last executing test programs: 5.227239661s ago: executing program 3 (id=7950): bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703"], 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') ioctl$NS_GET_PARENT(r3, 0x8008b705, 0x0) 4.827608262s ago: executing program 3 (id=7957): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000000000000000009000000000000000000000000000000050000000000000000001b0000000002000000000000000000000000000000000000000000000000000800000000000000000400000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac141443000000000000000000000000000000003300"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 4.69477531s ago: executing program 3 (id=7959): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x96, 0x194}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0xfffc, 0x2, 0x1b, 0x49, 0x1be0}, 0x14) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r1, 0x7, 0x5, 0xff, 0x1, 0xffff}, &(0x7f0000000180)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}]}, &(0x7f00000004c0)='GPL\x00', 0x7fff, 0x48, &(0x7f0000000500)=""/72, 0x41000, 0x1d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xd, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000600)=[{0x2, 0x3, 0x5}, {0x3, 0x5, 0xc}, {0x3, 0x5, 0x4}, {0x3, 0x3, 0x4, 0x6}, {0x1, 0x5, 0x8, 0x4}], 0x10, 0x3ff}, 0x94) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x4f8, 0x18}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x6294, 0x3, 0x4525, 0xc, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x3}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x20, 0x12, &(0x7f0000000280)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xc2}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}], &(0x7f0000000340)='syzkaller\x00', 0x400, 0x2b, &(0x7f0000000380)=""/43, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, r4, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x3, 0x8}, 0x10, 0x0, r5, 0x9, &(0x7f00000008c0)=[r6, r7, r8, r9], &(0x7f0000000900)=[{0x2, 0x5, 0x8}, {0x5, 0x2, 0xc, 0xb}, {0x3, 0x5, 0x8, 0x5}, {0x1, 0x1, 0xf, 0xb}, {0x0, 0x4, 0x8, 0x2}, {0x3, 0x4, 0x1, 0x2}, {0x5, 0x1, 0xb}, {0x5, 0x4, 0x1, 0xa}, {0x2, 0x4, 0x2, 0x6}], 0x10, 0x8}, 0x94) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r11, 0x11, 0x66, &(0x7f0000000a80)=0x3, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), 0xffffffffffffffff) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r12, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x7c, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x7c}}, 0x801) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, 0x0, 0x20, 0x7, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x49}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "df67d291a424c4f710ca1997c036fa0c"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3c}, @NL80211_ATTR_PMKID={0x14, 0x55, "af4e9d0e8aa3296efbc9826448e25e1a"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x25f}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x40000) write(0xffffffffffffffff, &(0x7f0000000d80)="5ffec84d0098bcf63f", 0x9) sendmsg$IPSET_CMD_DESTROY(r12, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x60, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x4004000) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r13, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x74, r14, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x1f}}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @NL80211_ATTR_MAC={0xa, 0x6, @random="3cddedaf5875"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xef3b509223a8c41b, {0x3, 0x800, 0x5, 0x6}}}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x4008000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000001280)={'batadv0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r6, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)=r5}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_ext={0x1c, 0x15, &(0x7f0000001080)=@raw=[@alu={0x4, 0x1, 0x5, 0xa, 0x5, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0xc, 0xf, 0x0, 0x1, 0x4}, @exit], &(0x7f0000001140)='GPL\x00', 0x680, 0xf9, &(0x7f0000001180)=""/249, 0x41000, 0x50, '\x00', r15, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x4, 0x4, 0x7, 0x1}, 0x10, 0x10644, r10, 0x0, &(0x7f00000013c0)=[r16, r9, r6], 0x0, 0x10, 0x6e8}, 0x94) sendmmsg$inet_sctp(r0, &(0x7f0000003d40)=[{&(0x7f00000014c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001500)="fd5973427664ed20d547cb720c91aa3a4597752029b5d4322b784a09eb725e8f3db3f49628eb8da40d510d0c6e995d85be6f8c1854800c7e9a5c8ad4dd337dd939bd5778a69b7f8b80c1fb3b9b9a17a37d60bddbb0b3aed3aa8a1af9d9c766bb2fabe81d858fe5989da8b9b9027f0006abb9f1596a86096f2d927f54b3179fbbb1ec140058d82a6dff3f9941176015cf82f18eefdf98c2a755db31b87e104b275b25e9975d48209afb354774bcb51dd9bfda731ae23d36e1f5670690889fbb51bb70bc70dd1f5b17d4cd262a177738cdc411", 0xd2}, {&(0x7f0000001600)="cf267976c27da78d22fcc1a31131f4642b403b6bb85a6462a25b935bf8e6f5c7d6eb4f025e900c2481d18e8de0a74416a6adf6f451fc6d42cb10ca7ade4b3fcf60961a88eba319d019c54bd4e51d0fea93aa09ffa9b84ee00c75f88a7ae377846a2d92e950e6db5dd185a3a4d61fd556c39bb5289826819b913dc21a7104324fc87162637b95ea164331b3344193b60bacae7136c089cea9d358e9302fa4767af3af2d085caa2533a31ec37e1e23e8009799e62ec7e85025065258ff9fe6d4ec20c5f99fc7b68fb01dfc7a7838c884d3e5b5bb0ecf7b49e326", 0xd9}, {&(0x7f0000001700)="fba42bc72b4b8be04a6243480d2467e0be9978b0c8dee45b146110fdcc501c598cb0f76828e2c7e414d9b45da18b37c3ea483c1ee2c5c5cd4191357dff4f3f2262f5a7de30a422463adf6f5a5fbf917462ad5ab8ef7f95a454fe1a4a7832ec621480643329876f26a9d59f09a435f9f389ddd95d61b07b52bc7221830609036fc250b0ba2b1163a52a20e87d9ef596fd741cd6fd0e337f6ca9e2171fe6298be465cca8bc7e9036c2af9d5b9bb7633b1b8db37b973ce946aa2feea17bc17d774aaa61bd6be0dfd9ea80c975400862969c25c6", 0xd2}, {&(0x7f0000001800)="98bd7e156918be90", 0x8}], 0x4, 0x0, 0x0, 0x4000000}, {&(0x7f0000001880)=@in={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001b00)=[{&(0x7f00000018c0)="8c706cac45bb9b02522ac8c07adb3614783882b95f4629c8", 0x18}, {&(0x7f0000001900)="e24ecebb1829baadc4e8349a0365c34813d020d11803feba380c76da6814279c8802096d8d09d09395e2067e56f01472710d2851d928d4e18a1ba0fffa1046c926ab650bfa53efffcb9f", 0x4a}, {&(0x7f0000001980)="9b2477387e6ce77d9098efd174fdaae487ba05c9ed5c1e845e838e415b3d4cd3ec164272fa0b38e7b7a884db263ed06400437fc7ac14a1b7b5dbfa667c1c008e828ad932518ee36ae4ade95d35defcb60798f075b76c8caae34e69758588bf1de027ac82de1a67cd83dc2d5772324e48bebb400c515d68b94c5015eade83a3cfaa81b500ed10809c4b368e9a810d65f1c6ea4433cdb253e08e3b04c13ecc683a3757c265fafd1a8a6755e2cf10c050", 0xaf}, {&(0x7f0000001a40)="5b7cf5bc6eec1f25e6f3ef20cff772286833127e7231931d6adacc44debf3708e10b92ef44ba189b97a066d35e2b8d1a7af587a1ef427a2a958c35a9bd0d070d11edea46f0d6ad0d8a9d98ea1c48dd3765ecf9a70936c27e3a8babeabad1f7a949df193d05602e5976d32c885ebae2530b21227a0d16ed86665526701601308ea17936e45374069a6e4aa868d005e1ff93bee90f0a48", 0x96}], 0x4, 0x0, 0x0, 0x20000804}, {&(0x7f0000001b40)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000001b80)="9c2e5d5e26855ca57668f8402be48ca9aa2fa56fccc4c4437c14ad18747861788f09a48b4d49774bfd622d569a59690e062bf07c10ad13cf18337ffb9c0dcc3a84ed6ac3d6efbafd8187b19621a33f29793faef200da14d2c69f1d2c57ff04c0de70e945377a8afed037443f939bb52859e2aef77ec732bd3f9d27bc2325b2cbe21f6f24b031fa060bdeb97cb2e6d7db47d0ac1037cfce8bc8205a690e2fc6eae3c2b370592719b3bab4bf32f16f4323bf45ee1f943fbc1affeb55095ee892834907f172e27edb0d2a8f0717e7801b495ca4c60716a3ffafa1", 0xd9}, {&(0x7f0000001c80)="49e82489eba862e04baa263e24f4095e3895b120753b669795601bc8d78f31cdd611a5a17bad6e64d00548b739f6504b746c4d3116e9024a7468f756b0af50afe9afc0b3e87a93a5b34b8b71581dcb63f46edfde9490982716267bc8dae1cc110383b79fed02e1f7150022ca3ca4dd6249068351c2440a4aea8272", 0x7b}, {&(0x7f0000001d00)="5534724ffbb25bc7886dae41e6662f2f596a7c6ceae344813f94c6ed7a780f50d48f7521353635bed475e1c2fa0070927db5f828e7f0984b59a67b7296f403256820d195b5e79c9856c5a6924cc347370d798ef523b60ab3b92599c25b2b312de5524f5c490f689d042528764a4f0a43a56ea5f689f857a8327f8d5c7463af1ad281417c0d51f21ab1cd152790e9f5925e6b89d385bd7307f14018b0971fe52d2bcbdd72205c0a2f0c5d40df3f3405dcef5f264de5d129da6750b7db276a31460c3ed1dac274a12dea33d816e12d3b0324574957f9681bb87f74a5460a758062656149748c8c958f", 0xe8}, {&(0x7f0000001e00)="6092227d161fefe52f02", 0xa}], 0x4, &(0x7f0000001e80)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x5}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x2, 0x3, 0x3, r1}}, @init={0x18, 0x84, 0x0, {0x8, 0x9, 0x5, 0xf}}, @authinfo={0x18, 0x84, 0x6, {0x3e91}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @init={0x18, 0x84, 0x0, {0x5, 0x1f, 0x6, 0x9}}], 0xb8, 0x4880}, {&(0x7f0000001f40)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000002180)=[{&(0x7f0000001f80)="6c18c6cde2b087637f4268968568195855229f2be99de3b3590a4ffb6d9a4fbe697f27784b68316452d3a55f1c3b2096dfa2f94ea19cfdf93f1f5be64d48b8d02fd81b4c4acf93e952fa395df3bfed241f18683400d6d7c583b5f97f6d3f6ee1e5117e99cb1fcb852e6a89c09df6fa9401c7fb2696e2252969b2aee3f5008bd17e66982eeae7bf9716f0e6740927bc50f708826a1799c79ed89852c0122fd9b2e01f74a5eaa0bde4dd8045403d3dc2bc790a851023b358071359a74faaf19f7f1d", 0xc1}, {&(0x7f0000002080)="50e545c0ceb81151d721461625b0e94efab208cf88ffd1e92fd9bfc319", 0x1d}, {&(0x7f00000020c0)="399886219442bdd0e0d16376fb836588bfde1a9cd07c3705e29a233bba61c68b7645e85ba31c6ae7f8f17b485ab7726d4855467c66a5aa89681a1e01f4ed7864d27be9a7fb9017c98a63be06c81d394c110dc35c967fb9f8af78842ffe7da61f7717e74c0483c5c98b44d1b127d70b9ad9a743f7986cccbb9f70cc3e1739c9364a2767c1ba1614640841c52c54ec02bfb17bb6eb6b5c95559d1017579f30d459667522592f46a10e0a42e55cfb58cee9e6c60f2ac95cfd24", 0xb8}], 0x3, &(0x7f00000021c0)=[@authinfo={0x18, 0x84, 0x6, {0x7}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x1e25}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x8000}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @prinfo={0x18, 0x84, 0x5, {0x20}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0xe8, 0x4004000}, {&(0x7f00000022c0)=@in6={0xa, 0x4e21, 0x7, @local, 0x33}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000002300)="92770e23a5edc2cb5f9de09dabad6cd8fb8f93aa85aabd", 0x17}, {&(0x7f0000002340)="5dc7a2037fc55df91b61354e79d84d283f78cf048de0fd0b60f47c421d1ac02cbd162aeb35ceefbf0cec32e6b4fc272214122a0cd14b713935828f5de2053dcaeea5ed4b610ac33901035223b8c92160b665b2d32ddac0cb091282ff58ff2eab7c654d27e2df08be11bbb190bda6f7f9997f75f5636f61798b2def56c312143516a519b97aaf612402baf1e3320808495a59f38c1af3feaad35b2ae9784b0e544d326a0817b6d99ded00849d8546ca174d2fa2e940aeb02d320d6d96c0ab72bf4117420c53c8d9303d6c56f47d47f86e1ab06ab3e5e0b28a24583b81dde0b28418bf19a3a690fa6ae1b2c8c8767b31e8e9f5b4a6be052aec1e5dce968d41e99ee0fdee90f32ca7b3a0e582a6f1d37a970fabc1540c4e4e5dcb05900e0d3df145d7f8b2688bae743fc831d44ea69416439145d50805d19e6bf711cfcd0af0b689e8a08870f52def8ea31d7b80d82b60f53c5bed4291de7168e48a6b6c41b9bd0fd91b372ebdd5d551e3d29ce6be5ec84ce5c8765bea3f768878096b2a15eda574a0b8f68dddb073e43f55b83328753aec40b17ec0fd7147cef1be5962b0711f421390a31af3dcae14bf37646baea4a0fb560ce3e5bf02223532439d94b5dce6fbeba696170b9addf6ce4118af7c1da6ca8d2afe081c7d91352e62b23bddae391d61d0f3982edaba8e46cd62a6ab1fae4c23010b4a4ed9f43951883c7a91c6ce3af4f01038ec39895464b493a88ae6ead1f705921e5333839f016da678a8566bc1ea2aca032efd20e6861d09bfe072e10b73dae15f857649e6cb53e5940584f8fbd384abd31f9848ad8f9cff9298698d9726934ef448f0bc823828c838d5c051bdbcde5f6c08efd78dca19d9e4448fe1fd88a920c40fbae036456015ba017e8a86620fb4ab29d9ff8275abf01f263d10b987cac4c8d84ee9a967ceb29b39653f28912efce0cbc0aa49d143e1112bd2d2d5a8c564d1f5b4a7b8264237bc6bdd501c60a433c6c5c8c133f1e4d45b3bacd67f7b619cfa876d146924be97dbc29152bd6fa6e378b87da294f02046e443e6f89377545c0e8c2c858dea70b7dbf1ba73fb7e8d0a22012876e23ad525c1c15cdd1b6a96da51e69c67bb61d24b5354fca62be83a12e6e72c64c10c576124c0a1c4857255ddafe4e187443fc29ee69f93f6facb8d7e88ef7fe02b98931c5b0f376de1f1872a69d84a84670a5d338dd381086e9414244121f0a45c67bacfb90c505761697e326bbb564da3935b27e72136d4b8f53a11ac7384faa8671aaebc4e17c11ccb3818ba7dc845f6934578fa10ddc6f8590f3bbaf6c7dd8cc6e24f8bc6995b7b847f708ebe3d288ed43cb023cbe9e1abf1dff422a6cb058b8bc229f51a342936e5d7001e053b51393d5d0fe949e021763772ee79aafa5253bedcf1c050fc7e926eee67e1ea004c94524982f65663290b241b6e50ea3b4045c54edc668092b5ca086273c924235ea925d86adb9ea858c8c201aee5ebc49336fc7981c870fbc73455e6422e6378629223be923fd2f9be255566ee0b8a9e6fce12a26849064edf19fcd6d8cc62e4b932b3d50eae22de7161d202c016a3629ee91b9e05be73bd53ff7327337774a58fa5ca0e33770f7711428b33816168db3dd3c09c1a085903424893d7999622bd6ac5fc4caeb440461295a0770c3852c575d49392d711649d74ed8ca80483aab24915b58e1b254b18571759e3ec797d96cbf3a8ad21f5b3ade6695411a403dc86024aeba17c2a73a5ba8c45998229f804bec7e52d7d3627599aa841fc3bc6c893a3b92271782b258f2410c06acf33a195491dd8345baec92838d1d088ec640492f46687fc0a4743d1af166f3b283892e557508efa33a6877427d3295efb3553ff2db7f49455445ac3b837da395ffbac060d52b26aa3d626ca8d3679b1747b38102b593eca7e5a047a4a5ea606f8d9f5d8c7f307d997d00afff9dcf8ac53a7b30b1d00bb67f15abb1ae83b39860d1aa4d8669cfd2b32f318d4fc849769e36642f0207d965e82ba9c50fd0dd6115f891603e8035918a8beebae28031dcbe1e482d72d8031c61faa926c0b0902b0e925744f0fb1d084472775a379c1958c4fa7cfca395e4ed094432b8766dca466bd1787d72f6a649a5dcb4135c186c45e53fff23dfb510c5d278d13ee52f4b87cb6318da5206a9c71fc3fc4800aa88f31f88d70ca241d5a88572797aad329b1c5aa9330091e7f29b0f2257c6d0794ed6f592d74e31f94ad9de47d87a9eb5f4517d8a530a553ec94e654a540d8562625421a4afbf89a609c3561f93950d6b151e8025fb67855f0a81b30ffedba4452c019d01dfd5382edcb72b4357862c8bcdda7923f6c46411a7a3d306255824e3e227cb47193066b8a5a906a05edd7fa51ea85756d04b2be3320fea888087b6afae3aedec16dcf359bd968c6ca9c5d10fb06dde1854620c0491e37849368e56b7f3035275eca04f5d9bf04fc579e87e605f417eeb8830c9efafa68d8ee466dd0f9b33dfddfd4f29d2cb7134f9e1254ca62fdd096a6c567128ee4e46e8c2a88dbde9cbc0061e3d7bbd5f8b79648571c98648c7baa76243cbdcccb7c7d0bd47e13283b55c8871a32540921a5db66cb36f94d2d7099513232aa04c12ad40bd722512d5c81dea039d35e755d0c117a3565e81691f475bbdf45167295f7e32a217221a73a3e4d06f1abdeddedb36273d09cd0b48ee852620354a411e7ff183caaa036f11ad8dce53e9afd36afcf818a250db9297782786177a1591df4fe6791d07a0d74035e01ad7e2f0cfdfd9e59ad0253da1100dc88d39a35c33c757038d1ca963908a85985949064217bb010913fad5021a5063e50cb3631a0f305f2f8152b9a0b7d6fd87d30a8a48a34597d22743f447ba60a13c713e2bdf6f64460d13b4c3a58e72ddeb5187df2e84454038f01f83691dd8e86e274b1f3898b5a3fde0cecd1dd2ef1db237a415e9a0c9c5fbfa8933a5ab78ef86c505f4a9db8a47e711c9b8dbcbeab81708b8f2d84b762e9b8e7f929160aaa13b26c45593dfbe65a4bd6fb400e78488a82e686036371faed1e7ad4f59cd36ce5d17d100f2a078edfd8dfe1d730be24e716c74622e851afcb7c9fe596007c09f37e0c8a9286911c0475c1627b34df6b91cc73591201f65355f7a0e1a62c5f5d05bdb725d320b4182d9d466747a69a2bd1f985271d228eaf29a6b033925216b03a98f1dbd17f9bb8e172e6c2fc8e4322bbafe3d2a1bbfb8470f7e6ec26ecf503e44681e267d7aa3301062bf0a93f5f55e8d535e31758cf5e0b2a6d995d365ec50f63fc393d3b067bd997f7e764b6c213b6e4ad79a6cc489056977d94d2d7d245df93a787df589574754e061663340ef58bd74143fc7654ccf41d837066f0b98f422836f3a1bc689cd175e36fd507b3c7ab759543012e36b37da3a3f294a49af4f301a72244cf2eed78f8f3f9e81dd728356decb064194cad6945a415db255e2fbe3948faf127aa7c83d654c137c35dfde893b7e0e907e49e2e7faa274b92c5d4e14dabb9708596ed367f1912034d679daa0caf6304b10d677ba16ee337fc34837e34fcdacb2f098ec766505169836def8c1fd78cd8072f6a396b98f47b2506c59a1c27842cbfaff9eb01c761fa9bf0540591c4b1ef64d5498cae097fcbba3f3bddbc706aa654ce3f96ddf403d266deb74aa4f3615ab9ec160d1945480809bc0163821bdf199ad13b886cc3179f5046aac30f3c4b1114b11397e98d4b910a3f22bc9fbafe39f2bbb49d2f6abec84e1d98445aa529dbe5116c2bd26e1901b2963aa9202789cd8d897691899074d0c29575186d4205bd506c8dad218b2d54a0accf9586cc364e1dbeca1e85e131d19ad0e0a049c8767ea98994346bd07dd8416e71af54d9101de4ee3eea057bea35c4db4f56c8d4ae1ce17f830cb1540eafd6b94c6e281cbe8e0c3fec405a834613f6201b9a457a1fc31dded40b674be751e58d606d99aa6a126a2434e0fbce14285b9198910d763a86221305f18be26e8d59f8f512bdb797d1a37d03e6d315502565e6113563e38d8c3503f8e647108756e91618503c7fc5e1f571cd89f3db41d74c2c77b14654bd9a141e42326f58e90495542af044f2a323bc47b319c3da368af15f28f7f182d1570851c6df0bc9c7f427132dfc4094e365e161ea0323bad2d0c4c64c1e5799ce55161de00d0f1d624ba2077509bff5225e53c4e1dbb437ef62629637a7d7c9c8aca2e9b2e8a2f647218b291208d63d6a33e6455a0a17dba6858c0819e64598da3f54986be18df70f8fcfb9ce50feeb187e4acef87b00aa3c2b86ffefb95ad980d8dabaa832e46f5f6b7226df54e3406c466e9962ab5f2983abafe276f4257a9371f60852b38a231aa7ed2f73e53dc7e6bf1c1049840a9ee6bbf4f6a302c120bc48de0bf8a454b64d4d59e96445323eaebd95c3cb5e37997a0bc3d8a33828c858cd1060ab3922e75766dd12c694d8ca817c4a0e0943fad05284f4e959bcb5f6e207f905d3622242a5f1ca2c3de4675b29262548e8a3d40f9b2dd2de5ed2f0a2ee9d51f86e04486cc3dc8dc529ce3936b2682751a64cd026bdb3914dca85450b07360f665ccb69ffc9f9a18552d761d602bb675786e25260bf963f246d6daeff184f4452712d7831dc581cc6b2390dce6567c8ca2af57201c8d12545d13c9304a968ead87c19072efeddd85695758591279d96a4d92e131641f93c53c6281d59be15d002cecd7cdd01c4192092cace3697786035f2572e7558de833d863bbaebe3c73fa01cfbd9194dbd754165cc1e80aec888cb4b53289aca446d7583a9c05101cc9b69cf32aa1eea609823463ce292dbc3f14440a707370fb2f776a4d40a1250a3904f009526685dac7deafb16734cc78584fceba77873670bd7dc62a0c7f5e75e291d2e30b45b658443eb2f9b52b583e40e1f8262e08a430f0805766f23f6d0c786698315a4ba2b5308bc3d0f78e82fc37dc37f1fa59f8aba59c97c4459332d0b0c2e3692ab1954e6a96c20ae029264fab12f5694e74b02a01e68e40ad3db247c85a9d73913d54d6ad99a4e9132b562fc2dcbb43050f69061730ffd6c3e4e3dca87488d7b255b37cd224f5b9c66878da55a2b0de6a822638ecd3307d763a875ec10cc17804f3e042897528e8427d26a2d96371c1ca51645d4bc64fbc0a59f58888331fd30c387063d6a4cca66e92c986f65fe152e5b2dc99a430e176bb67603d2cc44f8cbca21dffde16b5ce19bf0d26db4d9d40b340c2352a221ecbd373095a6907da1405dc6c0c1f53b2194de76b27d22f57c65c92f66285de7235764aa829345ba59a54a37f02122cf994f3aa5731bd690ad7ee5f73f1f3c6278f2055af028c85125a2614b9155e796ade4a082595353f4d20ba1474727c5083f1050f02fb6f31f339f01aa278f6548371e4086444bcd2bf5a860d088dfb7a41f949c39ec726289961d2f1aef31e6c6e75f424109a4210e2bdfdbe5f277f190bd0a9c7ed7d1f8cc598518857b7f54806d14a6c9103eb63ac18981170f296d698f2188d03b54061350234aa4f31d2a51d98051cd3dee2d5c5f1146048042903175e7c0a841697234cc910c5df2e3bad5d9e5a24eee6407bf9b27402300623a67a616cd7eb8110dd1d5ad2482ca999407ed0b3de5f81e71dcd0c9db270a2e3678e5e1e5e0424ee7f1272683b48fff4ba42306e93f6d74d8866260dd5aeae898c7a3a3618b49036ad625d3e643a3bc0a3879ec3fcddf7524b4f89d15c9566931493775da88e183718124866606cb8b12f5", 0x1000}, {&(0x7f0000003340)="d3d53ed67682142944ba3094dcb75b15114dcab551419a628b23919bf5b4977ccbfc6935e2a93cbdbad549fa630b4093704c15d358a0d6f82fcc9be4113ebf9d017988014e6040d01a269ae7398a40f0ca4595e88d74d45ecf82e9c4bcfac1d7eacd6820ba43a119db06662d28be18ce8e97c437bad7856d7ed2a391eccddc6f4d4d9c947f1b75b46febc016c1ad3c8e183aff301e3feb65444b98b4c8eccee937ac4f482aee7bc3695686fd8fc893aa956d7b4f6f0d9351e264757b00dfcf0d7e50a84dfc20", 0xc6}, {&(0x7f0000003440)="4ed30e6310da7ced113ab8d0512c82bc57cc53f4a93e9434f9fddd3ee159e00a9546def6f6b01cd57470f2c5f45663d58b4ba552dd16ec8c050378ede7edb6cd2f2972364c073b48671af82f1b", 0x4d}, {&(0x7f00000034c0)="66ddff2d2bf200892c245a62cf2692a1ab60f413e8baf26df3c4", 0x1a}, {&(0x7f0000003500)="0b874e0fbddfa748abc3edc39f0aa563411d405691a423228fb0ccb76ca835ee62ebf8aa8ce21f58cac6341612c1dd36d4a5e7ae398de45196fac35c2ff2b6d773bb090ced2d14880159d833b9d26399b36a5ff6c3334ff66a5a461f4668ed0533fb2fee404083d653069f56f13af1a7c102746eb90144ea749e248cb262984d391fb687", 0x84}, {&(0x7f00000035c0)="0f1961e7849bd8af815498d224f5a7f0e8a0774fe7c3dd198e2ce0463008a8e849b2296b5119f953f7914f831f9234fa0a76bd4c4507ceb2eb05dbaaa3294ecb02339615f4e54dc38fd07d6e03c1c48a34c3f72edbedf4a0136ba145cd7bcd963c3647a9bc3fa05a90f9263602fea4a2d18d7e498d97fa8036b569365eb5996d002787d1e21878b3f89ad5ddb74106171d2234a47035212e2cca48e9cb698647b4e863850a8ee22b4917a7a5293f689a7a6ddc14ffcb630278985fc978492f417bce62f72d91129cf3942d9152065138541b72a5ed0611", 0xd7}, {&(0x7f00000036c0)="e336fbdad4720e936bd4cf2195c92ed64e21c9d67acac4c71d4b353f7faec60690855e3375fb05c15f6b8dac6da6396614261db4aa97efdea8f8acbc55b034eed36a75b6e175cc57eec5eb7c42f88f429bcc0647ca5624d8ca646b8237383f5cd69b1bd45b20c8f3ae6a9c8d31bc2eae6f3231a0b8165facc9049043555a57e0b2e2e47ec2a45a414247d728e9152367b8f0", 0x92}, {&(0x7f0000003780)="dd70b92459e37510f28712b57e0256f34de165c177466ad5dcda17bfff7c3cac8f1e1cfdfb42d5de6d0a5c6f60295d94e42e09af39a7e922091ce29777133d9fd34ff031caa003bdfef795310d83286d938c7bf709385a2e32290a3a0b2a6c5d17fb6d3b56bbe8ec96a77ae33d4e32ae99e317083545f7ab74b457d23ac89ffdf602be6023407856832b1acef9adabf5d2958afc335df71cb5826ced3ebeeb17c7920085bc9b7f634419f57020134ac8329849b6dcb27e1fef639f4ec92ea905d7df279e0e0b546a482c8a71890d46caa0aa2a772155a573dff942d14554", 0xde}, {&(0x7f0000003880)="9567183b1dff257ef54d65f6b40a77c82fc0944e9f69f2d6aef0b2d7d78b6fab45d191290ab441784104ade9f8c2c328909a257672ddc80883d795d5103751fdc49fb2067e", 0x45}], 0xa, &(0x7f0000003a40)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @init={0x18, 0x84, 0x0, {0x1, 0x401, 0xb}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @sndinfo={0x20, 0x84, 0x2, {0x7ff, 0x200, 0x80000001, 0x6}}, @authinfo={0x18}], 0xa8, 0x20004000}, {&(0x7f0000003b00)=@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x6c}, 0x1c, &(0x7f0000003cc0)=[{&(0x7f0000003b40)="d649a3031c136b4afb6d2fa01e981e7bab3b5f87108f67c876ad60d5543ae589c73078ca191e07f4d2a5e78aa55fe5097382ab5ea167a7d8b9410af51927c5815a288eb8003c", 0x46}, {&(0x7f0000003bc0)="7ca54dadd1badcd0b330c318e8015aff90f8aa1508655a72b1a96b5819f173094e94b0d14b6f51e8f403e2e1685c8cb8c23536e9f04ef06aaff2e493410aea6c0fb210b1ad9d2daf4140d1be44962ef07e631b33e660ad9dce8a0075ada3e2820bef750eb57ca892bdd56d54f87a3d7f82f34da1a640a0dc82f8133977d56c5163638d7143bad77554db432337a31030e46e6f229b34cb", 0x97}, {&(0x7f0000003c80)="a5a9d2eb387bd7562df4229f88ed61d2e5052801d04cb29b3a44c3d0bb85d4f4", 0x20}], 0x3, &(0x7f0000003d00)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}], 0x30, 0x8000}], 0x6, 0x4000) 4.287693273s ago: executing program 4 (id=7964): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4008800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r0, 0x5c2a7000) write$bt_hci(r0, &(0x7f0000000140)={0x1, @le_add_to_accept_list={{0x2011, 0x7}, {0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000e, 0x12, r1, 0x604ab000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000540)=0x6, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) r4 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100"], 0x18) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1ff}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x1}], 0x1) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4010, r1}, 0x18) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x10002}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800610f0000000029de000032000091eb50544a841193000eae0e4a37274aa80228e12024eda4f708673d7b17829409250165ec4ac826096a1e9fbce311eb1ab8772ac03cc66fc0ffff4a2adf64f5fdc205cc3cfe70869cf0e84662e8243882f3150ccbf1e8d01bc454cfe326217468559c280000000000"], 0x18}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='syzkaller\x00', 0xd, 0x0, 0x0, 0xc1000, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x8}, 0x94) socket(0x21, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x4, 0x2}]}, 0x48}}, 0x0) 4.159427549s ago: executing program 4 (id=7965): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x22020600) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000500)='GPL\x00', 0x889, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r3}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="340100001700010029bd700000000000ac1414bb00000000000000000000000000000000000000002001000000000000000000000000000120010000000000000000000000000001e000000200000000000000000000000000000000000000000200008084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000200000000400000000000060000000000000000000000000000000000000000000000000000000000000000000000000009000000ba6b6e000201000000000000000400000000000000000000000000000c0008"], 0x134}}, 0x0) 4.153498932s ago: executing program 4 (id=7966): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x0, 0x8000, 0x3}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000200)={0x0, 