480)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000143c0)=[{{&(0x7f0000012700)=@alg, 0x80, &(0x7f0000013c40)=[{&(0x7f0000012780)=""/4096, 0x1000}, {&(0x7f0000013780)=""/214, 0xd6}, {&(0x7f0000013880)=""/133, 0x85}, {&(0x7f0000013940)=""/15, 0xf}, {&(0x7f0000013980)=""/86, 0x56}, {&(0x7f0000013a00)=""/192, 0xc0}, {&(0x7f0000013ac0)=""/65, 0x41}, {&(0x7f0000013b40)=""/141, 0x8d}, {&(0x7f0000013c00)=""/27, 0x1b}], 0x9, &(0x7f0000013d00)=""/10, 0xa}, 0x7}, {{0x0, 0x0, &(0x7f0000013f40)=[{&(0x7f0000013d40)=""/135, 0x87}, {&(0x7f0000013e00)=""/207, 0xcf}, {&(0x7f0000013f00)=""/47, 0x2f}], 0x3, &(0x7f0000013f80)=""/14, 0xe}, 0xe5}, {{&(0x7f0000013fc0)=@ax25={{0x3, @null}, [@null, @null, @bcast, @rose, @bcast, @netrom, @remote, @null]}, 0x80, &(0x7f0000014300)=[{&(0x7f0000014040)=""/108, 0x6c}, {&(0x7f00000140c0)=""/19, 0x13}, {&(0x7f0000014100)=""/185, 0xb9}, {&(0x7f00000141c0)=""/1, 0x1}, {&(0x7f0000014200)=""/143, 0x8f}, {&(0x7f00000142c0)=""/24, 0x18}], 0x6, &(0x7f0000014380)=""/15, 0xf}, 0x1}], 0x3, 0x2000, &(0x7f00000144c0)={r11, r12+10000000}) (async) getsockopt$sock_buf(r10, 0x1, 0x1f, &(0x7f0000014500)=""/221, &(0x7f0000014600)=0xdd) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000014680), r8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000014740)={&(0x7f0000014640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000014700)={&(0x7f00000146c0)={0x30, r13, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xfffffff1, 0x6, 0x4, 0x6bcd}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8880) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f00000147c0), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000014980)={&(0x7f0000014780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000014940)={&(0x7f0000014800)={0x13c, r14, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8b}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xadaf}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xdaa6a08e7624ce19}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa76}]}, 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x20008080) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000014b80)={r0, &(0x7f00000149c0)="86821ef8f735c9eac7b8f8ffb13f1b889359ebe9be7e0b5a77ee30fc68d803e16dfefddf7f83a92a7d64abf4ceb2d6c0bfd7c6378c01e721570af647fb9d1ce0ce4c7e9caf96d801c187dfe8dd2ecf926f16b0fb594be022b0f2cb8cdb8ad25fe788593b993cacb02cde07e0bcff3a4de2f1e6671ca79773b5b8c1ccc6826c46879cd862c595e2a584c3b11c89370a60ee678544627dd440d9d860bad4e12a0355fe6608fec8b0ef764e5ec5f356a6ca1a72867436f2bf2d0e1f8628629fb49543f721b53410cba3", &(0x7f0000014ac0)=""/180}, 0x20) 1.19275361s ago: executing program 4 (id=4680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x128, 0x0, 0x148, 0x128, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x21, 0x45, 0x42}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0xea9a, 0x7, 'syz0\x00', 'syz0\x00', {0x80000001}}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'vcan0\x00', {0xff}}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x6, 0x6, 0x1, 'pptp\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) connect$netrom(r1, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 1.190372815s ago: executing program 1 (id=4681): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x2) shutdown(r3, 0x0) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000018002b470800010070707000d86b844c08010100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0xffffffffffffffff], 0x40}}, 0x0) close(r5) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) getsockname(r7, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYRES64=0x0, @ANYRES8=r0, @ANYRES32=r0, @ANYRESHEX=r7, @ANYRESOCT=r5, @ANYRES8=r7, @ANYBLOB="b85a4fc812961152c3b0d53245345c441b71dbf69b710a9d38dd006a3488a319336b5e79461d3c4dca5674f05239c5a11f14d557d5c0c0ad489b3d142bba8a8433f75adc03c93670887ff73176161f117d22ba71901ad281cf66a83eb2ec", @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x404c091) 1.052262178s ago: executing program 3 (id=4682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfffffff8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63", 0x8}], 0x1}, 0x40001) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="110000006a"], 0xfe33) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pS \x00'}, 0x20) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, &(0x7f0000000380)={{@_ha_fsid={[0x7fff, 0x7]}, {0x10, 0x0, 0x9, 0x40}}, {{[0x7, 0xb14e, 0x1000, 0x7fffffff]}, 0x0, 0x3, 0x8, 0x0, &(0x7f0000000340)=[{{@_ha_fsid={[0x2, 0x5]}, {0x4, 0x2, 0xadf6, 0xd7}}, 0x200, 0x0, '-$\\@{#\x00'}]}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0xff2f) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000001700000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000001a80)={'broute\x00', 0x0, 0x3, 0x1000, [0x158, 0x1c000000000, 0x0, 0x0, 0x918, 0x7], 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000a80)=""/4096}, &(0x7f0000001b00)=0x78) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x60, r10, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31329eae551326051c0ecba1df0ef9cc9415b343831f26fe"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$tun(r1, &(0x7f0000000180)={@void, @void, @mpls={[{0x9}, {0x7fff, 0x0, 0x1}, {0x5b}, {0x1}, {0x7d5}], @llc={@llc={0x2, 0x1, "de8d", "14df9b1014b802fa79acb0a8dc78c2d82870bb0ae0a9a7b26d17e8154f7af8686ced63130f08d5be3f08a1e0cb5a441e99b39b935b4cfbcb31488f5e4a9ed00588d83fb08e59c94bd85467a64aabcd6fc9489ff480296cd1138760cf91aef6204aff77e82363c32b685d1b398a965179079063670aa2c850a90d01ad8245ae6e9325da3526b877be35e6c5d2dd9d8a2b36e550bb1265bb1d6ec8c9db85d356a0da34c5a36fa51b79aea86397b3fb13bd73a29de472fcb2a0f373eeb39549bde57b4a8a2f48cc"}}}}, 0xde) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) 1.051954167s ago: executing program 1 (id=4683): r0 = socket$kcm(0x2d, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x6804}, 0x488c0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="c1", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) (async) recvmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x40000000) (async) close(0x3) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r8, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) write(r6, &(0x7f00000001c0)='4', 0x1) tee(r5, r2, 0xffffffffffffffff, 0x2) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = getpid() sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x530, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@typed={0x8, 0x7f, 0x0, 0x0, @pid=r10}, @nested={0xd, 0x9, 0x0, 0x1, [@nested={0x4, 0xff}, @generic="1ebadb1f5e"]}, @nested={0x502, 0xde, 0x0, 0x1, [@nested={0x46a, 0x9, 0x0, 0x1, [@typed={0x7, 0x9f, 0x0, 0x0, @str='/&\x00'}, @generic="6a124056b05527d714e82a52857983372f10c0f7f159a91240f4eccd739985849f6d279eb925fae180718439d59e39fe08406e8e486c66e231f81b0f6526c56f77addbb0db81ef00023ca8897d850842e00f26e611e3dcc47f978b0df2b0ff9d239dd9c480c9dc9d7aca9fc5985d9a2840c6a921697cfae59905e12eb06c2d4a4b6688f5a9a21a394d1a5d580d15f3e0c788669ddb6920f2cccd0d71afe06a8f38d7a4b659b6a73ce258e9ac0951073b11223299f8118fde5950370787e35999280631d5c1bd62d42f56ade1b0e8ee460ddacb61b8", @nested={0x309, 0x9c, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @fd=r6}, @nested={0xb1, 0x2d, 0x0, 0x1, [@generic="c2c31c7810296757ea42dc975c75c563630343b3522ec4c38b310ce60c9d12d0fa0d7ff104b547e37f7eee1c65110d687a52583cf459ca6a97a77d0cc0202ac38f7452b2c38df64ec89b06c92a370eef639a5c0765e4912fa96422a9f0f3da1922eae011194ae1e433badec94ab175444f00bea228d99a9449c680e1990290b53722ab4981052df19aff3bde8a9d778932fb9a365107f965ec3306b896fda7ddc8f588cb6964a83cdd84958268"]}, @generic="c71d9293bdcf2c06339cb15e3a8b599b84cb10f8f8f4daf7ac617367487fbd074a6098b74ff157cc9d0641e7df4861b9027489ecba38b575f1", @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x7d, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x18, 0x97, 0x0, 0x1, [@nested={0x4, 0x56}, @nested={0x4, 0x124}, @typed={0xc, 0x13f, 0x0, 0x0, @u64=0x1}]}, @generic="f444982516d1a87da411289a3ddaaf1eb6423dabbf318a84568255157f93878589573dd9b1d209a7cade2dadf26e71df5f44255433c82969ee80b5bb2c29430ff620bc834df7eab57f4e887434182a77a0a8130ab883be5aadd291a7be4bf087e4329bfd720c6aae19f95bf76f95dda2e4fbe7c8a7242355b2bab1e69556b28b", @typed={0x8, 0xa6, 0x0, 0x0, @ipv4=@local}, @nested={0x15d, 0x77, 0x0, 0x1, [@nested={0x4, 0xe4}, @generic="1320e394476f7d131a25e6b370c4b4ad23e74b0b015f583b42dc57a602612d83700e927c0aae0263237c4332a594ddfead9e3cff472701c0bdf268ac2d28197a07adc79fc58ba59ed6134c33572cefe82825c06f7e73c9a92a441c3a1988ca5a55792a2609a344c7745f6e115f57886e415f689d46807af1ec9e5779ebc00498ebef40c59aa385e480829b7011b108ec934fd15b9db400e961c2fb6c0e6e4e220594080589723f2517089d90cb601c537c14d9f157343663446fdea809d38719c6", @typed={0x8, 0x1a, 0x0, 0x0, @fd=r0}, @generic="bb59aaa59bf221e30c716ebc87a09f4ab14e7df881502c2ff726dd98b8a1cf14926b8f748b861e66b89226e8f71314aa5d143e0d1b9b70570cbf218d6b40a5af22f5f45fe69ce31b1b3046d825a641bacc79fb33b464fbe802966f41bb54576b3cdfe2fc82ecd4427be09f744359c18f35634f30a7d65cc89e13a170fa4a5cb252926b3b725d05a4", @typed={0x4, 0x12d}]}]}, @nested={0x4, 0x95}, @generic="a069f74e9b78b1fc24a814467b45bf004f1e1bb1e00299096f79946e4462de28c4645b87b27d885d6dfd069870cc5ba29f32568c570b4250d713e35675989c21617e1a2bf5f4db0937835f17caacaeaff78533e1d424a36db1ae05f1bba76a06f2138c94e54323477bfc6770c18567891ff3ad913d", @nested={0x4, 0xd0}]}, @generic="1b99d79c24c8c732298de08eb454b2733235696f5ff432b8a221c133ef3b0c20ae7c42c8b6b88546e8568c10e0b699fe0e6fbc846415fd85703ec40519ef09bad38c2f9d7c6b069900d7674c3aaf7ea9214373bb0621a3367a240f9575a43200b1617fb72a9cdc6039262a027ed0fc21c4df14b64150b7f79fc2b46a164043abe517c6a0a6bf13fe7b66ffb90386af39b3d0"]}]}, 0x530}, 0x1, 0x0, 0x0, 0x4c090}, 0x24044004) 921.724663ms ago: executing program 2 (id=4684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027db700000000000040000000c00180004ac0f0001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) 878.971822ms ago: executing program 4 (id=4685): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000003e00070127bd700000000000017c00000400f9800c00018008000600", @ANYRES32=0x0, @ANYBLOB="28acb45e2316b95eb03c4bc44489cb1d5e6107bd94dd6866858536fc17da0000"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x41, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c) getsockopt$inet6_tcp_int(r9, 0x6, 0x7, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xc, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000008910f4ff00000000950000070000dc01e20000000012a60e105baed454d38e151abc9c4a8dbe5f920421d59bdb47c8cf875a4b7e000000000000000000000000e13fb47264e30eeb9ba279124618097cbc328925bae5366a44112e46a9d681d68154efb6a80d766f903f6d0c6a292076eb55da3443d498d767031800040000c28bbd3600"/157], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000001ec0)={0x0, 0x8006}, 0x10) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r14, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 877.838165ms ago: executing program 1 (id=4686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xc, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.stat\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f00000002c0)=""/42, 0x2a, 0x0, &(0x7f0000000300)=""/143, 0x8f}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x3ff, 0x0, 0x821, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0xb}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c845) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x28002, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) pipe(&(0x7f0000000540)={0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3b8, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x56, &(0x7f00000001c0)=""/86, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x2e, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xd, 0x0, 0x3}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r4, r5, r7, r8, 0xffffffffffffffff, r9, r10], 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c00400000000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 812.561821ms ago: executing program 3 (id=4687): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) 693.496576ms ago: executing program 1 (id=4688): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000980)={'wg0\x00', 0x0}) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000080)) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000009c0)={0x50, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x21}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 641.630723ms ago: executing program 2 (id=4689): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000cc0)=@add_del={0x3, &(0x7f0000000080)='geneve0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="180000009821173543630009000000000000005ae600009500544e9c", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000180)=[0x1], &(0x7f00000001c0)=[{0x4, 0x3, 0x7, 0x1}], 0x10, 0x80000000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000cc0)=@add_del={0x3, &(0x7f0000000080)='geneve0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="180000009821173543630009000000000000005ae600009500544e9c", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000180)=[0x1], &(0x7f00000001c0)=[{0x4, 0x3, 0x7, 0x1}], 0x10, 0x80000000}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) 623.153139ms ago: executing program 3 (id=4690): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@multicast2, @loopback, 0xffffffffffffffff, "36f21382a414fbdeef200089e1a25dcbfe6f699bcf3e42fb1f66a69600044cc0", 0x0, 0x5, 0xffff0000, 0x4d8}, 0x3c) (async) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000100)={&(0x7f00000000c0)=""/32, 0x20}) (async) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) (async, rerun: 32) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000001c0)={0x2, 0x25, "435909dfa806871f82cf2fab0b56a67cd26c6aef1df93e3030ae07cd5c47bddb9d1adcfeab"}) (rerun: 32) r2 = accept$inet(r0, 0x0, &(0x7f0000000200)) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0xae, "a83b61fb7b4b51adb769c77d8b7ec20d41e356ed3309cdcbb456e6e96b2d60d35b1c57fa8f65b686930e8c0ea26a48b0b2400e99af7ca5002694076a417fc1a2a3b2477e82e1cc6fd764ee931e4c4b5451f11c0526c9a8931db971fd4953be3fceb32c4d9dc840d2e91ae0d320d77c8eb1db54801bd3e1d56e0a1b535de01eefa60cc070921a6fe65534d4260dff9ec2fb3ef5242a0e7d2f94103ba58b62c90900c05cd02d4fcd37501c1b928b8a"}, &(0x7f0000000300)=0xb6) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x8, 0x4, 0x2, 0x4, 0x13e7ebfe, 0x7, 0x7, 0x1, r3}, &(0x7f0000000380)=0x20) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={r1}) bind$bt_hci(r4, &(0x7f0000000400)={0x1f, 0x0, 0x4}, 0x6) (async) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000440)) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r4) (rerun: 64) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x14}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x68}}, 0x4840) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000800)={{r2, &(0x7f0000000600)='%+.\x00', 0x2040, &(0x7f0000000640)={@_ha_fsid={[0x7ff, 0xa]}, {0x8001, 0xcf, 0x10}}, 0x2, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x5}, {[0x1, 0xc7cf, 0x1, 0x8]}, 0x4, 0xc7, &(0x7f0000000700)=""/199}) getpeername$unix(r6, &(0x7f0000000880), &(0x7f0000000900)=0x6e) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000940)="8177ba0b57b344b3deff42d6c6f43b4f496b7ce4efb2dce5680e791f0f56900b93c0c461c6fedcfb9b828f3a55718426888a93ca3006f2493946a703069bc42b9baff9fd820c1b127304af64a32f2b0ed9a4f56a560939319801a37b8eed9be4d2a979f2f5be9b633ca2c29ea7c17f8e", 0x70}, {&(0x7f00000009c0)="d66ae307b790115ee1ee07c948a0132ebd823a4ef4103b580cdea0c37dc6aa52e6348ae20e61bf7cef7e0b65f4c1438c7a22b09733007db00c5abd3852ec895f7d6096f3eea3d0c00632ff0801603d70b792636c81b7367401690b8dd8fe1ac2d0a59ac3a75afce7b105d5cf17d557924596cc1f663a43dea51ccaf2c1af75681bd58d553e490739d7ca0a2ff81ca65bac9f860e8d084b3287e89642ef0492b35f96ba7c4eb49e5b120415c2739f66860e7079ab029b3ac788556920d16a689ecc105bcf72009110457eb18eeb7a85cec914b418b9d27795e5e064a9578cfdb3901cf3901174a1c41c8070a968dfb23e02ca6904ddbb9a18bcda69d254dbd728b9f4533f41f3cb630129f3e419cb75ee6166024b1f67bbeaf1981aa8cc179eac525be19b41b52b888074900b5791d240b952908303da3e26bc301f7bace471dd6d3c68590a049d7894e3a5497a1f958f497c687ec9eb8a447c7ecce8b3689f342c447931c483d6e00cf81b1de143fbe31f52dfa166cc4eeb8d607304041741d7d894191a5c08aeee1f386e90e619c2937f4d218e74b8d1b657135c930879411a72cdccec53e6048e746b2d77a340d7edfa64fd46c509180668a04801fe2611db7cb14803148bc03bbe9841a98b1d33e04b035fffc9eb67c900059078007200175539dfc225f735361daaa0d42bcf46080b4361a66e11b6788b10bbbff3d35b972db4a64f6dec34ba27126a7466149f39eeb8d04edbc38206b973ad1a6ca35e3f1e68594c84650fbff08d5d46447b109c2e5e76f30e46648f2bafa09ee4fc863d96c28bc21c057eb9b4aacb044e565e64d22cd7cc95adc73c1f5562330af0a86bf92c841f0eda4a6b3383481488c6965cb666936d4100dbe2beacbc98e48b96e117aa35ed0325493e6a99c667c648a3bcf9892b4d1ad9b8bb48dc71c17c6f7840f4154010324578d7e9561c5df446e9f8acd53a4ea38a5a06f77ff90676be02a8929528a5a0c1f0ca0b3d705fd655b9577148d0ae3e57696658888a035800864fb5d9599e48d0253f940b358895a7cdadb7db476ccb712abc1eb4ed8fd9bd82a69fc5bfb05b0d6dc97ca1d32f5e5a5a6908a760a9eaa7b3bc0f90333bdeceb26b4a4a87434f6dd4c8846a019994f1712853d381121efcfbf5a05536b4d2422fa0b921ef8868b00a810f9c59087d973a880700c7697db71d3a941d7c1fdf257e1758266c19bf6010c965133a7cfe7fde0ad1fb77a387cac43c044d2b152c2773e8b79802d5236c885c564fb71429b6cc4f33a82e39c7414c056e8a15724c372611f862e23652b8514c9fed26ebe011ffc2bc5c9309fcbc89f456b63fcfc5947b153d2507ffd17a6a67fe139dda4a71a122fb72368e72efac7e2a7e427477172c91eb8b632db6ec45899fc618711d1a94059cd767cd561a877c52f09e3e02d6c23f7b84c89b53d0009e284c2b90cfb0ab7d0b9c0b85b97314d569c5a2d1557036d61a50ab7534abe27155513abe5912aefe6fa949512eb637d4ce15e3020b9509c6613395a70a5332199f402a6184194b3ae41bc85e991f289592cb5b4ddcd82f683dad4f3455b271454dff92e3347f5f6dd0297448dd4266ca3c132da61f5dbffd722a47fc099689b5c962936f903dc4a1462e8b111b88fcb40bf6ed9c10b0f36312be6a4b3e45fb00af3a8e63c8aa9cf93ed02e77e319f471a2022130db887df8ee407ca2e44728bc789fcbc7965bf1327cd09348ffad5c2914bbab8165e052b9cd305f39b3bb2d1617f0e608bd1bd3261b16d87e066fa88e65108795e1955b881adde89912cef270d36e4e9385ebcf6e15b5d26c25aed6f81e2152a24ed2593e123342ac46aa3d2013da2578260ec7a71febfee9cc9e123afae05493bfdf6164d7c947922154f5cbdf049d79aad843c0a2a9a06018351051cd8ccf031f06bfea00a3cb236b06e8a53665fabaa7364237109e563adb096f80d6803b71b1e7eba9b7576cc4b5b10beb353eacc298908513d0f43d65f9048c290b001766b1bfde7dc335b6f4c125090c5065ff6b344b38fb63d927e8025b808f1e2c5a6e8947c2f51faae9eed8f4e35984dc7e20afba924ff466e3036ca9832d0aa3b4f7ef0944a8ca7ea5b6b58809b378cccfd538312f8562fb69277b00c19ca02c633240e32ccc88fd4c2a3658bc477c8cfc68a7e05717e5ade7e4569cc34826123d132701010d941cb5a3e69015d50bbbfc9d13f0f554b048c2b49bf328689f554e9c9053a0b2338218b5d61228b101125271ae53e4fd3b3e969daca9d148bc7e43a0506c18be446a44f33018d4389ef91d9fb4ca83ca860c29849780dc526ad936502add0d5c87bc138be6be7bc4d2103f948360e65a5301a89b7aec86d9001841b758a157e746659b48b92b1d2b6a35629b80fcfac2988c935013e9bb9bd7acb2db4364b475a8b20e7d9a74a1cd8eb10f8feee8b4921f94f2c6313fbe206cb2839d7d6eb7057a3b63ec9af55f4c8f9e134535b3aa8ad7568fc03fb13c15a96669df852c944244cc47a86d770070d72f8f2cdcdcdc6b9cb77430442ac95e499dbcd8f025d94657614fcb2b7e593be8f2dad36f18337ede2765b45143b92990b63d617d65aac2851082756fc90a3f59855d0cb76479bbc90b011f247ea18dc289a8330709dcffdb24d8a96c9f1aa4b60a12c88c1fdb2e7316d76aa10711f25af19b6c710d0896fec8b86f2ed5a0ef2c8f515d5ff2852c4886a6e02af8f875a526a3ff74e4c4bd239a93caef70b865de9e91eb909b62f990e6c6b37dc97debb8393881a23fe6fa6664b0ff56fb8ef200d2665a11869bc514ffedea8609f5774ec922c177d9916be98b58a8783c2af35e18741c2e038287f9b7a15cf1261f6a4ca704c50513316ec08e4a51e648be8c7aa9d19d2bbe27f81b6cb54904ee071f9d319e18739ed2fc1586a64c2428844d3bc7bd6c928374cdac3b65bb75afac63df9de9caddb3c1fdfc83de1a3c5af632f55f8c7593adea0cbeef38fe763066ab6cbcb79defe43002b916363777e1c61d1abff150145f20c2acc2082f4630e741b7f41d39c98d2d6f4b29babdfab6dc1cae568eae5d6662b8dec07c5463573d3f447b2ce2b000a4b8af603b7cf252aafa88f798515359e200fcba384074c0b875e4213fe258a859a664d5d9f7cc51011be4d6d9ec4c250a6d068fe9477f324df9cb372391371fe22381278bd3a802cec7878e5ea5225d33e46d9227d394fe152b0ca0d0cdbd86eac8ed94005a880f52899fae4284c2ffd5cafa53de5d3aa1e496382c841502e034d0ab29e94fbda5bb96d0adc18c002730f190084cd78be248f1ffbe653adb4988ef091028ffb1d4fb3b02f3e21e7d873d99538c441dcc796fa0985e3f11a128ef2fd90598a57576a13ddafbe9937acc50ccba2e467b62413f0fbbd797e275eda67823fc8e34ae9f6cd03392c88c52fd0b0b97b0de0b01b4df6dd3ebb80c140729e7c96136ec1e6d9797c5a287e4462abc6dc4b08060fb94e06c83302ba05b2f58bd25d564a5df8e656f7ff6eacb0133d7cdbd3c407bfedd435c0c80424afa54bb0836bffe181c202279891d948283bd4b2ba92707b6cca17773ee2b8dd38ae71b577f005d17434d64f4ca9e8c60681f807baeb3487d2405fa0bc3d82fe4c4a9fa3b2eaa533558c994e5689f86969b9ea548d098137059b31c0a60f26e386592931a7de9b1c513b6d6a70974da943e5dd181a7aa6c1a26d13e47e206b8e731aff6fd279ddd2b668a06ea496afc6bcfc8200b9b8e4f9c937d963e6f79145c324dc86652607a6aa3e68e7ad778432965eaba53b489b803e35a024c6d1c5ca54013fa088e75cb1a66f7e7d5cd5f604cb9ff13e8d70160ac1d841803547c3f77c9762d7583fae8f741c1b1fa2c75813f007bf1057f2d04aad5c7cf1d639d30b4582ea322f677fa3b31dbfaf2b29a2e9fb15c0d9ac8b313616f5a5f67f4b5ff45822776fb8ce5a4fa09769bff6b867de02c6ce71711b840d1d8fbc248150980e408c2c6e45188aa15ce2621dee19cc57b0acf1700ca17f2d268a6c25f1c8c30beb57ec1266f5b6cbc72277aa498be989195997700aca4bc46c329e1e247d941981a2826be16a705f429795bdef6258b7be70779f15105fb18cd4a203e17ce7ffe4b0399cc3585de0d424f1367ec30051584623e596e9f37064debd78e393cb31f73eed9c363dd896ad7df95043f503bda2d7dac4e94d3939894d69780330d700274a92eedee6fa7d623bec2f3ff3d10ba431943e7a3ca764a3881d16cd1c357f72da6f415010d62b249419702af2c2a82b164393ad3d483fbef1148cddd6ba643a7db44d6fcffa031cf06f125097c9a456f3e953aac0c45a08ee9e31f309627d81084290cec765d1f5f3e6a423fffd48218e08f83219103a9f312822d5e23e7c0d0c6d74dc0c92f0ff28a1f4b7cb00fb37c01a96b4e7611385de99b68cf25912378b0f0f70109bc0093271dac81d33aaab89aa3d4725f242afa23841eb726095024e142a89ca43b53e1612f89dd9e641a9cf04b696449f537c05e59735a5a696ba8177cbb421f644bbd2393e10314d0f17d446f806ecff7af3b1627780bf8376d89247bd4ec72fff9229ac0e1ea307840cb95b5c97c3d0b3b53b9fd316c139943070c7f96481e341931c7fca8e515edbde1e8f9a89fb911460c4c8d051f0bd16a96ac6cc8b09eefe9f2d7e6162c3eb76042bbc31bd85cabbdb6e80945a149f363bc9db419359404866240e40f94b1d62753018aa93af12032e72f5bcedf70b32db1bb0286fb1bcc3584ed0435c88dc3991cde61a001d32b9f6952f114017cf592daf2fd3550f2701baef9e906ef4c05be8f60c802af41db94fb567032b501b8426c7e7ff45d1d74f3501b0265bb7da2141f3be20dbf8e77a3faa3c14b160e5c1a995e17bbc4d005685e3a03f231f2ecff041f182960ff6528749f06dbbb45acea1aa302862874c4202996f51d9d97731f740215ccdae78acc4343d9d7af6a2ec3436461ea4f5a4a4d8a6620e96272281da54665ee3580258105095635e5993561abbbac5c862823e926a251cd555be6ffe843fa019c443683bf89571a239c402b0a70a8b18a7f32ce7b78db0983b203367dff8557e3abdf3d0833acb6d2eba803cd48178bb69da369747f320afb0af36491ebf6d55b7e16bc46ccbae2a06fd16a7461b55d9fa105faa55b77fb909bc165d1702ca9429593ff0492181a9d16241543b96db5780c613bd26698b0328984d023fc02a08660c66806d3486189a33d72daf789a2d6ef9d6a2e1aef3dfc25c1d81c42ca6531d6096352faa3d217c31564b0f51619331dfff94f924b87aff5ef6485be7875e54c9ebe44adb5ad44a7e89700b7aab171153b6b2e73ccb7751485cbb48fcdc63444920bace4d97a44ccddd0352201a80e9acbe2a598eb5a49b58ab3a51a3c1a2c7dd85f004d1b5dc58dc96f236317e7739b3d591e7f6a424a9bdc0cc1bf3a24ef96ba868778aa481c1cf50b42fc95cd7617c4100504dc92ccc0a88aebc6f1b645c8e4b0b502845216cd748910feb4a7744b6708932de2e72058d01325387c8dba4b5fbbe2afa0194484fe7d028589623d461cf53fe9a1adcc733d7817cd62a7a6993f496a2d357820e5b6358c2582fdbb52954a550b0811ef4c3c59513c988a76028e07bc202ef0b9f2b79cca19781a58a2f1b75c3b00921f1d81a5c478f8c55b0eb1fb4fc0c4008967385ce304b2d5925a40eeda4613702ae6bc08d2e3c56a40e8b8350fefbfe2c5d22e1e2acb4a92", 