0x63, &(0x7f0000003140)={&(0x7f0000000c80)=ANY=[@ANYRESDEC=r0], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002e0009002707700000000000040000000800180009ac0f00c89361e143699b7d5f8f9db1c7c44ce542f7d6d82f6f3f578120a6b51daec06984cabbd754358997773300cc1b6ea7d08f44a759d4c18a26979d41eeeff4845bc89eb6aafdf544e38db322a0ff153cf32de58876fc7b999366a829c04e0fe86bd741eab72006408540026a1497fc912373da7fcec0ecd358e46e547655a5bfc681"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000003180)=ANY=[@ANYBLOB="9feb0100180000000000000050000000500000000a000000000000000100000d000000000800000002000000070000000000001205000000000000000000000d00000000000000000000000d000000000000000000000003000000000100000005000000aa000000005f5f5f5f2e305f3000"], 0x0, 0x72, 0x0, 0x1, 0x7, 0x10000, @value=r2}, 0x28) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'gretap0\x00', 0x600}) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000001c000380180003001400018005000200000000000800010001000000180001801400020076657468300000"], 0x48}}, 0x10) (async) accept4(r1, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000002580)={0x1, 0x7fffffffffffffff, @status={[0x3, 0xaa, 0x4710, 0x9, 0x200, 0x7c]}, [0x5, 0xb000000000000000, 0x76, 0x4, 0x2, 0x5, 0x9, 0x7, 0x100000001, 0x5, 0x2, 0x0, 0x1, 0x10, 0x20, 0x4, 0x4, 0x6, 0x2, 0xcd91, 0x5a26, 0xb, 0x5, 0x80000000, 0x3, 0x3ff, 0x401, 0x2b, 0xe, 0x0, 0x1000, 0x7fff, 0x100000000, 0x5, 0x8000000000000000, 0xffff, 0x8000000000000001, 0xffffffff, 0x8, 0x49b6fb31, 0x7ff, 0xa, 0xffb2, 0x7b8bac73, 0x3, 0xfffffffffffffff9, 0x62b, 0x5, 0x9, 0x1, 0x3, 0x1800000, 0xb, 0x4, 0xffffffff00000001, 0x682, 0x9, 0x680, 0x7fc, 0x1, 0x0, 0x4, 0x6, 0x10001]}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r9 = socket(0x27, 0x80805, 0x3) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="30000000000000330c0000000100000000e700000c0000000000000000000000000000003423ffff00000000410363dcb8c0574b63a5b57703657d165c825f9ead051a41", @ANYRES32=0x0], 0x30}], 0x1, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r9, 0x89e4) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, 0x0, 0x0) (async) write(r7, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 4.111599005s ago: executing program 4 (id=7967): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000652}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x100, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000004}, 0x40800) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x79}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x900}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8400}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x0, 0x0) getpeername$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x1d, r3}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x4, 0x3, 0xf, {r4, r5/1000+10000}, {r6, r7/1000+60000}, {0x4, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x1}, 0x3b, 0x0, 0x0, 0x0, "1c4407577fedd489bcb017da64579d8e6e6d81f8fd8bc862952ce0d362c726ae5cecef03c412c3dc595e645bb704ee51bdc17df7d7056816884d12ce989c4b74"}}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'wg0\x00'}) recvmmsg$unix(r2, &(0x7f0000001600)=[{{&(0x7f0000000580), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/165, 0xa5}, {&(0x7f00000007c0)=""/50, 0x32}, {&(0x7f0000000800)=""/138, 0x8a}, {&(0x7f00000008c0)=""/213, 0xd5}, {&(0x7f00000009c0)=""/31, 0x1f}, {&(0x7f0000000a00)=""/69, 0x45}, {&(0x7f0000000a80)=""/19, 0x13}, {&(0x7f0000000ac0)=""/169, 0xa9}, {&(0x7f0000000b80)=""/117, 0x75}], 0xa, &(0x7f0000000cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000e00)=""/109, 0x6d}, {&(0x7f0000000e80)=""/129, 0x81}], 0x2, &(0x7f0000000f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f00000010c0), 0x6e, &(0x7f0000001240)=[{&(0x7f0000001140)=""/115, 0x73}, {&(0x7f00000011c0)=""/97, 0x61}], 0x2, &(0x7f0000001280)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000012c0)=""/205, 0xcd}, {&(0x7f00000013c0)=""/48, 0x30}], 0x2, &(0x7f0000001440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001580)=""/63, 0x3f}], 0x1}}], 0x5, 0x0, &(0x7f0000001740)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r13, 0x40047211, &(0x7f0000001780)) ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f00000017c0)={{r10}, 0x4, 0x6, 0xffff}) sendmsg$IPVS_CMD_SET_DEST(r14, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xa}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x13}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x10080) sendmsg$can_bcm(r12, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001980)={0x5, 0x1c7, 0x5, {}, {0x0, 0x2710}, {0x0, 0x1, 0x1}, 0x1, @can={{0x3, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "6377dff50c98ceec"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000005}, 0x44851) ioctl$FS_IOC_GETFSUUID(r11, 0x80111500, &(0x7f0000001a80)) r15 = socket(0x2a, 0x7, 0xffffffff) connect$bt_l2cap(r15, &(0x7f0000001ac0)={0x1f, 0xbe72, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xffff}, 0xe) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r13, 0x84, 0x6c, &(0x7f0000001b00)={0x0, 0xb3, "4f13a9d235972fec6d0c3943deef395742a976192ecc5df5ba6f80c2e9ddd33a483803e0374dea4d3c648a0e57aeb75e4d8849f6f6e5ba398e9207e717d4a44364fcae74598e5676c85ff7db1b5a89d438aceb484f7e5d01714f7d35b50d7cddb2b828762dc88b216aad17604bb02e6a44a3a9835e8e1af5f46732c38aba3458af6e03d815363accdde1e3c31ec6227c50f0f1aa2130d223c2282ecbf705e68efcc415d78221aaa83e1ddac3baa210cbe1615f"}, &(0x7f0000001bc0)=0xbb) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000001c80)={r16, 0x70, &(0x7f0000001c00)=[@in6={0xa, 0x4e21, 0xff, @private0}, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xe0}, @in6={0xa, 0x4e21, 0x8, @mcast2, 0x1}, @in6={0xa, 0x4e20, 0x8, @mcast1, 0xf5}]}, &(0x7f0000001cc0)=0x10) ioctl$AUTOFS_IOC_ASKUMOUNT(r9, 0x80049370, &(0x7f0000001d00)) r18 = accept(r12, 0x0, &(0x7f0000001d40)) accept$phonet_pipe(r18, 0x0, &(0x7f0000001d80)) r19 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r20 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r19, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x4c, r20, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x4c}}, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000001f40)={r17, 0x15, "5c08402fa91105d501946b8da8def279550e9b345a"}, &(0x7f0000001f80)=0x1d) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000001fc0)={r21, 0x2}, &(0x7f0000002000)=0x8) 4.060837534s ago: executing program 4 (id=7968): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getuid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @loopback, 0x5}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x9, 0x4, 0x7b8b, 0x3, 0x8}, 0x14) r4 = getpid() r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000cc0)={@fallback, 0xffffffffffffffff, 0xa}, 0x20) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) sendmsg$netlink(r0, &(0x7f0000000c80)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x10000}, 0xc, &(0x7f0000000100)=[{&(0x7f00000002c0)={0x404, 0x3c, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x150, 0x39, 0x0, 0x1, [@generic="b771946ca5fdeaaeb3eef767a330870947b865ac131b662862c94e39e4b68e5a0a9560bb7d9dac31fba67c053e514d7e7e4e8fcc1f09d5f5ad534ea72a0200d7ba8bf1c32acf2627e623b0347b06a3bce1c352e9574c127ad021bfe4bc0ef547f9e01ca7e0b3e2b6d1453347be85234755d13ec12e4b371e9b16cade9b9bffcf415fe77f37f4beabe415f1127ad33b838214609e57f5cc91d505f0d622afd8d83e0ee539867f8ef7e41a991d5d046a983e794ed7e93b66ebfa52db4172ca00db88acd8c9334d4c", @nested={0x4, 0x61}, @nested={0x4, 0x9f}, @nested={0x4, 0xfe}, @generic="ae18caa47fd93f8fe46ccb6b576a4aba249fe553e543a6f1856c982456f1ab23df847c0e706ebbb30b32bd999edd7e68c63bf3b727b7c072935d344a61d22b7bc6b472d77a2906987775ecfa6ff246d8882eab6fa3", @typed={0x14, 0xfc, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x9d}, @typed={0xa, 0xf8, 0x0, 0x0, @str='(-\xc0{^\x00'}]}, @nested={0x1d1, 0x6b, 0x0, 0x1, [@generic="7621ecaded89b6efdaa7c0c8e32bce81cd8a08fa6d2b63ceec5c42fbc00513156eaec1dece2f1b6a646ddf5b921cc7352fd78be1150df4f87d6fe7ff0381f9f7401b0b557fca", @typed={0x8, 0x3d, 0x0, 0x0, @uid=r1}, @generic="2e865cea4c0e5361cf3e531e1752a0728ca9487d380317a966b8883c63db858b9289430b197e93ca6aa64d99882f6d7ec7e9af74fdf1b7e9a5367d765c03c0cb201fc67bb3afb027d05651eb8c935b874199b75b2b0d75d9429af2e3e858283df27650f65a48eeb6dbb61bc5b0bd1d08ff005b62bfef67e25fe8175cf607f73d54ff1b05fa4a44d848392304933e422115bdedca222b1bf79c7bbb3365b53ffeb8da78b4f986da3717b18bed800371979292707822c468787b7a1aaacde7ae07db03fcd42ec5dc317e4d26396fbccce1c4f7d27ca408d7af4cc34a1750952cd74f0ef3b4fbd337", @typed={0x97, 0xdd, 0x0, 0x0, @binary="dc1ada97deb1d6d4e59b71e1346549886e51a171409372ba920e829f44d805a90cc2254c624609c5d3ad0f36bb0baa064ce8d14290f83ea1c3a24fd5d866d3fb0e0cf5063fa333da9ae61d45f0ce7312dc80f99ea4f1bf63b4fa9557505376f60b1e5fe717077e743e338a565802a43d641f80bb8ea4e61acc22783c95095ecdba40156d8d9b2f9b5f6ba1438aa123564c0ee3"}]}, @nested={0xd0, 0xeb, 0x0, 0x1, [@generic="0060dbc506d29f56601fc0f59ef1cf6a74f6e43afe2cb5eab24a6afad10e08e28754ce5348c4875462219829938ee3eadb8673ee1c44477fb0763dd14da96a41677a3c19c78450ead88ca28e064498ede27cce5ba8d10211b2bafb10e45b1b512f60348cea4a8460c1fa7f8907644dce8c7e94ae7e9dafb533d39168bfcdd50e80cffc8dce87b25a46b36aea915468ccaa77a42e3f2bfdf03b81912efdde368876ad89c3a5d0cfcfa6ee07638bbf5ddc9411a09705907cfe698a2fccac2c72078d00547d397d86d6af604319"]}]}, 0x404}, {&(0x7f0000000700)={0x2e8, 0x19, 0x20, 0x70bd27, 0x25dfdbfd, "", [@generic="d9200a735098543dc5cd7423dbe3b489d9743349c16952a9338ae1d61deced6e208e14390dbc4ace6b77346a5d57df3d633c1f2b3aa8a5b3e888eabffe4c058c7151c487b0c4e0879075eecb01377c7ae55999479bb570881625f2a3656c0e7b5be99a0dd8a2aecda9fee114a816e2849aa689dd8966b382eb1b73ccdc1ce037fd82dd17d03a1d43f180e0c8e836", @generic="8578b2b207015645f04b2234b93eb959af4baa2cc35773c241a02b17c2c73a5a177b0ce4ef7c6466e42aecaf3f548e5dbe1ca8638209e1fa6a7134b07aac12783af6c686d7dbd03eedc0e4c2200ed61d7e558b80bb236865d506c01b2e", @generic="8e098d08970947a9c72260e8f0c5cd7d806aa21a5b76dc3f12830b0f84ae41d4caee7e852d194ddc6abe338690de4ae029c8a940cc87b1904b925f4a5c1f78c57990b87771dbcb89f91b1b85297a5779f8457df9f5e9ba207623195b5db8a7d0fbf2e7defdd2c4567dd45b238750268e0f5487e69539d39995f2f2044031154dfa3ffa2c98984cbf7968550a8d50e1b14f913b27f4608591f4fdfa21ab7029fc84d63f386863b0d2d46bbb4e5b2568c0a4052828f0d94f00af32b39d71d2063daa992437cf515e", @nested={0x121, 0x87, 0x0, 0x1, [@generic="e00060c08136594de3cb3ed9e21edea2e20c11464839fdb345282baf27f0299917409b9d13fb41b4bfaddd5dd0d89c3feaa6b4bdcda1b137c05c89c6c57f440e99c60726e050980d71b36a9e4c50109121be029c9dee181cb01bb4d250c85808b5fac57a4e724c34db0e18c76600770a83e5fa7148a1edfcd5edf275a87bdbd9edd912f5ab40473e03d1235b491792e7e12ebc9af8ab0de17fec91c7da6e4380333a9891caa0b03fd810299bc15915f0383e6d5e7b6c0fdef2af52a362344db6776603c4f3e3c5", @typed={0x4, 0x125}, @nested={0x4, 0xec}, @generic="c0a06df3cbd60bc259eca1de9879ef75f253971faced2ef0d7b772c6e59cfb5c996ed7998a6a", @typed={0x8, 0x10, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x142}, @typed={0x8, 0x116, 0x0, 0x0, @pid=r4}, @typed={0x14, 0xc4, 0x0, 0x0, @ipv6=@empty}]}]}, 0x2e8}, {&(0x7f0000000a00)={0x264, 0x3c, 0x10, 0x70bd2c, 0x25dfdbff, "", [@nested={0x1c, 0x110, 0x0, 0x1, [@nested={0x4, 0x38}, @typed={0x8, 0x69, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x140, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x44}]}, @nested={0x38, 0x122, 0x0, 0x1, [@typed={0x8, 0x135, 0x0, 0x0, @uid=r8}, @generic="fe5f3b69f4ec1d2e31af9e74917d24be0607ada57db80ba8efda13c52905cf5b0c217275", @nested={0x4, 0xa3}, @nested={0x4, 0x130}]}, @nested={0x1ff, 0xb8, 0x0, 0x1, [@generic="c295eebf1d084c00a974c7732600c73b3aa5bd7d001bcd9d03701269eec58841758dc7b5b4bf31d04db6a5b1f7ba11655e176488cd1860f0496d6ff3cc0490a944deb24b1a194461f889cf635f0ec090c1ffbd61a381322903e651c693daf8088fd1d0748b7d361786ed811701d1d37a60babea398101e1771f19398f6b11c71957f8d1cf854f6ef4b4aaf1e8bc6a7e730a999540a2f18d881c224c4d35c581c3506481e8106e93e0f05ede8842ce32b4ab3d2aa0b6af92ff43db28a3a9174717cc57fb7d6dbdf14f31d0e845f0b4941fa6aa554324d39eabc4560b20a0871fbd5dd0ea62557a249f2c3ab455bb094fb6582a5d2", @generic="6ad23b78e52c571864b85235c4a8d9b705bfc0daa197542897c81d0fec5d9311ced1f1acd6028a059feeb2a0e81c0346f18b823dbc5554997358eabdfa339fbd8acc6bab3453ff05342d8fb7bd0cd99b3bc82b9f59d7f6b63e02b12a0bbd2ccfbad6c654f32e6f6b5571c0df6db604c913d8e52f0055973f20f760c5949b4e995b82c8e5da6edc7cfef39db941874c0365c2abfdafd7e05ac13d6a0d647e4057167179a8d30e3ad5030b7a84066e28c515d2e35c236566066cdfb7d107915f49d2c70693312f309cd9404f213c642379b55308d226ed0bc5159a1553a0ba4b2bd2126471eadcdc00bb7f97ee4953e05ae93311c38fe29925d9f139", @typed={0xc, 0x35, 0x0, 0x0, @u64=0x7fffffff}]}]}, 0x264}, {&(0x7f00000000c0)={0x14, 0x3b, 0x200, 0x70bd26, 0x25dfdbff, "", [@typed={0x4, 0xe8}]}, 0x14}], 0x4, 0x0, 0x0, 0x810}, 0x20004008) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x4}]}, 0x3c}}, 0x0) 3.841294318s ago: executing program 3 (id=7970): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) socket$packet(0x11, 0x2, 0x300) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x9c, 0x11, 0xfe, @empty, @mcast2, {[], {0x4000, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "20a152f2ca6fc860cc06c843e07260576623f5768c5d4d4761e6c00f1e40836c", "58aff52d2af144ee28c400c900c64213309df2b9578a6b9ba1889d075a8eefe848d410cf50d4b0c56681c7d724990e69", "4db2eec337fd2164af63dbc0290f08f83927fb4510213bddaf9dc528", {"18d882dc0c2c360d979259447ecf642d", "5fecf58548a2da4fa21df8b73ff19b9b"}}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r3) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000080)=0x2, 0x4) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000940)=[{{0x4, 0x0, 0x1}, {0x1, 0x1}}], 0x8) bind$can_raw(r6, &(0x7f0000000200), 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x2b0, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5bc}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @loopback, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffa564}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa2b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffeffff}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x41001}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) 3.442117319s ago: executing program 3 (id=7974): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffff80}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x300}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x8}, {}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 3.354658935s ago: executing program 4 (id=7975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40343, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x34, r7, 0x101, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x100000c0}, 0x84) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c055}, 0x4000080) 3.269398665s ago: executing program 3 (id=7977): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000080)="325b76a0a5d57421fd49034210a8711c24526fc1e9cf82f8d91ab431a040e1b60d353ccf6f", &(0x7f00000000c0)=@buf="d6f1ba4e820d639ee4cd9739720c48bf907065decfda571c48085632e45cbb0aa0b23b8d33467ef9201e6e5a9b757c0772fd61d07647a762953345cd9bcaf338bb293888aba29e4b89ebef99dda1d1f6edfbba674c4a86cefe79f95039160a3f07b1acee413a00bd51b9e70c94c2a7038af2be525112b3d9cc7e6313a4e5037d677312fe7d58c48f8aab3dcbb469b0384bb4be34286031a557696f0b5974552e6c74e9720e5821c68f6f3793f80145d5b93bee6db7ced1cc8b6c2b43cac62b77a1e63b29a71947904775665f813a2ce0a6552db6"}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@loopback, 0x1, 0x0, 0x20, 0x0, [{@local}, {@multicast2}]}}) r1 = accept(r0, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000300)=0x80) recvmmsg$unix(r2, &(0x7f0000001840)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/173, 0xad}, {&(0x7f0000001580)=""/13, 0xd}, {&(0x7f00000015c0)=""/65, 0x41}, {&(0x7f0000001640)=""/3, 0x3}], 0x6, &(0x7f0000001700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}], 0x1, 0x40012041, 0x0) setsockopt$inet_udp_int(r15, 0x11, 0x1, &(0x7f0000001880)=0xb205, 0x4) getpeername$packet(r10, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001900)=0x14) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x30, 0xc, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x4000840) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x28, 0x3, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x804) getsockopt$bt_sco_SCO_OPTIONS(r13, 0x11, 0x1, &(0x7f0000001b40)=""/4096, &(0x7f0000002b40)=0x1000) setsockopt$inet_mreqn(r12, 0x0, 0x20, &(0x7f0000002b80)={@empty, @multicast1, r16}, 0xc) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r11, 0x40049366, &(0x7f0000002bc0)=0x4) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000002c00)=""/19, &(0x7f0000002c40)=0x13) recvmmsg(r15, &(0x7f000000cd80)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002c80)=""/9, 0x9}], 0x1, &(0x7f0000002d00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000003d00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003d80)=""/19, 0x13}], 0x1, &(0x7f0000003e00)=""/8, 0x8}, 0x3}, {{0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/57, 0x39}, {&(0x7f0000004e80)=""/2, 0x2}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/47, 0x2f}, {&(0x7f0000005f00)=""/254, 0xfe}], 0x6, &(0x7f0000006080)=""/23, 0x17}, 0x81}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f00000060c0)=""/50, 0x32}], 0x1, &(0x7f0000006140)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000007140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000071c0), 0x0, &(0x7f0000007200)=""/11, 0xb}, 0x471}, {{&(0x7f0000007240)=@nfc, 0x80, &(0x7f0000007500)=[{&(0x7f00000072c0)=""/7, 0x7}, {&(0x7f0000007300)=""/211, 0xd3}, {&(0x7f0000007400)=""/214, 0xd6}], 0x3, &(0x7f0000007540)=""/15, 0xf}, 0x1}, {{&(0x7f0000007580)=@nfc_llcp, 0x80, &(0x7f000000b780)=[{&(0x7f0000007600)=""/4096, 0x1000}, {&(0x7f0000008600)=""/4096, 0x1000}, {&(0x7f0000009600)=""/4096, 0x1000}, {&(0x7f000000a600)=""/192, 0xc0}, {&(0x7f000000a6c0)=""/4096, 0x1000}, {&(0x7f000000b6c0)=""/129, 0x81}], 0x6}, 0x4}, {{&(0x7f000000b800)=@qipcrtr, 0x80, &(0x7f000000cc80)=[{&(0x7f000000b880)=""/210, 0xd2}, {&(0x7f000000b980)=""/88, 0x58}, {&(0x7f000000ba00)=""/157, 0x9d}, {&(0x7f000000bac0)=""/19, 0x13}, {&(0x7f000000bb00)=""/4096, 0x1000}, {&(0x7f000000cb00)=""/66, 0x42}, {&(0x7f000000cb80)=""/153, 0x99}, {&(0x7f000000cc40)=""/61, 0x3d}], 0x8, &(0x7f000000cd00)=""/92, 0x5c}, 0x6}], 0x8, 0x12060, &(0x7f000000cf80)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) splice(r10, &(0x7f000000cfc0)=0x3, r9, &(0x7f000000d000)=0x6, 0xffffffffffffffff, 0xc) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f000000d040)={'vcan0\x00', {0x2, 0x4e24, @loopback}}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f000000d080)) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f000000d100), r12) sendmsg$TIPC_NL_MON_SET(r12, &(0x7f000000d380)={&(0x7f000000d0c0), 0xc, &(0x7f000000d340)={&(0x7f000000d140)={0x1e0, r17, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8464}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbb}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x93}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x603}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x443fde04}]}]}, 0x1e0}}, 0xc010) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, &(0x7f000000d3c0), &(0x7f000000d400)=0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f000000d4c0)={'syztnl2\x00', &(0x7f000000d440)={'syztnl2\x00', r16, 0x29, 0x0, 0x8, 0x2, 0x4c, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x80, 0x700, 0xa910, 0xffff2898}}) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f000000d5c0)={&(0x7f000000d500)={0x10, 0x0, 0x0, 0x5383dd30dd374db0}, 0xc, &(0x7f000000d580)={&(0x7f000000d540)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8011) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f000000d700)={&(0x7f000000d600), 0xc, &(0x7f000000d6c0)={&(0x7f000000d640)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044800}, 0x20000804) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r14, 0x84, 0x7b, &(0x7f000000d740)={0x0, 0x8000}, &(0x7f000000d780)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f000000d7c0)={r18, 0x5}, 0x8) r19 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f000000e980)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r6, 0x7, '\x00', 0x0, r6, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f000000ea40)={0x6, 0x1f, &(0x7f000000d800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x3, 0x2, 0x1, 0x2, 0xfffffffffffffffc}, @alu={0x0, 0x0, 0x3, 0x7, 0x2, 0xfffffffffffffff4, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f000000d900)='syzkaller\x00', 0x6, 0x1000, &(0x7f000000d940)=""/4096, 0x41000, 0x7d, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f000000e940)={0x0, 0x7, 0x7fff, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f000000ea00)=[r6, r3, 0xffffffffffffffff, r15, r19]}, 0x94) 1.889234241s ago: executing program 0 (id=7988): r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) close(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x28081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc", 0x34}, {&(0x7f00000017c0)="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", 0xf17}], 0x2}, 0x2404c0d0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x44004000) r3 = socket(0x10, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4008814}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x5, 0x7, 0xf, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x2f00, 0xfffffffe, 0xb}}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x34, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040800) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000111000008102000000"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x20) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000600)=ANY=[@ANYBLOB="50000000080211000001"], 0x36) r7 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 1.329370811s ago: executing program 2 (id=7991): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)="fabd01bab90e12c0784b02f8612c16a5571c2a91d4c5fbe8352a9fc633823cdcf89e7954b5b3cec186c5758a3082b0d50baafbdaf1daeb11803e8474467e54311777fc9b20", 0x45}, {&(0x7f0000000100)="53ebe5c510e618e7cc3822ec323f98061cefe466253fea6a5f0f33f6a3f165cfd3647b472e72aaff1ef84afc2828e6c25a50cc5f7f8a8dedf199f2ecec24e3860fd6a1f435f70453a4", 0x49}, {&(0x7f0000000180)="0145da7895cf7c56aeb8b9d815a4a326d1d4af8c10b6712498c5a903fd25f7eef8c634b2ba698fd43628999af9b008bf390c4eafee716d8153168c2b12788bfc04fc7a2b64ee5d927cf091102cd6a8645b987a0b3ed27cf61063a2c6f1fb2161b8909ba21283045c37732b920f6f6eb0bb9435ecf918adbc994699edc0e2e8081ec77a6a4809bc0deb2e207c5ac95efa957a8ac2348b594c6ee9b224f7b87bf4c8b1c8d129608973f2f7", 0xaa}, {&(0x7f0000000240)="c63f18e1155828a936e5d5f00449a6a232a9c31c6a31315c00fac9906592804c75bd4470f5a5eb6cd7772a7dfa2e4f20e592", 0x32}], 0x4, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x89a1}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x33, 0x3, 0x1, [{@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x2}, {@loopback, 0x1}, {@local, 0x6}, {@local, 0xffffffff}, {@remote, 0x5}, {@private=0xa010100, 0x8}]}, @timestamp={0x44, 0x10, 0xbc, 0x0, 0xb, [0x81, 0xffff, 0x0]}, @noop, @generic={0x89, 0x3, "fd"}, @timestamp_prespec={0x44, 0x34, 0xf3, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x7}, {@broadcast, 0x2}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010102, 0xa907}, {@empty, 0x7}]}, @timestamp={0x44, 0xc, 0x36, 0x0, 0x4, [0x6, 0xfffffeff]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x138}, 0x50000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e24, 0x7, @empty, 0x4}}, 0x22, 0x80}, &(0x7f0000000040)=0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=@newsa={0x230, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x2, 0x0, 0xa, 0x4, 0x1, 0x40}, [@algo_auth={0x140, 0x1, {{'rmd160\x00'}, 0x7c0, "d5deb33e8d02d5b4c6cdd277a6d0adde7a89a2677f61d0a96eb8706a52adfbdc312b5aeab8894c493c358ef75d4775e5384de91cac1e473fc9d56ec179b21865e3b6f29b2da7d564f2bcd96ec67ffcba725b86698cdf6feaa39b2349840fe7d8529c5418a08a77a548060487d8d648e8d31dd7f65d67c2bd1d59d42e8514e26a0c78d035476d621c1bc914d6f8df79bdd1d1d8edb1ae821d5ee68653346b168b345430703bd4bfb119c663150db33b9ac688746b8f6f75dd2584566d011b6f97b884a2c0f1a5ba885b39341f14d109de6029a222b929100031b1944a690fd135a68f339a21013bd10f84228211dbe3901a6a391865bf9f2b"}}]}, 0x230}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) 1.071619901s ago: executing program 1 (id=7992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000000000000000009000000000000000000000000000000050000000000000000001b0000000002000000000000000000000000000000000000000000000000000800000000000000002b00000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac141443000000000000000000000000000000003300"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 