0x1000}, {&(0x7f00000019c0)="f145afd60b6d30cbe2f04d4b62a774c23f81ab74a79ff6a0a557a8a1648ff09d01f5f56bb9f438ac3d723930f2cefe68819cf7571aac795e207023aa8a7f3ae445eca8620dbb453a9b51a8ebcb4d9b99ca1a5b3ac12b02215445972377df69b10a5307cfd9aefccc5ccd0bff50ebabcf2792eb4705846184da84cdea070ced19da33beb924cc48ba7c7d88dd6d0d1d832528ec9f749974770bc02f5819454a02b4c89d383082134a482183fb", 0xac}], 0x3) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000001ac0)={0x0, 'geneve0\x00', {0x3}}) r7 = accept4$llc(r6, 0x0, &(0x7f0000001b00), 0x800) (async, rerun: 32) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000001b40)={0x87, 0x2, 0x1, 0x5, 0x0, [@empty]}, 0x18) (rerun: 32) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000001b80)={0x2, 0xd}) getsockname$inet(r4, &(0x7f0000001bc0)={0x2, 0x0, @broadcast}, &(0x7f0000001c00)=0x10) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000001c40)=0x4) (async) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000001c80)) (async) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000001cc0)={0x0, r1, r4, 0xd4e, 0x2, '\x00', {0x5, 0x1, 0x71, 0x7, 0xfaa, 0x401, 0xffff5cff, 0x80, {0x5, 0x2}, {0x6687, 0x8}, {0x67, 0x81}, 0x291c, 0x8, 0x8, 0xd041, 0x4, 0xfc4, 0x7, 0x0, 0x6d, 0x7, '\x00', 0x3, 0x5, 0x9, 0x2}}) (async) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000001f80)={&(0x7f0000001d80)=0x7b4, 0x8000, &(0x7f0000001dc0)=[{}, {}], &(0x7f0000001f40)}) (async) sendto$rose(r6, &(0x7f0000001fc0)="c1aad398e7fc9ee9e510077eeee6aebf227664da0f891f5b58fa3beb7ba20b502859f4d1ccc38d31a2bdd297cebd8ad5eb3f2a16a5afe1f21c8928c21bcd951de5a390ba872b8ac03f7985b44c739f", 0x4f, 0x80004, &(0x7f0000002040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002080)={'nr0\x00'}) (rerun: 64) 548.716602ms ago: executing program 4 (id=4691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x30, r1, 0x20, 0x0, 0x20, {{}, {@val={0x8, 0x3, r2}, @val={0xffffffffffffff1f, 0x99, {0x80000001, 0x2d}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "3251ffabe5e9b86abe97531f623bd13dc13ab125b5aa1858"}]]}, 0x30}}, 0x40004) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x10804}, 0x0) 477.584091ms ago: executing program 2 (id=4692): socket(0x200000000000011, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="1c2b72c508", 0x5}], 0x1}}], 0x1, 0x8101) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000780)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/237, 0xed, 0x0, 0x0}, &(0x7f0000000800)=0x40) (fail_nth: 1) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x8, 0xf5}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast}, {{0x4e20, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 477.264496ms ago: executing program 1 (id=4693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c800) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x30, r2, 0x111, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1d}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfffff734}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x812}, 0x4048818) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x200042, 0x0, 0x3}, 0x10) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000140)="4b6e6eba6cda9d82d6b73fdc8a300c8e3124a5b6426e2c485a1db029c3af3d05d8c886fd531f871296fa8d61a1f5faf4cdfde076a381a58db40b52ad1dd2df98dbb7036244f4dcf5941d03af9a80421e67041b3264b002596e4a0818f2e5d3c91fe8adf8fc87f8d50e68af44bbcd09734c4f74bdda043fe85e15557e7590f13d520f50a5adfaedae27f526883fc3f2b13bffb8b805e2e9ac0703c46d132877a1c4f7a398b5cc6e7cf4bd049646d23e809393c1dabda02827d0a2601d29685f9a2b4f52af90a5962e41d441ab6ea8181565f2a1c288f67bb596a1d398e5c4f8a7d7320c1c158beadf7151a0ca727d1eca801770d92d840c537570ae982c6425d1") sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x10403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c800) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x30, r2, 0x111, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1d}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfffff734}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x812}, 0x4048818) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x200042, 0x0, 0x3}, 0x10) (async) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000140)="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") (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x10403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) (async) 476.755388ms ago: executing program 3 (id=4694): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x48, &(0x7f0000019400)=ANY=[]}, @devid}) (async) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = getpid() sendmsg$unix(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00}}}, @rights={{0x10}}], 0x30}, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r12 = syz_open_procfs$namespace(r9, &(0x7f0000001780)='ns/ipc\x00') r13 = getpid() sendmmsg$unix(r8, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {r13, r10}}}, @rights={{0x18, 0x1, 0x1, [r12, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001600)={0x0, 0x0, 0x0}, &(0x7f0000001640)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001680)={0x0}, &(0x7f00000016c0)=0xc) (async) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001700)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @private}}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000001800)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001840), &(0x7f0000001880)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="ddcfdd48dcc349a18aefad7990eefa3891c2502ca249afb1b0b926e03c283c2f528e8d6ff0", 0x25}], 0x1, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r2, r0, r2, r2, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4, r7, r11}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r15}}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r12, r5]}}], 0xf0, 0x20008004}, 0x4008000) (async, rerun: 32) r17 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$nl_route(r17, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (rerun: 32) sendmmsg$inet(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000580)="636b860f", 0x4}], 0x1}}], 0x1, 0x8080) (async) write(r2, &(0x7f00000010c0)='>', 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYRES32=r14, @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) (async, rerun: 64) syz_emit_ethernet(0x36, &(0x7f00000013c0)=ANY=[@ANYRES64, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0024bd3be900000ff876b85fc695d5817d9a38d9f5780f5201a5d5fcfb4415de4606cecea8c7d9ce8791a3dc5ff7187ef3605aa6ba7865824047459b5b3ff73b58d98ea0da27c22aeb51e1bf0d0effc7446c6ad3a5be064ea9a81c6fc5c4261e106d7a5970f15953cf2d260ba8e9a904deeab0fa43dfa23aaa5d9a433c29eeae479f783d000000008a1cbbd1ee1e1a219c27366bdf3884fe9398b2742edc1c53971b10b31348f7da2dcfe5a867df6a73", @ANYRES64=r16], 0x0) (rerun: 64) 409.836253ms ago: executing program 0 (id=4695): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x1}}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000140)="7c7e187db3491b2bcc5aaab673920f8ab29b7e2f2482d2b9c958ed4cf9a756fd88d6e0bc266ba7c56c24f8d5733fc25011924f0ca1a90e5a2d5f1bd4dc4c781664f3a2930b7e8af63ede046b742ad7cf18a47adef94799263d8fc1d2c6d78f46a36959880aebee0a7e686755c4f420", 0x6f}, {&(0x7f00000001c0)="5160c22b60e73dc6c3c242a6d17d0e2ffd1b5591534a39f495f883286edfb2330d4557cc3842fa169477e43061b1cc3ded0363e0c5ce63b56e0711b82fee6c029a445192258b5693fcbd55771c1453148b", 0x51}, {&(0x7f0000000240)="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", 0x1000}], 0x3, &(0x7f0000001280)="c26ad96d8aa325e333c9f8ad6285187f4fc4095fadcfa526d227f9d7443900fc6cee8d48ccbb9f266e7fca0f77c297e80c82445b3c1a9208d088b0c5305398ad180225caabec5690592ae194685b78a14fe28d0c8b950a105e2a99497a8073778308992c8a6ffb0bfd5d0d6642f4d70a7308a1280f1397eb629505404f2768a3e989c627", 0x84, 0x20000000}, 0x40004) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000001380)) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000013c0)) r1 = socket$tipc(0x1e, 0x7, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000001400), &(0x7f0000001440)=0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000001480)=0x8, 0x4) r3 = accept4$rose(r1, &(0x7f00000014c0)=@short={0xb, @dev, @netrom, 0x1, @rose}, &(0x7f0000001500)=0x1c, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000001540)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @default, @rose={'rose', 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x2c, r5, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x6000005) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000001700)={0x0, 0x2, 0x7fffffff, 0x2, 0x44d}) recvfrom$llc(0xffffffffffffffff, &(0x7f0000001740)=""/166, 0xa6, 0x100, &(0x7f0000001800)={0x1a, 0x334, 0xfe, 0x26, 0x40, 0x5, @broadcast}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000001a40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f0000001880)={0x170, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x20}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}, @CTA_NAT_SRC={0xdc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5c}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xb8a0}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x49d}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r7 = accept4$unix(0xffffffffffffffff, &(0x7f0000001a80), &(0x7f0000001b00)=0x6e, 0x80000) r8 = accept4(r7, &(0x7f0000001b40)=@qipcrtr, &(0x7f0000001bc0)=0x80, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c40)=@o_path={&(0x7f0000001c00)='./file0\x00', 0x0, 0x4000, r2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001c80)={'batadv_slave_0\x00'}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x4010, r8, 0xfb99c000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001cc0)={0x3, 'macvtap0\x00', {0x933}, 0x5}) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000001d00)='veth1_to_team\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f0000001d80)=@generic={&(0x7f0000001d40)='./file0\x00', 0x0, 0x30}, 0x18) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x54, r5, 0x2, 0xfffffff9, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x48}, @void, @val={0xc, 0x99, {0x200000, 0x28}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syz_tun\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x885}, 0x40000) bind$inet(r8, &(0x7f0000001f00)={0x2, 0x4e22, @private=0xa010100}, 0x10) 375.724789ms ago: executing program 4 (id=4696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x6, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0x400ffff, 0x4) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001b80)={0x1378, 0x32, 0x100, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x3d, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x93, 0x0, 0x0, @fd}, @typed={0x8, 0x4f, 0x0, 0x0, @pid}, @nested={0x1c, 0x144, 0x0, 0x1, [@typed={0xc, 0x106, 0x0, 0x0, @u64}, @typed={0x8, 0x14d, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x136}]}, @nested={0x1334, 0xd8, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0x28, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x110}, @nested={0x1310, 0x39, 0x0, 0x1, [@nested={0xc, 0x128, 0x0, 0x1, [@nested={0x4, 0x9b}, @nested={0x4, 0xcd}]}, @typed={0xc, 0x6, 0x0, 0x0, @u64=0x19f0}, @nested={0x12f4, 0xdc, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @pid}, @nested={0x1257, 0xe5, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @fd=r3}, @generic="ff36bc571e803163cfbbb238b6da334336c74180be8d74f448aa1a1169b41266f7faac39c8373d5fbf500c78fa9217e16a733a52fba68794e4a5ab8339aad50291d3723e9d4726904d08349a27417a76e212a77d57856cbcdaa90bbca22a3adea7a83a2a687473ead436c8c7d805b84095e0d65e6cf40cb548d250020698955a80affedd5f194daa92d6b3c11909a512c35f5676dec7e96592b1ccbbd084a9c85dae7d60e3bbf351799a2d1acc7c7a9b1d0cf9225f9711d4064891477eb46e590c76eca5897774e90ed888ec24379620e1", @nested={0x4, 0x58}, @nested={0x4, 0x14}, @typed={0x14, 0x145, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="55ba249621608a807cd33e073e2023eaf147db071794b9f040d40583bf47eb08e2e6923f4e49f725b62f8d89a1e1a4f2", @nested={0x4, 0x75}, @generic="54e87ea9dd69ea5a1f8c6c9d281b3ac1f9141b37b82d2429641c53152d2baf3d0354064f6ce9ee0116cae5f07796a9394aeea692be4fc85bdac2ec158bc9404b0213cd5a290a41e533e6e4a80aaf5489d9a82737381ca91ed1f77e922b3684c19910b0dfc9858695f31638aaed89e516b4cba7b8839882ad123d61b3fe290357f49c16f12be7660e34c05939689582f61b452c5cc3d1f27cc8904b7a63878a314438305918e24408c1a84596b1437c8805d3c03134393d330b19d3f3fbe586949916e8129f00ff7c5b0cc878a42a869a21cd559954ac8189cd63bc8816754e3a391c9d2cbe711646da8ef5c7228dbe576a63d7add45f3b5187ef3f9deb7bbaca4b0a3e34d4415576e001ce8d100442a0f95c1684e52cd63f3fa05f28e6f91a707d50329b691bfcdfdc9cd22e497161777e831294c46031991b28349902de8ea4e584b7ded01e0e196853bd7f2c6c33b486550f74e2beeee791b6208e7e0c4028fb18466e5dc969b2536c1fc00da21897681668354c866030a0afb962e5cb318e51de331c2b6e6db975da15676c3fbfe42e52090afee12f385e37c6f2cec21531f5f8a545aa6e64c93089a95520764aea88bb17f7427e75f6d47c78c93f7aa02a0565b77b2586b3d76026e54f6e9702938ebb7680237306480da38a7ce6fe36fc87c656cd0e3ebb5a12ba87f41e3657e3c301fea658d2bfe4de65bb77a04ba131ad831cac38651871a363e2231b93f3a84ebbe0de638e7688291ab0167d9316c0d929b1d1a97c4e36cac01d3367ed383b946842797771339199ccdda734cc30a9638765f82603ae7b9141df64268b7f6f48d864fe22085b5b58a4b301546852889c04ffecddcc180e73fd5449aab8cd3a3c1750fe9b82f3cecea6814cebbcdf1ceb6e66d41e3a8777fa869f30f98f047b7cf871f26bf4c9477c62efa130ad8ac2f8fbac32153fc6631f42e0d0a1224cefda1c2fdd62548d35c1af1cd58ca437e3fa389ae07dc914680c0c276652259155f6ad1e3a14a833c515c2dae47972eef630a4ada16789813b0867dcf21169f45242b3231a9e01ba84ea5d34eb7ba9689c1bf35b17899ddb808c23fb6dba1dd4a6056db451e67598248a7756de09a2288cbf36cd7fdf630ad294f1935541042d388e2ec3067d2b051c99874833a9b6287258319500ea8db80e1f8e94ff35f2249b0c3a3439586155366bd1decbdfe156ca7a860d383f777f3c5c2731c40696084ce5b388e519b30c57afd3263a42c5294b8b6eb2b91a9861cf6aa1d5cabe4d335e9ffd022a3550d4a39f2e1fa20e8833eaff33d641107a0d329b39e11c0d64611017076f8ff00327581a40d15fdde24b4807208a8da7cc06e0a1e06f2977a53ca0fa636ee767ddf9b517c56f0d3184b3e33429ca49a98261a9a02b29462338561c483aafab8297c2df72ce59aab5279aea4ae8f8cd8803caea0d94b35561c593f05732eb9d95fe93affd05ed3be75b48da0cbce9dad7994df94a70c6c5750c36b64835b7f1f3e6ab18751e6e7a537800b5ffe4fcd244398517d6207b676a0199eb7456d8edd3a9729673db05354bd724d21e28e66c9e70d3f9994df5fa5ed389a4865b6570c7b600a8570d3daf581c57e2759784326168e9d617cc078d287b00beb3cde72a2a4e29fb9b47490997eff696e505f6292ee4cc65e47e92462d8df87bc36332f94a6cd566d64e3b358460ecfe1416f44d5b08129b566e897b18ab1d885f571f260f9a9ad587232d5be656c1270e60378d21ef54f33bb7f5699c36ff30dba51b353e72cadd0b90cc5af3aefa4f17f56cc4eb49fae222539ffbcd011675067ac55b2116388c992a6a3ffa98a98e29f2136866a9669fbc256b406079b03e872af7fe820b5f63bb245440376302665af6d71f7b7421b380521180e348ca436822fe9bd3febd70750b0bf610d29db5dfcf6d618aae2affb96f48c0521f7d2940d37acde237955d70f02bfe9c866048db54db45d4d289949aea627eb38655e511399d025d6784835d6000b04450ed59ef48ced2b8e25c498a2f477ffcbc8a03d1193e4e8b841a3736c349722783587202d09c7270c9a8328d081341cc8dadd2b19dfc0e006860c26f7ca8cc4041f6a8f612113abe716904765ceeeba81ab46125118b6cddf692f4215a5a04f1d020fe64b2e72caf4ca56517edacdabe54bf125687855dc813a11522f4b27cde19491d9591076d2728f6da6c0954e1e43638a4f197d97b465f5e7e642c329cc4135ce5675174a080e4b4008ee56b78798e804ba109a259b63e539482dafdc6a77e32142b61f0879e9ee9ca0429606dbca4c3f5e8ca6c03601e5e2705a7aa301c9af98ae62aae51673030dfce37b6a10ad33da97e9245ce2b7feaffb30865b5f6b43b54c90d0be13be27f5ba4d8c76ab1dd3c61afc836a17b2a79cf2490659256208ea92cb786ddbf5e7db4842bbda845b027dece684163297171ff3fcbb76b5e236f226936d05d76ea3e778e760ad04741ffaa76de3c3c88e86d054cbf6585da9fb199661b3bb951a95b7672b4a18791e94ce36296ab319885b27cb45222313bab52d4294bd4e166daaef883ac6fca27fba1a975b5b71707c1fd7dfe99643a38a65e47042924fb6a9a539a365a95cfd3c343388a8287b2134ac1c0905a3f5e2674dd98410dcd8ea3b12076e721d5cbc7bef3388ef1bc129dd72a83f56e695a066533ece7fc33d3acc7bd1b4c71e70aa9ccd981b5dd28315dc793ec042377ee050d3a979f55b1c1424d336b51c48849fdc1f7a376c8a8dfe0f853f566afcfd83c4f921b301d2ac14fa52a333e6d50b7b1d44acf7da685681454bceea5b02a5a2fa6f90232aaad1535b2050beaa1496af2b308805c06392ec5fb6d9cd88e264e20359aeff244b1f41fe432f735943e614165a382b3a56ac63d6be09139bc27c80be95c4eb4fe091cfa41b83f84c793eebfe87d04712559d549c69d1d752b78b00b1da398bb86ef768970c673d9ec850d55ec078359909602f1fc8e75f4905f879ff3c2a8eb71af37ffb8afd8ad3d34fdb3e586341fc66b95a145c6436a9a9db4e411db89c9965ee33a93b1978d49504e913f092584c17779330b4622477f0eab1e06b240d3297ea81512c721d16f9bf07c8558dba142af68ff96e2b5454f8a30c730d52205674f467dcac3571ec61d8b7d00447ae69d208adfaecd2fdae89d6c52ab5e30f92cf8ec9845348a255b51342d6c4f77957778d99520b2b9144f57401e2d07d28e67e77411445611759ff8d82c5d974ab729e52d1f98b457879a269582d00ecf3a39822a24bb2065bdf7656d7932c82bb7f561328d6b40f70b3b33f1122f0be63b4283d0c0883e2b947ffcc0f10bc71a77f8c2785ff67613333f725fad06866d9f9449e7ab4c73012a9518f171ecd7253e96a247bcb135632bcf6f6fa905b9af80f4a7d270503d4aefda64c4af85bb513e81ad65a53711af30f28488f4ef860e4fa9bce11486a57d7ddd4fe16f623e3cc35adc91f3d6d2577c10cec2655a1d9ae86fd0521a1f0dcad61b1a52eebb686414c179ed1da84eb9c6872123f1b0ed2c761971cd529dc919a0c2f346392b2c130e215d55b32c3139ad9d4956426704eecc4739bb27c88b037d9d99550216d17e9a3646c76d6439bcc144783527be78c867e1eb35d349cbf3c4d852d869cc9f8c75bfa2977fe0a9c516e75194137235fad5650b97e593772b9955a625a41bb067ec747048cc2e2417babbce1df68cfaba5e28ece25d91eeaba772a1b4c450883a120a5a87538cdeacbe515e23dbcd3b8b2347b39d8974f1b92bbebe2e57260a2bd5dacaf1990d6eb276678a70e2531e76d82ef837d66babeb9cb500d975fb72e09ee5abaddea3fc9a0edc64eed4310a29ae7291db4aa2af7f95b00e81a7eb8f3d6154057298e062776473cffe64ca4532fa72a5b381cf3fdb0216d6b362fad671edee92a4d898bf1199ae6d114ceb6bff3d8cca72677a4d02a8498ec6dc9b42a5317caf38520a7ed05308cd6185d738d6e5ea7dc49231bc5883ded0f5366c395e66876ccbe4a079a6dc6145a483c7fc98b86dac3addb46bce21671c7f0162eaca724e3fa0b7974c8b7af095c453aced3ecfd4e8818c223f99b7b393fa7a8dd6b2e444550c7a11e97645ce072384d320c27395347f4374f29ca423bed756a3f9f281857a4109c96cfcf55fb0d15e620c456e58aa8a79d839023272287c7caa6d956f9ba6582e4c7fdf2a0e15aedffb691274e8cd57fa51a5263026cdd5dbac5649c051ba4e8d7f06da4f0420b787619b0f31092675c2d62b5252c9387e841f1b83b4a7d74aeb927f70ce879fcaa2e909251aa9cfa72b7e163ceee88fdc748b282f59191dbd4939d2c913770bf321f9352b1501cfc95860d454ec6d5bbc1cee3b4c975ed79b6ce0ea82e0a502c1a62398af78d754be68adba1968cfa87fcfb0db0aba16c35f660eed186c6abe5ee60550b712ab0a6669429bca28144698db242b8875159c56e6c6df01de2fe8bbb9f3553e93d07a28554604ad4f97a770f024609682162db460ec390884f5b8d14a8c9dce578c1c5fd480f406519b8454ec0ecaf9b9dea076b89deff3bd01901e087764ccbd5c7d03ea1cf72751ccc2d9fe68367c1ccf7021e3d9fe63778e4aa8a316387a9173ee43c37f3931990e3278de918d70e9fbfac0833189a1b9dc391ad2a296f4b1addfaeb6977d1b26ce6014c615c9a70bc557ad4a2819241953d7640e7eb5d7a2ebf5685ff9b9677a21f8b3deb03797801a7467aabbd739c8bb6bbf86612135bf3c12586bacbbed99b65864bb7c94859d0b7c2d5728bf53c8d6e1f46b3baf189684892adab4119661fa319bf929ab8133c1e45d70e713eed3f675cb6f14fa1072f3da2e87a21e63e0ae251e28f251bbc5ff9b5ec9cfede10e943c2b38ecbc19042e500b68cbbb5b70a074b9333557101d972dd4f6210c6ff7e760d801d94d99cda2602d99f837a6a651fc0aabdf2949111368f814d3933df559f047ad1f2baa11514eb395d675a2873666a04b9c08b9000bb4f80d2f7c2e9049df90dbebd7fbc994867398bc34bc13e258b5c43f38058f58050dfa3576a82a3b7c40102f283e90d81d51ffef4e494ae629b21165c775285c3983e866d3086b9ad97f157ac068a0a790373dd50d29020039f0dfa2e5d6dd9687fdebea1c89743980fb4dc5a2ae2f6db2a8ac6d65ad3c58b35580936b0932b441d264ad7e240d6ded52952f54c083028b3cbd453bff5b2eb292baab60916f4a8f470e7225fe08e26fcb41c0a2ca931abe040c83e855b0b7130bdb14f7762fc78eb71955e427c52fff5bbf84ec69bb27fd961692ec34843d7f3bfc2c62c2af69f947f379f916d68f0db5fd011dbd198b3bbe3e1980e2d59dcae06b0db5adc03f05af9fcfdef9984007b02ce96b60461d6b89790235cec9159ecc9fa5e491da690b3e1187b0f1bda400612d290cf5610c5bef2af25cc875ed157ba846ab440d00f9002bfd53c6d8958fcdc849e059e917a0fc0221976c179e12b711a2eaaa649a671368c776c6063c1b0c9275969783bc453d9569064358d44d4611166cad74861bfcd0c5917e0113bcc2d4356a0df4281da1cc1d14f8460520cc02ccc6d5daf86a35f7957e04bac7ee39f4dbe120ce81a3faf3ca5fbeb460462b48d64640d50f47152ccbd7b12c92ab7e478b2d8efbb8f1696c2beb4621f7caf9846a06202a9f856e7d2a80bf2af908ef4ff63dd4b5899781e912dcdac5fbae35a74fbde3bcb4ea048d2bfb8f7711c803cc2826b9", @generic="6e7a5b2a4e9a0cfa3ae583f989f773f162ab85722cb62aee9fa6ec3eb2333b97a536492e5743b9aeac4156731d09c90470c3bd2f52226534c29ad3f0bd965cb48fd7a09fdafc3e36db69", @generic="649e0fae2c7e5028b6f72feda3e89eb43eeb0effd09c838aa95ff2e04cca7a25ef89ca3f720b12317fd4145d763955fc8691d81aec1e0edc652bc6ce279bab936a2eab05079f26809320843546c335677c6a2fa80a04be8105f4b7cddbd9b1beb7567f8ee51054d4f8355c94f0ea8575ad88b7f48291791309dfe82c12b2945f433c8b5516ea50f8b30f495f29d92b8a23b5dc42b3b92adceedd8bc39ab088ac1f45d1a6f30e11e5bd34c6f0f54a1950fd7bb8f6887681ac468b1da417c49f56806bc964c35f82f07e9968b9bfd2edb5b0f50908f497baf66a3565eacc08aeee"]}, @generic="6004e6506facae5f138ca94488438a44a004efec45a0d04f81b1fd9c0b535eb59a381a03ee63c4d53149fdd02788b061", @typed={0x8, 0xbd, 0x0, 0x0, @u32=0x6}, @nested={0x57, 0x68, 0x0, 0x1, [@generic="78f431cfd4871e944fbda4227e62fd809203183fe4e771f4f88e1708f595aa0b2aad279e0c3d1fa5d896d8316d9a02e37e976f81cbc5bd20014a427271357bfc9314f8ec53aca8457c6dab", @typed={0x8, 0x7a, 0x0, 0x0, @u32=0x73}]}]}]}]}]}, 0x1378}], 0x1, 0x0, 0x0, 0x44010}, 0x4008000) recvmsg$can_raw(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r7 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r8, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0xc044) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r8, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) sendmsg$nl_generic(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x36, 0x300, 0x70bd2c, 0x25dfdbfd, {0x19}, [@nested={0x68, 0x81, 0x0, 0x1, [@nested={0x4, 0x9f}, @nested={0x4, 0x6d}, @typed={0x56, 0x6b, 0x0, 0x0, @binary="f9ddf6fe681f537ed009f2fe43468d9a3466f4e300a8fbf0c44f44df838c852e0d99e1eefdd4000b41a342fe95172a49f26219708b97a03a5e802475cba8e3e99503a1c82de8a8c7ede483260dd84564d4c2"}, @nested={0x4, 0x97}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8008}, 0x2400c805) r10 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r10, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b0001007470726f787900000c00028008000140000000010900010073797a30000000000900020073797a3200000000140000d68f1ccfcb4f54392e77001100010000000000000000000000000a"], 0x74}}, 0x0) 55.473525ms ago: executing program 1 (id=4697): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000004c00140600fe80000000000000000000000000001dfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010001990780002"], 0x0) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000080)) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) (async) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 29.40126ms ago: executing program 3 (id=4698): r0 = socket$netlink(0x10, 0x3, 0xf) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001332564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000040)) 0s ago: executing program 0 (id=4699): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0xfff) r4 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080)={0x8000, [0xe, 0xa], 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x6912223a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239fd7, '\x00', 0x0, 0x2}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) close(r6) socket(0x27, 0x80000, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x50, 0x0, &(0x7f0000000180)="00000000000000bd8135d775c08fb0873cdf9ab1d9223dc5cccb6b88d66bc0c9fa53aa60445b1d4f1a453d4c2bce396af1aabf75f4cdf8c8812b5cc6683a95d874871854d674c0b1f6919ef174515243", 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80020}, 0x50) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) kernel console output (not intermixed with test programs): filter on device team0 [ 358.305113][T10412] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.312371][T10412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.329615][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.336866][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.656742][T16593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.727868][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.850387][T16818] gtp0: entered promiscuous mode [ 358.855557][T16818] gtp0: entered allmulticast mode [ 358.936177][T16823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.944409][T16823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.953184][T16823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.961347][T16823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.998772][T16593] veth0_vlan: entered promiscuous mode [ 359.011298][T16593] veth1_vlan: entered promiscuous mode [ 359.043098][T16593] veth0_macvtap: entered promiscuous mode [ 359.053620][T16593] veth1_macvtap: entered promiscuous mode [ 359.074381][T16593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.085906][T16593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.105106][ T6377] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.128701][ T6377] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.147951][ T6377] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.156872][ T6377] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.488958][T16836] bond0: entered promiscuous mode [ 359.494072][T16836] bond_slave_0: entered promiscuous mode [ 359.500146][T16836] bond_slave_1: entered promiscuous mode [ 359.508173][T16836] gretap0: entered promiscuous mode [ 359.514346][T16836] debugfs: 'hsr1' already exists in 'hsr' [ 359.521257][T16836] Cannot create hsr debugfs directory [ 359.526669][T16836] hsr1: entered promiscuous mode [ 359.768956][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.927647][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5610 ms [ 359.927981][ T5840] Bluetooth: hci1: command tx timeout [ 359.935759][ C1] lec:lec_tx_timeout: lec0 [ 359.936570][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 360.409750][T10450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.808595][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.200195][T16790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.402389][T16843] __nla_validate_parse: 8 callbacks suppressed [ 361.402409][T16843] netlink: 512 bytes leftover after parsing attributes in process `syz.1.3109'. [ 361.464620][T16847] validate_nla: 1 callbacks suppressed [ 361.464643][T16847] netlink: 'syz.0.3111': attribute type 3 has an invalid length. [ 361.561229][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3114'. [ 361.672787][T16855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.685702][T16855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.695348][T16855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.705042][T16855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.713690][T16855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.725682][T16859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3116'. [ 361.786876][T16854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.822636][T16862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3118'. [ 361.848868][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.865225][T16862] netlink: 'syz.3.3118': attribute type 6 has an invalid length. [ 361.980996][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3120'. [ 362.003907][T16866] netlink: 65011 bytes leftover after parsing attributes in process `syz.3.3120'. [ 362.130955][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.254670][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.400742][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.481396][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.501414][T16879] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 362.676099][T16882] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 362.737472][ T12] bridge_slave_1: left allmulticast mode [ 362.750642][ T12] bridge_slave_1: left promiscuous mode [ 362.757957][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.767787][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.780461][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.790310][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.799772][ T12] bridge_slave_0: left allmulticast mode [ 362.806379][ T12] bridge_slave_0: left promiscuous mode [ 362.812831][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.821558][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.834314][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.889580][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.227248][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.242880][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.255155][ T12] bond0 (unregistering): Released all slaves [ 363.376246][T16883] vxcan1 speed is unknown, defaulting to 1000 [ 363.758635][T16925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3134'. [ 363.791231][T16928] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3132'. [ 363.807032][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3133'. [ 364.482514][ T12] hsr_slave_0: left promiscuous mode [ 364.494102][ T12] hsr_slave_1: left promiscuous mode [ 364.503024][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.510822][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.525436][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.535025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.574581][ T12] veth1_macvtap: left promiscuous mode [ 364.589946][ T12] veth0_macvtap: left promiscuous mode [ 364.601613][ T12] veth1_vlan: left promiscuous mode [ 364.613851][ T12] veth0_vlan: left promiscuous mode [ 364.889844][T16971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.900003][ T5831] Bluetooth: hci1: command tx timeout [ 364.958016][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 364.966120][ C1] lec:lec_tx_timeout: lec0 [ 364.971215][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 365.010943][ T12] team0 (unregistering): Port device team_slave_1 removed [ 365.026856][ T12] team0 (unregistering): Port device team_slave_0 removed [ 365.173542][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 365.663816][T16883] chnl_net:caif_netlink_parms(): no params data found [ 365.711187][T16995] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3146'. [ 365.826779][ T5898] hid-generic 0005:0D36:0006.0002: item fetching failed at offset 0/1 [ 365.912646][ T5898] hid-generic 0005:0D36:0006.0002: probe with driver hid-generic failed with error -22 [ 366.008595][ T5898] net_ratelimit: 7 callbacks suppressed [ 366.008614][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.143448][T17018] IPVS: set_ctl: invalid protocol: 255 172.30.1.4:20004 [ 366.200611][T17022] netlink: 'syz.2.3151': attribute type 2 has an invalid length. [ 366.257936][T17018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.390860][T16883] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.405447][T16883] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.428164][T16883] bridge_slave_0: entered allmulticast mode [ 366.463359][T16883] bridge_slave_0: entered promiscuous mode [ 366.476702][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 366.498973][T16883] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.506730][T16883] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.523833][T16883] bridge_slave_1: entered allmulticast mode [ 366.532068][T16883] bridge_slave_1: entered promiscuous mode [ 366.618840][T17035] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.3156'. [ 366.680877][T16883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.723060][T16883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.865071][T16883] team0: Port device team_slave_0 added [ 366.893385][T17047] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3157'. [ 366.937149][T16883] team0: Port device team_slave_1 added [ 366.968170][ T5831] Bluetooth: hci1: command tx timeout [ 366.981669][T17051] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3159'. [ 367.052849][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.072614][T16883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.080382][T17046] sctp: [Deprecated]: syz.2.3158 (pid 17046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.080382][T17046] Use struct sctp_sack_info instead [ 367.114192][T16883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.152418][T16883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.166778][T16883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.175335][T16883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.201337][T17055] netlink: 'syz.3.3160': attribute type 1 has an invalid length. [ 367.201361][T17055] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3160'. [ 367.248447][T16883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.266886][T17055] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3160'. [ 367.413751][T16883] hsr_slave_0: entered promiscuous mode [ 367.459358][T16883] hsr_slave_1: entered promiscuous mode [ 367.473843][T16883] debugfs: 'hsr0' already exists in 'hsr' [ 367.488174][T16883] Cannot create hsr debugfs directory [ 367.620286][T10450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.042007][T17087] xt_CT: No such helper "snmp_trap" [ 368.070995][T17087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3168'. [ 368.092539][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.341302][T17106] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3171'. [ 368.379348][T17109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3172'. [ 369.049441][ T5831] Bluetooth: hci1: command tx timeout [ 369.132838][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.205312][T17133] netlink: 15930 bytes leftover after parsing attributes in process `syz.2.3179'. [ 369.239804][T17133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3179'. [ 369.672113][T17152] netlink: 'syz.0.3182': attribute type 1 has an invalid length. [ 369.676350][T16883] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.687829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.762455][T16883] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.858215][T16883] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.878906][T16883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.936136][T16883] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 369.977417][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 369.985534][ C1] lec:lec_tx_timeout: lec0 [ 369.994176][T16883] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 370.039228][T16883] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.088553][T16883] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.421208][T16883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.471274][T17196] batadv1: entered allmulticast mode [ 370.525785][T16883] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.560154][T10893] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.567439][T10893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.662473][T10893] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.669966][T10893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.127972][ T5831] Bluetooth: hci1: command tx timeout [ 371.161884][T17223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.616642][T17239] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 371.912309][T16883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.120667][T17269] __nla_validate_parse: 9 callbacks suppressed [ 372.120688][T17269] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3206'. [ 372.222726][T17270] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3206'. [ 372.233658][T17269] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3206'. [ 372.243882][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3206'. [ 372.271116][T17270] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3206'. [ 372.313620][T17270] netlink: 'syz.2.3206': attribute type 2 has an invalid length. [ 372.359743][T17270] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3206'. [ 372.400219][T17283] No such timeout policy "syz0" [ 372.407575][T17269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3206'. [ 372.446083][T17269] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3206'. [ 372.474677][T17269] netlink: 'syz.2.3206': attribute type 2 has an invalid length. [ 372.495993][T17269] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3206'. [ 372.664596][T17291] IPv6: NLM_F_CREATE should be specified when creating new route [ 372.673254][T17291] netlink: 'syz.2.3209': attribute type 1 has an invalid length. [ 372.743919][T17295] netlink: 'syz.2.3209': attribute type 105 has an invalid length. [ 372.804491][T17291] vxcan1 speed is unknown, defaulting to 1000 [ 373.124061][T17310] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3212'. [ 373.425441][T17317] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.452857][T16883] veth0_vlan: entered promiscuous mode [ 373.500538][T16883] veth1_vlan: entered promiscuous mode [ 373.538224][T17325] netlink: 'syz.1.3214': attribute type 2 has an invalid length. [ 373.669225][T17329] netlink: 'syz.0.3217': attribute type 1 has an invalid length. [ 373.710869][T17329] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.777746][T17330] team0: Port device team_slave_0 removed [ 373.931414][T16883] veth0_macvtap: entered promiscuous mode [ 373.957175][T16883] veth1_macvtap: entered promiscuous mode [ 374.020330][T16883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.063734][T16883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.149410][T10893] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.159895][T10893] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.175546][T10893] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.192290][T10893] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.611409][T17357] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 374.621328][T17359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.629067][T17359] IPv6: NLM_F_CREATE should be set when creating new route [ 374.750319][T10412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.766895][T10412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.865541][T17363] netlink: 'syz.1.3226': attribute type 11 has an invalid length. [ 374.910108][T10893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.928507][T10893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.049726][ T12] tipc: Subscription rejected, illegal request [ 375.560778][T17389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.568144][T17389] IPv6: NLM_F_CREATE should be set when creating new route [ 375.892481][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.902422][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.921121][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.942568][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.959339][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.057001][T17404] vxcan1 speed is unknown, defaulting to 1000 [ 376.080821][T17414] netlink: 'syz.0.3243': attribute type 14 has an invalid length. [ 376.225778][T10412] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.257790][T10412] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.297920][T10412] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.306700][T10412] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.508463][ T5824] bond1: (slave syz_tun): Removing an active aggregator [ 376.518898][ T5824] bond1: (slave syz_tun): Releasing backup interface [ 376.563938][T17423] Bluetooth: MGMT ver 1.23 [ 376.715557][T10412] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.767773][T10412] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 