995.082769ms ago: executing program 2 (id=7993): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000850000000700000095000000000000009cf2f7085d507dd05a447242559f8dd2ed4ab1672aa564df0d9a6795eb968ff3c3e2185e78a143045a6b77b099138ea6725c804c7e326eb601a0716010a061444a96164050b185973d"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x94) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x800000, 0x11, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x71, &(0x7f0000000380)=""/113, 0x41100, 0x58, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0x3, 0x1c, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1, r4], 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = socket$isdn_base(0x22, 0x3, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) (async) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f0000000000)) 994.62852ms ago: executing program 1 (id=7994): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r4, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c0002820500160001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080) socket$caif_stream(0x25, 0x1, 0x1) 963.018581ms ago: executing program 2 (id=7995): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 849.879761ms ago: executing program 0 (id=7996): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000e2100", @ANYRES32=0x0], 0x18}}, 0x0) 751.153042ms ago: executing program 2 (id=7997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007112a9000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, {0xa, 0x4, @random="9e621b92b8b6"}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) 736.772809ms ago: executing program 1 (id=7998): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffef00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120) (async) setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f00000000c0), 0xb9) (async) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x5, 0x201, 0x40, 0x8, r4}, &(0x7f00000000c0)=0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14f8ffffff00010000000000000000000a00000000000a05000000000000000000070000000900010073797a300000000050000000090a01040000000000000000070000000900010073797a30000000000c0009800800014060000002080005400000000208000a40000000010900020073797a31000000000800084000000001140000001000010000000000000000000084000a000000"], 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2044010}, 0x10) 633.514119ms ago: executing program 0 (id=7999): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000001880)=0x5, 0x4) sendmmsg$alg(r2, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)="0876a9", 0x3}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/73, 0x49}, {&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000380)=""/187, 0xbb}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000000540)=""/31, 0x1f}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f0000001740)=""/137, 0x89}], 0x8, &(0x7f0000001800)=""/4, 0x4}, 0x10000) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a15cc14e96b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x1e, 0x0, 0x0, 0x5, 0xa5f, {0x5, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1d49, 0x7f, 0x0, 0x5, @loopback, @dev={0xac, 0x14, 0x14, 0x21}}}}}}}, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x24, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) 551.475989ms ago: executing program 1 (id=8000): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x6, 0x80000001, 0x26, @dev={0xfe, 0x80, '\x00', 0x21}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe15097cd1c2b52ed, 0x40, 0x7fffffff, 0x6}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x61, r2}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, 0x0, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 394.380147ms ago: executing program 1 (id=8001): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x92}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b0000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20008000) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f00000003c0)=""/213, 0xd5}], 0x5}, 0x3}], 0x1, 0x10100, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xe, 0x0, &(0x7f0000000240)="00cf87dc6d8b947ab1a56284d0fc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x14040080) close(r1) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000c40)={@caif, {&(0x7f0000000bc0)=""/27, 0x1b}, &(0x7f0000000d00), 0x42}, 0xa0) recvmmsg(r8, &(0x7f0000000b40)=[{{&(0x7f0000000240)=@can, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000600)=""/159, 0x9f}], 0x6, &(0x7f0000000080)=""/50, 0x32}, 0x7}, {{&(0x7f0000000740)=@ax25={{0x3, @bcast}, [@rose, @rose, @bcast, @default, @netrom, @remote, @bcast, @rose]}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/78, 0x4e}, {&(0x7f0000000840)=""/254, 0xfe}, {&(0x7f0000000940)=""/114, 0x72}, {&(0x7f00000009c0)=""/229, 0xe5}], 0x4, &(0x7f0000000b00)=""/53, 0x35}, 0x8001}], 0x2, 0x40002162, 0x0) 393.159121ms ago: executing program 2 (id=8002): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x37, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x93, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0xa0, 0x4, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x7, 0x0, 0x7, 0x68}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000900)=0x14) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r8, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xffffb707, 0x25, {{0x12, 0x4, 0x0, 0x1, 0x48, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast2, @multicast2, {[@ssrr={0x89, 0x23, 0x1, [@private=0xa010102, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @broadcast, @multicast2]}, @generic={0x88, 0x11, "b51a5dbdc5f7b9470bead8797571c8"}]}}}}}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r11], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000a40)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000d00)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001200)={&(0x7f0000000d40)={0x4b8, r1, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb3, 0x5, "9094590c1e6b55ff46c2bde923d84aa86984ec090c3105f55e9ff042adef1952a1cf1704973036cc9ee02073be63d4f10a992be653a94da8091810e22c9312f4dd53c324faa18c3079c3c906e79420b33d2380ddfb5fc8cf4d16462043653fabde94206a0572514d065d6eceb0dbf6dcbac2c51c50ca7b1a66618068f582d228e085d2916817cb4a0c086b7d3d44c63fbc1b5953b575aef551679ecc8067fda4830a505792b1d04cee34892d7c2705"}, @ETHTOOL_A_BITSET_MASK={0x34, 0x5, "786be39bffc682c97df3353e851fb2315e40d45c5a20474abd58843e49e4220ae0339616f23cc507f520ecd24d78b430"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xca}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x228, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xbb, 0x4, "73d2ef255de0f0cbf3527ffdb500be9e66181b965031dc2accb0ac8e6668dcad90ff77bbf2529b0b248a2d0d97f721b3d91b9fdfd3d4389671fddd7af8e09cb7b40efc1d674492b46fd64b903683d4a0817dbcd575a2f59f078ce8bd71459af1fc5e58974187a53f5797b11f9811629ca05d6168ae9162baf162570a48d613d9383a113c273df2c122a84fdc3a25451c468f329fda6d106389f867320b135f1c03f86b51f22037ce9d2ae233ef82f26e9d4e644547e871"}, @ETHTOOL_A_BITSET_MASK={0xd2, 0x5, "ee118adee3a032fde17918ec412845c630ed3c5bc5339e8e948540ee920c7f7f3ae347292d94fc696113b40329d418e3d05d3807ba911852913d9e888b741a5217359580b5a3ed42c635de1c4a8930c7eb091cef0b5452b556245aab2d68a10eb52e87623f15c1395ab38018b77c963628608fddf2114c6d83f2754162fe05fe203fa4a3959157e8a9b138c4aa3f90f7efa93231b8c54fa39bb309acca28c4e5947b1c30481e902a5db2e1f165608aa0215a5bb6828248079b76bf4b736897f9cc8c3617be6c0b994aaef352e751"}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffae}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+\xec!\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x86}]}]}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x4}, 0x40004) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r15, &(0x7f0000002200)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x200, @private0, 0x274}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)="0629244ad6cc", 0x6}], 0x1}}], 0x1, 0x4000000) 392.802653ms ago: executing program 0 (id=8003): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffd, 0xff}}], 0x20, 0x800}, 0x2c0408d0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x50}}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af3650400410038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 285.810247ms ago: executing program 0 (id=8004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) bind$tipc(r7, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r8, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xaffa9c0077a76a7d) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1000000000000010, 0x80802, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36b26fb0b71d0e6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a4def23d410f6296b32a334388107200759cda9036b4e369a9e152ddcc7f05a5f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967deabe802f5ab3e89bd6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837074e098ee207d2f73902fbcfcf49822775985bf32d715f5888b24efa000000000000ffffffdf000000000000000000000089a7b9b00000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f91a31cf41ab11f12fb1e0a494034127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5dff5adbdee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf1128744bab6677fcb78e313841ec309baed0495f06d058a75fa4c81e5c9f42d9383e41d277b10392a912ffaf6f658f3fadd16286744f839c3f128f8f92d0992239eafce5c1b3f97a297c9e49a0c3510ef74080e6d1e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda154910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bc6cf8809c3a0d46ff7f008000000000ad1e1f493354b2822b98371d000000167d78e65b90eba0768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cd1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e3344b155cc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f931ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e53d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf99000000000000000000bfb32c826563c518d0ad23bc83ba3f3757210a057eff7615c868bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd23ab5268f1b3d08ebb8ce498cbaaf5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa44966945d93c33b038ce0d890f851811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783058e56c70afe8016b3dd9dc7785b36e609f173cc6b893ecd138289709839747837d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964eddec902fc7cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c898b7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dca9c42c4d719347f39ef006c2df747ee6adb7cd04faf05c36de72354c64ebaf28a3de18607ebc4b70f50f71dae565749568a23319232dc213342fb472e98c9a412199ce7976bee5eaf40e60cb3fbe8b92dae5008e92d17d05ce74ffffe74ae71d5b8bd43a4e0bf0390335aa489689f5e3a4ac5adca96caab658b43cd499d95d3876c220d147ad1d0e626621d88f1370982f663793cac52ea0d14e595ff1f56427a0a813bb3b84d31d021eeea8faeff25bb66f5940d08a5509a66fc43962bcb2f7415bc38e355e80ec935aa6fe2d74bd475d89449fb46320fee40faff2fd005549fe6a042bd95decfde5e166971935f4cfd9c9e5bfd2d803644f4e5b7e6dc1a7a35df7134e2fad79269bf24bea4eb0213068e3054d9e4a8d1a9eb032cb390e2016d0ce10549728cb4732dc5adab16fa19ac70780b29e079be27c95d3dd2bd91a584c46d84d430fc6ea31ce0ba62fa27be9f6bc435203da7c3a5d68bf4dd4f81cbfaa1c87a15b9272853c9837db930952dca667194b71815a9eb49b495360dcdf31e0e560857d0541a916d6b5469ac1b36babc5a91e1d58925f20d9d5f8a0da3c30711b0d101cabceffbe072be69613ea0003c6e9bb5cd2413c8ddc17cfa319cf7aaeed0ffb07a08f8fb439f709dfe0732fe42192819870bdd87d5f612ade03540a28be446095269d9ea5a60bba1f2462f9921f2a731dbcf1d03964ea1e4f79514914d37877f57617b60fa2b58aa694fcb023024653c4b73efb12a57ffc6f8943262b77be933051e12bd4d768a422ea652d45b04a9c43b5c97fc3edea7002d51a0a74889334ee"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000000)=r14, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x2070bd2c, 0x0, {0x2, 0x1f, 0x0, 0x0, r15}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x14) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, r17, 0x1, 0x70bd25, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r17, @ANYBLOB="020028bd700000fa0700050003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x40040) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001740)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) 256.94882ms ago: executing program 2 (id=8005): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000deffffff00000000ffffffff18110000b290bdd4732efd819000a1ceb0e4e1e42939b0bae20ce380e5", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x1020, &(0x7f0000002240)=""/4128, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async, rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r2 = accept4(r1, 0x0, 0x0, 0x800) (rerun: 32) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"], 0x18, 0x4004048}], 0x1, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0) r4 = accept4$tipc(r2, &(0x7f00000003c0)=@name, &(0x7f0000000400)=0x10, 0x800) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/63, 0x3f}, {&(0x7f0000000640)=""/183, 0xb7}], 0x2}, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000240), 0x3) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r10 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.579151ms ago: executing program 1 (id=8006): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0xa, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0x1}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) close(0x4) bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000020000000000"], 0x0, 0x1a, 0x0, 0x0, 0xffffffff}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002ac0)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008010000850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x31) ioctl$SIOCAX25NOUID(r7, 0x89e3, 0x0) recvmsg$can_j1939(r1, &(0x7f00000003c0)={&(0x7f0000000300)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/245, 0xf5}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f00000007c0)=""/89, 0x59}, {&(0x7f0000000840)=""/231, 0xe7}, {&(0x7f0000000940)=""/189, 0xbd}], 0x5, &(0x7f0000000a80)=""/102, 0x66}, 0x8100) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) shutdown(r8, 0x1) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCAX25ADDFWD(r7, 0x89ea, &(0x7f0000001540)={@null, @default}) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r11}, 0x10, &(0x7f0000000500)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4}, 0x10}, 0x1, 0x0, 0x0, 0x240c4050}, 0x0) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xc}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0xa}, @in6={0xa, 0x4e25, 0x2, @loopback, 0x9}, @in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, @in={0x2, 0x4e23, @multicast2}], 0xdc) setsockopt$MRT_FLUSH(r12, 0x0, 0xd4, &(0x7f0000000180)=0xb, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x6}, 0x8) 0s ago: executing program 0 (id=8007): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r3 = accept(r2, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000100)={r10}) getsockopt$MRT6(r11, 0x29, 0xd0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x400, 0x33}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xb, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x10, 0x7de, 0x74, 0xe, 0xdc, [{0x2, 0x1b74, 0x5, 0x6}, {0x2, 0x7, 0xaad, 0x4}, {0x8, 0xa8f1, 0x8, 0x4}, {0x1, 0x9, 0x3, 0x1}, {0x3, 0xfff, 0x6, 0xfffffffc}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=@newtaction={0x1b54, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbff, {}, [{0x1b4, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x180, 0x3, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x80, 0x7, 0xfffffffa, 0x1}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9ed0, 0x0, 0x7, 0x8, 0xc9c9}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x3, 0x6, 0x5}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xffff8001, 0x0, 0xffffffff, 0x23b}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x0, 0x5, 0x8}, 0xbb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xe, 0x3, 0x0, 0x5}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffe00, 0x40, 0x1, 0x6}, 0x4}}]}, {0x8b, 0x6, "d7832561a9f04d445dfc62c075745749ee8289464a5c70431b53633bdebaa44b9f380a1ca947937b5f556a0f9c9f7c6867ca9ec31661d0e25692c2df5b19e1cd1e514b3bc4646519dbdfa630171263b376c76cf477bbddb7fb41961c747a6615113e7a42bd0d102ebd8ef1139d080c2c86c8083d65f9569366eb2094f7e8d3aa36d3a7667b6bf1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x198c, 0x1, [@m_vlan={0x154, 0x14, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xca, 0x56, 0x1, 0xa, 0x1}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc39}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xadf}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xe4, 0x6, "7985c593cea9a79bc949db64fd391b81c779c5c06b2ba302a103d3bd2d31965ca9fea25801965d01c7bffee1b05868f68d4e1ccb0aea13bee1a5d17d52534613fd6ce8cb08e4a56286d9741d56dc1be0d227120bfe76ffcd36d66d83574c074f32dc7aeba8167829513cc99149dca936437ec2dff03959ff476de8545b8084d95934a2b36e034e15a0bb6d62a7edea3715b197f0f14b52ff1909f8ad73414c797dcf59cef70795addb07d7d8e8bdc7b6b54a988dcd1f105c857ff436f3ece9baa933c8d19ca9b32ed2650c11033d56f01a919331c355727232c77f40a4f795d8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0xf0, 0x1c, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x298, 0x20000000, 0x24, 0x1d2}, 0x1}}]}, {0xa6, 0x6, "2c4f9072123796af4669407dce7e444de6b91ee4d613ceb9ad5e766742e1f256ea752e661b978c7724da55a6fe4de9d036cd137444a99858a3a3580f45c6b730a65a1b2478008cd20eadc74a13e576f481e1498d17be2df847d5ef6faa97a4410ddec1919e911d88fb3ea3c2044f53510b3b8a4280946fdb160ddd72f0204238ce0faa4d5f84274b0b26675618bc911f542e937a388359d0ef34f35727681c55be51"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x40, 0xd, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x8, 0x6, "5e50ba8b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0x1020, 0xe, 0x0, 0x0, {{0xa}, {0xef4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x88, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xc10f6da3d38f4487}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x0, 0xd797, 0x4, 0x5f2, 0x80000001}, 0x6, 0x80, [{0x6, 0x6, 0x1, 0x1, 0x8, 0x8000}, {0x35, 0x5, 0x24, 0x6, 0x7, 0xfffffeff}, {0x401, 0x8, 0x5, 0x1, 0x2, 0x9}]}, [{0xcd, 0x0, 0x8, 0x5, 0x1, 0x4}, {0xf, 0x3, 0x0, 0x2, 0x3, 0x1b4e3f2c}, {0x9, 0xc59f, 0xb, 0xfff, 0x6, 0x8}, {0x7fff, 0x8, 0x40, 0xd, 0x80, 0x81}, {0x4, 0x6e, 0x5, 0x94, 0x2, 0x80}, {0x4, 0x2, 0x7, 0x5, 0x9, 0x9}, {0x6b8, 0x6, 0x2, 0x5, 0x7, 0x7}, {0x2, 0x8, 0x0, 0x1d86, 0x7ff, 0x3}, {0x9, 0x0, 0xeac, 0x2, 0x0, 0xe7f}, {0x9, 0x10000, 0x6619, 0x1000, 0x7, 0x8}, {0x1, 0x100, 0x2, 0x38a, 0x2, 0x8}, {0x8ef, 0xff, 0x25, 0x6, 0x80000000, 0x9}, {0x8, 0xe4, 0x2, 0xfffffff1, 0xff, 0x2}, {0xfffffff9, 0x2d05, 0x9, 0xff, 0x92a, 0x4}, {0xfffffffc, 0x1, 0x101, 0x7f, 0x1c0000, 0x7}, {0x8, 0x80000000, 0x6, 0x1, 0x6, 0x7}, {0xfffffffb, 0x7ff, 0x4, 0x0, 0xc, 0xffff}, {0x1, 0x0, 0x4, 0x2, 0x401, 0x9}, {0x5, 0x4, 0x7, 0x627, 0x20b, 0x80000001}, {0x2, 0xff, 0x4, 0x10000, 0x0, 0x6}, {0x400, 0x8, 0x2, 0x969d, 0x4, 0xae}, {0x30e98000, 0x61, 0x3, 0x200, 0x400, 0x9}, {0x4, 0xf, 0x7, 0x80000000, 0x80, 0x10}, {0x7a, 0x10000, 0x5, 0x8, 0x9, 0x2}, {0x0, 0x0, 0x100, 0x5, 0x3}, {0x2, 0x7dc7, 0x72, 0x6, 0xa70, 0x3d67}, {0x8000, 0x3, 0x79c02707, 0x59f, 0x1, 0x400}, {0x938, 0x400, 0x0, 0x331, 0xffffffff, 0x101}, {0xfffffffa, 0x6, 0x24000000, 0x6, 0x3, 0x6fc}, {0x4, 0x3, 0x7, 0x7, 0x6, 0x2}, {0x5, 0x7, 0x5, 0x3, 0x9, 0x2}, {0xe, 0x1, 0xc9, 0x5, 0x6, 0xad40}, {0x5, 0x5, 0x5, 0x2, 0x3ff, 0x2}, {0x5, 0x8000, 0x3, 0xff, 0x6, 0xee}, {0xedd, 0xe2, 0xffff, 0x1, 0x800, 0x9}, {0x7, 0x7, 0x2d11, 0x14, 0xb6, 0x9ce4}, {0xc, 0x80000001, 0x75e, 0x5000000, 0x7, 0x8}, {0x83, 0xeea, 0x40, 0x9, 0x3, 0x6}, {0x1ff, 0x0, 0xa1b, 0x3, 0x9}, {0x38a, 0x7, 0x3, 0x4, 0x8, 0x5}, {0x10001, 0x3ff, 0x4, 0x0, 0x22c8, 0x2aad0233}, {0xffffffd0, 0x62d, 0x7, 0x0, 0x5, 0x5}, {0x6, 0x6, 0x0, 0x101, 0x3, 0x3}, {0x6, 0x5, 0x5, 0xd, 0x8, 0x3}, {0x400, 0x40, 0x8, 0x0, 0x1, 0x1}, {0x4, 0x200, 0xfff, 0x68, 0xd9d, 0x1000}, {0x6, 0x0, 0xe4c4, 0xfffffff8, 0x8, 0x4}, {0xffffff2c, 0x8, 0x200, 0x2, 0x2, 0xa}, {0x76, 0xb8, 0x4, 0xb9c, 0x0, 0x80000000}, {0x1, 0x9, 0x2, 0x7, 0x6, 0xd6cf}, {0x6, 0x8, 0x40, 0x9, 0x4, 0xfbd}, {0x620b, 0x5, 0x7, 0x3, 0x3ff, 0x8}, {0xdc, 0x1, 0xe232, 0x2, 0x3ff, 0xa2a}, {0x150f4575, 0x80, 0xfffffc2b, 0x2, 0x224043b1, 0x1}, {0x7ff, 0x0, 0x89, 0x0, 0x2, 0xdc}, {0x1000, 0x8, 0x4, 0x6, 0x401, 0x8}, {0x25, 0x22c4, 0x39, 0xa, 0x1, 0x9}, {0x8, 0xfc0, 0x3, 0x1ff, 0x1, 0x801}, {0x2, 0x7fffffff, 0x1, 0x6, 0x1ff, 0x232}, {0x4, 0x7, 0x1, 0x66, 0x4, 0x80000000}, {0x100, 0x2, 0x4, 0x9, 0x3, 0x5}, {0x43d036c4, 0x5, 0x8000, 0x6, 0x0, 0x8000}, {0xfffffff1, 0x9, 0x4, 0xfdbb, 0x7, 0x6}, {0x3, 0x8001, 0x2, 0x1, 0x4, 0x4}, {0x5, 0x29, 0x2, 0x80000000, 0xfffff800, 0x8}, {0x5, 0x10000, 0x1000000, 0x6c5, 0x6, 0x1}, {0x8080000, 0x6, 0x8000, 0x8, 0x3a, 0x7ff}, {0x8, 0x2, 0x0, 0x5, 0x6, 0x1}, {0x5, 0xfff, 0x8, 0x4, 0xf, 0x4}, {0xc0f2, 0x2, 0x4, 0x8, 0x200, 0x113cbfc0}, {0x7, 0x2, 0x1, 0x9, 0x0, 0x8}, {0x7fff, 0x1, 0x7f, 0x7ff, 0xffffffff, 0x86f}, {0x7, 0x2, 0x60, 0x6, 0x80000000, 0x2}, {0x80000001, 0x3, 0x2, 0x1, 0x3, 0x9}, {0x2, 0x6, 0xfffffffa, 0xb, 0x3, 0x4}, {0x5, 0xffff, 0x9, 0x8, 0xffff, 0xfffffffc}, {0x676, 0x3, 0x101, 0x4d, 0xfff, 0x2}, {0x7fe00000, 0x3, 0x5, 0xc0, 0x10, 0xfff}, {0x8, 0x0, 0x6, 0x5, 0x7, 0xffffffff}, {0xffffff81, 0x5, 0xb, 0xff, 0x9, 0x6}, {0x7fff, 0xd11d, 0x28, 0x5, 0x0, 0x9}, {0x9, 0x3, 0x100, 0xa, 0x2, 0x6}, {0x10, 0x3, 0x4, 0xfffff801, 0x83, 0xffff}, {0x7fffffff, 0x22ebef11, 0xe, 0x6, 0x4, 0xa2}, {0x100, 0x5, 0x1ff, 0xffff, 0x5a6, 0x5}, {0x400, 0x4, 0x6, 0x0, 0x4, 0x2dfa}, {0x8, 0x8, 0x2, 0x8, 0x6, 0x5}, {0x6, 0x6, 0x7, 0xcff, 0x8, 0x9}, {0x5, 0x401, 0x9, 0x1196, 0x4, 0x80000001}, {0x359a, 0x1, 0x881a, 0x4, 0x8, 0x8b}, {0x6, 0x7ff, 0x101, 0x6, 0xc, 0x3}, {0x3, 0x6, 0x7, 0xfcfc, 0x1, 0xa}, {0x6, 0x922d, 0x8, 0x3, 0x9, 0xfffffff2}, {0x0, 0xd662, 0x1, 0x0, 0x6, 0x401}, {0x0, 0x83a8, 0x2, 0x8, 0x1e4, 0x2a1f}, {0x10000, 0x10, 0xffffffff, 0x0, 0x7ff, 0x1}, {0x5, 0x5, 0x7, 0x1000, 0xdf3, 0x1}, {0x1432, 0x9, 0x3, 0x81, 0xffff, 0x531}, {0x9, 0x280, 0x8, 0xfffffe01, 0x2000, 0x2}, {0x0, 0xfffffff9, 0xa9d8, 0x9, 0x4, 0x9}, {0x3, 0x7, 0x7, 0x5, 0x9, 0x6ce}, {0x0, 0x7, 0x9, 0x5, 0x4, 0x8}, {0x0, 0xc, 0x2, 0x40, 0x80000000, 0x7fffffff}, {0x1, 0x1, 0x9, 0x8000, 0x6df3a499}, {0x0, 0x3, 0x10001, 0x1ff, 0x4f, 0x1}, {0x8ba6, 0x8, 0x2, 0x401, 0x3}, {0x80000000, 0xfff, 0xd3, 0x10, 0x80000001, 0x4800000}, {0xfffffff7, 0x5, 0x5, 0x5f, 0x2, 0x9}, {0xb8a, 0x4, 0x1, 0x10, 0xb5, 0x7f}, {0x3, 0xf6d, 0x319f, 0x7fffffff, 0x1, 0x4}, {0x2, 0x7ff, 0x3, 0x0, 0x6, 0x40}, {0xdca, 0xa6, 0x7, 0x100, 0x59, 0x1}, {0x7f, 0x0, 0x7, 0x8, 0x71020924, 0x8}, {0x6, 0x4, 0x1, 0xfffffff9, 0x3, 0x6}, {0x400, 0x8, 0x2, 0x9, 0x4}, {0x0, 0x3, 0x453c, 0x0, 0x4, 0x1ff}, {0x0, 0x7ff, 0x9, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xffffffff, 0x5, 0xb}, {0xffffffff, 0x7, 0x5bd8, 0xc, 0x7a0, 0x9d3}, {0xf, 0x800, 0x9904, 0xbe9, 0x7, 0xbade}, {0xffffffff, 0xffffffff, 0x7, 0xe, 0xfffffffc, 0x5}, {0x6, 0x9, 0xfffffffe, 0x7, 0xfffffff8, 0x1}, {0x4c0, 0x9, 0xd, 0x8, 0x2, 0x1}, {0x6, 0x1, 0x1, 0x7}, {0x6, 0x80000000, 0x3, 0x8, 0x1, 0x9}, {0x10000, 0x9, 0x9, 0x5, 0x0, 0x4}, {0x0, 0x9, 0x26f, 0x59, 0x9, 0x5}, {0x3, 0xfffffffa, 0x2, 0x4cd, 0xe9c4, 0xff}], [{}, {}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x7}, {0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {}, {}, {0x5, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0xe45717999f67af0f}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x663b6eac3e6c8d16}, {0x3}, {0x4}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5}, {}, {0x209f006311cccd73, 0x1}, {0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x2}, {0x3}, {0x8}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3}, {0x3}, {0x1}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5}]}}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xec, 0xb, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x6, 0x0, 0xfffffffd, 0x9}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xc34e7b6e}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1ff}]}, {0x86, 