376.790373][T10412] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 376.862229][T17434] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 376.942348][T10412] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.955492][T10412] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 376.971692][T10412] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.122970][T17444] bond9: Unable to set up delay as MII monitoring is disabled [ 377.142944][T17444] bond9 (unregistering): Released all slaves [ 377.217807][T17445] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 377.345330][T17445] __nla_validate_parse: 12 callbacks suppressed [ 377.345354][T17445] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3249'. [ 377.411473][T10412] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.423835][T10412] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 377.441702][T10412] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.740614][T10412] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.795180][T10412] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 377.822530][T10412] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.873915][T17463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3257'. [ 377.969423][T17470] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3256'. [ 378.092670][T17475] netlink: 'syz.2.3260': attribute type 10 has an invalid length. [ 378.101941][ T5840] Bluetooth: hci3: command tx timeout [ 378.142091][T17404] chnl_net:caif_netlink_parms(): no params data found [ 378.503449][T10412] bridge_slave_1: left allmulticast mode [ 378.510025][T10412] bridge_slave_1: left promiscuous mode [ 378.528717][T10412] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.551613][T10412] bridge_slave_0: left allmulticast mode [ 378.557578][T10412] bridge_slave_0: left promiscuous mode [ 378.563569][T10412] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.670810][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 378.677904][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 379.165712][T10412] gretap0 (unregistering): left promiscuous mode [ 379.325832][T10412] bond3 (unregistering): (slave bridge2): Releasing active interface [ 379.382397][T10412] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 379.390937][T10412] bridge3 (unregistering): left promiscuous mode [ 379.442169][T10412] bond8 (unregistering): (slave bridge4): Releasing backup interface [ 379.450946][T10412] bridge4 (unregistering): left promiscuous mode [ 379.662742][T10412] bond1 (unregistering): Released all slaves [ 379.682947][T10412] bond0 (unregistering): left promiscuous mode [ 379.701713][T10412] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 379.713381][T10412] bond0 (unregistering): (slave bond2): Releasing active interface [ 379.726028][T10412] bond0 (unregistering): Released all slaves [ 379.743992][T10412] bond2 (unregistering): Released all slaves [ 379.760744][T10412] bond3 (unregistering): Released all slaves [ 379.775741][T10412] bond4 (unregistering): Released all slaves [ 379.793784][T10412] bond5 (unregistering): Released all slaves [ 379.821648][T10412] bond6 (unregistering): Released all slaves [ 379.836444][T10412] bond7 (unregistering): Released all slaves [ 379.851484][T10412] bond8 (unregistering): Released all slaves [ 379.865684][T10412] bond9 (unregistering): Released all slaves [ 379.880460][T10412] bond10 (unregistering): Released all slaves [ 379.909522][T10412] bond11 (unregistering): Released all slaves [ 379.935951][T17509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.013046][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 380.181623][ T5840] Bluetooth: hci3: command tx timeout [ 380.332432][T17537] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 380.362846][T17537] bond1 (unregistering): Released all slaves [ 380.395272][T17544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3275'. [ 380.427668][T10412] tipc: Disabling bearer [ 380.435354][T10412] tipc: Left network mode [ 380.435562][T17404] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.448313][T17404] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.455650][T17404] bridge_slave_0: entered allmulticast mode [ 380.464056][T17404] bridge_slave_0: entered promiscuous mode [ 380.473365][T17404] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.480625][T17404] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.492365][T17404] bridge_slave_1: entered allmulticast mode [ 380.500691][T17404] bridge_slave_1: entered promiscuous mode [ 380.511941][T17531] syzkaller1: entered promiscuous mode [ 380.525594][T17548] xt_nfacct: accounting object `syz1' does not exist [ 380.525752][T17531] syzkaller1: entered allmulticast mode [ 380.766234][T17404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.810130][T10412] IPVS: stopping backup sync thread 11547 ... [ 380.810321][T17404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.940453][T17553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3277'. [ 381.125581][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3282'. [ 381.185292][T17576] netlink: 'syz.4.3282': attribute type 2 has an invalid length. [ 381.222395][T17404] team0: Port device team_slave_0 added [ 381.230705][T17579] openvswitch: netlink: IP tunnel dst address not specified [ 381.264113][T17404] team0: Port device team_slave_1 added [ 381.341468][T17578] batadv0: entered promiscuous mode [ 381.347188][T17578] macsec1: entered promiscuous mode [ 381.359600][T17578] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 381.369896][T17578] batadv0: left promiscuous mode [ 381.424748][T17586] xt_hashlimit: size too large, truncated to 1048576 [ 381.581841][T17404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.593215][T17404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.735559][T17404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.793202][T17588] bond9: (slave ip6tnl0): Device is not bonding slave [ 381.800843][T17588] bond9: option active_slave: invalid value (ip6tnl0) [ 381.826417][T17588] bond9 (unregistering): Released all slaves [ 381.860276][T17592] veth0: entered promiscuous mode [ 381.969410][T17404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.048960][T17404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.163095][T17404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.246432][T17619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3292'. [ 382.258360][ T5840] Bluetooth: hci3: command tx timeout [ 382.272222][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 382.274750][T17619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3292'. [ 382.293575][T17619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3292'. [ 382.307020][T17619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3292'. [ 382.614971][T17590] veth0: left promiscuous mode [ 382.693039][T17404] hsr_slave_0: entered promiscuous mode [ 382.738369][T17404] hsr_slave_1: entered promiscuous mode [ 382.744851][T17404] debugfs: 'hsr0' already exists in 'hsr' [ 382.800698][T17404] Cannot create hsr debugfs directory [ 382.980314][T17659] __nla_validate_parse: 31 callbacks suppressed [ 382.980335][T17659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3298'. [ 383.321207][T17669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3299'. [ 383.656448][T17691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3305'. [ 383.774396][T17684] syzkaller0: entered promiscuous mode [ 383.780292][T17684] syzkaller0: entered allmulticast mode [ 383.927368][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 383.935517][ C1] lec:lec_tx_timeout: lec0 [ 384.333771][ T5840] Bluetooth: hci3: command tx timeout [ 384.344124][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3309'. [ 384.356888][T17711] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3309'. [ 384.367175][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3309'. [ 385.497185][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3 [ 385.557108][T17717] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3310'. [ 385.745649][T17716] bond3 (unregistering): Released all slaves [ 386.010089][T10412] hsr_slave_0: left promiscuous mode [ 386.038029][T10412] hsr_slave_1: left promiscuous mode [ 386.069900][T10412] veth1_macvtap: left promiscuous mode [ 386.463979][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3323'. [ 386.543674][T17765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3321'. [ 386.579925][T10412] team0 (unregistering): Port device team_slave_1 removed [ 386.729808][T17767] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 387.022445][T17774] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3324'. [ 387.315657][T17785] syzkaller0: entered promiscuous mode [ 387.321652][T17785] syzkaller0: entered allmulticast mode [ 387.686088][T10412] IPVS: stop unused estimator thread 0... [ 387.755673][T17404] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 387.800519][T17404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.831640][T17816] syzkaller0: entered promiscuous mode [ 387.837181][T17816] syzkaller0: entered allmulticast mode [ 387.873018][T17404] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 387.887253][T17811] netlink: set zone limit has 4 unknown bytes [ 387.910885][T17404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.934957][T17404] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 387.987182][T17404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.035490][T17404] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 388.086133][T17404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.308938][T17849] __nla_validate_parse: 3 callbacks suppressed [ 388.308959][T17849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3342'. [ 388.585200][T17855] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.592924][T17855] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.778674][T17873] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3347'. [ 388.794982][T17876] rdma_rxe: rxe_newlink: failed to add lo [ 388.802802][T17873] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3347'. [ 388.926729][T17404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.976432][T17404] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.016946][T10885] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.024239][T10885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.047205][T10885] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.054650][T10885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.121453][T17885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3351'. [ 389.132627][T17885] netlink: 50 bytes leftover after parsing attributes in process `syz.0.3351'. [ 389.143667][T17885] netlink: 50 bytes leftover after parsing attributes in process `syz.0.3351'. [ 389.565792][T17915] xt_hashlimit: size too large, truncated to 1048576 [ 389.664157][T17404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.671223][T17919] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20004 [ 389.820546][T17404] veth0_vlan: entered promiscuous mode [ 389.870533][T17404] veth1_vlan: entered promiscuous mode [ 389.973474][T17404] veth0_macvtap: entered promiscuous mode [ 389.996340][T17404] veth1_macvtap: entered promiscuous mode [ 390.071042][T17404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.140388][T17404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.234663][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.287051][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.322103][T10886] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.341162][T10886] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.762329][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.803271][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.899490][T10885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.928513][T10885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.231543][T17982] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3236'. [ 391.306094][T17987] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.3378'. [ 391.359258][T17987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.476046][T17993] syzkaller1: entered promiscuous mode [ 391.505970][T17993] syzkaller1: entered allmulticast mode [ 391.735037][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.747975][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.757640][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.769596][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 391.777671][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 392.311856][T18002] vxcan1 speed is unknown, defaulting to 1000 [ 393.320917][ T8006] lec:lec_start_xmit: lec0:No lecd attached [ 393.857894][ T5831] Bluetooth: hci2: command tx timeout [ 394.004433][ T5837] syz_tun (unregistering): left allmulticast mode [ 394.031914][T18034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.229457][T18059] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3390'. [ 394.241124][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3392'. [ 394.254389][T18064] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3389'. [ 394.258970][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3392'. [ 394.270832][T10412] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.305617][T18066] netlink: 'syz.0.3391': attribute type 178 has an invalid length. [ 394.313693][T10412] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.313729][T10412] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 50465 - 0 [ 394.313760][T10412] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 394.608970][T10412] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.648638][T10412] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.707785][T10412] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 50465 - 0 [ 394.747467][T10412] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 394.863830][T10412] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.884341][T10412] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.909107][T10412] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 50465 - 0 [ 394.920430][T10412] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 395.129172][T10412] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.148095][T10412] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.163669][T10412] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 50465 - 0 [ 395.184937][T10412] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 395.381798][T18107] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3402'. [ 395.517058][T18114] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3404'. [ 395.548443][T18109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3403'. [ 395.557606][T18109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3403'. [ 395.627083][T18114] ipt_REJECT: ECHOREPLY no longer supported. [ 395.774605][T18126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3405'. [ 395.825832][T18128] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 395.930706][ T5831] Bluetooth: hci2: command tx timeout [ 397.174472][T18002] chnl_net:caif_netlink_parms(): no params data found [ 397.281881][T10412] bridge_slave_1: left allmulticast mode [ 397.316630][T10412] bridge_slave_1: left promiscuous mode [ 397.324311][T18134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3407'. [ 397.349684][T10412] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.382990][T10412] bridge_slave_0: left allmulticast mode [ 397.390900][T10412] bridge_slave_0: left promiscuous mode [ 397.396694][T10412] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.508347][T18143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.519964][T18144] sctp: [Deprecated]: syz.0.3409 (pid 18144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.519964][T18144] Use struct sctp_sack_info instead [ 397.609346][T18144] xt_hashlimit: size too large, truncated to 1048576 [ 397.684878][T18149] x_tables: duplicate underflow at hook 2 [ 397.692587][T10412] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 397.726429][T10412] bond6 (unregistering): (slave ip6gre2): Releasing backup interface [ 397.744799][T10412] ip6gre2 (unregistering): left promiscuous mode [ 397.987210][T10412] bond7 (unregistering): (slave geneve3): Releasing active interface [ 398.008588][ T5831] Bluetooth: hci2: command tx timeout [ 398.322127][T10412] bond1 (unregistering): Released all slaves [ 398.336978][T10412] bond2 (unregistering): Released all slaves [ 398.355002][T10412] bond3 (unregistering): Released all slaves [ 398.375908][T10412] bond0 (unregistering): Released all slaves [ 398.394486][T10412] bond4 (unregistering): Released all slaves [ 398.411520][T10412] bond5 (unregistering): Released all slaves [ 398.431480][T10412] bond6 (unregistering): Released all slaves [ 398.447080][T10412] bond7 (unregistering): Released all slaves [ 398.464787][T10412] bond8 (unregistering): Released all slaves [ 398.821594][T10412] v: left promiscuous mode [ 398.887391][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 398.895503][ C1] lec:lec_tx_timeout: lec0 [ 398.919218][T18002] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.936132][T18002] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.969058][T18002] bridge_slave_0: entered allmulticast mode [ 398.997369][T18002] bridge_slave_0: entered promiscuous mode [ 399.010292][T10412] : left promiscuous mode [ 399.071192][T18002] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.102806][T18002] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.123680][T18002] bridge_slave_1: entered allmulticast mode [ 399.174458][T18184] netlink: 'syz.4.3417': attribute type 1 has an invalid length. [ 399.182420][T18002] bridge_slave_1: entered promiscuous mode [ 399.216547][T18184] bond1: entered promiscuous mode [ 399.222163][T18184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.306676][T18184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.338383][T18184] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 399.399821][T18184] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 399.416734][T18184] bond1: (slave ip6gre1): making interface the new active one [ 399.424667][T18184] ip6gre1: entered promiscuous mode [ 399.435509][T18184] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 399.536456][T18002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.626325][T18002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.980948][T18002] team0: Port device team_slave_0 added [ 400.008670][T18002] team0: Port device team_slave_1 added [ 400.089185][ T5840] Bluetooth: hci2: command tx timeout [ 400.217953][T18230] __nla_validate_parse: 1 callbacks suppressed [ 400.217977][T18230] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3427'. [ 400.332074][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 400.534816][T18244] vcan0: tx address claim with different name [ 400.547765][T18244] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3430'. [ 401.793833][T18002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.801004][T18002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.828676][T18002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.841874][T18002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.857684][T18002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.885638][T18002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.903070][T18226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.938633][T18238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3429'. [ 402.170820][ T5840] Bluetooth: hci2: command 0x0405 tx timeout [ 402.201363][T18259] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3435'. [ 402.220361][T18262] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3434'. [ 402.225389][T18264] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3437'. [ 402.256324][T18002] hsr_slave_0: entered promiscuous mode [ 402.269366][T18002] hsr_slave_1: entered promiscuous mode [ 402.285100][T18002] debugfs: 'hsr0' already exists in 'hsr' [ 402.292104][T18002] Cannot create hsr debugfs directory [ 402.334876][T18267] netlink: 'syz.1.3436': attribute type 30 has an invalid length. [ 402.343196][T18267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3436'. [ 402.480048][T18274] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3440'. [ 402.492984][T18274] x_tables: duplicate underflow at hook 1 [ 402.575050][T18283] Bluetooth: MGMT ver 1.23 [ 402.648466][T18283] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3441'. [ 402.689707][T18283] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3441'. [ 402.802011][ T42] IPVS: starting estimator thread 0... [ 402.809110][T18295] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 402.897455][T18298] IPVS: using max 28 ests per chain, 67200 per kthread [ 403.637652][T18333] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.688544][T10412] hsr_slave_0: left promiscuous mode [ 403.714680][T10412] hsr_slave_1: left promiscuous mode [ 403.740109][T18340] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 403.778638][T10412] veth0_macvtap: left promiscuous mode [ 403.784752][T10412] veth1_vlan: left promiscuous mode [ 403.803989][T10412] veth0_vlan: left promiscuous mode [ 403.901745][ T42] IPVS: starting estimator thread 0... [ 403.907725][T18346] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 404.010203][T18348] IPVS: using max 29 ests per chain, 69600 per kthread [ 404.472449][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 404.483625][T18363] netlink: zone id is out of range [ 404.514641][T18363] netlink: zone id is out of range [ 404.560567][T18363] netlink: zone id is out of range [ 404.565833][T18363] netlink: zone id is out of range [ 404.609064][T18363] netlink: zone id is out of range [ 404.633189][T18363] netlink: del zone limit has 4 unknown bytes [ 404.720463][T18370] syzkaller0: entered promiscuous mode [ 404.726010][T18370] syzkaller0: entered allmulticast mode [ 404.902102][T18384] sctp: [Deprecated]: syz.0.3466 (pid 18384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.902102][T18384] Use struct sctp_sack_info instead [ 405.167883][T18397] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 405.228184][T18401] __nla_validate_parse: 9 callbacks suppressed [ 405.228207][T18401] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3469'. [ 405.246197][T10412] IPVS: stop unused estimator thread 0... [ 405.360551][T18403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3470'. [ 405.369909][T18409] netlink: 'syz.1.3471': attribute type 1 has an invalid length. [ 405.373096][T18409] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3471'. [ 405.409992][T18413] netlink: 'syz.1.3471': attribute type 1 has an invalid length. [ 405.430640][T18416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3472'. [ 405.469368][T18415] netlink: 'syz.4.3472': attribute type 13 has an invalid length. [ 405.483538][T18416] netlink: 'syz.4.3472': attribute type 13 has an invalid length. [ 405.517899][T18415] netlink: 2104 bytes leftover after parsing attributes in process `syz.4.3472'. [ 405.562420][T18416] netlink: 2104 bytes leftover after parsing attributes in process `syz.4.3472'. [ 405.640127][T18002] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 405.680885][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.727383][T18002] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 405.773441][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.797658][T18427] : renamed from hsr0 (while UP) [ 405.836912][T18002] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 405.870121][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.889719][T18002] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 405.920462][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.960941][T18439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3477'. [ 406.295187][T18466] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 406.304962][T18470] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3481'. [ 406.341764][T18002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.448251][T18002] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.474002][T10885] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.481266][T10885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.529050][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.536328][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.758090][T18002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.793409][T18499] netlink: 'syz.1.3488': attribute type 10 has an invalid length. [ 406.981700][T18499] veth0_vlan: left promiscuous mode [ 407.001900][T18499] veth0_vlan: entered promiscuous mode [ 407.028197][T18499] team0: Device veth0_vlan failed to register rx_handler [ 407.350111][T18515] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3490'. [ 407.484205][T18002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.576247][T18529] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3493'. [ 407.596383][T18525] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 407.654157][T18531] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 407.715461][T18002] veth0_vlan: entered promiscuous mode [ 407.755589][T18002] veth1_vlan: entered promiscuous mode [ 407.891781][T18002] veth0_macvtap: entered promiscuous mode [ 407.919395][T18002] veth1_macvtap: entered promiscuous mode [ 407.934102][T18539] netlink: 'syz.3.3497': attribute type 1 has an invalid length. [ 408.084866][T18539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.131450][T18002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.141450][T18549] netlink: 'syz.1.3499': attribute type 1 has an invalid length. [ 408.150057][T18002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.192812][T10412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.214260][T10412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.283407][T10412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.308691][T10412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.372249][T18564] block nbd0: Unsupported socket: should be TCP or UNIX. [ 408.501861][T18564] netlink: 'syz.0.3503': attribute type 11 has an invalid length. [ 408.664029][T10444] IPVS: starting estimator thread 0... [ 408.670283][T18575] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 408.700525][T10412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.715007][T10412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.800431][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.808046][T18576] IPVS: using max 29 ests per chain, 69600 per kthread [ 408.822086][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.215428][T18592] bond3: entered promiscuous mode [ 409.605469][T18612] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.613363][T18612] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.638933][T18625] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 409.791845][T18612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.808227][T18612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.989196][T10412] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.029239][T10412] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.070554][T10412] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.114551][T10412] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.778992][T18673] __nla_validate_parse: 11 callbacks suppressed [ 410.779015][T18673] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.3528'. [ 410.839760][T18675] netlink: 'syz.4.3529': attribute type 1 has an invalid length. [ 410.868150][T18675] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3529'. [ 410.885884][T18675] netlink: 'syz.4.3529': attribute type 1 has an invalid length. [ 410.899231][T18675] netlink: 'syz.4.3529': attribute type 8 has an invalid length. [ 410.908168][T18675] netlink: 606 bytes leftover after parsing attributes in process `syz.4.3529'. [ 410.919804][T18678] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 410.941594][T10444] IPVS: starting estimator thread 0... [ 411.037397][T18679] IPVS: using max 29 ests per chain, 69600 per kthread [ 411.101442][T18682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3531'. [ 411.136560][T18687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3533'. [ 411.350668][T18692] netlink: 'syz.2.3534': attribute type 7 has an invalid length. [ 411.384548][T18692] netlink: 'syz.2.3534': attribute type 7 has an invalid length. [ 411.393923][T10885] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.407228][T10885] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.425019][T10885] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.442385][T18699] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3536'. [ 411.506425][T10885] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.547022][T18698] netlink: 'syz.1.3537': attribute type 24 has an invalid length. [ 411.620478][T18698] batadv0: entered promiscuous mode [ 411.642148][T18707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3537'. [ 411.651266][T18698] macsec1: entered promiscuous mode [ 411.654498][T18698] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 411.664648][T18707] netlink: 'syz.1.3537': attribute type 7 has an invalid length. [ 411.696724][T18707] netlink: 'syz.1.3537': attribute type 8 has an invalid length. [ 411.723144][T18698] batadv0: left promiscuous mode [ 411.742370][T18707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3537'. [ 411.773027][T18715] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.3541'. [ 411.805705][T18714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3537'. [ 412.007866][T18725] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 412.136287][T18733] bond0: entered promiscuous mode [ 412.160206][T18733] bond_slave_0: entered promiscuous mode [ 412.170521][T18733] bond_slave_1: entered promiscuous mode [ 412.188539][T18733] gretap0: entered promiscuous mode [ 412.202210][T18733] hsr1: entered promiscuous mode [ 412.361475][T18738] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 412.426555][T18738] bond4 (unregistering): Released all slaves [ 412.702496][T18758] 8021q: VLANs not supported on lo [ 412.781769][T18762] delete_channel: no stack [ 412.838521][T18765] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 412.892479][T18769] ip6t_REJECT: ECHOREPLY is not supported [ 413.038489][T18780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.214836][T18785] validate_nla: 1 callbacks suppressed [ 413.214857][T18785] netlink: 'syz.2.3564': attribute type 10 has an invalid length. [ 413.254783][T18785] dummy0: entered promiscuous mode [ 413.262037][T18785] bridge0: port 3(dummy0) entered blocking state [ 413.269147][T18785] bridge0: port 3(dummy0) entered disabled state [ 413.276204][T18785] dummy0: entered allmulticast mode [ 413.285618][T18785] bridge0: port 3(dummy0) entered blocking state [ 413.292229][T18785] bridge0: port 3(dummy0) entered forwarding state [ 413.833520][T18828] syzkaller0: entered promiscuous mode [ 413.839304][T18828] syzkaller0: entered allmulticast mode [ 413.943997][T10885] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.957845][T10885] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.984277][T18839] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 414.061863][T10885] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.073298][T10885] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.092604][T18826] tipc: Started in network mode [ 414.114388][T18826] tipc: Node identity 4a9ff5666ed3, cluster identity 4711 [ 414.136723][T18826] tipc: Enabled bearer , priority 0 [ 414.161255][T18846] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 414.165875][T18826] syzkaller0: entered promiscuous mode [ 414.196577][T18826] syzkaller0: entered allmulticast mode [ 414.269171][T18824] tipc: Resetting bearer [ 414.336175][T18824] tipc: Disabling bearer [ 414.612772][T18860] scsi_nl_rcv_msg: discarding partial skb [ 414.645570][T18869] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 414.808521][ T5831] Bluetooth: hci0: command tx timeout [ 414.935606][T18881] netlink: 'syz.2.3592': attribute type 75 has an invalid length. [ 415.509646][T18904] netlink: 'syz.0.3600': attribute type 16 has an invalid length. [ 415.662897][T18917] netlink: 'syz.3.3604': attribute type 21 has an invalid length. [ 415.697449][T18917] netlink: 'syz.3.3604': attribute type 6 has an invalid length. [ 415.746917][T18920] sch_fq: defrate 0 ignored. [ 415.822899][T18927] netlink: 'syz.1.3608': attribute type 1 has an invalid length. [ 415.874271][T18927] netlink: 'syz.1.3608': attribute type 4 has an invalid length. [ 415.944316][T18933] __nla_validate_parse: 19 callbacks suppressed [ 415.944340][T18933] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3610'. [ 416.099029][T18940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3612'. [ 416.113689][T18940] netlink: 'syz.1.3612': attribute type 4 has an invalid length. [ 416.740541][T18976] netem: unknown loss type 0 [ 416.754008][T18976] netem: change failed [ 416.922047][T18986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3624'. [ 416.965553][T18986] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3624'. [ 416.988647][T18983] netlink: 'syz.4.3626': attribute type 2 has an invalid length. [ 417.019531][T18992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3625'. [ 417.629457][T19015] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3632'. [ 419.619995][T18967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.630314][T19002] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3629'. [ 419.891931][T19026] netlink: 'syz.1.3637': attribute type 1 has an invalid length. [ 419.995164][T19034] bond2: (slave bridge2): making interface the new active one [ 420.015289][T19034] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 420.172692][T19040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.198151][T19018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.270809][T19048] netlink: 'syz.2.3641': attribute type 1 has an invalid length. [ 420.316150][T19048] bond1: entered promiscuous mode [ 420.323833][T19048] bond1: entered allmulticast mode [ 420.330842][T19048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.338670][T19054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3644'. [ 420.398009][T19048] veth3: entered promiscuous mode [ 420.409516][T19048] veth3: entered allmulticast mode [ 420.418935][T19048] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 420.458520][T19059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.736757][T19072] vlan2: entered promiscuous mode [ 420.746244][T19072] bridge0: entered promiscuous mode [ 420.775546][T19073] syzkaller0: entered promiscuous mode [ 420.781198][T19073] syzkaller0: entered allmulticast mode [ 420.831508][T19076] netlink: 'syz.2.3654': attribute type 4 has an invalid length. [ 421.023898][T19086] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 421.398583][T19110] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3663'. [ 421.434371][T19110] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3663'. [ 421.586372][ T5831] Bluetooth: hci3: link tx timeout [ 421.593439][ T5831] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 421.658375][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.672163][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.684309][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.698359][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.710449][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.730809][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.780478][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.833790][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.849729][T19129] netlink: 'syz.3.3670': attribute type 1 has an invalid length. [ 421.921344][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.985317][ T5840] Bluetooth: hci3: link tx timeout [ 421.991608][ T5840] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 422.027811][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.121378][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.177863][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.214289][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.313931][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.355185][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.391120][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.447048][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.483888][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.556591][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.583282][T19173] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3680'. [ 422.607590][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.637493][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.667211][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.720149][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.749531][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.799101][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.829514][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.866636][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.906663][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.971372][T19117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.294476][T19206] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3687'. [ 423.553425][T19214] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3691'. [ 423.597883][ T5898] hid-generic 0005:0D36:0006.0003: item fetching failed at offset 0/1 [ 423.610276][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 423.630682][ T5898] hid-generic 0005:0D36:0006.0003: probe with driver hid-generic failed with error -22 [ 423.855125][T19233] gtp1: entered promiscuous mode [ 423.873526][T19233] gtp1: entered allmulticast mode [ 423.924575][T19238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3699'. [ 424.010072][T19248] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 424.114801][T19235] syzkaller0: entered promiscuous mode [ 424.135935][T19235] syzkaller0: entered allmulticast mode [ 424.187960][T19240] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3698'. [ 424.253582][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3700'. [ 424.582659][T19282] netlink: 'syz.2.3704': attribute type 11 has an invalid length. [ 424.600936][T19282] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3704'. [ 426.011378][T19294] gretap1: entered promiscuous mode [ 426.188640][T19300] netlink: 'syz.1.3707': attribute type 1 has an invalid length. [ 426.250606][T19302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3709'. [ 426.469577][T19300] 8021q: adding VLAN 0 to HW filter on device bond3 [ 426.487103][T19304] __nla_validate_parse: 2 callbacks suppressed [ 426.487121][T19304] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3709'. [ 426.560435][T19310] vlan2: entered allmulticast mode [ 426.565625][T19310] bond3: entered allmulticast mode [ 426.575315][T19315] netlink: 'syz.4.3710': attribute type 1 has an invalid length. [ 426.584761][T19315] netlink: 'syz.4.3710': attribute type 2 has an invalid length. [ 426.596660][T19304] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3709'. [ 426.660931][T19304] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3709'. [ 426.672404][T19329] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.3715'. [ 426.702741][T19304] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3709'. [ 426.733224][T19304] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3709'. [ 426.757995][T19304] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3709'. [ 426.778256][T19304] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3709'. [ 426.803545][T19304] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3709'. [ 426.824252][T19304] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3709'. [ 427.850715][T19365] netlink: 'syz.4.3727': attribute type 29 has an invalid length. [ 427.993058][T19374] netlink: 'syz.4.3727': attribute type 3 has an invalid length. [ 429.833171][ T63] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.861574][ T63] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.908360][ T63] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.917140][ T63] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.201654][T19408] ipt_REJECT: ECHOREPLY no longer supported. [ 430.369788][T19414] sch_fq: defrate 0 ignored. [ 430.376394][T19418] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 430.569169][T19423] xt_TPROXY: Can be used only with -p tcp or -p udp [ 431.224313][T19457] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 431.331065][T19466] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 431.731388][T19479] __nla_validate_parse: 62 callbacks suppressed [ 431.731404][T19479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3757'. [ 433.095853][T19480] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 433.264076][T19505] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3762'. [ 433.339734][T19507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3763'. [ 433.350508][T19507] nbd: must specify at least one socket [ 433.400749][T19513] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 434.284011][T19525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3768'. [ 434.498827][ T5831] block nbd0: Receive control failed (result -32) [ 435.103851][T19539] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3772'. [ 435.423309][T19530] SET target dimension over the limit! [ 435.429391][T19529] SET target dimension over the limit! [ 436.716431][T19559] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3776'. [ 436.726672][T19559] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3776'. [ 436.741480][T19559] netlink: 'syz.3.3776': attribute type 5 has an invalid length. [ 436.749502][T19559] netlink: 'syz.3.3776': attribute type 6 has an invalid length. [ 436.758085][T19559] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3776'. [ 436.940941][T19561] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 438.155564][T19574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3782'. [ 