0x6, "70bb655d08af2700b7241f09f0963581ef19d218d6d252f2967a85116afe1014a6365a5ee35655984cb0787da2268be2889832c54b46d9674af45dc1cbcd9f0e22fc1233b5eccdb0cef99fb7d7c1e3c448e6d4b7198163e009451300fea03a273431498165accb5ac8b8389453547a573b749f6f4c8ed92b4528c0f554a20b278342"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_nat={0x21c, 0x1d, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x769e, 0x8, 0x9, 0x4}, @rand_addr=0x64010101, @rand_addr=0x64010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x1, 0x0, 0x8, 0x7}, @rand_addr=0x64010100, @rand_addr=0x64010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xa7c, 0x1, 0x2, 0x7fffffff}, @broadcast, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff5, 0x80, 0xffffffffffffffff, 0x800, 0x8000}, @empty, @multicast2, 0xffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x8, 0x6, 0x3, 0xcaee}, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, 0xff000000, 0x3}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffd, 0x401, 0x20000000, 0x1, 0x3}, @loopback, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x9, 0x3, 0xb12, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffffff}}]}, {0xdc, 0x6, "291ca8b590a5fec678fc0f058e6734a1c52e4d13bc68884e574995e37739f6de5086c2e2b5e64270fbd8debb2b303455d9849ec29e60657f812ff6fd0b6493018cc6e4dd22abe08b2381443eb74fc81f10be79df8276a8778bc213e37df6c2198493a855ebf7b687639ddd5dd234fcd2f020b35e37d0940e5ed21bfd00c943ec719563187ae2beb419768d30d0f14feb3fa9b8afe1fe9755715a6fd945cefac1711ec7b0090919e5442eb4a572848ce99ab91998cff0b0356d1cd4504085a2058e8928d76ea605c04e8f308880223f8f3bc438010f29965a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0xc8, 0x2, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xa, 0x0, 0x2, 0x4}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xe}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x5, 0xffffffffffffffff, 0xfffffc01, 0x8}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x7ff, 0x6, 0x3, 0x7}}]}, {0x2b, 0x6, "421aec29def07d160da1161cfc856bf9c5a6d8f99a720893af2c8db3a1eab575fa3735d3882ed1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x1b4, 0x5, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x3, 0x10, 0x6}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xfff, 0xffffffffffffffff, 0xc1a2, 0x95b4}, 0xe}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8a, 0x20000000, 0x9, 0x2}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xc, 0x8, 0x6, 0x5}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0x4e822976, 0x6, 0x3ff, 0x459}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x4, 0x1, 0x3b3d7fe, 0x9}, 0x2a}}]}, {0xde, 0x6, "b9dca4a858ec9c41c532c308f4c313357e0f0571b1b04f0f5317fd4ddb10c82cb6a52a7364ee6d3c17318ec3c85da6d1ca538f799ab3f791a484a6d841367ffd78ef56556ffb8a83b7b6887643f851fe7a1be7c0bc1bd07a20b3cf4759be377c4ada3a91c483dbbf6c6ae617d9fe2c30fcbafd90b3d2ea0e9d829ff95e1fbdcfd7f9969ff9e9f303d0b2954d3deb53b4e3e3728c5a1bb2bc39b18ef3073f32730584a7b67a9a7b632a0b3f69041e1b34c1e361028eea5f9fc67004386b16776b7fac37dac37255a7d041e94e02740a45e17e2830c7e5ddbd4046"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x50, 0xf, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xbe6e, 0x8, 0x7, 0x3}, 0x401}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x110, 0x2, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xac67, 0x2d12, 0x2, 0x6, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1ff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfca}]}, {0xb3, 0x6, "a134a818fd9787019db1cd0701a05a1364d5f26f7864d13534dc867555a4a21e992f3477e9cfbf768d7e90ade988cfcf6f52303dd8de8f8dcc9937a468dc141ca85a275633a89919e712395219b9efd6f3ce3a68926c31fbaecd2a6989e5e7530e2d3330f85a28d57a943e16c90d484ba89e0b37a1c8c1a1ba04412d4bd7f4859e1e1b07a0776d3f922df50b4ba33666c07c18600ed6f6da0df80b21301f6cf000"/175}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1b54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ba000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711243000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e0, 0x140, 0x0, 0x358, 0x140, 0x238, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@icmp6={{0x28}, {0x10, "00f3", 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@empty, 0x40, 0x19}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x21}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private1, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0xffffff00], 'vlan0\x00', 'macvlan1\x00', {}, {}, 0x0, 0x1, 0x1, 0x43}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3e2b, 0x1, @ipv4=@empty, 0x4e20}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0x4ef3e29c29e3ee9f, 0xffffffff, 0xff], [0xff, 0xff, 0xffffff00, 0xff000000], 'bond_slave_1\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x2c, 0x3, 0x3, 0x4c}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) r13 = socket$rds(0x15, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) setsockopt$RDS_GET_MR_FOR_DEST(r13, 0x114, 0x7, &(0x7f0000000300)={@nfc_llcp={0x27, r14, 0xffffffffffffffff, 0x6, 0x1, 0x9, "9720f383dcfa390362f0d2533ac7cbe2b968a5248f3162843f73792792d8619b1191ac939dd012b4a92769d367c47899a05e5bd2e866c0351324a003d99d7d", 0x25}, {&(0x7f0000003380)=""/4096, 0x1000}, &(0x7f00000002c0), 0x32}, 0xa0) kernel console output (not intermixed with test programs): ][T29782] netlink: 'syz.4.6428': attribute type 2 has an invalid length. [ 879.273872][T29776] dvmrp12: left allmulticast mode [ 879.295675][T29782] netlink: 'syz.4.6428': attribute type 1 has an invalid length. [ 879.303753][T29782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6428'. [ 879.651881][T29809] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6438'. [ 879.844823][T29819] netlink: 'syz.3.6441': attribute type 10 has an invalid length. [ 879.910110][T29819] team0: Failed to send options change via netlink (err -105) [ 879.920632][T29819] team0: Port device dummy0 added [ 879.942175][T29827] netlink: 'syz.1.6443': attribute type 11 has an invalid length. [ 879.944613][T29819] syzkaller1: entered promiscuous mode [ 879.951911][T29827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6443'. [ 879.985920][T29819] syzkaller1: entered allmulticast mode [ 880.508747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 880.659719][T29859] syzkaller0: entered promiscuous mode [ 880.676874][T29859] syzkaller0: entered allmulticast mode [ 880.870466][T29866] syzkaller1: entered promiscuous mode [ 880.885101][T29866] syzkaller1: entered allmulticast mode [ 880.985863][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 880.993940][ C1] lec:lec_tx_timeout: lec0 [ 881.195839][T29885] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 881.344117][T29886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.463458][T29898] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.6466'. [ 881.497500][T29894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6465'. [ 881.571605][T29902] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6468'. [ 881.755690][T29910] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 881.954139][T29926] netlink: 'syz.0.6476': attribute type 8 has an invalid length. [ 881.979456][T29926] sch_fq: defrate 0 ignored. [ 882.037592][T29929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6478'. [ 882.200647][T29935] netlink: 'syz.3.6480': attribute type 1 has an invalid length. [ 882.595515][T29965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6492'. [ 882.813361][T29976] SET target dimension over the limit! [ 882.854168][T29978] SET target dimension over the limit! [ 882.911842][T29984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6497'. [ 883.064075][T29995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6501'. [ 883.253675][ T30] audit: type=1804 audit(1770505675.273:12): pid=30007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6504" name="/newroot/51/cgroup.controllers" dev="tmpfs" ino=278 res=1 errno=0 [ 883.374461][ T30] audit: type=1800 audit(1770505675.273:13): pid=30007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6504" name="cgroup.controllers" dev="tmpfs" ino=278 res=0 errno=0 [ 883.695527][T30020] tipc: New replicast peer: 0.0.0.0 [ 883.708262][T30020] tipc: Enabled bearer , priority 6 [ 883.900412][T30040] netlink: 'syz.0.6512': attribute type 3 has an invalid length. [ 883.910063][T17905] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 884.166574][T17905] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 884.178664][T30055] syzkaller0: entered promiscuous mode [ 884.184204][T30055] syzkaller0: entered allmulticast mode [ 884.224370][T30056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6516'. [ 884.826791][T15599] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 884.847158][T21234] tipc: Node number set to 1980750988 [ 884.923504][T30070] Bluetooth: MGMT ver 1.23 [ 885.329597][T30093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6532'. [ 885.868549][T27062] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 885.879965][T27062] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 886.112427][T30115] xt_hashlimit: max too large, truncated to 1048576 [ 886.124564][T30112] lo speed is unknown, defaulting to 1000 [ 886.137486][T30115] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 886.151282][T30118] tipc: Enabling of bearer rejected, failed to enable media [ 886.180787][T30118] netlink: 'syz.0.6540': attribute type 5 has an invalid length. [ 886.221290][T30115] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6540'. [ 886.299899][T30115] 1ªX¹¦À: renamed from 60ªX¹¦À [ 886.316244][T30115] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 886.423255][T30130] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6545'. [ 886.433841][T30130] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6545'. [ 886.445005][T30130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6545'. [ 886.470058][T30124] bond1: option lacp_rate: invalid value (192) [ 886.490983][T30124] bond1 (unregistering): Released all slaves [ 886.574295][T30133] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 886.586297][ T6103] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 886.673625][T30135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6547'. [ 886.761733][T30139] netlink: 'syz.4.6549': attribute type 2 has an invalid length. [ 886.873223][T30144] lo speed is unknown, defaulting to 1000 [ 887.094783][T30150] lo speed is unknown, defaulting to 1000 [ 887.224307][T30162] xt_hashlimit: max too large, truncated to 1048576 [ 887.288889][T30162] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 887.371481][T30162] netlink: 'syz.4.6555': attribute type 5 has an invalid length. [ 887.401640][T30168] tipc: Enabling of bearer rejected, failed to enable media [ 887.448448][T30162] 1ªX¹¦À: renamed from 60ªX¹¦À [ 887.453682][T30175] netlink: 'syz.3.6557': attribute type 1 has an invalid length. [ 887.477168][T30162] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 887.516818][T30176] bridge1: entered promiscuous mode [ 887.542498][T30176] bridge1: entered allmulticast mode [ 887.571267][T30176] team0: Port device bridge1 added [ 887.594252][T30174] bridge0: port 2(team0) entered blocking state [ 887.621814][T30174] bridge0: port 2(team0) entered disabled state [ 887.634092][T30174] team0: entered allmulticast mode [ 887.660689][T30174] team_slave_0: entered allmulticast mode [ 887.668088][T30174] team_slave_1: entered allmulticast mode [ 887.677771][T30174] team0: entered promiscuous mode [ 887.683135][T30174] team_slave_0: entered promiscuous mode [ 887.695434][T30174] team_slave_1: entered promiscuous mode [ 887.968308][T30195] __nla_validate_parse: 5 callbacks suppressed [ 887.968334][T30195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6563'. [ 887.997124][T30198] netlink: 4304 bytes leftover after parsing attributes in process `syz.2.6564'. [ 888.010768][T30195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 888.084021][T30195] netlink: 'syz.3.6563': attribute type 29 has an invalid length. [ 888.093566][T30195] netlink: 'syz.3.6563': attribute type 29 has an invalid length. [ 888.103692][T30195] netlink: 500 bytes leftover after parsing attributes in process `syz.3.6563'. [ 888.191216][T30203] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 888.301063][T30205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6566'. [ 888.451081][T30211] xt_hashlimit: max too large, truncated to 1048576 [ 888.468385][T30209] lo speed is unknown, defaulting to 1000 [ 888.498101][T30211] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 888.588035][T30211] netlink: 'syz.4.6569': attribute type 5 has an invalid length. [ 888.627191][T30211] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6569'. [ 888.671040][T30217] lo speed is unknown, defaulting to 1000 [ 888.690913][T30211] 0ªX¹¦À: renamed from 61ªX¹¦À [ 888.732721][T30211] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 888.804119][T30222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6571'. [ 889.167879][T30238] netlink: 'syz.2.6574': attribute type 1 has an invalid length. [ 889.278442][T30253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 889.285834][T30253] IPv6: NLM_F_CREATE should be set when creating new route [ 889.293158][T30253] IPv6: NLM_F_CREATE should be set when creating new route [ 889.350362][T30238] bond1: entered promiscuous mode [ 889.359779][T30238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 889.368940][T30253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 889.425107][T30244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 889.432557][T30244] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 889.443391][T30244] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 889.469818][T30244] bond1: (slave wireguard0): making interface the new active one [ 889.478090][T30244] wireguard0: entered promiscuous mode [ 889.489695][T30244] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 889.546194][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 889.609160][T30249] lo speed is unknown, defaulting to 1000 [ 889.750385][T30258] lo speed is unknown, defaulting to 1000 [ 889.845544][T30270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6583'. [ 889.958704][T30274] netlink: 'syz.3.6584': attribute type 1 has an invalid length. [ 890.110279][T30280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6584'. [ 890.203553][T30282] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 890.261980][T30274] bond1: entered promiscuous mode [ 890.268527][T30274] bond1: entered allmulticast mode [ 890.306617][T30279] bond1: (slave ip6gretap2): making interface the new active one [ 890.314512][T30279] ip6gretap2: entered promiscuous mode [ 890.320445][T30279] ip6gretap2: entered allmulticast mode [ 890.329491][T30279] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 890.349611][T30280] bond1: left promiscuous mode [ 890.405431][T30280] ip6gretap2: left promiscuous mode [ 890.437875][T30280] bond1: left allmulticast mode [ 890.443438][T30280] ip6gretap2: left allmulticast mode [ 890.450663][T30280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 890.543647][T30293] lo speed is unknown, defaulting to 1000 [ 890.730678][ T79] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 890.740132][ T79] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 890.752805][ T79] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 890.824039][ T79] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.090763][T30294] lo speed is unknown, defaulting to 1000 [ 891.292809][T30322] sctp: [Deprecated]: syz.4.6595 (pid 30322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 891.292809][T30322] Use struct sctp_sack_info instead [ 891.773797][T30331] syzkaller1: entered promiscuous mode [ 891.792594][T30331] syzkaller1: entered allmulticast mode [ 892.178238][T30335] lo speed is unknown, defaulting to 1000 [ 892.582342][T30328] lec:lec_atm_close: lec0: Shut down! [ 892.657101][T30357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6606'. [ 892.777405][T30357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 892.854001][T30364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 892.882583][T30364] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 892.896798][T30364] bond1: (slave sit1): Error -95 calling set_mac_address [ 893.019471][T30372] tipc: Enabled bearer , priority 0 [ 893.055409][T30367] syzkaller0: entered promiscuous mode [ 893.061694][T30367] syzkaller0: entered allmulticast mode [ 893.264182][T30380] lo speed is unknown, defaulting to 1000 [ 893.291100][T30367] tipc: Resetting bearer [ 893.309595][T30365] tipc: Resetting bearer [ 893.439400][T30365] tipc: Disabling bearer [ 893.492740][T30396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6615'. [ 893.551893][T30388] lo speed is unknown, defaulting to 1000 [ 893.938233][T30408] syzkaller1: entered promiscuous mode [ 893.959376][T30408] syzkaller1: entered allmulticast mode [ 894.270773][T30413] xt_hashlimit: max too large, truncated to 1048576 [ 894.277884][T30413] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 894.329514][T30413] tipc: Enabled bearer , priority 14 [ 894.337565][T30413] netlink: 'syz.1.6620': attribute type 5 has an invalid length. [ 894.347395][T30413] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6620'. [ 894.364610][T30415] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.6621'. [ 894.387573][T30413] 0ªX¹¦À: renamed from caif0 [ 894.412705][T30413] tipc: Disabling bearer [ 894.432849][T30413] 0ªX¹¦À: entered allmulticast mode [ 894.445612][T30417] netlink: 'syz.3.6622': attribute type 21 has an invalid length. [ 894.463128][T30413] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 894.504388][T30417] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6622'. [ 894.516885][T30424] netlink: 'syz.0.6624': attribute type 1 has an invalid length. [ 894.562207][T30417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6622'. [ 894.586634][T30417] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6622'. [ 894.656212][T30424] bond3: entered promiscuous mode [ 894.666955][T30424] bond3: entered allmulticast mode [ 894.682161][T30424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 894.757323][T30439] syzkaller0: entered promiscuous mode [ 894.776706][T30439] syzkaller0: entered allmulticast mode [ 894.830469][T30438] lo speed is unknown, defaulting to 1000 [ 895.107472][T30443] lo speed is unknown, defaulting to 1000 [ 895.660907][T30471] lo speed is unknown, defaulting to 1000 [ 895.698157][T30475] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 895.780316][T30463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6634'. [ 896.199207][T30495] FAULT_INJECTION: forcing a failure. [ 896.199207][T30495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 896.226482][T30495] CPU: 1 UID: 0 PID: 30495 Comm: syz.3.6641 Not tainted syzkaller #0 PREEMPT(full) [ 896.226511][T30495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 896.226526][T30495] Call Trace: [ 896.226535][T30495] [ 896.226545][T30495] dump_stack_lvl+0xe8/0x150 [ 896.226579][T30495] should_fail_ex+0x412/0x560 [ 896.226612][T30495] _copy_from_iter+0x1d3/0x1670 [ 896.226642][T30495] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 896.226673][T30495] ? __pfx_policy_nodemask+0x10/0x10 [ 896.226701][T30495] ? __pfx__copy_from_iter+0x10/0x10 [ 896.226736][T30495] ? set_page_refcounted+0xa0/0x1e0 [ 896.226759][T30495] ? page_copy_sane+0x4e/0x270 [ 896.226789][T30495] copy_page_from_iter+0xdd/0x170 [ 896.226833][T30495] tun_get_user+0x1d4b/0x3dd0 [ 896.226855][T30495] ? tun_get_user+0x6ff/0x3dd0 [ 896.226898][T30495] ? aa_file_perm+0x440/0x1630 [ 896.226926][T30495] ? __pfx_tun_get_user+0x10/0x10 [ 896.226953][T30495] ? __lock_acquire+0x6b5/0x2cf0 [ 896.226998][T30495] ? ref_tracker_alloc+0x363/0x4d0 [ 896.227028][T30495] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 896.227058][T30495] ? tun_get+0x1c/0x2f0 [ 896.227082][T30495] ? tun_get+0x1c/0x2f0 [ 896.227112][T30495] ? tun_get+0x1c/0x2f0 [ 896.227134][T30495] ? tun_get+0x1c/0x2f0 [ 896.227162][T30495] tun_chr_write_iter+0x113/0x200 [ 896.227190][T30495] vfs_write+0x61d/0xb90 [ 896.227231][T30495] ? __pfx_vfs_write+0x10/0x10 [ 896.227273][T30495] ? __fget_files+0x2a/0x420 [ 896.227307][T30495] ksys_write+0x150/0x270 [ 896.227341][T30495] ? __pfx_ksys_write+0x10/0x10 [ 896.227385][T30495] do_syscall_64+0xe2/0xf80 [ 896.227416][T30495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.227437][T30495] ? trace_irq_disable+0x37/0x100 [ 896.227457][T30495] ? clear_bhb_loop+0x60/0xb0 [ 896.227482][T30495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.227503][T30495] RIP: 0033:0x7fb022f5b78e [ 896.227523][T30495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 896.227542][T30495] RSP: 002b:00007fb023dcefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 896.227566][T30495] RAX: ffffffffffffffda RBX: 00007fb023dcf6c0 RCX: 00007fb022f5b78e [ 896.227582][T30495] RDX: 0000000000000060 RSI: 0000200000000140 RDI: 00000000000000c8 [ 896.227597][T30495] RBP: 00007fb023dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 896.227610][T30495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.227622][T30495] R13: 00007fb023216128 R14: 00007fb023216090 R15: 00007ffd26483348 [ 896.227657][T30495] [ 896.635085][T30498] xt_hashlimit: size too large, truncated to 1048576 [ 896.787167][T30513] lo speed is unknown, defaulting to 1000 [ 897.113521][T30522] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 897.146039][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 897.258100][T30517] lo speed is unknown, defaulting to 1000 [ 897.551342][T30530] lo speed is unknown, defaulting to 1000 [ 897.557374][T30539] netlink: 'syz.0.6651': attribute type 4 has an invalid length. [ 897.756371][T30549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6654'. [ 897.971569][T30557] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6656'. [ 898.025102][T30561] netlink: 'syz.0.6658': attribute type 32 has an invalid length. [ 898.033342][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5450 ms [ 898.033375][ C1] lec:lec_tx_timeout: lec0 [ 898.053123][T30563] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6657'. [ 898.063629][T30563] nbd: must specify at least one socket [ 898.080699][T30563] nbd: must specify at least one socket [ 898.165645][T30565] tipc: Enabling of bearer rejected, failed to enable media [ 898.403304][T30571] lo speed is unknown, defaulting to 1000 [ 898.643972][T30576] lo speed is unknown, defaulting to 1000 [ 898.683361][T30582] __nla_validate_parse: 1 callbacks suppressed [ 898.683380][T30582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6665'. [ 898.817925][T30567] netlink: 'syz.0.6661': attribute type 5 has an invalid length. [ 899.256327][T30612] lo speed is unknown, defaulting to 1000 [ 899.790640][T30637] lo speed is unknown, defaulting to 1000 [ 899.879610][T30642] xt_CT: No such helper "snmp_trap" [ 900.007201][T30653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6683'. [ 900.098030][T30646] lo speed is unknown, defaulting to 1000 [ 900.450398][T30678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6690'. [ 900.632776][T30683] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6692'. [ 900.850718][T30696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6695'. [ 900.922970][T30700] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6696'. [ 901.000843][T30696] lo speed is unknown, defaulting to 1000 [ 901.053803][T30701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 901.368509][T30712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6699'. [ 901.411762][T30712] vlan2: entered promiscuous mode [ 901.427482][T30712] gretap0: entered promiscuous mode [ 901.632358][T30715] lo speed is unknown, defaulting to 1000 [ 901.677319][T30718] lo speed is unknown, defaulting to 1000 [ 902.043531][T30734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 902.345965][T30750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6709'. [ 902.530358][T30748] lo speed is unknown, defaulting to 1000 [ 902.798919][T30737] netlink: 'syz.3.6704': attribute type 2 has an invalid length. [ 902.874789][T30737] hmac(sha224): entered promiscuous mode [ 902.920790][T30763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.300313][T30781] lo speed is unknown, defaulting to 1000 [ 903.383998][T30789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6721'. [ 903.447061][T30789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6721'. [ 903.632702][T30790] lo speed is unknown, defaulting to 1000 [ 904.493997][T30816] macsec1: entered promiscuous mode [ 904.501249][T30816] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 904.640049][T30800] netlink: 'syz.4.6724': attribute type 5 has an invalid length. [ 905.005373][T30841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6737'. [ 905.138792][T30849] xt_hashlimit: max too large, truncated to 1048576 [ 905.153600][T30849] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 905.183282][T30849] tipc: Enabling of bearer rejected, failed to enable media [ 905.219752][T30849] netlink: 'syz.1.6740': attribute type 5 has an invalid length. [ 905.271259][T30854] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6740'. [ 905.320525][T30854] 1ªX¹¦À: renamed from 60ªX¹¦À [ 905.340080][T30856] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6741'. [ 905.383544][T30854] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 905.407466][ T7508] lec:lec_start_xmit: lec0:No lecd attached [ 905.433772][T30856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.470461][T30856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.494224][T30856] bond0 (unregistering): Released all slaves [ 905.838900][T30880] IPv6: sit1: Disabled Multicast RS [ 906.209007][T30895] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.216860][T30895] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.238935][T30895] bridge0: entered allmulticast mode [ 906.254897][T30895] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 906.464761][T30906] 8021q: VLANs not supported on gre0 [ 906.608891][T30908] syzkaller1: entered promiscuous mode [ 906.623618][T30908] syzkaller1: entered allmulticast mode [ 906.692152][T30908] syzkaller1: left promiscuous mode [ 906.698154][T30908] syzkaller1: left allmulticast mode [ 906.851288][T30927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6757'. [ 906.873485][T30927] tipc: Enabled bearer , priority 0 [ 906.929406][T30932] pim6reg1: entered promiscuous mode [ 906.934783][T30932] pim6reg1: entered allmulticast mode [ 906.972864][T30927] batadv_slave_0: entered promiscuous mode [ 907.075352][T30930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6757'. [ 907.218051][T30926] batadv_slave_0: left promiscuous mode [ 907.224358][T30942] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6760'. [ 907.397794][T30952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6763'. [ 907.407817][T30952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6763'. [ 907.464737][T30962] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6766'. [ 907.482984][T30966] xt_hashlimit: size too large, truncated to 1048576 [ 907.657912][T30976] netlink: 'syz.1.6771': attribute type 12 has an invalid length. [ 907.666095][T30976] netlink: 'syz.1.6771': attribute type 29 has an invalid length. [ 907.673952][T30976] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6771'. [ 907.892021][T30981] lo speed is unknown, defaulting to 1000 [ 908.875120][T30982] netlink: 'syz.4.6773': attribute type 5 has an invalid length. [ 909.180542][T31053] rdma_op ffff88808ba521f0 conn xmit_rdma 0000000000000000 [ 909.197352][T31047] lo speed is unknown, defaulting to 1000 [ 909.210270][ T30] audit: type=1800 audit(1770505701.233:14): pid=31053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6791" name=CB dev="tmpfs" ino=623 res=0 errno=0 [ 909.228441][T31044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 909.356548][T31059] netlink: 'syz.0.6794': attribute type 2 has an invalid length. [ 909.375329][T31059] netlink: 'syz.0.6794': attribute type 1 has an invalid length. [ 909.408443][T31059] tipc: Disabling bearer [ 909.529939][T31057] syzkaller0: entered promiscuous mode [ 909.542882][T31057] syzkaller0: entered allmulticast mode [ 909.567082][T31066] tipc: Enabled bearer , priority 0 [ 909.689466][T31055] tipc: Resetting bearer [ 910.991309][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 910.999425][ C1] lec:lec_tx_timeout: lec0 [ 911.561576][T31055] tipc: Disabling bearer [ 911.577329][T31078] vlan0: entered promiscuous mode [ 911.582536][T31078] vlan0: entered allmulticast mode [ 911.588348][T31078] hsr_slave_1: entered allmulticast mode [ 911.665161][T17905] tipc: Node number set to 3636961219 [ 911.685518][T31068] lo speed is unknown, defaulting to 1000 [ 911.741550][T31095] __nla_validate_parse: 9 callbacks suppressed [ 911.741570][T31095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6802'. [ 911.865953][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 912.002526][T31102] ip6gretap2: entered promiscuous mode [ 912.012909][T31102] ip6gretap2: entered allmulticast mode [ 912.130487][T31111] netlink: 'syz.3.6807': attribute type 10 has an invalid length. [ 912.164313][T31111] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 913.303854][T31150] x_tables: duplicate underflow at hook 3 [ 913.910936][T31163] syzkaller0: entered promiscuous mode [ 913.918836][T31163] syzkaller0: entered allmulticast mode [ 914.141125][T31166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6824'. [ 914.151140][T31166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6824'. [ 914.171730][T31166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6824'. [ 914.181342][T31166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6824'. [ 915.860804][T31133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 916.116834][T31199] netlink: 'syz.4.6831': attribute type 2 has an invalid length. [ 916.125367][T31199] netlink: 'syz.4.6831': attribute type 2 has an invalid length. [ 916.171143][T31195] lo speed is unknown, defaulting to 1000 [ 916.211733][T31204] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6832'. [ 916.318125][T31210] netlink: 'syz.2.6833': attribute type 10 has an invalid length. [ 916.364226][T31210] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.389064][T31210] bond0: (slave team0): Enslaving as an active interface with an up link [ 916.403818][T31212] netlink: 'syz.2.6833': attribute type 1 has an invalid length. [ 916.555603][T31218] pimreg: entered allmulticast mode [ 916.770251][T31229] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6837'. [ 917.415101][T31255] lo speed is unknown, defaulting to 1000 [ 917.516472][T31258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6844'. [ 917.621176][T31259] IPv6: addrconf: prefix option has invalid lifetime [ 917.932296][T31274] netlink: 'syz.0.6850': attribute type 2 has an invalid length. [ 918.111844][T31291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6855'. [ 918.111885][T31283] netlink: 'syz.1.6854': attribute type 10 has an invalid length. [ 918.139617][T31291] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.6855'. [ 918.305636][T31300] vlan2: entered promiscuous mode [ 918.312793][T31300] geneve1: entered promiscuous mode [ 918.319465][T31300] vlan2: entered allmulticast mode [ 918.324869][T31300] geneve1: entered allmulticast mode [ 918.340320][T31300] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6857'. [ 918.705288][T31322] netlink: 'syz.2.6862': attribute type 1 has an invalid length. [ 918.718432][T31322] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6862'. [ 918.929853][T31326] netlink: 'syz.2.6864': attribute type 3 has an invalid length. [ 918.939276][T31326] netlink: 'syz.2.6864': attribute type 1 has an invalid length. [ 918.964086][T31326] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6864'. [ 918.977354][T31326] NCSI netlink: No device for ifindex 808464432 [ 919.043065][T31329] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6865'. [ 919.135097][T31334] lo speed is unknown, defaulting to 1000 [ 919.188884][T31335] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6867'. [ 919.262064][T31336] netlink: 'syz.2.6867': attribute type 10 has an invalid length. [ 919.326132][T31336] team0: Port device dummy0 added [ 919.912984][T31369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6876'. [ 919.949321][T31371] bond0: (slave team0): Releasing backup interface [ 919.994449][T31371] team0: Port device dummy0 removed [ 920.014830][T31371] bridge_slave_0: left allmulticast mode [ 920.021749][T31371] bridge_slave_0: left promiscuous mode [ 920.029319][T31371] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.048631][T31371] bridge_slave_1: left allmulticast mode [ 920.063100][T31371] bridge_slave_1: left promiscuous mode [ 920.070778][T31371] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.097542][T31371] bond0: (slave bond_slave_0): Releasing backup interface [ 920.126952][T31371] bond0: (slave bond_slave_1): Releasing backup interface [ 920.161835][T31380] xt_hashlimit: size too large, truncated to 1048576 [ 920.173307][T31371] team0: Port device team_slave_0 removed [ 920.193298][T31371] team0: Port device team_slave_1 removed [ 920.213180][T31371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.235552][T31371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.269736][T31371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.301690][T31371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.328198][T31371] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 920.418409][T21234] lo speed is unknown, defaulting to 1000 [ 920.631486][T31395] vlan0: entered promiscuous mode [ 920.637700][T31395] bridge0: entered promiscuous mode [ 920.685466][T31397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.718821][T27062] tipc: Subscription rejected, illegal request [ 921.145549][T31425] netlink: 'syz.0.6891': attribute type 32 has an invalid length. [ 921.251042][T31431] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.258808][T31431] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.267720][T31431] bridge0: entered allmulticast mode [ 921.287156][T31431] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 921.802202][T31463] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 922.000300][T31472] __nla_validate_parse: 1 callbacks suppressed [ 922.000324][T31472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6902'. [ 922.023529][T31477] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6905'. [ 922.056244][T31472] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 922.091177][T31478] netlink: 'syz.1.6904': attribute type 2 has an invalid length. [ 922.141617][T31478] : entered promiscuous mode [ 922.150899][T31484] netlink: 'syz.1.6904': attribute type 2 has an invalid length. [ 922.182758][T31485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6908'. [ 922.227037][T31485] netlink: 'syz.3.6908': attribute type 1 has an invalid length. [ 922.261334][T31485] bond3: entered promiscuous mode [ 922.268046][T31485] 8021q: adding VLAN 0 to HW filter on device bond3 [ 922.325162][T31485] bond3: (slave veth3): making interface the new active one [ 922.337303][T31485] veth3: entered promiscuous mode [ 922.343843][T31491] nbd: must specify at least one socket [ 922.349508][T31485] bond3: (slave veth3): Enslaving as an active interface with an up link [ 922.733316][T31506] netlink: 'syz.2.6913': attribute type 1 has an invalid length. [ 922.745199][T31506] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 923.354511][T31530] xt_hashlimit: max too large, truncated to 1048576 [ 923.373197][T31530] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 923.401143][T31533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6919'. [ 923.422454][T31533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6919'. [ 923.433282][T31530] tipc: Enabling of bearer rejected, failed to enable media [ 923.445109][T31530] netlink: 'syz.1.6917': attribute type 5 has an invalid length. [ 923.458308][T31530] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6917'. [ 923.461993][T31533] wg1: entered promiscuous mode [ 923.482381][T31533] wg1: entered allmulticast mode [ 923.509634][T31530] 0ªX¹¦À: renamed from 61ªX¹¦À [ 923.515024][T31538] openvswitch: netlink: IP tunnel dst address not specified [ 923.530610][T31530] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 923.639376][T31540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6921'. [ 923.677691][T31540] bond2: entered allmulticast mode [ 923.937902][T31547] tipc: Started in network mode [ 923.949569][T31547] tipc: Node identity efc6, cluster identity 4711 [ 923.966377][T31547] tipc: Node number set to 61382 [ 924.340424][T31555] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6926'. [ 924.561923][T31562] syzkaller1: entered promiscuous mode [ 924.568586][T31562] syzkaller1: entered allmulticast mode [ 924.648919][T31566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6929'. [ 924.734668][T31572] xt_hashlimit: size too large, truncated to 1048576 [ 925.074933][T31587] batadv_slave_1: entered promiscuous mode [ 925.121658][T31587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6936'. [ 925.134129][T31587] pim6reg1: entered promiscuous mode [ 925.141117][T31587] pim6reg1: entered allmulticast mode [ 925.325025][T31601] tipc: Enabling of bearer rejected, failed to enable media [ 925.338241][T31601] netlink: 'syz.3.6941': attribute type 5 has an invalid length. [ 925.348076][T31601] 1ªX¹¦À: renamed from 60ªX¹¦À [ 925.357300][T31601] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 925.546589][T31608] Cannot find del_set index 4 as target [ 925.740866][T31621] gretap0: entered promiscuous mode [ 925.838258][T31583] batadv_slave_1: left promiscuous mode [ 925.933890][T31618] lo speed is unknown, defaulting to 1000 [ 926.040638][T31627] : entered promiscuous mode [ 926.146432][T31638] tipc: Enabling of bearer rejected, failed to enable media [ 926.177503][T31638] netlink: 'syz.0.6954': attribute type 5 has an invalid length. [ 926.212270][T31638] 0ªX¹¦À: renamed from 61ªX¹¦À [ 926.230697][T31638] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 926.459133][T31651] xt_hashlimit: size too large, truncated to 1048576 [ 926.493159][T31652] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 927.011474][T31681] netlink: 'syz.0.6964': attribute type 1 has an invalid length. [ 927.287548][T31692] netlink: 'syz.3.6967': attribute type 5 has an invalid length. [ 927.347255][T31693] __nla_validate_parse: 42 callbacks suppressed [ 927.347276][T31693] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6967'. [ 927.557362][T31681] 8021q: adding VLAN 0 to HW filter on device bond4 [ 927.584614][T31686] bond4: (slave batadv1): Opening slave failed [ 927.665243][T31690] tipc: Enabling of bearer rejected, failed to enable media [ 927.684553][T31698] netlink: 'syz.2.6968': attribute type 10 has an invalid length. [ 927.701628][T31698] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6968'. [ 928.220738][T31707] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6971'. [ 928.428977][T31693] 0ªX¹¦À: renamed from 61ªX¹¦À [ 928.479704][T31693] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 928.664767][T31722] netlink: 'syz.4.6974': attribute type 10 has an invalid length. [ 928.684980][T31719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6975'. [ 928.800532][T31723] lo speed is unknown, defaulting to 1000 [ 928.936490][T31732] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6977'. [ 928.978625][T31732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6977'. [ 929.874898][T31739] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.109078][T31752] openvswitch: netlink: Message has 2 unknown bytes. [ 930.116253][T31752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.143284][T31739] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.152429][T31752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6982'. [ 930.203653][T31752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6982'. [ 930.216388][T31752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6982'. [ 930.280664][T31739] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.305465][T31757] xt_hashlimit: max too large, truncated to 1048576 [ 930.309495][T31752] sit1: entered promiscuous mode [ 930.321837][T31755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6984'. [ 930.333461][T31757] tipc: Enabling of bearer rejected, failed to enable media [ 930.346569][T31757] netlink: 'syz.4.6983': attribute type 5 has an invalid length. [ 930.356082][T31757] 1ªX¹¦À: renamed from 60ªX¹¦À [ 930.386739][T31757] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 930.510310][T31739] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.658938][T31769] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 930.688075][T31766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 930.774782][T15600] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.803891][T15600] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.883630][T27063] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.915629][T27064] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.091943][T31784] tipc: Enabled bearer , priority 0 [ 931.102352][T31784] syzkaller0: entered promiscuous mode [ 931.108863][T31784] syzkaller0: entered allmulticast mode [ 931.178519][T31789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.227450][T31795] lo speed is unknown, defaulting to 1000 [ 931.249246][T31797] netlink: 'syz.1.6998': attribute type 32 has an invalid length. [ 931.335987][T31797] bond3: Setting coupled_control to off (0) [ 931.466484][T31797] geneve2: entered promiscuous mode [ 931.475447][T15600] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 931.486883][T15600] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 931.496647][T15600] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 931.505644][T15600] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 931.929463][T31783] tipc: Resetting bearer [ 931.986744][T31783] tipc: Disabling bearer [ 932.047332][T31826] xt_hashlimit: size too large, truncated to 1048576 [ 932.521446][T31842] lo speed is unknown, defaulting to 1000 [ 932.637826][T31854] IPv6: NLM_F_REPLACE set, but no existing node found! [ 933.141826][T31878] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 933.418229][T31887] netlink: 'syz.0.7022': attribute type 1 has an invalid length. [ 933.504508][T31894] lo speed is unknown, defaulting to 1000 [ 933.544786][T31893] __nla_validate_parse: 9 callbacks suppressed [ 933.544808][T31893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7024'. [ 933.691560][T31900] dummy0: entered promiscuous mode [ 933.698789][T31900] vlan2: entered promiscuous mode [ 933.762957][T31903] pim6reg99999999: entered allmulticast mode [ 934.042889][T31909] syzkaller0: entered promiscuous mode [ 934.048855][T31909] syzkaller0: entered allmulticast mode [ 934.158092][T31916] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7029'. [ 934.372554][T31930] xt_hashlimit: max too large, truncated to 1048576 [ 934.449429][T31933] netlink: 'syz.3.7032': attribute type 5 has an invalid length. [ 934.528346][T31938] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7032'. [ 935.268665][T31949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7036'. [ 936.291035][T31930] tipc: Enabling of bearer rejected, failed to enable media [ 936.313714][T31938] 1ªX¹¦À: renamed from 60ªX¹¦À [ 936.330924][T31938] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 936.376857][T31945] netem: change failed [ 936.478718][T31959] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7039'. [ 936.675646][T31973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7043'. [ 936.685196][T31973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7043'. [ 936.838192][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 936.854439][T31983] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 936.912510][T31986] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 936.931875][T31986] netlink: 'syz.1.7048': attribute type 5 has an invalid length. [ 936.960558][T31986] netlink: 'syz.1.7048': attribute type 5 has an invalid length. [ 937.073448][T31987] bond4: entered allmulticast mode [ 937.099770][T31988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7047'. [ 937.542789][T32016] tipc: Enabling of bearer rejected, failed to enable media [ 937.584510][T32016] netlink: 'syz.1.7054': attribute type 5 has an invalid length. [ 937.597326][T32016] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7054'. [ 937.627174][T32016] 1ªX¹¦À: renamed from 60ªX¹¦À [ 937.811386][T32016] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 937.866981][T32025] netlink: 'syz.2.7056': attribute type 6 has an invalid length. [ 937.883800][T32025] netlink: 'syz.2.7056': attribute type 7 has an invalid length. [ 937.928451][T32025] netlink: 'syz.2.7056': attribute type 8 has an invalid length. [ 938.012089][T32031] netlink: 496 bytes leftover after parsing attributes in process `syz.4.7059'. [ 938.137838][T32035] syzkaller1: entered promiscuous mode [ 938.143390][T32035] syzkaller1: entered allmulticast mode [ 938.310488][T32048] netlink: 'syz.3.7065': attribute type 32 has an invalid length. [ 938.383695][ T5484] veth0_vlan: left promiscuous mode [ 938.467403][ T5484] veth0_vlan: entered promiscuous mode [ 938.521612][T32055] syzkaller1: entered promiscuous mode [ 938.538849][T32055] syzkaller1: entered allmulticast mode [ 938.955049][T32077] __nla_validate_parse: 2 callbacks suppressed [ 938.955071][T32077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7071'. [ 938.979102][T32076] tipc: Enabling of bearer rejected, failed to enable media [ 939.022195][T32076] netlink: 'syz.0.7070': attribute type 5 has an invalid length. [ 939.058115][T32076] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7070'. [ 939.097105][T32076] 1ªX¹¦À: renamed from 60ªX¹¦À [ 939.134667][T32076] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 939.179901][T32083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7073'. [ 939.305436][T32087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7075'. [ 939.338631][T32083] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7073'. [ 939.359005][T32089] bridge3: port 1(ip6gretap1) entered blocking state [ 939.397284][T32089] bridge3: port 1(ip6gretap1) entered disabled state [ 939.404509][T32089] ip6gretap1: entered allmulticast mode [ 939.414467][T32089] ip6gretap1: entered promiscuous mode [ 939.442452][T32094] netlink: 'syz.0.7076': attribute type 15 has an invalid length. [ 939.517683][T32092] netlink: 'syz.3.7075': attribute type 2 has an invalid length. [ 939.525481][T32092] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7075'. [ 939.664872][T32104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7077'. [ 939.698642][T32104] bridge_slave_1: left allmulticast mode [ 939.704419][T32104] bridge_slave_1: left promiscuous mode [ 939.736424][T32104] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.777124][T32112] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7077'. [ 939.827566][T32104] bridge_slave_0: left allmulticast mode [ 939.833555][T32104] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.026024][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 940.193022][T32128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7081'. [ 940.210103][T32132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7083'. [ 940.456113][T32140] tipc: Enabled bearer , priority 14 [ 940.474422][T32140] 0ªX¹¦À: renamed from caif0 [ 940.523633][T32140] tipc: Disabling bearer [ 940.567782][T32140] 0ªX¹¦À: entered allmulticast mode [ 940.582544][T32140] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 941.354042][T32186] bridge1: entered promiscuous mode [ 941.412815][T32188] 8021q: adding VLAN 0 to HW filter on device bond5 [ 941.439659][T32186] batadv0: entered promiscuous mode [ 941.445006][T32186] batadv0: entered allmulticast mode [ 941.460170][T32186] bridge0: port 3(batadv0) entered blocking state [ 941.490977][T32186] bridge0: port 3(batadv0) entered disabled state [ 941.619484][T32195] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 941.830839][ T5835] Bluetooth: hci0: link tx timeout [ 941.837778][T32202] tipc: Enabling of bearer rejected, failed to enable media [ 941.841670][ T5835] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 941.857207][T15600] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 941.867565][T15600] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 941.882064][T32202] 0ªX¹¦À: renamed from 61ªX¹¦À [ 