438.431530][T19586] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 438.469178][T19590] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3787'. [ 439.235548][T19629] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3794'. [ 439.256651][T19629] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 440.104706][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 440.118764][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 440.617644][T19636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3795'. [ 440.722362][T19645] netlink: 'syz.1.3798': attribute type 9 has an invalid length. [ 440.755052][T19637] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3796'. [ 440.931645][T19650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3799'. [ 441.060624][T19656] vxcan1 speed is unknown, defaulting to 1000 [ 441.247582][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3804'. [ 441.290524][T19669] SET target dimension over the limit! [ 441.588153][T19676] netlink: 'syz.4.3806': attribute type 1 has an invalid length. [ 441.647590][T19676] netlink: 'syz.4.3806': attribute type 1 has an invalid length. [ 441.655866][T19676] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.3806'. [ 444.885437][T19742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3823'. [ 444.902986][T19739] netlink: 'syz.4.3822': attribute type 19 has an invalid length. [ 445.001214][T19740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3824'. [ 445.364179][T19764] TC_ACT_REPEAT abuse ? [ 445.471331][T19771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3833'. [ 445.522776][T19776] netlink: 'syz.2.3833': attribute type 1 has an invalid length. [ 445.545334][T19772] netlink: 'syz.2.3833': attribute type 1 has an invalid length. [ 445.660189][T19772] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 445.663113][T19776] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 445.848374][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3837'. [ 445.848958][T19785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3836'. [ 445.927454][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 445.935566][ C1] lec:lec_tx_timeout: lec0 [ 446.016634][T19795] bond4: entered promiscuous mode [ 446.061233][T19795] bond4: entered allmulticast mode [ 446.110795][T19803] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 446.118061][T19801] IPv6: Can't replace route, no match found [ 446.125926][T19800] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3841'. [ 446.713981][T19833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3852'. [ 446.744401][T10444] hid (null): global environment stack underflow [ 446.761388][T10444] hid-generic 0005:10CF:0004.0004: global environment stack underflow [ 446.777893][T10444] hid-generic 0005:10CF:0004.0004: item 0 0 1 11 parsing failed [ 446.792444][T10444] hid-generic 0005:10CF:0004.0004: probe with driver hid-generic failed with error -22 [ 447.093632][T19855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3855'. [ 447.582005][T19853] lec:lec_atm_close: lec0: Shut down! [ 447.935027][T19875] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3864'. [ 448.162358][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3866'. [ 449.975256][T19985] __nla_validate_parse: 11 callbacks suppressed [ 449.975279][T19985] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3888'. [ 450.041417][T17401] udevd[17401]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 450.585819][T20015] netlink: 'syz.2.3898': attribute type 1 has an invalid length. [ 450.604437][T20013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'. [ 450.633632][T20015] bond2: entered promiscuous mode [ 450.640404][T20015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 450.647136][T20013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'. [ 450.811432][T20030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3901'. [ 451.028242][T10412] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.049186][T10412] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.091252][T10412] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.129194][T10412] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.261832][T20041] syzkaller0: entered promiscuous mode [ 451.267669][T20041] syzkaller0: entered allmulticast mode [ 451.280549][T20041] netlink: 'syz.0.3906': attribute type 5 has an invalid length. [ 451.441003][T20015] bond2: (slave bridge2): making interface the new active one [ 451.453075][T20015] bridge2: entered promiscuous mode [ 451.463184][T20047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3908'. [ 451.475738][T20015] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 451.801477][T20065] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3911'. [ 451.813341][T20062] syzkaller0: entered promiscuous mode [ 451.822379][T20066] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3911'. [ 451.827772][T20062] syzkaller0: entered allmulticast mode [ 451.856147][T20062] TC_ACT_REPEAT abuse ? [ 452.149147][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3914'. [ 452.384598][T20088] netlink: 'syz.3.3917': attribute type 11 has an invalid length. [ 452.415521][T20089] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3917'. [ 452.526812][T20097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3920'. [ 452.887478][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5310 ms [ 452.895655][ C1] lec:lec_tx_timeout: lec0 [ 453.791095][T20143] openvswitch: netlink: IPv4 tun info is not correct [ 454.120895][T20149] x_tables: duplicate underflow at hook 2 [ 455.538018][T20149] netlink: 'syz.1.3935': attribute type 1 has an invalid length. [ 455.793381][T20175] __nla_validate_parse: 3 callbacks suppressed [ 455.793400][T20175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3938'. [ 455.850371][T20187] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3939'. [ 455.871852][T20175] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 455.950477][T20191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3942'. [ 456.074592][T20191] netlink: 4864 bytes leftover after parsing attributes in process `syz.3.3942'. [ 456.301506][T20201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3946'. [ 456.311595][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3946'. [ 456.322355][T20205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.346982][T20208] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3948'. [ 456.579210][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3949'. [ 456.600359][T20210] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3949'. [ 456.667490][ T8006] lec:lec_start_xmit: lec0:No lecd attached [ 456.953442][T20221] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3953'. [ 457.278092][T20239] x_tables: unsorted underflow at hook 3 [ 458.810764][T20251] veth1_macvtap: renamed from veth0_vlan [ 459.098415][T20272] netlink: 'syz.2.3966': attribute type 1 has an invalid length. [ 459.169992][T20272] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.329838][T20272] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 459.734355][T20305] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 459.777356][T20305] bond5: option packets_per_slave: allowed values 0 - 65535 [ 459.890757][T20305] bond5 (unregistering): Released all slaves [ 460.125884][T20310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.158544][ T5488] veth1_macvtap: left promiscuous mode [ 460.250227][ T5488] veth1_macvtap: entered promiscuous mode [ 461.782604][T20332] tipc: Started in network mode [ 461.787715][T20332] tipc: Node identity 401, cluster identity 4711 [ 461.794064][T20332] tipc: Node number set to 1025 [ 461.927475][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 461.935544][ C1] lec:lec_tx_timeout: lec0 [ 462.051217][T20362] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 462.113002][T20371] netlink: 'syz.1.3983': attribute type 3 has an invalid length. [ 462.369414][T20389] __nla_validate_parse: 1 callbacks suppressed [ 462.369435][T20389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3989'. [ 462.668106][T20389] 8021q: adding VLAN 0 to HW filter on device bond4 [ 462.704262][T20389] bond3: (slave bond4): Enslaving as an active interface with an up link [ 462.927130][T20398] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3991'. [ 463.107717][T20407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3992'. [ 463.320922][T20413] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.703922][T20432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3999'. [ 463.820463][T20432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.843411][T20439] macvlan2: entered promiscuous mode [ 463.851254][T20439] macvlan2: entered allmulticast mode [ 463.857087][T20439] bond5: entered allmulticast mode [ 463.866823][T20439] bond5: entered promiscuous mode [ 463.893033][T20439] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 463.903320][T20439] team0: Port device macvlan2 added [ 463.916352][T20441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4002'. [ 464.451123][T20460] vlan3: entered promiscuous mode [ 464.459402][T20460] geneve1: entered promiscuous mode [ 464.464929][T20460] vlan3: entered allmulticast mode [ 464.471212][T20460] geneve1: entered allmulticast mode [ 464.494998][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4010'. [ 464.504053][T20468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4010'. [ 464.828934][T20484] netlink: 'syz.4.4016': attribute type 3 has an invalid length. [ 464.929393][T20487] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4017'. [ 464.941782][T20488] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4018'. [ 464.970466][T20488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4018'. [ 465.101803][T20492] pimreg10: entered allmulticast mode [ 465.337105][T20509] IPv6: addrconf: prefix option has invalid lifetime [ 465.383972][T20511] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 467.026674][T20540] netlink: 'syz.2.4031': attribute type 8 has an invalid length. [ 467.363985][T20561] 8021q: adding VLAN 0 to HW filter on device bond6 [ 467.613858][T20582] __nla_validate_parse: 3 callbacks suppressed [ 467.613877][T20582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4042'. [ 467.655636][T20585] netlink: 'syz.3.4046': attribute type 21 has an invalid length. [ 467.702204][T20586] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 467.718778][T20589] netlink: 'syz.2.4045': attribute type 3 has an invalid length. [ 467.770363][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 467.770373][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 467.863090][T20598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.054901][T20607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4050'. [ 468.118889][T20607] block nbd0: Unsupported socket: should be TCP or UNIX. [ 468.198273][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4051'. [ 468.730536][T20646] netlink: 'syz.2.4061': attribute type 1 has an invalid length. [ 468.738481][T20646] netlink: 'syz.2.4061': attribute type 2 has an invalid length. [ 468.836571][T20646] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4061'. [ 469.143493][T20667] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4066'. [ 469.146369][T20668] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4066'. [ 469.180836][T20668] netlink: ct family unspecified [ 469.188098][T20667] netlink: ct family unspecified [ 469.434656][T20678] bond2: (slave gre0): Device is not bonding slave [ 469.441563][T20678] bond2: option active_slave: invalid value (gre0) [ 469.465322][T20678] bond2 (unregistering): Released all slaves [ 469.489675][T20686] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 469.652272][T20696] delete_channel: no stack [ 469.679801][T20678] bond2: (slave gre0): Device is not bonding slave [ 469.686684][T20678] bond2: option active_slave: invalid value (gre0) [ 469.702571][T20678] bond2 (unregistering): Released all slaves [ 469.866423][T20678] bond2: (slave gre0): Device is not bonding slave [ 469.873583][T20678] bond2: option active_slave: invalid value (gre0) [ 469.884579][T20678] bond2 (unregistering): Released all slaves [ 469.893142][T20707] netlink: 'syz.2.4075': attribute type 3 has an invalid length. [ 470.073088][T20678] bond2: (slave gre0): Device is not bonding slave [ 470.082218][T20678] bond2: option active_slave: invalid value (gre0) [ 470.093597][T20678] bond2 (unregistering): Released all slaves [ 470.192168][T20678] bond2: (slave gre0): Device is not bonding slave [ 470.202095][T20678] bond2: option active_slave: invalid value (gre0) [ 470.233083][T20678] bond2 (unregistering): Released all slaves [ 470.367605][T20730] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4081'. [ 470.387463][T20729] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4081'. [ 470.438411][T20737] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 470.887973][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 470.895363][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 470.934617][T20770] netlink: 'syz.3.4094': attribute type 26 has an invalid length. [ 471.152345][T17401] udevd[17401]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 471.235443][T20784] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 471.371526][T20791] xt_connbytes: Forcing CT accounting to be enabled [ 471.559731][T20806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4104'. [ 471.586751][T20806] bridge0: port 3(dummy0) entered disabled state [ 471.593470][T20806] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.601231][T20806] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.610485][T20803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4107'. [ 471.638604][T20803] netlink: 'syz.1.4107': attribute type 4 has an invalid length. [ 471.820789][T20812] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 471.906910][T20820] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 472.100613][ T5831] Bluetooth: hci3: link tx timeout [ 472.105958][ T5831] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 472.147968][T10412] nci: nci_ntf_packet: unsupported ntf opcode 0xf3c [ 472.772528][T20876] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 472.828759][T20881] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 472.867879][T20828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.887079][T20859] netlink: 'syz.4.4121': attribute type 3 has an invalid length. [ 472.897003][T20859] netlink: 'syz.4.4121': attribute type 1 has an invalid length. [ 472.906758][T20859] __nla_validate_parse: 4 callbacks suppressed [ 472.906779][T20859] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4121'. [ 473.139690][T20901] pimreg: entered allmulticast mode [ 473.307589][T20908] netlink: 280 bytes leftover after parsing attributes in process `syz.0.4134'. [ 473.458567][T20912] syzkaller0: entered promiscuous mode [ 473.464117][T20912] syzkaller0: entered allmulticast mode [ 473.912275][T20940] gre1: entered promiscuous mode [ 473.962391][T17401] udevd[17401]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 474.183447][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 475.607966][T20975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4149'. [ 475.649374][T20978] nftables ruleset with unbound chain [ 475.684410][T20978] netlink: 'syz.3.4147': attribute type 1 has an invalid length. [ 475.698112][T20979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4148'. [ 475.881006][T20986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.062359][ T6377] bridge_slave_1: left allmulticast mode [ 476.082786][ T6377] bridge_slave_1: left promiscuous mode [ 476.102946][T21000] --map-set only usable from mangle table [ 476.112718][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.128116][T21000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4154'. [ 476.163132][ T6377] bridge_slave_0: left allmulticast mode [ 476.207783][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.339119][T21012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4158'. [ 476.505696][T21024] netlink: 'syz.3.4160': attribute type 1 has an invalid length. [ 476.528363][T21024] netlink: 'syz.3.4160': attribute type 3 has an invalid length. [ 476.551659][T21024] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4160'. [ 476.806431][ T6377] dvmrp0 (unregistering): left allmulticast mode [ 477.300016][ T6377] bond0 (unregistering): left promiscuous mode [ 477.306328][ T6377] bond_slave_0: left promiscuous mode [ 477.312148][ T6377] bond_slave_1: left promiscuous mode [ 477.323109][ T6377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.333467][ T6377] bond_slave_0: left allmulticast mode [ 477.341802][ T6377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.351615][ T6377] bond_slave_1: left allmulticast mode [ 477.358932][ T6377] bond0 (unregistering): Released all slaves [ 477.369740][ T6377] bond1 (unregistering): Released all slaves [ 477.384070][ T6377] bond2 (unregistering): Released all slaves [ 477.401522][ T6377] bond3 (unregistering): Released all slaves [ 477.416265][ T6377] bond4 (unregistering): Released all slaves [ 477.436334][ T6377] bond5 (unregistering): Released all slaves [ 477.454089][ T6377] bond6 (unregistering): Released all slaves [ 477.468752][ T6377] bond7 (unregistering): Released all slaves [ 477.483188][ T6377] bond8 (unregistering): Released all slaves [ 477.505576][ T6377] bond9 (unregistering): Released all slaves [ 477.523795][ T6377] bond10 (unregistering): Released all slaves [ 477.539322][ T6377] bond11 (unregistering): Released all slaves [ 477.554908][T20997] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.4156'. [ 477.778983][ T6377] v: left promiscuous mode [ 477.792964][T21051] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4163'. [ 477.823246][T21051] netlink: 'syz.3.4163': attribute type 1 has an invalid length. [ 477.992577][T21051] 8021q: adding VLAN 0 to HW filter on device bond6 [ 478.048232][T21070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4167'. [ 478.070386][ T6377] : left promiscuous mode [ 478.136652][T21062] bond6: (slave geneve2): making interface the new active one [ 478.158963][T21062] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 478.169681][T21060] veth0: entered promiscuous mode [ 478.177270][T21070] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.184949][T21070] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.229980][ T6377] tipc: Disabling bearer [ 478.250321][ T6377] tipc: Disabling bearer [ 478.261067][ T6377] tipc: Left network mode [ 478.261092][T10885] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.291856][T10885] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.356763][T21059] veth0: left promiscuous mode [ 478.367064][T10885] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.411086][T21081] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4168'. [ 478.427461][T10885] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.546745][T21086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4170'. [ 478.605493][T21091] netlink: 'syz.0.4170': attribute type 3 has an invalid length. [ 478.659932][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4169'. [ 478.678775][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4169'. [ 478.847309][T21101] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4174'. [ 478.888551][T21083] syzkaller0: entered promiscuous mode [ 478.894096][T21083] syzkaller0: entered allmulticast mode [ 479.020610][T21087] s5: renamed from bond_slave_0 (while UP) [ 479.263909][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4178'. [ 479.273224][T21124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4178'. [ 480.723716][T21134] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 480.987962][T21139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4182'. [ 481.405958][T21167] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 481.556682][T21179] xt_hashlimit: overflow, try lower: 3/0 [ 481.886200][T21189] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 481.894784][T21189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.386860][T21186] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4193'. [ 483.132583][T21237] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 483.438202][ T6377] hsr_slave_0: left promiscuous mode [ 483.515533][ T6377] hsr_slave_1: left promiscuous mode [ 483.588825][ T6377] veth1_macvtap: left promiscuous mode [ 483.604523][ T6377] veth0_macvtap: left promiscuous mode [ 483.626447][ T6377] veth1_vlan: left promiscuous mode [ 483.646755][ T6377] veth0_vlan: left promiscuous mode [ 484.429999][ T6377] team0 (unregistering): Port device team_slave_1 removed [ 484.454233][ T6377] team0 (unregistering): Port device team_slave_0 removed [ 484.531805][ T6377] team0 (unregistering): Port device dummy0 removed [ 484.599465][T21259] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 484.611352][T21259] bond7 (unregistering): Released all slaves [ 484.793863][T21284] netlink: 'syz.1.4209': attribute