941.897218][T32202] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 941.957994][T32204] tipc: Enabled bearer , priority 0 [ 942.009704][T32204] syzkaller0: entered promiscuous mode [ 942.022377][T32204] syzkaller0: entered allmulticast mode [ 942.025938][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 942.036172][ C1] lec:lec_tx_timeout: lec0 [ 942.060260][T32204] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 942.137252][T32204] tipc: Resetting bearer [ 942.161174][T32212] tipc: Enabled bearer , priority 0 [ 942.174597][T32203] tipc: Resetting bearer [ 942.247984][T32203] tipc: Disabling bearer [ 942.284177][T32211] tipc: Disabling bearer [ 942.558374][T32231] syzkaller0: entered promiscuous mode [ 942.563885][T32231] syzkaller0: entered allmulticast mode [ 942.842297][T32250] tipc: Enabling of bearer rejected, failed to enable media [ 942.863826][T32255] openvswitch: netlink: Flow key attr not present in new flow. [ 942.887154][T32250] validate_nla: 7 callbacks suppressed [ 942.887174][T32250] netlink: 'syz.0.7114': attribute type 5 has an invalid length. [ 942.917050][T32250] 0ªX¹¦À: renamed from 61ªX¹¦À [ 942.940458][T32250] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 943.049595][T32261] netlink: 'syz.3.7119': attribute type 10 has an invalid length. [ 943.066367][ T30] audit: type=1804 audit(1770505735.083:15): pid=32257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7118" name="memory.events" dev="tmpfs" ino=959 res=1 errno=0 [ 943.108750][ T30] audit: type=1800 audit(1770505735.083:16): pid=32257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7118" name="memory.events" dev="tmpfs" ino=959 res=0 errno=0 [ 943.170936][T32261] team0: Port device geneve0 added [ 943.597998][T32291] tipc: Enabling of bearer rejected, failed to enable media [ 943.608590][T32291] netlink: 'syz.3.7131': attribute type 5 has an invalid length. [ 943.620434][T32291] 0ªX¹¦À: renamed from 61ªX¹¦À [ 943.659838][T32291] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 943.684119][T32288] pimreg: entered allmulticast mode [ 943.797442][T32294] syzkaller0: entered promiscuous mode [ 943.803167][T32294] syzkaller0: entered allmulticast mode [ 943.819947][T32294] xt_l2tp: missing protocol rule (udp|l2tpip) [ 943.949381][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 946.394520][T32319] netlink: 'syz.1.7138': attribute type 11 has an invalid length. [ 946.687819][T32329] __nla_validate_parse: 11 callbacks suppressed [ 946.687842][T32329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7141'. [ 946.710992][T32332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7142'. [ 946.758118][T32329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7141'. [ 947.649653][T32368] pim6reg1: entered promiscuous mode [ 947.655027][T32368] pim6reg1: entered allmulticast mode [ 947.666221][T32367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7153'. [ 947.675460][T32367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7153'. [ 948.099573][T32364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7152'. [ 948.634261][T32402] lo speed is unknown, defaulting to 1000 [ 948.877229][T32419] netlink: 'syz.3.7165': attribute type 5 has an invalid length. [ 949.027776][T32427] team_slave_0: entered promiscuous mode [ 949.033959][T32427] team_slave_1: entered promiscuous mode [ 949.039826][T32427] dummy0: entered promiscuous mode [ 949.045325][T32427] geneve0: entered promiscuous mode [ 949.082668][T32427] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 949.149974][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 949.157448][T32428] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 949.279965][T32433] netlink: 'syz.0.7170': attribute type 12 has an invalid length. [ 949.289495][T32433] netlink: 'syz.0.7170': attribute type 29 has an invalid length. [ 949.299168][T32433] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7170'. [ 949.505042][T32438] netlink: 'syz.4.7171': attribute type 6 has an invalid length. [ 949.629334][T32447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7173'. [ 949.664828][T32452] netlink: 'syz.4.7176': attribute type 1 has an invalid length. [ 949.674390][T32452] netlink: 'syz.4.7176': attribute type 2 has an invalid length. [ 950.011555][T32470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 950.047082][T32472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7181'. [ 950.112288][T32472] bridge0: port 3(batadv0) entered disabled state [ 950.177383][T32472] bridge_slave_1: left allmulticast mode [ 950.183104][T32472] bridge_slave_1: left promiscuous mode [ 950.192082][T32472] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.207741][T32472] bridge_slave_0: left allmulticast mode [ 950.213559][T32472] bridge_slave_0: left promiscuous mode [ 950.221104][T32472] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.222056][T32488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7184'. [ 950.302577][T32481] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 950.310215][ T5828] block nbd5: Receive control failed (result -32) [ 950.314316][T32481] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 950.330308][T32481] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 950.460319][T32490] lo speed is unknown, defaulting to 1000 [ 950.979097][T32529] netlink: 'syz.3.7192': attribute type 1 has an invalid length. [ 951.744080][T32563] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 951.762703][T32563] batman_adv: batadv0: Adding interface: gretap2 [ 951.772141][T32563] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.871838][T32563] batman_adv: batadv0: Interface activated: gretap2 [ 951.889257][T32568] __nla_validate_parse: 6 callbacks suppressed [ 951.889278][T32568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7200'. [ 952.075019][T32576] netlink: 47 bytes leftover after parsing attributes in process `syz.2.7205'. [ 952.114447][T32571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7203'. [ 952.786380][T32602] netlink: 488 bytes leftover after parsing attributes in process `syz.2.7209'. [ 953.116732][ T5828] block nbd6: Receive control failed (result -32) [ 953.238330][T32620] netlink: 'syz.2.7213': attribute type 1 has an invalid length. [ 953.298958][T32623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7213'. [ 953.362398][T32620] 8021q: adding VLAN 0 to HW filter on device bond2 [ 953.379434][T32623] macvlan2: entered promiscuous mode [ 953.384992][T32623] macvlan2: entered allmulticast mode [ 953.438775][T32628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7215'. [ 953.952452][T32647] dvmrp3: entered allmulticast mode [ 954.329556][T32664] dvmrp0: entered allmulticast mode [ 954.422668][T32671] tipc: Enabling of bearer rejected, failed to enable media [ 954.463440][T32671] netlink: 'syz.3.7227': attribute type 5 has an invalid length. [ 954.501183][T32671] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7227'. [ 954.534976][T32677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7230'. [ 954.548787][T32677] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7230'. [ 954.558959][T32677] netlink: 13 bytes leftover after parsing attributes in process `syz.4.7230'. [ 954.579534][T32671] 1ªX¹¦À: renamed from 60ªX¹¦À [ 954.614397][T32671] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 954.639249][T32673] lo speed is unknown, defaulting to 1000 [ 954.780400][T32683] lo speed is unknown, defaulting to 1000 [ 955.147974][T32709] Cannot find del_set index 3 as target [ 956.293439][T32766] lo speed is unknown, defaulting to 1000 [ 956.688226][ T314] lo speed is unknown, defaulting to 1000 [ 956.864148][ T322] lo speed is unknown, defaulting to 1000 [ 956.902520][ T330] __nla_validate_parse: 5 callbacks suppressed [ 956.902542][ T330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7251'. [ 957.061402][ T332] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 957.089234][ T340] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7253'. [ 957.190138][ T344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7253'. [ 957.309792][ T346] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7255'. [ 957.421263][ T352] netlink: 'syz.1.7257': attribute type 83 has an invalid length. [ 957.662148][ T366] syzkaller0: entered promiscuous mode [ 957.675267][ T366] syzkaller0: entered allmulticast mode [ 957.788192][ T365] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7262'. [ 957.797799][ T365] netlink: 170 bytes leftover after parsing attributes in process `syz.1.7262'. [ 958.540170][ T399] lo speed is unknown, defaulting to 1000 [ 958.710788][ T387] lo speed is unknown, defaulting to 1000 [ 959.114237][ T423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7273'. [ 959.388751][ T5835] Bluetooth: hci4: command 0x0401 tx timeout [ 959.598183][ T436] lo speed is unknown, defaulting to 1000 [ 960.132370][ T428] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7277'. [ 960.364481][ T463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 960.701625][ T475] openvswitch: netlink: IP tunnel dst address not specified [ 960.724839][ T477] netlink: 'syz.3.7291': attribute type 21 has an invalid length. [ 960.733884][ T477] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7291'. [ 960.771804][ T475] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7290'. [ 960.882527][ T481] syzkaller0: entered promiscuous mode [ 960.890542][ T481] syzkaller0: entered allmulticast mode [ 960.899257][ T480] tipc: Enabled bearer , priority 0 [ 960.928094][ T480] tipc: Resetting bearer [ 960.978636][ T480] tipc: Disabling bearer [ 961.142799][ T486] netlink: 'syz.2.7293': attribute type 1 has an invalid length. [ 961.177243][ T486] veth3: entered promiscuous mode [ 961.260001][ T488] lo speed is unknown, defaulting to 1000 [ 961.924784][ T511] __nla_validate_parse: 1 callbacks suppressed [ 961.924810][ T511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7300'. [ 962.360833][ T525] @0Ù†m!]¨¨†D: renamed from dummy0 (while UP) [ 962.530158][ T534] lo speed is unknown, defaulting to 1000 [ 963.204211][ T548] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 963.353847][ T556] syzkaller0: entered promiscuous mode [ 963.375566][ T556] syzkaller0: entered allmulticast mode [ 963.463451][ T560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7315'. [ 963.591981][ T562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7315'. [ 963.710574][ T567] lo speed is unknown, defaulting to 1000 [ 963.773172][ T571] xfrm0: entered promiscuous mode [ 963.800082][ T571] xfrm0: entered allmulticast mode [ 964.432246][ T588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.453087][ T588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.508090][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 964.542270][ T604] netlink: 'syz.1.7327': attribute type 10 has an invalid length. [ 964.556880][ T604] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7327'. [ 964.618513][ T588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.630422][ T588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.652931][ T604] veth0_vlan: left promiscuous mode [ 964.697879][ T606] netlink: 212048 bytes leftover after parsing attributes in process `syz.1.7327'. [ 964.794838][ T588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.816536][ T588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.915350][ T612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7329'. [ 964.979711][ T588] bond0: (slave netdevsim0): Releasing backup interface [ 965.001449][ T588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.013310][ T588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.046837][ T612] hsr0: entered promiscuous mode [ 965.052490][ T612] macvlan2: entered allmulticast mode [ 965.058672][ T612] hsr0: entered allmulticast mode [ 965.063884][ T612] hsr_slave_0: entered allmulticast mode [ 965.078403][ T612] hsr_slave_1: entered allmulticast mode [ 965.265439][ T79] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.275565][ T79] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.323701][T27062] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.344160][T27062] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.418232][T27063] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.441134][T27063] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.451715][ T626] lo speed is unknown, defaulting to 1000 [ 965.458313][T27063] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.474516][T27063] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.764384][ T645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7334'. [ 966.063821][ T651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7337'. [ 966.203221][ T655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7338'. [ 966.425200][ T651] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.433047][ T651] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.447118][ T657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7338'. [ 966.456867][ T657] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 966.533634][ T655] 8021q: adding VLAN 0 to HW filter on device bond5 [ 966.781983][ T668] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 966.929869][ T673] __nla_validate_parse: 1 callbacks suppressed [ 966.929890][ T673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7344'. [ 967.054947][ T674] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.062246][ T674] bridge0: port 2(bridge_slave_1) entered listening state [ 967.069770][ T674] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.077021][ T674] bridge0: port 1(bridge_slave_0) entered listening state [ 967.114166][ T684] bond0: (slave rose0): Error: Device can not be enslaved while up [ 967.167765][ T682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7346'. [ 967.206471][ T682] nbd: illegal input index 38656 [ 967.212949][ T682] IPVS: length: 184 != 8744 [ 967.438954][ T706] delete_channel: no stack [ 967.457696][ T710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7354'. [ 967.477557][ T711] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7354'. [ 967.491803][ T711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7354'. [ 967.502255][ T710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7354'. [ 967.557485][ T715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 967.566647][ T714] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.566713][ T714] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.663679][ T714] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.709841][ T714] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.768447][ T714] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.780469][ T714] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.873452][ T714] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.900230][ T714] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.519395][ T752] sit0: left promiscuous mode [ 968.701060][ T752] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.708486][ T752] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.758998][ T7508] lec:lec_start_xmit: lec0:No lecd attached [ 968.784325][ T752] 1ªX¹¦À: left allmulticast mode [ 969.163594][ T784] SET target dimension over the limit! [ 969.308280][ T752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.354091][ T752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.383882][ T752] xfrm0: left promiscuous mode [ 969.396744][ T752] xfrm0: left allmulticast mode [ 969.866229][ T752] ip6gretap2: left promiscuous mode [ 969.871531][ T752] ip6gretap2: left allmulticast mode [ 969.898358][ T752] bond2: left allmulticast mode [ 969.940006][ T752] geneve2: left promiscuous mode [ 969.981352][ T752] hsr0: left allmulticast mode [ 969.987122][ T752] hsr_slave_0: left allmulticast mode [ 969.992701][ T752] hsr_slave_1: left allmulticast mode [ 970.012909][ T752] macvlan2: left allmulticast mode [ 970.046321][T27063] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.088096][T27063] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 970.111236][T27063] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.137072][T27063] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 970.169679][T27063] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.200262][T27063] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 970.234725][T27063] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.245636][T27063] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 970.399462][ T800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7375'. [ 970.419399][ T801] IPVS: length: 25 != 8 [ 970.427576][ T801] IPVS: length: 25 != 8 [ 970.431815][ T801] IPVS: length: 25 != 8 [ 970.458276][ T801] IPVS: length: 25 != 8 [ 970.462592][ T801] IPVS: length: 25 != 8 [ 970.467800][ T801] IPVS: length: 25 != 8 [ 970.472161][ T801] IPVS: length: 25 != 8 [ 970.529576][ T806] netlink: 'syz.0.7377': attribute type 1 has an invalid length. [ 970.557563][ T804] netlink: 'syz.0.7377': attribute type 1 has an invalid length. [ 970.674752][ T800] netlink: 'syz.1.7375': attribute type 58 has an invalid length. [ 970.716126][ T800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7375'. [ 970.963448][T27063] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.996606][T27063] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.081460][T27063] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.093663][T27063] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.154865][T27063] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.167453][T27063] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.246874][ T825] syzkaller1: entered promiscuous mode [ 971.252537][ T825] syzkaller1: entered allmulticast mode [ 971.261796][T27062] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.271005][T27062] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.293528][ T828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7383'. [ 971.478977][ T841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7384'. [ 971.730368][ T853] lo speed is unknown, defaulting to 1000 [ 971.960348][ T863] __nla_validate_parse: 5 callbacks suppressed [ 971.960373][ T863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7392'. [ 972.004216][ T864] netlink: 'syz.1.7391': attribute type 9 has an invalid length. [ 972.896250][ T888] netlink: 'syz.1.7396': attribute type 1 has an invalid length. [ 972.928222][ T888] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7396'. [ 973.004274][ T899] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7400'. [ 973.184085][ T904] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7402'. [ 973.252415][ T910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7403'. [ 973.508768][ T939] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 973.519408][ T939] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 973.536230][ T939] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 973.623333][ T955] netlink: 19 bytes leftover after parsing attributes in process `syz.1.7409'. [ 974.026166][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 974.034360][ C1] lec:lec_tx_timeout: lec0 [ 974.187787][ T974] netlink: 'syz.0.7415': attribute type 1 has an invalid length. [ 974.268560][ T977] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7416'. [ 974.294541][ T979] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.7414'. [ 974.609620][ T991] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7419'. [ 974.633267][ T991] netem: unknown loss type 13 [ 974.677030][ T991] netem: change failed [ 974.694370][ T992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7419'. [ 974.741929][ T995] netlink: 'syz.2.7421': attribute type 11 has an invalid length. [ 975.041274][ T1012] Bluetooth: MGMT ver 1.23 [ 975.203203][ T1017] lo speed is unknown, defaulting to 1000 [ 975.472044][ T1030] macsec0: entered allmulticast mode [ 975.478043][ T1030] veth1_macvtap: entered allmulticast mode [ 976.195407][ T1079] netlink: 'syz.4.7439': attribute type 1 has an invalid length. [ 976.242582][ T1083] netlink: 'syz.0.7442': attribute type 61 has an invalid length. [ 976.280783][ T1079] 8021q: adding VLAN 0 to HW filter on device bond2 [ 976.509694][ T1090] lo speed is unknown, defaulting to 1000 [ 976.524910][ T1102] nbd: illegal input index -1113835520 [ 976.811061][ T1103] lo speed is unknown, defaulting to 1000 [ 977.190305][ T1139] __nla_validate_parse: 8 callbacks suppressed [ 977.190325][ T1139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7454'. [ 977.224765][ T1123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 977.378229][ T1153] netlink: 'syz.2.7458': attribute type 4 has an invalid length. [ 977.552351][ T1166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7461'. [ 977.712435][ T1178] xt_bpf: check failed: parse error [ 977.975047][ T1189] lo speed is unknown, defaulting to 1000 [ 978.369565][ T30] audit: type=1804 audit(1770505770.393:17): pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7471" name="/newroot/252/cgroup.controllers" dev="tmpfs" ino=1305 res=1 errno=0 [ 978.435145][ T1206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7472'. [ 978.439682][ T30] audit: type=1800 audit(1770505770.413:18): pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7471" name="cgroup.controllers" dev="tmpfs" ino=1305 res=0 errno=0 [ 978.663719][ T1215] x_tables: duplicate underflow at hook 3 [ 978.795563][ T1221] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7479'. [ 978.847974][ T1221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7479'. [ 979.045198][ T1232] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.113752][ T1235] lo speed is unknown, defaulting to 1000 [ 979.143050][ T1232] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.204681][ T1241] lo speed is unknown, defaulting to 1000 [ 979.263907][ T1232] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.331628][ T1232] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.390469][ T1243] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 979.420778][ T1243] gretap0: left promiscuous mode [ 979.475416][ T1243] 0ªX¹¦À: left allmulticast mode [ 979.486481][ T1243] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 979.552761][ T1247] syzkaller1: entered promiscuous mode [ 979.559145][ T1247] syzkaller1: entered allmulticast mode [ 979.668536][ T1250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 979.690498][ T1250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7484'. [ 979.735310][ T1252] netlink: 'syz.4.7485': attribute type 1 has an invalid length. [ 979.805028][T15603] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.865841][ T5835] Bluetooth: hci2: command 0x040f tx timeout [ 979.922386][ T1259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7487'. [ 979.946755][T15603] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.049120][T15603] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.083629][T15603] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.115267][ T1265] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7488'. [ 980.440585][ T1284] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 980.446819][ T1284] syzkaller1: linktype set to 778 [ 980.489473][ T1284] 8021q: adding VLAN 0 to HW filter on device bond4 [ 980.544268][ T1284] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 980.560065][ T1289] netlink: 'syz.3.7493': attribute type 1 has an invalid length. [ 980.569829][ T1289] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7493'. [ 980.593190][ T1293] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 981.364195][ T1336] tipc: Enabling of bearer rejected, failed to enable media [ 981.374907][ T1336] netlink: 'syz.2.7504': attribute type 5 has an invalid length. [ 981.384676][ T1336] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7504'. [ 981.395088][ T1336] 1ªX¹¦À: renamed from 60ªX¹¦À [ 981.404842][ T1336] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 981.919990][ T1361] gretap1: entered promiscuous mode [ 982.184661][ T1377] syz.1.7516: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 982.201693][ T1377] CPU: 1 UID: 0 PID: 1377 Comm: syz.1.7516 Not tainted syzkaller #0 PREEMPT(full) [ 982.201720][ T1377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 982.201732][ T1377] Call Trace: [ 982.201739][ T1377] [ 982.201748][ T1377] dump_stack_lvl+0xe8/0x150 [ 982.201778][ T1377] warn_alloc+0x249/0x340 [ 982.201798][ T1377] ? stack_trace_save+0xa9/0x100 [ 982.201824][ T1377] ? __pfx_warn_alloc+0x10/0x10 [ 982.201847][ T1377] ? kasan_save_track+0x4f/0x80 [ 982.201863][ T1377] ? kasan_save_track+0x3e/0x80 [ 982.201878][ T1377] ? __kasan_kmalloc+0x93/0xb0 [ 982.201895][ T1377] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 982.201911][ T1377] ? xskq_create+0x56/0x170 [ 982.201931][ T1377] ? xsk_setsockopt+0x54c/0x990 [ 982.201948][ T1377] ? do_sock_setsockopt+0x17c/0x1b0 [ 982.201971][ T1377] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 982.201992][ T1377] ? do_syscall_64+0xe2/0xf80 [ 982.202019][ T1377] __vmalloc_node_range_noprof+0x132/0x1730 [ 982.202065][ T1377] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 982.202088][ T1377] ? __kasan_kmalloc+0x93/0xb0 [ 982.202111][ T1377] vmalloc_user_noprof+0xad/0xe0 [ 982.202132][ T1377] ? xskq_create+0xbf/0x170 [ 982.202154][ T1377] xskq_create+0xbf/0x170 [ 982.202178][ T1377] xsk_init_queue+0xad/0x110 [ 982.202201][ T1377] xsk_setsockopt+0x54c/0x990 [ 982.202223][ T1377] ? __pfx_xsk_setsockopt+0x10/0x10 [ 982.202244][ T1377] ? __pfx_aa_sk_perm+0x10/0x10 [ 982.202267][ T1377] ? aa_sock_opt_perm+0xff/0x1a0 [ 982.202291][ T1377] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 982.202317][ T1377] ? __pfx_xsk_setsockopt+0x10/0x10 [ 982.202339][ T1377] do_sock_setsockopt+0x17c/0x1b0 [ 982.202366][ T1377] __x64_sys_setsockopt+0x13d/0x1b0 [ 982.202394][ T1377] do_syscall_64+0xe2/0xf80 [ 982.202418][ T1377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.202435][ T1377] ? trace_irq_disable+0x37/0x100 [ 982.202452][ T1377] ? clear_bhb_loop+0x60/0xb0 [ 982.202474][ T1377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.202492][ T1377] RIP: 0033:0x7ff7fd79aeb9 [ 982.202509][ T1377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.202525][ T1377] RSP: 002b:00007ff7fe697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 982.202544][ T1377] RAX: ffffffffffffffda RBX: 00007ff7fda15fa0 RCX: 00007ff7fd79aeb9 [ 982.202557][ T1377] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 982.202567][ T1377] RBP: 00007ff7fd808c1f R08: 0000000000000004 R09: 0000000000000000 [ 982.202578][ T1377] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.202590][ T1377] R13: 00007ff7fda16038 R14: 00007ff7fda15fa0 R15: 00007fff5cef1518 [ 982.202617][ T1377] [ 982.202730][ T1377] Mem-Info: [ 982.501609][ T1377] active_anon:7987 inactive_anon:134 isolated_anon:0 [ 982.501609][ T1377] active_file:3055 inactive_file:40693 isolated_file:0 [ 982.501609][ T1377] unevictable:768 dirty:197 writeback:0 [ 982.501609][ T1377] slab_reclaimable:13462 slab_unreclaimable:178234 [ 982.501609][ T1377] mapped:29875 shmem:1501 pagetables:1405 [ 982.501609][ T1377] sec_pagetables:0 bounce:0 [ 982.501609][ T1377] kernel_misc_reclaimable:0 [ 982.501609][ T1377] free:1225446 free_pcp:16627 free_cma:0 [ 982.548352][ T1377] Node 0 active_anon:31948kB inactive_anon:536kB active_file:12220kB inactive_file:162572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119500kB dirty:788kB writeback:0kB shmem:4468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18928kB pagetables:5376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 982.599821][ T1380] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 982.634813][ T1377] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 982.704171][ T1377] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 982.782536][ T1377] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 982.809986][ T1377] Node 0 DMA32 free:988708kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31848kB inactive_anon:536kB active_file:12220kB inactive_file:162572kB unevictable:1536kB writepending:788kB zspages:0kB present:3129332kB managed:2554036kB mlocked:0kB bounce:0kB free_pcp:49800kB local_pcp:17532kB free_cma:0kB [ 982.851184][ T1377] lowmem_reserve[]: 0 0 1 1 1 [ 982.857645][ T1377] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 982.888636][ T1377] lowmem_reserve[]: 0 0 0 0 0 [ 982.893583][ T1377] Node 1 Normal free:3897780kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17384kB local_pcp:9188kB free_cma:0kB [ 982.981230][ T1377] lowmem_reserve[]: 0 0 0 0 0 [ 983.086600][ T1377] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 983.120850][ T1377] Node 0 DMA32: 10217*4kB (UME) 7026*8kB (U) 3667*16kB (UM) 540*32kB (UME) 146*64kB (UME) 162*128kB (UME) 414*256kB (UM) 311*512kB (UM) 175*1024kB (UME) 61*2048kB (U) 53*4096kB (UM) = 989540kB [ 983.140622][ T1377] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 983.154699][ T1377] Node 1 Normal: 173*4kB (UE) 52*8kB (UME) 42*16kB (UME) 136*32kB (UME) 53*64kB (UME) 11*128kB (UME) 5*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3897780kB [ 983.173328][ T1377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.198239][ T1377] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 983.242762][ T1377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.252877][ T1377] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 983.262397][ T1377] 45245 total pagecache pages [ 983.267452][ T1377] 0 pages in swap cache [ 983.271697][ T1377] Free swap = 124996kB [ 983.276697][ T1377] Total swap = 124996kB [ 983.281081][ T1377] 2097051 pages RAM [ 983.284960][ T1377] 0 pages HighMem/MovableOnly [ 983.290026][ T1377] 426644 pages reserved [ 983.294397][ T1377] 0 pages cma reserved [ 984.239226][ T1468] team0: Device vlan0 is already an upper device of the team interface [ 985.902738][ T1392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 986.182866][ T1486] __nla_validate_parse: 3 callbacks suppressed [ 986.182890][ T1486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7540'. [ 986.289701][ T1486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7540'. [ 986.331424][ T1486] 8021q: VLANs not supported on 61ªX¹¦À [ 986.366817][ T1483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 987.093847][ T1524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7550'. [ 987.199500][ T1529] netlink: 'syz.1.7552': attribute type 1 has an invalid length. [ 987.213234][ T1529] netlink: 'syz.1.7552': attribute type 1 has an invalid length. [ 987.411005][ T1535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7554'. [ 987.532643][ T1542] netlink: 'syz.0.7557': attribute type 15 has an invalid length. [ 988.036806][ T79] bridge_slave_1: left allmulticast mode [ 988.042658][ T79] bridge_slave_1: left promiscuous mode [ 988.049260][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.060316][ T79] veth3: left allmulticast mode [ 988.065215][ T79] veth3: left promiscuous mode [ 988.072602][ T79] bridge1: port 2(veth3) entered disabled state [ 988.081501][ T79] ip6gretap1: left allmulticast mode [ 988.087742][ T79] ip6gretap1: left promiscuous mode [ 988.093185][ T79] bridge1: port 1(ip6gretap1) entered disabled state [ 988.105282][ T79] veth7: left allmulticast mode [ 988.111506][ T79] veth7: left promiscuous mode [ 988.118099][ T79] bridge2: port 3(veth7) entered disabled state [ 988.127297][ T79] veth0_to_bond: left allmulticast mode [ 988.132881][ T79] veth0_to_bond: left promiscuous mode [ 988.140069][ T79] bridge2: port 2(veth0_to_bond) entered disabled state [ 988.149623][ T79] veth5: left allmulticast mode [ 988.154509][ T79] veth5: left promiscuous mode [ 988.160409][ T79] bridge2: port 1(veth5) entered disabled state [ 988.344642][ T79] bond8 (unregistering): (slave erspan1): Releasing active interface [ 988.382524][ T79] bond14 (unregistering): (slave gretap1): Releasing active interface [ 988.650382][ T79] bond12 (unregistering): (slave bridge5): Releasing active interface [ 988.697442][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.708990][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.720133][ T79] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 988.731708][ T79] bond0 (unregistering): Released all slaves [ 988.743050][ T79] bond1 (unregistering): Released all slaves [ 988.763173][ T79] bond2 (unregistering): Released all slaves [ 988.778043][ T79] bond3 (unregistering): Released all slaves [ 988.797540][ T79] bond4 (unregistering): Released all slaves [ 988.812837][ T79] bond5 (unregistering): Released all slaves [ 988.828868][ T79] bond6 (unregistering): Released all slaves [ 988.847274][ T79] bond7 (unregistering): Released all slaves [ 988.861875][ T79] bond8 (unregistering): Released all slaves [ 988.879561][ T79] bond9 (unregistering): Released all slaves [ 988.894387][ T79] bond10 (unregistering): Released all slaves [ 988.911265][ T79] bond11 (unregistering): Released all slaves [ 988.925582][ T79] bond12 (unregistering): Released all slaves [ 988.947016][ T79] bond13 (unregistering): Released all slaves [ 988.962551][ T79] bond14 (unregistering): Released all slaves [ 988.981549][ T79] bond15 (unregistering): (slave wireguard0): Releasing backup interface [ 988.991093][ T79] wireguard0: left promiscuous mode [ 989.001341][ T79] bond15 (unregistering): Released all slaves [ 989.244111][ T79] tipc: Disabling bearer [ 989.250506][ T79] tipc: Left network mode [ 989.433436][ T1502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 989.443839][ T1515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7544'. [ 989.652372][ T1550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7559'. [ 989.760815][ T1562] siw: device registration error -23 [ 989.936892][ T1561] m1Ie5èÿá: entered promiscuous mode [ 990.026057][ T1557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7559'. [ 990.176774][ T79] hsr_slave_0: left promiscuous mode [ 990.179860][ T1584] FAULT_INJECTION: forcing a failure. [ 990.179860][ T1584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.200492][ T79] hsr_slave_1: left promiscuous mode [ 990.207112][ T1584] CPU: 0 UID: 0 PID: 1584 Comm: syz.4.7567 Not tainted syzkaller #0 PREEMPT(full) [ 990.207139][ T1584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 990.207153][ T1584] Call Trace: [ 990.207161][ T1584] [ 990.207168][ T1584] dump_stack_lvl+0xe8/0x150 [ 990.207197][ T1584] should_fail_ex+0x412/0x560 [ 990.207228][ T1584] _copy_from_user+0x2d/0xb0 [ 990.207262][ T1584] __sys_bpf+0x229/0x920 [ 990.207288][ T1584] ? __pfx___sys_bpf+0x10/0x10 [ 990.207326][ T1584] ? ksys_write+0x242/0x270 [ 990.207362][ T1584] ? __pfx_ksys_write+0x10/0x10 [ 990.207409][ T1584] __x64_sys_bpf+0x7c/0x90 [ 990.207442][ T1584] do_syscall_64+0xe2/0xf80 [ 990.207473][ T1584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.207494][ T1584] ? trace_irq_disable+0x37/0x100 [ 990.207514][ T1584] ? clear_bhb_loop+0x60/0xb0 [ 990.207540][ T1584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.207561][ T1584] RIP: 0033:0x7f96ca19aeb9 [ 990.207579][ T1584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.207597][ T1584] RSP: 002b:00007f96cafb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 990.207620][ T1584] RAX: ffffffffffffffda RBX: 00007f96ca415fa0 RCX: 00007f96ca19aeb9 [ 990.207636][ T1584] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 990.207655][ T1584] RBP: 00007f96cafb9090 R08: 0000000000000000 R09: 0000000000000000 [ 990.207669][ T1584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.207681][ T1584] R13: 00007f96ca416038 R14: 00007f96ca415fa0 R15: 00007ffcf5aec1f8 [ 990.207715][ T1584] [ 990.207756][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.380162][ T1590] xt_TPROXY: Can be used only with -p tcp or -p udp [ 990.399989][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.423497][ T79] pim6reg (unregistering): left allmulticast mode [ 990.870267][ T1595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7569'. [ 992.020472][ T1583] tipc: Enabled bearer , priority 0 [ 992.186249][ T1583] tipc: Disabling bearer [ 992.215081][ T1590] lo speed is unknown, defaulting to 1000 [ 992.520710][ T1621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7573'. [ 992.698656][ T1626] tipc: Enabling of bearer rejected, failed to enable media [ 992.708755][ T1626] netlink: 'syz.1.7579': attribute type 5 has an invalid length. [ 992.783763][ T1626] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7579'. [ 992.806885][ T1626] 0ªX¹¦À: renamed from 61ªX¹¦À [ 992.825404][ T1626] 0ªX¹¦À: entered allmulticast mode [ 992.848335][ T1626] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 993.098902][ T1635] netlink: 'syz.1.7580': attribute type 10 has an invalid length. [ 993.165267][ T1635] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 993.205175][ T79] IPVS: stop unused estimator thread 0... [ 993.279782][ T1635] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 993.305059][ T1638] netlink: 'syz.0.7581': attribute type 1 has an invalid length. [ 993.335890][ T1638] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7581'. [ 993.369339][ T1640] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7582'. [ 993.403062][ T1640] netlink: 'syz.3.7582': attribute type 1 has an invalid length. [ 993.489124][ T1642] lo speed is unknown, defaulting to 1000 [ 993.626124][ T1654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7585'. [ 993.687688][ T1655] gre0: entered promiscuous mode [ 993.707082][ T1655] gre0: entered allmulticast mode [ 993.716252][ T1659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7587'. [ 993.911487][ T1667] netlink: 'syz.4.7587': attribute type 2 has an invalid length. [ 993.934202][ T1667] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7587'. [ 994.213492][ T1674] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.7592'. [ 994.290087][ T1676] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7593'. [ 994.313459][ T1676] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7593'. [ 994.497622][ T1680] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.661083][ T1680] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.784286][ T1680] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.893189][ T1680] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.008708][T27064] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.043150][ T79] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.069811][T27064] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.093896][T27064] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.108184][ T1707] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 995.112145][ T1676] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 995.144792][ T1707] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 995.166977][ T1707] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 995.298512][ T1718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 995.370839][ T1718] syzkaller0: entered promiscuous mode [ 995.376899][ T1718] syzkaller0: entered allmulticast mode [ 995.534028][ T1736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 995.819056][ T1756] IPVS: set_ctl: invalid protocol: 72 255.255.255.255:20001 [ 995.963698][ T1762] sch_fq: defrate 4294967293 ignored. [ 996.252713][ T1779] lo speed is unknown, defaulting to 1000 [ 996.347116][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 996.555914][ T1792] syz_tun: entered allmulticast mode [ 996.587147][ T30] audit: type=1800 audit(1770505788.613:19): pid=1805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7633" name="5" dev="tmpfs" ino=1587 res=0 errno=0 [ 996.807072][ T1810] netlink: 'syz.3.7634': attribute type 16 has an invalid length. [ 996.830217][ T1810] netlink: 'syz.3.7634': attribute type 3 has an invalid length. [ 996.927093][ T1815] xt_hashlimit: max too large, truncated to 1048576 [ 996.947179][ T1815] xt_hashlimit: overflow, try lower: 13/0 [ 997.038419][ T1815] netlink: 'syz.2.7637': attribute type 9 has an invalid length. [ 997.764318][ T1840] netlink: 'syz.1.7644': attribute type 9 has an invalid length. [ 997.772578][ T1840] netlink: 'syz.1.7644': attribute type 6 has an invalid length. [ 997.783612][ T1842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 997.804246][ T1842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 998.112040][ T1858] netlink: 'syz.1.7649': attribute type 1 has an invalid length. [ 998.130161][ T1858] __nla_validate_parse: 12 callbacks suppressed [ 998.130184][ T1858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7649'. [ 998.287866][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 998.397343][ T1869] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 999.514599][ T1891] xt_CONNSECMARK: invalid mode: 0 [ 999.718923][ T1894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7659'. [ 999.737015][ T1894] netlink: 'syz.1.7659': attribute type 30 has an invalid length. [ 999.784137][T15582] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.795476][T15582] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.831618][T15582] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.860895][T15582] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.949010][ T1898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7659'. [ 999.991844][ T1895] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.170988][ T1895] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.285316][ T1895] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.402321][ T1895] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.602091][ T79] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.641053][T27063] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.649680][ T1910] lo: Caught tx_queue_len zero misconfig [ 1000.728435][ T79] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.798576][ T1914] tipc: Enabled bearer , priority 0 [ 1000.805572][T15582] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.817048][ T1914] syzkaller0: entered promiscuous mode [ 1000.822612][ T1914] syzkaller0: entered allmulticast mode [ 1001.429923][ T1922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7667'. [ 1001.819150][ T1926] lo speed is unknown, defaulting to 1000 [ 1001.930637][ T1930] lo speed is unknown, defaulting to 1000 [ 1002.338219][ T1936] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7670'. [ 1003.200291][ T1960] syzkaller0: entered allmulticast mode [ 1003.468145][T27064] batadv0: left allmulticast mode [ 1003.473397][T27064] batadv0: left promiscuous mode [ 1003.479180][T27064] bridge0: port 3(batadv0) entered disabled state [ 1003.527240][T27064] bridge_slave_1: left allmulticast mode [ 1003.532960][T27064] bridge_slave_1: left promiscuous mode [ 1003.545669][T27064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.578994][T27064] bridge_slave_0: left promiscuous mode [ 1003.584869][T27064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.025947][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 1004.034056][ C1] lec:lec_tx_timeout: lec0 [ 1004.045306][T27064] dvmrp6 (unregistering): left allmulticast mode [ 1004.061917][T27064] dvmrp1 (unregistering): left allmulticast mode [ 1004.310756][T27064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.322296][T27064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.342028][T27064] bond0 (unregistering): Released all slaves [ 1004.368756][T27064] bond1 (unregistering): Released all slaves [ 1004.387798][T27064] bond2 (unregistering): Released all slaves [ 1004.424063][T27064] bond3 (unregistering): Released all slaves [ 1004.458869][T27064] bond4 (unregistering): Released all slaves [ 1004.484458][T27064] bond5 (unregistering): (slave wireguard0): Releasing backup interface [ 1004.497020][T27064] wireguard0: left promiscuous mode [ 1004.504971][T27064] bond5 (unregistering): (slave wireguard1): Releasing backup interface [ 1004.534245][T27064] bond5 (unregistering): Released all slaves [ 1004.567909][T27064] bond6 (unregistering): Released all slaves [ 1004.592005][T27064] bond7 (unregistering): Released all slaves [ 1004.641441][ T1912] tipc: Resetting bearer [ 1004.697700][ T1912] tipc: Disabling bearer [ 1004.803029][T27064] : left promiscuous mode [ 1004.937180][T27064] l24): left promiscuous mode [ 1005.033892][T27064] tipc: Left network mode [ 1005.051681][ T2003] C: renamed from team_slave_0 [ 1005.071708][ T2003] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7687'. [ 1005.076662][T27064] IPVS: stopping backup sync thread 20897 ... [ 1005.105303][ T2005] netlink: 165 bytes leftover after parsing attributes in process `syz.3.7686'. [ 1005.521150][T27064] hsr_slave_0: left promiscuous mode [ 1005.539634][T27064] hsr_slave_1: left promiscuous mode [ 1005.570542][T27064] veth1_to_hsr: left allmulticast mode [ 1005.585782][T27064] veth1_to_hsr: left promiscuous mode [ 1005.664926][ T2023] netlink: 'syz.2.7695': attribute type 13 has an invalid length. [ 1005.684469][ T2023] netlink: 'syz.2.7695': attribute type 17 has an invalid length. [ 1005.699488][T27064] pim6reg (unregistering): left allmulticast mode [ 1006.449548][ T2059] xt_hashlimit: size too large, truncated to 1048576 [ 1006.497423][T27064] team0 (unregistering): Port device team_slave_1 removed [ 1006.569781][T27064] team0 (unregistering): Port device team_slave_0 removed [ 1007.012662][ T2023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.025427][ T2023] 1ªX¹¦À: left allmulticast mode [ 1007.032151][ T2023] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1007.081373][ T2028] syzkaller0: entered promiscuous mode [ 1007.098428][ T2028] syzkaller0: entered allmulticast mode [ 1007.242477][ T2075] netlink: 'syz.2.7700': attribute type 1 has an invalid length. [ 1007.295569][ T2078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7700'. [ 1007.622769][ T2089] xt_connbytes: Forcing CT accounting to be enabled [ 1007.679632][ T2089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7702'. [ 1007.715972][ T2089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7702'. [ 1007.949569][ T2101] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7707'. [ 1007.969950][ T2096] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1008.402524][T27064] IPVS: stop unused estimator thread 0... [ 1008.464206][ T2112] lo speed is unknown, defaulting to 1000 [ 1008.722620][ T2124] sctp: [Deprecated]: syz.1.7712 (pid 2124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1008.722620][ T2124] Use struct sctp_sack_info instead [ 1009.759104][ T2154] syzkaller0: entered promiscuous mode [ 1009.764959][ T2154] syzkaller0: entered allmulticast mode [ 1010.144258][ T2178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7720'. [ 1010.271241][ T2183] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1010.286679][T20274] IPVS: starting estimator thread 0... [ 1010.367256][ T2192] vlan0: entered allmulticast mode [ 1010.372459][ T2192] team0: entered allmulticast mode [ 1010.378156][ T2185] IPVS: using max 28 ests per chain, 67200 per kthread [ 1010.385593][ T2192] team_slave_0: entered allmulticast mode [ 1010.394659][ T2192] team_slave_1: entered allmulticast mode [ 1010.415459][ T2193] raw_sendmsg: syz.3.7725 forgot to set AF_INET. Fix it! [ 1010.434337][ T2192] @0Ù†m!]¨¨†D: entered allmulticast mode [ 1010.452279][ T2192] geneve0: entered allmulticast mode [ 1010.669557][ T2162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1010.743953][ T2206] xt_hashlimit: size too large, truncated to 1048576 [ 1012.824409][ T2164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1013.037718][ T2243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7734'. [ 1013.150108][ T2239] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.309227][ T2266] netlink: 'syz.2.7736': attribute type 83 has an invalid length. [ 1013.435600][ T2239] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.503530][ T2273] netlink: 'syz.1.7737': attribute type 1 has an invalid length. [ 1013.580198][ T2239] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.651864][ T2282] xt_hashlimit: size too large, truncated to 1048576 [ 1013.669903][ T2281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7737'. [ 1013.715008][ T2275] bond5: (slave geneve3): making interface the new active one [ 1013.747014][ T2275] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1013.875640][ T2239] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.933629][ T2281] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1013.984613][ T2281] bond5 (unregistering): Released all slaves [ 1014.004738][ T2291] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.7740'. [ 1014.053939][ T2291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7740'. [ 1014.086563][ T2291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7740'. [ 1014.134311][ T2291] netlink: 'syz.3.7740': attribute type 3 has an invalid length. [ 1014.143447][T15603] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.180574][T15603] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.298011][T15603] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.308970][ T2295] sctp: [Deprecated]: syz.0.7741 (pid 2295) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1014.308970][ T2295] Use struct sctp_sack_info instead [ 1014.335931][T15603] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.350988][ T2295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7741'. [ 1014.383719][ T2305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7744'. [ 1014.680232][ T2303] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1014.734655][ T2321] xt_hashlimit: size too large, truncated to 1048576 [ 1015.039537][ T2338] netlink: 'syz.1.7753': attribute type 1 has an invalid length. [ 1015.263176][ T2354] netlink: 'syz.0.7755': attribute type 12 has an invalid length. [ 1015.770384][ T2376] xt_hashlimit: size too large, truncated to 1048576 [ 1015.887268][ T2382] xt_l2tp: unknown flags: 51 [ 1015.956392][ T2384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7769'. [ 1016.032023][ T2386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7769'. [ 1016.066919][ T2386] openvswitch: netlink: Key 18 has unexpected len 72 expected 2 [ 1016.209096][ T2393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1016.293968][ T2393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1016.353680][ T2393] xt_CT: No such helper "pptp" [ 1016.361069][ T2391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1016.441175][ T2398] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1017.003841][ T2435] xt_hashlimit: size too large, truncated to 1048576 [ 1017.011072][ T2434] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7780'. [ 1017.406611][ T2455] netlink: 'syz.2.7787': attribute type 62 has an invalid length. [ 1017.450157][ T2468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7790'. [ 1017.460842][ T2467] netlink: 'syz.4.7790': attribute type 1 has an invalid length. [ 1017.492581][ T2467] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1017.849040][ T2505] block nbd7: Unsupported socket: should be TCP or UNIX. [ 1018.021627][ T2515] xt_hashlimit: size too large, truncated to 1048576 [ 1018.029853][T15582] wlan1: Trigger new scan to find an IBSS to join [ 1018.199232][ T2511] netlink: 'syz.0.7799': attribute type 1 has an invalid length. [ 1018.207206][ T2511] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7799'. [ 1018.271027][ T2521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7802'. [ 1018.282130][ T2521] netlink: 348 bytes leftover after parsing attributes in process `syz.3.7802'. [ 1018.315007][ T2521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7802'. [ 1018.334941][ T2521] netlink: 348 bytes leftover after parsing attributes in process `syz.3.7802'. [ 1018.366024][ T2521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7802'. [ 1019.213592][ T2560] xt_hashlimit: size too large, truncated to 1048576 [ 1019.416520][ T2568] bridge_slave_0 (unregistering): left allmulticast mode [ 1019.433925][ T2568] bridge_slave_0 (unregistering): left promiscuous mode [ 1019.445223][ T2568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.701377][ T2576] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1020.341508][ T2606] tipc: Enabled bearer , priority 0 [ 1020.433807][ T2606] syzkaller0: entered promiscuous mode [ 1020.440118][ T2606] syzkaller0: entered allmulticast mode [ 1020.446797][ T2606] tipc: Resetting bearer [ 1020.463803][ T2602] tipc: Resetting bearer [ 1021.292889][ T2634] __nla_validate_parse: 8 callbacks suppressed [ 1021.292910][ T2634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7823'. [ 1021.404490][ T2642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7831'. [ 1021.489138][ T2644] netlink: 'syz.2.7832': attribute type 83 has an invalid length. [ 1021.962992][ T5828] block nbd7: Receive control failed (result -32) [ 1022.987776][ T79] wlan1: Trigger new scan to find an IBSS to join [ 1023.008212][ T2602] tipc: Disabling bearer [ 1023.482712][ T2679] tipc: Enabling of bearer rejected, failed to enable media [ 1023.516291][ T2675] netlink: 'syz.0.7840': attribute type 16 has an invalid length. [ 1023.524324][ T2675] netlink: 'syz.0.7840': attribute type 17 has an invalid length. [ 1023.580688][ T2687] netlink: 'syz.4.7844': attribute type 1 has an invalid length. [ 1023.589233][ T2687] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7844'. [ 1023.629063][ T2675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.643316][ T2675] 0ªX¹¦À: left allmulticast mode [ 1023.650579][ T2675] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1023.723484][ T2693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7846'. [ 1023.815490][ T2690] lo speed is unknown, defaulting to 1000 [ 1023.860278][ T2696] vxlan0: entered promiscuous mode [ 1023.865587][ T2696] vxlan0: entered allmulticast mode [ 1023.875250][ T79] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.886388][ T79] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.901315][ T2696] vti0: entered promiscuous mode [ 1023.906864][ T2696] vti0: entered allmulticast mode [ 1023.919509][ T79] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.928383][ T79] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.938784][T27063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.048424][ T2707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7850'. [ 1024.198920][ T2704] syzkaller1: entered promiscuous mode [ 1024.204464][ T2704] syzkaller1: entered allmulticast mode [ 1024.237216][ T2709] lo speed is unknown, defaulting to 1000 [ 1024.250794][ T2713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7852'. [ 1024.975130][ T2753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7859'. [ 1025.013160][ T2756] 8021q: VLANs not supported on vcan0 [ 1025.359349][ T2779] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1025.380234][ T2780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7866'. [ 1025.460227][ T79] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.477064][ T79] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.540629][ T79] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.566721][ T79] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.728314][ T2789] netlink: 'syz.4.7867': attribute type 11 has an invalid length. [ 1025.761949][ T2795] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1025.984502][ T2822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7873'. [ 1026.050684][ T2823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7873'. [ 1026.142604][ T2828] netlink: 'syz.1.7874': attribute type 1 has an invalid length. [ 1026.161966][ T2828] ipvlan2: entered promiscuous mode [ 1026.168751][ T2828] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1026.511156][ T2844] lo speed is unknown, defaulting to 1000 [ 1026.812896][ T2876] netlink: 'syz.3.7881': attribute type 3 has an invalid length. [ 1027.553448][ T2907] lo speed is unknown, defaulting to 1000 [ 1027.699911][ T2918] bridge_slave_0: entered promiscuous mode [ 1027.717275][ T2918] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1027.888190][ T2923] tipc: Enabled bearer , priority 0 [ 1027.896168][ T2923] syzkaller0: entered promiscuous mode [ 1027.901696][ T2923] syzkaller0: entered allmulticast mode [ 1028.044472][ T2933] tipc: Resetting bearer [ 1028.140190][ T2920] syzkaller1: entered promiscuous mode [ 1028.155075][ T2920] syzkaller1: entered allmulticast mode [ 1028.295139][ T2944] xt_hashlimit: size too large, truncated to 1048576 [ 1028.302998][ T2921] tipc: Resetting bearer [ 1028.367869][ T2948] FAULT_INJECTION: forcing a failure. [ 1028.367869][ T2948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.399404][ T2921] tipc: Disabling bearer [ 1028.462038][ T2951] xt_hashlimit: size too large, truncated to 1048576 [ 1028.476203][ T2948] CPU: 0 UID: 0 PID: 2948 Comm: syz.4.7895 Not tainted syzkaller #0 PREEMPT(full) [ 1028.476234][ T2948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1028.476249][ T2948] Call Trace: [ 1028.476256][ T2948] [ 1028.476271][ T2948] dump_stack_lvl+0xe8/0x150 [ 1028.476305][ T2948] should_fail_ex+0x412/0x560 [ 1028.476338][ T2948] _copy_from_user+0x2d/0xb0 [ 1028.476370][ T2948] do_ipv6_setsockopt+0x264/0x31c0 [ 1028.476395][ T2948] ? get_pid_task+0x20/0x1f0 [ 1028.476422][ T2948] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1028.476445][ T2948] ? get_pid_task+0x20/0x1f0 [ 1028.476463][ T2948] ? get_pid_task+0x20/0x1f0 [ 1028.476480][ T2948] ? get_pid_task+0x20/0x1f0 [ 1028.476508][ T2948] ? __lock_acquire+0x6b5/0x2cf0 [ 1028.476544][ T2948] ? aa_sk_perm+0x15a/0x960 [ 1028.476567][ T2948] ? aa_sk_perm+0x82d/0x960 [ 1028.476587][ T2948] ? __fget_files+0x2a/0x420 [ 1028.476610][ T2948] ? __pfx_aa_sk_perm+0x10/0x10 [ 1028.476631][ T2948] ? __fget_files+0x2a/0x420 [ 1028.476648][ T2948] ? aa_sock_opt_perm+0xff/0x1a0 [ 1028.476672][ T2948] ipv6_setsockopt+0x59/0x170 [ 1028.476695][ T2948] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1028.476718][ T2948] do_sock_setsockopt+0x17c/0x1b0 [ 1028.476745][ T2948] __x64_sys_setsockopt+0x13d/0x1b0 [ 1028.476773][ T2948] do_syscall_64+0xe2/0xf80 [ 1028.476797][ T2948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.476814][ T2948] ? clear_bhb_loop+0x60/0xb0 [ 1028.476835][ T2948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.476852][ T2948] RIP: 0033:0x7f96ca19aeb9 [ 1028.476868][ T2948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.476883][ T2948] RSP: 002b:00007f96caf98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1028.476902][ T2948] RAX: ffffffffffffffda RBX: 00007f96ca416090 RCX: 00007f96ca19aeb9 [ 1028.476914][ T2948] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 1028.476924][ T2948] RBP: 00007f96caf98090 R08: 0000000000000560 R09: 0000000000000000 [ 1028.476935][ T2948] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 1028.476948][ T2948] R13: 00007f96ca416128 R14: 00007f96ca416090 R15: 00007ffcf5aec1f8 [ 1028.476975][ T2948] [ 1029.060965][ T2969] netlink: 'syz.2.7898': attribute type 4 has an invalid length. [ 1029.115102][ T2971] netlink: 'syz.2.7898': attribute type 4 has an invalid length. [ 1029.163783][T21256] lo speed is unknown, defaulting to 1000 [ 1029.170086][T21256] syz2: Port: 1 Link DOWN [ 1029.182758][ T2969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1029.222765][ T6109] lo speed is unknown, defaulting to 1000 [ 1029.238510][ T2971] __nla_validate_parse: 9 callbacks suppressed [ 1029.238529][ T2971] netlink: 165 bytes leftover after parsing attributes in process `syz.2.7898'. [ 1029.266772][ T6109] syz2: Port: 1 Link ACTIVE [ 1029.380814][ T2978] netlink: 'syz.0.7901': attribute type 1 has an invalid length. [ 1029.390574][ T2978] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7901'. [ 1029.609099][ T2986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7904'. [ 1029.703609][ T2986] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7904'. [ 1029.722301][ T2989] openvswitch: netlink: Key type 195 is out of range max 32 [ 1029.827618][ T2994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7907'. [ 1029.884232][ T2999] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.023283][ T2999] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.235070][ T2999] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.257392][ T3015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7913'. [ 1030.312927][ T3014] lo speed is unknown, defaulting to 1000 [ 1030.412422][ T2999] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.543952][ T3023] netlink: 'syz.3.7915': attribute type 9 has an invalid length. [ 1030.562721][ T3023] netlink: 'syz.3.7915': attribute type 11 has an invalid length. [ 1030.579540][ T3023] netlink: 'syz.3.7915': attribute type 12 has an invalid length. [ 1030.588196][ T3023] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.7915'. [ 1030.599842][ T3023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7915'. [ 1030.732340][T15603] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.808494][ T3034] tipc: Started in network mode [ 1030.813777][ T3034] tipc: Node identity ea5fa8951d9a, cluster identity 4711 [ 1030.825026][ T3034] tipc: Enabled bearer , priority 0 [ 1030.867625][T27063] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.877555][ T3029] syzkaller0: entered promiscuous mode [ 1030.883216][ T3029] syzkaller0: entered allmulticast mode [ 1030.893579][ T3032] tipc: Resetting bearer [ 1030.937359][ T3032] tipc: Disabling bearer [ 1031.020076][T27063] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.069320][ T79] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.257879][ T3042] netlink: 'syz.1.7918': attribute type 1 has an invalid length. [ 1031.279585][ T3042] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7918'. [ 1031.379238][ T3045] ip6gretap2: entered promiscuous mode [ 1032.030269][ T7508] lec:lec_start_xmit: lec0:No lecd attached [ 1033.600452][ T3082] netlink: 'syz.0.7929': attribute type 1 has an invalid length. [ 1033.616403][ T3083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7930'. [ 1034.288166][ T3131] netlink: 'syz.2.7944': attribute type 1 has an invalid length. [ 1034.427300][ T3135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7945'. [ 1034.438729][ T3135] netlink: 'syz.4.7945': attribute type 8 has an invalid length. [ 1034.446621][ T3135] netlink: 'syz.4.7945': attribute type 9 has an invalid length. [ 1034.454427][ T3135] netlink: 'syz.4.7945': attribute type 10 has an invalid length. [ 1034.462889][ T3135] netlink: 'syz.4.7945': attribute type 11 has an invalid length. [ 1034.470842][ T3135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7945'. [ 1034.517095][ T3135] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1034.536281][ T3135] bond4 (unregistering): Released all slaves [ 1035.118764][ T3159] netlink: 'syz.2.7952': attribute type 31 has an invalid length. [ 1035.156550][ T3157] lo speed is unknown, defaulting to 1000 [ 1035.164560][ T3167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7950'. [ 1035.179155][ T3156] lo speed is unknown, defaulting to 1000 [ 1035.216272][ T3167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7950'. [ 1035.293994][ T3173] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 1036.101043][ T3208] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.111344][ T3208] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.175477][ T3208] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.185486][ T3208] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.265548][ T3208] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.292787][ T3208] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.343225][ T3208] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.354694][ T3208] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.505181][ T79] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.527720][ T79] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.547136][ T79] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.555402][ T79] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.581270][ T79] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.593704][ T79] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.615311][ T79] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.624240][ T79] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.639497][ T3225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7972'. [ 1036.661182][ T3225] ip6gretap0: entered promiscuous mode [ 1036.689161][ T3225] ip6gretap0: left promiscuous mode [ 1036.884719][ T3232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7976'. [ 1036.926824][ T3232] netlink: 19 bytes leftover after parsing attributes in process `syz.2.7976'. [ 1037.045757][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1037.053857][ C1] lec:lec_tx_timeout: lec0 [ 1037.322351][ T3240] vlan0: entered allmulticast mode [ 1037.336463][ T3245] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7979'. [ 1037.343149][ T3240] bond0: entered allmulticast mode [ 1037.367723][ T3240] bond_slave_0: entered allmulticast mode [ 1037.383834][ T3240] bond_slave_1: entered allmulticast mode [ 1037.402162][ T3240] mac80211_hwsim hwsim62 wlan1: entered allmulticast mode [ 1037.479494][ T3245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.491923][ T3245] bond_slave_0: left allmulticast mode [ 1037.500671][ T3245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.513600][ T3245] bond_slave_1: left allmulticast mode [ 1037.523580][ T3245] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1037.532905][ T3245] mac80211_hwsim hwsim62 wlan1: left allmulticast mode [ 1037.559065][ T3245] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 1037.572844][ T3245] bond0 (unregistering): Released all slaves [ 1037.813411][ T3254] lo speed is unknown, defaulting to 1000 [ 1038.272143][ T3269] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7987'. [ 1038.388939][ T3274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1038.464954][ T3274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1038.522805][ T3277] lo speed is unknown, defaulting to 1000 [ 1038.605016][ T3274] xt_CT: No such helper "pptp" [ 1038.614432][ T3272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1038.705330][ T3282] lo speed is unknown, defaulting to 1000 [ 1038.722644][ T3285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7990'. [ 1039.214778][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.240997][ T3303] bond0: entered allmulticast mode [ 1039.844766][ T3322] __nla_validate_parse: 1 callbacks suppressed [ 1039.844790][ T3322] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8001'. [ 1040.136386][ T3336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8006'. [ 1040.197079][ T3338] [ 1040.199481][ T3338] ====================================================== [ 1040.206532][ T3338] WARNING: possible circular locking dependency detected [ 1040.213590][ T3338] syzkaller #0 Not tainted [ 1040.218037][ T3338] ------------------------------------------------------ [ 1040.225107][ T3338] syz.0.8007/3338 is trying to acquire lock: [ 1040.230289][ T3336] syz_tun: left allmulticast mode [ 1040.231157][ T3338] ffffffff8fb281d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 1040.245413][ T3338] [ 1040.245413][ T3338] but task is already holding lock: [ 1040.252827][ T3338] ffff888141fc2270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1040.262141][ T3338] [ 1040.262141][ T3338] which lock already depends on the new lock. [ 1040.262141][ T3338] [ 1040.272574][ T3338] [ 1040.272574][ T3338] the existing dependency chain (in reverse order) is: [ 1040.281624][ T3338] [ 1040.281624][ T3338] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1040.289659][ T3338] _raw_spin_lock_bh+0x36/0x50 [ 1040.295062][ T3338] nr_rt_ioctl+0x215/0xf90 [ 1040.300034][ T3338] sock_do_ioctl+0x101/0x320 [ 1040.305172][ T3338] sock_ioctl+0x5c6/0x7f0 [ 1040.310041][ T3338] __se_sys_ioctl+0xfc/0x170 [ 1040.315182][ T3338] do_syscall_64+0xe2/0xf80 [ 1040.320241][ T3338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.326681][ T3338] [ 1040.326681][ T3338] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1040.334561][ T3338] _raw_spin_lock_bh+0x36/0x50 [ 1040.339875][ T3338] nr_rt_device_down+0xbe/0x860 [ 1040.345370][ T3338] nr_device_event+0x137/0x150 [ 1040.350678][ T3338] notifier_call_chain+0x19d/0x3a0 [ 1040.356338][ T3338] __dev_notify_flags+0x16d/0x310 [ 1040.361956][ T3338] netif_change_flags+0xe8/0x1a0 [ 1040.367478][ T3338] dev_change_flags+0x130/0x260 [ 1040.372885][ T3338] dev_ioctl+0x7b4/0x1150 [ 1040.377761][ T3338] sock_do_ioctl+0x23e/0x320 [ 1040.382933][ T3338] sock_ioctl+0x5c6/0x7f0 [ 1040.387807][ T3338] __se_sys_ioctl+0xfc/0x170 [ 1040.392949][ T3338] do_syscall_64+0xe2/0xf80 [ 1040.398000][ T3338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.404440][ T3338] [ 1040.404440][ T3338] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1040.412371][ T3338] __lock_acquire+0x15a5/0x2cf0 [ 1040.417773][ T3338] lock_acquire+0x106/0x330 [ 1040.422834][ T3338] _raw_spin_lock_bh+0x36/0x50 [ 1040.428144][ T3338] nr_rt_ioctl+0x40c/0xf90 [ 1040.433122][ T3338] sock_do_ioctl+0x101/0x320 [ 1040.438255][ T3338] sock_ioctl+0x5c6/0x7f0 [ 1040.443140][ T3338] __se_sys_ioctl+0xfc/0x170 [ 1040.448280][ T3338] do_syscall_64+0xe2/0xf80 [ 1040.453337][ T3338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.459779][ T3338] [ 1040.459779][ T3338] other info that might help us debug this: [ 1040.459779][ T3338] [ 1040.470030][ T3338] Chain exists of: [ 1040.470030][ T3338] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1040.470030][ T3338] [ 1040.483886][ T3338] Possible unsafe locking scenario: [ 1040.483886][ T3338] [ 1040.491356][ T3338] CPU0 CPU1 [ 1040.496753][ T3338] ---- ---- [ 1040.502145][ T3338] lock(&nr_node->node_lock); [ 1040.506937][ T3338] lock(nr_node_list_lock); [ 1040.514077][ T3338] lock(&nr_node->node_lock); [ 1040.521386][ T3338] lock(nr_neigh_list_lock); [ 1040.526090][ T3338] [ 1040.526090][ T3338] *** DEADLOCK *** [ 1040.526090][ T3338] [ 1040.534255][ T3338] 2 locks held by syz.0.8007/3338: [ 1040.539388][ T3338] #0: ffffffff8fb28238 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 1040.548925][ T3338] #1: ffff888141fc2270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1040.558640][ T3338] [ 1040.558640][ T3338] stack backtrace: [ 1040.564572][ T3338] CPU: 1 UID: 0 PID: 3338 Comm: syz.0.8007 Not tainted syzkaller #0 PREEMPT(full) [ 1040.564596][ T3338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1040.564609][ T3338] Call Trace: [ 1040.564618][ T3338] [ 1040.564628][ T3338] dump_stack_lvl+0xe8/0x150 [ 1040.564655][ T3338] print_circular_bug+0x2e1/0x300 [ 1040.564677][ T3338] check_noncircular+0x12e/0x150 [ 1040.564699][ T3338] __lock_acquire+0x15a5/0x2cf0 [ 1040.564734][ T3338] ? nr_rt_ioctl+0x40c/0xf90 [ 1040.564758][ T3338] lock_acquire+0x106/0x330 [ 1040.564781][ T3338] ? nr_rt_ioctl+0x40c/0xf90 [ 1040.564807][ T3338] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1040.564829][ T3338] ? nr_rt_ioctl+0x40c/0xf90 [ 1040.564853][ T3338] _raw_spin_lock_bh+0x36/0x50 [ 1040.564874][ T3338] ? nr_rt_ioctl+0x40c/0xf90 [ 1040.564899][ T3338] nr_rt_ioctl+0x40c/0xf90 [ 1040.564929][ T3338] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1040.564959][ T3338] ? apparmor_capable+0x137/0x1a0 [ 1040.564988][ T3338] ? capable+0x88/0xe0 [ 1040.565003][ T3338] ? nr_ioctl+0x1b1/0x3b0 [ 1040.565026][ T3338] sock_do_ioctl+0x101/0x320 [ 1040.565045][ T3338] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1040.565061][ T3338] ? do_futex+0x333/0x420 [ 1040.565092][ T3338] sock_ioctl+0x5c6/0x7f0 [ 1040.565109][ T3338] ? __pfx_sock_ioctl+0x10/0x10 [ 1040.565125][ T3338] ? __fget_files+0x2a/0x420 [ 1040.565150][ T3338] ? __fget_files+0x3a0/0x420 [ 1040.565167][ T3338] ? __fget_files+0x2a/0x420 [ 1040.565187][ T3338] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1040.565208][ T3338] ? __pfx_sock_ioctl+0x10/0x10 [ 1040.565223][ T3338] __se_sys_ioctl+0xfc/0x170 [ 1040.565249][ T3338] do_syscall_64+0xe2/0xf80 [ 1040.565272][ T3338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.565289][ T3338] ? trace_irq_disable+0x37/0x100 [ 1040.565306][ T3338] ? clear_bhb_loop+0x60/0xb0 [ 1040.565325][ T3338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.565341][ T3338] RIP: 0033:0x7f7e8759aeb9 [ 1040.565358][ T3338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.565374][ T3338] RSP: 002b:00007f7e88506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1040.565392][ T3338] RAX: ffffffffffffffda RBX: 00007f7e87815fa0 RCX: 00007f7e8759aeb9 [ 1040.565405][ T3338] RDX: 0000200000000100 RSI: 00000000000089e2 RDI: 000000000000000d [ 1040.565417][ T3338] RBP: 00007f7e87608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1040.565428][ T3338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.565439][ T3338] R13: 00007f7e87816038 R14: 00007f7e87815fa0 R15: 00007ffc90f85b88 [ 1040.565461][ T3338]