type 1 has an invalid length. [ 484.829917][T21284] netlink: 'syz.1.4209': attribute type 1 has an invalid length. [ 485.045260][T21315] tipc: Enabling of bearer rejected, failed to enable media [ 485.191034][ T6377] IPVS: stop unused estimator thread 0... [ 485.762835][T21359] __nla_validate_parse: 1 callbacks suppressed [ 485.762856][T21359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4223'. [ 485.780891][T21359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4223'. [ 485.813087][T21359] SET target dimension over the limit! [ 485.831402][T21363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4224'. [ 485.869662][T21362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4224'. [ 485.952686][ T29] audit: type=1800 audit(1776172518.787:5): pid=21359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4223" name="memory.events" dev="tmpfs" ino=746 res=0 errno=0 [ 486.719909][T21419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.881229][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f21d800: rx timeout, send abort [ 486.981730][T21432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4242'. [ 487.165244][T21443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4245'. [ 487.230623][T21443] bond7: entered promiscuous mode [ 487.236340][T21443] 8021q: adding VLAN 0 to HW filter on device bond7 [ 487.291492][T21449] bridge4: entered promiscuous mode [ 487.307873][T21449] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 487.354815][T21443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4245'. [ 487.381455][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f21e800: rx timeout, send abort [ 487.389940][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f21d800: abort rx timeout. Force session deactivation [ 487.784223][T21483] nbd: must specify a size in bytes for the device [ 487.804229][T21477] +: renamed from syzkaller0 [ 487.889840][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f21e800: abort rx timeout. Force session deactivation [ 487.976157][T21486] syzkaller0: entered promiscuous mode [ 487.983889][T21486] syzkaller0: entered allmulticast mode [ 488.106847][T21499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.316936][T21514] pimreg3: entered allmulticast mode [ 488.507758][T21529] vlan2: entered promiscuous mode [ 488.512968][T21529] bridge0: entered promiscuous mode [ 489.255947][T21543] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4271'. [ 489.291181][T21543] 8021q: VLANs not supported on ip_vti0 [ 489.547181][T21551] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4270'. [ 489.661982][T21551] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4270'. [ 489.724229][T21561] netlink: 'syz.2.4274': attribute type 2 has an invalid length. [ 489.744046][T21563] bridge_slave_1: left allmulticast mode [ 489.756658][ T63] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe5 [ 489.781810][T21563] bridge_slave_1: left promiscuous mode [ 489.838518][T21563] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.008275][T21563] bridge_slave_0: left allmulticast mode [ 490.014360][T21563] bridge_slave_0: left promiscuous mode [ 490.024937][T21563] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.183700][T21581] netlink: 'syz.2.4279': attribute type 15 has an invalid length. [ 490.317161][T21586] raw_sendmsg: syz.2.4281 forgot to set AF_INET. Fix it! [ 490.438120][T21585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.476236][T21592] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 490.842033][T21614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4292'. [ 491.402338][T21641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4303'. [ 491.450193][T21644] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4303'. [ 491.480898][T21642] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 491.506138][T21641] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 491.566049][T21641] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 491.601499][T21641] team0: Failed to send options change via netlink (err -105) [ 491.609869][T21641] team0: Port device batadv1 added [ 491.723968][T21655] bridge0: port 3(veth0_to_bridge) entered blocking state [ 491.737872][T21655] bridge0: port 3(veth0_to_bridge) entered disabled state [ 491.745589][T21655] veth0_to_bridge: entered allmulticast mode [ 491.768784][T21655] veth0_to_bridge: entered promiscuous mode [ 492.062887][T21665] syzkaller0: entered promiscuous mode [ 492.072511][T21665] syzkaller0: entered allmulticast mode [ 492.265806][T21679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.498923][T21682] IPv6: NLM_F_CREATE should be specified when creating new route [ 492.517067][T21682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4312'. [ 493.997816][T21711] netlink: 'syz.4.4321': attribute type 1 has an invalid length. [ 494.036891][T21714] netlink: 'syz.4.4321': attribute type 1 has an invalid length. [ 494.051897][T21718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4320'. [ 494.097947][T21718] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4320'. [ 494.121617][T21711] bond2: entered promiscuous mode [ 494.131402][T21711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 494.147778][T10412] bond0: (slave bond_slave_0): interface is now down [ 494.158958][T21722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.167457][T21718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4320'. [ 494.186134][T10412] bond0: (slave bond_slave_1): interface is now down [ 494.206889][T21718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4320'. [ 494.321213][T21728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4325'. [ 494.373600][T21730] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4327'. [ 494.420245][T21732] sctp: [Deprecated]: syz.2.4326 (pid 21732) Use of int in max_burst socket option. [ 494.420245][T21732] Use struct sctp_assoc_value instead [ 494.910066][T21763] netlink: 'syz.4.4335': attribute type 1 has an invalid length. [ 494.993957][T21774] netlink: 'syz.0.4339': attribute type 11 has an invalid length. [ 495.087969][T21787] netlink: 'syz.4.4342': attribute type 12 has an invalid length. [ 495.189228][T21794] rdma_rxe: rxe_newlink: failed to add lo [ 495.319826][T21799] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 495.875176][T21834] netlink: 'syz.1.4354': attribute type 3 has an invalid length. [ 496.030964][T21843] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 496.184662][T21849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.215658][T21849] __nla_validate_parse: 11 callbacks suppressed [ 496.215679][T21849] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4359'. [ 496.530434][T21864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4364'. [ 496.543450][T21864] netlink: 'syz.1.4364': attribute type 1 has an invalid length. [ 496.649094][T21868] netlink: 'syz.1.4366': attribute type 2 has an invalid length. [ 496.729074][T10412] bond0: (slave bond_slave_0): interface is now down [ 496.735853][T10412] bond0: (slave bond_slave_1): interface is now down [ 496.781143][T10412] bond0: now running without any active interface! [ 496.795603][T21875] netlink: 'syz.2.4368': attribute type 11 has an invalid length. [ 496.816738][T21875] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.4368'. [ 496.889443][T21878] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4369'. [ 497.233374][T21886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4372'. [ 497.424799][T21896] pim6reg1: entered promiscuous mode [ 497.430444][T21896] pim6reg1: entered allmulticast mode [ 498.030906][T21911] netlink: 'syz.1.4380': attribute type 1 has an invalid length. [ 498.129353][T21911] bond5: entered promiscuous mode [ 498.145831][T21911] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.165812][T21922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4382'. [ 498.219599][T21921] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.248112][T21921] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 498.260025][T21921] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 498.280282][T21921] bond5: (slave ip6gre2): making interface the new active one [ 498.303254][T21921] ip6gre2: entered promiscuous mode [ 498.320217][T21921] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 498.352216][T21929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.388317][T21933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4385'. [ 498.442889][T21933] hsr_slave_1 (unregistering): left promiscuous mode [ 498.487643][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 498.909585][T21957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4394'. [ 498.924956][T21957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.960419][T21962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4394'. [ 499.021493][T21957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.114743][T21962] bond3: (slave syz_tun): Removing an active aggregator [ 499.125148][T21962] bond3: (slave syz_tun): Releasing backup interface [ 499.143289][T21974] netlink: 'syz.1.4398': attribute type 1 has an invalid length. [ 499.152251][T21974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.206121][T21977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4400'. [ 499.222370][T21973] syzkaller0: entered promiscuous mode [ 499.228455][T21973] syzkaller0: entered allmulticast mode [ 499.240718][T21973] x_tables: duplicate underflow at hook 2 [ 499.257142][T21977] Bluetooth: MGMT ver 1.23 [ 499.415046][T21987] FAULT_INJECTION: forcing a failure. [ 499.415046][T21987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.428926][T21987] CPU: 0 UID: 0 PID: 21987 Comm: syz.4.4403 Not tainted syzkaller #0 PREEMPT(full) [ 499.428956][T21987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 499.428976][T21987] Call Trace: [ 499.428985][T21987] [ 499.428995][T21987] dump_stack_lvl+0xe8/0x150 [ 499.429034][T21987] should_fail_ex+0x412/0x560 [ 499.429076][T21987] _copy_from_user+0x2d/0xb0 [ 499.429105][T21987] ___sys_sendmsg+0x1c6/0x360 [ 499.429143][T21987] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.429216][T21987] ? __fget_files+0x2a/0x420 [ 499.429238][T21987] ? __fget_files+0x3a0/0x420 [ 499.429270][T21987] __x64_sys_sendmsg+0x1bd/0x2a0 [ 499.429305][T21987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.429347][T21987] ? __pfx_ksys_write+0x10/0x10 [ 499.429386][T21987] do_syscall_64+0x14d/0xf80 [ 499.429417][T21987] ? trace_irq_disable+0x3b/0x150 [ 499.429437][T21987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.429460][T21987] ? clear_bhb_loop+0x40/0x90 [ 499.429487][T21987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.429514][T21987] RIP: 0033:0x7fbb81b9c819 [ 499.429536][T21987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.429556][T21987] RSP: 002b:00007fbb82ac5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.429580][T21987] RAX: ffffffffffffffda RBX: 00007fbb81e15fa0 RCX: 00007fbb81b9c819 [ 499.429596][T21987] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 499.429610][T21987] RBP: 00007fbb82ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 499.429623][T21987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.429635][T21987] R13: 00007fbb81e16038 R14: 00007fbb81e15fa0 R15: 00007ffeab386bd8 [ 499.429671][T21987] [ 499.667761][T21985] netlink: 'syz.3.4402': attribute type 17 has an invalid length. [ 499.723196][T21996] pimreg: left allmulticast mode [ 499.932452][T21996] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 500.160737][T22016] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 500.254815][T22028] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 500.365042][T22034] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 500.457062][T22036] netlink: 'syz.1.4417': attribute type 64 has an invalid length. [ 500.507837][T22038] netlink: 'syz.3.4418': attribute type 25 has an invalid length. [ 500.539861][T22041] netlink: 'syz.3.4418': attribute type 25 has an invalid length. [ 500.615578][T22049] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 500.872642][T22062] set match dimension is over the limit! [ 500.931343][T22067] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20265 [ 501.192054][T22084] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 501.273192][T22091] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 501.318268][T22094] __nla_validate_parse: 16 callbacks suppressed [ 501.318287][T22094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4437'. [ 501.410610][T22099] openvswitch: netlink: Missing valid actions attribute. [ 501.418064][T22099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.440058][T22101] netlink: 'syz.3.4440': attribute type 2 has an invalid length. [ 501.467519][T22101] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4440'. [ 501.485095][T22101] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4440'. [ 501.499004][T22103] FAULT_INJECTION: forcing a failure. [ 501.499004][T22103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.529389][T22103] CPU: 1 UID: 0 PID: 22103 Comm: syz.0.4441 Not tainted syzkaller #0 PREEMPT(full) [ 501.529426][T22103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 501.529440][T22103] Call Trace: [ 501.529449][T22103] [ 501.529457][T22103] dump_stack_lvl+0xe8/0x150 [ 501.529495][T22103] should_fail_ex+0x412/0x560 [ 501.529534][T22103] _copy_from_iter+0x1d3/0x1670 [ 501.529557][T22103] ? rcu_is_watching+0x15/0xb0 [ 501.529589][T22103] ? trace_kmem_cache_alloc+0x29/0xf0 [ 501.529612][T22103] ? __build_skb+0x62/0x440 [ 501.529640][T22103] ? __build_skb+0x62/0x440 [ 501.529667][T22103] ? __pfx__copy_from_iter+0x10/0x10 [ 501.529694][T22103] ? __build_skb+0x2a2/0x440 [ 501.529722][T22103] ? netlink_sendmsg+0x650/0xb40 [ 501.529746][T22103] ? skb_put+0x11b/0x210 [ 501.529776][T22103] netlink_sendmsg+0x6c0/0xb40 [ 501.529811][T22103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.529840][T22103] ? aa_sock_msg_perm+0xf1/0x1b0 [ 501.529876][T22103] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.529905][T22103] ____sys_sendmsg+0x972/0x9f0 [ 501.529943][T22103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.529993][T22103] ? import_iovec+0x73/0xa0 [ 501.530022][T22103] ___sys_sendmsg+0x2a5/0x360 [ 501.530064][T22103] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.530128][T22103] ? __fget_files+0x2a/0x420 [ 501.530147][T22103] ? __fget_files+0x3a0/0x420 [ 501.530176][T22103] __x64_sys_sendmsg+0x1bd/0x2a0 [ 501.530207][T22103] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.530246][T22103] ? __pfx_ksys_write+0x10/0x10 [ 501.530281][T22103] do_syscall_64+0x14d/0xf80 [ 501.530311][T22103] ? trace_irq_disable+0x3b/0x150 [ 501.530330][T22103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.530351][T22103] ? clear_bhb_loop+0x40/0x90 [ 501.530377][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.530398][T22103] RIP: 0033:0x7fa6b4d9c819 [ 501.530417][T22103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.530435][T22103] RSP: 002b:00007fa6b5d01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.530477][T22103] RAX: ffffffffffffffda RBX: 00007fa6b5015fa0 RCX: 00007fa6b4d9c819 [ 501.530493][T22103] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 501.530507][T22103] RBP: 00007fa6b5d01090 R08: 0000000000000000 R09: 0000000000000000 [ 501.530520][T22103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.530533][T22103] R13: 00007fa6b5016038 R14: 00007fa6b5015fa0 R15: 00007ffe3afab578 [ 501.530567][T22103] [ 501.792487][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 501.798777][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 501.834366][T22105] netlink: 'syz.4.4443': attribute type 5 has an invalid length. [ 501.884518][T22109] netlink: 'syz.1.4444': attribute type 2 has an invalid length. [ 501.892773][T22109] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4444'. [ 502.007952][T22117] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.4447'. [ 502.017912][T22117] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 502.153236][T22122] syzkaller0: entered promiscuous mode [ 502.436694][T22146] netlink: 'syz.2.4453': attribute type 16 has an invalid length. [ 502.494033][T22146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4453'. [ 502.582224][T22156] xt_TCPMSS: Only works on TCP SYN packets [ 502.872080][T22181] netlink: 'syz.3.4460': attribute type 4 has an invalid length. [ 502.887030][T22183] netlink: 'syz.4.4461': attribute type 2 has an invalid length. [ 502.918266][T22183] netlink: 'syz.4.4461': attribute type 1 has an invalid length. [ 503.001997][T22183] nbd: must specify a device to reconfigure [ 503.017825][T22191] netlink: 'syz.4.4461': attribute type 2 has an invalid length. [ 503.029066][T22191] netlink: 'syz.4.4461': attribute type 1 has an invalid length. [ 503.176087][T22203] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4467'. [ 503.185518][T22203] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4467'. [ 503.231434][T22207] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4468'. [ 503.244901][T22206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4468'. [ 503.661315][T22239] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 503.682490][T22243] netlink: 'syz.1.4479': attribute type 29 has an invalid length. [ 503.861393][T17397] udevd[17397]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 504.075350][T22255] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 504.161180][T22263] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 504.498100][T22278] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 504.585699][T22278] net_ratelimit: 1 callbacks suppressed [ 504.585721][T22278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.700667][T22288] batadv_slave_0: entered promiscuous mode [ 504.713050][T22292] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 504.817862][T22286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.847097][T22293] vxcan1 speed is unknown, defaulting to 1000 [ 504.854934][T22286] batadv_slave_0: left promiscuous mode [ 504.883559][T22298] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 505.104408][T22308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 505.111791][T22308] IPv6: NLM_F_CREATE should be set when creating new route [ 505.121574][T22308] lo: entered allmulticast mode [ 505.165342][T22308] tunl0: entered allmulticast mode [ 505.177118][T22308] gre0: entered allmulticast mode [ 505.213775][T22308] gretap0: entered allmulticast mode [ 505.235163][T22308] erspan0: entered allmulticast mode [ 505.247794][T22308] ip_vti0: entered allmulticast mode [ 505.308855][T22308] ip6_vti0: entered allmulticast mode [ 505.321136][T22308] sit0: entered allmulticast mode [ 505.334908][T22308] ip6tnl0: entered allmulticast mode [ 505.344623][T22308] ip6gre0: entered allmulticast mode [ 505.355923][T22308] syz_tun: entered allmulticast mode [ 505.373285][T22308] ip6gretap0: entered allmulticast mode [ 505.383515][T22308] bond0: entered allmulticast mode [ 505.390189][T22308] bond_slave_0: entered allmulticast mode [ 505.396173][T22308] bond_slave_1: entered allmulticast mode [ 505.411503][T22308] team0: entered allmulticast mode [ 505.417022][T22308] team_slave_0: entered allmulticast mode [ 505.424399][T22308] team_slave_1: entered allmulticast mode [ 505.436503][T22308] dummy0: entered allmulticast mode [ 505.450283][T22308] nlmon0: entered allmulticast mode [ 505.478116][T22308] caif0: entered allmulticast mode [ 505.487727][T22308] vxcan0: entered allmulticast mode [ 505.508290][T22308] vxcan1: entered allmulticast mode [ 505.518633][T22308] veth0: entered allmulticast mode [ 505.539170][T22308] veth1: entered allmulticast mode [ 505.555502][T22308] wg0: entered allmulticast mode [ 505.566424][T22308] wg1: entered allmulticast mode [ 505.575642][T22308] wg2: entered allmulticast mode [ 505.584549][T22308] veth0_to_bridge: entered allmulticast mode [ 505.610698][T22308] bridge_slave_0: entered allmulticast mode [ 505.629199][T22308] veth1_to_bridge: entered allmulticast mode [ 505.648402][T22308] bridge_slave_1: entered allmulticast mode [ 505.682639][T22308] veth0_to_bond: entered allmulticast mode [ 505.835703][T22308] veth1_to_bond: entered allmulticast mode [ 505.888196][T22308] veth0_to_team: entered allmulticast mode [ 505.921007][T22308] veth1_to_team: entered allmulticast mode [ 505.968899][T22308] veth0_to_batadv: entered allmulticast mode [ 505.991748][T22308] batadv_slave_0: entered allmulticast mode [ 506.007114][T22308] veth1_to_batadv: entered allmulticast mode [ 506.026033][T22308] batadv_slave_1: entered allmulticast mode [ 506.038957][T22308] xfrm0: entered allmulticast mode [ 506.047019][T22308] veth0_to_hsr: entered allmulticast mode [ 506.056151][T22308] hsr_slave_0: entered allmulticast mode [ 506.076328][T22308] veth1_to_hsr: entered allmulticast mode [ 506.090795][T22308] hsr_slave_1: entered allmulticast mode [ 506.109749][T22308] hsr0: entered allmulticast mode [ 506.129937][T22308] veth1_virt_wifi: entered allmulticast mode [ 506.141436][T22308] veth0_virt_wifi: entered allmulticast mode [ 506.152444][T22308] virt_wifi0: entered allmulticast mode [ 506.158956][T22308] veth1_vlan: entered allmulticast mode [ 506.168648][T22308] veth0_vlan: entered allmulticast mode [ 506.184521][T22308] vlan0: entered allmulticast mode [ 506.191038][T22308] vlan1: entered allmulticast mode [ 506.196743][T22308] macvlan0: entered allmulticast mode [ 506.209462][T22308] macvlan1: entered allmulticast mode [ 506.218772][T22308] ipvlan0: entered allmulticast mode [ 506.224426][T22308] ipvlan1: entered allmulticast mode [ 506.234319][T22308] veth1_macvtap: entered allmulticast mode [ 506.248349][T22308] veth0_macvtap: entered allmulticast mode [ 506.255863][T22308] macvtap0: entered allmulticast mode [ 506.270966][T22308] macsec0: entered allmulticast mode [ 506.285902][T22308] geneve0: entered allmulticast mode [ 506.295981][T22308] geneve1: entered allmulticast mode [ 506.305737][T22308] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 506.313345][T22308] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 506.323135][T22308] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 506.334448][T22308] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 506.344667][T22308] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 506.354354][T22308] mac80211_hwsim hwsim46 wlan0: entered allmulticast mode [ 506.361802][T22308] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode [ 506.370901][T22308] erspan1: entered allmulticast mode [ 506.376417][T22308] mac80211_hwsim hwsim48 wlan2: entered allmulticast mode [ 506.384226][T22308] mac80211_hwsim hwsim49 wlan3: entered allmulticast mode [ 506.392203][T22308] bond1: left promiscuous mode [ 506.397585][T22308] bridge1: left promiscuous mode [ 506.409491][T22308] mac80211_hwsim hwsim50 wlan4: entered allmulticast mode [ 506.416818][T22308] bridge2: entered allmulticast mode [ 506.423170][T22308] gtp0: left promiscuous mode [ 506.430237][T22308] hsr1: left promiscuous mode [ 506.435161][T22308] hsr1: entered allmulticast mode [ 506.441691][T22308] bridge3: entered allmulticast mode [ 506.448731][T22308] sit1: entered allmulticast mode [ 506.471463][T22308] bond2: entered allmulticast mode [ 506.480017][T22308] @: entered allmulticast mode [ 506.486588][T22308] @: entered allmulticast mode [ 506.502710][T22308] syztnl2: entered allmulticast mode [ 506.509504][T22308] bond3: left promiscuous mode [ 506.517994][T22308] bond3: entered allmulticast mode [ 506.523327][T22308] sit2: entered allmulticast mode [ 506.529567][T22308] bond4: entered allmulticast mode [ 506.535133][T22308] gtp1: left promiscuous mode [ 506.544188][T22308] gretap1: left promiscuous mode [ 506.550151][T22308] gretap1: entered allmulticast mode [ 506.555782][T22308] bridge4: entered allmulticast mode [ 506.561689][T22308] rose0: entered allmulticast mode [ 506.567944][T22308] bridge5: entered allmulticast mode [ 506.577088][T22308] bond5: entered allmulticast mode [ 506.583917][T22308] ip6gre1: entered allmulticast mode [ 506.592417][T22308] bond6: entered allmulticast mode [ 506.598832][T22308] bridge6: entered allmulticast mode [ 506.604312][T22308] bridge7: entered allmulticast mode [ 506.610488][T22308] ip6erspan0: entered allmulticast mode [ 506.616664][T22308] bridge8: entered allmulticast mode [ 506.632628][T22308] macsec1: entered allmulticast mode [ 506.638480][T22308] macsec2: entered allmulticast mode [ 506.644004][T22308] mac80211_hwsim hwsim64 wlan5: entered allmulticast mode [ 506.660110][T22308] sit3: entered allmulticast mode [ 506.677576][T22308] tap0: entered allmulticast mode [ 506.682810][T22308] bond7: entered allmulticast mode [ 506.689622][T22308] veth2: entered allmulticast mode [ 506.694953][T22308] veth3: entered allmulticast mode [ 506.712266][ T150] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.728208][ T150] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.749426][T10886] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.759130][T10886] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.784550][T10886] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.794923][T10886] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.818414][T10886] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.828416][T10886] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.887320][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 506.895465][ C1] lec:lec_tx_timeout: lec0 [ 507.063608][T22362] validate_nla: 3 callbacks suppressed [ 507.063630][T22362] netlink: 'syz.0.4509': attribute type 21 has an invalid length. [ 507.080847][T22362] __nla_validate_parse: 12 callbacks suppressed [ 507.080866][T22362] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4509'. [ 507.397990][T22367] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.4511'. [ 507.409042][T22367] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 508.554975][T22332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.924511][T22396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4520'. [ 509.209614][T22409] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4523'. [ 509.256310][T22419] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 509.346611][T22428] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4526'. [ 509.620262][T22446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4534'. [ 509.661038][T22446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4534'. [ 509.687991][T22448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4535'. [ 509.696993][T22446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4534'. [ 509.926117][T22454] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4537'. [ 510.492525][T22495] pim6reg1: entered promiscuous mode [ 510.510496][T22495] pim6reg1: entered allmulticast mode [ 510.834598][T22517] macvlan0: entered promiscuous mode [ 510.903568][T22518] team0: Port device gretap1 added [ 511.052626][T22532] netlink: 'syz.3.4557': attribute type 1 has an invalid length. [ 511.245384][T22541] netlink: 'syz.0.4561': attribute type 32 has an invalid length. [ 511.463591][T22541] bond8: option coupled_control: invalid value (6) [ 511.479283][T22541] bond8 (unregistering): Released all slaves [ 512.192348][T22607] netlink: 'syz.2.4579': attribute type 10 has an invalid length. [ 512.212338][T22607] dummy0: left allmulticast mode [ 512.228709][T22607] dummy0: left promiscuous mode [ 512.238970][T22607] bridge0: port 3(dummy0) entered disabled state [ 512.274229][T22607] team0: Port device dummy0 added [ 513.025123][T22649] netlink: 'syz.3.4591': attribute type 64 has an invalid length. [ 513.209713][T22666] __nla_validate_parse: 11 callbacks suppressed [ 513.209735][T22666] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4593'. [ 513.249352][T22667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4594'. [ 513.549427][T22687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4602'. [ 513.564866][T22687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4602'. [ 513.663456][T22680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4599'. [ 513.679938][T22698] netlink: 'syz.4.4604': attribute type 2 has an invalid length. [ 513.705571][T22698] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4604'. [ 513.850508][T22703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4606'. [ 513.977103][T22711] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4610'. [ 514.080963][T22719] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.4613'. [ 514.093692][T22719] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 514.104358][T22723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4614'. [ 514.535574][T22749] lo: Caught tx_queue_len zero misconfig [ 514.686117][T22770] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 514.697880][T22749] netlink: 'syz.1.4621': attribute type 1 has an invalid length. [ 514.824278][T22777] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 514.853689][T22777] bond4: (slave lo): Enslaving as an active interface with an up link [ 514.865279][T22777] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 514.865397][T22782] netlink: 'syz.0.4628': attribute type 17 has an invalid length. [ 514.898246][T22777] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 514.915402][T22776] netlink: 'syz.3.4627': attribute type 13 has an invalid length. [ 514.976864][T22772] bond5: option xmit_hash_policy: invalid value (64) [ 515.018919][T22772] bond5 (unregistering): Released all slaves [ 515.233429][T22800] ipt_REJECT: TCP_RESET invalid for non-tcp [ 515.254679][T22805] netlink: 'syz.0.4632': attribute type 2 has an invalid length. [ 515.611162][T22823] netlink: 'syz.2.4638': attribute type 2 has an invalid length. [ 515.636058][T22823] 9: entered promiscuous mode [ 515.725816][T22826] netlink: 'syz.4.4639': attribute type 4 has an invalid length. [ 515.828581][T22826] .`: renamed from bond0 (while UP) [ 516.958824][T22911] bond17: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 516.984727][T22911] bond17 (unregistering): Released all slaves [ 517.207608][ T5831] Bluetooth: hci2: command 0x0405 tx timeout [ 517.436545][T22940] netlink: 'syz.2.4665': attribute type 1 has an invalid length. [ 517.707203][T22948] syzkaller0: entered allmulticast mode [ 517.890319][T22959] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 518.092720][T22972] netlink: 'syz.1.4675': attribute type 1 has an invalid length. [ 518.503790][T23002] __nla_validate_parse: 18 callbacks suppressed [ 518.503812][T23002] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4685'. [ 518.562834][T23004] netlink: 'syz.1.4686': attribute type 64 has an invalid length. [ 518.621319][T23007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4687'. [ 518.633628][T23007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4687'. [ 518.672356][T23007] netlink: 'syz.3.4687': attribute type 8 has an invalid length. [ 519.112864][T23030] FAULT_INJECTION: forcing a failure. [ 519.112864][T23030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.156553][T23030] CPU: 1 UID: 0 PID: 23030 Comm: syz.2.4692 Not tainted syzkaller #0 PREEMPT(full) [ 519.156583][T23030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 519.156597][T23030] Call Trace: [ 519.156604][T23030] [ 519.156614][T23030] dump_stack_lvl+0xe8/0x150 [ 519.156650][T23030] should_fail_ex+0x412/0x560 [ 519.156687][T23030] _copy_from_user+0x2d/0xb0 [ 519.156714][T23030] do_sock_getsockopt+0x165/0x3f0 [ 519.156745][T23030] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 519.156774][T23030] ? __fget_files+0x3a0/0x420 [ 519.156793][T23030] ? __fget_files+0x2a/0x420 [ 519.156819][T23030] __x64_sys_getsockopt+0x1a4/0x240 [ 519.156856][T23030] do_syscall_64+0x14d/0xf80 [ 519.156885][T23030] ? trace_irq_disable+0x3b/0x150 [ 519.156904][T23030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.156926][T23030] ? clear_bhb_loop+0x40/0x90 [ 519.156951][T23030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.156972][T23030] RIP: 0033:0x7f2daa79c819 [ 519.156992][T23030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.157010][T23030] RSP: 002b:00007f2dab5fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 519.157039][T23030] RAX: ffffffffffffffda RBX: 00007f2daaa15fa0 RCX: 00007f2daa79c819 [ 519.157055][T23030] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000005 [ 519.157067][T23030] RBP: 00007f2dab5fd090 R08: 0000200000000800 R09: 0000000000000000 [ 519.157082][T23030] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000001 [ 519.157095][T23030] R13: 00007f2daaa16038 R14: 00007f2daaa15fa0 R15: 00007ffceba6f178 [ 519.157128][T23030] [ 519.418864][T23045] ================================================================== [ 519.427001][T23045] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 519.434813][T23045] Read of size 8 at addr ffff88802bcc0220 by task syz.4.4696/23045 [ 519.442771][T23045] [ 519.445151][T23045] CPU: 0 UID: 0 PID: 23045 Comm: syz.4.4696 Not tainted syzkaller #0 PREEMPT(full) [ 519.445178][T23045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 519.445193][T23045] Call Trace: [ 519.445203][T23045] [ 519.445212][T23045] dump_stack_lvl+0xe8/0x150 [ 519.445247][T23045] print_report+0xba/0x230 [ 519.445274][T23045] ? af_alg_pull_tsgl+0x1c6/0x740 [ 519.445309][T23045] kasan_report+0x117/0x150 [ 519.445339][T23045] ? af_alg_pull_tsgl+0x1c6/0x740 [ 519.445378][T23045] af_alg_pull_tsgl+0x1c6/0x740 [ 519.445421][T23045] skcipher_recvmsg+0x5df/0x1140 [ 519.445457][T23045] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 519.445482][T23045] ? aa_sock_msg_perm+0xf1/0x1b0 [ 519.445518][T23045] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 519.445543][T23045] ? security_socket_recvmsg+0x7e/0x2c0 [ 519.445569][T23045] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 519.445603][T23045] sock_recvmsg+0x172/0x1b0 [ 519.445627][T23045] ____sys_recvmsg+0x1e6/0x4a0 [ 519.445664][T23045] ? __pfx_____sys_recvmsg+0x10/0x10 [ 519.445703][T23045] ? import_iovec+0x73/0xa0 [ 519.445732][T23045] ___sys_recvmsg+0x215/0x590 [ 519.445761][T23045] ? futex_private_hash_put+0x13b/0x170 [ 519.445790][T23045] ? __pfx____sys_recvmsg+0x10/0x10 [ 519.445834][T23045] ? __fget_files+0x3a0/0x420 [ 519.445859][T23045] __x64_sys_recvmsg+0x1ba/0x2a0 [ 519.445892][T23045] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 519.445928][T23045] ? rcu_is_watching+0x15/0xb0 [ 519.445967][T23045] do_syscall_64+0x14d/0xf80 [ 519.445999][T23045] ? trace_irq_disable+0x3b/0x150 [ 519.446019][T23045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.446041][T23045] ? clear_bhb_loop+0x40/0x90 [ 519.446066][T23045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.446089][T23045] RIP: 0033:0x7fbb81b9c819 [ 519.446110][T23045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.446130][T23045] RSP: 002b:00007fbb82ac5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 519.446155][T23045] RAX: ffffffffffffffda RBX: 00007fbb81e15fa0 RCX: 00007fbb81b9c819 [ 519.446183][T23045] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000006 [ 519.446198][T23045] RBP: 00007fbb81c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 519.446211][T23045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.446225][T23045] R13: 00007fbb81e16038 R14: 00007fbb81e15fa0 R15: 00007ffeab386bd8 [ 519.446251][T23045] [ 519.446259][T23045] [ 519.690383][T23045] Allocated by task 23045: [ 519.694831][T23045] kasan_save_track+0x3e/0x80 [ 519.699542][T23045] __kasan_kmalloc+0x93/0xb0 [ 519.704152][T23045] __kmalloc_noprof+0x35c/0x760 [ 519.709020][T23045] sock_kmalloc+0xd6/0x160 [ 519.713481][T23045] skcipher_recvmsg+0x54d/0x1140 [ 519.718438][T23045] sock_recvmsg+0x172/0x1b0 [ 519.722963][T23045] ____sys_recvmsg+0x1e6/0x4a0 [ 519.727750][T23045] ___sys_recvmsg+0x215/0x590 [ 519.732461][T23045] __x64_sys_recvmsg+0x1ba/0x2a0 [ 519.737527][T23045] do_syscall_64+0x14d/0xf80 [ 519.742151][T23045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.748062][T23045] [ 519.750411][T23045] The buggy address belongs to the object at ffff88802bcc0200 [ 519.750411][T23045] which belongs to the cache kmalloc-32 of size 32 [ 519.764309][T23045] The buggy address is located 0 bytes to the right of [ 519.764309][T23045] allocated 32-byte region [ffff88802bcc0200, ffff88802bcc0220) [ 519.778817][T23045] [ 519.781160][T23045] The buggy address belongs to the physical page: [ 519.787590][T23045] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bcc0 [ 519.796375][T23045] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 519.803505][T23045] page_type: f5(slab) [ 519.807527][T23045] raw: 00fff00000000000 ffff88813fea7780 dead000000000100 dead000000000122 [ 519.816138][T23045] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 519.824753][T23045] page dumped because: kasan: bad access detected [ 519.831207][T23045] page_owner tracks the page as allocated [ 519.836931][T23045] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5511, tgid 5511 (dhcpcd-run-hook), ts 54639068379, free_ts 54638927183 [ 519.856834][T23045] post_alloc_hook+0x231/0x280 [ 519.861629][T23045] get_page_from_freelist+0x24dc/0x2580 [ 519.867208][T23045] __alloc_frozen_pages_noprof+0x18d/0x380 [ 519.873134][T23045] allocate_slab+0x77/0x660 [ 519.877676][T23045] refill_objects+0x331/0x3c0 [ 519.882386][T23045] __pcs_replace_empty_main+0x2e6/0x730 [ 519.887990][T23045] __kmalloc_cache_noprof+0x392/0x660 [ 519.893388][T23045] kmem_cache_free+0x15b/0x630 [ 519.898277][T23045] tear_down_vmas+0x312/0x520 [ 519.903062][T23045] exit_mmap+0x4b6/0xa10 [ 519.907321][T23045] __mmput+0x118/0x430 [ 519.911429][T23045] exit_mm+0x168/0x220 [ 519.915511][T23045] do_exit+0x6a2/0x23c0 [ 519.919689][T23045] do_group_exit+0x21b/0x2d0 [ 519.924293][T23045] __x64_sys_exit_group+0x3f/0x40 [ 519.929332][T23045] x64_sys_call+0x221a/0x2240 [ 519.934034][T23045] page last free pid 5511 tgid 5511 stack trace: [ 519.940373][T23045] __free_frozen_pages+0xc2b/0xdb0 [ 519.945508][T23045] tlb_finish_mmu+0x144/0x230 [ 519.950213][T23045] exit_mmap+0x498/0xa10 [ 519.954500][T23045] __mmput+0x118/0x430 [ 519.958678][T23045] exit_mm+0x168/0x220 [ 519.962763][T23045] do_exit+0x6a2/0x23c0 [ 519.966936][T23045] do_group_exit+0x21b/0x2d0 [ 519.971544][T23045] __x64_sys_exit_group+0x3f/0x40 [ 519.976585][T23045] x64_sys_call+0x221a/0x2240 [ 519.981298][T23045] do_syscall_64+0x14d/0xf80 [ 519.985913][T23045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.991846][T23045] [ 519.994185][T23045] Memory state around the buggy address: [ 519.999835][T23045] ffff88802bcc0100: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 520.007937][T23045] ffff88802bcc0180: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 520.016009][T23045] >ffff88802bcc0200: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 520.024084][T23045] ^ [ 520.029211][T23045] ffff88802bcc0280: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 520.037289][T23045] ffff88802bcc0300: 00 00 00 00 fc fc fc fc 00 00 04 fc fc fc fc fc [ 520.045462][T23045] ================================================================== [ 520.115474][T23059] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.4700'. [ 520.127357][T23045] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 520.134616][T23045] CPU: 1 UID: 0 PID: 23045 Comm: syz.4.4696 Not tainted syzkaller #0 PREEMPT(full) [ 520.144030][T23045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 520.154122][T23045] Call Trace: [ 520.157438][T23045] [ 520.160405][T23045] vpanic+0x56c/0xa60 [ 520.164448][T23045] ? __pfx_vpanic+0x10/0x10 [ 520.169000][T23045] ? __pfx___schedule+0x10/0x10 [ 520.173903][T23045] panic+0xc5/0xd0 [ 520.177673][T23045] ? __pfx_panic+0x10/0x10 [ 520.182134][T23045] ? preempt_schedule_common+0x82/0xd0 [ 520.187642][T23045] ? af_alg_pull_tsgl+0x1c6/0x740 [ 520.192720][T23045] check_panic_on_warn+0x89/0xb0 [ 520.197706][T23045] ? af_alg_pull_tsgl+0x1c6/0x740 [ 520.202781][T23045] end_report+0x73/0x180 [ 520.207088][T23045] ? af_alg_pull_tsgl+0x1c6/0x740 [ 520.212183][T23045] kasan_report+0x128/0x150 [ 520.216732][T23045] ? af_alg_pull_tsgl+0x1c6/0x740 [ 520.221911][T23045] af_alg_pull_tsgl+0x1c6/0x740 [ 520.226833][T23045] skcipher_recvmsg+0x5df/0x1140 [ 520.231825][T23045] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 520.237251][T23045] ? aa_sock_msg_perm+0xf1/0x1b0 [ 520.242239][T23045] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 520.247652][T23045] ? security_socket_recvmsg+0x7e/0x2c0 [ 520.253236][T23045] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 520.258660][T23045] sock_recvmsg+0x172/0x1b0 [ 520.263215][T23045] ____sys_recvmsg+0x1e6/0x4a0 [ 520.268036][T23045] ? __pfx_____sys_recvmsg+0x10/0x10 [ 520.273385][T23045] ? import_iovec+0x73/0xa0 [ 520.277937][T23045] ___sys_recvmsg+0x215/0x590 [ 520.282670][T23045] ? futex_private_hash_put+0x13b/0x170 [ 520.288276][T23045] ? __pfx____sys_recvmsg+0x10/0x10 [ 520.293561][T23045] ? __fget_files+0x3a0/0x420 [ 520.298284][T23045] __x64_sys_recvmsg+0x1ba/0x2a0 [ 520.303295][T23045] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 520.308825][T23045] ? rcu_is_watching+0x15/0xb0 [ 520.313726][T23045] do_syscall_64+0x14d/0xf80 [ 520.318375][T23045] ? trace_irq_disable+0x3b/0x150 [ 520.323450][T23045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.329568][T23045] ? clear_bhb_loop+0x40/0x90 [ 520.334283][T23045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.340217][T23045] RIP: 0033:0x7fbb81b9c819 [ 520.344675][T23045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.364494][T23045] RSP: 002b:00007fbb82ac5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 520.372959][T23045] RAX: ffffffffffffffda RBX: 00007fbb81e15fa0 RCX: 00007fbb81b9c819 [ 520.381233][T23045] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000006 [ 520.389263][T23045] RBP: 00007fbb81c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 520.397279][T23045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.405288][T23045] R13: 00007fbb81e16038 R14: 00007fbb81e15fa0 R15: 00007ffeab386bd8 [ 520.413321][T23045] [ 520.416544][T23045] Kernel Offset: disabled [ 520.420923][T23045] Rebooting in 86400 seconds..